./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1925476046 <...> x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6899] ioctl(4, LOOP_SET_FD, 3 [pid 6892] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6892] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6892] <... futex resumed>) = 0 [pid 6892] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6892] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6892] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6902], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6902 [pid 6892] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6892] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6902 attached [pid 6902] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6899] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(3, [pid 6902] creat("./file1", 000 [pid 5076] close(4 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./101/bus" [ 93.032182][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.043459][ T6893] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.054100][ T6893] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.062849][ T6893] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.075740][ T6899] loop0: detected capacity change from 0 to 1024 [pid 5077] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 6901] <... write resumed>) = 524288 [pid 6901] munmap(0x7fee02dd3000, 524288) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6901] ioctl(4, LOOP_SET_FD, 3 [pid 6899] close(3 [pid 5077] lstat("./100/binderfs", [pid 5076] getdents64(3, [pid 6899] <... close resumed>) = 0 [pid 6901] <... ioctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6901] close(3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6901] <... close resumed>) = 0 [pid 6899] mkdir("./bus", 0777 [pid 5077] unlink("./100/binderfs" [pid 5076] close(3 [pid 6901] mkdir("./bus", 0777 [pid 6899] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] rmdir("./101" [pid 6901] <... mkdir resumed>) = 0 [pid 6901] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6899] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 6902] <... creat resumed>) = 5 [pid 6902] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./102", 0777 [pid 6902] <... futex resumed>) = 1 [pid 6892] <... futex resumed>) = 0 [pid 6902] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... mkdir resumed>) = 0 [pid 6901] <... mount resumed>) = 0 [pid 6893] <... write resumed>) = 57344 [pid 6893] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6893] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6892] exit_group(0 [pid 6902] <... futex resumed>) = ? [pid 6892] <... exit_group resumed>) = ? [pid 6902] +++ exited with 0 +++ [pid 6893] <... futex resumed>) = ? [pid 6893] +++ exited with 0 +++ [pid 6892] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6901] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] unlink("./98/binderfs" [pid 6901] <... openat resumed>) = 3 [pid 6901] chdir("./bus" [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6901] <... chdir resumed>) = 0 [pid 6901] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6901] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6901] close(4) = 0 [pid 6899] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 6901] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 6901] <... futex resumed>) = 1 [pid 6899] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6901] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6899] chdir("./bus" [pid 6900] <... futex resumed>) = 0 [pid 6899] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 6903 [pid 6900] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] ioctl(4, LOOP_CLR_FD [pid 6901] <... futex resumed>) = 0 [pid 6900] <... futex resumed>) = 1 [pid 6899] <... ioctl resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 6901] creat("./bus", 000 [pid 6900] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] close(4 [pid 5077] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6901] <... creat resumed>) = 4 [pid 6899] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] lstat("./100/bus", [pid 6901] <... futex resumed>) = 1 [pid 6900] <... futex resumed>) = 0 [pid 6899] <... futex resumed>) = 1 [pid 6897] <... futex resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6901] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6900] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6900] <... futex resumed>) = 0 [pid 6899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6897] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 93.084534][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 93.087355][ T6901] loop5: detected capacity change from 0 to 1024 [ 93.092039][ T6893] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.106820][ T6893] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.116772][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.127975][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 6901] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6900] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6899] creat("./bus", 000 [pid 6897] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6903 attached [pid 6899] <... creat resumed>) = 4 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6903] set_robust_list(0x555556b055e0, 24 [pid 6899] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, [pid 5075] lstat("./99/bus", [pid 6903] <... set_robust_list resumed>) = 0 [pid 6899] <... futex resumed>) = 1 [pid 6897] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6903] chdir("./102" [pid 6899] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6897] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./98/bus", [pid 5077] getdents64(4, [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6903] <... chdir resumed>) = 0 [pid 6899] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6897] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6899] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6897] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 6903] <... prctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./100/bus") = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 6903] setpgid(0, 0 [pid 5080] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./100" [pid 5075] <... openat resumed>) = 4 [pid 6903] <... setpgid resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] fstat(4, [pid 6903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] fstat(4, [pid 5077] mkdir("./101", 0777 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6903] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] getdents64(4, [pid 6903] write(3, "1000", 4 [pid 5080] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6903] <... write resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 6903] close(3 [pid 5080] getdents64(4, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6903] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6903] symlink("/dev/binderfs", "./binderfs" [pid 5080] close(4 [pid 5077] close(3 [pid 5075] close(4 [pid 6903] <... symlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 93.147337][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.169689][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.181268][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] <... close resumed>) = 0 [pid 6903] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./98/bus" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./99/bus" [pid 6903] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 6904 [pid 6903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 6900] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6903] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6900] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 6903] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6900] <... futex resumed>) = 0 [pid 5080] close(3./strace-static-x86_64: Process 6904 attached [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 5075] close(3 [pid 6900] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] rmdir("./98" [pid 5075] <... close resumed>) = 0 [pid 6903] <... mprotect resumed>) = 0 [pid 6900] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6904] set_robust_list(0x555556b055e0, 24 [pid 6903] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6900] <... mprotect resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] rmdir("./99" [pid 6904] <... set_robust_list resumed>) = 0 [pid 6900] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] mkdir("./99", 0777 [pid 6904] chdir("./101" [pid 6903] <... clone resumed>, parent_tid=[6905], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6905 [pid 5075] <... rmdir resumed>) = 0 [pid 6904] <... chdir resumed>) = 0 [pid 6903] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6900] <... clone resumed>, parent_tid=[6906], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6906 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] mkdir("./100", 0777 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6903] <... futex resumed>) = 0 [pid 6900] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6897] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6906 attached ./strace-static-x86_64: Process 6905 attached [pid 6904] <... prctl resumed>) = 0 [pid 6903] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6900] <... futex resumed>) = 0 [pid 6897] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] setpgid(0, 0 [pid 6897] <... futex resumed>) = 0 [pid 6904] <... setpgid resumed>) = 0 [pid 6897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6897] <... mmap resumed>) = 0x7fee02e32000 [pid 6904] <... openat resumed>) = 3 [pid 6897] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6904] write(3, "1000", 4 [pid 6897] <... mprotect resumed>) = 0 [pid 6904] <... write resumed>) = 4 [pid 6897] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6904] close(3) = 0 [pid 6897] <... clone resumed>, parent_tid=[6907], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6907 [pid 6904] symlink("/dev/binderfs", "./binderfs" [pid 6897] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... symlink resumed>) = 0 [pid 6897] <... futex resumed>) = 0 [pid 6904] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6897] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6906] set_robust_list(0x7fee02e529e0, 24 [pid 6905] set_robust_list(0x7fee0b1f39e0, 24 [pid 6904] <... futex resumed>) = 0 [pid 6900] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6904] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6904] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6908], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6908 [pid 6904] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6904] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6907 attached [pid 6907] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6907] creat("./file1", 000./strace-static-x86_64: Process 6908 attached [pid 6908] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6906] <... set_robust_list resumed>) = 0 [pid 6905] <... set_robust_list resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 6908] memfd_create("syzkaller", 0 [pid 6906] creat("./file1", 000 [pid 6905] memfd_create("syzkaller", 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 6905] <... memfd_create resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6906] <... creat resumed>) = 5 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 6908] <... memfd_create resumed>) = 3 [pid 6908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6906] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6905] <... mmap resumed>) = 0x7fee02dd3000 [pid 6900] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 6906] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6908] <... write resumed>) = 524288 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 6909 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6910 [ 93.195130][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.202767][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.219508][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.227658][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6909 attached [pid 6905] <... write resumed>) = 524288 [pid 6897] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6908] munmap(0x7fee02dd3000, 524288) = 0 [pid 6908] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6908] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6910 attached [pid 6909] set_robust_list(0x555556b055e0, 24 [pid 6905] munmap(0x7fee02dd3000, 524288 [pid 6899] <... write resumed>) = 57344 [pid 6910] set_robust_list(0x555556b055e0, 24 [pid 6909] <... set_robust_list resumed>) = 0 [pid 6910] <... set_robust_list resumed>) = 0 [pid 6908] <... ioctl resumed>) = 0 [pid 6907] <... creat resumed>) = 5 [pid 6905] <... munmap resumed>) = 0 [pid 6901] <... write resumed>) = 57344 [pid 6899] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] chdir("./99" [pid 6910] chdir("./100" [pid 6908] close(3 [pid 6907] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6909] <... chdir resumed>) = 0 [pid 6905] <... openat resumed>) = 4 [pid 6901] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6899] <... futex resumed>) = 0 [pid 6900] exit_group(0 [pid 6910] <... chdir resumed>) = 0 [pid 6905] ioctl(4, LOOP_SET_FD, 3 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6908] <... close resumed>) = 0 [pid 6907] <... futex resumed>) = 0 [pid 6906] <... futex resumed>) = ? [pid 6901] <... futex resumed>) = ? [pid 6900] <... exit_group resumed>) = ? [ 93.255704][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.256027][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.265238][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.277724][ T6899] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.281036][ T6908] loop3: detected capacity change from 0 to 1024 [ 93.286065][ T6901] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6899] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] <... prctl resumed>) = 0 [pid 6909] <... prctl resumed>) = 0 [pid 6908] mkdir("./bus", 0777 [pid 6907] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6906] +++ exited with 0 +++ [pid 6901] +++ exited with 0 +++ [pid 6900] +++ exited with 0 +++ [pid 6910] setpgid(0, 0 [pid 6909] setpgid(0, 0 [pid 6908] <... mkdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6900, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6910] <... setpgid resumed>) = 0 [pid 6909] <... setpgid resumed>) = 0 [pid 6908] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6905] <... ioctl resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6897] exit_group(0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6907] <... futex resumed>) = ? [pid 6905] close(3 [pid 6899] <... futex resumed>) = ? [pid 6897] <... exit_group resumed>) = ? [pid 6910] <... openat resumed>) = 3 [pid 6909] <... openat resumed>) = 3 [pid 6907] +++ exited with 0 +++ [pid 6905] <... close resumed>) = 0 [pid 6899] +++ exited with 0 +++ [pid 5081] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] write(3, "1000", 4 [pid 6909] write(3, "1000", 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6908] <... mount resumed>) = 0 [pid 6905] mkdir("./bus", 0777 [pid 6908] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6910] <... write resumed>) = 4 [pid 6909] <... write resumed>) = 4 [pid 6908] <... openat resumed>) = 3 [pid 6897] +++ exited with 0 +++ [pid 6905] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6910] close(3 [pid 6909] close(3 [pid 6908] chdir("./bus" [pid 6905] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... openat resumed>) = 3 [pid 6908] <... chdir resumed>) = 0 [pid 6910] <... close resumed>) = 0 [pid 6909] <... close resumed>) = 0 [pid 6908] ioctl(4, LOOP_CLR_FD [pid 5081] fstat(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6897, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6910] symlink("/dev/binderfs", "./binderfs" [pid 6909] symlink("/dev/binderfs", "./binderfs" [pid 6908] <... ioctl resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] <... symlink resumed>) = 0 [pid 6909] <... symlink resumed>) = 0 [pid 6908] close(4 [pid 6905] <... mount resumed>) = 0 [pid 5081] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6908] <... close resumed>) = 0 [pid 6908] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6908] <... futex resumed>) = 1 [pid 6904] <... futex resumed>) = 0 [pid 6908] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] <... openat resumed>) = 3 [pid 6904] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6910] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6905] chdir("./bus" [pid 6904] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6908] creat("./bus", 000 [pid 6905] <... chdir resumed>) = 0 [pid 6904] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] <... futex resumed>) = 0 [pid 6909] <... futex resumed>) = 0 [pid 6908] <... creat resumed>) = 4 [pid 6905] ioctl(4, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 6910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6908] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./102/binderfs", [pid 5074] fstat(3, [pid 6910] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6908] <... futex resumed>) = 1 [pid 6905] <... ioctl resumed>) = 0 [pid 6904] <... futex resumed>) = 0 [pid 6909] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6908] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6905] close(4 [pid 6904] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6910] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6909] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6905] <... close resumed>) = 0 [pid 6904] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] getdents64(3, [pid 6910] <... mprotect resumed>) = 0 [pid 6909] <... mprotect resumed>) = 0 [pid 6908] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6905] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6910] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6909] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6905] <... futex resumed>) = 1 [pid 5081] unlink("./102/binderfs" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6905] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6903] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5074] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6910] <... clone resumed>, parent_tid=[6911], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6911 [pid 6909] <... clone resumed>, parent_tid=[6912], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6912 ./strace-static-x86_64: Process 6912 attached ./strace-static-x86_64: Process 6911 attached [pid 6910] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6903] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] set_robust_list(0x7fee0b1f39e0, 24 [pid 6911] set_robust_list(0x7fee0b1f39e0, 24 [ 93.302860][ T6905] loop2: detected capacity change from 0 to 1024 [ 93.326088][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.345851][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6910] <... futex resumed>) = 0 [pid 6909] <... futex resumed>) = 0 [pid 6903] <... futex resumed>) = 1 [pid 5074] lstat("./100/binderfs", [pid 6912] <... set_robust_list resumed>) = 0 [pid 6911] <... set_robust_list resumed>) = 0 [pid 6910] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6909] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6903] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6912] memfd_create("syzkaller", 0 [pid 6911] memfd_create("syzkaller", 0 [pid 5074] unlink("./100/binderfs" [pid 6912] <... memfd_create resumed>) = 3 [pid 6911] <... memfd_create resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 6905] <... futex resumed>) = 0 [pid 6905] creat("./bus", 000) = 4 [pid 6905] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6903] <... futex resumed>) = 0 [pid 6905] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6903] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6903] <... futex resumed>) = 0 [pid 6905] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6903] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = 0 [ 93.353639][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.361325][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.361866][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.376552][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.384097][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.398952][ T6908] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6912] <... mmap resumed>) = 0x7fee02dd3000 [pid 6911] <... mmap resumed>) = 0x7fee02dd3000 [pid 6904] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6911] <... write resumed>) = 524288 [pid 5081] lstat("./102/bus", [pid 6911] munmap(0x7fee02dd3000, 524288 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6911] <... munmap resumed>) = 0 [pid 5081] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6911] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... openat resumed>) = 4 [pid 6908] <... write resumed>) = 57344 [pid 6904] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = 0 [pid 6911] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... openat resumed>) = 4 [pid 5074] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6912] <... write resumed>) = 524288 [pid 6908] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] fstat(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./100/bus", [pid 5081] getdents64(4, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] close(4 [pid 5074] <... openat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 5081] rmdir("./102/bus" [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5081] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5081] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [pid 5074] close(4 [pid 5081] rmdir("./102" [pid 5074] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] rmdir("./100/bus" [pid 5081] mkdir("./103", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] rmdir("./100" [pid 5081] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6912] munmap(0x7fee02dd3000, 524288 [pid 6908] <... futex resumed>) = 0 [pid 6904] <... mmap resumed>) = 0x7fee02e32000 [pid 6903] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [ 93.406725][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 93.409029][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.420360][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.427105][ T6911] loop1: detected capacity change from 0 to 1024 [ 93.430800][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] mkdir("./101", 0777 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 6912] <... munmap resumed>) = 0 [pid 6908] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6904] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6903] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6911] <... ioctl resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 6913 [pid 5074] <... openat resumed>) = 3 [pid 6911] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6911] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6911] mkdir("./bus", 0777 [pid 5074] close(3 [pid 6911] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6911] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6914 [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6911] <... mount resumed>) = 0 [pid 6904] <... mprotect resumed>) = 0 [pid 6903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6913 attached [pid 6911] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6913] set_robust_list(0x555556b055e0, 24 [pid 6912] <... openat resumed>) = 4 [pid 6911] <... openat resumed>) = 3 [pid 6904] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6903] <... mmap resumed>) = 0x7fee02e32000 [pid 6913] <... set_robust_list resumed>) = 0 [pid 6911] chdir("./bus" [pid 6912] ioctl(4, LOOP_SET_FD, 3 [pid 6913] chdir("./103" [pid 6911] <... chdir resumed>) = 0 [pid 6903] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6914 attached [pid 6913] <... chdir resumed>) = 0 [pid 6911] ioctl(4, LOOP_CLR_FD [pid 6914] set_robust_list(0x555556b055e0, 24 [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6911] <... ioctl resumed>) = 0 [pid 6914] <... set_robust_list resumed>) = 0 [pid 6913] <... prctl resumed>) = 0 [pid 6911] close(4./strace-static-x86_64: Process 6915 attached [pid 6914] chdir("./101" [pid 6913] setpgid(0, 0 [pid 6912] <... ioctl resumed>) = 0 [pid 6911] <... close resumed>) = 0 [pid 6904] <... clone resumed>, parent_tid=[6915], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6915 [pid 6903] <... mprotect resumed>) = 0 [pid 6914] <... chdir resumed>) = 0 [pid 6913] <... setpgid resumed>) = 0 [pid 6911] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6911] <... futex resumed>) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6914] <... prctl resumed>) = 0 [pid 6913] <... openat resumed>) = 3 [pid 6911] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] setpgid(0, 0 [pid 6913] write(3, "1000", 4 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6914] <... setpgid resumed>) = 0 [pid 6913] <... write resumed>) = 4 [pid 6911] creat("./bus", 000 [pid 6910] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6913] close(3 [pid 6911] <... creat resumed>) = 4 [pid 6914] <... openat resumed>) = 3 [pid 6913] <... close resumed>) = 0 [pid 6911] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] write(3, "1000", 4 [pid 6913] symlink("/dev/binderfs", "./binderfs" [pid 6911] <... futex resumed>) = 1 [pid 6910] <... futex resumed>) = 0 [pid 6914] <... write resumed>) = 4 [pid 6913] <... symlink resumed>) = 0 [pid 6911] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6910] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] close(3 [pid 6913] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6910] <... futex resumed>) = 0 [pid 6914] <... close resumed>) = 0 [pid 6913] <... futex resumed>) = 0 [pid 6911] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6910] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6915] set_robust_list(0x7fee02e529e0, 24 [pid 6914] symlink("/dev/binderfs", "./binderfs" [pid 6913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6912] close(3 [pid 6905] <... write resumed>) = 57344 [pid 6904] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6903] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6915] <... set_robust_list resumed>) = 0 [pid 6912] <... close resumed>) = 0 [pid 6905] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6904] <... futex resumed>) = 0 [pid 6915] creat("./file1", 000 [pid 6912] mkdir("./bus", 0777 [pid 6905] <... futex resumed>) = 0 [pid 6904] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6903] <... clone resumed>, parent_tid=[6916], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6916 [pid 6915] <... creat resumed>) = 5 [pid 6912] <... mkdir resumed>) = 0 [pid 6905] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6903] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6916 attached [pid 6915] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] <... symlink resumed>) = 0 [pid 6913] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6912] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6903] <... futex resumed>) = 0 [pid 6915] <... futex resumed>) = 1 [pid 6912] <... mount resumed>) = 0 [pid 6904] <... futex resumed>) = 0 [pid 6903] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6915] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6912] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6904] exit_group(0 [pid 6915] <... futex resumed>) = ? [pid 6912] <... openat resumed>) = 3 [pid 6908] <... futex resumed>) = ? [pid 6904] <... exit_group resumed>) = ? [ 93.453759][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.464486][ T6912] loop4: detected capacity change from 0 to 1024 [ 93.480967][ T6905] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.491015][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.499754][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6916] set_robust_list(0x7fee02e529e0, 24 [pid 6915] +++ exited with 0 +++ [pid 6914] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6912] chdir("./bus" [pid 6908] +++ exited with 0 +++ [pid 6904] +++ exited with 0 +++ [pid 6912] <... chdir resumed>) = 0 [pid 6912] ioctl(4, LOOP_CLR_FD) = 0 [pid 6912] close(4) = 0 [pid 6912] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6909] <... futex resumed>) = 0 [pid 6912] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6909] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6909] <... futex resumed>) = 0 [pid 6912] creat("./bus", 000 [pid 6909] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] <... creat resumed>) = 4 [pid 6912] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6909] <... futex resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6912] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6909] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6916] <... set_robust_list resumed>) = 0 [pid 6914] <... futex resumed>) = 0 [pid 6913] <... mprotect resumed>) = 0 [pid 6912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6909] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6909] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6916] creat("./file1", 000 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6913] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6916] <... creat resumed>) = 5 [pid 6914] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... openat resumed>) = 3 [pid 6916] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6913] <... clone resumed>, parent_tid=[6917], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6917 [pid 6910] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6916] <... futex resumed>) = 1 [pid 6914] <... mprotect resumed>) = 0 [pid 6913] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] <... futex resumed>) = 0 [pid 6916] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6913] <... futex resumed>) = 0 [pid 6910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6913] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6910] <... mmap resumed>) = 0x7fee02e32000 [pid 6914] <... clone resumed>, parent_tid=[6918], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6918 [pid 6910] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6914] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6910] <... mprotect resumed>) = 0 [pid 6914] <... futex resumed>) = 0 [pid 6910] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6914] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6910] <... clone resumed>, parent_tid=[6919], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6919 [pid 6910] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6910] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6918 attached [pid 6918] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6918] memfd_create("syzkaller", 0) = 3 [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5077] fstat(3, [pid 6903] <... futex resumed>) = 0 [pid 6903] exit_group(0 [pid 6916] <... futex resumed>) = ? [pid 6905] <... futex resumed>) = ? [pid 6903] <... exit_group resumed>) = ? [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6916] +++ exited with 0 +++ [pid 6905] +++ exited with 0 +++ [pid 6903] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6903, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 93.507631][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.518250][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.522272][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.534847][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.538565][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6919 attached ./strace-static-x86_64: Process 6917 attached [pid 6918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./102/binderfs") = 0 [pid 5076] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6919] set_robust_list(0x7fee02e529e0, 24 [pid 6917] set_robust_list(0x7fee0b1f39e0, 24 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] <... write resumed>) = 524288 [pid 6918] munmap(0x7fee02dd3000, 524288) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6918] ioctl(4, LOOP_SET_FD, 3 [pid 6919] <... set_robust_list resumed>) = 0 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] lstat("./101/binderfs", [pid 6918] <... ioctl resumed>) = 0 [pid 6918] close(3) = 0 [pid 6918] mkdir("./bus", 0777) = 0 [pid 6918] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6919] creat("./file1", 000) = 5 [pid 6917] memfd_create("syzkaller", 0 [pid 6912] <... write resumed>) = 57344 [pid 6909] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6911] <... write resumed>) = 57344 [pid 6919] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] <... memfd_create resumed>) = 3 [pid 6912] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6911] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... futex resumed>) = 0 [pid 5077] unlink("./101/binderfs" [pid 6919] <... futex resumed>) = 0 [pid 6918] <... mount resumed>) = 0 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6912] <... futex resumed>) = 0 [pid 6911] <... futex resumed>) = 0 [pid 6909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6919] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6918] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6917] <... mmap resumed>) = 0x7fee02dd3000 [pid 6910] exit_group(0 [pid 6909] <... mmap resumed>) = 0x7fee02e32000 [pid 6918] <... openat resumed>) = 3 [pid 6910] <... exit_group resumed>) = ? [pid 5077] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6918] chdir("./bus" [pid 6911] +++ exited with 0 +++ [pid 6918] <... chdir resumed>) = 0 [pid 6918] ioctl(4, LOOP_CLR_FD) = 0 [pid 6919] <... futex resumed>) = ? [pid 6918] close(4 [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6909] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6918] <... close resumed>) = 0 [pid 5076] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6918] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6919] +++ exited with 0 +++ [pid 6918] <... futex resumed>) = 1 [pid 6914] <... futex resumed>) = 0 [pid 6910] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6909] <... mprotect resumed>) = 0 [ 93.553041][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.559670][ T6911] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.561618][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.568396][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 93.577445][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.586647][ T6918] loop0: detected capacity change from 0 to 1024 [ 93.589349][ T6912] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] lstat("./102/bus", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6910, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6914] <... futex resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6918] creat("./bus", 000 [pid 6914] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... restart_syscall resumed>) = 0 [pid 6918] <... creat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6918] <... futex resumed>) = 1 [pid 6914] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6918] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6914] <... futex resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6918] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6914] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6909] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] fstat(3, [pid 5076] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5076] close(4 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./102/bus" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] lstat("./100/binderfs", [pid 5076] getdents64(3, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] unlink("./100/binderfs" [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./102") = 0 [pid 5076] mkdir("./103", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6920 [pid 6909] <... clone resumed>, parent_tid=[6921], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6921 [pid 6909] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6909] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6920 attached [pid 6920] set_robust_list(0x555556b055e0, 24) = 0 [pid 6920] chdir("./103") = 0 [pid 6920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6920] setpgid(0, 0) = 0 [pid 6920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6920] write(3, "1000", 4 [pid 6917] <... write resumed>) = 524288 [pid 6920] <... write resumed>) = 4 [pid 6920] close(3) = 0 [pid 6920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6920] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6917] munmap(0x7fee02dd3000, 524288 [pid 6920] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6920] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6917] <... munmap resumed>) = 0 [pid 6920] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6917] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6921 attached ) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 6920] <... clone resumed>, parent_tid=[6922], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6922 [pid 6920] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6920] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6922 attached [pid 6922] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6922] memfd_create("syzkaller", 0) = 3 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [ 93.615334][ T9] hfsplus: b-tree write err: -5, ino 4 [ 93.625890][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.647789][ T52] hfsplus: b-tree write err: -5, ino 4 [ 93.657134][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6921] set_robust_list(0x7fee02e529e0, 24 [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 5077] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6921] <... set_robust_list resumed>) = 0 [pid 6914] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6914] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] creat("./file1", 000 [pid 6914] <... futex resumed>) = 0 [pid 5077] lstat("./101/bus", [pid 5075] <... umount2 resumed>) = 0 [pid 6921] <... creat resumed>) = 5 [pid 6914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6921] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6914] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] <... futex resumed>) = 0 [pid 6914] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] lstat("./100/bus", [pid 6922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6914] <... mprotect resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6914] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6914] <... clone resumed>, parent_tid=[6923], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6923 [pid 5075] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6914] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 4 [pid 6921] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... futex resumed>) = 0 [pid 6909] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] fstat(4, [pid 6921] <... futex resumed>) = ? [pid 6914] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6912] <... futex resumed>) = ? [pid 6909] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6922] <... write resumed>) = 524288 [pid 6921] +++ exited with 0 +++ [pid 6912] +++ exited with 0 +++ [pid 5075] getdents64(4, [pid 6917] <... ioctl resumed>) = 0 [pid 6909] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6923 attached 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6923] set_robust_list(0x7fee02e529e0, 24 [pid 5075] close(4 [pid 6923] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6923] creat("./file1", 000 [pid 5075] rmdir("./100/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./100" [pid 6922] munmap(0x7fee02dd3000, 524288 [pid 6917] close(3 [pid 5077] fstat(4, [pid 5075] <... rmdir resumed>) = 0 [pid 6923] <... creat resumed>) = 5 [pid 6922] <... munmap resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6909, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] mkdir("./101", 0777 [pid 6923] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] mkdir("./bus", 0777 [pid 5080] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 6923] <... futex resumed>) = 1 [pid 6922] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6917] <... mkdir resumed>) = 0 [pid 6914] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [ 93.665461][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.678926][ T6917] loop5: detected capacity change from 0 to 1024 [ 93.701048][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6923] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6922] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6922] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 3 [pid 6917] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, [pid 5075] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6924 ./strace-static-x86_64: Process 6924 attached [pid 6924] set_robust_list(0x555556b055e0, 24) = 0 [pid 6924] chdir("./101") = 0 [pid 6924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6924] setpgid(0, 0) = 0 [pid 6924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6924] write(3, "1000", 4) = 4 [pid 6924] close(3) = 0 [pid 6924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] close(4 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./101/bus" [pid 5080] getdents64(3, [pid 6924] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5080] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] <... mount resumed>) = 0 [pid 5077] close(3 [pid 6924] <... futex resumed>) = 0 [pid 6917] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] lstat("./99/binderfs", [pid 5077] <... close resumed>) = 0 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6917] <... openat resumed>) = 3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] rmdir("./101" [pid 6924] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6917] chdir("./bus" [pid 5080] unlink("./99/binderfs" [pid 6924] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6917] <... chdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 6924] <... mprotect resumed>) = 0 [pid 6917] ioctl(4, LOOP_CLR_FD [pid 5080] <... unlink resumed>) = 0 [pid 5077] mkdir("./102", 0777 [pid 6924] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6922] <... ioctl resumed>) = 0 [pid 6918] <... write resumed>) = 57344 [pid 6917] <... ioctl resumed>) = 0 [pid 5080] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6924] <... clone resumed>, parent_tid=[6925], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6925 [pid 6924] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6924] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] <... mkdir resumed>) = 0 [pid 6918] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] close(4 [pid 6918] <... futex resumed>) = 0 [pid 6917] <... close resumed>) = 0 ./strace-static-x86_64: Process 6925 attached [pid 6925] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6925] memfd_create("syzkaller", 0) = 3 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6918] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] exit_group(0 [pid 6917] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6917] <... futex resumed>) = 1 [pid 6918] <... futex resumed>) = ? [pid 6917] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6914] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6923] <... futex resumed>) = ? [pid 6913] <... futex resumed>) = 0 [pid 6923] +++ exited with 0 +++ [pid 6913] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6918] +++ exited with 0 +++ [pid 6917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6914] +++ exited with 0 +++ [pid 6917] creat("./bus", 000 [pid 5077] <... openat resumed>) = 3 [pid 6925] <... write resumed>) = 524288 [pid 6925] munmap(0x7fee02dd3000, 524288 [pid 6917] <... creat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6914, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6917] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 5074] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6917] <... futex resumed>) = 1 [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6913] <... futex resumed>) = 0 [pid 6913] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6913] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6925] <... munmap resumed>) = 0 [pid 6925] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6925] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6917] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5074] <... openat resumed>) = 3 [ 93.711243][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.713327][ T6922] loop2: detected capacity change from 0 to 1024 [ 93.719261][ T6918] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.754028][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 6922] close(3 [pid 5074] fstat(3, [pid 6922] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 6926 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6922] mkdir("./bus", 0777 [pid 5080] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6926 attached ) = -1 EINVAL (Invalid argument) [pid 6926] set_robust_list(0x555556b055e0, 24 [pid 5074] lstat("./101/binderfs", [pid 5080] lstat("./99/bus", [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./101/binderfs" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6922] <... mkdir resumed>) = 0 [pid 5080] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6926] <... set_robust_list resumed>) = 0 [pid 6926] chdir("./102" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6922] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... ioctl resumed>) = 0 [pid 6922] <... mount resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 6922] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6922] chdir("./bus") = 0 [pid 6922] ioctl(4, LOOP_CLR_FD) = 0 [pid 6922] close(4) = 0 [pid 6922] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6920] <... futex resumed>) = 0 [pid 6922] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6920] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6920] <... futex resumed>) = 0 [pid 6922] creat("./bus", 000 [ 93.771053][ T6925] loop1: detected capacity change from 0 to 1024 [ 93.775229][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.802698][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.810979][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 6920] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... chdir resumed>) = 0 [pid 6925] close(3 [pid 6922] <... creat resumed>) = 4 [pid 6913] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] fstat(4, [pid 6926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] <... prctl resumed>) = 0 [pid 6922] <... futex resumed>) = 1 [pid 6920] <... futex resumed>) = 0 [pid 6913] <... futex resumed>) = 0 [pid 6926] setpgid(0, 0 [pid 6922] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6920] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6926] <... setpgid resumed>) = 0 [pid 6922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6920] <... futex resumed>) = 0 [pid 6913] <... mmap resumed>) = 0x7fee02e32000 [pid 6926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6922] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6920] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6913] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6926] <... openat resumed>) = 3 [pid 6925] <... close resumed>) = 0 [pid 6913] <... mprotect resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6926] write(3, "1000", 4 [pid 6913] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6926] <... write resumed>) = 4 [pid 6926] close(3 [pid 6913] <... clone resumed>, parent_tid=[6927], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6927 [pid 6926] <... close resumed>) = 0 [pid 6913] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] symlink("/dev/binderfs", "./binderfs" [pid 6913] <... futex resumed>) = 0 [pid 6926] <... symlink resumed>) = 0 [pid 6913] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6926] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6926] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6928], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6928 [pid 6926] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6926] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./101/bus" [pid 6925] mkdir("./bus", 0777 [pid 5080] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6927 attached ./strace-static-x86_64: Process 6928 attached [pid 6925] <... mkdir resumed>) = 0 [ 93.812987][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.821222][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.825211][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.840550][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.841203][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.856703][ T6917] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6927] set_robust_list(0x7fee02e529e0, 24 [pid 5074] getdents64(3, [pid 6928] set_robust_list(0x7fee0b1f39e0, 24 [pid 6925] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6928] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6928] memfd_create("syzkaller", 0) = 3 [pid 5074] close(3 [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 6928] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] rmdir("./101" [pid 6928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./102", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6929 ./strace-static-x86_64: Process 6929 attached [pid 6928] <... write resumed>) = 524288 [pid 6927] <... set_robust_list resumed>) = 0 [pid 6925] <... mount resumed>) = 0 [pid 6917] <... write resumed>) = 57344 [pid 5080] getdents64(4, [pid 6929] set_robust_list(0x555556b055e0, 24 [pid 6928] munmap(0x7fee02dd3000, 524288 [pid 6927] creat("./file1", 000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6929] <... set_robust_list resumed>) = 0 [pid 6928] <... munmap resumed>) = 0 [pid 6927] <... creat resumed>) = 5 [pid 5080] close(4 [pid 6929] chdir("./102" [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6927] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 6929] <... chdir resumed>) = 0 [pid 6928] <... openat resumed>) = 4 [pid 6927] <... futex resumed>) = 1 [pid 6925] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6917] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6913] <... futex resumed>) = 0 [pid 5080] rmdir("./99/bus" [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6928] ioctl(4, LOOP_SET_FD, 3 [pid 6927] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6925] <... openat resumed>) = 3 [pid 6917] <... futex resumed>) = 0 [pid 6913] exit_group(0 [pid 5080] <... rmdir resumed>) = 0 [pid 6929] <... prctl resumed>) = 0 [pid 6928] <... ioctl resumed>) = 0 [pid 6920] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] getdents64(3, [pid 6929] setpgid(0, 0 [pid 6928] close(3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6929] <... setpgid resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 5080] close(3 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6928] mkdir("./bus", 0777 [pid 5080] <... close resumed>) = 0 [pid 6929] <... openat resumed>) = 3 [pid 6928] <... mkdir resumed>) = 0 [pid 5080] rmdir("./99" [pid 6929] write(3, "1000", 4 [pid 6928] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6925] chdir("./bus" [pid 6917] chdir("./bus" [pid 5080] <... rmdir resumed>) = 0 [pid 6913] <... exit_group resumed>) = ? [pid 6929] <... write resumed>) = 4 [pid 6927] <... futex resumed>) = ? [pid 6925] <... chdir resumed>) = 0 [pid 6922] <... write resumed>) = 57344 [pid 6920] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6917] +++ exited with 0 +++ [pid 5080] mkdir("./100", 0777 [pid 6929] close(3 [pid 6927] +++ exited with 0 +++ [pid 6925] ioctl(4, LOOP_CLR_FD [pid 6922] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... futex resumed>) = 0 [pid 6913] +++ exited with 0 +++ [pid 5080] <... mkdir resumed>) = 0 [pid 6929] <... close resumed>) = 0 [pid 6925] <... ioctl resumed>) = 0 [pid 6922] <... futex resumed>) = 0 [pid 6920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6929] symlink("/dev/binderfs", "./binderfs" [pid 6925] close(4 [pid 6922] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6920] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] <... openat resumed>) = 3 [pid 6929] <... symlink resumed>) = 0 [pid 6928] <... mount resumed>) = 0 [pid 6925] <... close resumed>) = 0 [pid 6920] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6929] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6928] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6925] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] <... mprotect resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6929] <... futex resumed>) = 0 [pid 6928] <... openat resumed>) = 3 [pid 6925] <... futex resumed>) = 1 [pid 6924] <... futex resumed>) = 0 [pid 6920] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] close(3 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6928] chdir("./bus" [pid 6925] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6924] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 6929] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6928] <... chdir resumed>) = 0 [pid 6925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6924] <... futex resumed>) = 0 [pid 6920] <... clone resumed>, parent_tid=[6930], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6930 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6929] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6928] ioctl(4, LOOP_CLR_FD [pid 6925] creat("./bus", 000 [pid 6924] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6929] <... mprotect resumed>) = 0 [pid 6928] <... ioctl resumed>) = 0 [pid 6925] <... creat resumed>) = 4 [pid 6920] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 6929] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6928] close(4 [pid 6925] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6920] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 6931 [pid 6928] <... close resumed>) = 0 [pid 6925] <... futex resumed>) = 1 [pid 6924] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6929] <... clone resumed>, parent_tid=[6932], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6932 [pid 6928] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6924] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, ./strace-static-x86_64: Process 6932 attached ./strace-static-x86_64: Process 6931 attached ./strace-static-x86_64: Process 6930 attached [pid 6929] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6928] <... futex resumed>) = 1 [pid 6926] <... futex resumed>) = 0 [pid 6925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6924] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6932] set_robust_list(0x7fee0b1f39e0, 24 [pid 6931] set_robust_list(0x555556b055e0, 24 [pid 6930] set_robust_list(0x7fee02e529e0, 24 [pid 6929] <... futex resumed>) = 0 [pid 6932] <... set_robust_list resumed>) = 0 [pid 6931] <... set_robust_list resumed>) = 0 [pid 6930] <... set_robust_list resumed>) = 0 [pid 6929] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6928] creat("./bus", 000 [pid 6926] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6924] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6932] memfd_create("syzkaller", 0 [pid 6931] chdir("./100" [pid 6930] creat("./file1", 000 [pid 6928] <... creat resumed>) = 4 [pid 6926] <... futex resumed>) = 0 [ 93.871536][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.888128][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.898142][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.900100][ T6928] loop3: detected capacity change from 0 to 1024 [ 93.906078][ T6922] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6932] <... memfd_create resumed>) = 3 [pid 6931] <... chdir resumed>) = 0 [pid 6930] <... creat resumed>) = 5 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6930] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6932] <... mmap resumed>) = 0x7fee02dd3000 [pid 6931] <... prctl resumed>) = 0 [pid 6930] <... futex resumed>) = 1 [pid 6932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6931] setpgid(0, 0 [pid 6930] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6932] <... write resumed>) = 524288 [pid 6931] <... setpgid resumed>) = 0 [pid 6928] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6926] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6920] <... futex resumed>) = 0 [pid 5081] lstat("./103/binderfs", [pid 6932] munmap(0x7fee02dd3000, 524288 [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6928] <... futex resumed>) = 0 [pid 6926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6920] exit_group(0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6932] <... munmap resumed>) = 0 [pid 6931] <... openat resumed>) = 3 [pid 6930] <... futex resumed>) = ? [pid 6928] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6926] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6922] <... futex resumed>) = ? [pid 6920] <... exit_group resumed>) = ? [pid 5081] unlink("./103/binderfs" [pid 6932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6931] write(3, "1000", 4 [pid 6930] +++ exited with 0 +++ [pid 6926] <... futex resumed>) = 0 [pid 6922] +++ exited with 0 +++ [pid 6932] <... openat resumed>) = 4 [pid 6931] <... write resumed>) = 4 [pid 6920] +++ exited with 0 +++ [pid 6932] ioctl(4, LOOP_SET_FD, 3 [pid 6931] close(3 [pid 6926] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6920, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6931] <... close resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6931] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... restart_syscall resumed>) = 0 [pid 6931] <... symlink resumed>) = 0 [pid 6931] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... openat resumed>) = 3 [pid 6931] <... mprotect resumed>) = 0 [pid 5076] fstat(3, [pid 6931] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 6931] <... clone resumed>, parent_tid=[6933], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6933 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6931] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6931] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./103/binderfs") = 0 [pid 5076] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6933 attached [pid 6933] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6933] memfd_create("syzkaller", 0) = 3 [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5081] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6932] <... ioctl resumed>) = 0 [pid 5076] lstat("./103/bus", [pid 6932] close(3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 93.943348][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.959670][ T6932] loop0: detected capacity change from 0 to 1024 [ 93.960270][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [ 93.975015][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 93.980865][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 6932] <... close resumed>) = 0 [pid 5076] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6932] mkdir("./bus", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6932] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 6924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6924] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6924] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] lstat("./103/bus", [pid 5076] getdents64(4, [pid 6932] <... mount resumed>) = 0 [pid 6924] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6933] <... write resumed>) = 524288 [pid 6932] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6924] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(4 [pid 6932] <... openat resumed>) = 3 [pid 6924] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 6932] chdir("./bus" [pid 5076] rmdir("./103/bus" [pid 6932] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6932] ioctl(4, LOOP_CLR_FD [pid 5076] getdents64(3, [pid 6932] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6932] close(4 [pid 5076] close(3 [pid 6932] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6932] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./103" [pid 6932] <... futex resumed>) = 1 [pid 6929] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6932] creat("./bus", 000 [pid 6929] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./104", 0777 [pid 6932] <... creat resumed>) = 4 [pid 6929] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6932] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6929] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6933] munmap(0x7fee02dd3000, 524288 [pid 6932] <... futex resumed>) = 0 [pid 6929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6924] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 6933] <... munmap resumed>) = 0 [pid 6932] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6929] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6933] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6929] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6933] <... openat resumed>) = 4 [pid 6932] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6929] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] close(3 [pid 6933] ioctl(4, LOOP_SET_FD, 3 [pid 6926] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6926] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6924] <... clone resumed>, parent_tid=[6934], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6934 [pid 5081] fstat(4, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6935 ./strace-static-x86_64: Process 6935 attached [pid 6935] set_robust_list(0x555556b055e0, 24) = 0 [pid 6935] chdir("./104") = 0 [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6935] setpgid(0, 0) = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6926] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6924] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [ 93.990101][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.007459][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.015512][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.020549][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.031634][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] getdents64(4, [pid 6926] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 6934 attached [pid 6926] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6924] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6935] <... openat resumed>) = 3 [pid 6934] set_robust_list(0x7fee02e529e0, 24 [pid 6926] <... mprotect resumed>) = 0 [pid 6924] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 6935] write(3, "1000", 4) = 4 [pid 6935] close(3) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6935] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6935] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6935] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6936], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6936 [pid 6935] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6935] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6926] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6934] <... set_robust_list resumed>) = 0 [pid 5081] close(4 [pid 6934] creat("./file1", 000 [pid 6926] <... clone resumed>, parent_tid=[6937], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6937 [pid 5081] <... close resumed>) = 0 [pid 6933] <... ioctl resumed>) = 0 [pid 6926] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./103/bus" [pid 6933] close(3 [pid 6926] <... futex resumed>) = 0 [pid 6934] <... creat resumed>) = 5 [pid 6933] <... close resumed>) = 0 [pid 6926] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 6934] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 6934] <... futex resumed>) = 1 [pid 6924] <... futex resumed>) = 0 [pid 6934] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6937 attached ./strace-static-x86_64: Process 6936 attached [pid 6933] mkdir("./bus", 0777 [pid 5081] close(3 [pid 6937] set_robust_list(0x7fee02e529e0, 24 [pid 6936] set_robust_list(0x7fee0b1f39e0, 24 [pid 6933] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 6936] <... set_robust_list resumed>) = 0 [pid 6933] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6936] memfd_create("syzkaller", 0 [pid 6933] <... mount resumed>) = 0 [pid 6937] <... set_robust_list resumed>) = 0 [pid 6936] <... memfd_create resumed>) = 3 [pid 5081] rmdir("./103" [pid 6937] creat("./file1", 000 [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6933] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 6936] <... mmap resumed>) = 0x7fee02dd3000 [pid 6933] <... openat resumed>) = 3 [pid 5081] mkdir("./104", 0777 [pid 6933] chdir("./bus" [pid 6929] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... mkdir resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 6929] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6933] ioctl(4, LOOP_CLR_FD [pid 6929] <... futex resumed>) = 0 [pid 6933] <... ioctl resumed>) = 0 [pid 6929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... openat resumed>) = 3 [pid 6933] close(4 [pid 6929] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 6936] <... write resumed>) = 524288 [pid 6933] <... close resumed>) = 0 [pid 6929] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6933] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6929] <... mprotect resumed>) = 0 [pid 6933] <... futex resumed>) = 1 [pid 6931] <... futex resumed>) = 0 [pid 6929] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6933] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6931] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 6933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6931] <... futex resumed>) = 0 [pid 6929] <... clone resumed>, parent_tid=[6938], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6938 [pid 5081] <... close resumed>) = 0 [ 94.040182][ T6933] loop4: detected capacity change from 0 to 1024 [ 94.047671][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.061131][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.065696][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6933] creat("./bus", 000 [pid 6931] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6929] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6936] munmap(0x7fee02dd3000, 524288 [pid 6933] <... creat resumed>) = 4 [pid 6929] <... futex resumed>) = 0 [pid 6936] <... munmap resumed>) = 0 [pid 6933] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6929] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6938 attached [pid 6936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6933] <... futex resumed>) = 1 [pid 6931] <... futex resumed>) = 0 [pid 6938] set_robust_list(0x7fee02e529e0, 24 [pid 6936] <... openat resumed>) = 4 [pid 6933] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6931] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6938] <... set_robust_list resumed>) = 0 [pid 6936] ioctl(4, LOOP_SET_FD, 3 [pid 6933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6931] <... futex resumed>) = 0 [pid 6938] creat("./file1", 000 [pid 6933] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6931] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6926] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6939 attached [pid 6939] set_robust_list(0x555556b055e0, 24) = 0 [pid 6939] chdir("./104") = 0 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6939] setpgid(0, 0) = 0 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6936] <... ioctl resumed>) = 0 [pid 6939] write(3, "1000", 4 [pid 6936] close(3 [pid 6939] <... write resumed>) = 4 [pid 6936] <... close resumed>) = 0 [ 94.094734][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.107620][ T6925] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.112902][ T6936] loop2: detected capacity change from 0 to 1024 [ 94.119070][ T5083] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.132138][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6939] close(3 [pid 6936] mkdir("./bus", 0777 [pid 6939] <... close resumed>) = 0 [pid 6936] <... mkdir resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 6939 [pid 6939] symlink("/dev/binderfs", "./binderfs" [pid 6936] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6939] <... symlink resumed>) = 0 [pid 6929] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6925] <... write resumed>) = 57344 [pid 6939] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6931] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6931] <... futex resumed>) = 0 [pid 6939] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6939] <... mprotect resumed>) = 0 [pid 6931] <... mmap resumed>) = 0x7fee02e32000 [pid 6939] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6931] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6939] <... clone resumed>, parent_tid=[6940], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6940 [pid 6931] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6939] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6931] <... clone resumed>, parent_tid=[6941], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6941 [pid 6939] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6931] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6925] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6937] <... creat resumed>) = 5 [pid 6931] <... futex resumed>) = 0 [pid 6925] <... futex resumed>) = 0 [pid 6937] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6931] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6925] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6937] <... futex resumed>) = 0 [pid 6924] exit_group(0./strace-static-x86_64: Process 6941 attached [pid 6938] <... creat resumed>) = 5 [pid 6937] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6940 attached [pid 6938] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] set_robust_list(0x7fee0b1f39e0, 24 [pid 6938] <... futex resumed>) = 0 [pid 6940] <... set_robust_list resumed>) = 0 [pid 6938] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 94.133082][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.140372][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.155578][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.171424][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.184208][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6940] memfd_create("syzkaller", 0) = 3 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6924] <... exit_group resumed>) = ? [pid 6941] set_robust_list(0x7fee02e529e0, 24 [pid 6934] <... futex resumed>) = ? [pid 6925] <... futex resumed>) = ? [pid 6936] <... mount resumed>) = 0 [pid 6940] <... write resumed>) = 524288 [pid 6936] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6940] munmap(0x7fee02dd3000, 524288 [pid 6936] chdir("./bus" [pid 6941] <... set_robust_list resumed>) = 0 [pid 6940] <... munmap resumed>) = 0 [pid 6936] <... chdir resumed>) = 0 [pid 6934] +++ exited with 0 +++ [pid 6941] creat("./file1", 000 [pid 6940] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6936] ioctl(4, LOOP_CLR_FD [pid 6925] +++ exited with 0 +++ [pid 6924] +++ exited with 0 +++ [pid 6941] <... creat resumed>) = 5 [pid 6940] <... openat resumed>) = 4 [pid 6936] <... ioctl resumed>) = 0 [pid 6941] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6936] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6924, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6941] <... futex resumed>) = 1 [pid 6936] <... close resumed>) = 0 [pid 6931] <... futex resumed>) = 0 [pid 5075] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6936] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] <... futex resumed>) = 1 [pid 6935] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6936] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6935] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6935] <... futex resumed>) = 0 [pid 5075] fstat(3, [pid 6936] creat("./bus", 000 [pid 6935] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6936] <... creat resumed>) = 4 [pid 5075] getdents64(3, [pid 6936] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6941] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6936] <... futex resumed>) = 1 [pid 6935] <... futex resumed>) = 0 [pid 6932] <... write resumed>) = 57344 [pid 5075] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6936] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6935] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 94.185295][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.199209][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.207312][ T6932] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.221693][ T6940] loop5: detected capacity change from 0 to 1024 [ 94.228228][ T6928] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.228613][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6935] <... futex resumed>) = 0 [pid 5075] lstat("./101/binderfs", [pid 6936] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6935] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6940] <... ioctl resumed>) = 0 [pid 6932] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6940] close(3 [pid 6932] <... futex resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 6932] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] mkdir("./bus", 0777) = 0 [pid 6940] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 6933] <... write resumed>) = 57344 [pid 6928] <... write resumed>) = 57344 [pid 6940] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6933] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6931] exit_group(0 [pid 6928] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6941] <... futex resumed>) = ? [pid 6940] <... openat resumed>) = 3 [pid 6933] <... futex resumed>) = ? [pid 6931] <... exit_group resumed>) = ? [pid 6929] exit_group(0 [pid 6928] <... futex resumed>) = 0 [pid 5075] unlink("./101/binderfs" [pid 6941] +++ exited with 0 +++ [pid 6940] chdir("./bus" [pid 6933] +++ exited with 0 +++ [pid 6931] +++ exited with 0 +++ [pid 6928] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] <... chdir resumed>) = 0 [pid 6926] exit_group(0 [pid 6940] ioctl(4, LOOP_CLR_FD [pid 6937] <... futex resumed>) = ? [pid 6928] <... futex resumed>) = ? [pid 6926] <... exit_group resumed>) = ? [pid 6940] <... ioctl resumed>) = 0 [pid 6937] +++ exited with 0 +++ [pid 6928] +++ exited with 0 +++ [pid 6926] +++ exited with 0 +++ [pid 6940] close(4) = 0 [pid 6938] <... futex resumed>) = ? [pid 6932] <... futex resumed>) = ? [pid 6929] <... exit_group resumed>) = ? [pid 5075] <... unlink resumed>) = 0 [pid 6940] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6940] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] <... futex resumed>) = 0 [pid 6938] +++ exited with 0 +++ [pid 6932] +++ exited with 0 +++ [pid 6929] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6926, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6939] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6929, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6940] <... futex resumed>) = 0 [pid 6939] <... futex resumed>) = 1 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 6940] creat("./bus", 000 [pid 6939] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6940] <... creat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6940] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6940] <... futex resumed>) = 1 [pid 6939] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 6940] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6939] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./102/binderfs" [pid 6939] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 6940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 94.244022][ T6933] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.249122][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.259249][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.267759][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.276640][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.288737][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 6939] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./100/binderfs") = 0 [pid 5080] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./102/binderfs") = 0 [pid 5077] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6940] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6935] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6935] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6935] <... futex resumed>) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] getdents64(4, [pid 6935] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6935] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] close(4 [pid 6935] <... mprotect resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6935] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... umount2 resumed>) = 0 [ 94.294907][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.303385][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 94.311065][ T52] hfsplus: b-tree write err: -5, ino 4 [ 94.317054][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 94.325174][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.332743][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] rmdir("./102/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./102") = 0 [pid 5074] mkdir("./103", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6942 ./strace-static-x86_64: Process 6943 attached [pid 6939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./100/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6939] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... clone resumed>, parent_tid=[6943], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6943 [pid 5080] fstat(4, [pid 5077] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] set_robust_list(0x7fee02e529e0, 24 [pid 6939] <... futex resumed>) = 0 [pid 6935] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./101/bus", [pid 6943] <... set_robust_list resumed>) = 0 [pid 6939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6935] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5077] lstat("./102/bus", [pid 6943] creat("./file1", 000 [pid 6939] <... mmap resumed>) = 0x7fee02e32000 [pid 6935] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6943] <... creat resumed>) = 5 [pid 6939] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] getdents64(4, [pid 5077] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6942 attached [pid 6943] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6939] <... mprotect resumed>) = 0 [pid 6936] <... write resumed>) = 57344 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6942] set_robust_list(0x555556b055e0, 24 [pid 5080] close(4 [pid 6942] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 6942] chdir("./103" [pid 5080] rmdir("./100/bus" [pid 6943] <... futex resumed>) = 1 [pid 6942] <... chdir resumed>) = 0 [pid 6939] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6936] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 94.345017][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.354868][ T6936] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.380708][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6944 attached [pid 6942] <... prctl resumed>) = 0 [pid 6939] <... clone resumed>, parent_tid=[6944], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6944 [pid 6936] <... futex resumed>) = 0 [pid 6935] exit_group(0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 6944] set_robust_list(0x7fee02e529e0, 24 [pid 6943] <... futex resumed>) = ? [pid 6939] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6935] <... exit_group resumed>) = ? [pid 5077] fstat(4, [pid 5075] fstat(4, [pid 6944] <... set_robust_list resumed>) = 0 [pid 6943] +++ exited with 0 +++ [pid 6939] <... futex resumed>) = 0 [pid 6936] +++ exited with 0 +++ [pid 6935] +++ exited with 0 +++ [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6944] creat("./file1", 000 [pid 6939] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6935, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] getdents64(4, [pid 5080] close(3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, [pid 5075] getdents64(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5075] close(4 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] rmdir("./102/bus" [pid 5075] rmdir("./101/bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3 [pid 5076] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5077] rmdir("./102" [pid 5076] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./101" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] mkdir("./103", 0777 [pid 5076] fstat(3, [pid 5075] mkdir("./102", 0777 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... close resumed>) = 0 [pid 5077] close(3 [pid 5076] lstat("./104/binderfs", [pid 5075] close(3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] rmdir("./100" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./104/binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6942] setpgid(0, 0 [pid 5080] mkdir("./101", 0777 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 6945 [pid 5076] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 6946 [pid 5080] <... mkdir resumed>) = 0 [pid 6942] <... setpgid resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6946 attached [pid 6946] set_robust_list(0x555556b055e0, 24) = 0 [pid 6946] chdir("./102") = 0 [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6946] setpgid(0, 0) = 0 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6946] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6945 attached [pid 6946] close(3) = 0 [pid 6945] set_robust_list(0x555556b055e0, 24 [pid 6946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6945] <... set_robust_list resumed>) = 0 [pid 6945] chdir("./103") = 0 [pid 6946] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6945] setpgid(0, 0) = 0 [pid 6945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6946] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6946] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 6942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 6942] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 6946] <... mprotect resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6945] <... openat resumed>) = 3 [pid 6946] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6945] write(3, "1000", 4) = 4 [pid 6945] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 6947 [pid 6942] write(3, "1000", 4 [pid 6945] <... close resumed>) = 0 [pid 6945] symlink("/dev/binderfs", "./binderfs" [pid 6942] <... write resumed>) = 4 [pid 6946] <... clone resumed>, parent_tid=[6948], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6948 [pid 6945] <... symlink resumed>) = 0 [pid 6942] close(3 [pid 6946] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6942] <... close resumed>) = 0 [pid 6946] <... futex resumed>) = 0 [pid 6945] <... futex resumed>) = 0 [pid 6946] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6942] symlink("/dev/binderfs", "./binderfs" [pid 6945] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6945] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6945] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6942] <... symlink resumed>) = 0 [pid 6945] <... clone resumed>, parent_tid=[6949], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6949 [pid 6945] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6948 attached [pid 6948] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6948] memfd_create("syzkaller", 0) = 3 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5076] <... umount2 resumed>) = 0 [pid 6942] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6942] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] lstat("./104/bus", ./strace-static-x86_64: Process 6949 attached [pid 6949] set_robust_list(0x7fee0b1f39e0, 24 [pid 6942] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6949] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6949] memfd_create("syzkaller", 0 [pid 6942] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... openat resumed>) = 4 [pid 6949] <... memfd_create resumed>) = 3 [pid 5076] fstat(4, [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6949] <... mmap resumed>) = 0x7fee02dd3000 [pid 6942] <... clone resumed>, parent_tid=[6950], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6950 [pid 5076] getdents64(4, ./strace-static-x86_64: Process 6947 attached [pid 6949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6942] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6950 attached [pid 6948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6947] set_robust_list(0x555556b055e0, 24 [pid 6942] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6947] <... set_robust_list resumed>) = 0 [pid 6942] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6947] chdir("./101" [pid 5076] <... close resumed>) = 0 [pid 6950] set_robust_list(0x7fee0b1f39e0, 24 [pid 6947] <... chdir resumed>) = 0 [pid 5076] rmdir("./104/bus" [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6950] <... set_robust_list resumed>) = 0 [pid 6947] <... prctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6948] <... write resumed>) = 524288 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6949] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 6948] munmap(0x7fee02dd3000, 524288 [pid 5076] rmdir("./104") = 0 [pid 5076] mkdir("./105", 0777 [pid 6947] setpgid(0, 0 [pid 6948] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6947] <... setpgid resumed>) = 0 [pid 6949] munmap(0x7fee02dd3000, 524288 [pid 6948] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6950] memfd_create("syzkaller", 0 [pid 6949] <... munmap resumed>) = 0 [pid 6948] <... openat resumed>) = 4 [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6949] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6948] ioctl(4, LOOP_SET_FD, 3 [pid 6939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 94.394581][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.402153][ T6940] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.413600][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 6950] <... memfd_create resumed>) = 3 [pid 6949] <... openat resumed>) = 4 [pid 6947] <... openat resumed>) = 3 [pid 6944] <... creat resumed>) = 5 [pid 6940] <... write resumed>) = 57344 [pid 5076] <... openat resumed>) = 3 [pid 6949] ioctl(4, LOOP_SET_FD, 3 [pid 6944] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6948] <... ioctl resumed>) = 0 [pid 6947] write(3, "1000", 4 [pid 6944] <... futex resumed>) = 0 [pid 6940] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6950] <... mmap resumed>) = 0x7fee02dd3000 [pid 6948] close(3 [pid 6947] <... write resumed>) = 4 [pid 6940] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6948] <... close resumed>) = 0 [pid 6947] close(3 [pid 6944] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6940] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] close(3 [pid 6949] <... ioctl resumed>) = 0 [pid 6939] exit_group(0 [pid 6950] <... write resumed>) = 524288 [pid 6948] mkdir("./bus", 0777 [pid 6947] <... close resumed>) = 0 [pid 6944] <... futex resumed>) = ? [pid 6940] <... futex resumed>) = ? [pid 6939] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 6950] munmap(0x7fee02dd3000, 524288 [pid 6948] <... mkdir resumed>) = 0 [pid 6947] symlink("/dev/binderfs", "./binderfs" [pid 6944] +++ exited with 0 +++ [pid 6940] +++ exited with 0 +++ [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6950] <... munmap resumed>) = 0 [pid 6948] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6947] <... symlink resumed>) = 0 [pid 6939] +++ exited with 0 +++ [pid 6950] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6948] <... mount resumed>) = 0 [pid 6947] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 6951 [pid 6950] <... openat resumed>) = 4 [pid 6948] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6947] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6951 attached [pid 6950] ioctl(4, LOOP_SET_FD, 3 [pid 6949] close(3 [pid 6948] <... openat resumed>) = 3 [pid 6947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 6951] set_robust_list(0x555556b055e0, 24 [pid 6949] <... close resumed>) = 0 [pid 6951] <... set_robust_list resumed>) = 0 [pid 6949] mkdir("./bus", 0777 [pid 6951] chdir("./105" [pid 6949] <... mkdir resumed>) = 0 [pid 6951] <... chdir resumed>) = 0 [pid 6949] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6951] setpgid(0, 0) = 0 [pid 6951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6951] write(3, "1000", 4) = 4 [pid 6951] close(3) = 0 [pid 6951] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6951] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6951] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6951] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6951] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6952], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6952 [pid 6951] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6951] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6952 attached [pid 6952] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6952] memfd_create("syzkaller", 0) = 3 [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6947] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] <... restart_syscall resumed>) = 0 [pid 6947] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6947] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6947] <... clone resumed>, parent_tid=[6953], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6953 [pid 5081] getdents64(3, [pid 6947] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6949] <... mount resumed>) = 0 [ 94.452771][ T6948] loop1: detected capacity change from 0 to 1024 [ 94.466040][ T6949] loop3: detected capacity change from 0 to 1024 [ 94.491972][ T6950] loop0: detected capacity change from 0 to 1024 [pid 5081] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6947] <... futex resumed>) = 0 [pid 6949] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6949] <... openat resumed>) = 3 [pid 5081] lstat("./104/binderfs", [pid 6949] chdir("./bus" [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6949] <... chdir resumed>) = 0 [pid 5081] unlink("./104/binderfs" [pid 6949] ioctl(4, LOOP_CLR_FD [pid 5081] <... unlink resumed>) = 0 [pid 6949] <... ioctl resumed>) = 0 [pid 6949] close(4 [pid 5081] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6949] <... close resumed>) = 0 [pid 6948] chdir("./bus" [pid 6949] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6945] <... futex resumed>) = 0 [pid 6945] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6945] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6953 attached [pid 6950] <... ioctl resumed>) = 0 [pid 6949] creat("./bus", 000 [pid 6948] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 6949] <... creat resumed>) = 4 [pid 6949] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] set_robust_list(0x7fee0b1f39e0, 24 [pid 6949] <... futex resumed>) = 1 [pid 6945] <... futex resumed>) = 0 [pid 5081] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6953] <... set_robust_list resumed>) = 0 [pid 6950] close(3 [pid 6949] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6948] ioctl(4, LOOP_CLR_FD [pid 6945] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6949] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6945] <... futex resumed>) = 0 [pid 6949] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6945] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] memfd_create("syzkaller", 0) = 3 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6953] <... mmap resumed>) = 0x7fee02dd3000 [pid 5081] lstat("./104/bus", [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6952] <... write resumed>) = 524288 [pid 6950] <... close resumed>) = 0 [pid 6948] <... ioctl resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6948] close(4) = 0 [pid 5081] getdents64(4, [pid 6948] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6946] <... futex resumed>) = 0 [pid 6946] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6948] <... futex resumed>) = 1 [pid 6946] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 6948] creat("./bus", 000) = 4 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./104/bus" [pid 6948] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [ 94.504365][ T11] hfsplus: b-tree write err: -5, ino 4 [ 94.534519][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6952] munmap(0x7fee02dd3000, 524288 [pid 6948] <... futex resumed>) = 1 [pid 6946] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 6952] <... munmap resumed>) = 0 [pid 6950] mkdir("./bus", 0777 [pid 6948] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6946] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6950] <... mkdir resumed>) = 0 [pid 6946] <... futex resumed>) = 0 [pid 5081] close(3 [pid 6952] <... openat resumed>) = 4 [pid 6950] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6946] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 6953] <... write resumed>) = 524288 [pid 6952] ioctl(4, LOOP_SET_FD, 3 [pid 5081] rmdir("./104") = 0 [pid 6953] munmap(0x7fee02dd3000, 524288 [pid 6952] <... ioctl resumed>) = 0 [pid 6950] <... mount resumed>) = 0 [pid 5081] mkdir("./105", 0777 [pid 6950] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6950] chdir("./bus") = 0 [pid 6950] ioctl(4, LOOP_CLR_FD) = 0 [pid 6950] close(4) = 0 [pid 6950] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] <... futex resumed>) = 0 [pid 6950] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6942] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6942] <... futex resumed>) = 0 [pid 6950] creat("./bus", 000 [pid 6942] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6950] <... creat resumed>) = 4 [pid 6950] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6942] <... futex resumed>) = 0 [pid 6950] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6942] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6942] <... futex resumed>) = 0 [pid 6950] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6942] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... munmap resumed>) = 0 [pid 6952] close(3 [pid 6945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... mkdir resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6952] <... close resumed>) = 0 [pid 6945] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6953] <... openat resumed>) = 4 [pid 6952] mkdir("./bus", 0777 [pid 6945] <... futex resumed>) = 0 [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... openat resumed>) = 3 [ 94.556341][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.559188][ T6952] loop2: detected capacity change from 0 to 1024 [ 94.566772][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.571062][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.585863][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.592699][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6952] <... mkdir resumed>) = 0 [pid 6946] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 6953] <... ioctl resumed>) = 0 [pid 6952] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6946] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6953] close(3 [pid 6946] <... futex resumed>) = 0 [pid 6945] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] close(3 [pid 6942] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6942] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6942] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6942] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6954], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6954 [pid 6942] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 94.601358][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.603597][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.609840][ T6953] loop4: detected capacity change from 0 to 1024 [ 94.620446][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.623653][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.631627][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.637619][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6942] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6953] <... close resumed>) = 0 [pid 6946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6953] mkdir("./bus", 0777 [pid 6952] <... mount resumed>) = 0 [pid 6946] <... mmap resumed>) = 0x7fee02e32000 [pid 6945] <... mprotect resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 6953] <... mkdir resumed>) = 0 [pid 6952] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6946] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6945] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6952] <... openat resumed>) = 3 [pid 6946] <... mprotect resumed>) = 0 [pid 6952] chdir("./bus" [pid 6945] <... clone resumed>, parent_tid=[6955], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6955 [pid 6946] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6952] <... chdir resumed>) = 0 [pid 6945] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6952] ioctl(4, LOOP_CLR_FD [pid 6946] <... clone resumed>, parent_tid=[6957], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6957 [pid 6952] <... ioctl resumed>) = 0 [pid 6946] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6945] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 6956 [pid 6952] close(4 [pid 6946] <... futex resumed>) = 0 [pid 6952] <... close resumed>) = 0 [pid 6946] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... mount resumed>) = 0 [pid 6952] <... futex resumed>) = 1 [pid 6951] <... futex resumed>) = 0 [pid 6953] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6952] creat("./bus", 000 [pid 6951] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... openat resumed>) = 3 [pid 6952] <... creat resumed>) = 4 [pid 6951] <... futex resumed>) = 0 [pid 6953] chdir("./bus" [pid 6952] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... chdir resumed>) = 0 [pid 6951] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6952] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6957 attached ./strace-static-x86_64: Process 6955 attached [pid 6953] ioctl(4, LOOP_CLR_FD [pid 6951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6952] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6954 attached ./strace-static-x86_64: Process 6956 attached [pid 6957] set_robust_list(0x7fee02e529e0, 24 [pid 6955] set_robust_list(0x7fee02e529e0, 24 [pid 6953] <... ioctl resumed>) = 0 [pid 6952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6951] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6957] <... set_robust_list resumed>) = 0 [pid 6956] set_robust_list(0x555556b055e0, 24 [pid 6955] <... set_robust_list resumed>) = 0 [pid 6954] set_robust_list(0x7fee02e529e0, 24 [pid 6953] close(4 [pid 6952] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6951] <... futex resumed>) = 0 [pid 6957] creat("./file1", 000 [pid 6956] <... set_robust_list resumed>) = 0 [pid 6955] creat("./file1", 000 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6951] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6957] <... creat resumed>) = 5 [pid 6956] chdir("./105" [pid 6954] creat("./file1", 000 [pid 6953] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6948] <... write resumed>) = 57344 [pid 6957] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... chdir resumed>) = 0 [pid 6954] <... creat resumed>) = 5 [pid 6953] <... futex resumed>) = 1 [pid 6957] <... futex resumed>) = 1 [pid 6956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6954] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6946] <... futex resumed>) = 0 [pid 6957] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6956] <... prctl resumed>) = 0 [pid 6954] <... futex resumed>) = 1 [pid 6956] setpgid(0, 0 [pid 6954] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6956] <... setpgid resumed>) = 0 [pid 6956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6956] write(3, "1000", 4) = 4 [pid 6956] close(3) = 0 [pid 6956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6956] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6956] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6956] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6958], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6958 [pid 6956] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6942] <... futex resumed>) = 0 [pid 6947] <... futex resumed>) = 0 [pid 6948] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... futex resumed>) = 0 [ 94.651652][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.661711][ T6948] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.681113][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.690961][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6948] <... futex resumed>) = 0 [pid 6947] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6946] exit_group(0 [pid 6957] <... futex resumed>) = ? [pid 6956] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6953] <... futex resumed>) = 0 [pid 6947] <... futex resumed>) = 1 [pid 6946] <... exit_group resumed>) = ? [pid 6957] +++ exited with 0 +++ [pid 6953] creat("./bus", 000 [pid 6948] +++ exited with 0 +++ [pid 6947] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6946] +++ exited with 0 +++ [pid 6953] <... creat resumed>) = 4 [pid 6953] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6947] <... futex resumed>) = 0 [pid 6945] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6953] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6947] <... futex resumed>) = 0 [pid 6953] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6947] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6958 attached [pid 6955] <... creat resumed>) = 5 [pid 6951] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6955] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6951] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6955] <... futex resumed>) = 0 [pid 6951] <... futex resumed>) = 0 [pid 6955] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6951] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6951] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6951] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6959], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6959 [pid 6951] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6951] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6959 attached [pid 6959] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6959] creat("./file1", 000 [pid 6958] set_robust_list(0x7fee0b1f39e0, 24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] <... set_robust_list resumed>) = 0 [pid 6949] <... write resumed>) = 57344 [pid 5075] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6958] memfd_create("syzkaller", 0 [ 94.702350][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.710003][ T6949] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.721251][ T6950] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.728937][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.731740][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.737451][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6949] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6958] <... memfd_create resumed>) = 3 [pid 6949] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6945] exit_group(0 [pid 6955] <... futex resumed>) = ? [pid 6945] <... exit_group resumed>) = ? [pid 6955] +++ exited with 0 +++ [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] fstat(3, [pid 6958] <... mmap resumed>) = 0x7fee02dd3000 [pid 6949] +++ exited with 0 +++ [pid 6945] +++ exited with 0 +++ [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6950] <... write resumed>) = 57344 [pid 6950] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6950] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6947] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6947] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6951] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6947] <... mmap resumed>) = 0x7fee02e32000 [pid 6951] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 6947] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6951] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6947] <... mprotect resumed>) = 0 [pid 6947] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(3, [pid 6947] <... clone resumed>, parent_tid=[6960], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6960 [pid 6947] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6947] <... futex resumed>) = 0 [pid 6947] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6960 attached [pid 6960] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6960] creat("./file1", 000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6945, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6942] exit_group(0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6942] <... exit_group resumed>) = ? [pid 5075] lstat("./102/binderfs", [pid 5077] <... restart_syscall resumed>) = 0 [pid 6954] <... futex resumed>) = ? [pid 6950] <... futex resumed>) = ? [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6954] +++ exited with 0 +++ [pid 6950] +++ exited with 0 +++ [pid 6942] +++ exited with 0 +++ [pid 5075] unlink("./102/binderfs" [pid 5077] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6942, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5074] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] lstat("./103/binderfs", [pid 5074] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] unlink("./103/binderfs" [pid 5074] lstat("./103/binderfs", [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 94.753856][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.755426][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.764145][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.776325][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.778288][ T6952] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.785125][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] unlink("./103/binderfs") = 0 [pid 5074] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6960] <... creat resumed>) = 5 [pid 6960] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6947] <... futex resumed>) = 0 [pid 6960] <... futex resumed>) = 1 [pid 6960] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6958] <... write resumed>) = 524288 [pid 6958] munmap(0x7fee02dd3000, 524288 [pid 6959] <... creat resumed>) = 5 [pid 6958] <... munmap resumed>) = 0 [pid 6952] <... write resumed>) = 57344 [pid 5075] <... umount2 resumed>) = 0 [pid 6959] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6958] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6952] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6959] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6958] <... openat resumed>) = 4 [pid 6952] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 6951] exit_group(0 [pid 5075] lstat("./102/bus", [pid 6959] <... futex resumed>) = ? [pid 6951] <... exit_group resumed>) = ? [pid 6959] +++ exited with 0 +++ [pid 6952] <... futex resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 6958] <... ioctl resumed>) = 0 [pid 6952] +++ exited with 0 +++ [pid 6951] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6958] close(3 [pid 5077] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6951, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6958] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6953] <... write resumed>) = 57344 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] mkdir("./bus", 0777 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./103/bus" [pid 6958] <... mkdir resumed>) = 0 [pid 6953] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] lstat("./103/bus", [pid 5076] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 6947] exit_group(0 [pid 6960] <... futex resumed>) = ? [pid 6958] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6953] <... futex resumed>) = ? [pid 6947] <... exit_group resumed>) = ? [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 6960] +++ exited with 0 +++ [pid 6958] <... mount resumed>) = 0 [pid 6953] +++ exited with 0 +++ [pid 6947] +++ exited with 0 +++ [pid 5077] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] fstat(4, [pid 5074] getdents64(3, [pid 6958] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] <... openat resumed>) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6947, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5077] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6958] chdir("./bus" [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... openat resumed>) = 4 [pid 5076] fstat(3, [pid 5075] getdents64(4, [pid 6958] <... chdir resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] fstat(4, [pid 5074] close(3 [pid 6958] ioctl(4, LOOP_CLR_FD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6958] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6958] close(4 [pid 5080] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./103" [pid 6958] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5076] getdents64(3, [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 6958] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./104", 0777 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6958] <... futex resumed>) = 1 [pid 6956] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5076] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 6958] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6956] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6956] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5076] lstat("./105/binderfs", [pid 5075] rmdir("./102/bus" [pid 5074] <... openat resumed>) = 3 [pid 6958] creat("./bus", 000 [pid 6956] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6958] <... creat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] rmdir("./103/bus" [pid 5076] unlink("./105/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6958] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6958] <... futex resumed>) = 1 [pid 6956] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6958] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6956] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./101/binderfs", [pid 5077] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5075] getdents64(3, [ 94.812670][ T11] hfsplus: b-tree write err: -5, ino 4 [ 94.820583][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.828173][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 94.830476][ T6953] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.834902][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 94.849999][ T6958] loop5: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6956] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6958] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6956] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] unlink("./101/binderfs" [pid 5077] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 6961 [pid 5075] close(3./strace-static-x86_64: Process 6961 attached [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6961] set_robust_list(0x555556b055e0, 24 [pid 5077] rmdir("./103" [pid 5075] rmdir("./102" [pid 6961] <... set_robust_list resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6961] chdir("./104" [pid 5077] mkdir("./104", 0777 [pid 5075] mkdir("./103", 0777 [pid 6961] <... chdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... unlink resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6961] <... prctl resumed>) = 0 [pid 5080] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6961] setpgid(0, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6961] <... setpgid resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5075] close(3 [pid 6961] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6961] write(3, "1000", 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6961] <... write resumed>) = 4 [pid 6961] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 6962 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 6963 [pid 6961] <... close resumed>) = 0 [pid 6961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6961] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6961] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6961] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6964], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6964 [pid 6961] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6961] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6962 attached [pid 6962] set_robust_list(0x555556b055e0, 24 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6962] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6963 attached [pid 6962] chdir("./104" [ 94.896437][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.904905][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 94.921948][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5076] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6962] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6964 attached [pid 6962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6964] set_robust_list(0x7fee0b1f39e0, 24 [pid 6962] <... prctl resumed>) = 0 [pid 6964] <... set_robust_list resumed>) = 0 [pid 6962] setpgid(0, 0 [pid 6964] memfd_create("syzkaller", 0 [pid 6962] <... setpgid resumed>) = 0 [pid 6964] <... memfd_create resumed>) = 3 [pid 6962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6962] <... openat resumed>) = 3 [pid 6964] <... mmap resumed>) = 0x7fee02dd3000 [pid 6962] write(3, "1000", 4 [pid 6964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6962] <... write resumed>) = 4 [pid 6962] close(3 [pid 6956] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6962] <... close resumed>) = 0 [pid 6956] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 6962] symlink("/dev/binderfs", "./binderfs" [pid 6956] <... futex resumed>) = 0 [pid 5076] fstat(4, [pid 6963] set_robust_list(0x555556b055e0, 24 [pid 6962] <... symlink resumed>) = 0 [pid 6956] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6962] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6956] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6962] <... futex resumed>) = 0 [pid 6962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6962] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6962] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6963] chdir("./103" [pid 6962] <... clone resumed>, parent_tid=[6965], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6965 [pid 5076] getdents64(4, [pid 6962] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6962] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6963] <... chdir resumed>) = 0 [pid 6956] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6956] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 6963] <... prctl resumed>) = 0 [pid 6956] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 6964] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6965 attached [pid 6965] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6965] memfd_create("syzkaller", 0 [pid 6964] munmap(0x7fee02dd3000, 524288) = 0 [pid 6963] setpgid(0, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6965] <... memfd_create resumed>) = 3 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6964] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6963] <... setpgid resumed>) = 0 [pid 5080] lstat("./101/bus", [pid 6956] <... clone resumed>, parent_tid=[6966], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6966 [pid 5076] close(4./strace-static-x86_64: Process 6966 attached [pid 6964] <... openat resumed>) = 4 [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6956] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 6966] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6964] ioctl(4, LOOP_SET_FD, 3 [pid 6963] <... openat resumed>) = 3 [pid 6956] <... futex resumed>) = 0 [pid 5080] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./105/bus" [pid 6966] creat("./file1", 000 [pid 6963] write(3, "1000", 4 [pid 6956] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 94.947675][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.966296][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.974341][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 94.988548][ T6964] loop0: detected capacity change from 0 to 1024 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6965] munmap(0x7fee02dd3000, 524288) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6965] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... rmdir resumed>) = 0 [pid 6963] <... write resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 6966] <... creat resumed>) = 5 [pid 6964] <... ioctl resumed>) = 0 [pid 6963] close(3 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6966] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5076] close(3 [pid 6966] <... futex resumed>) = 1 [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6956] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 6966] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6963] <... symlink resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] rmdir("./105" [pid 6963] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... rmdir resumed>) = 0 [pid 6963] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] mkdir("./106", 0777 [pid 6963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6963] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6963] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6963] <... mprotect resumed>) = 0 [pid 5080] rmdir("./101/bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6963] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6958] <... write resumed>) = 57344 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6967 attached [pid 6965] <... ioctl resumed>) = 0 [pid 6964] close(3 [pid 6958] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5076] close(3 [pid 6967] set_robust_list(0x7fee0b1f39e0, 24 [pid 6963] <... clone resumed>, parent_tid=[6967], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6967 [pid 6958] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 6963] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6963] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 6963] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6956] exit_group(0 [pid 5080] rmdir("./101" [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 6968 [pid 6967] <... set_robust_list resumed>) = 0 [pid 6966] <... futex resumed>) = ? [pid 6956] <... exit_group resumed>) = ? [pid 5080] <... rmdir resumed>) = 0 [pid 6967] memfd_create("syzkaller", 0 [pid 6966] +++ exited with 0 +++ [pid 6958] +++ exited with 0 +++ [pid 6956] +++ exited with 0 +++ [pid 5080] mkdir("./102", 0777 [pid 6967] <... memfd_create resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6956, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... openat resumed>) = 3 [pid 6967] <... mmap resumed>) = 0x7fee02dd3000 [pid 5081] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 5081] fstat(3, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 6969 [pid 6967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./105/binderfs") = 0 [pid 5081] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x555556b055e0, 24) = 0 [pid 6968] chdir("./106") = 0 [pid 6968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6968] setpgid(0, 0) = 0 [pid 6968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6968] write(3, "1000", 4./strace-static-x86_64: Process 6969 attached ) = 4 [pid 6969] set_robust_list(0x555556b055e0, 24 [pid 6968] close(3 [pid 6969] <... set_robust_list resumed>) = 0 [pid 6968] <... close resumed>) = 0 [pid 6969] chdir("./102" [pid 6968] symlink("/dev/binderfs", "./binderfs" [pid 6969] <... chdir resumed>) = 0 [pid 6968] <... symlink resumed>) = 0 [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6968] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] <... prctl resumed>) = 0 [pid 6968] <... futex resumed>) = 0 [pid 6969] setpgid(0, 0 [pid 6968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6969] <... setpgid resumed>) = 0 [pid 6968] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6968] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6969] <... openat resumed>) = 3 [pid 6968] <... mprotect resumed>) = 0 [pid 6969] write(3, "1000", 4 [pid 6968] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6969] <... write resumed>) = 4 [pid 6969] close(3 [pid 6968] <... clone resumed>, parent_tid=[6970], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6970 [pid 6967] <... write resumed>) = 524288 [pid 6969] <... close resumed>) = 0 [pid 6968] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] symlink("/dev/binderfs", "./binderfs" [pid 6968] <... futex resumed>) = 0 [pid 6969] <... symlink resumed>) = 0 [pid 6968] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6969] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6969] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6969] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6971], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6971 [pid 6969] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6969] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6970 attached [pid 6970] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6970] memfd_create("syzkaller", 0) = 3 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6967] munmap(0x7fee02dd3000, 524288 [pid 6965] close(3 [pid 6964] <... close resumed>) = 0 [pid 6967] <... munmap resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] mkdir("./bus", 0777 [pid 6965] mkdir("./bus", 0777 [pid 6967] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6964] <... mkdir resumed>) = 0 [pid 6965] <... mkdir resumed>) = 0 [pid 6967] <... openat resumed>) = 4 [pid 6967] ioctl(4, LOOP_SET_FD, 3 [pid 6965] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [ 94.989207][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.004292][ T6958] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.005226][ T6965] loop3: detected capacity change from 0 to 1024 [ 95.032883][ T6820] hfsplus: b-tree write err: -5, ino 4 [pid 6964] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6971 attached [pid 6971] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6971] memfd_create("syzkaller", 0) = 3 [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 6970] <... write resumed>) = 524288 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6965] <... mount resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 6964] <... mount resumed>) = 0 [pid 5081] fstat(4, [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6964] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 6965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6964] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6971] <... write resumed>) = 524288 [pid 6970] munmap(0x7fee02dd3000, 524288 [pid 5081] close(4 [pid 6970] <... munmap resumed>) = 0 [pid 6965] <... openat resumed>) = 3 [pid 6964] chdir("./bus" [pid 5081] <... close resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] rmdir("./105/bus" [pid 6970] <... openat resumed>) = 4 [pid 6965] chdir("./bus" [pid 6964] <... chdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 6970] ioctl(4, LOOP_SET_FD, 3 [pid 5081] getdents64(3, [pid 6967] <... ioctl resumed>) = 0 [pid 6965] <... chdir resumed>) = 0 [pid 6964] ioctl(4, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 6967] close(3 [pid 6965] ioctl(4, LOOP_CLR_FD [pid 6964] <... ioctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./105" [pid 6965] <... ioctl resumed>) = 0 [pid 6971] munmap(0x7fee02dd3000, 524288 [pid 6967] <... close resumed>) = 0 [pid 6964] close(4 [pid 6970] <... ioctl resumed>) = 0 [pid 6967] mkdir("./bus", 0777 [pid 6965] close(4 [pid 6964] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./106", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 6972 ./strace-static-x86_64: Process 6972 attached [pid 6972] set_robust_list(0x555556b055e0, 24) = 0 [pid 6972] chdir("./106") = 0 [pid 6972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6972] setpgid(0, 0) = 0 [pid 6972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6972] write(3, "1000", 4) = 4 [pid 6972] close(3) = 0 [pid 6972] symlink("/dev/binderfs", "./binderfs" [pid 6967] <... mkdir resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6965] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 1 [pid 6961] <... futex resumed>) = 0 [pid 6972] <... symlink resumed>) = 0 [pid 6971] <... munmap resumed>) = 0 [pid 6967] <... mount resumed>) = 0 [pid 6965] <... futex resumed>) = 1 [pid 6964] creat("./bus", 000 [pid 6962] <... futex resumed>) = 0 [pid 6961] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6965] creat("./bus", 000 [pid 6962] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] <... futex resumed>) = 0 [pid 6972] <... futex resumed>) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6967] <... openat resumed>) = 3 [pid 6964] <... creat resumed>) = 4 [pid 6962] <... futex resumed>) = 0 [pid 6961] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6972] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6971] <... openat resumed>) = 4 [pid 6967] chdir("./bus" [pid 6965] <... creat resumed>) = 4 [pid 6964] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6972] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6971] ioctl(4, LOOP_SET_FD, 3 [pid 6970] close(3 [ 95.052060][ T6967] loop1: detected capacity change from 0 to 1024 [ 95.073402][ T6970] loop2: detected capacity change from 0 to 1024 [pid 6967] <... chdir resumed>) = 0 [pid 6972] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6967] ioctl(4, LOOP_CLR_FD [pid 6965] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6964] <... futex resumed>) = 0 [pid 6962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6961] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] <... mprotect resumed>) = 0 [pid 6967] <... ioctl resumed>) = 0 [pid 6972] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6967] close(4) = 0 [pid 6972] <... clone resumed>, parent_tid=[6973], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6973 [pid 6967] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6972] <... futex resumed>) = 0 [pid 6967] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6963] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6972] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6963] <... futex resumed>) = 0 [pid 6967] creat("./bus", 000 [pid 6963] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6967] <... creat resumed>) = 4 [pid 6967] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6963] <... futex resumed>) = 0 [pid 6967] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6963] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6963] <... futex resumed>) = 0 [pid 6967] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6963] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... ioctl resumed>) = 0 [pid 6970] <... close resumed>) = 0 [pid 6965] <... futex resumed>) = 0 [pid 6964] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6962] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] <... futex resumed>) = 0 [pid 6971] close(3 [pid 6970] mkdir("./bus", 0777 [pid 6965] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6962] <... futex resumed>) = 0 [pid 6961] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6971] <... close resumed>) = 0 [pid 6962] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6973 attached [pid 6970] <... mkdir resumed>) = 0 [pid 6971] mkdir("./bus", 0777 [pid 6973] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6973] memfd_create("syzkaller", 0 [pid 6971] <... mkdir resumed>) = 0 [pid 6973] <... memfd_create resumed>) = 3 [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6971] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6970] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6973] <... mmap resumed>) = 0x7fee02dd3000 [pid 6973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6970] <... mount resumed>) = 0 [pid 6971] <... mount resumed>) = 0 [pid 6971] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6970] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6971] <... openat resumed>) = 3 [pid 6970] <... openat resumed>) = 3 [pid 6971] chdir("./bus" [pid 6970] chdir("./bus" [pid 6973] <... write resumed>) = 524288 [pid 6970] <... chdir resumed>) = 0 [pid 6971] <... chdir resumed>) = 0 [ 95.106614][ T6971] loop4: detected capacity change from 0 to 1024 [ 95.112627][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.129542][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.130460][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.139301][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6973] munmap(0x7fee02dd3000, 524288) = 0 [pid 6971] ioctl(4, LOOP_CLR_FD [pid 6970] ioctl(4, LOOP_CLR_FD [pid 6973] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6973] ioctl(4, LOOP_SET_FD, 3 [pid 6971] <... ioctl resumed>) = 0 [pid 6970] <... ioctl resumed>) = 0 [pid 6963] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6963] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6963] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6963] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6974], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6974 [pid 6963] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6974 attached [pid 6974] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6974] creat("./file1", 000) = 5 [pid 6974] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6963] <... futex resumed>) = 0 [pid 6974] <... futex resumed>) = 1 [pid 6974] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6971] close(4 [pid 6970] close(4 [pid 6962] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6973] <... ioctl resumed>) = 0 [pid 6973] close(3) = 0 [pid 6973] mkdir("./bus", 0777) = 0 [pid 6973] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6971] <... close resumed>) = 0 [pid 6970] <... close resumed>) = 0 [pid 6962] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] <... futex resumed>) = 0 [pid 6961] <... futex resumed>) = 0 [pid 6962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6962] <... mmap resumed>) = 0x7fee02e32000 [pid 6961] <... mmap resumed>) = 0x7fee02e32000 [pid 6962] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6961] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6962] <... mprotect resumed>) = 0 [pid 6961] <... mprotect resumed>) = 0 [pid 6962] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6961] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6962] <... clone resumed>, parent_tid=[6975], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6975 [pid 6961] <... clone resumed>, parent_tid=[6976], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6976 [pid 6962] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6961] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] <... futex resumed>) = 0 [pid 6961] <... futex resumed>) = 0 [pid 6962] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6961] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6976 attached [pid 6976] set_robust_list(0x7fee02e529e0, 24) = 0 [ 95.160870][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.165672][ T6973] loop5: detected capacity change from 0 to 1024 [ 95.169142][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.181316][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.182604][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.194090][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6976] creat("./file1", 000 [pid 6971] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6975 attached [pid 6971] <... futex resumed>) = 1 [pid 6970] <... futex resumed>) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6975] set_robust_list(0x7fee02e529e0, 24 [pid 6971] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6969] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] <... futex resumed>) = 0 [pid 6969] <... futex resumed>) = 0 [pid 6968] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] <... futex resumed>) = 0 [pid 6968] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6975] <... set_robust_list resumed>) = 0 [pid 6971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6975] creat("./file1", 000 [pid 6971] creat("./bus", 000 [pid 6970] creat("./bus", 000 [pid 6973] <... mount resumed>) = 0 [pid 6976] <... creat resumed>) = 5 [pid 6976] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6971] <... creat resumed>) = 4 [pid 6961] <... futex resumed>) = 0 [pid 6976] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] <... creat resumed>) = 4 [pid 6970] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6971] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] <... openat resumed>) = 3 [pid 6970] <... futex resumed>) = 1 [pid 6968] <... futex resumed>) = 0 [pid 6973] chdir("./bus" [pid 6971] <... futex resumed>) = 1 [pid 6970] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6969] <... futex resumed>) = 0 [ 95.214179][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.215041][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.229868][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.234895][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.241744][ T6967] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6968] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] <... chdir resumed>) = 0 [pid 6971] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6969] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] <... futex resumed>) = 0 [pid 6962] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6969] <... futex resumed>) = 0 [pid 6968] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6973] ioctl(4, LOOP_CLR_FD [pid 6969] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6973] <... ioctl resumed>) = 0 [pid 6967] <... write resumed>) = 57344 [pid 6967] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6963] exit_group(0 [pid 6974] <... futex resumed>) = ? [pid 6963] <... exit_group resumed>) = ? [pid 6974] +++ exited with 0 +++ [pid 6967] +++ exited with 0 +++ [pid 6963] +++ exited with 0 +++ [pid 6973] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6963, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6973] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./103/binderfs", [pid 6975] <... creat resumed>) = 5 [pid 6973] <... futex resumed>) = 1 [pid 6972] <... futex resumed>) = 0 [ 95.259614][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.270275][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.278039][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.288015][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.292112][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.304811][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6975] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6972] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./103/binderfs" [pid 6972] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6972] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6975] <... futex resumed>) = 0 [pid 6973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6969] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6968] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6975] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6973] creat("./bus", 000 [pid 6969] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6968] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6973] <... creat resumed>) = 4 [pid 6969] <... futex resumed>) = 0 [pid 6968] <... futex resumed>) = 0 [pid 6973] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6973] <... futex resumed>) = 1 [pid 6972] <... futex resumed>) = 0 [pid 6969] <... mmap resumed>) = 0x7fee02e32000 [pid 6973] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6972] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6968] <... mmap resumed>) = 0x7fee02e32000 [pid 6972] <... futex resumed>) = 0 [pid 6973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6972] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6968] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6973] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6969] <... mprotect resumed>) = 0 [pid 6968] <... mprotect resumed>) = 0 [pid 6969] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 95.312191][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.312574][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.320628][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.332761][ T6964] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.333213][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.349366][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.357619][ T6965] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6968] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6977], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6977 [pid 6968] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6968] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6969] <... clone resumed>, parent_tid=[6978], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6978 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6977 attached [pid 5075] lstat("./103/bus", [pid 6977] set_robust_list(0x7fee02e529e0, 24 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6977] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6977] creat("./file1", 000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 6969] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(4 [pid 6969] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 6978 attached [pid 6969] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] rmdir("./103/bus" [pid 6964] <... write resumed>) = 57344 [pid 5075] <... rmdir resumed>) = 0 [pid 6964] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 6978] set_robust_list(0x7fee02e529e0, 24 [pid 6964] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6978] <... set_robust_list resumed>) = 0 [pid 6964] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6961] exit_group(0 [pid 5075] close(3 [pid 6976] <... futex resumed>) = ? [pid 6964] <... futex resumed>) = ? [pid 6961] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 6976] +++ exited with 0 +++ [pid 6964] +++ exited with 0 +++ [pid 6961] +++ exited with 0 +++ [pid 5075] rmdir("./103") = 0 [pid 5075] mkdir("./104", 0777 [pid 6972] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... mkdir resumed>) = 0 [pid 6972] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6972] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6972] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6972] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6972] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] close(3 [pid 6972] <... mprotect resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6972] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6978] creat("./file1", 000 [pid 6972] <... clone resumed>, parent_tid=[6979], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6979 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 6980 [pid 6972] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6972] <... futex resumed>) = 0 [ 95.368809][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.378298][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.387850][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.395766][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.403371][ T6971] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.411561][ T6970] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6972] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6965] <... write resumed>) = 57344 [pid 5074] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6968] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6965] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6962] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] <... creat resumed>) = 5 [pid 6975] <... futex resumed>) = ? [pid 6965] <... futex resumed>) = ? [pid 6962] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6978] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6975] +++ exited with 0 +++ ./strace-static-x86_64: Process 6980 attached [pid 6980] set_robust_list(0x555556b055e0, 24) = 0 ./strace-static-x86_64: Process 6979 attached [pid 6980] chdir("./104" [pid 6978] <... futex resumed>) = 1 [pid 6969] <... futex resumed>) = 0 [pid 6965] +++ exited with 0 +++ [pid 6962] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 6980] <... chdir resumed>) = 0 [pid 6979] set_robust_list(0x7fee02e529e0, 24 [pid 6978] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6977] <... creat resumed>) = 5 [pid 6971] <... write resumed>) = 57344 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6962, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] fstat(3, [pid 6980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6979] <... set_robust_list resumed>) = 0 [pid 6977] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6971] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6970] <... write resumed>) = 57344 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6980] <... prctl resumed>) = 0 [pid 6979] creat("./file1", 000 [pid 6977] <... futex resumed>) = 0 [pid 6980] setpgid(0, 0 [pid 6977] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6971] <... futex resumed>) = 0 [pid 5077] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6980] <... setpgid resumed>) = 0 [pid 6971] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6970] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6969] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6978] <... futex resumed>) = ? [pid 6971] <... futex resumed>) = ? [pid 6970] <... futex resumed>) = 0 [pid 6969] <... exit_group resumed>) = ? [pid 5077] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6980] <... openat resumed>) = 3 [pid 6968] exit_group(0 [pid 5077] <... openat resumed>) = 3 [pid 6980] write(3, "1000", 4 [pid 6977] <... futex resumed>) = ? [pid 6968] <... exit_group resumed>) = ? [pid 5077] fstat(3, [pid 6980] <... write resumed>) = 4 [pid 6977] +++ exited with 0 +++ [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6980] close(3 [pid 5077] getdents64(3, [pid 6980] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6980] symlink("/dev/binderfs", "./binderfs" [pid 5077] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6980] <... symlink resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] lstat("./104/binderfs", [pid 6980] <... futex resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] unlink("./104/binderfs" [pid 6980] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... unlink resumed>) = 0 [pid 6980] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6978] +++ exited with 0 +++ [pid 6971] +++ exited with 0 +++ [pid 5077] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6980] <... mprotect resumed>) = 0 [pid 6970] +++ exited with 0 +++ [pid 6969] +++ exited with 0 +++ [pid 6968] +++ exited with 0 +++ [pid 5074] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6980] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6969, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6968, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6980] <... clone resumed>, parent_tid=[6981], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6981 [pid 6980] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6980] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6981 attached [pid 5080] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] set_robust_list(0x7fee0b1f39e0, 24 [pid 6979] <... creat resumed>) = 5 [pid 5080] fstat(3, [pid 5076] fstat(3, [pid 6981] <... set_robust_list resumed>) = 0 [pid 6979] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./104/binderfs", [pid 6981] memfd_create("syzkaller", 0 [pid 6979] <... futex resumed>) = 1 [pid 6973] <... write resumed>) = 57344 [pid 6972] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6981] <... memfd_create resumed>) = 3 [pid 6973] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] unlink("./104/binderfs" [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6973] <... futex resumed>) = 0 [pid 6972] exit_group(0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... unlink resumed>) = 0 [pid 6981] <... mmap resumed>) = 0x7fee02dd3000 [pid 6973] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6973] <... futex resumed>) = ? [pid 6972] <... exit_group resumed>) = ? [pid 5080] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] <... write resumed>) = 524288 [pid 6973] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./102/binderfs", [pid 5076] lstat("./106/binderfs", [pid 6981] munmap(0x7fee02dd3000, 524288 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./102/binderfs" [pid 6981] <... munmap resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5077] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./106/binderfs" [pid 5080] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 6981] <... openat resumed>) = 4 [ 95.420683][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.432562][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.442833][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.451814][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 95.452870][ T6973] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] lstat("./104/bus", [pid 5076] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6981] ioctl(4, LOOP_SET_FD, 3 [pid 6979] +++ exited with 0 +++ [pid 6972] +++ exited with 0 +++ [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./104/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./104") = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6972, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./105", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5081] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, [pid 5074] close(3 [pid 6981] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6981] close(3 [pid 5081] fstat(3, [pid 5080] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5076] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6981] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6981] mkdir("./bus", 0777 [pid 5081] getdents64(3, [pid 5080] lstat("./102/bus", [pid 5077] getdents64(4, [pid 5076] lstat("./106/bus", ./strace-static-x86_64: Process 6982 attached [pid 6981] <... mkdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6982] set_robust_list(0x555556b055e0, 24 [pid 5081] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(4 [pid 5076] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 6982 [pid 6982] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6982] chdir("./105" [pid 6981] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] lstat("./106/binderfs", [pid 5080] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] rmdir("./104/bus" [pid 5076] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6982] <... chdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... openat resumed>) = 4 [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] unlink("./106/binderfs" [pid 5080] fstat(4, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6982] <... prctl resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5076] fstat(4, [pid 5077] getdents64(3, [pid 5081] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6982] setpgid(0, 0 [pid 5080] getdents64(4, [pid 6982] <... setpgid resumed>) = 0 [pid 5077] close(3 [ 95.486923][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 95.486923][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.502944][ T6981] loop1: detected capacity change from 0 to 1024 [ 95.510367][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5076] getdents64(4, [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6982] write(3, "1000", 4) = 4 [pid 6982] close(3) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6982] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6982] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6982] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6983], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6983 [pid 6982] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6982] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 5077] rmdir("./104" [pid 5076] getdents64(4, [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6983 attached [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4 [pid 5077] mkdir("./105", 0777 [pid 5076] close(4 [pid 5080] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6983] set_robust_list(0x7fee0b1f39e0, 24 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] rmdir("./106/bus" [pid 5080] rmdir("./102/bus" [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6983] <... set_robust_list resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 6981] <... mount resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6983] memfd_create("syzkaller", 0 [pid 6981] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... umount2 resumed>) = 0 [pid 5080] close(3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 6981] <... openat resumed>) = 3 [pid 5081] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 [pid 6981] chdir("./bus" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] rmdir("./102" [pid 5077] <... close resumed>) = 0 [pid 5076] rmdir("./106" [pid 6981] <... chdir resumed>) = 0 [pid 5081] lstat("./106/bus", [pid 5080] <... rmdir resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... rmdir resumed>) = 0 [pid 6981] ioctl(4, LOOP_CLR_FD [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] mkdir("./103", 0777 [pid 5076] mkdir("./107", 0777 [pid 6981] <... ioctl resumed>) = 0 [pid 5081] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 6984 [pid 5076] <... mkdir resumed>) = 0 [pid 6981] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6981] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6983] <... memfd_create resumed>) = 3 [pid 6981] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] <... futex resumed>) = 1 [pid 6980] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6983] <... mmap resumed>) = 0x7fee02dd3000 [pid 6981] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6980] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(3 [pid 5076] close(3 [pid 6981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6980] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6981] creat("./bus", 000 [pid 6980] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6981] <... creat resumed>) = 4 [pid 5081] getdents64(4, [pid 6981] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 6985 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 6986 [pid 6981] <... futex resumed>) = 1 [pid 6980] <... futex resumed>) = 0 [pid 5081] close(4 [pid 6981] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6980] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 6981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6980] <... futex resumed>) = 0 [pid 5081] rmdir("./106/bus" [pid 6981] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6980] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6986 attached ./strace-static-x86_64: Process 6984 attached [pid 6983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6986] set_robust_list(0x555556b055e0, 24 [pid 6984] set_robust_list(0x555556b055e0, 24 [pid 5081] close(3) = 0 [pid 5081] rmdir("./106") = 0 [pid 5081] mkdir("./107", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 6983] <... write resumed>) = 524288 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6986] <... set_robust_list resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 6984] chdir("./105" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6986] chdir("./107" [pid 6984] <... chdir resumed>) = 0 [pid 6983] munmap(0x7fee02dd3000, 524288 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 6987 ./strace-static-x86_64: Process 6985 attached [pid 6986] <... chdir resumed>) = 0 [ 95.548939][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.588495][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6983] <... munmap resumed>) = 0 [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6985] set_robust_list(0x555556b055e0, 24 [pid 6984] <... prctl resumed>) = 0 [pid 6986] <... prctl resumed>) = 0 [pid 6985] <... set_robust_list resumed>) = 0 [pid 6984] setpgid(0, 0 [pid 6983] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6986] setpgid(0, 0 [pid 6985] chdir("./103" [pid 6984] <... setpgid resumed>) = 0 [pid 6983] <... openat resumed>) = 4 [pid 6986] <... setpgid resumed>) = 0 [pid 6985] <... chdir resumed>) = 0 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6985] <... prctl resumed>) = 0 [pid 6983] ioctl(4, LOOP_SET_FD, 3 [pid 6986] <... openat resumed>) = 3 [pid 6985] setpgid(0, 0 [pid 6984] <... openat resumed>) = 3 [pid 6985] <... setpgid resumed>) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6985] write(3, "1000", 4) = 4 [pid 6985] close(3) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6985] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6985] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6988], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6988 [pid 6985] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6988 attached [pid 6988] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6988] memfd_create("syzkaller", 0) = 3 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6986] write(3, "1000", 4 [pid 6984] write(3, "1000", 4 [pid 6986] <... write resumed>) = 4 [pid 6984] <... write resumed>) = 4 [pid 6986] close(3 [pid 6984] close(3 [pid 6986] <... close resumed>) = 0 [pid 6986] symlink("/dev/binderfs", "./binderfs" [pid 6984] <... close resumed>) = 0 [pid 6988] <... mmap resumed>) = 0x7fee02dd3000 [pid 6984] symlink("/dev/binderfs", "./binderfs" [pid 6986] <... symlink resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6984] <... symlink resumed>) = 0 [pid 6986] <... futex resumed>) = 0 [pid 6984] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6984] <... futex resumed>) = 0 [pid 6986] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6986] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6984] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6986] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6984] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6989 attached ./strace-static-x86_64: Process 6987 attached [pid 6988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6984] <... mprotect resumed>) = 0 [pid 6983] <... ioctl resumed>) = 0 [pid 6989] set_robust_list(0x7fee0b1f39e0, 24 [pid 6988] <... write resumed>) = 524288 [pid 6987] set_robust_list(0x555556b055e0, 24 [pid 6986] <... clone resumed>, parent_tid=[6989], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6989 [pid 6984] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6983] close(3 [pid 6989] <... set_robust_list resumed>) = 0 [pid 6987] <... set_robust_list resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6983] <... close resumed>) = 0 [pid 6989] memfd_create("syzkaller", 0 [pid 6987] chdir("./107" [pid 6986] <... futex resumed>) = 0 [pid 6984] <... clone resumed>, parent_tid=[6990], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6990 [pid 6983] mkdir("./bus", 0777 [pid 6989] <... memfd_create resumed>) = 3 [pid 6987] <... chdir resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6984] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6983] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6990 attached [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6984] <... futex resumed>) = 0 [pid 6983] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6980] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6990] set_robust_list(0x7fee0b1f39e0, 24 [pid 6989] <... mmap resumed>) = 0x7fee02dd3000 [ 95.602930][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.613920][ T6983] loop0: detected capacity change from 0 to 1024 [ 95.626368][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.639302][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6988] munmap(0x7fee02dd3000, 524288 [pid 6987] <... prctl resumed>) = 0 [pid 6984] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6988] <... munmap resumed>) = 0 [pid 6987] setpgid(0, 0 [pid 6990] <... set_robust_list resumed>) = 0 [pid 6989] <... write resumed>) = 524288 [pid 6988] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6987] <... setpgid resumed>) = 0 [pid 6983] <... mount resumed>) = 0 [pid 6980] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] munmap(0x7fee02dd3000, 524288 [pid 6988] <... openat resumed>) = 4 [pid 6987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6983] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6989] <... munmap resumed>) = 0 [pid 6988] ioctl(4, LOOP_SET_FD, 3 [pid 6987] <... openat resumed>) = 3 [pid 6983] <... openat resumed>) = 3 [pid 6990] memfd_create("syzkaller", 0 [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6987] write(3, "1000", 4 [pid 6980] <... futex resumed>) = 0 [pid 6990] <... memfd_create resumed>) = 3 [pid 6980] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6980] <... mmap resumed>) = 0x7fee02e32000 [pid 6990] <... mmap resumed>) = 0x7fee02dd3000 [pid 6980] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6980] <... mprotect resumed>) = 0 [pid 6990] <... write resumed>) = 524288 [pid 6989] <... openat resumed>) = 4 [pid 6988] <... ioctl resumed>) = 0 [pid 6987] <... write resumed>) = 4 [pid 6983] chdir("./bus" [pid 6981] <... write resumed>) = 57344 [pid 6980] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6991 attached [pid 6990] munmap(0x7fee02dd3000, 524288 [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 6988] close(3 [pid 6987] close(3 [pid 6983] <... chdir resumed>) = 0 [pid 6981] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6991] set_robust_list(0x7fee02e529e0, 24 [pid 6990] <... munmap resumed>) = 0 [pid 6981] <... futex resumed>) = 0 [pid 6980] <... clone resumed>, parent_tid=[6991], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6991 [pid 6990] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6981] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6980] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6990] <... openat resumed>) = 4 [pid 6980] <... futex resumed>) = 0 [pid 6990] ioctl(4, LOOP_SET_FD, 3 [pid 6980] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6991] <... set_robust_list resumed>) = 0 [pid 6990] <... ioctl resumed>) = 0 [pid 6989] <... ioctl resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6987] <... close resumed>) = 0 [pid 6983] ioctl(4, LOOP_CLR_FD [pid 6990] close(3) = 0 [pid 6987] symlink("/dev/binderfs", "./binderfs" [pid 6983] <... ioctl resumed>) = 0 [pid 6990] mkdir("./bus", 0777 [pid 6991] creat("./file1", 000 [pid 6989] close(3 [pid 6988] mkdir("./bus", 0777 [pid 6987] <... symlink resumed>) = 0 [pid 6983] close(4 [pid 6990] <... mkdir resumed>) = 0 [pid 6987] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6991] <... creat resumed>) = 5 [pid 6989] <... close resumed>) = 0 [pid 6988] <... mkdir resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 6991] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] mkdir("./bus", 0777 [pid 6988] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6987] <... futex resumed>) = 0 [pid 6983] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6991] <... futex resumed>) = 1 [pid 6989] <... mkdir resumed>) = 0 [pid 6987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6983] <... futex resumed>) = 1 [pid 6982] <... futex resumed>) = 0 [pid 6980] <... futex resumed>) = 0 [pid 6991] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6989] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6988] <... mount resumed>) = 0 [pid 6987] <... mmap resumed>) = 0x7fee0b1d3000 [pid 6983] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6982] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6980] exit_group(0 [pid 6991] <... futex resumed>) = ? [pid 6990] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6988] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6987] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 6983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6982] <... futex resumed>) = 0 [pid 6981] <... futex resumed>) = ? [pid 6980] <... exit_group resumed>) = ? [pid 6991] +++ exited with 0 +++ [pid 6990] <... mount resumed>) = 0 [pid 6988] <... openat resumed>) = 3 [pid 6987] <... mprotect resumed>) = 0 [pid 6983] creat("./bus", 000 [pid 6982] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6981] +++ exited with 0 +++ [pid 6980] +++ exited with 0 +++ [pid 6990] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6988] chdir("./bus" [pid 6987] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6990] <... openat resumed>) = 3 [pid 6988] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6980, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6990] chdir("./bus" [pid 6988] ioctl(4, LOOP_CLR_FD [pid 6983] <... creat resumed>) = 4 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6990] <... chdir resumed>) = 0 [pid 6988] <... ioctl resumed>) = 0 [pid 6987] <... clone resumed>, parent_tid=[6992], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6992 [pid 6983] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6990] ioctl(4, LOOP_CLR_FD [pid 6988] close(4 [pid 6987] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6983] <... futex resumed>) = 1 [pid 6982] <... futex resumed>) = 0 [pid 6990] <... ioctl resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6990] close(4 [pid 6988] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6990] <... close resumed>) = 0 [pid 6988] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6988] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] <... futex resumed>) = 1 [pid 6988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6990] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6988] creat("./bus", 000 [pid 6985] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] fstat(3, [pid 6988] <... creat resumed>) = 4 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6992 attached [pid 6988] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 6992] set_robust_list(0x7fee0b1f39e0, 24 [pid 6988] <... futex resumed>) = 1 [pid 6985] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 6992] <... set_robust_list resumed>) = 0 [pid 6988] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6985] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6992] memfd_create("syzkaller", 0 [pid 6988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6985] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] <... memfd_create resumed>) = 3 [pid 6988] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 95.650303][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.658360][ T6981] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.663108][ T6988] loop4: detected capacity change from 0 to 1024 [ 95.675132][ T6989] loop2: detected capacity change from 0 to 1024 [ 95.676267][ T6990] loop3: detected capacity change from 0 to 1024 [pid 6985] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] lstat("./104/binderfs", [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6987] <... futex resumed>) = 0 [pid 6984] <... futex resumed>) = 0 [pid 6983] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6982] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6992] <... mmap resumed>) = 0x7fee02dd3000 [pid 6987] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6984] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... futex resumed>) = 0 [pid 5075] unlink("./104/binderfs" [pid 6992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6990] <... futex resumed>) = 0 [pid 6984] <... futex resumed>) = 1 [pid 5075] <... unlink resumed>) = 0 [pid 6990] creat("./bus", 000 [pid 5075] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6990] <... creat resumed>) = 4 [pid 6990] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6990] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] <... write resumed>) = 524288 [pid 6992] munmap(0x7fee02dd3000, 524288) = 0 [pid 6982] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6984] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6984] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6990] <... futex resumed>) = 0 [pid 6984] <... futex resumed>) = 1 [pid 6990] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6984] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] <... mount resumed>) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 95.714867][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.722197][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.732359][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.742633][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.745796][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.751239][ T6992] loop5: detected capacity change from 0 to 1024 [pid 6992] ioctl(4, LOOP_SET_FD, 3 [pid 6989] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6985] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6985] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6985] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6993], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6993 [pid 6985] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6985] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] chdir("./bus" [pid 6982] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6993 attached [pid 6993] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6993] creat("./file1", 000 [pid 6989] <... chdir resumed>) = 0 [pid 6982] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6989] ioctl(4, LOOP_CLR_FD [pid 6982] <... futex resumed>) = 0 [pid 6989] <... ioctl resumed>) = 0 [pid 6982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6989] close(4 [pid 6982] <... mmap resumed>) = 0x7fee02e32000 [pid 6989] <... close resumed>) = 0 [pid 6982] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 6989] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] <... mprotect resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6989] <... futex resumed>) = 1 [pid 5075] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6986] <... futex resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./104/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./104" [pid 6984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6984] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6984] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6984] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6994], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6994 [pid 6984] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6984] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6986] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6989] creat("./bus", 000 [pid 6982] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6989] <... creat resumed>) = 4 [pid 6989] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6986] <... futex resumed>) = 0 [pid 6982] <... clone resumed>, parent_tid=[6995], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6995 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./105", 0777 [pid 6989] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 95.757771][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.770963][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.771950][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.785674][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.787654][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 95.798566][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.808096][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6986] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6982] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 0 [pid 6982] <... futex resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6982] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 6985] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6995 attached , child_tidptr=0x555556b055d0) = 6996 ./strace-static-x86_64: Process 6994 attached [pid 6994] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6994] creat("./file1", 000./strace-static-x86_64: Process 6996 attached [pid 6996] set_robust_list(0x555556b055e0, 24) = 0 [pid 6996] chdir("./105") = 0 [pid 6996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6996] setpgid(0, 0 [pid 6995] set_robust_list(0x7fee02e529e0, 24 [pid 6994] <... creat resumed>) = 5 [pid 6992] <... ioctl resumed>) = 0 [pid 6996] <... setpgid resumed>) = 0 [pid 6994] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] close(3 [pid 6996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6994] <... futex resumed>) = 1 [pid 6992] <... close resumed>) = 0 [pid 6984] <... futex resumed>) = 0 [pid 6996] <... openat resumed>) = 3 [pid 6994] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6992] mkdir("./bus", 0777 [pid 6996] write(3, "1000", 4 [pid 6992] <... mkdir resumed>) = 0 [pid 6996] <... write resumed>) = 4 [pid 6992] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6996] close(3) = 0 [pid 6996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6996] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 6996] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6996] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6997], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 6997 [pid 6996] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6996] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6997 attached [pid 6997] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 6997] memfd_create("syzkaller", 0) = 3 [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6995] creat("./file1", 000 [pid 6993] <... creat resumed>) = 5 [pid 6993] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6993] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] <... mmap resumed>) = 0x7fee02dd3000 [ 95.831102][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.847396][ T6983] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.850888][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.855094][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6995] <... creat resumed>) = 5 [pid 6992] <... mount resumed>) = 0 [pid 6992] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6992] chdir("./bus") = 0 [pid 6992] ioctl(4, LOOP_CLR_FD) = 0 [pid 6992] close(4) = 0 [pid 6992] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6987] <... futex resumed>) = 0 [pid 6992] creat("./bus", 000 [pid 6987] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] <... creat resumed>) = 4 [pid 6987] <... futex resumed>) = 0 [pid 6992] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6987] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6992] <... futex resumed>) = 0 [pid 6987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6992] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6987] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6987] <... futex resumed>) = 0 [pid 6992] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6987] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6995] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6982] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6983] <... write resumed>) = 57344 [pid 6995] <... futex resumed>) = 0 [pid 6986] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6995] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6983] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6986] <... futex resumed>) = 0 [pid 6983] <... futex resumed>) = 0 [pid 6986] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6983] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] <... mmap resumed>) = 0x7fee02e32000 [pid 6986] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6986] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 95.874491][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.881868][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.885629][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.891291][ T6988] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.904539][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.914617][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.915020][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6982] exit_group(0./strace-static-x86_64: Process 6998 attached [pid 6995] <... futex resumed>) = ? [pid 6983] <... futex resumed>) = ? [pid 6982] <... exit_group resumed>) = ? [pid 6997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6997] munmap(0x7fee02dd3000, 524288) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6997] ioctl(4, LOOP_SET_FD, 3 [pid 6998] set_robust_list(0x7fee02e529e0, 24 [pid 6995] +++ exited with 0 +++ [pid 6986] <... clone resumed>, parent_tid=[6998], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6998 [pid 6983] +++ exited with 0 +++ [pid 6982] +++ exited with 0 +++ [pid 6986] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6986] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6988] <... write resumed>) = 57344 [pid 6988] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6988] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6998] <... set_robust_list resumed>) = 0 [pid 6997] <... ioctl resumed>) = 0 [pid 6990] <... write resumed>) = 57344 [pid 6987] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6987] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 6987] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6987] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6999], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 6999 [pid 6987] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6987] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6985] exit_group(0 [pid 6993] <... futex resumed>) = ? [pid 6993] +++ exited with 0 +++ [pid 6985] <... exit_group resumed>) = ? [pid 6988] <... futex resumed>) = ? [pid 6988] +++ exited with 0 +++ [pid 6985] +++ exited with 0 +++ ./strace-static-x86_64: Process 6999 attached [pid 6999] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 6999] creat("./file1", 000 [pid 6998] creat("./file1", 000 [pid 6997] close(3 [pid 6990] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6985, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6989] <... write resumed>) = 57344 [pid 6989] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6989] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6984] exit_group(0 [pid 6994] <... futex resumed>) = ? [pid 6984] <... exit_group resumed>) = ? [pid 6994] +++ exited with 0 +++ [pid 6998] <... creat resumed>) = 5 [pid 6998] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6986] <... futex resumed>) = 0 [pid 6998] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6986] exit_group(0 [pid 6998] <... futex resumed>) = ? [pid 6986] <... exit_group resumed>) = ? [pid 6998] +++ exited with 0 +++ [pid 6989] <... futex resumed>) = ? [pid 6989] +++ exited with 0 +++ [pid 6986] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6986, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./107/binderfs" [pid 6997] <... close resumed>) = 0 [pid 6990] <... futex resumed>) = ? [pid 5074] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6997] mkdir("./bus", 0777 [pid 5076] <... unlink resumed>) = 0 [ 95.922465][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.936558][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.938177][ T6997] loop1: detected capacity change from 0 to 1024 [ 95.945272][ T6990] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.952007][ T6989] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.958520][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [ 95.972666][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6997] <... mkdir resumed>) = 0 [pid 6990] +++ exited with 0 +++ [pid 6984] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6984, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] fstat(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5080] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 5074] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./105/binderfs", [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] unlink("./105/binderfs" [pid 6999] <... creat resumed>) = 5 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 6999] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./103/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6999] <... futex resumed>) = 1 [pid 6997] <... mount resumed>) = 0 [pid 6987] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] lstat("./105/binderfs", [pid 6997] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] unlink("./103/binderfs" [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6999] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6997] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5077] unlink("./105/binderfs" [pid 6997] chdir("./bus" [pid 5080] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 6997] <... chdir resumed>) = 0 [pid 5077] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6997] ioctl(4, LOOP_CLR_FD) = 0 [ 95.981131][ T11] hfsplus: b-tree write err: -5, ino 4 [ 95.989832][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 95.990749][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.005121][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 96.005539][ T6992] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.018781][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 6997] close(4) = 0 [pid 6997] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6997] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6996] <... futex resumed>) = 0 [pid 6996] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6996] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6997] <... futex resumed>) = 0 [pid 6997] creat("./bus", 000) = 4 [pid 6997] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6996] <... futex resumed>) = 0 [pid 6997] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6996] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6996] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./107/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./107/bus" [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6992] <... write resumed>) = 57344 [pid 6992] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6992] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6987] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./105/bus", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6999] <... futex resumed>) = ? [pid 6987] <... exit_group resumed>) = ? [pid 6992] <... futex resumed>) = ? [pid 6992] +++ exited with 0 +++ [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6999] +++ exited with 0 +++ [pid 5077] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, [pid 6987] +++ exited with 0 +++ [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6987, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./107/binderfs") = 0 [pid 5081] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, [pid 5074] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [ 96.027072][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] getdents64(4, [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5077] close(4 [pid 5074] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] rmdir("./105/bus" [pid 6996] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] rmdir("./105/bus" [pid 5074] <... rmdir resumed>) = 0 [pid 6996] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 6996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6996] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 6996] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5074] close(3 [pid 6996] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] close(3) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 6996] <... clone resumed>, parent_tid=[7000], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7000 [pid 5077] rmdir("./105" [pid 5076] close(3 [pid 5074] rmdir("./105" [pid 6996] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6996] <... futex resumed>) = 0 [pid 5077] mkdir("./106", 0777 [pid 5076] rmdir("./107" [pid 5074] mkdir("./106", 0777 [pid 6996] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5080] lstat("./103/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] mkdir("./108", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7000 attached [pid 5080] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7000] set_robust_list(0x7fee02e529e0, 24 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7000] <... set_robust_list resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] close(3 [pid 7000] creat("./file1", 000 [pid 5080] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7001 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7002 [pid 5081] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7003 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, ./strace-static-x86_64: Process 7002 attached [pid 5081] lstat("./107/bus", [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7002] set_robust_list(0x555556b055e0, 24) = 0 [pid 7002] chdir("./106") = 0 [pid 7002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7002] setpgid(0, 0) = 0 [pid 7002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7002] write(3, "1000", 4./strace-static-x86_64: Process 7001 attached ) = 4 [pid 7002] close(3 [pid 7001] set_robust_list(0x555556b055e0, 24 [pid 7002] <... close resumed>) = 0 [pid 7001] <... set_robust_list resumed>) = 0 [pid 7002] symlink("/dev/binderfs", "./binderfs" [pid 7001] chdir("./106" [pid 7002] <... symlink resumed>) = 0 [pid 7001] <... chdir resumed>) = 0 [pid 5080] close(4 [pid 7002] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... close resumed>) = 0 [pid 7002] <... futex resumed>) = 0 [pid 7001] <... prctl resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] rmdir("./103/bus" [pid 7002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7001] setpgid(0, 0 [pid 7002] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7001] <... setpgid resumed>) = 0 [pid 5081] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 7002] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7002] <... mprotect resumed>) = 0 [pid 7001] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(3 [pid 7002] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7001] write(3, "1000", 4 [pid 5081] <... openat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 7001] <... write resumed>) = 4 [pid 5081] fstat(4, [pid 5080] rmdir("./103" [pid 7002] <... clone resumed>, parent_tid=[7004], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7004 [pid 7001] close(3 [pid 7002] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7001] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7002] <... futex resumed>) = 0 [pid 7001] symlink("/dev/binderfs", "./binderfs" [pid 5080] mkdir("./104", 0777 [pid 7002] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7001] <... symlink resumed>) = 0 [pid 5081] getdents64(4, [ 96.069152][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 96.078812][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7001] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7003 attached ) = 0 [pid 7000] <... creat resumed>) = 5 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... mkdir resumed>) = 0 [pid 7001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7000] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7001] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7000] <... futex resumed>) = 1 [pid 6996] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7004 attached [pid 7003] set_robust_list(0x555556b055e0, 24 [pid 7001] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7000] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7004] set_robust_list(0x7fee0b1f39e0, 24 [pid 7003] <... set_robust_list resumed>) = 0 [pid 7001] <... mprotect resumed>) = 0 [pid 5081] close(4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7004] <... set_robust_list resumed>) = 0 [pid 7001] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7004] memfd_create("syzkaller", 0 [pid 7003] chdir("./108" [pid 5081] rmdir("./107/bus" [pid 5080] close(3 [pid 7004] <... memfd_create resumed>) = 3 [pid 7003] <... chdir resumed>) = 0 [pid 7001] <... clone resumed>, parent_tid=[7005], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7005 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7001] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] <... mmap resumed>) = 0x7fee02dd3000 [pid 7001] <... futex resumed>) = 0 [pid 7004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7001] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7005 attached [pid 7005] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7005] memfd_create("syzkaller", 0) = 3 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7004] <... write resumed>) = 524288 [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7003] <... prctl resumed>) = 0 [pid 7004] munmap(0x7fee02dd3000, 524288 [pid 7003] setpgid(0, 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] getdents64(3, [pid 7003] <... setpgid resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7006 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./107" [pid 7003] <... openat resumed>) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./108", 0777) = 0 [pid 7003] write(3, "1000", 4 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7004] <... munmap resumed>) = 0 [pid 7003] <... write resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 7004] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7003] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7004] <... openat resumed>) = 4 [pid 7003] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7004] ioctl(4, LOOP_SET_FD, 3 [pid 5081] close(3 [pid 7003] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... close resumed>) = 0 [pid 7005] <... write resumed>) = 524288 [pid 7003] <... symlink resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7006 attached [pid 7003] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7007 [pid 7003] <... futex resumed>) = 0 [pid 7003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7005] munmap(0x7fee02dd3000, 524288 [pid 7006] set_robust_list(0x555556b055e0, 24 [pid 7003] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7005] <... munmap resumed>) = 0 [pid 7006] chdir("./104" [pid 7003] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7005] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7003] <... mprotect resumed>) = 0 [pid 7006] <... chdir resumed>) = 0 [ 96.113668][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.131327][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.150770][ T7004] loop0: detected capacity change from 0 to 1024 [pid 7005] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7007 attached [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7003] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7007] set_robust_list(0x555556b055e0, 24) = 0 [pid 7007] chdir("./108") = 0 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7007] setpgid(0, 0) = 0 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7007] write(3, "1000", 4) = 4 [pid 7007] close(3) = 0 [pid 7007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7007] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7007] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7007] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7004] <... ioctl resumed>) = 0 [pid 7004] close(3 [pid 7007] <... clone resumed>, parent_tid=[7008], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7008 [pid 7004] <... close resumed>) = 0 [pid 7007] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] mkdir("./bus", 0777 [pid 7007] <... futex resumed>) = 0 [pid 7004] <... mkdir resumed>) = 0 [pid 7007] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7004] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7006] <... prctl resumed>) = 0 [pid 7006] setpgid(0, 0 [pid 7003] <... clone resumed>, parent_tid=[7009], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7009 ./strace-static-x86_64: Process 7009 attached [pid 7006] <... setpgid resumed>) = 0 [pid 7003] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7004] <... mount resumed>) = 0 [pid 7004] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 7008 attached [pid 7004] chdir("./bus" [pid 7008] set_robust_list(0x7fee0b1f39e0, 24 [pid 7004] <... chdir resumed>) = 0 [pid 7008] <... set_robust_list resumed>) = 0 [pid 7004] ioctl(4, LOOP_CLR_FD [pid 7008] memfd_create("syzkaller", 0 [pid 7004] <... ioctl resumed>) = 0 [pid 7008] <... memfd_create resumed>) = 3 [pid 7005] <... ioctl resumed>) = 0 [pid 7004] close(4 [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] close(3 [pid 7004] <... close resumed>) = 0 [pid 7008] <... mmap resumed>) = 0x7fee02dd3000 [pid 7005] <... close resumed>) = 0 [pid 7004] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] set_robust_list(0x7fee0b1f39e0, 24 [pid 7008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7005] mkdir("./bus", 0777 [pid 7004] <... futex resumed>) = 1 [pid 7003] <... futex resumed>) = 0 [pid 7002] <... futex resumed>) = 0 [pid 7005] <... mkdir resumed>) = 0 [pid 7004] creat("./bus", 000 [pid 7002] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] <... set_robust_list resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7005] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7004] <... creat resumed>) = 4 [pid 7003] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7002] <... futex resumed>) = 0 [pid 7009] memfd_create("syzkaller", 0 [pid 7006] write(3, "1000", 4 [pid 7004] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7002] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7009] <... memfd_create resumed>) = 3 [pid 7006] <... write resumed>) = 4 [pid 7005] <... mount resumed>) = 0 [pid 7004] <... futex resumed>) = 0 [pid 7002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7008] <... write resumed>) = 524288 [pid 7006] close(3 [pid 7002] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6997] <... write resumed>) = 57344 [pid 7009] <... mmap resumed>) = 0x7fee02dd3000 [pid 7008] munmap(0x7fee02dd3000, 524288 [pid 7006] <... close resumed>) = 0 [pid 7004] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7002] <... futex resumed>) = 0 [pid 6997] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 96.164844][ T7005] loop3: detected capacity change from 0 to 1024 [ 96.167853][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.180819][ T6997] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] <... munmap resumed>) = 0 [pid 7006] symlink("/dev/binderfs", "./binderfs" [pid 7005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7002] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6997] <... futex resumed>) = 0 [pid 6996] exit_group(0 [pid 7009] <... write resumed>) = 524288 [pid 7008] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7006] <... symlink resumed>) = 0 [pid 7009] munmap(0x7fee02dd3000, 524288 [pid 7008] <... openat resumed>) = 4 [pid 7006] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] <... munmap resumed>) = 0 [pid 7008] ioctl(4, LOOP_SET_FD, 3 [pid 7006] <... futex resumed>) = 0 [pid 6996] <... exit_group resumed>) = ? [pid 7009] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7005] <... openat resumed>) = 3 [pid 7000] <... futex resumed>) = ? [pid 7009] <... openat resumed>) = 4 [pid 7006] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 7006] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7005] chdir("./bus" [pid 7000] +++ exited with 0 +++ [pid 6997] +++ exited with 0 +++ [pid 6996] +++ exited with 0 +++ [pid 7006] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6996, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7006] <... clone resumed>, parent_tid=[7010], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7010 [pid 7006] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7006] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7006] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 7005] <... chdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7010 attached [pid 7005] ioctl(4, LOOP_CLR_FD [pid 5075] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7010] set_robust_list(0x7fee0b1f39e0, 24 [pid 7005] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7010] <... set_robust_list resumed>) = 0 [pid 7005] close(4 [pid 5075] lstat("./105/binderfs", [pid 7005] <... close resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./105/binderfs") = 0 [pid 5075] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7008] <... ioctl resumed>) = 0 [pid 7008] close(3) = 0 [pid 7008] mkdir("./bus", 0777) = 0 [pid 7008] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7009] <... ioctl resumed>) = 0 [pid 7005] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7001] <... futex resumed>) = 0 [pid 7001] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7005] creat("./bus", 000 [pid 7001] <... futex resumed>) = 0 [pid 7005] <... creat resumed>) = 4 [pid 7001] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7005] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] memfd_create("syzkaller", 0 [pid 7001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7005] <... futex resumed>) = 0 [pid 7010] <... memfd_create resumed>) = 3 [pid 7005] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7001] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7008] <... mount resumed>) = 0 [ 96.209859][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.217646][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.218111][ T7008] loop5: detected capacity change from 0 to 1024 [ 96.225313][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.235373][ T7009] loop2: detected capacity change from 0 to 1024 [ 96.239996][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7008] chdir("./bus") = 0 [pid 7008] ioctl(4, LOOP_CLR_FD) = 0 [pid 7009] close(3 [pid 7008] close(4 [pid 7009] <... close resumed>) = 0 [pid 7008] <... close resumed>) = 0 [pid 7009] mkdir("./bus", 0777 [pid 7008] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7009] <... mkdir resumed>) = 0 [pid 7008] <... futex resumed>) = 1 [pid 7008] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7009] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7007] <... futex resumed>) = 0 [pid 7002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7007] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7002] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] <... futex resumed>) = 1 [pid 7002] <... futex resumed>) = 0 [pid 7007] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7010] <... mmap resumed>) = 0x7fee02dd3000 [pid 7008] <... futex resumed>) = 0 [pid 7002] <... mmap resumed>) = 0x7fee02e32000 [pid 7008] creat("./bus", 000 [pid 7002] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... umount2 resumed>) = 0 [pid 7009] <... mount resumed>) = 0 [pid 7008] <... creat resumed>) = 4 [pid 7002] <... mprotect resumed>) = 0 [pid 7009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7008] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7002] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7009] <... openat resumed>) = 3 [pid 7008] <... futex resumed>) = 1 [pid 7007] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] chdir("./bus" [pid 7008] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] lstat("./105/bus", [pid 7009] <... chdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7009] ioctl(4, LOOP_CLR_FD [pid 5075] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7009] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] close(4 [pid 5075] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7009] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7009] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] fstat(4, [pid 7009] <... futex resumed>) = 1 [pid 7003] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7009] creat("./bus", 000 [pid 7003] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, [pid 7009] <... creat resumed>) = 4 [pid 7003] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7009] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7007] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7002] <... clone resumed>, parent_tid=[7011], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7011 [pid 5075] getdents64(4, [pid 7009] <... futex resumed>) = 0 [pid 7008] <... futex resumed>) = 0 [pid 7007] <... futex resumed>) = 1 [pid 7003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7002] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [ 96.264480][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.274227][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 96.275497][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.302371][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7009] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7008] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7007] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7003] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7002] <... futex resumed>) = 0 [pid 5075] close(4./strace-static-x86_64: Process 7011 attached [pid 7010] <... write resumed>) = 524288 [pid 7009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7003] <... futex resumed>) = 0 [pid 7002] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... close resumed>) = 0 [pid 7011] set_robust_list(0x7fee02e529e0, 24 [pid 7010] munmap(0x7fee02dd3000, 524288 [pid 7009] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7003] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7001] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./105/bus" [pid 7011] <... set_robust_list resumed>) = 0 [pid 7010] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./105") = 0 [pid 5075] mkdir("./106", 0777 [pid 7011] creat("./file1", 000 [pid 7010] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7001] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7010] <... openat resumed>) = 4 [pid 7001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 7010] ioctl(4, LOOP_SET_FD, 3 [pid 7001] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 96.315066][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.322400][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.334977][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.340751][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.346686][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.350376][ T7004] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7012 ./strace-static-x86_64: Process 7012 attached [pid 7012] set_robust_list(0x555556b055e0, 24) = 0 [pid 7012] chdir("./106") = 0 [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7010] <... ioctl resumed>) = 0 [pid 7001] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7001] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7013], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7013 [pid 7012] <... prctl resumed>) = 0 [pid 7001] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7001] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7012] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 7013 attached [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7010] close(3 [pid 7007] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7013] set_robust_list(0x7fee02e529e0, 24 [pid 7012] <... openat resumed>) = 3 [pid 7010] <... close resumed>) = 0 [pid 7012] write(3, "1000", 4) = 4 [pid 7012] close(3) = 0 [pid 7012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7012] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7012] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7012] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7014], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7014 [pid 7012] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7013] <... set_robust_list resumed>) = 0 [pid 7012] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7010] mkdir("./bus", 0777 [pid 7007] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7013] creat("./file1", 000 [pid 7011] <... creat resumed>) = 5 [pid 7003] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7003] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7003] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7015], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7015 [pid 7003] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7014 attached ) = 0 [pid 7014] set_robust_list(0x7fee0b1f39e0, 24 [pid 7003] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7014] <... set_robust_list resumed>) = 0 [pid 7014] memfd_create("syzkaller", 0) = 3 [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7004] <... write resumed>) = 57344 [pid 7010] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7015 attached [pid 7011] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7007] <... futex resumed>) = 0 [pid 7004] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7011] <... futex resumed>) = 0 [pid 7007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7004] <... futex resumed>) = 0 [pid 7002] exit_group(0 [ 96.366961][ T7010] loop4: detected capacity change from 0 to 1024 [ 96.385228][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.394099][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.394272][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.401584][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7011] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7004] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] <... mmap resumed>) = 0x7fee02e32000 [pid 7015] set_robust_list(0x7fee02e529e0, 24 [pid 7014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] <... creat resumed>) = 5 [pid 7011] <... futex resumed>) = ? [pid 7010] <... mount resumed>) = 0 [pid 7007] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7005] <... write resumed>) = 57344 [pid 7004] +++ exited with 0 +++ [pid 7002] <... exit_group resumed>) = ? [pid 7001] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7015] <... set_robust_list resumed>) = 0 [pid 7014] <... write resumed>) = 524288 [pid 7013] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7011] +++ exited with 0 +++ [pid 7010] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7007] <... mprotect resumed>) = 0 [pid 7005] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7002] +++ exited with 0 +++ [pid 7001] exit_group(0 [pid 7015] creat("./file1", 000 [pid 7013] <... futex resumed>) = ? [pid 7010] <... openat resumed>) = 3 [pid 7007] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7005] <... futex resumed>) = ? [pid 7001] <... exit_group resumed>) = ? [pid 7013] +++ exited with 0 +++ [pid 7010] chdir("./bus" [pid 7005] +++ exited with 0 +++ [pid 7001] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7002, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7010] <... chdir resumed>) = 0 [pid 7007] <... clone resumed>, parent_tid=[7016], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7016 [pid 5074] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7010] ioctl(4, LOOP_CLR_FD [pid 7007] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7001, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7014] munmap(0x7fee02dd3000, 524288 [pid 7010] <... ioctl resumed>) = 0 [pid 7007] <... futex resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5074] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7014] <... munmap resumed>) = 0 [pid 7010] close(4 [pid 7007] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... restart_syscall resumed>) = 0 [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7016 attached [pid 7010] <... close resumed>) = 0 [pid 7008] <... write resumed>) = 57344 [pid 7016] set_robust_list(0x7fee02e529e0, 24 [pid 7010] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7008] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] fstat(3, [pid 7016] <... set_robust_list resumed>) = 0 [pid 7014] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7010] <... futex resumed>) = 1 [pid 7008] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 96.421541][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.428701][ T7005] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.429685][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.444214][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.452480][ T7008] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.463787][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7016] creat("./file1", 000 [pid 7014] <... openat resumed>) = 4 [pid 7008] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7016] <... creat resumed>) = 5 [pid 7016] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7007] <... futex resumed>) = 0 [pid 7016] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7007] exit_group(0 [pid 7016] <... futex resumed>) = ? [pid 7008] <... futex resumed>) = ? [pid 7007] <... exit_group resumed>) = ? [pid 7016] +++ exited with 0 +++ [pid 7008] +++ exited with 0 +++ [pid 7007] +++ exited with 0 +++ [pid 7015] <... creat resumed>) = 5 [pid 7014] ioctl(4, LOOP_SET_FD, 3 [pid 7010] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7007, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7009] <... write resumed>) = 57344 [pid 5077] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7015] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./108/binderfs") = 0 [pid 5081] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7010] creat("./bus", 000) = 4 [pid 7010] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7010] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 7006] <... futex resumed>) = 1 [pid 7010] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7006] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7006] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7010] <... futex resumed>) = 0 [pid 7006] <... futex resumed>) = 1 [pid 7010] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7006] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7015] <... futex resumed>) = 0 [pid 7014] <... ioctl resumed>) = 0 [pid 7009] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7015] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] close(3 [pid 7009] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7014] <... close resumed>) = 0 [pid 7009] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7014] mkdir("./bus", 0777 [pid 5077] fstat(3, [pid 5074] lstat("./106/binderfs", [pid 7014] <... mkdir resumed>) = 0 [pid 7003] exit_group(0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7014] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] getdents64(3, [pid 5074] unlink("./106/binderfs" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... unlink resumed>) = 0 [pid 5077] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./106/binderfs") = 0 [pid 5077] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7015] <... futex resumed>) = ? [pid 7003] <... exit_group resumed>) = ? [pid 7015] +++ exited with 0 +++ [pid 7009] <... futex resumed>) = ? [pid 7009] +++ exited with 0 +++ [pid 7003] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 96.475169][ T7009] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.484361][ T7014] loop1: detected capacity change from 0 to 1024 [ 96.490792][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.499200][ T33] hfsplus: b-tree write err: -5, ino 4 [ 96.505229][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 96.506002][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.519266][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7006] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7006] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7006] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7006] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] lstat("./108/bus", [pid 5077] lstat("./106/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./106/bus", [pid 7014] <... mount resumed>) = 0 [pid 7006] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7006] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7006] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7006] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 7006] <... clone resumed>, parent_tid=[7017], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7017 [pid 5081] fstat(4, [pid 5077] fstat(4, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] fstat(4, [pid 7006] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7006] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 7006] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] lstat("./108/binderfs", [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./108/binderfs" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 5077] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 5074] close(4 [pid 7014] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 7014] chdir("./bus" [pid 5081] rmdir("./108/bus" [ 96.520910][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.532756][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.544315][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.551670][ T7010] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] rmdir("./106/bus" [pid 5074] rmdir("./106/bus" [pid 7014] <... chdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] getdents64(3, [pid 5074] getdents64(3, [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5077] close(3 [pid 5074] close(3 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./108" [pid 5077] rmdir("./106" [pid 5074] rmdir("./106" [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] mkdir("./109", 0777 [pid 5077] mkdir("./107", 0777 [pid 5074] mkdir("./107", 0777 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7014] ioctl(4, LOOP_CLR_FD [pid 7010] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7010] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7014] <... ioctl resumed>) = 0 [pid 7010] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7014] close(4 [pid 7010] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] close(3 [pid 5077] close(3 [pid 5074] close(3 [pid 7014] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7017 attached [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7018 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7019 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7020 [pid 7017] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7017] creat("./file1", 000) = 5 [pid 7014] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7017] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] <... futex resumed>) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7017] <... futex resumed>) = 1 [pid 7014] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7012] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7006] <... futex resumed>) = 0 [pid 7017] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7012] <... futex resumed>) = 0 [pid 7006] exit_group(0 [pid 7017] <... futex resumed>) = ? [pid 7014] creat("./bus", 000 [pid 7012] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7010] <... futex resumed>) = ? [pid 7006] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7020 attached [pid 7017] +++ exited with 0 +++ [pid 7014] <... creat resumed>) = 4 [pid 7010] +++ exited with 0 +++ [pid 7006] +++ exited with 0 +++ [pid 7020] set_robust_list(0x555556b055e0, 24 [pid 7014] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7006, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 7018 attached [pid 7020] <... set_robust_list resumed>) = 0 [pid 7014] <... futex resumed>) = 1 [pid 7012] <... futex resumed>) = 0 [pid 7020] chdir("./107" [pid 7018] set_robust_list(0x555556b055e0, 24 [pid 7014] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7012] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] <... chdir resumed>) = 0 [pid 7018] <... set_robust_list resumed>) = 0 [pid 7014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7012] <... futex resumed>) = 0 [pid 5080] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7018] chdir("./109" [pid 7014] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7012] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 7020] <... prctl resumed>) = 0 [pid 7018] <... chdir resumed>) = 0 [ 96.571376][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5080] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7020] setpgid(0, 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7020] <... setpgid resumed>) = 0 [pid 7018] <... prctl resumed>) = 0 [pid 5080] fstat(3, [pid 5076] lstat("./108/bus", [pid 7020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] setpgid(0, 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7020] <... openat resumed>) = 3 [pid 7018] <... setpgid resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7020] write(3, "1000", 4 [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7020] <... write resumed>) = 4 [pid 7018] <... openat resumed>) = 3 [pid 5080] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7020] close(3 [pid 7018] write(3, "1000", 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 7020] <... close resumed>) = 0 [pid 7018] <... write resumed>) = 4 [pid 5080] lstat("./104/binderfs", [pid 5076] fstat(4, [pid 7020] symlink("/dev/binderfs", "./binderfs" [pid 7018] close(3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7020] <... symlink resumed>) = 0 [pid 7018] <... close resumed>) = 0 [pid 5080] unlink("./104/binderfs" [pid 5076] getdents64(4, [pid 7020] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7019 attached [pid 7020] <... futex resumed>) = 0 [pid 7018] <... symlink resumed>) = 0 [pid 5080] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 7020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7019] set_robust_list(0x555556b055e0, 24 [pid 7018] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7020] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7018] <... futex resumed>) = 0 [pid 5080] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(4 [pid 7020] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 7020] <... mprotect resumed>) = 0 [pid 7018] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] lstat("./104/bus", [pid 5076] rmdir("./108/bus" [pid 7020] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7018] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7019] <... set_robust_list resumed>) = 0 [pid 7018] <... mprotect resumed>) = 0 [pid 5080] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 7020] <... clone resumed>, parent_tid=[7021], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7021 [pid 7019] chdir("./107" [pid 7018] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7020] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 7020] <... futex resumed>) = 0 [pid 7019] <... chdir resumed>) = 0 [pid 7018] <... clone resumed>, parent_tid=[7022], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7022 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 7020] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7018] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 5076] rmdir("./108" [pid 7019] <... prctl resumed>) = 0 [pid 7018] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7019] setpgid(0, 0 [pid 7018] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 5076] mkdir("./109", 0777 [pid 7019] <... setpgid resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... mkdir resumed>) = 0 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7019] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7019] write(3, "1000", 4 [pid 5080] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7019] <... write resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7021 attached [pid 7019] close(3 [pid 5080] rmdir("./104/bus" [pid 5076] close(3 [pid 7021] set_robust_list(0x7fee0b1f39e0, 24 [pid 7019] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7021] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7021] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7021] <... memfd_create resumed>) = 3 [pid 5080] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7023 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 7021] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] rmdir("./104" [pid 7019] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 7019] <... symlink resumed>) = 0 [pid 5080] mkdir("./105", 0777 [pid 7019] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 7019] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... openat resumed>) = 3 [pid 7019] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7019] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7019] <... mprotect resumed>) = 0 [pid 7012] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] close(3 [pid 7019] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7012] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7023 attached [pid 7012] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7023] set_robust_list(0x555556b055e0, 24 [pid 7019] <... clone resumed>, parent_tid=[7024], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7024 [pid 7012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7023] <... set_robust_list resumed>) = 0 [pid 7019] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7025 [pid 7023] chdir("./109" [pid 7019] <... futex resumed>) = 0 [pid 7012] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7023] <... chdir resumed>) = 0 [pid 7019] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7012] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 7022 attached [pid 7023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7021] <... write resumed>) = 524288 [pid 7012] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7023] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7024 attached [pid 7023] setpgid(0, 0 [pid 7022] set_robust_list(0x7fee0b1f39e0, 24 [pid 7021] munmap(0x7fee02dd3000, 524288 [pid 7012] <... clone resumed>, parent_tid=[7026], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7026 [pid 7024] set_robust_list(0x7fee0b1f39e0, 24 [pid 7023] <... setpgid resumed>) = 0 [pid 7022] <... set_robust_list resumed>) = 0 [pid 7021] <... munmap resumed>) = 0 [pid 7012] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] <... set_robust_list resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7022] memfd_create("syzkaller", 0 [pid 7021] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7012] <... futex resumed>) = 0 [pid 7024] memfd_create("syzkaller", 0 [pid 7023] <... openat resumed>) = 3 [pid 7022] <... memfd_create resumed>) = 3 [pid 7021] <... openat resumed>) = 4 [pid 7012] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7025 attached [pid 7024] <... memfd_create resumed>) = 3 [pid 7023] write(3, "1000", 4 [ 96.601818][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.615044][ T11] hfsplus: b-tree write err: -5, ino 4 [ 96.620910][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7021] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7026 attached [pid 7025] set_robust_list(0x555556b055e0, 24 [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7023] <... write resumed>) = 4 [pid 7022] <... mmap resumed>) = 0x7fee02dd3000 [pid 7026] set_robust_list(0x7fee02e529e0, 24 [pid 7025] <... set_robust_list resumed>) = 0 [pid 7023] close(3 [pid 7026] <... set_robust_list resumed>) = 0 [pid 7025] chdir("./105" [pid 7023] <... close resumed>) = 0 [pid 7026] creat("./file1", 000 [pid 7025] <... chdir resumed>) = 0 [pid 7023] symlink("/dev/binderfs", "./binderfs" [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7024] <... mmap resumed>) = 0x7fee02dd3000 [pid 7023] <... symlink resumed>) = 0 [pid 7025] <... prctl resumed>) = 0 [pid 7023] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] setpgid(0, 0 [pid 7023] <... futex resumed>) = 0 [pid 7025] <... setpgid resumed>) = 0 [pid 7023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7023] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7025] <... openat resumed>) = 3 [pid 7023] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7025] write(3, "1000", 4 [pid 7023] <... mprotect resumed>) = 0 [pid 7022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] <... write resumed>) = 4 [pid 7023] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7025] close(3) = 0 [pid 7023] <... clone resumed>, parent_tid=[7027], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7027 [pid 7025] symlink("/dev/binderfs", "./binderfs" [pid 7023] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] <... symlink resumed>) = 0 [pid 7023] <... futex resumed>) = 0 [pid 7025] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7023] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7025] <... futex resumed>) = 0 [pid 7024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7025] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7028], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7028 [pid 7025] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7027 attached [pid 7022] <... write resumed>) = 524288 [pid 7027] set_robust_list(0x7fee0b1f39e0, 24 [pid 7021] <... ioctl resumed>) = 0 [pid 7027] <... set_robust_list resumed>) = 0 [pid 7021] close(3 [pid 7027] memfd_create("syzkaller", 0 [pid 7021] <... close resumed>) = 0 [pid 7027] <... memfd_create resumed>) = 3 [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7021] mkdir("./bus", 0777 [pid 7027] <... mmap resumed>) = 0x7fee02dd3000 [pid 7024] <... write resumed>) = 524288 [pid 7021] <... mkdir resumed>) = 0 [pid 7027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7021] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 ./strace-static-x86_64: Process 7028 attached [pid 7024] munmap(0x7fee02dd3000, 524288 [pid 7022] munmap(0x7fee02dd3000, 524288 [pid 7021] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7028] set_robust_list(0x7fee0b1f39e0, 24 [pid 7027] <... write resumed>) = 524288 [pid 7024] <... munmap resumed>) = 0 [pid 7022] <... munmap resumed>) = 0 [pid 7021] chdir("./bus") = 0 [pid 7021] ioctl(4, LOOP_CLR_FD) = 0 [pid 7021] close(4) = 0 [pid 7021] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7020] <... futex resumed>) = 0 [pid 7021] creat("./bus", 000 [pid 7020] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7021] <... creat resumed>) = 4 [pid 7020] <... futex resumed>) = 0 [pid 7021] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7021] <... futex resumed>) = 0 [pid 7020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7021] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7020] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] <... set_robust_list resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7022] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7020] <... futex resumed>) = 0 [pid 7012] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7028] memfd_create("syzkaller", 0 [pid 7022] <... openat resumed>) = 4 [pid 7020] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7028] <... memfd_create resumed>) = 3 [pid 7027] munmap(0x7fee02dd3000, 524288 [pid 7024] <... openat resumed>) = 4 [ 96.661083][ T7021] loop0: detected capacity change from 0 to 1024 [ 96.665065][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.695885][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.702206][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7022] ioctl(4, LOOP_SET_FD, 3 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7027] <... munmap resumed>) = 0 [pid 7024] ioctl(4, LOOP_SET_FD, 3 [pid 7027] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7027] ioctl(4, LOOP_SET_FD, 3 [pid 7028] <... mmap resumed>) = 0x7fee02dd3000 [pid 7027] <... ioctl resumed>) = 0 [pid 7024] <... ioctl resumed>) = 0 [pid 7022] <... ioctl resumed>) = 0 [pid 7028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7022] close(3) = 0 [pid 7022] mkdir("./bus", 0777) = 0 [pid 7022] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7026] <... creat resumed>) = 5 [pid 7026] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7026] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7028] <... write resumed>) = 524288 [pid 7027] close(3 [pid 7024] close(3 [pid 7028] munmap(0x7fee02dd3000, 524288 [pid 7027] <... close resumed>) = 0 [pid 7024] <... close resumed>) = 0 [ 96.713366][ T7022] loop5: detected capacity change from 0 to 1024 [ 96.715377][ T7027] loop2: detected capacity change from 0 to 1024 [ 96.720088][ T7024] loop3: detected capacity change from 0 to 1024 [ 96.727352][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.744321][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.748466][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7028] <... munmap resumed>) = 0 [pid 7027] mkdir("./bus", 0777 [pid 7024] mkdir("./bus", 0777 [pid 7020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7028] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7027] <... mkdir resumed>) = 0 [pid 7024] <... mkdir resumed>) = 0 [pid 7022] <... mount resumed>) = 0 [pid 7020] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] <... openat resumed>) = 4 [pid 7027] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7024] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7020] <... futex resumed>) = 0 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 7022] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7022] <... openat resumed>) = 3 [pid 7022] chdir("./bus") = 0 [pid 7022] ioctl(4, LOOP_CLR_FD) = 0 [pid 7022] close(4) = 0 [pid 7022] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] <... mmap resumed>) = 0x7fee02e32000 [pid 7022] <... futex resumed>) = 1 [pid 7020] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7018] <... futex resumed>) = 0 [pid 7022] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7018] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7020] <... mprotect resumed>) = 0 [pid 7018] <... futex resumed>) = 0 [pid 7022] creat("./bus", 000 [pid 7020] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7018] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7022] <... creat resumed>) = 4 [pid 7024] <... mount resumed>) = 0 [pid 7022] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] <... clone resumed>, parent_tid=[7029], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7029 [pid 7027] <... mount resumed>) = 0 [pid 7024] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7022] <... futex resumed>) = 1 [pid 7020] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 7027] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7024] <... openat resumed>) = 3 [pid 7022] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7020] <... futex resumed>) = 0 [pid 7018] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] <... ioctl resumed>) = 0 [pid 7027] <... openat resumed>) = 3 [pid 7024] chdir("./bus" [pid 7022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7018] <... futex resumed>) = 0 [pid 7022] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7018] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7029 attached [pid 7029] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7020] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7029] creat("./file1", 000) = 5 [pid 7028] close(3 [pid 7027] chdir("./bus" [pid 7024] <... chdir resumed>) = 0 [pid 7028] <... close resumed>) = 0 [pid 7027] <... chdir resumed>) = 0 [pid 7024] ioctl(4, LOOP_CLR_FD [pid 7028] mkdir("./bus", 0777 [pid 7027] ioctl(4, LOOP_CLR_FD [pid 7024] <... ioctl resumed>) = 0 [pid 7028] <... mkdir resumed>) = 0 [pid 7027] <... ioctl resumed>) = 0 [pid 7024] close(4 [pid 7028] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7027] close(4 [pid 7024] <... close resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 7024] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7027] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] <... futex resumed>) = 1 [pid 7027] <... futex resumed>) = 1 [pid 7024] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7023] <... futex resumed>) = 0 [pid 7027] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7023] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7023] <... futex resumed>) = 0 [ 96.751951][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.760645][ T7014] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.777200][ T7028] loop4: detected capacity change from 0 to 1024 [ 96.790588][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.799216][ T7021] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7027] creat("./bus", 000 [pid 7023] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7027] <... creat resumed>) = 4 [pid 7027] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7023] <... futex resumed>) = 0 [pid 7027] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7023] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7023] <... futex resumed>) = 0 [pid 7027] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7023] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7029] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7020] <... futex resumed>) = 0 [pid 7029] <... futex resumed>) = 1 [pid 7029] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7028] <... mount resumed>) = 0 [pid 7021] <... write resumed>) = 57344 [pid 7019] <... futex resumed>) = 0 [pid 7014] <... write resumed>) = 57344 [pid 7028] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7021] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7014] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7012] exit_group(0 [pid 7028] <... openat resumed>) = 3 [pid 7021] <... futex resumed>) = 0 [pid 7019] <... futex resumed>) = 1 [pid 7012] <... exit_group resumed>) = ? [pid 7028] chdir("./bus" [pid 7021] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7019] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7014] <... futex resumed>) = ? [pid 7028] <... chdir resumed>) = 0 [pid 7014] +++ exited with 0 +++ [pid 7028] ioctl(4, LOOP_CLR_FD [pid 7026] <... futex resumed>) = ? [pid 7024] <... futex resumed>) = 0 [pid 7028] <... ioctl resumed>) = 0 [pid 7028] close(4 [pid 7026] +++ exited with 0 +++ [pid 7024] creat("./bus", 000 [pid 7020] exit_group(0 [pid 7012] +++ exited with 0 +++ [pid 7029] <... futex resumed>) = ? [pid 7028] <... close resumed>) = 0 [pid 7024] <... creat resumed>) = 4 [pid 7021] <... futex resumed>) = ? [pid 7020] <... exit_group resumed>) = ? [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7012, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7029] +++ exited with 0 +++ [pid 7028] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7021] +++ exited with 0 +++ [pid 7020] +++ exited with 0 +++ [pid 7018] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7028] <... futex resumed>) = 1 [pid 7025] <... futex resumed>) = 0 [pid 7024] <... futex resumed>) = 1 [pid 7019] <... futex resumed>) = 0 [pid 7018] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7028] creat("./bus", 000 [pid 7025] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7019] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] <... futex resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7020, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 7028] <... creat resumed>) = 4 [pid 7025] <... futex resumed>) = 0 [pid 7024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7019] <... futex resumed>) = 0 [pid 7018] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7028] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7025] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 96.800448][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.818636][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.829429][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7024] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7019] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7018] <... mmap resumed>) = 0x7fee02e32000 [pid 7028] <... futex resumed>) = 0 [pid 7025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... restart_syscall resumed>) = 0 [pid 7025] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7023] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7023] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7023] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7023] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7030], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7030 [pid 7023] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7023] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7028] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7018] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7018] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7030 attached [pid 7030] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7030] creat("./file1", 000) = 5 [pid 7030] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7023] <... futex resumed>) = 0 [ 96.856372][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.859193][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.871359][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.872330][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.880606][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.895559][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7030] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7031 attached [pid 7025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7018] <... clone resumed>, parent_tid=[7031], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7031 [pid 5075] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7031] set_robust_list(0x7fee02e529e0, 24 [pid 7019] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7031] <... set_robust_list resumed>) = 0 [pid 7019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7018] <... futex resumed>) = 0 [pid 5075] fstat(3, [pid 5074] <... openat resumed>) = 3 [pid 7031] creat("./file1", 000 [pid 7025] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... mmap resumed>) = 0x7fee02e32000 [pid 7018] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7025] <... futex resumed>) = 0 [pid 7031] <... creat resumed>) = 5 [pid 7025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7019] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] getdents64(3, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7025] <... mmap resumed>) = 0x7fee02e32000 [pid 7025] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7025] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7032], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7032 [pid 7025] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7025] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7031] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7022] <... write resumed>) = 57344 [pid 7019] <... mprotect resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7032 attached [pid 7032] set_robust_list(0x7fee02e529e0, 24) = 0 [ 96.898578][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.902925][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.903066][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.911082][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.935444][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.938849][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7032] creat("./file1", 000 [pid 7031] <... futex resumed>) = 1 [pid 7022] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7018] <... futex resumed>) = 0 [pid 5075] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7031] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7022] <... futex resumed>) = 0 [pid 7018] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7031] <... futex resumed>) = ? [pid 7019] <... clone resumed>, parent_tid=[7033], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7033 [pid 7018] <... exit_group resumed>) = ? [pid 5075] lstat("./106/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7031] +++ exited with 0 +++ [pid 7022] +++ exited with 0 +++ [pid 7019] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7018] +++ exited with 0 +++ [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./107/binderfs", [pid 7019] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7018, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] unlink("./106/binderfs" [pid 7019] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] unlink("./107/binderfs" [pid 5081] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [ 96.942904][ T7022] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.943870][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.954567][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.959925][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.980737][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.980893][ T7028] hfsplus: request for non-existent node 16715520 in B*Tree [ 96.990188][ T7027] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7033 attached [pid 7033] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7033] creat("./file1", 000 [pid 5081] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7032] <... creat resumed>) = 5 [pid 5081] <... openat resumed>) = 3 [pid 7032] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 7032] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 7032] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./109/binderfs") = 0 [pid 5081] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7033] <... creat resumed>) = 5 [pid 7033] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7027] <... write resumed>) = 57344 [pid 7033] <... futex resumed>) = 1 [pid 7027] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7019] <... futex resumed>) = 0 [pid 7033] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7027] <... futex resumed>) = 0 [pid 7023] exit_group(0 [pid 7030] <... futex resumed>) = ? [pid 7023] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 7030] +++ exited with 0 +++ [pid 7027] +++ exited with 0 +++ [pid 7023] +++ exited with 0 +++ [pid 5075] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7023, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./106/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7024] <... write resumed>) = 57344 [pid 7024] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7024] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7019] exit_group(0 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7019] <... exit_group resumed>) = ? [pid 7033] <... futex resumed>) = ? [pid 7024] <... futex resumed>) = ? [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7028] <... write resumed>) = 57344 [pid 5076] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7033] +++ exited with 0 +++ [pid 7028] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7024] +++ exited with 0 +++ [pid 7019] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 7025] exit_group(0 [pid 7032] <... futex resumed>) = ? [pid 7025] <... exit_group resumed>) = ? [pid 7032] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7019, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./109/binderfs" [pid 5077] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, [pid 5076] <... unlink resumed>) = 0 [pid 7028] <... futex resumed>) = ? [pid 5081] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(4, [pid 5074] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./109/bus", [pid 5077] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./107/binderfs", [pid 5075] getdents64(4, [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./107/bus", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./107/binderfs" [pid 5075] getdents64(4, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.005190][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.005216][ T11] hfsplus: b-tree write err: -5, ino 4 [ 97.015204][ T7024] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.036525][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 97.042534][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7028] +++ exited with 0 +++ [pid 7025] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7025, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5081] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... restart_syscall resumed>) = 0 [pid 5077] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 4 [pid 5080] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./105/binderfs") = 0 [pid 5080] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, [pid 5075] rmdir("./106/bus" [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(4, [pid 5077] lstat("./107/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] close(4 [pid 5081] close(4 [pid 5077] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./109/bus", [pid 5075] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./106" [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./109/bus" [pid 5077] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./107/bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5077] fstat(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 5081] getdents64(3, [pid 5075] mkdir("./107", 0777 [pid 5077] getdents64(4, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5081] close(3 [pid 5077] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./109" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5074] rmdir("./107" [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5081] mkdir("./110", 0777 [pid 5077] rmdir("./107/bus" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] mkdir("./108", 0777 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] fstat(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] lstat("./105/bus", [pid 5077] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] close(3 [pid 5080] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] rmdir("./107" [pid 5076] getdents64(4, [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7034 [pid 5081] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5080] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7035 [pid 5080] fstat(4, [pid 5077] mkdir("./108", 0777 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] close(4 [pid 5080] getdents64(4, [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5080] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] rmdir("./109/bus" [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7036 [pid 5080] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5080] rmdir("./105/bus") = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5077] close(3 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 7035 attached ./strace-static-x86_64: Process 7034 attached [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7035] set_robust_list(0x555556b055e0, 24 [pid 7034] set_robust_list(0x555556b055e0, 24 [pid 5080] close(3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 7035] <... set_robust_list resumed>) = 0 [pid 7034] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7035] chdir("./110" [pid 7034] chdir("./107" [pid 5080] rmdir("./105" [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7036 attached [pid 7035] <... chdir resumed>) = 0 [pid 7034] <... chdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7037 [pid 5076] rmdir("./109" [pid 7035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] mkdir("./106", 0777 [pid 7036] set_robust_list(0x555556b055e0, 24 [pid 7035] <... prctl resumed>) = 0 [pid 7034] <... prctl resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7037 attached [pid 7036] <... set_robust_list resumed>) = 0 [pid 7035] setpgid(0, 0 [pid 7034] setpgid(0, 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./110", 0777 [pid 7037] set_robust_list(0x555556b055e0, 24 [pid 7036] chdir("./108" [pid 7035] <... setpgid resumed>) = 0 [pid 7034] <... setpgid resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7037] <... set_robust_list resumed>) = 0 [pid 7036] <... chdir resumed>) = 0 [pid 7035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] <... mkdir resumed>) = 0 [pid 7037] chdir("./108" [pid 7036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7035] <... openat resumed>) = 3 [pid 7034] <... openat resumed>) = 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7037] <... chdir resumed>) = 0 [pid 7036] <... prctl resumed>) = 0 [pid 7035] write(3, "1000", 4 [pid 7034] write(3, "1000", 4 [pid 5080] close(3 [pid 5076] <... openat resumed>) = 3 [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7036] setpgid(0, 0 [pid 7035] <... write resumed>) = 4 [pid 7034] <... write resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7037] <... prctl resumed>) = 0 [pid 7036] <... setpgid resumed>) = 0 [pid 7035] close(3 [pid 7034] close(3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7037] setpgid(0, 0 [pid 7036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7035] <... close resumed>) = 0 [pid 7034] <... close resumed>) = 0 [pid 5076] close(3 [pid 7037] <... setpgid resumed>) = 0 [pid 7036] <... openat resumed>) = 3 [pid 7035] symlink("/dev/binderfs", "./binderfs" [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7038 [pid 5076] <... close resumed>) = 0 [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7036] write(3, "1000", 4 [pid 7035] <... symlink resumed>) = 0 [pid 7034] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] <... openat resumed>) = 3 [pid 7036] <... write resumed>) = 4 [pid 7035] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] write(3, "1000", 4 [pid 7036] close(3 [pid 7035] <... futex resumed>) = 0 [pid 7034] <... futex resumed>) = 0 [ 97.068358][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 97.076332][ T33] hfsplus: b-tree write err: -5, ino 4 [ 97.093635][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7037] <... write resumed>) = 4 [pid 7036] <... close resumed>) = 0 [pid 7035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7039 ./strace-static-x86_64: Process 7039 attached [pid 7037] close(3 [pid 7036] symlink("/dev/binderfs", "./binderfs" [pid 7035] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7034] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7037] <... close resumed>) = 0 [pid 7036] <... symlink resumed>) = 0 [pid 7035] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7034] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7038 attached [pid 7039] set_robust_list(0x555556b055e0, 24 [pid 7037] symlink("/dev/binderfs", "./binderfs" [pid 7036] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] <... mprotect resumed>) = 0 [pid 7034] <... mprotect resumed>) = 0 [pid 7039] <... set_robust_list resumed>) = 0 [pid 7038] set_robust_list(0x555556b055e0, 24 [pid 7037] <... symlink resumed>) = 0 [pid 7036] <... futex resumed>) = 0 [pid 7035] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7034] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7039] chdir("./110" [pid 7038] <... set_robust_list resumed>) = 0 [pid 7037] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7039] <... chdir resumed>) = 0 [pid 7038] chdir("./106" [pid 7037] <... futex resumed>) = 0 [pid 7036] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7035] <... clone resumed>, parent_tid=[7040], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7040 [pid 7034] <... clone resumed>, parent_tid=[7041], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7041 [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7038] <... chdir resumed>) = 0 [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7036] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7035] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7040 attached [pid 7039] <... prctl resumed>) = 0 [pid 7038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7037] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7036] <... mprotect resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7034] <... futex resumed>) = 0 [pid 7040] set_robust_list(0x7fee0b1f39e0, 24 [pid 7039] setpgid(0, 0 [pid 7038] <... prctl resumed>) = 0 [pid 7037] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7036] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7035] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7034] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7040] <... set_robust_list resumed>) = 0 [pid 7039] <... setpgid resumed>) = 0 [pid 7038] setpgid(0, 0 [pid 7037] <... mprotect resumed>) = 0 [pid 7040] memfd_create("syzkaller", 0 [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7038] <... setpgid resumed>) = 0 [pid 7037] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7036] <... clone resumed>, parent_tid=[7042], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7042 ./strace-static-x86_64: Process 7041 attached [pid 7040] <... memfd_create resumed>) = 3 [pid 7039] <... openat resumed>) = 3 [pid 7038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7041] set_robust_list(0x7fee0b1f39e0, 24 [pid 7038] <... openat resumed>) = 3 [pid 7037] <... clone resumed>, parent_tid=[7043], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7043 [pid 7041] <... set_robust_list resumed>) = 0 [pid 7038] write(3, "1000", 4 [pid 7037] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] memfd_create("syzkaller", 0 [pid 7038] <... write resumed>) = 4 [pid 7037] <... futex resumed>) = 0 [pid 7041] <... memfd_create resumed>) = 3 [pid 7038] close(3 [pid 7037] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7039] write(3, "1000", 4 [pid 7038] <... close resumed>) = 0 [pid 7036] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... mmap resumed>) = 0x7fee02dd3000 [pid 7040] <... mmap resumed>) = 0x7fee02dd3000 [pid 7039] <... write resumed>) = 4 [pid 7038] symlink("/dev/binderfs", "./binderfs" [pid 7036] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7042 attached [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7039] close(3 [pid 7038] <... symlink resumed>) = 0 [pid 7036] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7042] set_robust_list(0x7fee0b1f39e0, 24 [pid 7041] <... write resumed>) = 524288 [pid 7040] <... write resumed>) = 524288 [pid 7039] <... close resumed>) = 0 [pid 7038] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] <... set_robust_list resumed>) = 0 [pid 7040] munmap(0x7fee02dd3000, 524288 [pid 7039] symlink("/dev/binderfs", "./binderfs" [pid 7038] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7043 attached [pid 7039] <... symlink resumed>) = 0 [pid 7038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7042] memfd_create("syzkaller", 0 [pid 7043] set_robust_list(0x7fee0b1f39e0, 24 [pid 7040] <... munmap resumed>) = 0 [pid 7039] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7042] <... memfd_create resumed>) = 3 [pid 7043] <... set_robust_list resumed>) = 0 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7040] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7039] <... futex resumed>) = 0 [pid 7038] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7043] memfd_create("syzkaller", 0 [pid 7042] <... mmap resumed>) = 0x7fee02dd3000 [pid 7040] <... openat resumed>) = 4 [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7038] <... mprotect resumed>) = 0 [pid 7043] <... memfd_create resumed>) = 3 [pid 7039] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7038] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7041] munmap(0x7fee02dd3000, 524288 [pid 7040] ioctl(4, LOOP_SET_FD, 3 [pid 7039] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7043] <... mmap resumed>) = 0x7fee02dd3000 [pid 7041] <... munmap resumed>) = 0 [pid 7039] <... mprotect resumed>) = 0 [pid 7038] <... clone resumed>, parent_tid=[7044], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7044 [pid 7043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7041] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7038] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7043] <... write resumed>) = 524288 [pid 7041] <... openat resumed>) = 4 [pid 7038] <... futex resumed>) = 0 [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 7039] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7038] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7043] munmap(0x7fee02dd3000, 524288./strace-static-x86_64: Process 7044 attached [pid 7044] set_robust_list(0x7fee0b1f39e0, 24 [pid 7043] <... munmap resumed>) = 0 [pid 7044] <... set_robust_list resumed>) = 0 [pid 7044] memfd_create("syzkaller", 0) = 3 [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7043] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7044] <... mmap resumed>) = 0x7fee02dd3000 [pid 7043] ioctl(4, LOOP_SET_FD, 3 [pid 7042] <... write resumed>) = 524288 [pid 7039] <... clone resumed>, parent_tid=[7045], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7045 [pid 7044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7041] <... ioctl resumed>) = 0 [pid 7041] close(3) = 0 [pid 7041] mkdir("./bus", 0777) = 0 [pid 7041] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7044] <... write resumed>) = 524288 [pid 7044] munmap(0x7fee02dd3000, 524288) = 0 [pid 7044] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7044] ioctl(4, LOOP_SET_FD, 3 [ 97.183624][ T7040] loop5: detected capacity change from 0 to 1024 [ 97.191389][ T7041] loop1: detected capacity change from 0 to 1024 [ 97.194700][ T5083] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.204632][ T7043] loop3: detected capacity change from 0 to 1024 [ 97.211912][ T5085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.227562][ T7044] loop4: detected capacity change from 0 to 1024 [pid 7039] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... mount resumed>) = 0 [pid 7041] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7041] chdir("./bus") = 0 [pid 7041] ioctl(4, LOOP_CLR_FD) = 0 [pid 7041] close(4) = 0 [pid 7041] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = 0 [pid 7034] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7039] <... futex resumed>) = 0 [pid 7042] munmap(0x7fee02dd3000, 524288 [pid 7039] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7041] <... futex resumed>) = 1 [pid 7042] <... munmap resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7041] creat("./bus", 000) = 4 [pid 7041] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = 0 [pid 7034] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7041] <... futex resumed>) = 1 [pid 7041] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7043] <... ioctl resumed>) = 0 [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7043] close(3) = 0 [pid 7043] mkdir("./bus", 0777) = 0 ./strace-static-x86_64: Process 7045 attached [pid 7043] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7045] set_robust_list(0x7fee0b1f39e0, 24) = 0 [ 97.231705][ T5085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.249913][ T5085] Buffer I/O error on dev loop5, logical block 0, async page read [ 97.252012][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.258265][ T7042] loop0: detected capacity change from 0 to 1024 [pid 7045] memfd_create("syzkaller", 0 [pid 7042] <... ioctl resumed>) = 0 [pid 7043] <... mount resumed>) = 0 [pid 7040] <... ioctl resumed>) = 0 [pid 7043] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7040] close(3 [pid 7043] <... openat resumed>) = 3 [pid 7043] chdir("./bus" [pid 7040] <... close resumed>) = 0 [pid 7043] <... chdir resumed>) = 0 [pid 7040] mkdir("./bus", 0777 [pid 7045] <... memfd_create resumed>) = 3 [pid 7044] <... ioctl resumed>) = 0 [pid 7043] ioctl(4, LOOP_CLR_FD [pid 7042] close(3 [pid 7044] close(3 [pid 7043] <... ioctl resumed>) = 0 [pid 7040] <... mkdir resumed>) = 0 [pid 7044] <... close resumed>) = 0 [pid 7043] close(4 [pid 7040] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7044] mkdir("./bus", 0777 [pid 7043] <... close resumed>) = 0 [pid 7044] <... mkdir resumed>) = 0 [pid 7043] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7044] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7043] <... futex resumed>) = 1 [pid 7037] <... futex resumed>) = 0 [pid 7043] creat("./bus", 000 [pid 7037] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7043] <... creat resumed>) = 4 [pid 7037] <... futex resumed>) = 0 [pid 7034] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7043] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7034] <... futex resumed>) = 0 [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7043] <... futex resumed>) = 0 [pid 7042] <... close resumed>) = 0 [pid 7037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7043] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7045] <... mmap resumed>) = 0x7fee02dd3000 [pid 7037] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... mmap resumed>) = 0x7fee02e32000 [pid 7044] <... mount resumed>) = 0 [pid 7042] mkdir("./bus", 0777 [pid 7040] <... mount resumed>) = 0 [pid 7037] <... futex resumed>) = 0 [pid 7034] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7044] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7040] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7037] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7034] <... mprotect resumed>) = 0 [pid 7044] <... openat resumed>) = 3 [pid 7040] <... openat resumed>) = 3 [pid 7034] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7044] chdir("./bus" [pid 7040] chdir("./bus" [pid 7044] <... chdir resumed>) = 0 [pid 7040] <... chdir resumed>) = 0 [pid 7034] <... clone resumed>, parent_tid=[7046], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7046 [pid 7034] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7034] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7044] ioctl(4, LOOP_CLR_FD [pid 7042] <... mkdir resumed>) = 0 [pid 7040] ioctl(4, LOOP_CLR_FD [pid 7044] <... ioctl resumed>) = 0 [pid 7040] <... ioctl resumed>) = 0 [pid 7044] close(4 [pid 7040] close(4 [pid 7044] <... close resumed>) = 0 [pid 7040] <... close resumed>) = 0 [pid 7044] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7040] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7044] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 1 [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7046 attached [pid 7044] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] set_robust_list(0x7fee02e529e0, 24 [pid 7044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 97.282897][ T5085] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.292753][ T5085] Buffer I/O error on dev loop5, logical block 0, async page read [ 97.305674][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.307317][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.321697][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7046] <... set_robust_list resumed>) = 0 [pid 7044] creat("./bus", 000 [pid 7040] creat("./bus", 000 [pid 7038] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7035] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7046] creat("./file1", 000 [pid 7044] <... creat resumed>) = 4 [pid 7040] <... creat resumed>) = 4 [pid 7045] <... write resumed>) = 524288 [pid 7044] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7040] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7045] munmap(0x7fee02dd3000, 524288 [pid 7044] <... futex resumed>) = 1 [pid 7040] <... futex resumed>) = 1 [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7044] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7040] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7044] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7040] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7038] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7035] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7045] <... munmap resumed>) = 0 [pid 7042] <... mount resumed>) = 0 [pid 7037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7034] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7045] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7037] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7045] <... openat resumed>) = 4 [pid 7042] <... openat resumed>) = 3 [pid 7037] <... futex resumed>) = 0 [pid 7045] ioctl(4, LOOP_SET_FD, 3 [pid 7042] chdir("./bus" [pid 7037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7037] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7037] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7047], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7047 [pid 7037] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7037] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7047 attached [pid 7047] set_robust_list(0x7fee02e529e0, 24) = 0 [ 97.324068][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.350102][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.356126][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.359786][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.375303][ T7045] loop2: detected capacity change from 0 to 1024 [pid 7047] creat("./file1", 000 [pid 7045] <... ioctl resumed>) = 0 [pid 7042] <... chdir resumed>) = 0 [pid 7045] close(3 [pid 7042] ioctl(4, LOOP_CLR_FD [pid 7045] <... close resumed>) = 0 [pid 7045] mkdir("./bus", 0777 [pid 7042] <... ioctl resumed>) = 0 [pid 7045] <... mkdir resumed>) = 0 [pid 7042] close(4 [pid 7041] <... write resumed>) = 57344 [pid 7046] <... creat resumed>) = 5 [pid 7038] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7046] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7046] <... futex resumed>) = 0 [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7046] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7038] <... mmap resumed>) = 0x7fee02e32000 [pid 7035] <... mmap resumed>) = 0x7fee02e32000 [pid 7038] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7035] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7038] <... mprotect resumed>) = 0 [pid 7035] <... mprotect resumed>) = 0 [pid 7038] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7035] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7038] <... clone resumed>, parent_tid=[7048], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7048 [pid 7035] <... clone resumed>, parent_tid=[7049], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7049 [pid 7038] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7035] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7038] <... futex resumed>) = 0 [pid 7035] <... futex resumed>) = 0 [pid 7038] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 97.380269][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.384965][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.397284][ T7041] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.398471][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.404880][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.413075][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.420385][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7035] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7045] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7042] <... close resumed>) = 0 [pid 7041] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7048 attached ./strace-static-x86_64: Process 7049 attached [pid 7048] set_robust_list(0x7fee02e529e0, 24 [pid 7049] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7048] <... set_robust_list resumed>) = 0 [pid 7049] creat("./file1", 000 [pid 7048] creat("./file1", 000 [pid 7047] <... creat resumed>) = 5 [pid 7047] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7047] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7042] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7041] <... futex resumed>) = 0 [pid 7034] exit_group(0 [pid 7042] <... futex resumed>) = 1 [pid 7041] write(-256, "\x00\x00\x00\x00\x00\x27\xe5\x02\xee\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xf0\xfa\x02\x00\x00\x00\x00\x60\x00\x00\x00\x00\x00\x00\x00\x15\xb3\xae\x1d\x00\x00\x00\x00\x60\x00\x00\x00\x00\x00\x00\x00\xea\xef\xc6\x20\x00\x00\x00\x00\x5f\x00\x00\x00\x00\x00\x00\x00\x24\x5f\x8f\x20\x00\x00\x00\x00\x60\x00\x00\x00\x00\x00\x00\x00\x89\xc1\xc8\x01\x00\x00\x00\x00\x2e\x2f\x31\x30\x37\x00\x00\x00"..., 1073741825 [pid 7036] <... futex resumed>) = 0 [pid 7042] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7041] +++ exited with 0 +++ [pid 7036] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7034] <... exit_group resumed>) = ? [pid 7036] <... futex resumed>) = 0 [pid 7046] <... futex resumed>) = ? [pid 7042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7036] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7046] +++ exited with 0 +++ [pid 7042] creat("./bus", 000 [pid 7034] +++ exited with 0 +++ [pid 7042] <... creat resumed>) = 4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7042] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7036] <... futex resumed>) = 0 [pid 7048] <... creat resumed>) = 5 [pid 7048] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7038] <... futex resumed>) = 0 [pid 7048] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7036] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7045] <... mount resumed>) = 0 [pid 7042] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7036] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 97.433475][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.440176][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.454412][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.463703][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.466418][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7045] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7049] <... creat resumed>) = 5 [pid 7049] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7049] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7045] <... openat resumed>) = 3 [pid 5075] fstat(3, [pid 7043] <... write resumed>) = 57344 [pid 7043] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7037] exit_group(0 [pid 7047] <... futex resumed>) = ? [pid 7037] <... exit_group resumed>) = ? [pid 7047] +++ exited with 0 +++ [pid 7043] <... futex resumed>) = ? [pid 7043] +++ exited with 0 +++ [pid 7037] +++ exited with 0 +++ [pid 7045] chdir("./bus" [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7045] <... chdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7037, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] getdents64(3, [pid 7045] ioctl(4, LOOP_CLR_FD [pid 7044] <... write resumed>) = 57344 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7044] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7045] <... ioctl resumed>) = 0 [pid 7044] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./107/binderfs", [pid 7045] close(4 [pid 7044] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] unlink("./107/binderfs" [pid 7038] exit_group(0 [pid 7048] <... futex resumed>) = ? [pid 7038] <... exit_group resumed>) = ? [pid 7048] +++ exited with 0 +++ [pid 7040] <... write resumed>) = 57344 [pid 7040] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7035] exit_group(0 [pid 7049] <... futex resumed>) = ? [pid 7035] <... exit_group resumed>) = ? [pid 7049] +++ exited with 0 +++ [pid 7036] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] fstat(3, [pid 7036] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... unlink resumed>) = 0 [pid 7036] <... futex resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] getdents64(3, [pid 7036] <... mmap resumed>) = 0x7fee02e32000 [pid 7036] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7036] <... mprotect resumed>) = 0 [pid 5077] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./108/binderfs", [pid 7036] <... clone resumed>, parent_tid=[7050], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7050 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./108/binderfs" [pid 7036] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... unlink resumed>) = 0 [pid 7036] <... futex resumed>) = 0 [pid 5077] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7036] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7044] <... futex resumed>) = ? [pid 7040] +++ exited with 0 +++ [pid 7035] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7035, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7045] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7044] +++ exited with 0 +++ [pid 7038] +++ exited with 0 +++ [pid 7045] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7045] <... futex resumed>) = 1 [pid 7039] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7039] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7038, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5081] fstat(3, [pid 7045] creat("./bus", 000 [pid 7039] <... futex resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7039] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7045] <... creat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 97.472071][ T7043] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.480450][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.491778][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.493230][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.505976][ T7040] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.508197][ T7044] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7045] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./110/binderfs", [pid 5080] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7045] <... futex resumed>) = 1 [pid 7039] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 7045] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7039] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 7039] <... futex resumed>) = 0 [pid 5081] unlink("./110/binderfs" [pid 5080] fstat(3, [pid 7039] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5075] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5075] lstat("./107/bus", [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7050 attached [pid 5080] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 7050] set_robust_list(0x7fee02e529e0, 24 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] fstat(4, [pid 7050] <... set_robust_list resumed>) = 0 [pid 5080] lstat("./106/binderfs", [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7050] creat("./file1", 000 [pid 5075] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] unlink("./106/binderfs" [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./107/bus" [pid 7036] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = 0 [pid 5077] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5081] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./107" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5081] lstat("./110/bus", [pid 5075] mkdir("./108", 0777 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7051 [pid 5081] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 97.538582][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 97.538585][ T11] hfsplus: b-tree write err: -5, ino 4 [ 97.548164][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.567679][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 97.578848][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5081] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] lstat("./108/bus", [pid 5081] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] fstat(4, [pid 5077] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5077] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7051 attached [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... openat resumed>) = 4 [pid 7051] set_robust_list(0x555556b055e0, 24 [pid 7039] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(4, [pid 5077] fstat(4, [pid 7051] <... set_robust_list resumed>) = 0 [pid 7051] chdir("./108") = 0 [pid 7051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7051] setpgid(0, 0) = 0 [pid 7051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7051] <... openat resumed>) = 3 [pid 7051] write(3, "1000", 4) = 4 [pid 5080] <... umount2 resumed>) = 0 [pid 7051] close(3) = 0 [pid 7051] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7051] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7051] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] lstat("./106/bus", [pid 7051] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7051] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7051] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7051] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7039] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5077] getdents64(4, [pid 7051] <... clone resumed>, parent_tid=[7052], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7052 [pid 5080] <... openat resumed>) = 4 [pid 7051] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 7051] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7051] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 7039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [ 97.594224][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.614821][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.622276][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.630208][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] rmdir("./106/bus" [pid 7050] <... creat resumed>) = 5 [pid 7039] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] rmdir("./110/bus" [pid 5080] <... rmdir resumed>) = 0 [pid 5077] getdents64(4, [pid 7050] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 7050] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7050] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] close(3) = 0 [pid 5080] rmdir("./106") = 0 [pid 5080] mkdir("./107", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 ./strace-static-x86_64: Process 7052 attached [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7052] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7053 [pid 7052] memfd_create("syzkaller", 0) = 3 [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7039] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7039] <... mprotect resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] close(4 [pid 7039] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... close resumed>) = 0 [pid 5081] close(3 [pid 5077] rmdir("./108/bus" [pid 7039] <... clone resumed>, parent_tid=[7054], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7054 [pid 5081] <... close resumed>) = 0 [pid 7039] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./110" [pid 5077] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7054 attached [pid 7052] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7053 attached [pid 7053] set_robust_list(0x555556b055e0, 24) = 0 [pid 7053] chdir("./107") = 0 [pid 7053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7053] setpgid(0, 0) = 0 [pid 7053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7039] <... futex resumed>) = 0 [pid 7054] set_robust_list(0x7fee02e529e0, 24 [pid 7053] <... openat resumed>) = 3 [pid 7039] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 7053] write(3, "1000", 4) = 4 [pid 7053] close(3) = 0 [pid 7053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7053] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7053] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7052] munmap(0x7fee02dd3000, 524288 [pid 7053] <... mprotect resumed>) = 0 [pid 7053] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7052] <... munmap resumed>) = 0 [pid 7053] <... clone resumed>, parent_tid=[7055], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7055 [pid 7053] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7053] <... futex resumed>) = 0 [pid 7052] <... openat resumed>) = 4 [pid 7053] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7052] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7052] close(3) = 0 [pid 7052] mkdir("./bus", 0777) = 0 [pid 7052] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7055 attached [pid 7055] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7055] memfd_create("syzkaller", 0) = 3 [pid 7055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7054] <... set_robust_list resumed>) = 0 [pid 5081] mkdir("./111", 0777 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [ 97.645879][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.653218][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.670695][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.678728][ T7042] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.685942][ T7052] loop1: detected capacity change from 0 to 1024 [pid 7052] <... mount resumed>) = 0 [pid 7052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7052] chdir("./bus") = 0 [pid 7052] ioctl(4, LOOP_CLR_FD) = 0 [pid 7052] close(4 [pid 7055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7054] creat("./file1", 000 [pid 7045] <... write resumed>) = 57344 [pid 7042] <... write resumed>) = 57344 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] close(3 [pid 7055] <... write resumed>) = 524288 [pid 7054] <... creat resumed>) = 5 [pid 7045] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7042] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... close resumed>) = 0 [pid 7054] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7045] <... futex resumed>) = 0 [pid 7042] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] rmdir("./108" [pid 7054] <... futex resumed>) = 1 [pid 7045] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7042] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7039] <... futex resumed>) = 0 [pid 7036] exit_group(0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] <... rmdir resumed>) = 0 [pid 7054] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7050] <... futex resumed>) = ? [pid 7042] <... futex resumed>) = ? [pid 7039] exit_group(0 [pid 7036] <... exit_group resumed>) = ? [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] mkdir("./109", 0777 [pid 7054] <... futex resumed>) = ? [pid 7050] +++ exited with 0 +++ [pid 7045] <... futex resumed>) = ? [pid 7042] +++ exited with 0 +++ [pid 7039] <... exit_group resumed>) = ? [pid 7036] +++ exited with 0 +++ [pid 5081] close(3 [pid 5077] <... mkdir resumed>) = 0 [pid 7055] munmap(0x7fee02dd3000, 524288 [pid 7054] +++ exited with 0 +++ [pid 7045] +++ exited with 0 +++ [pid 7039] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7036, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7055] <... munmap resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... openat resumed>) = 3 [pid 7055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7055] <... openat resumed>) = 4 [pid 7052] <... close resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7056 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7055] ioctl(4, LOOP_SET_FD, 3 [pid 7052] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 97.692694][ T7045] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7056 attached [pid 7052] <... futex resumed>) = 1 [pid 7051] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7056] set_robust_list(0x555556b055e0, 24 [pid 7052] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7051] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 7056] <... set_robust_list resumed>) = 0 [pid 7052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7051] <... futex resumed>) = 0 [pid 5076] fstat(3, [pid 5074] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7056] chdir("./111" [pid 7052] creat("./bus", 000 [pid 7051] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7057 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5074] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... openat resumed>) = 3 [pid 7056] <... chdir resumed>) = 0 [pid 7052] <... creat resumed>) = 4 [pid 5076] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] fstat(3, [pid 7056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7052] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7056] <... prctl resumed>) = 0 [pid 7052] <... futex resumed>) = 1 [pid 7051] <... futex resumed>) = 0 [pid 5076] lstat("./110/binderfs", [pid 5074] getdents64(3, [pid 7056] setpgid(0, 0 [pid 7052] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7051] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7057 attached [pid 7056] <... setpgid resumed>) = 0 [pid 7052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7051] <... futex resumed>) = 0 [pid 5076] unlink("./110/binderfs" [pid 5074] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./108/binderfs", [pid 7056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7052] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7051] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7056] <... openat resumed>) = 3 [pid 5074] unlink("./108/binderfs" [pid 7056] write(3, "1000", 4 [pid 5074] <... unlink resumed>) = 0 [pid 7056] <... write resumed>) = 4 [pid 5074] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7055] <... ioctl resumed>) = 0 [pid 7055] close(3) = 0 [pid 7055] mkdir("./bus", 0777) = 0 [pid 7055] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7055] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7055] chdir("./bus") = 0 [pid 7055] ioctl(4, LOOP_CLR_FD) = 0 [pid 7055] close(4) = 0 [pid 7055] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7053] <... futex resumed>) = 0 [pid 7053] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7053] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7055] <... futex resumed>) = 1 [pid 7057] set_robust_list(0x555556b055e0, 24 [pid 7056] close(3 [pid 7055] creat("./bus", 000) = 4 [ 97.720378][ T7055] loop4: detected capacity change from 0 to 1024 [ 97.743942][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.751726][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.764226][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7057] <... set_robust_list resumed>) = 0 [pid 7056] <... close resumed>) = 0 [pid 7057] chdir("./109" [pid 7056] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = 0 [pid 7055] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7055] <... futex resumed>) = 1 [pid 7053] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7055] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7053] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] lstat("./108/bus", [pid 7057] <... chdir resumed>) = 0 [pid 7056] <... symlink resumed>) = 0 [pid 7053] <... futex resumed>) = 0 [pid 7051] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7053] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./108/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./108") = 0 [pid 5074] mkdir("./109", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7058 ./strace-static-x86_64: Process 7058 attached [pid 7058] set_robust_list(0x555556b055e0, 24) = 0 [pid 7058] chdir("./109") = 0 [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7058] setpgid(0, 0) = 0 [ 97.770103][ T11] hfsplus: b-tree write err: -5, ino 4 [ 97.776521][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.784478][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.791953][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.791967][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.792113][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7058] write(3, "1000", 4) = 4 [pid 7058] close(3) = 0 [pid 7058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7058] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7056] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = 0 [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7058] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7057] <... prctl resumed>) = 0 [pid 7056] <... futex resumed>) = 0 [pid 7051] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7057] setpgid(0, 0 [pid 7056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7052] <... write resumed>) = 57344 [pid 7051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7058] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7057] <... setpgid resumed>) = 0 [pid 7056] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7052] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7058] <... clone resumed>, parent_tid=[7059], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7059 [pid 7057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7056] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7052] <... futex resumed>) = 0 [pid 7051] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7058] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7059 attached [pid 7059] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7059] memfd_create("syzkaller", 0) = 3 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5076] lstat("./110/bus", [pid 7052] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7051] <... mprotect resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7057] <... openat resumed>) = 3 [pid 7056] <... mprotect resumed>) = 0 [pid 7051] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7057] write(3, "1000", 4 [pid 7056] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] <... write resumed>) = 4 [pid 7051] <... clone resumed>, parent_tid=[7060], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7060 [pid 5076] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7057] close(3 [pid 7056] <... clone resumed>, parent_tid=[7061], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7061 [pid 7053] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7051] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7060 attached [pid 7057] <... close resumed>) = 0 [pid 7056] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7053] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7051] <... futex resumed>) = 0 [pid 5076] fstat(4, [pid 7060] set_robust_list(0x7fee02e529e0, 24 [pid 7057] symlink("/dev/binderfs", "./binderfs" [pid 7056] <... futex resumed>) = 0 [pid 7053] <... futex resumed>) = 0 [pid 7051] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7061 attached [pid 7060] <... set_robust_list resumed>) = 0 [pid 7059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7057] <... symlink resumed>) = 0 [pid 7056] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] getdents64(4, [pid 7061] set_robust_list(0x7fee0b1f39e0, 24 [pid 7060] creat("./file1", 000 [pid 7057] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] <... write resumed>) = 57344 [pid 7053] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7061] <... set_robust_list resumed>) = 0 [pid 7060] <... creat resumed>) = 5 [pid 7057] <... futex resumed>) = 0 [pid 7055] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7053] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] getdents64(4, [pid 7061] memfd_create("syzkaller", 0 [pid 7060] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7055] <... futex resumed>) = 0 [pid 7053] <... mprotect resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7061] <... memfd_create resumed>) = 3 [pid 7060] <... futex resumed>) = 1 [pid 7057] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7055] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7053] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7051] <... futex resumed>) = 0 [pid 5076] close(4 [pid 7061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7060] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7051] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 7061] <... mmap resumed>) = 0x7fee02dd3000 [pid 7060] <... futex resumed>) = ? [pid 7057] <... mprotect resumed>) = 0 [pid 7053] <... clone resumed>, parent_tid=[7062], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7062 [pid 7052] <... futex resumed>) = ? [pid 7051] <... exit_group resumed>) = ? [pid 5076] rmdir("./110/bus"./strace-static-x86_64: Process 7062 attached [pid 7061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7060] +++ exited with 0 +++ [pid 7059] <... write resumed>) = 524288 [pid 7057] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7053] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7052] +++ exited with 0 +++ [pid 7062] set_robust_list(0x7fee02e529e0, 24 [pid 7059] munmap(0x7fee02dd3000, 524288 [pid 7053] <... futex resumed>) = 0 [pid 7051] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 7062] <... set_robust_list resumed>) = 0 [pid 7059] <... munmap resumed>) = 0 [pid 7057] <... clone resumed>, parent_tid=[7063], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7063 [pid 7053] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7051, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7062] creat("./file1", 000 [pid 7059] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7057] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7062] <... creat resumed>) = 5 [pid 7059] <... openat resumed>) = 4 [pid 7057] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7061] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7063 attached [pid 7062] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] ioctl(4, LOOP_SET_FD, 3 [ 97.792123][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.802497][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.829997][ T7052] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.845081][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.861432][ T7055] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7057] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 7063] set_robust_list(0x7fee0b1f39e0, 24 [pid 7062] <... futex resumed>) = 1 [pid 7061] munmap(0x7fee02dd3000, 524288 [pid 7053] <... futex resumed>) = 0 [pid 5076] rmdir("./110" [pid 7063] <... set_robust_list resumed>) = 0 [pid 7061] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7063] memfd_create("syzkaller", 0 [pid 7061] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] mkdir("./111", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] <... memfd_create resumed>) = 3 [pid 7061] <... openat resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7061] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 7062] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7059] <... ioctl resumed>) = 0 [pid 7053] exit_group(0 [pid 7062] <... futex resumed>) = ? [pid 7059] close(3 [pid 7055] <... futex resumed>) = ? [pid 7053] <... exit_group resumed>) = ? [pid 7062] +++ exited with 0 +++ [pid 7059] <... close resumed>) = 0 [pid 7055] +++ exited with 0 +++ [pid 7053] +++ exited with 0 +++ [pid 7059] mkdir("./bus", 0777) = 0 [pid 7059] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7053, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7063] <... mmap resumed>) = 0x7fee02dd3000 [pid 5076] <... openat resumed>) = 3 [pid 5075] fstat(3, [pid 5080] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7059] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5075] getdents64(3, [pid 7059] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 7063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7061] <... ioctl resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7063] <... write resumed>) = 524288 [pid 7061] close(3 [pid 5080] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7063] munmap(0x7fee02dd3000, 524288 [pid 7061] <... close resumed>) = 0 [pid 7059] chdir("./bus" [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7059] <... chdir resumed>) = 0 [pid 5080] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./108/binderfs", [pid 5080] lstat("./107/binderfs", [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7064 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./108/binderfs" [pid 5080] unlink("./107/binderfs" [pid 7059] ioctl(4, LOOP_CLR_FD) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7059] close(4./strace-static-x86_64: Process 7064 attached [pid 7063] <... munmap resumed>) = 0 [pid 7061] mkdir("./bus", 0777 [pid 7059] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5075] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7064] set_robust_list(0x555556b055e0, 24 [pid 7063] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7061] <... mkdir resumed>) = 0 [pid 7059] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7064] <... set_robust_list resumed>) = 0 [pid 7063] <... openat resumed>) = 4 [pid 7061] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7064] chdir("./111" [pid 7063] ioctl(4, LOOP_SET_FD, 3 [pid 7064] <... chdir resumed>) = 0 [pid 7063] <... ioctl resumed>) = 0 [pid 7061] <... mount resumed>) = 0 [pid 7059] <... futex resumed>) = 1 [pid 7058] <... futex resumed>) = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7063] close(3 [pid 7061] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7064] <... prctl resumed>) = 0 [pid 7063] <... close resumed>) = 0 [pid 7061] <... openat resumed>) = 3 [pid 7064] setpgid(0, 0 [pid 7063] mkdir("./bus", 0777 [pid 7061] chdir("./bus" [pid 7059] creat("./bus", 000 [pid 7058] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... setpgid resumed>) = 0 [pid 7063] <... mkdir resumed>) = 0 [pid 7061] <... chdir resumed>) = 0 [pid 7059] <... creat resumed>) = 4 [pid 7058] <... futex resumed>) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7063] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7061] ioctl(4, LOOP_CLR_FD [pid 7064] <... openat resumed>) = 3 [pid 7061] <... ioctl resumed>) = 0 [pid 7064] write(3, "1000", 4 [pid 7061] close(4 [pid 7059] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 7064] <... write resumed>) = 4 [pid 7063] <... mount resumed>) = 0 [pid 7061] <... close resumed>) = 0 [pid 7059] <... futex resumed>) = 0 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7064] close(3 [pid 7063] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7061] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... close resumed>) = 0 [pid 7063] <... openat resumed>) = 3 [pid 7061] <... futex resumed>) = 1 [pid 7056] <... futex resumed>) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs" [pid 7063] chdir("./bus" [pid 7061] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7059] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7058] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7056] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 7064] <... symlink resumed>) = 0 [pid 7063] <... chdir resumed>) = 0 [pid 7061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7058] <... futex resumed>) = 0 [pid 7056] <... futex resumed>) = 0 [pid 5080] lstat("./107/bus", [pid 5075] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 97.883868][ T7059] loop0: detected capacity change from 0 to 1024 [ 97.889879][ T7061] loop5: detected capacity change from 0 to 1024 [ 97.913162][ T11] hfsplus: b-tree write err: -5, ino 4 [ 97.915641][ T7063] loop3: detected capacity change from 0 to 1024 [ 97.925662][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7064] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] ioctl(4, LOOP_CLR_FD [pid 7061] creat("./bus", 000 [pid 7058] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7056] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] <... futex resumed>) = 0 [pid 7063] <... ioctl resumed>) = 0 [pid 7061] <... creat resumed>) = 4 [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7063] close(4 [pid 7061] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7063] <... close resumed>) = 0 [pid 7061] <... futex resumed>) = 1 [pid 7056] <... futex resumed>) = 0 [pid 7064] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7063] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7061] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7056] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... mprotect resumed>) = 0 [pid 7063] <... futex resumed>) = 1 [pid 7061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 7056] <... futex resumed>) = 0 [pid 7064] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7063] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7061] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7057] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7056] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 7064] <... clone resumed>, parent_tid=[7065], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7065 [pid 7063] creat("./bus", 000 [pid 7057] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] <... creat resumed>) = 4 [pid 5080] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./108/bus", [pid 7064] <... futex resumed>) = 0 [pid 7063] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7063] <... futex resumed>) = 1 [pid 7057] <... futex resumed>) = 0 [pid 7063] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7057] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5075] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7063] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7057] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 4 [pid 5080] getdents64(4, [pid 5075] fstat(4, ./strace-static-x86_64: Process 7065 attached [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(4 [pid 5075] getdents64(4, [pid 5080] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] rmdir("./107/bus" [pid 5075] getdents64(4, [pid 7065] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7065] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, [pid 5075] close(4 [pid 7065] memfd_create("syzkaller", 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 7065] <... memfd_create resumed>) = 3 [pid 5080] close(3 [pid 5075] rmdir("./108/bus" [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [ 97.949005][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.958459][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.964079][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.978009][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 97.988497][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7065] <... mmap resumed>) = 0x7fee02dd3000 [pid 7056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] rmdir("./107" [pid 5075] <... rmdir resumed>) = 0 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7056] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7056] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 7065] <... write resumed>) = 524288 [pid 7056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7056] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7056] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7066], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7066 [pid 7056] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7056] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7058] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./108", 0777 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7058] <... futex resumed>) = 0 [pid 7065] munmap(0x7fee02dd3000, 524288./strace-static-x86_64: Process 7066 attached [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 7066] set_robust_list(0x7fee02e529e0, 24 [pid 7058] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7058] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... openat resumed>) = 3 [pid 5075] rmdir("./108" [pid 7066] creat("./file1", 000 [pid 7058] <... mprotect resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7065] <... munmap resumed>) = 0 [pid 7058] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... rmdir resumed>) = 0 [pid 5080] close(3 [pid 5075] mkdir("./109", 0777 [pid 7065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7058] <... clone resumed>, parent_tid=[7067], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7067 [pid 5080] <... close resumed>) = 0 [pid 7065] <... openat resumed>) = 4 [pid 7065] ioctl(4, LOOP_SET_FD, 3 [pid 7058] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7068 attached ./strace-static-x86_64: Process 7067 attached [pid 7066] <... creat resumed>) = 5 [pid 7058] <... futex resumed>) = 0 [pid 7057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7057] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 7057] <... futex resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7057] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] close(3 [pid 7057] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... close resumed>) = 0 [pid 7057] <... mprotect resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 98.003947][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.009161][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.015997][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.034921][ T7065] loop2: detected capacity change from 0 to 1024 [ 98.041294][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7057] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7069 [pid 7057] <... clone resumed>, parent_tid=[7070], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7070 [pid 7057] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7057] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7070 attached [pid 7070] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7070] creat("./file1", 000./strace-static-x86_64: Process 7069 attached [pid 7069] set_robust_list(0x555556b055e0, 24) = 0 [pid 7069] chdir("./109") = 0 [pid 7068] set_robust_list(0x555556b055e0, 24 [pid 7067] set_robust_list(0x7fee02e529e0, 24 [pid 7066] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7068 [pid 7069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7056] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7069] <... prctl resumed>) = 0 [pid 7069] setpgid(0, 0) = 0 [pid 7069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7069] write(3, "1000", 4) = 4 [pid 7069] close(3) = 0 [pid 7069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7068] <... set_robust_list resumed>) = 0 [pid 7069] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7069] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7069] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7071], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7071 [pid 7069] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7065] <... ioctl resumed>) = 0 [pid 7065] close(3) = 0 [pid 7065] mkdir("./bus", 0777 [pid 7066] <... futex resumed>) = 0 [pid 7068] chdir("./108" [pid 7067] <... set_robust_list resumed>) = 0 [pid 7066] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] <... chdir resumed>) = 0 [pid 7067] creat("./file1", 000 [pid 7065] <... mkdir resumed>) = 0 [pid 7065] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7071 attached [pid 7071] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7068] setpgid(0, 0 [pid 7071] memfd_create("syzkaller", 0) = 3 [pid 7065] <... mount resumed>) = 0 [pid 7071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7065] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7070] <... creat resumed>) = 5 [pid 7068] <... setpgid resumed>) = 0 [pid 7067] <... creat resumed>) = 5 [pid 7065] <... openat resumed>) = 3 [pid 7061] <... write resumed>) = 57344 [ 98.041307][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.041987][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.064678][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.072234][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.079740][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.088649][ T7061] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.096900][ T7059] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7070] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7067] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] chdir("./bus" [pid 7061] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... write resumed>) = 57344 [pid 7057] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7071] <... write resumed>) = 524288 [pid 7070] <... futex resumed>) = 0 [pid 7068] <... openat resumed>) = 3 [pid 7067] <... futex resumed>) = 1 [pid 7061] <... futex resumed>) = 0 [pid 7059] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = 0 [pid 7071] munmap(0x7fee02dd3000, 524288 [pid 7068] write(3, "1000", 4 [pid 7067] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7061] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7059] <... futex resumed>) = 0 [pid 7058] exit_group(0 [pid 7071] <... munmap resumed>) = 0 [pid 7068] <... write resumed>) = 4 [pid 7067] <... futex resumed>) = ? [pid 7058] <... exit_group resumed>) = ? [pid 7071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7068] close(3 [pid 7067] +++ exited with 0 +++ [pid 7059] +++ exited with 0 +++ [pid 7058] +++ exited with 0 +++ [pid 7071] <... openat resumed>) = 4 [pid 7068] <... close resumed>) = 0 [pid 7071] ioctl(4, LOOP_SET_FD, 3 [pid 7068] symlink("/dev/binderfs", "./binderfs" [pid 7071] <... ioctl resumed>) = 0 [pid 7070] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] <... symlink resumed>) = 0 [pid 7065] <... chdir resumed>) = 0 [pid 7056] exit_group(0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7058, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7068] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7068] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7068] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7072], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7072 [pid 7068] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7068] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7071] close(3) = 0 [pid 7071] mkdir("./bus", 0777) = 0 [pid 7071] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7065] ioctl(4, LOOP_CLR_FD [pid 7056] <... exit_group resumed>) = ? [pid 7066] <... futex resumed>) = ? [pid 7061] <... futex resumed>) = ? [pid 7066] +++ exited with 0 +++ [pid 7065] <... ioctl resumed>) = 0 [pid 7061] +++ exited with 0 +++ [pid 7056] +++ exited with 0 +++ [pid 5074] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7065] close(4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7056, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7065] <... close resumed>) = 0 ./strace-static-x86_64: Process 7072 attached [pid 7071] <... mount resumed>) = 0 [pid 7065] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7072] set_robust_list(0x7fee0b1f39e0, 24 [pid 7065] <... futex resumed>) = 1 [pid 7064] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7072] <... set_robust_list resumed>) = 0 [pid 7065] creat("./bus", 000 [pid 7064] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] fstat(3, [pid 7072] memfd_create("syzkaller", 0 [pid 7065] <... creat resumed>) = 4 [pid 7064] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7072] <... memfd_create resumed>) = 3 [pid 7065] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 7072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7065] <... futex resumed>) = 0 [pid 7064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7072] <... mmap resumed>) = 0x7fee02dd3000 [pid 7065] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7064] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5074] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7065] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7064] <... futex resumed>) = 0 [pid 7063] <... write resumed>) = 57344 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7065] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7064] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7063] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] exit_group(0 [pid 5081] getdents64(3, [pid 5074] lstat("./109/binderfs", [pid 7071] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7063] <... futex resumed>) = 0 [pid 7063] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7071] <... openat resumed>) = 3 [pid 7071] chdir("./bus") = 0 [pid 7071] ioctl(4, LOOP_CLR_FD) = 0 [pid 7071] close(4) = 0 [pid 7071] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7071] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7069] <... futex resumed>) = 0 [pid 7070] <... futex resumed>) = ? [pid 7069] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] <... futex resumed>) = ? [pid 7057] <... exit_group resumed>) = ? [pid 7070] +++ exited with 0 +++ [pid 7069] <... futex resumed>) = 1 [pid 7063] +++ exited with 0 +++ [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7071] <... futex resumed>) = 0 [pid 7071] creat("./bus", 000) = 4 [pid 7071] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7057] +++ exited with 0 +++ [pid 7069] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7057, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./109/binderfs" [pid 7069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7071] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... restart_syscall resumed>) = 0 [pid 7071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7069] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./111/binderfs", [pid 5074] <... unlink resumed>) = 0 [pid 7071] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7069] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 98.109308][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.113946][ T7071] loop1: detected capacity change from 0 to 1024 [ 98.117247][ T7063] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.149065][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7072] <... write resumed>) = 524288 [pid 7069] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./111/binderfs" [pid 5077] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./109/binderfs") = 0 [pid 5077] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7072] munmap(0x7fee02dd3000, 524288 [pid 5081] <... unlink resumed>) = 0 [pid 7072] <... munmap resumed>) = 0 [pid 5081] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7072] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7072] <... openat resumed>) = 4 [pid 7064] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7072] ioctl(4, LOOP_SET_FD, 3 [ 98.161417][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.162497][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.176524][ T33] hfsplus: b-tree write err: -5, ino 4 [ 98.177414][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.191045][ T33] hfsplus: b-tree write err: -5, ino 4 [ 98.197068][ T52] hfsplus: b-tree write err: -5, ino 4 [ 98.199049][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7072] <... ioctl resumed>) = 0 [pid 7069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7064] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 7072] close(3 [pid 7069] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... mprotect resumed>) = 0 [pid 5081] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./109/bus") = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./109") = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7069] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7072] <... close resumed>) = 0 [pid 7069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] lstat("./111/bus", [pid 5074] lstat("./109/bus", [pid 7072] mkdir("./bus", 0777 [pid 7069] <... mmap resumed>) = 0x7fee02e32000 [pid 7064] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] mkdir("./110", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7072] <... mkdir resumed>) = 0 [pid 7069] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7073 attached ) = 0 [pid 7072] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7069] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7074], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7074 [pid 7069] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7069] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] <... clone resumed>, parent_tid=[7073], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7073 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7064] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7075 [pid 5074] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 7064] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(4, [pid 5074] fstat(4, ./strace-static-x86_64: Process 7074 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7074] set_robust_list(0x7fee02e529e0, 24 [pid 5081] getdents64(4, [pid 5074] getdents64(4, [pid 7074] <... set_robust_list resumed>) = 0 [pid 7074] creat("./file1", 000 [pid 7073] set_robust_list(0x7fee02e529e0, 24 [pid 7072] <... mount resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7073] <... set_robust_list resumed>) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7073] creat("./file1", 000 [pid 5074] getdents64(4, [pid 7072] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] close(4 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [ 98.211888][ T7072] loop4: detected capacity change from 0 to 1024 [ 98.222312][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.224334][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.236691][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.252469][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7074] <... creat resumed>) = 5 [pid 7072] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5074] close(4 [pid 7074] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7069] <... futex resumed>) = 0 [pid 7074] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7075 attached [pid 7075] set_robust_list(0x555556b055e0, 24) = 0 [pid 7075] chdir("./110") = 0 [pid 7075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7075] setpgid(0, 0) = 0 [pid 7075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7075] write(3, "1000", 4) = 4 [pid 7075] close(3) = 0 [pid 7075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7075] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7075] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7075] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] rmdir("./111/bus" [pid 5074] <... close resumed>) = 0 [pid 7075] <... clone resumed>, parent_tid=[7076], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7076 [pid 7075] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7075] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7072] chdir("./bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5074] rmdir("./109/bus"./strace-static-x86_64: Process 7076 attached [pid 7076] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7076] memfd_create("syzkaller", 0) = 3 [pid 7076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7072] <... chdir resumed>) = 0 [pid 5081] getdents64(3, [pid 7072] ioctl(4, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] close(3 [pid 7072] <... ioctl resumed>) = 0 [pid 7072] close(4 [pid 7071] <... write resumed>) = 57344 [pid 5081] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 7073] <... creat resumed>) = 5 [pid 7076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7073] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7072] <... close resumed>) = 0 [pid 7071] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] <... write resumed>) = 57344 [pid 5081] rmdir("./111" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7073] <... futex resumed>) = 1 [pid 7072] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7071] <... futex resumed>) = 0 [pid 7064] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 7073] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7072] <... futex resumed>) = 1 [pid 7071] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7069] exit_group(0 [pid 7068] <... futex resumed>) = 0 [pid 5081] mkdir("./112", 0777 [pid 5074] <... close resumed>) = 0 [pid 7074] <... futex resumed>) = ? [pid 7072] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7071] <... futex resumed>) = ? [pid 7069] <... exit_group resumed>) = ? [pid 7068] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7065] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5074] rmdir("./109" [pid 7074] +++ exited with 0 +++ [pid 7072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7071] +++ exited with 0 +++ [pid 7069] +++ exited with 0 +++ [pid 7068] <... futex resumed>) = 0 [pid 7065] <... futex resumed>) = 0 [pid 7064] exit_group(0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 7073] <... futex resumed>) = ? [pid 7072] creat("./bus", 000 [pid 7068] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] <... exit_group resumed>) = ? [pid 5081] <... openat resumed>) = 3 [pid 5074] mkdir("./110", 0777 [pid 7073] +++ exited with 0 +++ [pid 7072] <... creat resumed>) = 4 [pid 7065] +++ exited with 0 +++ [pid 7064] +++ exited with 0 +++ [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7069, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... mkdir resumed>) = 0 [pid 7072] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7076] <... write resumed>) = 524288 [pid 7072] <... futex resumed>) = 1 [pid 7068] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7064, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7076] munmap(0x7fee02dd3000, 524288 [pid 7072] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5076] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7068] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 98.270043][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.278287][ T7065] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.279508][ T7071] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7076] <... munmap resumed>) = 0 [pid 7072] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7068] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3./strace-static-x86_64: Process 7077 attached [pid 7076] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7077] set_robust_list(0x555556b055e0, 24 [pid 7076] <... openat resumed>) = 4 [pid 7077] <... set_robust_list resumed>) = 0 [pid 7076] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7077 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7077] chdir("./112" [pid 7076] <... ioctl resumed>) = 0 [pid 5076] fstat(3, [pid 5075] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] fstat(3, [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7078 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7077] <... chdir resumed>) = 0 [pid 7076] close(3 [pid 5076] lstat("./111/binderfs", [pid 5075] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./111/binderfs" [pid 5075] lstat("./109/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./109/binderfs") = 0 [pid 5075] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7078 attached [pid 7077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7076] <... close resumed>) = 0 [pid 7077] <... prctl resumed>) = 0 [pid 7076] mkdir("./bus", 0777 [pid 7077] setpgid(0, 0 [pid 7076] <... mkdir resumed>) = 0 [pid 7077] <... setpgid resumed>) = 0 [pid 7076] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7077] write(3, "1000", 4) = 4 [pid 7077] close(3) = 0 [pid 7077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7077] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7077] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7077] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7079], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7079 [pid 7077] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 98.323069][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.327576][ T7076] loop3: detected capacity change from 0 to 1024 [ 98.330970][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.345699][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.353093][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.360959][ T52] hfsplus: b-tree write err: -5, ino 4 [ 98.367263][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7077] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7079 attached [pid 7078] set_robust_list(0x555556b055e0, 24 [pid 7076] <... mount resumed>) = 0 [pid 7068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7079] set_robust_list(0x7fee0b1f39e0, 24 [pid 7078] <... set_robust_list resumed>) = 0 [pid 7068] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7079] <... set_robust_list resumed>) = 0 [pid 7078] chdir("./110" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] memfd_create("syzkaller", 0 [pid 7078] <... chdir resumed>) = 0 [pid 5076] lstat("./111/bus", [pid 5075] lstat("./109/bus", [pid 7079] <... memfd_create resumed>) = 3 [pid 7078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7078] <... prctl resumed>) = 0 [pid 5076] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7079] <... mmap resumed>) = 0x7fee02dd3000 [pid 7078] setpgid(0, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7078] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7076] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7068] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 7078] <... openat resumed>) = 3 [pid 7076] <... openat resumed>) = 3 [pid 7068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] fstat(4, [pid 5075] fstat(4, [pid 7078] write(3, "1000", 4 [pid 7076] chdir("./bus" [pid 7068] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7078] <... write resumed>) = 4 [pid 7076] <... chdir resumed>) = 0 [pid 7068] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 7079] <... write resumed>) = 524288 [pid 7078] close(3 [pid 7076] ioctl(4, LOOP_CLR_FD [pid 7068] <... mprotect resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7078] <... close resumed>) = 0 [pid 7068] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 7076] <... ioctl resumed>) = 0 [pid 7078] symlink("/dev/binderfs", "./binderfs" [pid 7076] close(4 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7078] <... symlink resumed>) = 0 [pid 7076] <... close resumed>) = 0 [pid 7068] <... clone resumed>, parent_tid=[7080], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7080 [pid 5076] close(4 [pid 5075] close(4 [pid 7078] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7079] munmap(0x7fee02dd3000, 524288 [pid 7078] <... futex resumed>) = 0 [pid 7068] <... futex resumed>) = 0 [pid 5076] rmdir("./111/bus" [pid 5075] rmdir("./109/bus" [pid 7079] <... munmap resumed>) = 0 [pid 7078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7076] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7078] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7076] <... futex resumed>) = 1 [pid 7075] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 7079] <... openat resumed>) = 4 [pid 7078] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7076] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7075] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7079] ioctl(4, LOOP_SET_FD, 3 [pid 7078] <... mprotect resumed>) = 0 [pid 7076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7075] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5075] close(3 [pid 7078] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7076] creat("./bus", 000 [pid 7075] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] rmdir("./111" [pid 5075] rmdir("./109" [pid 7078] <... clone resumed>, parent_tid=[7081], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7081 [pid 7076] <... creat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7078] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7076] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./112", 0777 [pid 5075] mkdir("./110", 0777./strace-static-x86_64: Process 7080 attached [pid 7078] <... futex resumed>) = 0 [pid 7076] <... futex resumed>) = 1 [pid 7075] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7078] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7076] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7075] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7080] set_robust_list(0x7fee02e529e0, 24 [pid 7075] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [ 98.368376][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.412990][ T7079] loop5: detected capacity change from 0 to 1024 [pid 7080] <... set_robust_list resumed>) = 0 [pid 7076] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7075] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5075] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7082 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7083 ./strace-static-x86_64: Process 7081 attached [pid 7081] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7081] memfd_create("syzkaller", 0) = 3 [pid 7081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7082 attached ./strace-static-x86_64: Process 7083 attached [pid 7082] set_robust_list(0x555556b055e0, 24 [pid 7083] set_robust_list(0x555556b055e0, 24 [pid 7082] <... set_robust_list resumed>) = 0 [pid 7082] chdir("./112" [pid 7083] <... set_robust_list resumed>) = 0 [pid 7083] chdir("./110" [pid 7082] <... chdir resumed>) = 0 [pid 7079] <... ioctl resumed>) = 0 [pid 7083] <... chdir resumed>) = 0 [pid 7082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7080] creat("./file1", 000 [pid 7079] close(3 [pid 7083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7082] <... prctl resumed>) = 0 [pid 7079] <... close resumed>) = 0 [pid 7083] <... prctl resumed>) = 0 [pid 7082] setpgid(0, 0 [pid 7079] mkdir("./bus", 0777 [pid 7083] setpgid(0, 0 [pid 7082] <... setpgid resumed>) = 0 [pid 7079] <... mkdir resumed>) = 0 [pid 7083] <... setpgid resumed>) = 0 [pid 7082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7079] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7082] <... openat resumed>) = 3 [pid 7083] <... openat resumed>) = 3 [pid 7082] write(3, "1000", 4 [pid 7083] write(3, "1000", 4 [pid 7082] <... write resumed>) = 4 [pid 7079] <... mount resumed>) = 0 [pid 7083] <... write resumed>) = 4 [pid 7082] close(3 [pid 7079] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7083] close(3 [pid 7082] <... close resumed>) = 0 [pid 7079] <... openat resumed>) = 3 [pid 7083] <... close resumed>) = 0 [pid 7082] symlink("/dev/binderfs", "./binderfs" [pid 7081] <... write resumed>) = 524288 [pid 7079] chdir("./bus" [pid 7083] symlink("/dev/binderfs", "./binderfs" [pid 7082] <... symlink resumed>) = 0 [pid 7079] <... chdir resumed>) = 0 [pid 7083] <... symlink resumed>) = 0 [pid 7082] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7081] munmap(0x7fee02dd3000, 524288 [pid 7079] ioctl(4, LOOP_CLR_FD [pid 7083] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7082] <... futex resumed>) = 0 [pid 7081] <... munmap resumed>) = 0 [pid 7079] <... ioctl resumed>) = 0 [pid 7083] <... futex resumed>) = 0 [pid 7082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7079] close(4 [pid 7083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7082] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7081] <... openat resumed>) = 4 [pid 7079] <... close resumed>) = 0 [pid 7083] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7082] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7081] ioctl(4, LOOP_SET_FD, 3 [pid 7079] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7082] <... mprotect resumed>) = 0 [pid 7079] <... futex resumed>) = 1 [pid 7083] <... mprotect resumed>) = 0 [pid 7082] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7079] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7083] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7082] <... clone resumed>, parent_tid=[7084], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7084 [pid 7083] <... clone resumed>, parent_tid=[7085], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7085 [pid 7082] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7082] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 0 [pid 7082] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7083] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7084 attached [pid 7084] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7084] memfd_create("syzkaller", 0) = 3 [pid 7084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7077] <... futex resumed>) = 0 [pid 7077] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7079] <... futex resumed>) = 0 [pid 7077] <... futex resumed>) = 1 [pid 7068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7079] creat("./bus", 000 [pid 7077] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7079] <... creat resumed>) = 4 [pid 7079] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7077] <... futex resumed>) = 0 [pid 7079] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7077] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7077] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7085 attached [pid 7084] <... mmap resumed>) = 0x7fee02dd3000 [pid 7079] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7077] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] set_robust_list(0x7fee0b1f39e0, 24 [pid 7084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7081] <... ioctl resumed>) = 0 [pid 7081] close(3) = 0 [pid 7081] mkdir("./bus", 0777) = 0 [ 98.422838][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.443324][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.451959][ T7081] loop0: detected capacity change from 0 to 1024 [ 98.464174][ T7072] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7081] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7085] <... set_robust_list resumed>) = 0 [pid 7081] <... mount resumed>) = 0 [pid 7081] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7081] chdir("./bus") = 0 [pid 7081] ioctl(4, LOOP_CLR_FD) = 0 [pid 7081] close(4) = 0 [pid 7081] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7078] <... futex resumed>) = 0 [pid 7084] <... write resumed>) = 524288 [pid 7081] creat("./bus", 000 [pid 7078] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7081] <... creat resumed>) = 4 [pid 7078] <... futex resumed>) = 0 [pid 7081] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7081] <... futex resumed>) = 0 [pid 7078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7081] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7078] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] memfd_create("syzkaller", 0 [pid 7084] munmap(0x7fee02dd3000, 524288 [pid 7080] <... creat resumed>) = 5 [pid 7078] <... futex resumed>) = 0 [pid 7075] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7072] <... write resumed>) = 57344 [pid 7085] <... memfd_create resumed>) = 3 [pid 7084] <... munmap resumed>) = 0 [pid 7080] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7075] <... futex resumed>) = 0 [pid 7072] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7084] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7080] <... futex resumed>) = 0 [pid 7075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7072] <... futex resumed>) = 0 [pid 7085] <... mmap resumed>) = 0x7fee02dd3000 [pid 7084] <... openat resumed>) = 4 [pid 7080] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7075] <... mmap resumed>) = 0x7fee02e32000 [pid 7072] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] ioctl(4, LOOP_SET_FD, 3 [pid 7085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7075] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7068] exit_group(0 [pid 7077] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 98.472757][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.480393][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.489435][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.499927][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.500378][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.508171][ T7084] loop2: detected capacity change from 0 to 1024 [pid 7077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7077] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7077] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7086], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7086 [pid 7077] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7077] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] <... write resumed>) = 524288 [pid 7080] <... futex resumed>) = ? [pid 7075] <... mprotect resumed>) = 0 [pid 7072] <... futex resumed>) = ? [pid 7068] <... exit_group resumed>) = ? [pid 7080] +++ exited with 0 +++ [pid 7072] +++ exited with 0 +++ [pid 7068] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7068, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7075] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7087 attached [pid 7085] munmap(0x7fee02dd3000, 524288 [pid 5080] <... restart_syscall resumed>) = 0 [pid 7075] <... clone resumed>, parent_tid=[7087], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7087 [pid 7085] <... munmap resumed>) = 0 [pid 7075] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7075] <... futex resumed>) = 0 [pid 7085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 7075] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7085] <... openat resumed>) = 4 [pid 5080] getdents64(3, [pid 7085] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./108/binderfs") = 0 [pid 5080] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7086 attached [pid 7086] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7086] creat("./file1", 000 [pid 7078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7078] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7078] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7078] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7078] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7088], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7088 [pid 7078] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7078] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7084] <... ioctl resumed>) = 0 [pid 7084] close(3) = 0 [pid 7084] mkdir("./bus", 0777) = 0 [pid 7084] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7088 attached [pid 7087] set_robust_list(0x7fee02e529e0, 24 [pid 7085] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7088] set_robust_list(0x7fee02e529e0, 24 [pid 7087] <... set_robust_list resumed>) = 0 [pid 7085] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7088] <... set_robust_list resumed>) = 0 [pid 7087] creat("./file1", 000 [pid 7085] <... close resumed>) = 0 [pid 5080] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7084] <... mount resumed>) = 0 [pid 5080] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] <... openat resumed>) = 3 [pid 7077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 98.525118][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.534647][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.546600][ T7085] loop1: detected capacity change from 0 to 1024 [ 98.553326][ T33] hfsplus: b-tree write err: -5, ino 4 [ 98.558798][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7084] chdir("./bus" [pid 5080] <... openat resumed>) = 4 [pid 7088] creat("./file1", 000 [pid 7085] mkdir("./bus", 0777 [pid 7084] <... chdir resumed>) = 0 [pid 5080] fstat(4, [pid 7085] <... mkdir resumed>) = 0 [pid 7084] ioctl(4, LOOP_CLR_FD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7085] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7084] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 7084] close(4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7084] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 7085] <... mount resumed>) = 0 [pid 7084] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7075] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7084] <... futex resumed>) = 1 [pid 7082] <... futex resumed>) = 0 [pid 7078] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] close(4 [pid 7084] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7082] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7085] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7082] <... futex resumed>) = 0 [pid 5080] rmdir("./108/bus" [pid 7085] <... openat resumed>) = 3 [pid 7084] creat("./bus", 000 [pid 7082] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 7084] <... creat resumed>) = 4 [pid 5080] getdents64(3, [pid 7084] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7084] <... futex resumed>) = 1 [pid 7082] <... futex resumed>) = 0 [pid 5080] close(3 [pid 7084] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7082] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7082] <... futex resumed>) = 0 [ 98.570019][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.595276][ T7076] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.604102][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.607294][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] rmdir("./108" [pid 7088] <... creat resumed>) = 5 [pid 7087] <... creat resumed>) = 5 [pid 7085] chdir("./bus" [pid 7084] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7082] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7076] <... write resumed>) = 57344 [pid 5080] <... rmdir resumed>) = 0 [pid 7088] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7087] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... creat resumed>) = 5 [pid 7085] <... chdir resumed>) = 0 [pid 7076] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... futex resumed>) = 0 [pid 7087] <... futex resumed>) = 0 [pid 7085] ioctl(4, LOOP_CLR_FD [pid 7076] <... futex resumed>) = 0 [pid 7075] exit_group(0 [pid 7088] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... ioctl resumed>) = 0 [pid 7075] <... exit_group resumed>) = ? [pid 7087] +++ exited with 0 +++ [pid 7085] close(4 [pid 7076] +++ exited with 0 +++ [pid 7075] +++ exited with 0 +++ [pid 7086] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... close resumed>) = 0 [pid 5080] mkdir("./109", 0777 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7075, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7085] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7085] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./110/binderfs") = 0 [pid 5077] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7086] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [ 98.620752][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.630468][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.630966][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.638589][ T7081] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.652706][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.658964][ T7079] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.668486][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7086] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7083] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7081] <... write resumed>) = 57344 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7085] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 1 [pid 7082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7081] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 7085] creat("./bus", 000) = 4 [pid 7085] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7085] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7083] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7082] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7082] <... futex resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7083] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] close(3 [pid 7085] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 1 [pid 7082] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] <... close resumed>) = 0 [pid 7081] <... futex resumed>) = 0 [pid 7085] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7083] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7082] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7081] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7078] exit_group(0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7089 attached [pid 7088] <... futex resumed>) = ? [pid 7081] <... futex resumed>) = ? [pid 7078] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 7089] set_robust_list(0x555556b055e0, 24 [pid 7088] +++ exited with 0 +++ [pid 7082] <... mprotect resumed>) = 0 [pid 7081] +++ exited with 0 +++ [pid 7079] <... write resumed>) = 57344 [pid 7078] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7078, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5077] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5074] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] <... set_robust_list resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7089] chdir("./109" [pid 5077] fstat(4, [pid 5074] <... openat resumed>) = 3 [pid 7089] <... chdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] getdents64(4, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7089] <... prctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 7089] setpgid(0, 0 [pid 5077] getdents64(4, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7089] <... setpgid resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] <... openat resumed>) = 3 [pid 7082] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7079] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7089 [pid 5077] <... close resumed>) = 0 [pid 5074] lstat("./110/binderfs", [pid 7089] write(3, "1000", 4 [pid 7084] <... write resumed>) = 57344 [pid 7079] <... futex resumed>) = 0 [pid 7077] exit_group(0 [pid 5077] rmdir("./110/bus" [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7089] <... write resumed>) = 4 [pid 7086] <... futex resumed>) = ? [pid 7084] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7082] <... clone resumed>, parent_tid=[7090], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7090 [pid 7077] <... exit_group resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 5074] unlink("./110/binderfs" [pid 7089] close(3 [pid 7086] +++ exited with 0 +++ [pid 7084] <... futex resumed>) = 0 [pid 7082] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7079] +++ exited with 0 +++ [pid 7077] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 7089] <... close resumed>) = 0 [pid 7084] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7082] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [ 98.668796][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.682309][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.698667][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.699657][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.713489][ T7084] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7089] symlink("/dev/binderfs", "./binderfs" [pid 7082] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7077, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] close(3 [pid 7089] <... symlink resumed>) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... close resumed>) = 0 [pid 7089] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5077] rmdir("./110" [pid 7089] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] mkdir("./111", 0777 [pid 7089] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 7089] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7089] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 7089] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5081] fstat(3, [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7089] <... clone resumed>, parent_tid=[7091], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7091 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(3 [pid 7089] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 7089] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7089] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7092 [pid 5081] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./112/binderfs") = 0 [pid 5081] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7091 attached [pid 7091] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7091] memfd_create("syzkaller", 0) = 3 [pid 7091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7083] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7083] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7083] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7093 attached ./strace-static-x86_64: Process 7092 attached ./strace-static-x86_64: Process 7090 attached [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5081] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7093] set_robust_list(0x7fee02e529e0, 24 [pid 7092] set_robust_list(0x555556b055e0, 24 [pid 7090] set_robust_list(0x7fee02e529e0, 24 [pid 7083] <... clone resumed>, parent_tid=[7093], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7093 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7090] <... set_robust_list resumed>) = 0 [pid 7083] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7093] <... set_robust_list resumed>) = 0 [pid 5081] lstat("./112/bus", [pid 7092] <... set_robust_list resumed>) = 0 [pid 5074] lstat("./110/bus", [pid 7093] creat("./file1", 000 [pid 7092] chdir("./111" [pid 7090] creat("./file1", 000 [pid 7083] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7093] <... creat resumed>) = 5 [pid 5081] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7092] <... chdir resumed>) = 0 [pid 5074] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 98.727802][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 98.737750][ T11] hfsplus: b-tree write err: -5, ino 4 [ 98.747380][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.755185][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.762477][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7090] <... creat resumed>) = 5 [pid 7083] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7093] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7091] <... write resumed>) = 524288 [pid 7090] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 5074] fstat(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5074] getdents64(4, [pid 7091] munmap(0x7fee02dd3000, 524288 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7091] <... munmap resumed>) = 0 [pid 5081] getdents64(4, [pid 5074] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7091] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] close(4 [pid 5074] close(4 [pid 7091] <... openat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7091] ioctl(4, LOOP_SET_FD, 3 [pid 5081] rmdir("./112/bus" [pid 5074] rmdir("./110/bus" [pid 7093] <... futex resumed>) = 0 [pid 7092] <... prctl resumed>) = 0 [pid 7090] <... futex resumed>) = 0 [pid 7082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5074] getdents64(3, [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5074] close(3 [pid 5081] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./112" [pid 5074] rmdir("./110" [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] mkdir("./113", 0777 [pid 5074] mkdir("./111", 0777 [pid 7093] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7092] setpgid(0, 0 [pid 7090] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7082] exit_group(0 [pid 5081] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7090] <... futex resumed>) = ? [pid 7084] <... futex resumed>) = ? [pid 7092] <... setpgid resumed>) = 0 [pid 7082] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7090] +++ exited with 0 +++ [pid 7084] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5074] close(3 [pid 7092] <... openat resumed>) = 3 [pid 7091] <... ioctl resumed>) = 0 [pid 7085] <... write resumed>) = 57344 [pid 7082] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 7092] write(3, "1000", 4 [pid 7091] close(3 [pid 7085] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] exit_group(0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7082, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... close resumed>) = 0 [pid 7093] <... futex resumed>) = ? [pid 7092] <... write resumed>) = 4 [pid 7091] <... close resumed>) = 0 [pid 7085] <... futex resumed>) = ? [pid 7083] <... exit_group resumed>) = ? [pid 7093] +++ exited with 0 +++ [pid 7092] close(3 [pid 7091] mkdir("./bus", 0777 [pid 7085] +++ exited with 0 +++ [pid 7083] +++ exited with 0 +++ [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7092] <... close resumed>) = 0 [pid 7091] <... mkdir resumed>) = 0 [pid 5076] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7092] symlink("/dev/binderfs", "./binderfs" [pid 7091] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7094 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7092] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7083, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7092] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7095 [pid 7092] <... futex resumed>) = 0 [pid 5076] fstat(3, [pid 5075] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7091] <... mount resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7092] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7091] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7095 attached [pid 7092] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7091] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7094 attached [pid 7095] set_robust_list(0x555556b055e0, 24 [pid 7092] <... mprotect resumed>) = 0 [pid 7091] chdir("./bus" [pid 5076] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7095] <... set_robust_list resumed>) = 0 [pid 7094] set_robust_list(0x555556b055e0, 24 [pid 7092] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7091] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 7095] chdir("./111" [pid 7094] <... set_robust_list resumed>) = 0 [pid 7091] ioctl(4, LOOP_CLR_FD [pid 5076] lstat("./112/binderfs", [pid 7095] <... chdir resumed>) = 0 [pid 7094] chdir("./113" [pid 7092] <... clone resumed>, parent_tid=[7096], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7096 [pid 7091] <... ioctl resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] fstat(3, [pid 7095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7094] <... chdir resumed>) = 0 [pid 7092] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7091] close(4 [pid 5076] unlink("./112/binderfs" [pid 7095] <... prctl resumed>) = 0 [pid 7094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7092] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7095] setpgid(0, 0 [pid 7092] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7095] <... setpgid resumed>) = 0 [pid 7095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7095] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 7096 attached [pid 7095] close(3 [pid 7096] set_robust_list(0x7fee0b1f39e0, 24 [pid 7095] <... close resumed>) = 0 [pid 7096] <... set_robust_list resumed>) = 0 [pid 7095] symlink("/dev/binderfs", "./binderfs" [pid 7094] <... prctl resumed>) = 0 [pid 7091] <... close resumed>) = 0 [ 98.776178][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.780846][ T7091] loop4: detected capacity change from 0 to 1024 [ 98.785080][ T7085] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] getdents64(3, [pid 7096] memfd_create("syzkaller", 0 [pid 7095] <... symlink resumed>) = 0 [pid 7096] <... memfd_create resumed>) = 3 [pid 7095] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7095] <... futex resumed>) = 0 [pid 7096] <... mmap resumed>) = 0x7fee02dd3000 [pid 7095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7095] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7095] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7094] setpgid(0, 0 [pid 7091] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7095] <... clone resumed>, parent_tid=[7097], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7097 [pid 7094] <... setpgid resumed>) = 0 [pid 7091] <... futex resumed>) = 1 [pid 7089] <... futex resumed>) = 0 [pid 5075] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7095] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7091] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7089] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7095] <... futex resumed>) = 0 [pid 7094] <... openat resumed>) = 3 [pid 7091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7089] <... futex resumed>) = 0 [pid 5075] lstat("./110/binderfs", [pid 7095] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7091] creat("./bus", 000 [pid 7089] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7091] <... creat resumed>) = 4 [pid 5075] unlink("./110/binderfs" [pid 7094] write(3, "1000", 4 [pid 7091] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7097 attached ) = 1 [pid 7094] <... write resumed>) = 4 [pid 7089] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7091] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7089] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7094] close(3 [pid 7091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7097] set_robust_list(0x7fee0b1f39e0, 24 [pid 7089] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7097] <... set_robust_list resumed>) = 0 [pid 7094] <... close resumed>) = 0 [pid 7091] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7089] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7097] memfd_create("syzkaller", 0 [pid 7094] symlink("/dev/binderfs", "./binderfs" [pid 7097] <... memfd_create resumed>) = 3 [pid 7094] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7094] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... mmap resumed>) = 0x7fee02dd3000 [pid 7097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7096] <... write resumed>) = 524288 [pid 7096] munmap(0x7fee02dd3000, 524288) = 0 [pid 7096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7096] ioctl(4, LOOP_SET_FD, 3 [pid 7094] <... futex resumed>) = 0 [pid 5076] lstat("./112/bus", [pid 7097] <... write resumed>) = 524288 [pid 7097] munmap(0x7fee02dd3000, 524288) = 0 [pid 7097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7097] ioctl(4, LOOP_SET_FD, 3 [pid 7094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7096] <... ioctl resumed>) = 0 [pid 7096] close(3) = 0 [pid 7096] mkdir("./bus", 0777) = 0 [pid 7096] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7096] chdir("./bus") = 0 [pid 7094] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7094] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7094] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7094] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7094] <... clone resumed>, parent_tid=[7098], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7098 [pid 5076] fstat(4, [pid 7094] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 98.831632][ T33] hfsplus: b-tree write err: -5, ino 4 [ 98.848923][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.852927][ T7096] loop3: detected capacity change from 0 to 1024 [ 98.856986][ T33] hfsplus: b-tree write err: -5, ino 4 [ 98.867955][ T7097] loop0: detected capacity change from 0 to 1024 [ 98.873811][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7096] ioctl(4, LOOP_CLR_FD) = 0 [pid 7096] close(4) = 0 [pid 7096] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7092] <... futex resumed>) = 0 [pid 7092] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7092] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7096] <... futex resumed>) = 1 [pid 7096] creat("./bus", 000) = 4 [pid 7096] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7092] <... futex resumed>) = 0 [pid 7092] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7092] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7096] <... futex resumed>) = 1 [pid 7096] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7098 attached [pid 7098] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7098] memfd_create("syzkaller", 0) = 3 [pid 7098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7094] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] getdents64(4, [pid 7097] <... ioctl resumed>) = 0 [pid 7097] close(3) = 0 [pid 7097] mkdir("./bus", 0777) = 0 [pid 7097] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [ 98.884285][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.891678][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.891691][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.891826][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.891836][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.898449][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7089] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7092] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7089] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] getdents64(4, [pid 7092] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7092] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7092] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7089] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7092] <... clone resumed>, parent_tid=[7099], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7099 [pid 7089] <... mprotect resumed>) = 0 [pid 5076] close(4 [pid 7089] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7092] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 7092] <... futex resumed>) = 0 [pid 5076] rmdir("./112/bus" [pid 7092] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7089] <... clone resumed>, parent_tid=[7100], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7100 [pid 5076] <... rmdir resumed>) = 0 [pid 7089] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5075] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7089] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7089] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] lstat("./110/bus", [pid 5076] rmdir("./112") = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7100 attached ./strace-static-x86_64: Process 7099 attached [pid 7098] munmap(0x7fee02dd3000, 524288 [pid 5076] mkdir("./113", 0777 [pid 5075] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7100] set_robust_list(0x7fee02e529e0, 24 [pid 7098] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7100] <... set_robust_list resumed>) = 0 [pid 7098] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7100] creat("./file1", 000 [pid 7098] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 7098] ioctl(4, LOOP_SET_FD, 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] fstat(4, [pid 7099] set_robust_list(0x7fee02e529e0, 24 [pid 7098] <... ioctl resumed>) = 0 [pid 7097] <... mount resumed>) = 0 [pid 7096] <... write resumed>) = 57344 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7099] <... set_robust_list resumed>) = 0 [pid 7098] close(3 [pid 5076] close(3 [pid 5075] getdents64(4, [pid 7100] <... creat resumed>) = 5 [pid 7099] creat("./file1", 000 [pid 7098] <... close resumed>) = 0 [pid 7097] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7096] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7091] <... write resumed>) = 57344 [pid 5076] <... close resumed>) = 0 [pid 7100] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7098] mkdir("./bus", 0777 [pid 7097] <... openat resumed>) = 3 [pid 7096] <... futex resumed>) = 0 [pid 7091] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7100] <... futex resumed>) = 1 [pid 7099] <... creat resumed>) = 5 [pid 7097] chdir("./bus" [pid 7096] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7091] <... futex resumed>) = 0 [pid 7089] <... futex resumed>) = 0 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7101 attached [pid 7100] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7099] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7098] <... mkdir resumed>) = 0 [pid 7097] <... chdir resumed>) = 0 [pid 7091] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7089] exit_group(0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7101 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7101] set_robust_list(0x555556b055e0, 24 [pid 7099] <... futex resumed>) = 1 [pid 7097] ioctl(4, LOOP_CLR_FD [pid 7092] <... futex resumed>) = 0 [pid 7097] <... ioctl resumed>) = 0 [pid 7092] exit_group(0 [pid 7100] <... futex resumed>) = ? [pid 7097] close(4 [pid 7098] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7096] <... futex resumed>) = ? [pid 7092] <... exit_group resumed>) = ? [pid 7091] <... futex resumed>) = ? [pid 7101] <... set_robust_list resumed>) = 0 [pid 7089] <... exit_group resumed>) = ? [pid 5075] close(4 [pid 7100] +++ exited with 0 +++ [pid 7097] <... close resumed>) = 0 [pid 7096] +++ exited with 0 +++ [pid 7091] +++ exited with 0 +++ [pid 7097] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7095] <... futex resumed>) = 0 [pid 7097] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7095] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7095] <... futex resumed>) = 0 [pid 7097] creat("./bus", 000 [pid 7095] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] <... creat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 7097] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7095] <... futex resumed>) = 0 [pid 7097] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7095] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7095] <... futex resumed>) = 0 [pid 7089] +++ exited with 0 +++ [pid 5075] rmdir("./110/bus" [ 98.916927][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.951803][ T7096] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.952230][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [ 98.966952][ T7098] loop5: detected capacity change from 0 to 1024 [ 98.968118][ T7091] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7097] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7095] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7089, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7101] chdir("./113" [pid 7099] +++ exited with 0 +++ [pid 7092] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 7101] <... chdir resumed>) = 0 [pid 7098] <... mount resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7092, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] getdents64(3, [pid 7101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7098] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7101] <... prctl resumed>) = 0 [pid 7098] <... openat resumed>) = 3 [pid 5075] close(3 [pid 7101] setpgid(0, 0 [pid 7098] chdir("./bus" [pid 5077] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7101] <... setpgid resumed>) = 0 [pid 7098] <... chdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./110" [pid 7101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7098] ioctl(4, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 7101] <... openat resumed>) = 3 [pid 7098] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] mkdir("./111", 0777 [pid 7101] write(3, "1000", 4 [pid 7098] close(4 [pid 5077] fstat(3, [pid 5075] <... mkdir resumed>) = 0 [pid 7101] <... write resumed>) = 4 [pid 7098] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7101] close(3 [pid 7098] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 7101] <... close resumed>) = 0 [pid 7098] <... futex resumed>) = 1 [pid 7094] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7101] symlink("/dev/binderfs", "./binderfs" [pid 7098] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7101] <... symlink resumed>) = 0 [pid 7098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7094] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 7101] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7098] creat("./bus", 000 [pid 7094] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 98.994921][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.002234][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.015816][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.023163][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.033044][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] lstat("./111/binderfs", [pid 5075] <... close resumed>) = 0 [pid 7101] <... futex resumed>) = 0 [pid 7098] <... creat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7098] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] unlink("./111/binderfs" [pid 7101] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7098] <... futex resumed>) = 1 [pid 7094] <... futex resumed>) = 0 [pid 5080] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7102 [pid 7101] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7098] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7101] <... mprotect resumed>) = 0 [pid 7098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7094] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7101] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7098] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7094] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 7101] <... clone resumed>, parent_tid=[7103], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7103 [pid 5080] fstat(3, [pid 7101] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7101] <... futex resumed>) = 0 [pid 7101] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7103 attached [pid 7103] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7103] memfd_create("syzkaller", 0) = 3 [pid 7103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7103] munmap(0x7fee02dd3000, 524288) = 0 [pid 7103] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7103] ioctl(4, LOOP_SET_FD, 3 [pid 7095] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] getdents64(3, [pid 7095] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7102 attached ) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = 0 [pid 5077] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7095] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 7095] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7095] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] lstat("./109/binderfs", [pid 5077] close(4 [pid 7102] set_robust_list(0x555556b055e0, 24 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7095] <... mprotect resumed>) = 0 [pid 7102] <... set_robust_list resumed>) = 0 [pid 7095] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] unlink("./109/binderfs" [pid 7102] chdir("./111" [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./111/bus" [pid 5080] <... unlink resumed>) = 0 [pid 7095] <... clone resumed>, parent_tid=[7104], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7104 [pid 7102] <... chdir resumed>) = 0 [ 99.040604][ T7097] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.058307][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.065986][ T52] hfsplus: b-tree write err: -5, ino 4 [ 99.071766][ T7103] loop2: detected capacity change from 0 to 1024 [ 99.083200][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7097] <... write resumed>) = 57344 [pid 7095] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./111") = 0 [pid 5077] mkdir("./112", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3./strace-static-x86_64: Process 7104 attached [pid 7102] <... prctl resumed>) = 0 [pid 7097] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7095] <... futex resumed>) = 0 [pid 7094] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7094] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 7094] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7102] setpgid(0, 0 [pid 7097] <... futex resumed>) = 0 [pid 7095] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7104] set_robust_list(0x7fee02e529e0, 24 [pid 7102] <... setpgid resumed>) = 0 [pid 7097] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7105 [pid 7094] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7094] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7104] <... set_robust_list resumed>) = 0 [pid 7102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... umount2 resumed>) = 0 [pid 7094] <... clone resumed>, parent_tid=[7106], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7106 [pid 7094] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7094] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7106 attached [pid 7106] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7106] creat("./file1", 000./strace-static-x86_64: Process 7105 attached [pid 7105] set_robust_list(0x555556b055e0, 24) = 0 [pid 7105] chdir("./112") = 0 [pid 7105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7105] setpgid(0, 0) = 0 [pid 7105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7105] write(3, "1000", 4) = 4 [pid 7105] close(3) = 0 [pid 7104] creat("./file1", 000 [pid 7102] <... openat resumed>) = 3 [pid 5080] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7105] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7104] <... creat resumed>) = 5 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7102] write(3, "1000", 4 [pid 7105] <... futex resumed>) = 0 [pid 7104] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7102] <... write resumed>) = 4 [pid 5080] lstat("./109/bus", [pid 7105] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7103] <... ioctl resumed>) = 0 [pid 7105] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7103] close(3 [pid 7105] <... mprotect resumed>) = 0 [pid 7103] <... close resumed>) = 0 [pid 7105] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7103] mkdir("./bus", 0777) = 0 [pid 7105] <... clone resumed>, parent_tid=[7107], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7107 [pid 7103] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7105] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7107 attached [pid 7106] <... creat resumed>) = 5 [pid 7104] <... futex resumed>) = 1 [pid 7102] close(3 [pid 7098] <... write resumed>) = 57344 [pid 7095] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7107] set_robust_list(0x7fee0b1f39e0, 24 [pid 7106] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] <... mount resumed>) = 0 [pid 7104] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7107] <... set_robust_list resumed>) = 0 [pid 7106] <... futex resumed>) = 1 [pid 7103] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7102] <... close resumed>) = 0 [pid 7095] exit_group(0 [pid 7094] <... futex resumed>) = 0 [pid 5080] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7098] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7107] memfd_create("syzkaller", 0 [pid 7106] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7104] <... futex resumed>) = ? [pid 7103] <... openat resumed>) = 3 [pid 7102] symlink("/dev/binderfs", "./binderfs" [pid 7097] <... futex resumed>) = ? [pid 7095] <... exit_group resumed>) = ? [pid 7094] exit_group(0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7098] <... futex resumed>) = 230 [pid 7106] <... futex resumed>) = ? [pid 7104] +++ exited with 0 +++ [pid 7103] chdir("./bus" [pid 7102] <... symlink resumed>) = 0 [pid 7098] +++ exited with 0 +++ [pid 7097] +++ exited with 0 +++ [pid 7094] <... exit_group resumed>) = ? [pid 7107] <... memfd_create resumed>) = 3 [pid 7106] +++ exited with 0 +++ [pid 7103] <... chdir resumed>) = 0 [pid 7102] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7095] +++ exited with 0 +++ [pid 7094] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7103] ioctl(4, LOOP_CLR_FD [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7094, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7095, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7103] <... ioctl resumed>) = 0 [pid 7102] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7107] <... mmap resumed>) = 0x7fee02dd3000 [pid 7103] close(4 [pid 7102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] fstat(4, [pid 7107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7102] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7107] <... write resumed>) = 524288 [pid 7102] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(4, [pid 5074] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7107] munmap(0x7fee02dd3000, 524288 [pid 7102] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] <... munmap resumed>) = 0 [pid 7103] <... close resumed>) = 0 [pid 7102] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] getdents64(4, [pid 5074] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7107] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7103] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7107] <... openat resumed>) = 4 [ 99.095139][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.103162][ T52] hfsplus: b-tree write err: -5, ino 4 [ 99.109227][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.123313][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.132838][ T7098] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7103] <... futex resumed>) = 1 [pid 7102] <... clone resumed>, parent_tid=[7108], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7108 [pid 7101] <... futex resumed>) = 0 [pid 5081] fstat(3, [pid 5080] close(4 [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7108 attached [pid 7107] ioctl(4, LOOP_SET_FD, 3 [pid 7103] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7102] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... close resumed>) = 0 [pid 5074] fstat(3, [pid 7108] set_robust_list(0x7fee0b1f39e0, 24 [pid 7103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7102] <... futex resumed>) = 0 [pid 7101] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7108] <... set_robust_list resumed>) = 0 [pid 7103] creat("./bus", 000 [pid 7102] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7101] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 7108] memfd_create("syzkaller", 0 [pid 7103] <... creat resumed>) = 4 [pid 5081] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./109/bus" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7108] <... memfd_create resumed>) = 3 [pid 7103] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7103] <... futex resumed>) = 1 [pid 7101] <... futex resumed>) = 0 [pid 5081] lstat("./113/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] <... mmap resumed>) = 0x7fee02dd3000 [pid 7103] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7101] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./111/binderfs", [pid 7108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7101] <... futex resumed>) = 0 [pid 5081] unlink("./113/binderfs" [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7103] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7101] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5074] unlink("./111/binderfs" [pid 7107] <... ioctl resumed>) = 0 [pid 5081] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7108] <... write resumed>) = 524288 [pid 7107] close(3 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] getdents64(3, [pid 5074] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7108] munmap(0x7fee02dd3000, 524288 [pid 7107] <... close resumed>) = 0 [pid 5081] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7108] <... munmap resumed>) = 0 [pid 7107] mkdir("./bus", 0777 [pid 5080] close(3 [pid 7108] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7107] <... mkdir resumed>) = 0 [pid 5081] fstat(4, [pid 7107] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7108] <... openat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] rmdir("./109" [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 7108] ioctl(4, LOOP_SET_FD, 3 [pid 7107] <... mount resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 99.165013][ T7107] loop3: detected capacity change from 0 to 1024 [ 99.173206][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.181980][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 99.182944][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.197678][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5081] rmdir("./113/bus" [pid 7107] <... openat resumed>) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] mkdir("./110", 0777 [pid 7107] chdir("./bus" [pid 5081] getdents64(3, [pid 7107] <... chdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] close(3 [pid 7107] close(4 [pid 7108] <... ioctl resumed>) = 0 [pid 7107] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 7107] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./113" [pid 7107] <... futex resumed>) = 1 [pid 7105] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7107] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mkdir("./114", 0777 [pid 7107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7105] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 7108] close(3 [pid 7107] creat("./bus", 000 [pid 7105] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7107] <... creat resumed>) = 4 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7108] <... close resumed>) = 0 [pid 7107] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 7107] <... futex resumed>) = 1 [pid 7105] <... futex resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7107] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7105] <... futex resumed>) = 0 [pid 5081] close(3 [pid 7107] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7105] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7101] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 7108] mkdir("./bus", 0777 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7108] <... mkdir resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7108] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] close(3 [pid 7108] <... mount resumed>) = 0 [pid 7101] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7108] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7108] <... openat resumed>) = 3 [pid 7108] chdir("./bus" [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7109 [pid 7108] <... chdir resumed>) = 0 [ 99.209287][ T7108] loop1: detected capacity change from 0 to 1024 [ 99.218656][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.228293][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.235821][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.244564][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.251855][ T7103] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7108] ioctl(4, LOOP_CLR_FD) = 0 [pid 7108] close(4) = 0 [pid 7108] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7102] <... futex resumed>) = 0 [pid 7108] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7102] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7102] <... futex resumed>) = 0 [pid 7108] creat("./bus", 000 [pid 7102] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7108] <... creat resumed>) = 4 [pid 7101] <... futex resumed>) = 0 [pid 7108] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7108] <... futex resumed>) = 1 [pid 7102] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7109 attached [pid 7108] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7102] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = 0 [pid 7108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7102] <... futex resumed>) = 0 [pid 7108] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7102] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7109] set_robust_list(0x555556b055e0, 24 [pid 7103] <... write resumed>) = 57344 [pid 7101] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7110 attached [pid 7110] set_robust_list(0x555556b055e0, 24) = 0 [pid 7110] chdir("./114") = 0 [pid 7110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7109] <... set_robust_list resumed>) = 0 [pid 7103] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] <... mprotect resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7110 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7110] setpgid(0, 0) = 0 [pid 7110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7110] write(3, "1000", 4) = 4 [pid 7110] close(3) = 0 [pid 7110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7110] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.261831][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.272540][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.280386][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.285050][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.290795][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.303150][ T7107] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7109] chdir("./110" [pid 7107] <... write resumed>) = 57344 [pid 7105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7103] <... futex resumed>) = 0 [pid 7101] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] lstat("./111/bus", [pid 7110] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7110] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7111], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7111 [pid 7110] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7110] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7109] <... chdir resumed>) = 0 [pid 7105] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7105] <... futex resumed>) = 0 [pid 7101] <... clone resumed>, parent_tid=[7112], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7112 [pid 7107] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7109] <... prctl resumed>) = 0 [pid 7107] <... futex resumed>) = 0 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7101] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7112 attached [pid 7112] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7112] creat("./file1", 000) = 5 [pid 7112] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] setpgid(0, 0 [pid 7112] <... futex resumed>) = 0 [pid 7107] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] <... mmap resumed>) = 0x7fee02e32000 [pid 7101] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7111 attached [pid 7112] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7111] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7111] memfd_create("syzkaller", 0) = 3 [pid 7111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7109] <... setpgid resumed>) = 0 [pid 7105] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7101] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7105] <... mprotect resumed>) = 0 [pid 7101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... openat resumed>) = 4 [pid 7109] <... openat resumed>) = 3 [pid 7105] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7101] exit_group(0 [pid 5074] fstat(4, [pid 7112] <... futex resumed>) = ? [pid 7109] write(3, "1000", 4 [pid 7103] <... futex resumed>) = ? [pid 7102] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] <... exit_group resumed>) = ? [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7112] +++ exited with 0 +++ [pid 7109] <... write resumed>) = 4 [pid 7105] <... clone resumed>, parent_tid=[7113], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7113 [pid 7103] +++ exited with 0 +++ [pid 7102] <... futex resumed>) = 0 [pid 7101] +++ exited with 0 +++ [pid 5074] getdents64(4, [pid 7109] close(3 [pid 7105] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7101, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7109] <... close resumed>) = 0 [pid 7105] <... futex resumed>) = 0 [pid 7102] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] getdents64(4, [pid 7109] symlink("/dev/binderfs", "./binderfs" [pid 7105] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7102] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7111] <... write resumed>) = 524288 [pid 7109] <... symlink resumed>) = 0 [pid 5074] close(4 [pid 7109] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7102] <... mprotect resumed>) = 0 [pid 5076] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 7109] <... futex resumed>) = 0 [pid 7102] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./111/bus"./strace-static-x86_64: Process 7114 attached ./strace-static-x86_64: Process 7113 attached [pid 7111] munmap(0x7fee02dd3000, 524288 [pid 7109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 7109] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5074] getdents64(3, [pid 7109] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7109] <... mprotect resumed>) = 0 [pid 5074] close(3 [pid 7109] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./111" [pid 7109] <... clone resumed>, parent_tid=[7115], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7115 [pid 5074] <... rmdir resumed>) = 0 [pid 7109] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] mkdir("./112", 0777 [pid 7109] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7109] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7116 ./strace-static-x86_64: Process 7116 attached ./strace-static-x86_64: Process 7115 attached [pid 7115] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7116] set_robust_list(0x555556b055e0, 24 [pid 7115] memfd_create("syzkaller", 0 [pid 7116] <... set_robust_list resumed>) = 0 [pid 7115] <... memfd_create resumed>) = 3 [pid 7115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7116] chdir("./112" [pid 7115] <... mmap resumed>) = 0x7fee02dd3000 [pid 7116] <... chdir resumed>) = 0 [pid 7116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7116] setpgid(0, 0 [pid 7111] <... munmap resumed>) = 0 [pid 7102] <... clone resumed>, parent_tid=[7114], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7114 [pid 5076] <... openat resumed>) = 3 [pid 7116] <... setpgid resumed>) = 0 [pid 7116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7102] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(3, [pid 7111] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7102] <... futex resumed>) = 0 [pid 7114] set_robust_list(0x7fee02e529e0, 24 [pid 7113] set_robust_list(0x7fee02e529e0, 24 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7111] <... openat resumed>) = 4 [pid 7102] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7114] <... set_robust_list resumed>) = 0 [pid 7113] <... set_robust_list resumed>) = 0 [ 99.311708][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.320122][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.328308][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.337366][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.352706][ T7108] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7111] ioctl(4, LOOP_SET_FD, 3 [pid 5076] getdents64(3, [pid 7114] creat("./file1", 000 [pid 7116] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7116] <... write resumed>) = 4 [pid 7116] close(3) = 0 [pid 7116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7116] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7116] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7116] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7117], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7117 [pid 7116] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7116] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7113] creat("./file1", 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./113/binderfs", [pid 7113] <... creat resumed>) = 5 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./113/binderfs" [pid 7113] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7113] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] exit_group(0 [pid 5076] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7107] <... futex resumed>) = ? [pid 7105] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7117 attached [pid 7115] <... write resumed>) = 524288 [pid 7113] <... futex resumed>) = ? [pid 7107] +++ exited with 0 +++ [pid 7117] set_robust_list(0x7fee0b1f39e0, 24 [pid 7115] munmap(0x7fee02dd3000, 524288 [pid 7117] <... set_robust_list resumed>) = 0 [pid 7115] <... munmap resumed>) = 0 [pid 7117] memfd_create("syzkaller", 0) = 3 [pid 7115] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7115] <... openat resumed>) = 4 [pid 7117] <... mmap resumed>) = 0x7fee02dd3000 [pid 7115] ioctl(4, LOOP_SET_FD, 3 [pid 7117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7113] +++ exited with 0 +++ [pid 7111] <... ioctl resumed>) = 0 [pid 7105] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7105, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./112/binderfs") = 0 [pid 5077] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7117] <... write resumed>) = 524288 [pid 7117] munmap(0x7fee02dd3000, 524288) = 0 [pid 7117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7117] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7115] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 7115] close(3 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7115] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 7115] mkdir("./bus", 0777 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7115] <... mkdir resumed>) = 0 [pid 5076] close(4 [pid 7115] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./113/bus" [pid 7111] close(3 [pid 7114] <... creat resumed>) = 5 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7114] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7111] <... close resumed>) = 0 [pid 5077] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 7117] <... ioctl resumed>) = 0 [pid 7114] <... futex resumed>) = 0 [pid 7111] mkdir("./bus", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7117] close(3 [pid 7115] <... mount resumed>) = 0 [pid 7114] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] close(3 [pid 7117] <... close resumed>) = 0 [pid 7115] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7111] <... mkdir resumed>) = 0 [pid 5077] lstat("./112/bus", [pid 5076] <... close resumed>) = 0 [pid 7117] mkdir("./bus", 0777 [pid 7115] <... openat resumed>) = 3 [pid 7111] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./113" [pid 7117] <... mkdir resumed>) = 0 [pid 7115] chdir("./bus" [pid 7108] <... write resumed>) = 57344 [pid 5077] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 7117] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7115] <... chdir resumed>) = 0 [pid 5076] mkdir("./114", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7117] <... mount resumed>) = 0 [pid 7115] ioctl(4, LOOP_CLR_FD [pid 7111] <... mount resumed>) = 0 [pid 7108] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 7111] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7108] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7111] <... openat resumed>) = 3 [pid 7108] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... openat resumed>) = 4 [pid 7111] chdir("./bus" [pid 7102] exit_group(0 [pid 5077] fstat(4, [pid 7114] <... futex resumed>) = ? [pid 7111] <... chdir resumed>) = 0 [pid 7108] <... futex resumed>) = ? [pid 7102] <... exit_group resumed>) = ? [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7114] +++ exited with 0 +++ [pid 7111] ioctl(4, LOOP_CLR_FD [pid 7108] +++ exited with 0 +++ [pid 7102] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 7111] <... ioctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [ 99.366108][ T7111] loop5: detected capacity change from 0 to 1024 [ 99.378063][ T11] hfsplus: b-tree write err: -5, ino 4 [ 99.380801][ T7115] loop4: detected capacity change from 0 to 1024 [ 99.398442][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 99.401916][ T7117] loop0: detected capacity change from 0 to 1024 [pid 7111] close(4 [pid 5077] getdents64(4, [pid 7117] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7115] <... ioctl resumed>) = 0 [pid 7111] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7102, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7117] <... openat resumed>) = 3 [pid 7115] close(4 [pid 5076] <... openat resumed>) = 3 [pid 7117] chdir("./bus" [pid 7115] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7117] <... chdir resumed>) = 0 [pid 7115] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7117] ioctl(4, LOOP_CLR_FD [pid 7115] <... futex resumed>) = 1 [pid 7109] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7117] <... ioctl resumed>) = 0 [pid 7115] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7109] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7117] close(4 [pid 7115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7109] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... openat resumed>) = 3 [pid 7117] <... close resumed>) = 0 [pid 7115] creat("./bus", 000 [pid 7109] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] fstat(3, [pid 7117] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7115] <... creat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7118 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7117] <... futex resumed>) = 1 [pid 7116] <... futex resumed>) = 0 [pid 7115] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 7117] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7116] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7115] <... futex resumed>) = 1 [pid 7109] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7116] <... futex resumed>) = 0 [pid 7115] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7109] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7117] creat("./bus", 000 [pid 7116] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7109] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7117] <... creat resumed>) = 4 [pid 7115] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7109] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] lstat("./111/binderfs", [pid 7117] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7111] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7117] <... futex resumed>) = 1 [pid 7116] <... futex resumed>) = 0 [pid 7111] <... futex resumed>) = 1 [pid 7110] <... futex resumed>) = 0 [pid 5077] close(4 [pid 5075] unlink("./111/binderfs" [pid 7117] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7116] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7111] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7110] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7116] <... futex resumed>) = 0 [pid 7111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7110] <... futex resumed>) = 0 [pid 5077] rmdir("./112/bus" [pid 5075] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7117] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7116] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7111] creat("./bus", 000 [pid 7110] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... rmdir resumed>) = 0 [pid 7111] <... creat resumed>) = 4 [pid 5077] getdents64(3, [pid 7111] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7111] <... futex resumed>) = 1 [pid 7110] <... futex resumed>) = 0 [pid 5077] close(3 [pid 7111] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7110] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7110] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7111] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7110] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] rmdir("./112") = 0 [pid 5077] mkdir("./113", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7118 attached ) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7119 [pid 5075] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7118] set_robust_list(0x555556b055e0, 24 [pid 7109] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... set_robust_list resumed>) = 0 [pid 7109] <... futex resumed>) = 0 [pid 7109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7109] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7109] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7118] chdir("./114" [pid 7109] <... clone resumed>, parent_tid=[7120], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7120 [pid 7109] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... chdir resumed>) = 0 [pid 7109] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7119 attached [pid 7118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... openat resumed>) = 4 [pid 7118] <... prctl resumed>) = 0 [pid 5075] fstat(4, [pid 7119] set_robust_list(0x555556b055e0, 24 [pid 7118] setpgid(0, 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7118] <... setpgid resumed>) = 0 [pid 5075] getdents64(4, [pid 7119] <... set_robust_list resumed>) = 0 [pid 7118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7118] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7120 attached [pid 7118] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 7120] set_robust_list(0x7fee02e529e0, 24 [pid 7118] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7120] <... set_robust_list resumed>) = 0 [pid 7119] chdir("./113" [ 99.453099][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.465653][ T33] hfsplus: b-tree write err: -5, ino 4 [ 99.466473][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.481168][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.483898][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7118] close(3 [pid 5075] close(4 [pid 7120] creat("./file1", 000 [pid 7119] <... chdir resumed>) = 0 [pid 7118] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7118] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./111/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./111" [pid 7119] <... prctl resumed>) = 0 [pid 7118] <... symlink resumed>) = 0 [pid 7116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... rmdir resumed>) = 0 [pid 7116] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mkdir("./112", 0777 [pid 7119] setpgid(0, 0 [pid 7118] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7116] <... futex resumed>) = 0 [pid 7110] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 7116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7116] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... openat resumed>) = 3 [pid 7116] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7116] <... mprotect resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7116] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] close(3) = 0 [pid 7116] <... clone resumed>, parent_tid=[7121], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7121 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7116] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7122 [pid 7116] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7122 attached [pid 7122] set_robust_list(0x555556b055e0, 24./strace-static-x86_64: Process 7121 attached ) = 0 [pid 7121] set_robust_list(0x7fee02e529e0, 24 [pid 7122] chdir("./112" [pid 7121] <... set_robust_list resumed>) = 0 [pid 7122] <... chdir resumed>) = 0 [pid 7119] <... setpgid resumed>) = 0 [pid 7118] <... futex resumed>) = 0 [pid 7110] <... futex resumed>) = 0 [pid 7121] creat("./file1", 000 [pid 7122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7122] setpgid(0, 0) = 0 [pid 7122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7109] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7122] write(3, "1000", 4) = 4 [pid 7122] close(3) = 0 [pid 7122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7122] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7122] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7122] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7119] <... openat resumed>) = 3 [pid 7118] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7110] <... mmap resumed>) = 0x7fee02e32000 [pid 7119] write(3, "1000", 4 [pid 7118] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7110] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7122] <... clone resumed>, parent_tid=[7123], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7123 [pid 7119] <... write resumed>) = 4 [pid 7122] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7122] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7123 attached [pid 7123] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7118] <... mprotect resumed>) = 0 [pid 7110] <... mprotect resumed>) = 0 [pid 7118] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7119] close(3 [pid 7110] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7119] <... close resumed>) = 0 [pid 7118] <... clone resumed>, parent_tid=[7124], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7124 [pid 7119] symlink("/dev/binderfs", "./binderfs" [pid 7118] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] <... clone resumed>, parent_tid=[7125], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7125 [pid 7123] memfd_create("syzkaller", 0 [pid 7119] <... symlink resumed>) = 0 [pid 7118] <... futex resumed>) = 0 [pid 7110] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7119] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7110] <... futex resumed>) = 0 [pid 7119] <... futex resumed>) = 0 [pid 7119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7110] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7119] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7119] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7123] <... memfd_create resumed>) = 3 [pid 7123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7119] <... mprotect resumed>) = 0 [pid 7123] <... mmap resumed>) = 0x7fee02dd3000 [pid 7119] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7126], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7126 [pid 7119] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 99.510302][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.518563][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.521044][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.535643][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.540842][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.551311][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7119] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7126 attached [pid 7126] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7126] memfd_create("syzkaller", 0 [pid 7116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7124 attached ./strace-static-x86_64: Process 7125 attached [pid 7126] <... memfd_create resumed>) = 3 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7125] set_robust_list(0x7fee02e529e0, 24 [pid 7124] set_robust_list(0x7fee0b1f39e0, 24 [pid 7123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7126] <... mmap resumed>) = 0x7fee02dd3000 [pid 7125] <... set_robust_list resumed>) = 0 [pid 7124] <... set_robust_list resumed>) = 0 [pid 7123] <... write resumed>) = 524288 [pid 7125] creat("./file1", 000 [pid 7124] memfd_create("syzkaller", 0) = 3 [pid 7125] <... creat resumed>) = 5 [pid 7126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7125] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7125] <... futex resumed>) = 1 [pid 7124] <... mmap resumed>) = 0x7fee02dd3000 [pid 7110] <... futex resumed>) = 0 [pid 7126] <... write resumed>) = 524288 [pid 7123] munmap(0x7fee02dd3000, 524288) = 0 [pid 7123] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 99.572895][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.601482][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.603336][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.614534][ T7123] loop1: detected capacity change from 0 to 1024 [pid 7123] ioctl(4, LOOP_SET_FD, 3 [pid 7125] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7126] munmap(0x7fee02dd3000, 524288) = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7126] ioctl(4, LOOP_SET_FD, 3 [pid 7124] <... write resumed>) = 524288 [pid 7121] <... creat resumed>) = 5 [pid 7120] <... creat resumed>) = 5 [pid 7111] <... write resumed>) = 57344 [pid 7121] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7120] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7121] <... futex resumed>) = 0 [pid 7120] <... futex resumed>) = 0 [pid 7123] <... ioctl resumed>) = 0 [pid 7121] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] close(3) = 0 [pid 7123] mkdir("./bus", 0777) = 0 [pid 7123] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7126] <... ioctl resumed>) = 0 [pid 7124] munmap(0x7fee02dd3000, 524288 [pid 7123] <... mount resumed>) = 0 [pid 7111] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] exit_group(0 [pid 7126] close(3 [pid 7125] <... futex resumed>) = ? [pid 7124] <... munmap resumed>) = 0 [pid 7111] <... futex resumed>) = ? [pid 7110] <... exit_group resumed>) = ? [pid 7126] <... close resumed>) = 0 [pid 7125] +++ exited with 0 +++ [pid 7124] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7111] +++ exited with 0 +++ [pid 7110] +++ exited with 0 +++ [pid 7126] mkdir("./bus", 0777 [pid 7124] <... openat resumed>) = 4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7110, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7126] <... mkdir resumed>) = 0 [ 99.619246][ T7111] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.626160][ T7126] loop3: detected capacity change from 0 to 1024 [ 99.636430][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.644484][ T7115] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.644882][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.659881][ T7117] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.660037][ T7124] loop2: detected capacity change from 0 to 1024 [pid 7124] ioctl(4, LOOP_SET_FD, 3 [pid 7126] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7123] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7117] <... write resumed>) = 57344 [pid 7115] <... write resumed>) = 57344 [pid 7123] <... openat resumed>) = 3 [pid 7117] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7115] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7123] chdir("./bus" [pid 7117] <... futex resumed>) = 0 [pid 7115] <... futex resumed>) = 0 [pid 7123] <... chdir resumed>) = 0 [pid 7117] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7115] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] ioctl(4, LOOP_CLR_FD [pid 7116] exit_group(0 [pid 7109] exit_group(0 [pid 7123] <... ioctl resumed>) = 0 [pid 7121] <... futex resumed>) = ? [pid 7120] <... futex resumed>) = ? [pid 7117] <... futex resumed>) = ? [pid 7116] <... exit_group resumed>) = ? [pid 7115] <... futex resumed>) = ? [pid 7109] <... exit_group resumed>) = ? [pid 7123] close(4 [pid 7121] +++ exited with 0 +++ [pid 7120] +++ exited with 0 +++ [pid 7117] +++ exited with 0 +++ [pid 7116] +++ exited with 0 +++ [pid 7115] +++ exited with 0 +++ [pid 7109] +++ exited with 0 +++ [pid 7123] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7116, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7123] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7122] <... futex resumed>) = 0 [pid 7123] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7122] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7122] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7123] creat("./bus", 000 [pid 7122] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7123] <... creat resumed>) = 4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7109, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 7123] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] fstat(3, [pid 7123] <... futex resumed>) = 1 [pid 7122] <... futex resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7123] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7122] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 7123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7122] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7123] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7122] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7124] <... ioctl resumed>) = 0 [pid 5081] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7124] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7124] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7124] mkdir("./bus", 0777 [pid 5081] <... openat resumed>) = 3 [pid 7126] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7126] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] lstat("./112/binderfs", [pid 7126] <... openat resumed>) = 3 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7126] chdir("./bus" [pid 5074] unlink("./112/binderfs" [pid 7126] <... chdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7126] ioctl(4, LOOP_CLR_FD [pid 5074] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7126] <... ioctl resumed>) = 0 [pid 7126] close(4) = 0 [pid 7126] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7119] <... futex resumed>) = 0 [pid 7126] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7119] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7119] <... futex resumed>) = 0 [pid 7126] creat("./bus", 000 [pid 7119] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7126] <... creat resumed>) = 4 [pid 7126] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7119] <... futex resumed>) = 0 [pid 7126] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7119] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7119] <... futex resumed>) = 0 [pid 7126] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7119] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... mkdir resumed>) = 0 [pid 5081] fstat(3, [pid 7124] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 5080] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5081] lstat("./114/binderfs", [pid 5080] fstat(3, [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] unlink("./114/binderfs" [pid 5080] getdents64(3, [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./110/binderfs") = 0 [ 99.678519][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.685995][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.694146][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.701535][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.701550][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.718637][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7124] <... mount resumed>) = 0 [pid 7122] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7124] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7122] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] chdir("./bus") = 0 [pid 7124] ioctl(4, LOOP_CLR_FD) = 0 [pid 7124] close(4) = 0 [pid 7124] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7118] <... futex resumed>) = 0 [pid 7124] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7118] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7118] <... futex resumed>) = 0 [pid 7124] creat("./bus", 000 [pid 7118] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... creat resumed>) = 4 [pid 7122] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7124] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7124] <... futex resumed>) = 1 [pid 7118] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7124] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7118] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./110/bus", [pid 7124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7118] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7124] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7118] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./110/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [ 99.719252][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 99.739669][ T33] hfsplus: b-tree write err: -5, ino 4 [ 99.739669][ T11] hfsplus: b-tree write err: -5, ino 4 [ 99.762091][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] close(3) = 0 [pid 7122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./110" [pid 5074] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./111", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 7122] <... mmap resumed>) = 0x7fee02e32000 [pid 7119] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7118] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7118] <... futex resumed>) = 0 [pid 7118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7127 [pid 7118] <... mmap resumed>) = 0x7fee02e32000 [pid 7118] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7118] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7128], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7128 [pid 7118] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7118] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7128 attached [pid 7128] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7128] creat("./file1", 000 [pid 7122] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7119] <... futex resumed>) = 0 [pid 5081] lstat("./114/bus", [pid 5074] lstat("./112/bus", ./strace-static-x86_64: Process 7127 attached [ 99.779196][ T7123] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.785550][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.788270][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.793964][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.813479][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.817318][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7128] <... creat resumed>) = 5 [pid 7128] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7118] <... futex resumed>) = 0 [pid 7128] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7127] set_robust_list(0x555556b055e0, 24 [pid 7126] <... write resumed>) = 57344 [pid 7122] <... mprotect resumed>) = 0 [pid 7119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7127] <... set_robust_list resumed>) = 0 [pid 7122] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7119] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7127] chdir("./111" [pid 7119] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7127] <... chdir resumed>) = 0 [pid 7122] <... clone resumed>, parent_tid=[7129], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7129 [pid 7119] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7129 attached [pid 7127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7126] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7122] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7119] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 7127] <... prctl resumed>) = 0 [pid 7122] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5074] fstat(4, [pid 7127] setpgid(0, 0 [pid 7122] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7119] <... clone resumed>, parent_tid=[7130], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7130 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7127] <... setpgid resumed>) = 0 [pid 7119] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5074] getdents64(4, [pid 7127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7119] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7127] <... openat resumed>) = 3 [pid 7119] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 5074] getdents64(4, [pid 7127] write(3, "1000", 4 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7127] <... write resumed>) = 4 [pid 5081] close(4 [pid 5074] close(4 [pid 7127] close(3 [pid 5081] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7127] <... close resumed>) = 0 [pid 5081] rmdir("./114/bus" [pid 5074] rmdir("./112/bus" [pid 7127] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7127] <... symlink resumed>) = 0 [pid 5081] getdents64(3, [pid 5074] getdents64(3, [pid 7127] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7127] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5074] close(3 [pid 7127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7123] <... write resumed>) = 57344 [pid 5081] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7129] set_robust_list(0x7fee02e529e0, 24 [pid 7127] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7126] <... futex resumed>) = 0 [pid 5081] rmdir("./114" [pid 5074] rmdir("./112" [pid 7129] <... set_robust_list resumed>) = 0 [pid 7127] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7126] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7129] creat("./file1", 000 [pid 7127] <... mprotect resumed>) = 0 [pid 7123] <... futex resumed>) = 0 [pid 5081] mkdir("./115", 0777 [pid 5074] mkdir("./113", 0777 [pid 7129] <... creat resumed>) = 5 [pid 7127] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7123] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7127] <... clone resumed>, parent_tid=[7131], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7131 [pid 5081] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7127] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7127] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7127] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] close(3 [pid 5074] close(3 [pid 5081] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7132 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7133 ./strace-static-x86_64: Process 7131 attached [pid 7131] set_robust_list(0x7fee0b1f39e0, 24) = 0 ./strace-static-x86_64: Process 7130 attached [pid 7130] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7131] memfd_create("syzkaller", 0 [pid 7130] creat("./file1", 000 [pid 7131] <... memfd_create resumed>) = 3 [pid 7130] <... creat resumed>) = 5 [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7130] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7133 attached [pid 7131] <... mmap resumed>) = 0x7fee02dd3000 [pid 7130] <... futex resumed>) = 1 [pid 7119] <... futex resumed>) = 0 [pid 7133] set_robust_list(0x555556b055e0, 24 [pid 7130] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7119] exit_group(0 [pid 7133] <... set_robust_list resumed>) = 0 [pid 7131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7130] <... futex resumed>) = ? [pid 7129] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7126] <... futex resumed>) = ? [pid 7119] <... exit_group resumed>) = ? [pid 7133] chdir("./113" [pid 7130] +++ exited with 0 +++ [pid 7133] <... chdir resumed>) = 0 [pid 7129] <... futex resumed>) = 1 [pid 7126] +++ exited with 0 +++ [pid 7122] <... futex resumed>) = 0 [pid 7119] +++ exited with 0 +++ [pid 7133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7129] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7122] exit_group(0 [pid 7133] <... prctl resumed>) = 0 [pid 7129] <... futex resumed>) = ? [pid 7123] <... futex resumed>) = ? [pid 7122] <... exit_group resumed>) = ? [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7119, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7133] setpgid(0, 0 [pid 7131] <... write resumed>) = 524288 [pid 7129] +++ exited with 0 +++ [pid 7123] +++ exited with 0 +++ [pid 7122] +++ exited with 0 +++ [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 7133] <... setpgid resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7122, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7133] write(3, "1000", 4 [pid 5077] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] <... write resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7133] close(3 [pid 5077] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7133] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 7133] symlink("/dev/binderfs", "./binderfs" [pid 5077] fstat(3, [pid 5075] fstat(3, [pid 7133] <... symlink resumed>) = 0 [pid 7131] munmap(0x7fee02dd3000, 524288 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7133] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... munmap resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] getdents64(3, [pid 7133] <... futex resumed>) = 0 [pid 7131] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7131] <... openat resumed>) = 4 [pid 5077] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] <... mmap resumed>) = 0x7fee0b1d3000 [ 99.829540][ T7126] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.832732][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.846064][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.858466][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7131] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7133] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] lstat("./113/binderfs", [pid 5075] lstat("./112/binderfs", [pid 7133] <... mprotect resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7133] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] unlink("./113/binderfs" [pid 5075] unlink("./112/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7133] <... clone resumed>, parent_tid=[7134], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7134 [pid 5077] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7133] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7134 attached [pid 7134] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7134] memfd_create("syzkaller", 0) = 3 [pid 7134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7132 attached [pid 7131] <... ioctl resumed>) = 0 [pid 7131] close(3) = 0 [pid 7131] mkdir("./bus", 0777) = 0 [pid 7131] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7132] set_robust_list(0x555556b055e0, 24) = 0 [pid 7132] chdir("./115" [pid 7131] <... mount resumed>) = 0 [pid 7132] <... chdir resumed>) = 0 [pid 7131] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7131] <... openat resumed>) = 3 [pid 7132] <... prctl resumed>) = 0 [pid 7131] chdir("./bus" [pid 5075] <... umount2 resumed>) = 0 [pid 7134] <... write resumed>) = 524288 [pid 7131] <... chdir resumed>) = 0 [pid 5075] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7134] munmap(0x7fee02dd3000, 524288 [pid 7131] ioctl(4, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7131] <... ioctl resumed>) = 0 [pid 5075] lstat("./112/bus", [pid 7134] <... munmap resumed>) = 0 [pid 7131] close(4 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7134] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7131] <... close resumed>) = 0 [pid 5075] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7134] <... openat resumed>) = 4 [pid 7131] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7134] ioctl(4, LOOP_SET_FD, 3 [pid 7131] <... futex resumed>) = 1 [pid 7127] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] setpgid(0, 0 [pid 7131] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7127] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7132] <... setpgid resumed>) = 0 [pid 7131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7127] <... futex resumed>) = 0 [pid 5077] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(4, [pid 7132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 99.887333][ T7131] loop4: detected capacity change from 0 to 1024 [ 99.903209][ T33] hfsplus: b-tree write err: -5, ino 4 [ 99.909019][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 99.926317][ T7134] loop0: detected capacity change from 0 to 1024 [pid 7131] creat("./bus", 000 [pid 7127] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7132] <... openat resumed>) = 3 [pid 7131] <... creat resumed>) = 4 [pid 5075] getdents64(4, [pid 7131] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7131] <... futex resumed>) = 1 [pid 7127] <... futex resumed>) = 0 [pid 5075] getdents64(4, [pid 7131] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7127] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7131] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7127] <... futex resumed>) = 0 [pid 5075] close(4 [pid 7131] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7127] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./112/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./112") = 0 [pid 5075] mkdir("./113", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7135 [pid 7132] write(3, "1000", 4 [pid 7124] <... write resumed>) = 57344 [pid 5077] lstat("./113/bus", [pid 7132] <... write resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7124] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] <... ioctl resumed>) = 0 [pid 7132] close(3 [pid 7134] close(3 [pid 7132] <... close resumed>) = 0 [pid 7124] <... futex resumed>) = 0 [pid 7118] exit_group(0 [pid 5077] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7135 attached [pid 7134] <... close resumed>) = 0 [pid 7132] symlink("/dev/binderfs", "./binderfs" [pid 7128] <... futex resumed>) = ? [pid 7118] <... exit_group resumed>) = ? [pid 7135] set_robust_list(0x555556b055e0, 24 [pid 7134] mkdir("./bus", 0777 [pid 7132] <... symlink resumed>) = 0 [pid 7128] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7135] <... set_robust_list resumed>) = 0 [pid 7134] <... mkdir resumed>) = 0 [pid 7132] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7135] chdir("./113" [pid 7134] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7132] <... futex resumed>) = 0 [pid 7124] +++ exited with 0 +++ [pid 7118] +++ exited with 0 +++ [pid 7135] <... chdir resumed>) = 0 [pid 7134] <... mount resumed>) = 0 [pid 7132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... openat resumed>) = 4 [pid 7134] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7132] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] fstat(4, [pid 7134] <... openat resumed>) = 3 [pid 7132] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7134] chdir("./bus" [pid 7132] <... mprotect resumed>) = 0 [pid 5077] getdents64(4, [pid 7134] <... chdir resumed>) = 0 [pid 7132] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7134] ioctl(4, LOOP_CLR_FD [pid 5077] getdents64(4, ./strace-static-x86_64: Process 7136 attached [pid 7135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7134] <... ioctl resumed>) = 0 [pid 7132] <... clone resumed>, parent_tid=[7136], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7136 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7134] close(4 [pid 7132] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(4 [pid 7136] set_robust_list(0x7fee0b1f39e0, 24 [pid 7135] <... prctl resumed>) = 0 [pid 7134] <... close resumed>) = 0 [pid 7132] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7118, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 99.941976][ T7124] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.951506][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.970069][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.978219][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7134] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] rmdir("./113/bus" [pid 7134] <... futex resumed>) = 1 [pid 5077] <... rmdir resumed>) = 0 [pid 7136] <... set_robust_list resumed>) = 0 [pid 7135] setpgid(0, 0 [pid 7134] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] <... futex resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7136] memfd_create("syzkaller", 0 [pid 7135] <... setpgid resumed>) = 0 [pid 7133] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7134] <... futex resumed>) = 0 [pid 7133] <... futex resumed>) = 1 [pid 7127] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 7136] <... memfd_create resumed>) = 3 [pid 7135] <... openat resumed>) = 3 [pid 7134] creat("./bus", 000 [pid 7133] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7135] write(3, "1000", 4 [pid 7127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7136] <... mmap resumed>) = 0x7fee02dd3000 [pid 7135] <... write resumed>) = 4 [pid 7127] <... mmap resumed>) = 0x7fee02e32000 [pid 7136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7135] close(3 [pid 7134] <... creat resumed>) = 4 [pid 7127] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] rmdir("./113" [pid 5076] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7136] <... write resumed>) = 524288 [pid 7135] <... close resumed>) = 0 [pid 7127] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7136] munmap(0x7fee02dd3000, 524288 [pid 7135] symlink("/dev/binderfs", "./binderfs" [pid 7127] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7136] <... munmap resumed>) = 0 [pid 7135] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7136] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7135] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... clone resumed>, parent_tid=[7137], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7137 [pid 5076] fstat(3, [pid 7136] <... openat resumed>) = 4 [pid 7135] <... futex resumed>) = 0 [pid 7127] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7136] ioctl(4, LOOP_SET_FD, 3 [pid 7135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7127] <... futex resumed>) = 0 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 7137 attached [pid 7134] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... write resumed>) = 57344 [pid 5077] <... rmdir resumed>) = 0 [pid 7137] set_robust_list(0x7fee02e529e0, 24 [pid 7134] <... futex resumed>) = 1 [pid 7131] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./114", 0777 [pid 7137] <... set_robust_list resumed>) = 0 [pid 7134] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7131] <... futex resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 7137] creat("./file1", 000 [pid 7131] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7137] <... creat resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 7137] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7133] <... futex resumed>) = 0 [pid 7127] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7136] <... ioctl resumed>) = 0 [pid 7135] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7133] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7137] <... futex resumed>) = 0 [pid 7137] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] close(3 [pid 7135] <... mprotect resumed>) = 0 [pid 7134] <... futex resumed>) = 0 [pid 7133] <... futex resumed>) = 1 [pid 7127] exit_group(0 [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7136] <... close resumed>) = 0 [pid 7135] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7134] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7133] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... exit_group resumed>) = ? [pid 5077] <... close resumed>) = 0 [pid 5076] lstat("./114/binderfs", [pid 7136] mkdir("./bus", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7136] <... mkdir resumed>) = 0 [pid 7135] <... clone resumed>, parent_tid=[7138], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7138 [pid 5076] unlink("./114/binderfs" [pid 7136] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7135] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... unlink resumed>) = 0 [pid 7135] <... futex resumed>) = 0 [pid 5076] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7135] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7137] <... futex resumed>) = ? [pid 7131] <... futex resumed>) = ? ./strace-static-x86_64: Process 7138 attached [pid 7138] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7138] memfd_create("syzkaller", 0) = 3 [pid 7138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7137] +++ exited with 0 +++ [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7139 [ 99.986451][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [ 99.996725][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.005083][ T7131] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.012159][ T7136] loop5: detected capacity change from 0 to 1024 [ 100.025517][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.033595][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7138] <... mmap resumed>) = 0x7fee02dd3000 [pid 7138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7136] <... mount resumed>) = 0 [pid 7136] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7139 attached ) = 3 [pid 7131] +++ exited with 0 +++ [pid 7127] +++ exited with 0 +++ [pid 7139] set_robust_list(0x555556b055e0, 24 [pid 7136] chdir("./bus" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7127, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7136] <... chdir resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7139] <... set_robust_list resumed>) = 0 [pid 7136] ioctl(4, LOOP_CLR_FD [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7139] chdir("./114" [pid 5080] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7139] <... chdir resumed>) = 0 [pid 7136] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./111/binderfs" [pid 7139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7136] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7139] <... prctl resumed>) = 0 [pid 7136] <... close resumed>) = 0 [pid 7133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7133] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7133] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7133] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7139] setpgid(0, 0 [pid 7136] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7133] <... clone resumed>, parent_tid=[7140], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7140 [pid 5076] lstat("./114/bus", [pid 7138] <... write resumed>) = 524288 [pid 7133] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7138] munmap(0x7fee02dd3000, 524288 [pid 7133] <... futex resumed>) = 0 [pid 7138] <... munmap resumed>) = 0 [pid 7133] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7138] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 100.041387][ T33] hfsplus: b-tree write err: -5, ino 4 [ 100.054606][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.062206][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.071887][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.079412][ T7134] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.087415][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7138] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7140 attached [pid 7139] <... setpgid resumed>) = 0 [pid 7138] <... ioctl resumed>) = 0 [pid 7136] <... futex resumed>) = 1 [pid 7134] <... write resumed>) = 57344 [pid 7132] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7140] set_robust_list(0x7fee02e529e0, 24 [pid 7139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7136] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7134] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7140] <... set_robust_list resumed>) = 0 [pid 7139] <... openat resumed>) = 3 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7134] <... futex resumed>) = 0 [pid 7132] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7140] creat("./file1", 000 [pid 7139] write(3, "1000", 4 [pid 7138] close(3 [pid 7136] creat("./bus", 000 [pid 7134] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7132] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./111/bus", [pid 5076] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7140] <... creat resumed>) = 5 [pid 7139] <... write resumed>) = 4 [pid 7138] <... close resumed>) = 0 [pid 7136] <... creat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7140] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] close(3 [pid 7138] mkdir("./bus", 0777 [pid 7136] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 7140] <... futex resumed>) = 1 [pid 7139] <... close resumed>) = 0 [pid 7138] <... mkdir resumed>) = 0 [pid 7136] <... futex resumed>) = 1 [pid 7133] <... futex resumed>) = 0 [pid 7132] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7140] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] symlink("/dev/binderfs", "./binderfs" [pid 7138] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7136] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7132] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 7139] <... symlink resumed>) = 0 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7132] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7139] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7132] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(4, [pid 5076] getdents64(4, [pid 7139] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] getdents64(4, [pid 5076] close(4 [pid 7139] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7133] exit_group(0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 7138] <... mount resumed>) = 0 [pid 7138] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7133] <... exit_group resumed>) = ? [pid 7138] <... openat resumed>) = 3 [pid 7138] chdir("./bus") = 0 [pid 7138] ioctl(4, LOOP_CLR_FD) = 0 [pid 7138] close(4 [pid 7140] <... futex resumed>) = ? [pid 7139] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7138] <... close resumed>) = 0 [pid 7134] <... futex resumed>) = ? [pid 5080] getdents64(4, [pid 5076] rmdir("./114/bus" [pid 7138] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7135] <... futex resumed>) = 0 [pid 7138] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7135] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7135] <... futex resumed>) = 0 [pid 7138] creat("./bus", 000 [pid 7135] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7138] <... creat resumed>) = 4 [pid 7138] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7135] <... futex resumed>) = 0 [pid 7138] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7135] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 100.090897][ T7138] loop1: detected capacity change from 0 to 1024 [ 100.119396][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.126932][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.134913][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7135] <... futex resumed>) = 0 [pid 7138] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7135] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7140] +++ exited with 0 +++ [pid 7139] <... mprotect resumed>) = 0 [pid 7134] +++ exited with 0 +++ [pid 7133] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7139] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] close(4 [pid 5076] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7133, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7141 attached [pid 7141] set_robust_list(0x7fee0b1f39e0, 24) = 0 [ 100.141734][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.143800][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.154218][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.158922][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.164595][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.178849][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7141] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... clone resumed>, parent_tid=[7141], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7141 [pid 7132] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./111/bus" [pid 5076] close(3 [pid 7139] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7139] <... futex resumed>) = 1 [pid 7132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] getdents64(3, [pid 5076] rmdir("./114" [pid 7139] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7132] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7132] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] close(3 [pid 5076] mkdir("./115", 0777 [pid 5074] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7132] <... mprotect resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7132] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] rmdir("./111" [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7132] <... clone resumed>, parent_tid=[7142], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7142 [pid 5080] mkdir("./112", 0777 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] fstat(3, [pid 7132] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7132] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7132] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5074] getdents64(3, [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7141] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7135] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7143 [pid 7141] memfd_create("syzkaller", 0 [pid 5074] lstat("./113/binderfs", [pid 7141] <... memfd_create resumed>) = 3 [pid 7135] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./113/binderfs" [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7144 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7136] <... write resumed>) = 57344 [pid 7136] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7144 attached [pid 7144] set_robust_list(0x555556b055e0, 24) = 0 [pid 7144] chdir("./112") = 0 [pid 7144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7144] setpgid(0, 0) = 0 [pid 7144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7144] <... openat resumed>) = 3 [pid 7144] write(3, "1000", 4 [pid 7135] <... mmap resumed>) = 0x7fee02e32000 [pid 7141] <... mmap resumed>) = 0x7fee02dd3000 [pid 7135] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7144] <... write resumed>) = 4 [pid 7144] close(3) = 0 [pid 7144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7144] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7135] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7144] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7135] <... clone resumed>, parent_tid=[7145], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7145 [pid 7144] <... mprotect resumed>) = 0 [pid 7135] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7135] <... futex resumed>) = 0 [pid 7135] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7144] <... clone resumed>, parent_tid=[7146], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7146 [pid 7144] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7146 attached [pid 7146] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7141] <... write resumed>) = 524288 [pid 7146] memfd_create("syzkaller", 0) = 3 [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7146] munmap(0x7fee02dd3000, 524288) = 0 [pid 7146] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 100.186447][ T7136] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.190446][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.206610][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7146] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7145 attached ./strace-static-x86_64: Process 7143 attached ./strace-static-x86_64: Process 7142 attached [pid 7141] munmap(0x7fee02dd3000, 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./113/bus" [pid 7145] set_robust_list(0x7fee02e529e0, 24 [pid 7143] set_robust_list(0x555556b055e0, 24 [pid 7142] set_robust_list(0x7fee02e529e0, 24 [pid 5074] <... rmdir resumed>) = 0 [pid 7141] <... munmap resumed>) = 0 [pid 5074] getdents64(3, [pid 7132] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./113") = 0 [pid 7145] <... set_robust_list resumed>) = 0 [pid 7143] <... set_robust_list resumed>) = 0 [pid 7142] <... set_robust_list resumed>) = 0 [pid 7141] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] mkdir("./114", 0777 [pid 7145] creat("./file1", 000 [pid 7143] chdir("./115" [pid 7142] creat("./file1", 000 [pid 7141] <... openat resumed>) = 4 [pid 7143] <... chdir resumed>) = 0 [pid 7142] <... creat resumed>) = 5 [pid 7141] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... mkdir resumed>) = 0 [pid 7143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7142] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7132] exit_group(0 [pid 7136] <... futex resumed>) = ? [pid 7132] <... exit_group resumed>) = ? [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7136] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7147 ./strace-static-x86_64: Process 7147 attached [pid 7147] set_robust_list(0x555556b055e0, 24 [pid 7143] <... prctl resumed>) = 0 [pid 7142] <... futex resumed>) = ? [pid 7143] setpgid(0, 0 [pid 7142] +++ exited with 0 +++ [pid 7143] <... setpgid resumed>) = 0 [pid 7132] +++ exited with 0 +++ [pid 7143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7143] <... openat resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7132, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7143] write(3, "1000", 4 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 7143] <... write resumed>) = 4 [pid 7141] <... ioctl resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 7143] close(3 [pid 7141] close(3 [pid 7147] <... set_robust_list resumed>) = 0 [pid 7143] <... close resumed>) = 0 [pid 7147] chdir("./114" [pid 7146] <... ioctl resumed>) = 0 [pid 7143] symlink("/dev/binderfs", "./binderfs" [pid 7141] <... close resumed>) = 0 [pid 5081] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7147] <... chdir resumed>) = 0 [pid 7146] close(3 [pid 7143] <... symlink resumed>) = 0 [pid 7141] mkdir("./bus", 0777 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7146] <... close resumed>) = 0 [pid 7143] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7147] <... prctl resumed>) = 0 [pid 7146] mkdir("./bus", 0777 [pid 7143] <... futex resumed>) = 0 [pid 7141] <... mkdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7147] setpgid(0, 0 [pid 7145] <... creat resumed>) = 5 [pid 7143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7141] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7138] <... write resumed>) = 57344 [pid 5081] fstat(3, [pid 7147] <... setpgid resumed>) = 0 [pid 7146] <... mkdir resumed>) = 0 [pid 7145] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7138] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7146] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7145] <... futex resumed>) = 0 [pid 7143] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7141] <... mount resumed>) = 0 [pid 7138] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 7147] <... openat resumed>) = 3 [pid 7145] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] <... mprotect resumed>) = 0 [pid 7141] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7138] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7147] write(3, "1000", 4 [pid 5081] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7147] <... write resumed>) = 4 [pid 7135] exit_group(0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7143] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7147] close(3 [pid 7145] <... futex resumed>) = ? [pid 7141] <... openat resumed>) = 3 [pid 7138] <... futex resumed>) = ? [pid 7135] <... exit_group resumed>) = ? [pid 5081] lstat("./115/binderfs", ./strace-static-x86_64: Process 7148 attached [pid 7147] <... close resumed>) = 0 [pid 7146] <... mount resumed>) = 0 [pid 7145] +++ exited with 0 +++ [pid 7143] <... clone resumed>, parent_tid=[7148], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7148 [pid 7141] chdir("./bus" [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7148] set_robust_list(0x7fee0b1f39e0, 24 [pid 7147] symlink("/dev/binderfs", "./binderfs" [pid 7146] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7143] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./115/binderfs" [pid 7141] <... chdir resumed>) = 0 [pid 7148] <... set_robust_list resumed>) = 0 [pid 7147] <... symlink resumed>) = 0 [pid 7146] <... openat resumed>) = 3 [pid 7143] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 7141] ioctl(4, LOOP_CLR_FD [pid 7148] memfd_create("syzkaller", 0 [pid 7147] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] chdir("./bus" [pid 7143] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 100.235330][ T7146] loop4: detected capacity change from 0 to 1024 [ 100.236195][ T7138] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.258516][ T7141] loop3: detected capacity change from 0 to 1024 [pid 5081] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7148] <... memfd_create resumed>) = 3 [pid 7147] <... futex resumed>) = 0 [pid 7146] <... chdir resumed>) = 0 [pid 7141] <... ioctl resumed>) = 0 [pid 7148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7146] ioctl(4, LOOP_CLR_FD [pid 7148] <... mmap resumed>) = 0x7fee02dd3000 [pid 7147] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7146] <... ioctl resumed>) = 0 [pid 7148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7147] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7146] close(4 [pid 7141] close(4 [pid 7147] <... mprotect resumed>) = 0 [pid 7146] <... close resumed>) = 0 [pid 7141] <... close resumed>) = 0 [pid 7138] +++ exited with 0 +++ [pid 7135] +++ exited with 0 +++ [pid 7141] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7141] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7148] <... write resumed>) = 524288 [pid 7148] munmap(0x7fee02dd3000, 524288) = 0 [pid 7148] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7148] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7135, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7147] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7146] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... futex resumed>) = 0 [pid 7139] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7147] <... clone resumed>, parent_tid=[7149], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7149 [pid 7146] <... futex resumed>) = 1 [pid 7144] <... futex resumed>) = 0 [pid 7141] <... futex resumed>) = 0 [pid 7139] <... futex resumed>) = 1 [pid 5075] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7141] creat("./bus", 000 [pid 7147] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] creat("./bus", 000 [pid 7144] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7141] <... creat resumed>) = 4 [pid 7139] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7141] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7147] <... futex resumed>) = 0 [pid 7146] <... creat resumed>) = 4 [pid 7144] <... futex resumed>) = 0 [pid 7139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... umount2 resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7149 attached [pid 7147] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7146] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7139] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7149] set_robust_list(0x7fee0b1f39e0, 24 [pid 7148] <... ioctl resumed>) = 0 [pid 7146] <... futex resumed>) = 0 [pid 7144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7141] <... futex resumed>) = 0 [pid 7139] <... futex resumed>) = 1 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] fstat(3, [pid 7149] <... set_robust_list resumed>) = 0 [pid 7146] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7144] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] lstat("./115/bus", [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7149] memfd_create("syzkaller", 0 [pid 7148] close(3 [pid 7146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7144] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 7149] <... memfd_create resumed>) = 3 [pid 7148] <... close resumed>) = 0 [pid 7146] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7144] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7148] mkdir("./bus", 0777 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7149] <... mmap resumed>) = 0x7fee02dd3000 [pid 7148] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 100.290431][ T52] hfsplus: b-tree write err: -5, ino 4 [ 100.307182][ T7148] loop2: detected capacity change from 0 to 1024 [ 100.323623][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.331073][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7148] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7141] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5081] <... openat resumed>) = 4 [pid 5075] lstat("./113/binderfs", [pid 7149] <... write resumed>) = 524288 [pid 7148] <... mount resumed>) = 0 [pid 5081] fstat(4, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7149] munmap(0x7fee02dd3000, 524288 [pid 7148] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] unlink("./113/binderfs" [pid 7149] <... munmap resumed>) = 0 [pid 7148] <... openat resumed>) = 3 [pid 5081] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 7149] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7148] chdir("./bus" [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7149] <... openat resumed>) = 4 [pid 7148] <... chdir resumed>) = 0 [pid 5081] getdents64(4, [pid 7149] ioctl(4, LOOP_SET_FD, 3 [pid 7148] ioctl(4, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7148] <... ioctl resumed>) = 0 [pid 7144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] close(4 [pid 7148] close(4 [pid 7144] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 7149] <... ioctl resumed>) = 0 [pid 7148] <... close resumed>) = 0 [pid 7144] <... futex resumed>) = 0 [pid 7139] <... futex resumed>) = 0 [pid 5081] rmdir("./115/bus" [pid 7149] close(3 [pid 7148] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7149] <... close resumed>) = 0 [pid 7148] <... futex resumed>) = 1 [pid 7144] <... mmap resumed>) = 0x7fee02e32000 [pid 7139] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] getdents64(3, [pid 7149] mkdir("./bus", 0777 [pid 7148] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7144] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7143] <... futex resumed>) = 0 [pid 7139] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7149] <... mkdir resumed>) = 0 [pid 7144] <... mprotect resumed>) = 0 [pid 7139] <... mprotect resumed>) = 0 [pid 5081] close(3 [pid 7149] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7144] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7139] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... close resumed>) = 0 [pid 7149] <... mount resumed>) = 0 [pid 7143] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./115" [pid 7149] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7148] <... futex resumed>) = 0 [pid 7144] <... clone resumed>, parent_tid=[7150], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7150 [pid 7143] <... futex resumed>) = 1 [pid 7139] <... clone resumed>, parent_tid=[7151], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7151 [pid 5081] <... rmdir resumed>) = 0 [pid 7149] <... openat resumed>) = 3 [pid 7148] creat("./bus", 000 [pid 7144] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7139] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mkdir("./116", 0777 [pid 7149] chdir("./bus" [pid 7148] <... creat resumed>) = 4 [pid 7144] <... futex resumed>) = 0 [pid 7139] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 7149] <... chdir resumed>) = 0 [pid 7148] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7139] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7149] ioctl(4, LOOP_CLR_FD [pid 7148] <... futex resumed>) = 1 [pid 7143] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7149] <... ioctl resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7149] close(4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7149] <... close resumed>) = 0 [pid 7148] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5075] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7151 attached [pid 7149] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7143] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5075] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7151] set_robust_list(0x7fee02e529e0, 24 [pid 7149] <... futex resumed>) = 1 [pid 7148] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7147] <... futex resumed>) = 0 [pid 7143] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] <... set_robust_list resumed>) = 0 [pid 7149] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7147] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 100.346023][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.353712][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.355368][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.368556][ T7149] loop0: detected capacity change from 0 to 1024 [ 100.369544][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.382885][ T33] hfsplus: b-tree write err: -5, ino 4 [pid 5075] lstat("./113/bus", [pid 7151] creat("./file1", 000 [pid 7149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7147] <... futex resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7152 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7149] creat("./bus", 000 [pid 7147] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7149] <... creat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7149] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7149] <... futex resumed>) = 1 [pid 7147] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7149] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7147] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] fstat(4, [pid 7149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7147] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7149] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7147] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7152 attached [pid 5075] getdents64(4, [pid 7152] set_robust_list(0x555556b055e0, 24 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7152] <... set_robust_list resumed>) = 0 [pid 5075] close(4 [pid 7152] chdir("./116" [pid 5075] <... close resumed>) = 0 [pid 7152] <... chdir resumed>) = 0 [pid 5075] rmdir("./113/bus" [pid 7152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... rmdir resumed>) = 0 [pid 7152] <... prctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7152] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7152] <... setpgid resumed>) = 0 [pid 5075] close(3 [pid 7152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... close resumed>) = 0 [pid 7152] <... openat resumed>) = 3 [pid 5075] rmdir("./113"./strace-static-x86_64: Process 7150 attached [pid 7152] write(3, "1000", 4 [pid 7144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... rmdir resumed>) = 0 [pid 7152] <... write resumed>) = 4 [pid 7150] set_robust_list(0x7fee02e529e0, 24 [pid 5075] mkdir("./114", 0777 [pid 7152] close(3 [pid 7150] <... set_robust_list resumed>) = 0 [pid 7146] <... write resumed>) = 57344 [pid 5075] <... mkdir resumed>) = 0 [pid 7152] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7152] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... openat resumed>) = 3 [pid 7152] <... symlink resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7152] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7152] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... close resumed>) = 0 [ 100.408576][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.416894][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.433630][ T7146] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.434295][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.450565][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7152] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7150] creat("./file1", 000 [pid 7146] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7152] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7150] <... creat resumed>) = 5 [pid 7146] <... futex resumed>) = 0 [pid 7143] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] <... mprotect resumed>) = 0 [pid 7150] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] <... futex resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7153 [pid 7152] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7150] <... futex resumed>) = 0 [pid 7143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7150] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] <... mmap resumed>) = 0x7fee02e32000 [pid 7152] <... clone resumed>, parent_tid=[7154], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7154 [pid 7144] exit_group(0 [pid 7143] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7153 attached [pid 7152] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] <... futex resumed>) = ? [pid 7146] <... futex resumed>) = ? [pid 7144] <... exit_group resumed>) = ? [pid 7143] <... mprotect resumed>) = 0 [pid 7153] set_robust_list(0x555556b055e0, 24 [pid 7152] <... futex resumed>) = 0 [pid 7150] +++ exited with 0 +++ [pid 7153] <... set_robust_list resumed>) = 0 [pid 7152] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7147] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7146] +++ exited with 0 +++ [pid 7144] +++ exited with 0 +++ [pid 7143] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7153] chdir("./114" [pid 7147] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7154 attached [pid 7153] <... chdir resumed>) = 0 [pid 7147] <... futex resumed>) = 0 [pid 7143] <... clone resumed>, parent_tid=[7155], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7155 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7144, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7154] set_robust_list(0x7fee0b1f39e0, 24 [pid 7153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7143] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7154] <... set_robust_list resumed>) = 0 [pid 7153] <... prctl resumed>) = 0 [pid 7147] <... mmap resumed>) = 0x7fee02e32000 [pid 7143] <... futex resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 7154] memfd_create("syzkaller", 0 [pid 7153] setpgid(0, 0 [pid 7147] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7143] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7155 attached [pid 7154] <... memfd_create resumed>) = 3 [pid 7153] <... setpgid resumed>) = 0 [pid 7151] <... creat resumed>) = 5 [pid 7147] <... mprotect resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7151] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7147] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7153] <... openat resumed>) = 3 [pid 7151] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7153] write(3, "1000", 4 [pid 7151] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7147] <... clone resumed>, parent_tid=[7156], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7156 [pid 5080] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7153] <... write resumed>) = 4 [pid 7147] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 7153] close(3 [pid 7147] <... futex resumed>) = 0 [pid 5080] fstat(3, [pid 7153] <... close resumed>) = 0 [pid 7147] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7153] symlink("/dev/binderfs", "./binderfs" [pid 5080] getdents64(3, [pid 7155] set_robust_list(0x7fee02e529e0, 24 [pid 7154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7153] <... symlink resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7156 attached [pid 7155] <... set_robust_list resumed>) = 0 [pid 7154] <... mmap resumed>) = 0x7fee02dd3000 [pid 7153] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7156] set_robust_list(0x7fee02e529e0, 24 [pid 7155] creat("./file1", 000 [pid 7153] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7156] <... set_robust_list resumed>) = 0 [pid 7153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] lstat("./112/binderfs", [pid 7156] creat("./file1", 000 [pid 7153] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7153] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] unlink("./112/binderfs" [pid 7153] <... mprotect resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 7153] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7153] <... clone resumed>, parent_tid=[7157], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7157 [ 100.456723][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.482035][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.490684][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.495132][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7156] <... creat resumed>) = 5 [pid 7153] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7157 attached [pid 7156] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... write resumed>) = 524288 [pid 7153] <... futex resumed>) = 0 [pid 7157] set_robust_list(0x7fee0b1f39e0, 24 [pid 7156] <... futex resumed>) = 1 [pid 7153] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7147] <... futex resumed>) = 0 [pid 7143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... umount2 resumed>) = 0 [pid 7156] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./112/bus" [pid 7157] <... set_robust_list resumed>) = 0 [pid 7154] munmap(0x7fee02dd3000, 524288 [pid 5080] <... rmdir resumed>) = 0 [pid 7157] memfd_create("syzkaller", 0 [pid 5080] getdents64(3, [pid 7157] <... memfd_create resumed>) = 3 [pid 7154] <... munmap resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7154] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] close(3) = 0 [pid 5080] rmdir("./112" [pid 7157] <... mmap resumed>) = 0x7fee02dd3000 [pid 7154] <... openat resumed>) = 4 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./113", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 7157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7154] ioctl(4, LOOP_SET_FD, 3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7158 [ 100.512649][ T33] hfsplus: b-tree write err: -5, ino 4 [ 100.519285][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.538137][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.552557][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7158 attached [pid 7158] set_robust_list(0x555556b055e0, 24) = 0 [pid 7158] chdir("./113") = 0 [pid 7157] <... write resumed>) = 524288 [pid 7158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7158] setpgid(0, 0) = 0 [pid 7158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7158] write(3, "1000", 4) = 4 [pid 7158] close(3) = 0 [pid 7158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7158] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7157] munmap(0x7fee02dd3000, 524288 [pid 7154] <... ioctl resumed>) = 0 [pid 7158] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7157] <... munmap resumed>) = 0 [pid 7154] close(3 [pid 7155] <... creat resumed>) = 5 [pid 7141] <... write resumed>) = 57344 [pid 7158] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7155] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... close resumed>) = 0 [pid 7141] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... openat resumed>) = 4 [pid 7155] <... futex resumed>) = 0 [pid 7154] mkdir("./bus", 0777 [pid 7141] <... futex resumed>) = 0 [pid 7139] exit_group(0 [pid 7157] ioctl(4, LOOP_SET_FD, 3 [pid 7155] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] <... mkdir resumed>) = 0 [pid 7139] <... exit_group resumed>) = ? [pid 7154] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7141] +++ exited with 0 +++ [pid 7157] <... ioctl resumed>) = 0 [pid 7157] close(3) = 0 [pid 7157] mkdir("./bus", 0777) = 0 [pid 7157] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7159 attached ) = 0 [pid 7154] <... mount resumed>) = 0 [pid 7151] <... futex resumed>) = ? [pid 7148] <... write resumed>) = 57344 [pid 7159] set_robust_list(0x7fee0b1f39e0, 24 [pid 7158] <... clone resumed>, parent_tid=[7159], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7159 [pid 7154] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7151] +++ exited with 0 +++ [pid 7139] +++ exited with 0 +++ [pid 7159] <... set_robust_list resumed>) = 0 [pid 7158] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... openat resumed>) = 3 [pid 7159] memfd_create("syzkaller", 0 [pid 7158] <... futex resumed>) = 0 [pid 7154] chdir("./bus" [pid 7159] <... memfd_create resumed>) = 3 [pid 7158] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7154] <... chdir resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7139, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 100.554658][ T7141] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.564800][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.569698][ T7154] loop5: detected capacity change from 0 to 1024 [ 100.584294][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.586391][ T7157] loop1: detected capacity change from 0 to 1024 [ 100.591583][ T7148] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.602111][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7154] ioctl(4, LOOP_CLR_FD [pid 7159] <... mmap resumed>) = 0x7fee02dd3000 [pid 7157] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7154] <... ioctl resumed>) = 0 [pid 7148] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7154] close(4 [pid 7159] <... write resumed>) = 524288 [pid 7154] <... close resumed>) = 0 [pid 7154] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7154] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7152] <... futex resumed>) = 0 [pid 7154] creat("./bus", 000 [pid 7152] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7154] <... creat resumed>) = 4 [pid 7154] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7154] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7152] <... futex resumed>) = 0 [pid 7154] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7152] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] munmap(0x7fee02dd3000, 524288 [pid 7157] <... openat resumed>) = 3 [pid 7148] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7159] <... munmap resumed>) = 0 [pid 7157] chdir("./bus" [pid 7149] <... write resumed>) = 57344 [pid 7148] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] exit_group(0 [pid 5077] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7159] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7157] <... chdir resumed>) = 0 [pid 7155] <... futex resumed>) = ? [pid 7148] <... futex resumed>) = ? [pid 7143] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 3 [pid 7159] <... openat resumed>) = 4 [pid 7157] ioctl(4, LOOP_CLR_FD [pid 7155] +++ exited with 0 +++ [pid 7148] +++ exited with 0 +++ [pid 7143] +++ exited with 0 +++ [pid 5077] fstat(3, [pid 7159] ioctl(4, LOOP_SET_FD, 3 [pid 7157] <... ioctl resumed>) = 0 [pid 7149] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7157] close(4 [pid 5077] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7143, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 7157] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7157] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7149] <... futex resumed>) = 0 [pid 5077] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... restart_syscall resumed>) = 0 [pid 7157] <... futex resumed>) = 1 [pid 7153] <... futex resumed>) = 0 [pid 7149] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7157] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7153] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7147] exit_group(0 [pid 5077] lstat("./114/binderfs", [pid 7157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7156] <... futex resumed>) = ? [pid 7153] <... futex resumed>) = 0 [pid 7149] <... futex resumed>) = ? [pid 7147] <... exit_group resumed>) = ? [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7157] creat("./bus", 000 [pid 7156] +++ exited with 0 +++ [pid 7153] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7149] +++ exited with 0 +++ [pid 7147] +++ exited with 0 +++ [pid 5077] unlink("./114/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 100.613644][ T7149] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.623792][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.631500][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.639501][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.641021][ T7159] loop4: detected capacity change from 0 to 1024 [ 100.647184][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7157] <... creat resumed>) = 4 [pid 5077] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7157] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7147, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7157] <... futex resumed>) = 1 [pid 5076] fstat(3, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7157] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./115/binderfs", [pid 5074] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] unlink("./115/binderfs" [pid 5074] fstat(3, [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7153] <... futex resumed>) = 0 [pid 7152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./114/binderfs") = 0 [pid 5074] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7159] <... ioctl resumed>) = 0 [pid 7159] close(3) = 0 [pid 7159] mkdir("./bus", 0777) = 0 [pid 7159] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7154] <... write resumed>) = 57344 [pid 7153] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] <... futex resumed>) = 1 [pid 7152] <... futex resumed>) = 0 [pid 7153] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7154] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] <... mmap resumed>) = 0x7fee02e32000 [pid 7154] <... futex resumed>) = 0 [pid 7152] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7154] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] <... mprotect resumed>) = 0 [pid 7152] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7160], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7160 [pid 7152] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7152] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7157] <... futex resumed>) = 0 [pid 7157] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7160 attached [pid 7160] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7160] creat("./file1", 000) = 5 [pid 7160] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] <... futex resumed>) = 0 [pid 7152] exit_group(0 [pid 7154] <... futex resumed>) = ? [pid 7152] <... exit_group resumed>) = ? [pid 7154] +++ exited with 0 +++ [pid 7160] <... futex resumed>) = ? [pid 7160] +++ exited with 0 +++ [pid 7152] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7152, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./116/binderfs") = 0 [pid 5081] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7159] <... mount resumed>) = 0 [pid 7159] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7159] chdir("./bus") = 0 [pid 7159] ioctl(4, LOOP_CLR_FD) = 0 [pid 7159] close(4 [pid 5077] <... umount2 resumed>) = 0 [pid 7159] <... close resumed>) = 0 [pid 7159] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] <... futex resumed>) = 0 [pid 7158] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7158] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] <... futex resumed>) = 1 [pid 7159] creat("./bus", 000) = 4 [pid 7159] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] <... futex resumed>) = 0 [ 100.675747][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.683209][ T7154] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.687718][ T33] hfsplus: b-tree write err: -5, ino 4 [ 100.696860][ T52] hfsplus: b-tree write err: -5, ino 4 [ 100.704751][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.717117][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7158] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7158] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] <... futex resumed>) = 1 [pid 7159] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5077] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 7153] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7153] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7153] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7153] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7161], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7161 [pid 7153] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7153] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7161 attached [pid 7161] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7161] creat("./file1", 000 [pid 5077] lstat("./114/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] lstat("./115/bus", [pid 5077] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5077] getdents64(4, [pid 5076] fstat(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5076] getdents64(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 5077] rmdir("./114/bus" [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5076] close(4 [pid 7161] <... creat resumed>) = 5 [pid 5076] <... close resumed>) = 0 [pid 7161] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 5076] rmdir("./115/bus" [pid 7161] <... futex resumed>) = 1 [pid 7153] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5076] getdents64(3, [pid 7161] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./114" [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] mkdir("./115", 0777 [pid 5074] lstat("./114/bus", [pid 5076] rmdir("./115" [pid 7158] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5077] <... mkdir resumed>) = 0 [pid 7158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... rmdir resumed>) = 0 [ 100.722746][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 100.728374][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.737174][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.765976][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7158] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./116", 0777 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7158] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 7158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7158] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7158] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7162], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7162 [pid 7158] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7158] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7162 attached [pid 7162] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7162] creat("./file1", 000 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5076] close(3 [pid 5074] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7163 attached [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7164 attached [pid 7163] set_robust_list(0x555556b055e0, 24 [pid 7162] <... creat resumed>) = 5 [pid 7157] <... write resumed>) = 57344 [pid 5081] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7164 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7163 [pid 5074] getdents64(4, [pid 7164] set_robust_list(0x555556b055e0, 24 [pid 7163] <... set_robust_list resumed>) = 0 [pid 7162] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7164] <... set_robust_list resumed>) = 0 [pid 7163] chdir("./116" [pid 7153] exit_group(0 [pid 7164] chdir("./115" [pid 7163] <... chdir resumed>) = 0 [pid 7161] <... futex resumed>) = ? [pid 7153] <... exit_group resumed>) = ? [pid 7164] <... chdir resumed>) = 0 [pid 7163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7161] +++ exited with 0 +++ [ 100.779633][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.786243][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.800346][ T7157] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.805707][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.816599][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7163] <... prctl resumed>) = 0 [pid 7164] <... prctl resumed>) = 0 [pid 7163] setpgid(0, 0 [pid 7164] setpgid(0, 0 [pid 7163] <... setpgid resumed>) = 0 [pid 7164] <... setpgid resumed>) = 0 [pid 7163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7163] <... openat resumed>) = 3 [pid 7164] <... openat resumed>) = 3 [pid 7163] write(3, "1000", 4 [pid 7162] <... futex resumed>) = 1 [pid 7158] <... futex resumed>) = 0 [pid 7157] <... futex resumed>) = ? [pid 5081] lstat("./116/bus", [pid 5074] getdents64(4, [pid 7164] write(3, "1000", 4 [pid 7163] <... write resumed>) = 4 [pid 7162] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7164] <... write resumed>) = 4 [pid 7163] close(3 [pid 7157] +++ exited with 0 +++ [pid 7153] +++ exited with 0 +++ [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7164] close(3 [pid 7163] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7153, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7164] <... close resumed>) = 0 [pid 7163] symlink("/dev/binderfs", "./binderfs" [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7164] symlink("/dev/binderfs", "./binderfs" [pid 7163] <... symlink resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7164] <... symlink resumed>) = 0 [pid 7163] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] <... futex resumed>) = 0 [pid 7164] <... futex resumed>) = 0 [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 7164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7163] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7164] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7163] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7164] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7163] <... mprotect resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7164] <... mprotect resumed>) = 0 [pid 7163] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] fstat(3, [pid 7164] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7163] <... clone resumed>, parent_tid=[7165], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7165 [pid 5075] getdents64(3, [pid 7164] <... clone resumed>, parent_tid=[7166], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7166 [pid 7163] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7164] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] <... futex resumed>) = 0 [pid 5075] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7164] <... futex resumed>) = 0 [pid 7163] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7164] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./114/binderfs") = 0 [pid 5075] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7166 attached ./strace-static-x86_64: Process 7165 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7166] set_robust_list(0x7fee0b1f39e0, 24 [pid 7165] set_robust_list(0x7fee0b1f39e0, 24 [pid 5081] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./114/bus" [pid 7166] <... set_robust_list resumed>) = 0 [pid 7165] <... set_robust_list resumed>) = 0 [pid 7159] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 7166] memfd_create("syzkaller", 0 [pid 7165] memfd_create("syzkaller", 0 [pid 5081] fstat(4, [pid 5074] getdents64(3, [pid 7166] <... memfd_create resumed>) = 3 [pid 7165] <... memfd_create resumed>) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] getdents64(4, [pid 5074] close(3 [pid 7166] <... mmap resumed>) = 0x7fee02dd3000 [pid 7165] <... mmap resumed>) = 0x7fee02dd3000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 7166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7159] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5074] rmdir("./114" [pid 7166] <... write resumed>) = 524288 [pid 7159] <... futex resumed>) = 0 [pid 7158] exit_group(0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7166] munmap(0x7fee02dd3000, 524288 [pid 7162] <... futex resumed>) = ? [pid 7158] <... exit_group resumed>) = ? [pid 5081] close(4 [pid 5074] mkdir("./115", 0777 [pid 7166] <... munmap resumed>) = 0 [pid 7162] +++ exited with 0 +++ [pid 7159] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7166] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7165] <... write resumed>) = 524288 [pid 7158] +++ exited with 0 +++ [pid 5081] rmdir("./116/bus" [pid 5075] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7166] <... openat resumed>) = 4 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7158, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7166] ioctl(4, LOOP_SET_FD, 3 [pid 5081] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] lstat("./114/bus", [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5080] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] close(3 [pid 5081] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./116" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./117", 0777 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7167 [pid 7165] munmap(0x7fee02dd3000, 524288 [pid 5081] <... mkdir resumed>) = 0 [pid 7165] <... munmap resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7165] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7165] <... openat resumed>) = 4 [pid 5081] close(3 [pid 7165] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... close resumed>) = 0 [ 100.825850][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.837338][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.845581][ T7159] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.854499][ T52] hfsplus: b-tree write err: -5, ino 4 [ 100.871187][ T7166] loop3: detected capacity change from 0 to 1024 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7168 [pid 5080] fstat(3, [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7167 attached [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(4, [pid 7167] set_robust_list(0x555556b055e0, 24 [pid 5080] getdents64(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7167] <... set_robust_list resumed>) = 0 [pid 7167] chdir("./115" [pid 7166] <... ioctl resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(4, [pid 7167] <... chdir resumed>) = 0 [pid 7166] close(3 [pid 5080] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7167] <... prctl resumed>) = 0 [pid 7166] <... close resumed>) = 0 [pid 5080] lstat("./113/binderfs", [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7167] setpgid(0, 0 [pid 7166] mkdir("./bus", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] close(4 [pid 7167] <... setpgid resumed>) = 0 [pid 7166] <... mkdir resumed>) = 0 [pid 5080] unlink("./113/binderfs" [pid 5075] <... close resumed>) = 0 [pid 7167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7166] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7168 attached [pid 7167] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5075] rmdir("./114/bus" [pid 7168] set_robust_list(0x555556b055e0, 24 [pid 7167] write(3, "1000", 4) = 4 [pid 5080] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7167] close(3) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7167] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7167] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7167] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7169], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7169 [pid 7167] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7167] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7165] <... ioctl resumed>) = 0 [pid 7165] close(3) = 0 [pid 7165] mkdir("./bus", 0777) = 0 [pid 7165] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7169 attached [pid 7169] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7169] memfd_create("syzkaller", 0) = 3 [pid 7169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7168] <... set_robust_list resumed>) = 0 [pid 7166] <... mount resumed>) = 0 [pid 5075] getdents64(3, [pid 7166] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7166] chdir("./bus" [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7166] <... chdir resumed>) = 0 [pid 7166] ioctl(4, LOOP_CLR_FD) = 0 [pid 7166] close(4) = 0 [pid 7166] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7166] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7164] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7168] chdir("./117" [pid 7164] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 7168] <... chdir resumed>) = 0 [pid 7166] <... futex resumed>) = 0 [pid 7165] <... mount resumed>) = 0 [pid 7164] <... futex resumed>) = 1 [pid 5075] rmdir("./114" [pid 7168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7166] creat("./bus", 000 [pid 7165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7164] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 7169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7168] <... prctl resumed>) = 0 [pid 7166] <... creat resumed>) = 4 [pid 7165] <... openat resumed>) = 3 [pid 5080] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7166] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] chdir("./bus" [pid 7168] setpgid(0, 0 [pid 5075] mkdir("./115", 0777 [pid 7168] <... setpgid resumed>) = 0 [pid 7166] <... futex resumed>) = 1 [pid 7165] <... chdir resumed>) = 0 [pid 7164] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7166] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] ioctl(4, LOOP_CLR_FD) = 0 [pid 7164] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 7168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7166] <... futex resumed>) = 0 [pid 7165] close(4 [pid 7164] <... futex resumed>) = 1 [pid 5080] lstat("./113/bus", [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7169] <... write resumed>) = 524288 [pid 7168] <... openat resumed>) = 3 [pid 7166] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7165] <... close resumed>) = 0 [ 100.883069][ T7165] loop2: detected capacity change from 0 to 1024 [ 100.902671][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7164] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] write(3, "1000", 4 [pid 7165] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7165] <... futex resumed>) = 1 [pid 7165] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] <... write resumed>) = 4 [pid 7163] <... futex resumed>) = 0 [pid 5080] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7169] munmap(0x7fee02dd3000, 524288 [pid 7168] close(3 [pid 7163] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7168] <... close resumed>) = 0 [pid 7165] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = 1 [pid 5080] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 7168] symlink("/dev/binderfs", "./binderfs" [pid 7165] creat("./bus", 000 [pid 7163] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 7169] <... munmap resumed>) = 0 [pid 7168] <... symlink resumed>) = 0 [pid 7165] <... creat resumed>) = 4 [pid 5080] fstat(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7169] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7168] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7169] <... openat resumed>) = 4 [pid 7165] <... futex resumed>) = 1 [pid 7169] ioctl(4, LOOP_SET_FD, 3 [pid 7165] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 7168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7163] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7165] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = 1 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7170 [pid 7168] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7165] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7170 attached [pid 7168] <... mprotect resumed>) = 0 [pid 7163] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 7169] <... ioctl resumed>) = 0 [pid 7169] close(3) = 0 [pid 7169] mkdir("./bus", 0777 [pid 7170] set_robust_list(0x555556b055e0, 24 [pid 7168] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7170] <... set_robust_list resumed>) = 0 [pid 5080] close(4 [pid 7168] <... clone resumed>, parent_tid=[7171], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7171 [pid 5080] <... close resumed>) = 0 [pid 7170] chdir("./115"./strace-static-x86_64: Process 7171 attached [pid 7168] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./113/bus" [pid 7170] <... chdir resumed>) = 0 [pid 7168] <... futex resumed>) = 0 [pid 7170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7168] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 7169] <... mkdir resumed>) = 0 [pid 7169] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7170] <... prctl resumed>) = 0 [pid 5080] getdents64(3, [ 100.925543][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.932852][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.946132][ T7169] loop0: detected capacity change from 0 to 1024 [ 100.955755][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.963049][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7171] set_robust_list(0x7fee0b1f39e0, 24 [pid 7170] setpgid(0, 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7171] <... set_robust_list resumed>) = 0 [pid 7171] memfd_create("syzkaller", 0 [pid 7170] <... setpgid resumed>) = 0 [pid 5080] close(3 [pid 7171] <... memfd_create resumed>) = 3 [pid 7170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 7169] <... mount resumed>) = 0 [pid 7169] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7169] chdir("./bus") = 0 [pid 7169] ioctl(4, LOOP_CLR_FD) = 0 [pid 7169] close(4) = 0 [pid 7169] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7167] <... futex resumed>) = 0 [pid 7169] creat("./bus", 000 [pid 7167] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7169] <... creat resumed>) = 4 [pid 7167] <... futex resumed>) = 0 [pid 7169] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7167] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7169] <... futex resumed>) = 0 [pid 7167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7169] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 100.975458][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.976067][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.983290][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 100.991531][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.000050][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.012867][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7167] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7170] <... openat resumed>) = 3 [pid 7167] <... futex resumed>) = 0 [pid 7164] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./113" [pid 7171] <... mmap resumed>) = 0x7fee02dd3000 [pid 7167] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7170] write(3, "1000", 4 [pid 7164] <... futex resumed>) = 0 [pid 7163] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... rmdir resumed>) = 0 [pid 7170] <... write resumed>) = 4 [pid 7164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7163] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./114", 0777 [pid 7170] close(3 [pid 7164] <... mmap resumed>) = 0x7fee02e32000 [pid 7163] <... futex resumed>) = 0 [pid 7170] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 7164] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7170] symlink("/dev/binderfs", "./binderfs" [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7164] <... mprotect resumed>) = 0 [pid 7163] <... mmap resumed>) = 0x7fee02e32000 [pid 7170] <... symlink resumed>) = 0 [pid 7164] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7163] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... openat resumed>) = 3 [pid 7163] <... mprotect resumed>) = 0 [pid 7163] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7170] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... clone resumed>, parent_tid=[7172], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7172 [pid 7170] <... futex resumed>) = 0 [pid 7164] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] <... clone resumed>, parent_tid=[7173], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7173 [pid 7170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7170] <... mmap resumed>) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7173 attached [pid 7173] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7173] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7172 attached [pid 7171] <... write resumed>) = 524288 [pid 7170] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7166] <... write resumed>) = 57344 [pid 7164] <... futex resumed>) = 0 [pid 7163] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7172] set_robust_list(0x7fee02e529e0, 24 [pid 7171] munmap(0x7fee02dd3000, 524288 [pid 7170] <... mprotect resumed>) = 0 [pid 7166] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7163] <... futex resumed>) = 1 [pid 5080] close(3 [pid 7173] <... futex resumed>) = 0 [pid 7173] creat("./file1", 000 [pid 7167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7167] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7167] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7167] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7174], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7174 [pid 7167] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7167] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] <... creat resumed>) = 5 [pid 7173] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7173] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] <... set_robust_list resumed>) = 0 [pid 7172] creat("./file1", 000) = 5 [pid 7172] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.021303][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.033349][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.037662][ T7166] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.040753][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.048254][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.056883][ T7165] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7172] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7171] <... munmap resumed>) = 0 [pid 7170] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7166] <... futex resumed>) = 0 [pid 7164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7163] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 7171] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7171] ioctl(4, LOOP_SET_FD, 3 [pid 7166] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7164] exit_group(0 [pid 7163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7166] <... futex resumed>) = ? [pid 7164] <... exit_group resumed>) = ? [pid 7172] <... futex resumed>) = ? [pid 7172] +++ exited with 0 +++ [pid 7166] +++ exited with 0 +++ [pid 7164] +++ exited with 0 +++ [pid 7170] <... clone resumed>, parent_tid=[7175], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7175 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7176 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7164, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 7176 attached ./strace-static-x86_64: Process 7175 attached ./strace-static-x86_64: Process 7174 attached [pid 7170] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./115/binderfs") = 0 [pid 5077] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7170] <... futex resumed>) = 0 [pid 7165] <... write resumed>) = 57344 [pid 7165] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7165] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7171] <... ioctl resumed>) = 0 [pid 7171] close(3) = 0 [pid 7171] mkdir("./bus", 0777) = 0 [pid 7171] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7170] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7176] set_robust_list(0x555556b055e0, 24 [pid 7175] set_robust_list(0x7fee0b1f39e0, 24 [pid 7174] set_robust_list(0x7fee02e529e0, 24 [pid 7169] <... write resumed>) = 57344 [pid 7163] exit_group(0 [pid 7176] <... set_robust_list resumed>) = 0 [pid 7175] <... set_robust_list resumed>) = 0 [pid 7174] <... set_robust_list resumed>) = 0 [pid 7173] <... futex resumed>) = ? [pid 7163] <... exit_group resumed>) = ? [pid 7176] chdir("./114" [pid 7175] memfd_create("syzkaller", 0 [pid 7174] creat("./file1", 000 [pid 7169] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... chdir resumed>) = 0 [pid 7173] +++ exited with 0 +++ [pid 7169] <... futex resumed>) = 0 [pid 7165] <... futex resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 7176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7175] <... memfd_create resumed>) = 3 [pid 7174] <... creat resumed>) = 5 [pid 7169] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7165] +++ exited with 0 +++ [pid 7163] +++ exited with 0 +++ [pid 5077] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7176] <... prctl resumed>) = 0 [pid 7175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7174] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] setpgid(0, 0 [pid 7175] <... mmap resumed>) = 0x7fee02dd3000 [pid 7174] <... futex resumed>) = 1 [pid 7167] <... futex resumed>) = 0 [pid 5077] lstat("./115/bus", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7163, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7176] <... setpgid resumed>) = 0 [pid 7175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7174] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7167] exit_group(0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7174] <... futex resumed>) = ? [pid 7169] <... futex resumed>) = ? [pid 7167] <... exit_group resumed>) = ? [pid 5077] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] <... openat resumed>) = 3 [pid 7175] <... write resumed>) = 524288 [pid 7174] +++ exited with 0 +++ [pid 7171] <... mount resumed>) = 0 [pid 7169] +++ exited with 0 +++ [pid 7167] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7176] write(3, "1000", 4 [pid 7175] munmap(0x7fee02dd3000, 524288 [pid 7171] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7176] <... write resumed>) = 4 [pid 7175] <... munmap resumed>) = 0 [pid 7171] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7167, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7176] close(3 [pid 7175] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7171] chdir("./bus" [pid 5077] <... openat resumed>) = 4 [pid 5076] fstat(3, [pid 7176] <... close resumed>) = 0 [pid 7175] <... openat resumed>) = 4 [pid 7171] <... chdir resumed>) = 0 [pid 5077] fstat(4, [pid 7176] symlink("/dev/binderfs", "./binderfs" [pid 7175] ioctl(4, LOOP_SET_FD, 3 [pid 7171] ioctl(4, LOOP_CLR_FD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7176] <... symlink resumed>) = 0 [ 101.064969][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.079456][ T7171] loop5: detected capacity change from 0 to 1024 [ 101.089078][ T7169] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.096958][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5077] getdents64(4, [pid 5076] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 5076] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(4 [pid 5076] lstat("./116/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 7176] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... ioctl resumed>) = 0 [pid 7171] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] fstat(3, [pid 7176] <... futex resumed>) = 0 [pid 5077] rmdir("./115/bus" [pid 5076] unlink("./116/binderfs" [pid 7176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7175] close(3 [pid 7171] close(4 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7176] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7175] <... close resumed>) = 0 [pid 7171] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7176] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7175] mkdir("./bus", 0777 [pid 7171] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... mprotect resumed>) = 0 [pid 7175] <... mkdir resumed>) = 0 [pid 7171] <... futex resumed>) = 1 [pid 7168] <... futex resumed>) = 0 [pid 7176] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7175] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7171] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... mount resumed>) = 0 [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7168] <... futex resumed>) = 0 [pid 7176] <... clone resumed>, parent_tid=[7177], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7177 [pid 7175] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7171] creat("./bus", 000 [pid 7168] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7176] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... openat resumed>) = 3 [pid 7171] <... creat resumed>) = 4 [pid 7176] <... futex resumed>) = 0 [pid 7175] chdir("./bus" [pid 7171] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7175] <... chdir resumed>) = 0 [pid 7171] <... futex resumed>) = 1 [pid 7168] <... futex resumed>) = 0 [pid 7175] ioctl(4, LOOP_CLR_FD [pid 7171] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7168] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7175] <... ioctl resumed>) = 0 [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7168] <... futex resumed>) = 0 [pid 7175] close(4 [ 101.124512][ T7175] loop1: detected capacity change from 0 to 1024 [pid 7171] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7168] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7177 attached [pid 7175] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7177] set_robust_list(0x7fee0b1f39e0, 24 [pid 7175] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7177] <... set_robust_list resumed>) = 0 [pid 7175] <... futex resumed>) = 1 [pid 5077] close(3 [pid 5074] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7177] memfd_create("syzkaller", 0 [pid 7175] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7177] <... memfd_create resumed>) = 3 [pid 7170] <... futex resumed>) = 0 [pid 5077] rmdir("./115" [pid 5074] lstat("./115/binderfs", [pid 7177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7177] <... mmap resumed>) = 0x7fee02dd3000 [pid 5077] mkdir("./116", 0777 [pid 5074] unlink("./115/binderfs" [pid 7177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7170] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7177] <... write resumed>) = 524288 [pid 7175] <... futex resumed>) = 0 [pid 7170] <... futex resumed>) = 1 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] lstat("./116/bus", [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(3 [pid 5076] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7175] creat("./bus", 000 [pid 7170] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7178 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 7177] munmap(0x7fee02dd3000, 524288 [pid 7175] <... creat resumed>) = 4 [ 101.148529][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.156239][ T11] hfsplus: b-tree write err: -5, ino 4 [ 101.158452][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.180303][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.190779][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7177] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 7177] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7177] <... openat resumed>) = 4 [pid 5076] close(4 [pid 7177] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7178 attached [pid 7175] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] rmdir("./116/bus" [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] lstat("./115/bus", [pid 5076] close(3 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./116" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] mkdir("./117", 0777 [pid 5074] <... openat resumed>) = 4 [pid 7175] <... futex resumed>) = 1 [pid 7168] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] fstat(4, [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] getdents64(4, [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./115/bus" [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7179 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7175] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7170] <... futex resumed>) = 0 [pid 7168] <... futex resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./115") = 0 [pid 5074] mkdir("./116", 0777) = 0 ./strace-static-x86_64: Process 7179 attached [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7179] set_robust_list(0x555556b055e0, 24 [pid 5074] <... openat resumed>) = 3 [pid 7179] <... set_robust_list resumed>) = 0 [pid 7178] set_robust_list(0x555556b055e0, 24 [pid 7175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7170] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7179] chdir("./117" [pid 7178] <... set_robust_list resumed>) = 0 [pid 7175] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7170] <... futex resumed>) = 0 [pid 7168] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7179] <... chdir resumed>) = 0 [pid 7178] chdir("./116" [pid 7170] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] close(3 [pid 7179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7178] <... chdir resumed>) = 0 [pid 7168] <... mprotect resumed>) = 0 [ 101.202566][ T9] hfsplus: b-tree write err: -5, ino 4 [ 101.206050][ T7177] loop4: detected capacity change from 0 to 1024 [ 101.217013][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] <... close resumed>) = 0 [pid 7179] <... prctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7179] setpgid(0, 0) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7180 [pid 7179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7177] <... ioctl resumed>) = 0 [pid 7179] write(3, "1000", 4 [pid 7177] close(3 [pid 7179] <... write resumed>) = 4 [pid 7177] <... close resumed>) = 0 [pid 7179] close(3 [pid 7177] mkdir("./bus", 0777 [pid 7179] <... close resumed>) = 0 [pid 7177] <... mkdir resumed>) = 0 [pid 7179] symlink("/dev/binderfs", "./binderfs" [pid 7177] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7180 attached [pid 7179] <... symlink resumed>) = 0 [pid 7180] set_robust_list(0x555556b055e0, 24 [pid 7179] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... set_robust_list resumed>) = 0 [pid 7179] <... futex resumed>) = 0 [pid 7180] chdir("./116" [pid 7179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7180] <... chdir resumed>) = 0 [pid 7179] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7179] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7180] <... prctl resumed>) = 0 [pid 7179] <... mprotect resumed>) = 0 [pid 7180] setpgid(0, 0 [pid 7179] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7180] <... setpgid resumed>) = 0 [pid 7180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7179] <... clone resumed>, parent_tid=[7181], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7181 [pid 7180] <... openat resumed>) = 3 [pid 7179] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7168] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7180] write(3, "1000", 4 [pid 7179] <... futex resumed>) = 0 [pid 7178] <... prctl resumed>) = 0 [pid 7177] <... mount resumed>) = 0 [pid 7180] <... write resumed>) = 4 [pid 7179] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7178] setpgid(0, 0 [pid 7177] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7168] <... clone resumed>, parent_tid=[7182], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7182 [pid 7180] close(3 [pid 7178] <... setpgid resumed>) = 0 [pid 7177] <... openat resumed>) = 3 [pid 7168] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... close resumed>) = 0 [pid 7178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7177] chdir("./bus" [pid 7168] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7182 attached ./strace-static-x86_64: Process 7181 attached [pid 7180] symlink("/dev/binderfs", "./binderfs" [pid 7178] <... openat resumed>) = 3 [pid 7177] <... chdir resumed>) = 0 [pid 7168] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7181] set_robust_list(0x7fee0b1f39e0, 24 [pid 7180] <... symlink resumed>) = 0 [pid 7178] write(3, "1000", 4 [pid 7177] ioctl(4, LOOP_CLR_FD [pid 7182] set_robust_list(0x7fee02e529e0, 24 [pid 7181] <... set_robust_list resumed>) = 0 [pid 7180] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] <... write resumed>) = 4 [pid 7177] <... ioctl resumed>) = 0 [pid 7182] <... set_robust_list resumed>) = 0 [pid 7181] memfd_create("syzkaller", 0 [pid 7180] <... futex resumed>) = 0 [pid 7178] close(3 [pid 7177] close(4 [pid 7181] <... memfd_create resumed>) = 3 [pid 7180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7177] <... close resumed>) = 0 [pid 7181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7180] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7177] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7181] <... mmap resumed>) = 0x7fee02dd3000 [pid 7180] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7177] <... futex resumed>) = 1 [pid 7181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7180] <... mprotect resumed>) = 0 [pid 7177] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7182] creat("./file1", 000 [pid 7180] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7178] <... close resumed>) = 0 [pid 7176] <... futex resumed>) = 0 [pid 7178] symlink("/dev/binderfs", "./binderfs" [pid 7176] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... clone resumed>, parent_tid=[7183], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7183 [pid 7178] <... symlink resumed>) = 0 [pid 7177] <... futex resumed>) = 0 [pid 7176] <... futex resumed>) = 1 [pid 7180] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7177] creat("./bus", 000 [pid 7176] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7181] <... write resumed>) = 524288 [pid 7180] <... futex resumed>) = 0 [pid 7178] <... futex resumed>) = 0 [pid 7177] <... creat resumed>) = 4 [pid 7180] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7177] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7177] <... futex resumed>) = 1 [pid 7176] <... futex resumed>) = 0 [pid 7181] munmap(0x7fee02dd3000, 524288 [pid 7178] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7177] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7176] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7183 attached [pid 7181] <... munmap resumed>) = 0 [pid 7178] <... mprotect resumed>) = 0 [pid 7177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7176] <... futex resumed>) = 0 [ 101.245658][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.252986][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.272293][ T7171] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7183] set_robust_list(0x7fee0b1f39e0, 24 [pid 7181] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7178] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7177] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7176] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7184 attached [pid 7183] <... set_robust_list resumed>) = 0 [pid 7182] <... creat resumed>) = 5 [pid 7181] <... openat resumed>) = 4 [pid 7171] <... write resumed>) = 57344 [pid 7170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7183] memfd_create("syzkaller", 0 [pid 7181] ioctl(4, LOOP_SET_FD, 3 [pid 7184] set_robust_list(0x7fee0b1f39e0, 24 [pid 7183] <... memfd_create resumed>) = 3 [pid 7182] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] <... clone resumed>, parent_tid=[7184], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7184 [pid 7171] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7184] <... set_robust_list resumed>) = 0 [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7182] <... futex resumed>) = 0 [pid 7178] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... futex resumed>) = 0 [pid 7170] <... futex resumed>) = 0 [pid 7168] exit_group(0 [pid 7184] memfd_create("syzkaller", 0 [pid 7183] <... mmap resumed>) = 0x7fee02dd3000 [pid 7178] <... futex resumed>) = 0 [pid 7170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7168] <... exit_group resumed>) = ? [pid 7183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7184] <... memfd_create resumed>) = 3 [pid 7182] +++ exited with 0 +++ [pid 7178] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7171] +++ exited with 0 +++ [pid 7170] <... mmap resumed>) = 0x7fee02e32000 [pid 7184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7168] +++ exited with 0 +++ [pid 7183] <... write resumed>) = 524288 [pid 7183] munmap(0x7fee02dd3000, 524288 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7168, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7183] <... munmap resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7183] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... openat resumed>) = 3 [pid 7183] <... openat resumed>) = 4 [ 101.294110][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.298978][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.301403][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.309294][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.318626][ T7181] loop2: detected capacity change from 0 to 1024 [ 101.332582][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] fstat(3, [pid 7183] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7184] <... mmap resumed>) = 0x7fee02dd3000 [pid 7175] <... write resumed>) = 57344 [pid 7170] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./117/binderfs") = 0 [pid 5081] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7181] <... ioctl resumed>) = 0 [pid 7181] close(3) = 0 [pid 7181] mkdir("./bus", 0777) = 0 [pid 7181] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7183] <... ioctl resumed>) = 0 [pid 7183] close(3) = 0 [pid 7183] mkdir("./bus", 0777) = 0 [pid 7183] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7175] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... mprotect resumed>) = 0 [pid 7176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7176] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7176] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7176] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7185], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7185 [pid 7176] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7176] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7175] <... futex resumed>) = 0 [pid 7175] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7170] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7186], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7186 [pid 7170] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7170] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7184] <... write resumed>) = 524288 [pid 7181] <... mount resumed>) = 0 [pid 7181] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7181] chdir("./bus") = 0 [pid 7181] ioctl(4, LOOP_CLR_FD) = 0 [pid 7181] close(4./strace-static-x86_64: Process 7186 attached ./strace-static-x86_64: Process 7185 attached [pid 7184] munmap(0x7fee02dd3000, 524288 [pid 7181] <... close resumed>) = 0 [pid 7186] set_robust_list(0x7fee02e529e0, 24 [pid 7184] <... munmap resumed>) = 0 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7184] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 101.341430][ T7175] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.347571][ T7183] loop0: detected capacity change from 0 to 1024 [ 101.349837][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.365391][ T52] hfsplus: b-tree write err: -5, ino 4 [ 101.375179][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.385790][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7186] creat("./file1", 000) = 5 [pid 7185] set_robust_list(0x7fee02e529e0, 24 [pid 7184] <... openat resumed>) = 4 [pid 7181] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 7186] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7185] <... set_robust_list resumed>) = 0 [pid 7184] ioctl(4, LOOP_SET_FD, 3 [pid 7181] <... futex resumed>) = 1 [pid 7179] <... futex resumed>) = 0 [pid 5081] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7183] <... mount resumed>) = 0 [pid 7177] <... write resumed>) = 57344 [pid 7186] <... futex resumed>) = 1 [pid 7185] creat("./file1", 000 [pid 7183] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7179] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... futex resumed>) = 0 [pid 7183] <... openat resumed>) = 3 [pid 7179] <... futex resumed>) = 0 [pid 7183] chdir("./bus" [pid 7179] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7183] <... chdir resumed>) = 0 [pid 7183] ioctl(4, LOOP_CLR_FD) = 0 [pid 7183] close(4 [pid 7186] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7185] <... creat resumed>) = 5 [pid 7184] <... ioctl resumed>) = 0 [pid 7183] <... close resumed>) = 0 [pid 7181] creat("./bus", 000 [pid 7177] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7170] exit_group(0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7186] <... futex resumed>) = ? [pid 7185] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7184] close(3 [pid 7183] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7181] <... creat resumed>) = 4 [pid 7177] <... futex resumed>) = 0 [pid 7176] exit_group(0 [pid 7175] <... futex resumed>) = ? [pid 7170] <... exit_group resumed>) = ? [pid 5081] lstat("./117/bus", [pid 7186] +++ exited with 0 +++ [pid 7185] <... futex resumed>) = ? [pid 7184] <... close resumed>) = 0 [pid 7183] <... futex resumed>) = 1 [pid 7181] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... futex resumed>) = 0 [pid 7176] <... exit_group resumed>) = ? [pid 7175] +++ exited with 0 +++ [pid 7185] +++ exited with 0 +++ [pid 7184] mkdir("./bus", 0777 [pid 7183] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] <... futex resumed>) = 1 [pid 7180] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = 0 [pid 7177] +++ exited with 0 +++ [pid 7176] +++ exited with 0 +++ [pid 7170] +++ exited with 0 +++ [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7184] <... mkdir resumed>) = 0 [pid 7183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7181] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7180] <... futex resumed>) = 0 [pid 7179] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7176, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7184] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7183] creat("./bus", 000 [pid 7181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7180] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7184] <... mount resumed>) = 0 [pid 7183] <... creat resumed>) = 4 [pid 7181] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7179] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7170, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7184] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7183] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 5080] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7183] <... futex resumed>) = 1 [pid 7180] <... futex resumed>) = 0 [pid 5081] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] getdents64(4, [pid 5080] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] fstat(3, [pid 5075] fstat(3, [pid 5081] getdents64(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5075] getdents64(3, [pid 5081] close(4 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./117/bus" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5080] lstat("./114/binderfs", [pid 5075] lstat("./115/binderfs", [pid 5081] getdents64(3, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] unlink("./114/binderfs" [pid 5075] unlink("./115/binderfs" [pid 5081] close(3 [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./117") = 0 [pid 5081] mkdir("./118", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 101.404960][ T7177] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.414566][ T7184] loop3: detected capacity change from 0 to 1024 [ 101.435590][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] close(3 [pid 7184] <... openat resumed>) = 3 [pid 7183] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7180] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 7184] chdir("./bus" [pid 7180] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7184] <... chdir resumed>) = 0 [pid 7180] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7187 ./strace-static-x86_64: Process 7187 attached [pid 7187] set_robust_list(0x555556b055e0, 24) = 0 [pid 7187] chdir("./118") = 0 [pid 7187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7187] setpgid(0, 0) = 0 [pid 7187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7187] write(3, "1000", 4) = 4 [pid 7187] close(3) = 0 [pid 7187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7187] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7187] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7187] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7188], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7188 [pid 7187] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7184] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 7188 attached [pid 7188] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7188] memfd_create("syzkaller", 0) = 3 [pid 7188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7184] <... ioctl resumed>) = 0 [pid 7184] close(4) = 0 [pid 7188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7184] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7184] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7178] <... futex resumed>) = 0 [pid 7178] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7184] <... futex resumed>) = 0 [pid 7178] <... futex resumed>) = 1 [pid 7178] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7188] <... write resumed>) = 524288 [pid 7188] munmap(0x7fee02dd3000, 524288) = 0 [pid 7188] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7188] ioctl(4, LOOP_SET_FD, 3 [pid 7184] creat("./bus", 000 [pid 7179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7184] <... creat resumed>) = 4 [pid 7179] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7184] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = 0 [pid 7184] <... futex resumed>) = 1 [pid 7179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7184] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7179] <... mmap resumed>) = 0x7fee02e32000 [pid 7178] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 7179] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7178] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... mprotect resumed>) = 0 [pid 7184] <... futex resumed>) = 0 [pid 7179] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7178] <... futex resumed>) = 1 [pid 7184] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7178] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... clone resumed>, parent_tid=[7189], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7189 [pid 7179] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7179] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./114/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./114") = 0 [ 101.453297][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.460892][ T52] hfsplus: b-tree write err: -5, ino 4 [ 101.469788][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.478581][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 101.483708][ T7188] loop5: detected capacity change from 0 to 1024 [ 101.497974][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] mkdir("./115", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7190 [pid 7180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7189 attached [pid 7189] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7189] creat("./file1", 000./strace-static-x86_64: Process 7190 attached [pid 7180] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7190] set_robust_list(0x555556b055e0, 24 [pid 7180] <... futex resumed>) = 0 [pid 5075] lstat("./115/bus", [pid 7190] <... set_robust_list resumed>) = 0 [pid 7180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7190] chdir("./115" [pid 7180] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7190] <... chdir resumed>) = 0 [pid 7178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7178] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 7190] <... prctl resumed>) = 0 [pid 7178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7190] setpgid(0, 0 [pid 7178] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7190] <... setpgid resumed>) = 0 [pid 7178] <... futex resumed>) = 0 [pid 7190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7190] <... openat resumed>) = 3 [pid 7178] <... mmap resumed>) = 0x7fee02e32000 [pid 7190] write(3, "1000", 4 [pid 7178] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7190] <... write resumed>) = 4 [pid 7178] <... mprotect resumed>) = 0 [pid 7190] close(3 [pid 7180] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7178] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7190] <... close resumed>) = 0 [pid 7190] symlink("/dev/binderfs", "./binderfs" [pid 7178] <... clone resumed>, parent_tid=[7191], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7191 [pid 7190] <... symlink resumed>) = 0 [pid 7180] <... mprotect resumed>) = 0 [pid 7178] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7190] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7178] <... futex resumed>) = 0 [pid 7190] <... futex resumed>) = 0 [pid 7178] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 7190] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7188] <... ioctl resumed>) = 0 [pid 7180] <... clone resumed>, parent_tid=[7192], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7192 [pid 7190] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7188] close(3 [pid 5075] fstat(4, ./strace-static-x86_64: Process 7191 attached [pid 7190] <... mprotect resumed>) = 0 [ 101.510315][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.523439][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.533925][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.542179][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7188] <... close resumed>) = 0 [pid 7180] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7191] set_robust_list(0x7fee02e529e0, 24 [pid 7190] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7188] mkdir("./bus", 0777 [pid 7180] <... futex resumed>) = 0 [pid 7179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7191] <... set_robust_list resumed>) = 0 [pid 7188] <... mkdir resumed>) = 0 [pid 7191] creat("./file1", 000 [pid 7190] <... clone resumed>, parent_tid=[7193], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7193 [pid 7188] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7190] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7190] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7193 attached [pid 7193] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7193] memfd_create("syzkaller", 0) = 3 [pid 7193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5075] getdents64(4, [pid 7180] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./115/bus") = 0 [pid 7193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(3, [pid 7193] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7193] munmap(0x7fee02dd3000, 524288 [pid 5075] close(3 [pid 7188] <... mount resumed>) = 0 [pid 7188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7188] chdir("./bus" [pid 7193] <... munmap resumed>) = 0 [pid 7188] <... chdir resumed>) = 0 [pid 7188] ioctl(4, LOOP_CLR_FD) = 0 [pid 7188] close(4./strace-static-x86_64: Process 7192 attached ) = 0 [pid 5075] <... close resumed>) = 0 [pid 7193] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7192] set_robust_list(0x7fee02e529e0, 24 [pid 7188] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./115" [pid 7193] <... openat resumed>) = 4 [pid 7192] <... set_robust_list resumed>) = 0 [pid 7188] <... futex resumed>) = 1 [pid 7187] <... futex resumed>) = 0 [pid 7193] ioctl(4, LOOP_SET_FD, 3 [pid 7188] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7187] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... rmdir resumed>) = 0 [pid 7192] creat("./file1", 000 [pid 7188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7187] <... futex resumed>) = 0 [pid 7188] creat("./bus", 000 [pid 7187] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7188] <... creat resumed>) = 4 [pid 7188] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7187] <... futex resumed>) = 0 [pid 7188] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7187] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7187] <... futex resumed>) = 0 [pid 7188] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7187] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] mkdir("./116", 0777 [pid 7189] <... creat resumed>) = 5 [pid 7189] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.555957][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.566835][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.587622][ T7193] loop4: detected capacity change from 0 to 1024 [ 101.591243][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.598356][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7189] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7193] <... ioctl resumed>) = 0 [pid 7193] close(3) = 0 [pid 7193] mkdir("./bus", 0777 [pid 7180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... openat resumed>) = 3 [pid 7192] <... creat resumed>) = 5 [pid 7191] <... creat resumed>) = 5 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7191] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] <... mkdir resumed>) = 0 [pid 7191] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7193] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7193] chdir("./bus") = 0 [pid 7193] ioctl(4, LOOP_CLR_FD) = 0 [pid 7193] close(4) = 0 [pid 7193] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7190] <... futex resumed>) = 0 [pid 7193] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7190] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7190] <... futex resumed>) = 0 [pid 7193] creat("./bus", 000 [pid 7190] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7193] <... creat resumed>) = 4 [pid 7193] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7190] <... futex resumed>) = 0 [pid 7193] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7190] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7190] <... futex resumed>) = 0 [pid 7193] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7190] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7192] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 101.610885][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.619051][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.620546][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.634344][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.643354][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.653622][ T7181] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7192] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7192] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... close resumed>) = 0 [pid 7187] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7187] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7187] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7187] <... clone resumed>, parent_tid=[7194], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7194 [pid 7187] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7195 attached ./strace-static-x86_64: Process 7194 attached [pid 7195] set_robust_list(0x555556b055e0, 24 [pid 7194] set_robust_list(0x7fee02e529e0, 24 [pid 7190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7184] <... write resumed>) = 57344 [pid 7183] <... write resumed>) = 57344 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7195 [pid 7190] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7190] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7190] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7196], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7196 [pid 7190] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7195] <... set_robust_list resumed>) = 0 [pid 7194] <... set_robust_list resumed>) = 0 [pid 7190] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7184] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7183] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7196 attached [pid 7195] chdir("./116" [pid 7194] creat("./file1", 000 [pid 7184] <... futex resumed>) = 0 [pid 7183] <... futex resumed>) = 0 [pid 7181] <... write resumed>) = 57344 [ 101.662497][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.669310][ T7184] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.677342][ T7183] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.686009][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.692458][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.694318][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7196] set_robust_list(0x7fee02e529e0, 24 [pid 7195] <... chdir resumed>) = 0 [pid 7194] <... creat resumed>) = 5 [pid 7184] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7183] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7178] exit_group(0 [pid 7191] <... futex resumed>) = ? [pid 7181] <... futex resumed>) = 0 [pid 7178] <... exit_group resumed>) = ? [pid 7191] +++ exited with 0 +++ [pid 7181] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7180] exit_group(0) = ? [pid 7179] exit_group(0 [pid 7189] <... futex resumed>) = ? [pid 7181] <... futex resumed>) = ? [pid 7179] <... exit_group resumed>) = ? [pid 7189] +++ exited with 0 +++ [pid 7181] +++ exited with 0 +++ [pid 7179] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7179, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7196] <... set_robust_list resumed>) = 0 [pid 7195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7194] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7192] <... futex resumed>) = ? [pid 7184] <... futex resumed>) = ? [pid 7183] <... futex resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 7187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./117/binderfs") = 0 [pid 5076] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7196] creat("./file1", 000 [pid 7195] <... prctl resumed>) = 0 [pid 7194] <... futex resumed>) = 0 [pid 7192] +++ exited with 0 +++ [pid 7188] <... write resumed>) = 57344 [pid 7184] +++ exited with 0 +++ [pid 7183] +++ exited with 0 +++ [pid 7180] +++ exited with 0 +++ [pid 7178] +++ exited with 0 +++ [pid 7195] setpgid(0, 0 [pid 7194] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7178, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7180, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7195] <... setpgid resumed>) = 0 [pid 7195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7195] write(3, "1000", 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7195] <... write resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7195] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7195] <... close resumed>) = 0 [pid 5077] fstat(3, [pid 5074] fstat(3, [pid 7195] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7195] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] getdents64(3, [pid 7195] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7195] <... futex resumed>) = 0 [pid 5077] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7195] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] lstat("./116/binderfs", [pid 5074] lstat("./116/binderfs", [pid 7195] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7195] <... mprotect resumed>) = 0 [pid 7188] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] unlink("./116/binderfs" [pid 5074] unlink("./116/binderfs" [pid 7195] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7188] <... futex resumed>) = 0 [pid 7187] exit_group(0 [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7194] <... futex resumed>) = ? [pid 7187] <... exit_group resumed>) = ? [ 101.711806][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.712303][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.726944][ T7188] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.733304][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.742531][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5077] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7195] <... clone resumed>, parent_tid=[7197], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7197 [pid 7194] +++ exited with 0 +++ [pid 7188] +++ exited with 0 +++ [pid 7187] +++ exited with 0 +++ [pid 7195] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7187, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7195] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./118/binderfs") = 0 [pid 5081] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7196] <... creat resumed>) = 5 [pid 7196] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7196] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7190] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7197 attached [pid 7197] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7197] memfd_create("syzkaller", 0) = 3 [pid 7197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5076] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] lstat("./118/bus", [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5081] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7197] <... write resumed>) = 524288 [pid 7197] munmap(0x7fee02dd3000, 524288) = 0 [pid 7197] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7197] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... umount2 resumed>) = 0 [pid 7197] <... ioctl resumed>) = 0 [pid 7197] close(3) = 0 [pid 7197] mkdir("./bus", 0777) = 0 [pid 7197] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 4 [pid 5077] fstat(4, [pid 5076] close(4 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 5081] fstat(4, [pid 5077] getdents64(4, [pid 5076] rmdir("./117/bus" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5077] rmdir("./116/bus" [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5076] close(3 [pid 5077] rmdir("./116" [pid 5076] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] rmdir("./117" [pid 5081] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5077] mkdir("./117", 0777 [pid 5081] <... close resumed>) = 0 [pid 5076] mkdir("./118", 0777 [pid 5077] <... mkdir resumed>) = 0 [pid 5081] rmdir("./118/bus" [pid 5076] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] getdents64(3, [pid 5077] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 7193] <... write resumed>) = 57344 [pid 5077] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7193] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7193] <... futex resumed>) = 0 [pid 7190] exit_group(0 [pid 5081] rmdir("./118" [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7196] <... futex resumed>) = ? [pid 7190] <... exit_group resumed>) = ? [pid 7196] +++ exited with 0 +++ [pid 7193] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 7190] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7190, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] mkdir("./119", 0777 [pid 5080] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7198 [pid 5076] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 7197] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7197] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] fstat(3, [pid 7197] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7197] chdir("./bus" [pid 5080] getdents64(3, [pid 7197] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7199 [pid 7197] ioctl(4, LOOP_CLR_FD [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7197] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7197] close(4 [pid 5081] close(3 [pid 5080] lstat("./115/binderfs", [pid 5074] <... umount2 resumed>) = 0 [pid 7197] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7199 attached ./strace-static-x86_64: Process 7198 attached [pid 7197] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] unlink("./115/binderfs" [pid 5074] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7197] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 7199] set_robust_list(0x555556b055e0, 24 [pid 7197] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 101.758875][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 101.763621][ T52] hfsplus: b-tree write err: -5, ino 4 [ 101.770169][ T11] hfsplus: b-tree write err: -5, ino 4 [ 101.770770][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.784884][ T7193] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.801298][ T7197] loop1: detected capacity change from 0 to 1024 [pid 7195] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7200 [pid 5080] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7199] <... set_robust_list resumed>) = 0 [pid 7198] set_robust_list(0x555556b055e0, 24 [pid 7197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7195] <... futex resumed>) = 0 [pid 7197] creat("./bus", 000 [pid 7195] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7199] chdir("./118" [pid 7198] <... set_robust_list resumed>) = 0 [pid 7197] <... creat resumed>) = 4 [pid 5074] lstat("./116/bus", [pid 7199] <... chdir resumed>) = 0 [pid 7197] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7198] chdir("./117" [pid 7197] <... futex resumed>) = 1 [pid 7195] <... futex resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7199] <... prctl resumed>) = 0 [pid 7197] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7195] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] <... chdir resumed>) = 0 [pid 5074] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7195] <... futex resumed>) = 0 [pid 7199] setpgid(0, 0 [pid 7198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7199] <... setpgid resumed>) = 0 [pid 7198] <... prctl resumed>) = 0 [pid 7197] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7195] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7200 attached [pid 7199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7198] setpgid(0, 0 [pid 5074] <... openat resumed>) = 4 [pid 7200] set_robust_list(0x555556b055e0, 24 [pid 7199] <... openat resumed>) = 3 [pid 7198] <... setpgid resumed>) = 0 [pid 5074] fstat(4, [pid 7200] <... set_robust_list resumed>) = 0 [pid 7199] write(3, "1000", 4 [pid 7198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7200] chdir("./119" [pid 7199] <... write resumed>) = 4 [pid 7198] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 7200] <... chdir resumed>) = 0 [pid 7199] close(3 [pid 7198] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7199] <... close resumed>) = 0 [pid 7198] <... write resumed>) = 4 [pid 5074] getdents64(4, [pid 7200] <... prctl resumed>) = 0 [pid 7199] symlink("/dev/binderfs", "./binderfs" [pid 7198] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7200] setpgid(0, 0 [pid 7199] <... symlink resumed>) = 0 [pid 7198] <... close resumed>) = 0 [pid 5080] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 7200] <... setpgid resumed>) = 0 [pid 7199] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7199] <... futex resumed>) = 0 [pid 7198] <... symlink resumed>) = 0 [pid 5080] lstat("./115/bus", [pid 5074] rmdir("./116/bus" [pid 7200] <... openat resumed>) = 3 [pid 7199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7198] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7200] write(3, "1000", 4 [pid 7199] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7198] <... futex resumed>) = 0 [pid 5074] getdents64(3, [pid 7200] <... write resumed>) = 4 [pid 7199] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7200] close(3 [pid 7199] <... mprotect resumed>) = 0 [pid 7198] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5074] close(3 [pid 7200] <... close resumed>) = 0 [pid 7199] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7198] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... close resumed>) = 0 [pid 7200] symlink("/dev/binderfs", "./binderfs" [pid 7198] <... mprotect resumed>) = 0 [pid 5074] rmdir("./116" [pid 7200] <... symlink resumed>) = 0 [pid 7199] <... clone resumed>, parent_tid=[7201], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7201 [pid 7198] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... rmdir resumed>) = 0 [pid 7200] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7199] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./117", 0777./strace-static-x86_64: Process 7202 attached [pid 7200] <... futex resumed>) = 0 [pid 7199] <... futex resumed>) = 0 [pid 7198] <... clone resumed>, parent_tid=[7202], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7202 [pid 5074] <... mkdir resumed>) = 0 [pid 7200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7199] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7198] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7200] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7198] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7200] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7198] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7200] <... mprotect resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7200] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] close(3) = 0 [pid 7200] <... clone resumed>, parent_tid=[7203], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7203 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 101.844249][ T52] hfsplus: b-tree write err: -5, ino 4 [ 101.854273][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.880170][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7200] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7204 [pid 7200] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7201 attached [pid 7201] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] memfd_create("syzkaller", 0) = 3 [pid 7201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7203 attached [pid 7203] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7203] memfd_create("syzkaller", 0) = 3 [pid 7203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7202] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7202] <... set_robust_list resumed>) = 0 [pid 5080] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7204 attached [pid 7203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7202] memfd_create("syzkaller", 0 [pid 7201] <... write resumed>) = 524288 [pid 5080] fstat(4, [pid 7201] munmap(0x7fee02dd3000, 524288 [pid 7204] set_robust_list(0x555556b055e0, 24 [pid 7202] <... memfd_create resumed>) = 3 [pid 7195] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7204] <... set_robust_list resumed>) = 0 [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7195] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 7204] chdir("./117" [pid 7202] <... mmap resumed>) = 0x7fee02dd3000 [pid 7195] <... futex resumed>) = 0 [pid 7195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7201] <... munmap resumed>) = 0 [pid 7201] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7204] <... chdir resumed>) = 0 [pid 7201] <... openat resumed>) = 4 [pid 7195] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] getdents64(4, [pid 7204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7201] ioctl(4, LOOP_SET_FD, 3 [pid 7195] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7204] <... prctl resumed>) = 0 [pid 7203] <... write resumed>) = 524288 [pid 7202] <... write resumed>) = 524288 [pid 7195] <... mprotect resumed>) = 0 [pid 5080] close(4 [pid 7204] setpgid(0, 0 [pid 7203] munmap(0x7fee02dd3000, 524288 [pid 7202] munmap(0x7fee02dd3000, 524288 [pid 7195] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... close resumed>) = 0 [pid 7204] <... setpgid resumed>) = 0 [pid 7203] <... munmap resumed>) = 0 [pid 7202] <... munmap resumed>) = 0 [pid 5080] rmdir("./115/bus" [pid 7204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7203] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7202] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7195] <... clone resumed>, parent_tid=[7205], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7205 [pid 5080] <... rmdir resumed>) = 0 [pid 7204] <... openat resumed>) = 3 [pid 7203] <... openat resumed>) = 4 [pid 7202] <... openat resumed>) = 4 [pid 7195] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 7204] write(3, "1000", 4 [pid 7203] ioctl(4, LOOP_SET_FD, 3 [ 101.888381][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.906723][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.920665][ T7201] loop2: detected capacity change from 0 to 1024 [ 101.927872][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.927925][ T7202] loop3: detected capacity change from 0 to 1024 [pid 7202] ioctl(4, LOOP_SET_FD, 3 [pid 7195] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7205 attached [pid 7204] <... write resumed>) = 4 [pid 7201] <... ioctl resumed>) = 0 [pid 7197] <... write resumed>) = 57344 [pid 7205] set_robust_list(0x7fee02e529e0, 24 [pid 7201] close(3 [pid 7197] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... set_robust_list resumed>) = 0 [pid 7201] <... close resumed>) = 0 [pid 7197] <... futex resumed>) = 0 [pid 7205] creat("./file1", 000 [pid 7201] mkdir("./bus", 0777 [pid 7197] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] <... creat resumed>) = 5 [pid 7201] <... mkdir resumed>) = 0 [pid 7205] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7205] <... futex resumed>) = 0 [pid 7204] close(3 [pid 7203] <... ioctl resumed>) = 0 [pid 7202] <... ioctl resumed>) = 0 [pid 7195] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 7205] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] <... close resumed>) = 0 [pid 7203] close(3 [pid 7202] close(3 [pid 7195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... close resumed>) = 0 [pid 7204] symlink("/dev/binderfs", "./binderfs" [pid 7203] <... close resumed>) = 0 [pid 7202] <... close resumed>) = 0 [pid 7195] exit_group(0 [pid 5080] rmdir("./115" [pid 7205] <... futex resumed>) = ? [pid 7204] <... symlink resumed>) = 0 [pid 7203] mkdir("./bus", 0777 [pid 7202] mkdir("./bus", 0777 [pid 7201] <... mount resumed>) = 0 [pid 7197] <... futex resumed>) = ? [pid 7195] <... exit_group resumed>) = ? [pid 7205] +++ exited with 0 +++ [pid 7204] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... mkdir resumed>) = 0 [pid 7202] <... mkdir resumed>) = 0 [pid 7201] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7197] +++ exited with 0 +++ [pid 5080] <... rmdir resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 7203] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7202] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7201] <... openat resumed>) = 3 [pid 7195] +++ exited with 0 +++ [pid 5080] mkdir("./116", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7195, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7201] chdir("./bus" [pid 5080] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7204] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7201] <... chdir resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7204] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7202] <... mount resumed>) = 0 [pid 7201] ioctl(4, LOOP_CLR_FD [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7204] <... mprotect resumed>) = 0 [pid 7203] <... mount resumed>) = 0 [pid 7202] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7201] <... ioctl resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7204] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7201] close(4 [pid 7203] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7202] <... openat resumed>) = 3 [pid 7201] <... close resumed>) = 0 [pid 5080] close(3 [pid 7204] <... clone resumed>, parent_tid=[7206], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7206 [pid 7201] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... openat resumed>) = 3 [pid 7202] chdir("./bus" [pid 7201] <... futex resumed>) = 1 [pid 7199] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5075] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7204] <... futex resumed>) = 0 [pid 7201] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7204] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7206 attached [pid 7206] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7206] memfd_create("syzkaller", 0) = 3 [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7199] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] <... futex resumed>) = 0 [pid 7199] <... futex resumed>) = 1 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7203] chdir("./bus" [pid 7202] <... chdir resumed>) = 0 [pid 7201] creat("./bus", 000 [pid 7199] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7203] <... chdir resumed>) = 0 [pid 7202] ioctl(4, LOOP_CLR_FD [pid 7201] <... creat resumed>) = 4 [pid 7201] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7203] ioctl(4, LOOP_CLR_FD [pid 7202] <... ioctl resumed>) = 0 [pid 7201] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7207 [pid 7199] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 7201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 101.935422][ T7197] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.941846][ T7203] loop5: detected capacity change from 0 to 1024 [pid 7201] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7207 attached [pid 7206] <... mmap resumed>) = 0x7fee02dd3000 [pid 7203] <... ioctl resumed>) = 0 [pid 7202] close(4 [pid 7199] <... futex resumed>) = 0 [pid 5075] fstat(3, [pid 7203] close(4 [pid 7202] <... close resumed>) = 0 [pid 7199] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7203] <... close resumed>) = 0 [pid 7202] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 7207] set_robust_list(0x555556b055e0, 24 [pid 7203] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = 1 [pid 7198] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7207] <... set_robust_list resumed>) = 0 [pid 7203] <... futex resumed>) = 1 [pid 7202] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7200] <... futex resumed>) = 0 [pid 7198] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7207] chdir("./116" [pid 7206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7203] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7200] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7207] <... chdir resumed>) = 0 [pid 7203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7202] creat("./bus", 000 [pid 7200] <... futex resumed>) = 0 [pid 7198] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] lstat("./116/binderfs", [pid 7207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7203] creat("./bus", 000 [pid 7202] <... creat resumed>) = 4 [pid 7200] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7207] <... prctl resumed>) = 0 [pid 7203] <... creat resumed>) = 4 [pid 7202] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./116/binderfs" [pid 7207] setpgid(0, 0 [pid 7203] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = 1 [pid 7198] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7207] <... setpgid resumed>) = 0 [pid 7203] <... futex resumed>) = 1 [pid 7202] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7200] <... futex resumed>) = 0 [pid 7198] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7206] <... write resumed>) = 524288 [pid 7203] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7200] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] <... futex resumed>) = 0 [pid 7207] <... openat resumed>) = 3 [pid 7203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7202] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7200] <... futex resumed>) = 0 [pid 7198] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7207] write(3, "1000", 4 [pid 7203] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7200] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7207] <... write resumed>) = 4 [pid 7207] close(3) = 0 [pid 7207] symlink("/dev/binderfs", "./binderfs" [pid 7206] munmap(0x7fee02dd3000, 524288 [pid 7207] <... symlink resumed>) = 0 [pid 7206] <... munmap resumed>) = 0 [pid 7207] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7206] <... openat resumed>) = 4 [pid 7207] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7206] ioctl(4, LOOP_SET_FD, 3 [pid 7207] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7207] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7208], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7208 [pid 7207] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7207] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7208 attached [pid 7208] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7208] memfd_create("syzkaller", 0) = 3 [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [ 101.985278][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [ 101.998340][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.008944][ T52] hfsplus: b-tree write err: -5, ino 4 [ 102.017331][ T7206] loop0: detected capacity change from 0 to 1024 [ 102.017503][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7206] <... ioctl resumed>) = 0 [pid 7206] close(3) = 0 [pid 7206] mkdir("./bus", 0777 [pid 7199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7199] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7199] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7199] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7209], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7209 [pid 7208] <... write resumed>) = 524288 [pid 7206] <... mkdir resumed>) = 0 [pid 7199] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7199] <... futex resumed>) = 0 [pid 7199] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7208] munmap(0x7fee02dd3000, 524288) = 0 [pid 7208] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7209 attached ) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7209] set_robust_list(0x7fee02e529e0, 24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7209] <... set_robust_list resumed>) = 0 [pid 7208] ioctl(4, LOOP_SET_FD, 3 [pid 5075] lstat("./116/bus", [pid 7209] creat("./file1", 000 [pid 7200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 102.032183][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.043366][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.055148][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.057524][ T7208] loop4: detected capacity change from 0 to 1024 [ 102.063086][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7200] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7206] <... mount resumed>) = 0 [pid 7200] <... futex resumed>) = 0 [pid 7198] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7206] <... openat resumed>) = 3 [pid 7200] <... mmap resumed>) = 0x7fee02e32000 [pid 7198] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... openat resumed>) = 4 [pid 7206] chdir("./bus" [pid 7200] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7198] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] fstat(4, [pid 7206] <... chdir resumed>) = 0 [pid 7200] <... mprotect resumed>) = 0 [pid 7198] <... mprotect resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7206] ioctl(4, LOOP_CLR_FD [pid 7200] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7198] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] getdents64(4, [pid 7206] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7206] close(4 [pid 7200] <... clone resumed>, parent_tid=[7210], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7210 [pid 7198] <... clone resumed>, parent_tid=[7211], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7211 [pid 5075] getdents64(4, [pid 7206] <... close resumed>) = 0 [pid 7200] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7206] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7200] <... futex resumed>) = 0 [pid 7198] <... futex resumed>) = 0 [pid 5075] close(4 [pid 7206] <... futex resumed>) = 1 [pid 7200] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7198] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 7206] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] rmdir("./116/bus"./strace-static-x86_64: Process 7211 attached ) = 0 [pid 7211] set_robust_list(0x7fee02e529e0, 24 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7210 attached [pid 7211] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7211] creat("./file1", 000 [pid 7210] set_robust_list(0x7fee02e529e0, 24 [pid 5075] close(3 [pid 7210] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7210] creat("./file1", 000 [pid 5075] rmdir("./116") = 0 [pid 5075] mkdir("./117", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 7204] <... futex resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7212 ./strace-static-x86_64: Process 7212 attached [pid 7212] set_robust_list(0x555556b055e0, 24) = 0 [pid 7212] chdir("./117") = 0 [pid 7212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7212] setpgid(0, 0) = 0 [pid 7204] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = 1 [pid 7212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7206] creat("./bus", 000 [pid 7204] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] <... openat resumed>) = 3 [pid 7208] <... ioctl resumed>) = 0 [pid 7206] <... creat resumed>) = 4 [pid 7212] write(3, "1000", 4 [pid 7208] close(3 [pid 7206] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... write resumed>) = 4 [pid 7208] <... close resumed>) = 0 [pid 7206] <... futex resumed>) = 0 [pid 7212] close(3 [pid 7208] mkdir("./bus", 0777 [pid 7206] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7212] <... close resumed>) = 0 [pid 7208] <... mkdir resumed>) = 0 [pid 7204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7212] symlink("/dev/binderfs", "./binderfs" [pid 7208] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7204] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... symlink resumed>) = 0 [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = 1 [pid 7212] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 102.087917][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.096026][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.104167][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.120182][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7206] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7212] <... futex resumed>) = 0 [pid 7212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7212] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7212] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7213], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7213 [pid 7212] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7212] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7213 attached [pid 7213] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7204] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7211] <... creat resumed>) = 5 [pid 7208] <... mount resumed>) = 0 [pid 7211] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7211] <... futex resumed>) = 1 [pid 7208] <... openat resumed>) = 3 [pid 7198] <... futex resumed>) = 0 [pid 7211] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] chdir("./bus" [pid 7200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7208] <... chdir resumed>) = 0 [pid 7208] ioctl(4, LOOP_CLR_FD) = 0 [pid 7208] close(4) = 0 [pid 7208] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7207] <... futex resumed>) = 0 [pid 7213] memfd_create("syzkaller", 0 [pid 7208] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7207] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7213] <... memfd_create resumed>) = 3 [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7207] <... futex resumed>) = 0 [pid 7213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7208] creat("./bus", 000 [pid 7207] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7213] <... mmap resumed>) = 0x7fee02dd3000 [pid 7208] <... creat resumed>) = 4 [pid 7213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7208] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... creat resumed>) = 5 [pid 7210] <... creat resumed>) = 5 [pid 7209] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = 1 [pid 7207] <... futex resumed>) = 0 [pid 7210] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] <... futex resumed>) = 0 [pid 7208] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7207] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] <... futex resumed>) = 0 [ 102.136676][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.146641][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.157684][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.174337][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7209] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7207] <... futex resumed>) = 0 [pid 7213] <... write resumed>) = 524288 [pid 7210] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7207] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7213] munmap(0x7fee02dd3000, 524288) = 0 [pid 7213] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7213] ioctl(4, LOOP_SET_FD, 3 [pid 7204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7204] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7213] <... ioctl resumed>) = 0 [pid 7213] close(3) = 0 [ 102.174527][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.182361][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.198860][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.201611][ T7202] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.209316][ T7213] loop1: detected capacity change from 0 to 1024 [ 102.220976][ T7201] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.222227][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7213] mkdir("./bus", 0777) = 0 [pid 7213] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7207] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... write resumed>) = 57344 [pid 7201] <... write resumed>) = 57344 [pid 7207] <... futex resumed>) = 0 [pid 7207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7207] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7213] <... mount resumed>) = 0 [pid 7207] <... mprotect resumed>) = 0 [pid 7213] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7207] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7213] <... openat resumed>) = 3 [pid 7204] <... mmap resumed>) = 0x7fee02e32000 [pid 7202] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] exit_group(0 [pid 7213] chdir("./bus" [pid 7211] <... futex resumed>) = ? [pid 7207] <... clone resumed>, parent_tid=[7214], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7214 [pid 7198] <... exit_group resumed>) = ? [pid 7213] <... chdir resumed>) = 0 [pid 7211] +++ exited with 0 +++ [pid 7207] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7199] exit_group(0 [pid 7213] ioctl(4, LOOP_CLR_FD [pid 7209] <... futex resumed>) = ? [pid 7207] <... futex resumed>) = 0 [pid 7199] <... exit_group resumed>) = ? [pid 7213] <... ioctl resumed>) = 0 [pid 7209] +++ exited with 0 +++ [pid 7207] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7213] close(4) = 0 [pid 7204] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7203] <... write resumed>) = 57344 [pid 7202] <... futex resumed>) = ? [pid 7201] <... futex resumed>) = ? [pid 7213] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7214 attached ) = 1 [pid 7212] <... futex resumed>) = 0 [pid 7204] <... mprotect resumed>) = 0 [pid 7203] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7200] exit_group(0 [pid 7214] set_robust_list(0x7fee02e529e0, 24 [pid 7213] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7212] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] <... futex resumed>) = ? [pid 7202] +++ exited with 0 +++ [pid 7201] +++ exited with 0 +++ [pid 7200] <... exit_group resumed>) = ? [pid 7199] +++ exited with 0 +++ [pid 7203] <... futex resumed>) = ? [pid 7198] +++ exited with 0 +++ [pid 7204] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7214] <... set_robust_list resumed>) = 0 [pid 7213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7212] <... futex resumed>) = 0 [pid 7210] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7199, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7214] creat("./file1", 000 [pid 7213] creat("./bus", 000 [pid 7212] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] +++ exited with 0 +++ [pid 7200] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7198, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7213] <... creat resumed>) = 4 [pid 7204] <... clone resumed>, parent_tid=[7215], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7215 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7200, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 7213] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7204] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7213] <... futex resumed>) = 1 [pid 7212] <... futex resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7213] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7212] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7212] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [ 102.232073][ T7203] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.244872][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.252926][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7213] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7212] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7204] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] fstat(3, [pid 5076] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5076] lstat("./118/binderfs", [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./118/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 5081] lstat("./119/binderfs", [pid 5076] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7215 attached [pid 7214] <... creat resumed>) = 5 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7214] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./119/binderfs" [pid 7214] <... futex resumed>) = 1 [pid 7207] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 7214] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7215] set_robust_list(0x7fee02e529e0, 24 [pid 7206] <... write resumed>) = 57344 [ 102.279927][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.285246][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.293226][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.299322][ T7206] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.305507][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.309972][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.316852][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7215] <... set_robust_list resumed>) = 0 [pid 7206] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7215] creat("./file1", 000 [pid 7212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7208] <... write resumed>) = 57344 [pid 7206] <... futex resumed>) = 0 [pid 7204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... openat resumed>) = 3 [pid 7212] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7212] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7212] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7216], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7216 [pid 7212] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7212] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7216 attached [pid 7216] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7216] creat("./file1", 000) = 5 [pid 7216] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7215] <... creat resumed>) = 5 [pid 7212] <... futex resumed>) = 0 [pid 7208] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] fstat(3, [pid 7208] <... futex resumed>) = 0 [pid 7216] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7215] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7215] <... futex resumed>) = 0 [pid 7204] exit_group(0 [pid 5077] getdents64(3, [pid 7204] <... exit_group resumed>) = ? [pid 7206] <... futex resumed>) = ? [pid 7215] +++ exited with 0 +++ [pid 7207] exit_group(0 [pid 7206] +++ exited with 0 +++ [pid 7204] +++ exited with 0 +++ [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./117/binderfs", [pid 7214] <... futex resumed>) = ? [pid 7208] <... futex resumed>) = ? [pid 7207] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7214] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7204, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7208] +++ exited with 0 +++ [pid 7207] +++ exited with 0 +++ [pid 5077] unlink("./117/binderfs" [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7207, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5074] getdents64(3, [pid 5080] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./119/bus", [pid 5080] <... openat resumed>) = 3 [pid 5076] lstat("./118/bus", [pid 5074] lstat("./117/binderfs", [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] fstat(3, [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./117/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 102.325733][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.331603][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.337401][ T7208] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.345781][ T52] hfsplus: b-tree write err: -5, ino 4 [ 102.352001][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 4 [pid 5080] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./116/binderfs", [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] unlink("./116/binderfs" [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5080] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 5076] close(4 [pid 5081] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5081] rmdir("./119/bus" [pid 5076] rmdir("./118/bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [ 102.386277][ T9] hfsplus: b-tree write err: -5, ino 4 [ 102.392372][ T11] hfsplus: b-tree write err: -5, ino 4 [ 102.398567][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.404010][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5081] getdents64(3, [pid 5080] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = 0 [pid 5077] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./117/bus") = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./117") = 0 [pid 5077] mkdir("./118", 0777 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5080] lstat("./116/bus", [pid 5074] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] rmdir("./119" [pid 5080] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] mkdir("./120", 0777 [pid 5080] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] lstat("./117/bus", [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] fstat(4, [pid 5081] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] getdents64(4, [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./118" [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] close(3 [pid 5080] getdents64(4, [pid 5077] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] close(4 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7217 [pid 5080] rmdir("./116/bus" [pid 5076] mkdir("./119", 0777 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] close(3) = 0 [pid 5077] close(3 [pid 5080] rmdir("./116" [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 5080] mkdir("./117", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(4, [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7218 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(4, ./strace-static-x86_64: Process 7217 attached [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7217] set_robust_list(0x555556b055e0, 24 [pid 5080] close(3 [pid 7217] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7217] chdir("./120" [pid 7213] <... write resumed>) = 57344 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7219 [pid 5074] close(4 [pid 7217] <... chdir resumed>) = 0 [pid 7213] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7213] <... futex resumed>) = 0 [pid 7212] exit_group(0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7220 [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 7218 attached [pid 7217] <... prctl resumed>) = 0 [pid 7212] <... exit_group resumed>) = ? [pid 7218] set_robust_list(0x555556b055e0, 24 [pid 7217] setpgid(0, 0 [pid 7216] <... futex resumed>) = ? [pid 7213] +++ exited with 0 +++ [pid 5074] rmdir("./117/bus" [pid 7218] <... set_robust_list resumed>) = 0 [pid 7217] <... setpgid resumed>) = 0 [pid 7218] chdir("./118" [pid 7217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7218] <... chdir resumed>) = 0 [pid 7217] <... openat resumed>) = 3 [pid 7216] +++ exited with 0 +++ [pid 7212] +++ exited with 0 +++ [pid 7218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7217] write(3, "1000", 4 [pid 7218] <... prctl resumed>) = 0 [pid 7217] <... write resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 7218] setpgid(0, 0 [pid 7217] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7212, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] getdents64(3, [pid 7218] <... setpgid resumed>) = 0 [pid 7217] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7217] symlink("/dev/binderfs", "./binderfs" [pid 5074] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7218] <... openat resumed>) = 3 [pid 7217] <... symlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7218] write(3, "1000", 4 [pid 7217] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7220 attached [pid 7218] <... write resumed>) = 4 [pid 7217] <... futex resumed>) = 0 [pid 5074] rmdir("./117" [pid 7220] set_robust_list(0x555556b055e0, 24 [pid 7218] close(3 [pid 7217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7220] <... set_robust_list resumed>) = 0 [pid 7218] <... close resumed>) = 0 [pid 7217] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 7220] chdir("./117" [pid 7218] symlink("/dev/binderfs", "./binderfs" [pid 7217] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./118", 0777./strace-static-x86_64: Process 7219 attached [pid 7220] <... chdir resumed>) = 0 [pid 7218] <... symlink resumed>) = 0 [pid 7217] <... mprotect resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7218] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7217] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] fstat(3, [pid 5074] <... mkdir resumed>) = 0 [pid 7220] <... prctl resumed>) = 0 [pid 7219] set_robust_list(0x555556b055e0, 24 [pid 7218] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7220] setpgid(0, 0 [pid 7219] <... set_robust_list resumed>) = 0 [pid 7218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7217] <... clone resumed>, parent_tid=[7221], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7221 [pid 5075] getdents64(3, [pid 7220] <... setpgid resumed>) = 0 [pid 7219] chdir("./119" [pid 7218] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7217] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 7220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7218] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7217] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7220] <... openat resumed>) = 3 [pid 7219] <... chdir resumed>) = 0 [pid 7218] <... mprotect resumed>) = 0 [pid 7217] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7220] write(3, "1000", 4 [pid 7219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7218] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3./strace-static-x86_64: Process 7221 attached [pid 7220] <... write resumed>) = 4 [pid 7219] <... prctl resumed>) = 0 [pid 5075] lstat("./117/binderfs", [pid 5074] <... close resumed>) = 0 [pid 7221] set_robust_list(0x7fee0b1f39e0, 24 [pid 7220] close(3 [pid 7219] setpgid(0, 0 [pid 7218] <... clone resumed>, parent_tid=[7222], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7222 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7221] <... set_robust_list resumed>) = 0 [pid 7220] <... close resumed>) = 0 [pid 7219] <... setpgid resumed>) = 0 [pid 7218] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./117/binderfs" [pid 7221] memfd_create("syzkaller", 0 [pid 7220] symlink("/dev/binderfs", "./binderfs" [pid 7218] <... futex resumed>) = 0 [pid 7221] <... memfd_create resumed>) = 3 [pid 7220] <... symlink resumed>) = 0 [pid 7219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 102.434287][ T7213] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7218] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7223 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7220] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7219] <... openat resumed>) = 3 [pid 5075] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7221] <... mmap resumed>) = 0x7fee02dd3000 [pid 7220] <... futex resumed>) = 0 [pid 7219] write(3, "1000", 4 [pid 7221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7219] <... write resumed>) = 4 [pid 7220] <... mmap resumed>) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7223 attached [pid 7220] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7223] set_robust_list(0x555556b055e0, 24 [pid 7220] <... mprotect resumed>) = 0 [pid 7223] <... set_robust_list resumed>) = 0 [pid 7220] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7223] chdir("./118" [pid 7219] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 7223] <... chdir resumed>) = 0 [pid 7220] <... clone resumed>, parent_tid=[7224], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7224 [pid 7219] <... close resumed>) = 0 [pid 5075] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7220] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7219] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] <... prctl resumed>) = 0 [pid 7220] <... futex resumed>) = 0 [pid 5075] lstat("./117/bus", [pid 7223] setpgid(0, 0 [pid 7220] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7219] <... symlink resumed>) = 0 [pid 7223] <... setpgid resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7219] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7223] <... openat resumed>) = 3 [pid 7221] <... write resumed>) = 524288 [pid 7219] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7224 attached [pid 7223] write(3, "1000", 4 [pid 7221] munmap(0x7fee02dd3000, 524288 [pid 7219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7224] set_robust_list(0x7fee0b1f39e0, 24 [pid 7223] <... write resumed>) = 4 [pid 7221] <... munmap resumed>) = 0 [pid 7219] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7224] <... set_robust_list resumed>) = 0 [pid 7223] close(3 [pid 7221] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7219] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... openat resumed>) = 4 [pid 7224] memfd_create("syzkaller", 0 [pid 7223] <... close resumed>) = 0 [pid 7221] <... openat resumed>) = 4 [pid 7219] <... mprotect resumed>) = 0 [pid 5075] fstat(4, [pid 7224] <... memfd_create resumed>) = 3 [pid 7223] symlink("/dev/binderfs", "./binderfs" [pid 7221] ioctl(4, LOOP_SET_FD, 3 [pid 7219] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7223] <... symlink resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7222 attached [pid 7224] <... mmap resumed>) = 0x7fee02dd3000 [pid 7223] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7225 attached [pid 7224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7223] <... futex resumed>) = 0 [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7225] set_robust_list(0x7fee0b1f39e0, 24 [pid 7224] <... write resumed>) = 524288 [pid 7223] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7222] set_robust_list(0x7fee0b1f39e0, 24 [pid 7219] <... clone resumed>, parent_tid=[7225], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7225 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7225] <... set_robust_list resumed>) = 0 [pid 7223] <... mprotect resumed>) = 0 [pid 7223] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7222] <... set_robust_list resumed>) = 0 [pid 7219] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] memfd_create("syzkaller", 0 [pid 5075] getdents64(4, [pid 7223] <... clone resumed>, parent_tid=[7226], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7226 [pid 7223] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7222] memfd_create("syzkaller", 0 [pid 7219] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7225] <... memfd_create resumed>) = 3 [pid 7223] <... futex resumed>) = 0 [pid 7223] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7224] munmap(0x7fee02dd3000, 524288 [pid 7225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7222] <... memfd_create resumed>) = 3 [pid 7219] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] close(4 [pid 7222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7225] <... mmap resumed>) = 0x7fee02dd3000 [pid 5075] <... close resumed>) = 0 [pid 7222] <... mmap resumed>) = 0x7fee02dd3000 [pid 7224] <... munmap resumed>) = 0 [pid 7224] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7224] ioctl(4, LOOP_SET_FD, 3 [pid 7225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./117/bus") = 0 [pid 7221] <... ioctl resumed>) = 0 [pid 7221] close(3) = 0 [pid 7221] mkdir("./bus", 0777) = 0 [pid 7221] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7222] <... write resumed>) = 524288 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./117"./strace-static-x86_64: Process 7226 attached [pid 7222] munmap(0x7fee02dd3000, 524288 [pid 7225] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./118", 0777 [pid 7226] set_robust_list(0x7fee0b1f39e0, 24 [pid 7225] munmap(0x7fee02dd3000, 524288 [pid 7222] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7226] <... set_robust_list resumed>) = 0 [pid 7225] <... munmap resumed>) = 0 [pid 7222] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7221] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7225] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7222] <... openat resumed>) = 4 [pid 7221] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7226] memfd_create("syzkaller", 0 [pid 7225] <... openat resumed>) = 4 [pid 7222] ioctl(4, LOOP_SET_FD, 3 [pid 7221] <... openat resumed>) = 3 [ 102.482876][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 102.502583][ T7221] loop5: detected capacity change from 0 to 1024 [ 102.520808][ T7224] loop4: detected capacity change from 0 to 1024 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7221] chdir("./bus" [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7221] <... chdir resumed>) = 0 [pid 5075] close(3 [pid 7221] ioctl(4, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 7221] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7221] close(4) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7227 [pid 7221] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7217] <... futex resumed>) = 0 [pid 7221] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7217] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7217] <... futex resumed>) = 0 [pid 7221] creat("./bus", 000 [pid 7217] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7221] <... creat resumed>) = 4 [pid 7221] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... ioctl resumed>) = 0 [pid 7221] <... futex resumed>) = 1 [pid 7217] <... futex resumed>) = 0 [pid 7224] close(3 [pid 7221] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7217] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... close resumed>) = 0 [pid 7221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7217] <... futex resumed>) = 0 [pid 7224] mkdir("./bus", 0777 [pid 7221] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7217] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... memfd_create resumed>) = 3 [pid 7225] ioctl(4, LOOP_SET_FD, 3 [pid 7224] <... mkdir resumed>) = 0 [pid 7222] <... ioctl resumed>) = 0 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7224] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7227 attached [pid 7227] set_robust_list(0x555556b055e0, 24) = 0 [pid 7227] chdir("./118") = 0 [pid 7227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7227] setpgid(0, 0) = 0 [pid 7227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7227] write(3, "1000", 4) = 4 [pid 7227] close(3) = 0 [pid 7227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7227] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7227] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7227] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7228], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7228 [pid 7227] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... ioctl resumed>) = 0 [pid 7227] <... futex resumed>) = 0 [pid 7227] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7226] <... mmap resumed>) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7228 attached [pid 7228] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7228] memfd_create("syzkaller", 0 [pid 7226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7225] close(3 [pid 7222] close(3 [pid 7228] <... memfd_create resumed>) = 3 [pid 7228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7226] <... write resumed>) = 524288 [pid 7226] munmap(0x7fee02dd3000, 524288 [pid 7225] <... close resumed>) = 0 [pid 7224] <... mount resumed>) = 0 [pid 7222] <... close resumed>) = 0 [pid 7224] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7222] mkdir("./bus", 0777 [pid 7224] chdir("./bus" [pid 7228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7226] <... munmap resumed>) = 0 [pid 7225] mkdir("./bus", 0777 [pid 7224] <... chdir resumed>) = 0 [pid 7222] <... mkdir resumed>) = 0 [pid 7224] ioctl(4, LOOP_CLR_FD) = 0 [pid 7224] close(4) = 0 [pid 7224] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7224] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7220] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7220] <... futex resumed>) = 0 [pid 7224] creat("./bus", 000 [pid 7220] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] <... creat resumed>) = 4 [pid 7222] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7224] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7228] <... write resumed>) = 524288 [pid 7224] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7220] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7222] <... mount resumed>) = 0 [pid 7220] <... futex resumed>) = 0 [pid 7226] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7224] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 102.539365][ T7222] loop3: detected capacity change from 0 to 1024 [ 102.548013][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.556723][ T7225] loop2: detected capacity change from 0 to 1024 [ 102.565371][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7220] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... openat resumed>) = 4 [pid 7225] <... mkdir resumed>) = 0 [pid 7222] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7226] ioctl(4, LOOP_SET_FD, 3 [pid 7225] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7222] <... openat resumed>) = 3 [pid 7228] munmap(0x7fee02dd3000, 524288) = 0 [pid 7228] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7228] ioctl(4, LOOP_SET_FD, 3 [pid 7225] <... mount resumed>) = 0 [pid 7222] chdir("./bus" [pid 7217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7217] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7222] <... chdir resumed>) = 0 [pid 7217] <... futex resumed>) = 0 [pid 7222] ioctl(4, LOOP_CLR_FD [pid 7217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7226] <... ioctl resumed>) = 0 [pid 7225] <... openat resumed>) = 3 [pid 7222] <... ioctl resumed>) = 0 [pid 7217] <... mmap resumed>) = 0x7fee02e32000 [pid 7217] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7217] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7229], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7229 [pid 7217] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7217] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7229 attached [pid 7229] set_robust_list(0x7fee02e529e0, 24) = 0 [ 102.590442][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.598964][ T7226] loop0: detected capacity change from 0 to 1024 [ 102.601358][ T7228] loop1: detected capacity change from 0 to 1024 [ 102.613990][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.619913][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.625651][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7229] creat("./file1", 000 [pid 7226] close(3 [pid 7225] chdir("./bus" [pid 7222] close(4 [pid 7228] <... ioctl resumed>) = 0 [pid 7228] close(3) = 0 [pid 7228] mkdir("./bus", 0777) = 0 [pid 7228] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7226] <... close resumed>) = 0 [pid 7225] <... chdir resumed>) = 0 [pid 7222] <... close resumed>) = 0 [pid 7226] mkdir("./bus", 0777 [pid 7225] ioctl(4, LOOP_CLR_FD [pid 7222] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7226] <... mkdir resumed>) = 0 [pid 7225] <... ioctl resumed>) = 0 [pid 7222] <... futex resumed>) = 1 [pid 7220] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7218] <... futex resumed>) = 0 [pid 7226] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7225] close(4 [pid 7222] creat("./bus", 000 [pid 7220] <... futex resumed>) = 0 [pid 7218] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... close resumed>) = 0 [pid 7225] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7222] <... creat resumed>) = 4 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7218] <... futex resumed>) = 0 [pid 7225] <... futex resumed>) = 1 [pid 7222] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... mmap resumed>) = 0x7fee02e32000 [pid 7219] <... futex resumed>) = 0 [pid 7218] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7222] <... futex resumed>) = 0 [pid 7219] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7219] <... futex resumed>) = 0 [pid 7225] creat("./bus", 000 [pid 7222] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7228] <... mount resumed>) = 0 [pid 7220] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7219] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7228] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7225] <... creat resumed>) = 4 [pid 7220] <... mprotect resumed>) = 0 [pid 7218] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... openat resumed>) = 3 [pid 7225] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7222] <... futex resumed>) = 0 [pid 7220] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7218] <... futex resumed>) = 1 [pid 7228] chdir("./bus" [pid 7225] <... futex resumed>) = 1 [pid 7222] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7219] <... futex resumed>) = 0 [ 102.629178][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.639493][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.660201][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.669480][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.670491][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7218] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7228] <... chdir resumed>) = 0 [pid 7226] <... mount resumed>) = 0 [pid 7220] <... clone resumed>, parent_tid=[7230], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7230 [pid 7219] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] ioctl(4, LOOP_CLR_FD [pid 7220] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... ioctl resumed>) = 0 [pid 7220] <... futex resumed>) = 0 [pid 7219] <... futex resumed>) = 0 [pid 7228] close(4 [pid 7220] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7228] <... close resumed>) = 0 [pid 7228] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7227] <... futex resumed>) = 0 [pid 7228] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7227] <... futex resumed>) = 0 [pid 7228] creat("./bus", 000 [pid 7227] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7228] <... creat resumed>) = 4 [pid 7228] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7227] <... futex resumed>) = 0 [pid 7228] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7227] <... futex resumed>) = 0 [pid 7228] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7227] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7230 attached [pid 7230] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7230] creat("./file1", 000) = 5 [pid 7230] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7230] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7229] <... creat resumed>) = 5 [pid 7229] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7217] <... futex resumed>) = 0 [pid 7229] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7226] chdir("./bus") = 0 [pid 7226] ioctl(4, LOOP_CLR_FD) = 0 [pid 7226] close(4) = 0 [pid 7226] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7223] <... futex resumed>) = 0 [pid 7223] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] creat("./bus", 000 [pid 7223] <... futex resumed>) = 0 [pid 7223] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7226] <... creat resumed>) = 4 [pid 7226] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7223] <... futex resumed>) = 0 [pid 7226] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7223] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7223] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7227] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7218] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = 0 [pid 7219] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7218] <... futex resumed>) = 0 [pid 7227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7219] <... futex resumed>) = 0 [pid 7218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7227] <... mmap resumed>) = 0x7fee02e32000 [pid 7219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7218] <... mmap resumed>) = 0x7fee02e32000 [pid 7227] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7219] <... mmap resumed>) = 0x7fee02e32000 [pid 7218] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7227] <... mprotect resumed>) = 0 [pid 7218] <... mprotect resumed>) = 0 [pid 7227] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7218] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7227] <... clone resumed>, parent_tid=[7231], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7231 [pid 7218] <... clone resumed>, parent_tid=[7232], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7232 [pid 7227] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7218] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = 0 [pid 7218] <... futex resumed>) = 0 [pid 7227] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 102.680111][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.685503][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.706911][ T7224] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.707814][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.724448][ T7221] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.733918][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7218] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7232 attached [pid 7219] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7232] set_robust_list(0x7fee02e529e0, 24) = 0 ./strace-static-x86_64: Process 7231 attached [pid 7232] creat("./file1", 000 [pid 7231] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7231] creat("./file1", 000 [pid 7219] <... mprotect resumed>) = 0 [pid 7224] <... write resumed>) = 57344 [pid 7223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7221] <... write resumed>) = 57344 [pid 7219] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7232] <... creat resumed>) = 5 [pid 7232] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] exit_group(0 [pid 7232] <... futex resumed>) = 1 [pid 7230] <... futex resumed>) = ? [pid 7224] <... futex resumed>) = ? [pid 7221] <... futex resumed>) = 0 [pid 7220] <... exit_group resumed>) = ? [pid 7218] <... futex resumed>) = 0 [pid 7217] exit_group(0 [pid 7232] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7230] +++ exited with 0 +++ [pid 7229] <... futex resumed>) = ? [pid 7224] +++ exited with 0 +++ [pid 7220] +++ exited with 0 +++ [pid 7217] <... exit_group resumed>) = ? [pid 7231] <... creat resumed>) = 5 [pid 7229] +++ exited with 0 +++ [pid 7223] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] +++ exited with 0 +++ [pid 7217] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7220, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7231] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7227] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7217, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7231] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7233 attached [pid 5081] fstat(3, [pid 5080] fstat(3, [pid 7233] set_robust_list(0x7fee02e529e0, 24 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7233] <... set_robust_list resumed>) = 0 [pid 5081] getdents64(3, [pid 5080] getdents64(3, [pid 7233] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] <... futex resumed>) = 0 [pid 7219] <... clone resumed>, parent_tid=[7233], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7233 [ 102.741473][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.749322][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.757396][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.767386][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.775215][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.782503][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] lstat("./120/binderfs", [pid 5080] lstat("./117/binderfs", [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7219] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./120/binderfs" [pid 5080] unlink("./117/binderfs" [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5081] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7233] <... futex resumed>) = 0 [pid 7223] <... mmap resumed>) = 0x7fee02e32000 [pid 7219] <... futex resumed>) = 1 [pid 7233] creat("./file1", 000 [pid 7223] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [ 102.790876][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.795666][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.798963][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.806012][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 102.812914][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.827103][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.827761][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7219] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7223] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [ 102.835009][ T9] hfsplus: b-tree write err: -5, ino 4 [ 102.842146][ T7222] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.854777][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.858632][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.876286][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.883885][ T7226] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7223] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./117/bus", [pid 5081] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7223] <... clone resumed>, parent_tid=[7234], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7234 [pid 5081] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7234 attached [pid 7233] <... creat resumed>) = 5 [pid 7223] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7222] <... write resumed>) = 57344 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7234] set_robust_list(0x7fee02e529e0, 24 [pid 7233] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] <... futex resumed>) = 0 [pid 7222] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7225] <... write resumed>) = 57344 [pid 7234] <... set_robust_list resumed>) = 0 [pid 7233] <... futex resumed>) = 0 [pid 7223] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7222] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 4 [pid 7222] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7234] creat("./file1", 000 [pid 7233] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7225] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5080] fstat(4, [pid 7234] <... creat resumed>) = 5 [pid 7219] exit_group(0 [pid 7218] exit_group(0 [pid 7232] <... futex resumed>) = ? [pid 7234] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... futex resumed>) = ? [pid 7225] <... futex resumed>) = ? [pid 7222] <... futex resumed>) = ? [pid 7219] <... exit_group resumed>) = ? [pid 7218] <... exit_group resumed>) = ? [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7234] <... futex resumed>) = 1 [pid 7233] +++ exited with 0 +++ [pid 7232] +++ exited with 0 +++ [pid 7228] <... write resumed>) = 57344 [pid 7226] <... write resumed>) = 57344 [pid 7225] +++ exited with 0 +++ [pid 7223] <... futex resumed>) = 0 [pid 7222] +++ exited with 0 +++ [pid 7219] +++ exited with 0 +++ [pid 7218] +++ exited with 0 +++ [pid 5081] getdents64(4, [pid 5080] getdents64(4, [pid 7234] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7228] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7219, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 7228] <... futex resumed>) = 0 [pid 7226] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] getdents64(4, [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7218, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7228] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7227] exit_group(0 [pid 5081] close(4 [pid 5080] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7231] <... futex resumed>) = ? [pid 7228] <... futex resumed>) = ? [pid 7227] <... exit_group resumed>) = ? [pid 7223] exit_group(0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7234] <... futex resumed>) = ? [pid 7231] +++ exited with 0 +++ [pid 7228] +++ exited with 0 +++ [pid 7227] +++ exited with 0 +++ [pid 7226] <... futex resumed>) = ? [pid 7223] <... exit_group resumed>) = ? [pid 5081] rmdir("./120/bus" [pid 5080] rmdir("./117/bus" [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7234] +++ exited with 0 +++ [pid 7226] +++ exited with 0 +++ [pid 5077] fstat(3, [pid 5076] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7227, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7223] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5080] <... rmdir resumed>) = 0 [pid 5077] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7223, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./118/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] fstat(3, [pid 5081] <... close resumed>) = 0 [pid 5080] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] lstat("./119/binderfs", [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] rmdir("./120" [pid 5080] <... close resumed>) = 0 [pid 5077] unlink("./118/binderfs" [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] getdents64(3, [pid 5074] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5080] rmdir("./117" [pid 5077] <... unlink resumed>) = 0 [pid 5076] unlink("./119/binderfs" [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] mkdir("./121", 0777 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5075] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... mkdir resumed>) = 0 [pid 5080] mkdir("./118", 0777 [pid 5076] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./118/binderfs") = 0 [pid 5075] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./118/binderfs") = 0 [pid 5074] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 102.884808][ T7228] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.891694][ T7225] hfsplus: request for non-existent node 16715520 in B*Tree [ 102.931879][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5081] close(3) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7235 ./strace-static-x86_64: Process 7235 attached [pid 7235] set_robust_list(0x555556b055e0, 24) = 0 [pid 7235] chdir("./121") = 0 [pid 7235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7235] setpgid(0, 0) = 0 [pid 7235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7235] write(3, "1000", 4) = 4 [pid 7235] close(3) = 0 [pid 7235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7235] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7235] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7235] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7236], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7236 [pid 7235] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7235] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7236 attached [pid 7236] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7236] memfd_create("syzkaller", 0) = 3 [pid 7236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5077] <... umount2 resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7236] <... write resumed>) = 524288 [pid 7236] munmap(0x7fee02dd3000, 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5080] close(3) = 0 [pid 5077] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7236] <... munmap resumed>) = 0 [pid 7236] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7236] ioctl(4, LOOP_SET_FD, 3 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./118/bus", [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7237 [pid 5075] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./118/bus", [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./118/bus", [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, [pid 5075] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5077] getdents64(4, [pid 5075] fstat(4, [pid 5074] fstat(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5075] getdents64(4, [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5077] close(4 [pid 5075] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./118/bus" [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5074] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./118/bus" [pid 5075] rmdir("./118/bus" [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7237 attached [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7237] set_robust_list(0x555556b055e0, 24) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] close(3) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] close(3) = 0 [pid 5075] rmdir("./118" [pid 5074] rmdir("./118" [pid 7237] chdir("./118" [pid 5075] <... rmdir resumed>) = 0 [pid 7237] <... chdir resumed>) = 0 [pid 7237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7237] setpgid(0, 0) = 0 [pid 5077] rmdir("./118" [pid 5074] <... rmdir resumed>) = 0 [pid 7237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... rmdir resumed>) = 0 [pid 7237] <... openat resumed>) = 3 [pid 7237] write(3, "1000", 4) = 4 [pid 7237] close(3) = 0 [pid 7237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7237] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] mkdir("./119", 0777 [pid 5077] mkdir("./119", 0777 [pid 5074] mkdir("./119", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7237] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] lstat("./119/bus", [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7237] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7237] <... mprotect resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 5074] close(3 [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7236] <... ioctl resumed>) = 0 [pid 7237] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7236] close(3) = 0 [pid 7236] mkdir("./bus", 0777) = 0 [pid 7237] <... clone resumed>, parent_tid=[7240], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7240 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7238 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7239 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7241 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 7237] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7237] <... futex resumed>) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./119/bus"./strace-static-x86_64: Process 7241 attached ./strace-static-x86_64: Process 7240 attached ./strace-static-x86_64: Process 7239 attached ./strace-static-x86_64: Process 7238 attached [ 102.941074][ T11] hfsplus: b-tree write err: -5, ino 4 [ 102.946957][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 102.971055][ T9] hfsplus: b-tree write err: -5, ino 4 [ 102.975491][ T7236] loop5: detected capacity change from 0 to 1024 [pid 7237] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... rmdir resumed>) = 0 [pid 7241] set_robust_list(0x555556b055e0, 24 [pid 7240] set_robust_list(0x7fee0b1f39e0, 24 [pid 7239] set_robust_list(0x555556b055e0, 24 [pid 7238] set_robust_list(0x555556b055e0, 24 [pid 7236] <... mount resumed>) = 0 [pid 5076] getdents64(3, [pid 7241] <... set_robust_list resumed>) = 0 [pid 7240] <... set_robust_list resumed>) = 0 [pid 7239] <... set_robust_list resumed>) = 0 [pid 7238] <... set_robust_list resumed>) = 0 [pid 7236] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7241] chdir("./119" [pid 7240] memfd_create("syzkaller", 0 [pid 7239] chdir("./119" [pid 7238] chdir("./119" [pid 7236] <... openat resumed>) = 3 [pid 5076] close(3 [pid 7241] <... chdir resumed>) = 0 [pid 7240] <... memfd_create resumed>) = 3 [pid 7239] <... chdir resumed>) = 0 [pid 7238] <... chdir resumed>) = 0 [pid 7236] chdir("./bus" [pid 5076] <... close resumed>) = 0 [pid 7241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7236] <... chdir resumed>) = 0 [pid 5076] rmdir("./119" [pid 7241] <... prctl resumed>) = 0 [pid 7240] <... mmap resumed>) = 0x7fee02dd3000 [pid 7239] <... prctl resumed>) = 0 [pid 7238] <... prctl resumed>) = 0 [pid 7236] ioctl(4, LOOP_CLR_FD [pid 7241] setpgid(0, 0 [pid 7240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7239] setpgid(0, 0 [pid 7238] setpgid(0, 0 [pid 7236] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7241] <... setpgid resumed>) = 0 [pid 7240] <... write resumed>) = 524288 [pid 7239] <... setpgid resumed>) = 0 [pid 7238] <... setpgid resumed>) = 0 [pid 7236] close(4 [pid 5076] mkdir("./120", 0777 [pid 7241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7240] munmap(0x7fee02dd3000, 524288 [pid 7239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7236] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7241] <... openat resumed>) = 3 [pid 7240] <... munmap resumed>) = 0 [pid 7239] <... openat resumed>) = 3 [pid 7238] <... openat resumed>) = 3 [pid 7236] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7241] write(3, "1000", 4 [pid 7240] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7239] write(3, "1000", 4 [pid 7238] write(3, "1000", 4 [pid 7236] <... futex resumed>) = 1 [pid 7235] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7241] <... write resumed>) = 4 [pid 7240] <... openat resumed>) = 4 [pid 7239] <... write resumed>) = 4 [pid 7238] <... write resumed>) = 4 [pid 7236] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7235] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7241] close(3 [pid 7240] ioctl(4, LOOP_SET_FD, 3 [pid 7239] close(3 [pid 7238] close(3 [pid 7236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7235] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7241] <... close resumed>) = 0 [pid 7239] <... close resumed>) = 0 [pid 5076] close(3 [pid 7241] symlink("/dev/binderfs", "./binderfs" [pid 7239] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 7241] <... symlink resumed>) = 0 [pid 7239] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7241] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... futex resumed>) = 0 [pid 7239] <... futex resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7242 [pid 7241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7241] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7239] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7241] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7239] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7238] <... close resumed>) = 0 [pid 7236] creat("./bus", 000 [pid 7235] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7241] <... mprotect resumed>) = 0 [pid 7239] <... mprotect resumed>) = 0 [pid 7238] symlink("/dev/binderfs", "./binderfs" [pid 7241] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7239] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7238] <... symlink resumed>) = 0 [pid 7236] <... creat resumed>) = 4 ./strace-static-x86_64: Process 7242 attached [pid 7240] <... ioctl resumed>) = 0 [pid 7238] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] set_robust_list(0x555556b055e0, 24 [pid 7240] close(3 [pid 7238] <... futex resumed>) = 0 [pid 7236] <... futex resumed>) = 1 [pid 7235] <... futex resumed>) = 0 [pid 7242] <... set_robust_list resumed>) = 0 [pid 7240] <... close resumed>) = 0 [pid 7238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7236] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7235] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] chdir("./120" [pid 7240] mkdir("./bus", 0777 [pid 7238] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7235] <... futex resumed>) = 0 [pid 7242] <... chdir resumed>) = 0 [pid 7240] <... mkdir resumed>) = 0 [pid 7238] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7236] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7235] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7240] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7238] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 7244 attached ./strace-static-x86_64: Process 7243 attached [pid 7242] <... prctl resumed>) = 0 [pid 7241] <... clone resumed>, parent_tid=[7243], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7243 [pid 7239] <... clone resumed>, parent_tid=[7244], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7244 [pid 7244] set_robust_list(0x7fee0b1f39e0, 24 [pid 7243] set_robust_list(0x7fee0b1f39e0, 24 [pid 7241] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... set_robust_list resumed>) = 0 [pid 7243] <... set_robust_list resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7239] <... futex resumed>) = 0 [pid 7244] memfd_create("syzkaller", 0 [pid 7243] memfd_create("syzkaller", 0 [pid 7241] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7239] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7244] <... memfd_create resumed>) = 3 [pid 7243] <... memfd_create resumed>) = 3 [pid 7244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7244] <... mmap resumed>) = 0x7fee02dd3000 [pid 7243] <... mmap resumed>) = 0x7fee02dd3000 [pid 7242] setpgid(0, 0 [pid 7238] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7245 attached [pid 7244] <... write resumed>) = 524288 [pid 7243] <... write resumed>) = 524288 [pid 7242] <... setpgid resumed>) = 0 [pid 7244] munmap(0x7fee02dd3000, 524288 [pid 7243] munmap(0x7fee02dd3000, 524288 [pid 7244] <... munmap resumed>) = 0 [pid 7243] <... munmap resumed>) = 0 [pid 7244] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7243] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7244] <... openat resumed>) = 4 [pid 7243] <... openat resumed>) = 4 [ 103.052970][ T7240] loop4: detected capacity change from 0 to 1024 [ 103.074337][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.082926][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.092473][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7244] ioctl(4, LOOP_SET_FD, 3 [pid 7243] ioctl(4, LOOP_SET_FD, 3 [pid 7242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7240] <... mount resumed>) = 0 [pid 7238] <... clone resumed>, parent_tid=[7245], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7245 [pid 7245] set_robust_list(0x7fee0b1f39e0, 24 [pid 7242] <... openat resumed>) = 3 [pid 7240] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7238] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... set_robust_list resumed>) = 0 [pid 7242] write(3, "1000", 4 [pid 7240] <... openat resumed>) = 3 [pid 7238] <... futex resumed>) = 0 [pid 7245] memfd_create("syzkaller", 0 [pid 7242] <... write resumed>) = 4 [pid 7240] chdir("./bus" [pid 7238] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7245] <... memfd_create resumed>) = 3 [pid 7242] close(3 [pid 7240] <... chdir resumed>) = 0 [pid 7245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7242] <... close resumed>) = 0 [pid 7240] ioctl(4, LOOP_CLR_FD [pid 7245] <... mmap resumed>) = 0x7fee02dd3000 [pid 7242] symlink("/dev/binderfs", "./binderfs" [pid 7240] <... ioctl resumed>) = 0 [pid 7245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7242] <... symlink resumed>) = 0 [pid 7240] close(4 [pid 7245] <... write resumed>) = 524288 [pid 7244] <... ioctl resumed>) = 0 [pid 7243] <... ioctl resumed>) = 0 [pid 7244] close(3 [pid 7243] close(3 [pid 7244] <... close resumed>) = 0 [pid 7243] <... close resumed>) = 0 [pid 7244] mkdir("./bus", 0777 [pid 7243] mkdir("./bus", 0777 [pid 7244] <... mkdir resumed>) = 0 [pid 7243] <... mkdir resumed>) = 0 [pid 7244] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7243] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7245] munmap(0x7fee02dd3000, 524288 [pid 7242] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] <... close resumed>) = 0 [pid 7235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7245] <... munmap resumed>) = 0 [pid 7244] <... mount resumed>) = 0 [pid 7242] <... futex resumed>) = 0 [pid 7240] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7244] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7243] <... mount resumed>) = 0 [pid 7244] <... openat resumed>) = 3 [pid 7244] chdir("./bus") = 0 [pid 7244] ioctl(4, LOOP_CLR_FD) = 0 [pid 7244] close(4 [pid 7245] <... openat resumed>) = 4 [pid 7244] <... close resumed>) = 0 [pid 7243] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7240] <... futex resumed>) = 1 [pid 7237] <... futex resumed>) = 0 [pid 7236] <... write resumed>) = 57344 [pid 7235] <... futex resumed>) = 0 [pid 7245] ioctl(4, LOOP_SET_FD, 3 [ 103.100708][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.101006][ T7244] loop0: detected capacity change from 0 to 1024 [ 103.115685][ T7243] loop3: detected capacity change from 0 to 1024 [ 103.116425][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.130090][ T7236] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7244] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] <... openat resumed>) = 3 [pid 7242] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7240] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7237] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7244] <... futex resumed>) = 1 [pid 7239] <... futex resumed>) = 0 [pid 7244] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7243] chdir("./bus" [pid 7242] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7239] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... futex resumed>) = 0 [pid 7235] <... mmap resumed>) = 0x7fee02e32000 [pid 7244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7243] <... chdir resumed>) = 0 [pid 7242] <... mprotect resumed>) = 0 [pid 7240] creat("./bus", 000 [pid 7239] <... futex resumed>) = 0 [pid 7237] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7236] <... futex resumed>) = 0 [pid 7235] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7245] <... ioctl resumed>) = 0 [pid 7244] creat("./bus", 000 [pid 7243] ioctl(4, LOOP_CLR_FD [pid 7242] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7240] <... creat resumed>) = 4 [pid 7239] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7236] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] close(3 [pid 7244] <... creat resumed>) = 4 [pid 7243] <... ioctl resumed>) = 0 [pid 7240] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] <... mprotect resumed>) = 0 [pid 7245] <... close resumed>) = 0 [pid 7244] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] close(4 [pid 7242] <... clone resumed>, parent_tid=[7246], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7246 [pid 7240] <... futex resumed>) = 1 [pid 7237] <... futex resumed>) = 0 [pid 7235] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7245] mkdir("./bus", 0777 [pid 7244] <... futex resumed>) = 1 [pid 7243] <... close resumed>) = 0 [pid 7242] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... futex resumed>) = 0 [pid 7237] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... mkdir resumed>) = 0 [pid 7244] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7243] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] <... futex resumed>) = 0 [pid 7240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7239] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] <... futex resumed>) = 0 [pid 7235] <... clone resumed>, parent_tid=[7247], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7247 [pid 7245] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7243] <... futex resumed>) = 1 [pid 7242] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7241] <... futex resumed>) = 0 [ 103.150046][ T7245] loop1: detected capacity change from 0 to 1024 [pid 7240] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7239] <... futex resumed>) = 0 [pid 7237] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7235] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7247 attached ./strace-static-x86_64: Process 7246 attached [pid 7245] <... mount resumed>) = 0 [pid 7244] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7243] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7241] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] set_robust_list(0x7fee02e529e0, 24 [pid 7246] set_robust_list(0x7fee0b1f39e0, 24 [pid 7241] <... futex resumed>) = 0 [pid 7247] <... set_robust_list resumed>) = 0 [pid 7246] <... set_robust_list resumed>) = 0 [pid 7241] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] creat("./file1", 000 [pid 7246] memfd_create("syzkaller", 0 [pid 7247] <... creat resumed>) = 5 [pid 7246] <... memfd_create resumed>) = 3 [pid 7243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7235] <... futex resumed>) = 0 [pid 7247] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7247] <... futex resumed>) = 0 [pid 7246] <... mmap resumed>) = 0x7fee02dd3000 [pid 7243] creat("./bus", 000 [pid 7235] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7247] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7245] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7246] <... write resumed>) = 524288 [pid 7246] munmap(0x7fee02dd3000, 524288) = 0 [pid 7246] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 103.174038][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.181344][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.190413][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.197655][ T7246] loop2: detected capacity change from 0 to 1024 [ 103.198602][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.205224][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7246] ioctl(4, LOOP_SET_FD, 3 [pid 7245] <... openat resumed>) = 3 [pid 7243] <... creat resumed>) = 4 [pid 7235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7246] <... ioctl resumed>) = 0 [pid 7245] chdir("./bus" [pid 7243] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] exit_group(0 [pid 7240] <... write resumed>) = 57344 [pid 7237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7246] close(3 [pid 7245] <... chdir resumed>) = 0 [pid 7243] <... futex resumed>) = 1 [pid 7240] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] <... futex resumed>) = ? [pid 7235] <... exit_group resumed>) = ? [pid 7246] <... close resumed>) = 0 [pid 7245] ioctl(4, LOOP_CLR_FD [pid 7243] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7240] <... futex resumed>) = 0 [pid 7237] <... futex resumed>) = 0 [pid 7236] +++ exited with 0 +++ [pid 7247] <... futex resumed>) = ? [pid 7246] mkdir("./bus", 0777 [pid 7245] <... ioctl resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7240] creat("./file1", 000 [pid 7239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7237] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... mkdir resumed>) = 0 [pid 7245] close(4 [pid 7240] <... creat resumed>) = 5 [pid 7246] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7245] <... close resumed>) = 0 [pid 7240] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] +++ exited with 0 +++ [pid 7241] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] +++ exited with 0 +++ [pid 7243] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = 1 [pid 7239] <... futex resumed>) = 0 [pid 7243] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7241] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7245] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... mmap resumed>) = 0x7fee02e32000 [pid 7240] <... futex resumed>) = 1 [pid 7239] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7235, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 103.213167][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.219069][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.226773][ T7240] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.233669][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.248531][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.258092][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7245] <... futex resumed>) = 1 [pid 7240] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... mprotect resumed>) = 0 [pid 7238] <... futex resumed>) = 0 [pid 7237] <... futex resumed>) = 0 [pid 7245] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7238] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7237] exit_group(0 [pid 7245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7240] <... futex resumed>) = ? [pid 7238] <... futex resumed>) = 0 [pid 7237] <... exit_group resumed>) = ? [pid 5081] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7245] creat("./bus", 000 [pid 7240] +++ exited with 0 +++ [pid 7238] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7237] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7245] <... creat resumed>) = 4 [pid 7239] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7237, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7246] <... mount resumed>) = 0 [pid 7245] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 3 [pid 7246] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7245] <... futex resumed>) = 1 [pid 7244] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... clone resumed>, parent_tid=[7248], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7248 [pid 7238] <... futex resumed>) = 0 [pid 5081] fstat(3, [pid 7246] <... openat resumed>) = 3 [pid 7245] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7244] <... futex resumed>) = 0 [pid 7239] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7238] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7246] chdir("./bus" [pid 7245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7244] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... futex resumed>) = 0 [pid 7238] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7248 attached [pid 7246] <... chdir resumed>) = 0 [pid 7245] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7239] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7238] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7248] set_robust_list(0x7fee02e529e0, 24 [pid 7246] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 3 [pid 7248] <... set_robust_list resumed>) = 0 [pid 7246] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(3, [pid 7248] creat("./file1", 000 [pid 7246] close(4 [pid 5081] lstat("./121/binderfs", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7248] <... creat resumed>) = 5 [pid 7246] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] getdents64(3, [pid 7248] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] unlink("./121/binderfs" [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7248] <... futex resumed>) = 0 [pid 7246] <... futex resumed>) = 1 [pid 7242] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... unlink resumed>) = 0 [pid 5080] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7248] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7246] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] exit_group(0 [pid 5081] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7248] <... futex resumed>) = ? [pid 7246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7244] <... futex resumed>) = ? [pid 7242] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7239] <... exit_group resumed>) = ? [ 103.268731][ T7244] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.269615][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.301308][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.302844][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] lstat("./118/binderfs", [pid 7248] +++ exited with 0 +++ [pid 7246] creat("./bus", 000 [pid 7244] +++ exited with 0 +++ [pid 7242] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7246] <... creat resumed>) = 4 [pid 7241] <... mmap resumed>) = 0x7fee02e32000 [pid 7239] +++ exited with 0 +++ [pid 5080] unlink("./118/binderfs" [pid 7246] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7239, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7246] <... futex resumed>) = 1 [pid 7242] <... futex resumed>) = 0 [pid 7241] <... mprotect resumed>) = 0 [pid 5080] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7246] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7242] <... futex resumed>) = 0 [pid 5074] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7246] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7242] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7249 attached [pid 5074] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./119/binderfs") = 0 [pid 7238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7238] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7241] <... clone resumed>, parent_tid=[7249], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7249 [pid 7238] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7249] set_robust_list(0x7fee02e529e0, 24 [pid 7241] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7238] <... mprotect resumed>) = 0 [ 103.322989][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.323298][ T9] hfsplus: b-tree write err: -5, ino 4 [ 103.340338][ T11] hfsplus: b-tree write err: -5, ino 4 [ 103.343977][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.352979][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.361633][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.361843][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7238] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7250], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7250 [pid 7238] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7249] <... set_robust_list resumed>) = 0 [pid 7241] <... futex resumed>) = 0 [pid 7249] creat("./file1", 000 [pid 7242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7241] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7250 attached [pid 7249] <... creat resumed>) = 5 [pid 7242] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7242] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7242] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... umount2 resumed>) = 0 [pid 7242] <... clone resumed>, parent_tid=[7251], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7251 [pid 7242] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 103.369249][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.377767][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.381834][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.391526][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.406541][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.414437][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7242] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = 0 [pid 5074] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7250] set_robust_list(0x7fee02e529e0, 24 [pid 7249] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] lstat("./119/bus", [pid 5081] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7250] <... set_robust_list resumed>) = 0 [pid 7249] <... futex resumed>) = 1 [pid 7241] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] fstat(4, [pid 5081] getdents64(4, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5081] close(4 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5081] rmdir("./121/bus" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] close(4 [pid 5081] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 7250] creat("./file1", 000 [pid 7249] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./119/bus" [pid 5081] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [ 103.422279][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] getdents64(3, [pid 5081] rmdir("./121" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7251 attached [pid 5081] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 7251] set_robust_list(0x7fee02e529e0, 24 [pid 5081] mkdir("./122", 0777 [pid 5074] <... close resumed>) = 0 [pid 7251] <... set_robust_list resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5074] rmdir("./119" [pid 7251] creat("./file1", 000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5074] mkdir("./120", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] <... mkdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./118/bus", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7252 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7250] <... creat resumed>) = 5 [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7253 ./strace-static-x86_64: Process 7252 attached [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7252] set_robust_list(0x555556b055e0, 24 [pid 5080] getdents64(4, [pid 7252] <... set_robust_list resumed>) = 0 [pid 7250] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7253 attached [pid 7252] chdir("./122" [pid 7251] <... creat resumed>) = 5 [pid 7250] <... futex resumed>) = 0 [pid 7246] <... write resumed>) = 57344 [pid 7245] <... write resumed>) = 57344 [pid 7243] <... write resumed>) = 57344 [pid 5080] getdents64(4, [pid 7253] set_robust_list(0x555556b055e0, 24 [pid 7252] <... chdir resumed>) = 0 [pid 7251] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7250] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7246] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] exit_group(0 [pid 7241] exit_group(0 [pid 7238] exit_group(0 [pid 7253] <... set_robust_list resumed>) = 0 [pid 7252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7251] <... futex resumed>) = ? [pid 7250] <... futex resumed>) = ? [pid 7249] <... futex resumed>) = ? [pid 7246] <... futex resumed>) = ? [pid 7245] <... futex resumed>) = ? [pid 7243] <... futex resumed>) = ? [pid 7242] <... exit_group resumed>) = ? [pid 7241] <... exit_group resumed>) = ? [pid 7238] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7253] chdir("./120" [pid 7251] +++ exited with 0 +++ [pid 7250] +++ exited with 0 +++ [pid 7249] +++ exited with 0 +++ [pid 7246] +++ exited with 0 +++ [pid 7245] +++ exited with 0 +++ [pid 7243] +++ exited with 0 +++ [pid 7242] +++ exited with 0 +++ [pid 7241] +++ exited with 0 +++ [pid 7253] <... chdir resumed>) = 0 [pid 7253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7253] setpgid(0, 0) = 0 [pid 7253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7238] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7242, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7238, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7241, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5080] close(4 [pid 7253] <... openat resumed>) = 3 [pid 7252] <... prctl resumed>) = 0 [pid 7253] write(3, "1000", 4 [pid 5080] <... close resumed>) = 0 [pid 7253] <... write resumed>) = 4 [pid 7253] close(3) = 0 [pid 5077] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7253] symlink("/dev/binderfs", "./binderfs" [pid 7252] setpgid(0, 0 [pid 5080] rmdir("./118/bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7253] <... symlink resumed>) = 0 [pid 7253] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7253] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7252] <... setpgid resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7253] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] getdents64(3, [pid 5077] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7254 attached [pid 7252] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] fstat(3, [pid 5076] fstat(3, [pid 5075] fstat(3, [pid 7252] write(3, "1000", 4 [pid 5080] close(3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7254] set_robust_list(0x7fee0b1f39e0, 24 [pid 7253] <... clone resumed>, parent_tid=[7254], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7254 [pid 7252] <... write resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 7254] <... set_robust_list resumed>) = 0 [pid 7253] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] close(3 [pid 5080] rmdir("./118" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7254] memfd_create("syzkaller", 0 [pid 7253] <... futex resumed>) = 0 [pid 7252] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7254] <... memfd_create resumed>) = 3 [pid 7253] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7252] symlink("/dev/binderfs", "./binderfs" [pid 5080] mkdir("./119", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7252] <... symlink resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] lstat("./119/binderfs", [pid 5076] lstat("./120/binderfs", [pid 5075] lstat("./119/binderfs", [pid 7252] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7254] <... mmap resumed>) = 0x7fee02dd3000 [pid 7252] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] unlink("./119/binderfs" [pid 5076] unlink("./120/binderfs" [pid 5075] unlink("./119/binderfs" [pid 7252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7252] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 103.446970][ T7245] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.458797][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.466658][ T7243] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.482708][ T7246] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7252] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 7252] <... mprotect resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7252] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./119/bus", [pid 7252] <... clone resumed>, parent_tid=[7255], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7255 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7256 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7252] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7252] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7252] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./119/bus") = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./119") = 0 [pid 5077] mkdir("./120", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7257 ./strace-static-x86_64: Process 7255 attached [pid 7255] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7255] memfd_create("syzkaller", 0) = 3 [pid 7255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7257 attached [pid 7257] set_robust_list(0x555556b055e0, 24) = 0 [pid 7257] chdir("./120") = 0 [pid 7257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7257] setpgid(0, 0) = 0 [pid 7257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7257] <... openat resumed>) = 3 [pid 7257] write(3, "1000", 4) = 4 [pid 7257] close(3) = 0 [pid 7254] <... write resumed>) = 524288 [pid 7257] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7256 attached ) = 0 [pid 7254] munmap(0x7fee02dd3000, 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7257] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] <... futex resumed>) = 0 [pid 7254] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] lstat("./120/bus", [pid 5075] lstat("./119/bus", [pid 7257] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7256] set_robust_list(0x555556b055e0, 24 [pid 7254] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7257] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] <... mprotect resumed>) = 0 [pid 7256] <... set_robust_list resumed>) = 0 [pid 7254] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7257] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 103.512699][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 103.512943][ T11] hfsplus: b-tree write err: -5, ino 4 [ 103.548012][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7256] chdir("./119" [pid 7255] <... write resumed>) = 524288 [pid 7254] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7255] munmap(0x7fee02dd3000, 524288 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 7257] <... clone resumed>, parent_tid=[7258], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7258 [pid 7255] <... munmap resumed>) = 0 [pid 5076] fstat(4, [pid 5075] fstat(4, [pid 7257] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7257] <... futex resumed>) = 0 [pid 7255] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 7257] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7255] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7256] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 7256] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] close(4 [pid 7256] <... prctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7256] setpgid(0, 0 [pid 5076] rmdir("./120/bus" [pid 5075] rmdir("./119/bus" [pid 7256] <... setpgid resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7258 attached [pid 7256] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7258] set_robust_list(0x7fee0b1f39e0, 24 [pid 7256] write(3, "1000", 4 [pid 5076] close(3 [pid 5075] close(3 [pid 7258] <... set_robust_list resumed>) = 0 [pid 7256] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7258] memfd_create("syzkaller", 0 [pid 7256] close(3 [pid 5076] rmdir("./120" [pid 5075] rmdir("./119" [pid 7258] <... memfd_create resumed>) = 3 [pid 7256] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7256] symlink("/dev/binderfs", "./binderfs" [pid 7255] <... ioctl resumed>) = 0 [pid 5076] mkdir("./121", 0777 [pid 5075] mkdir("./120", 0777 [pid 7258] <... mmap resumed>) = 0x7fee02dd3000 [pid 7256] <... symlink resumed>) = 0 [pid 7255] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7256] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7255] mkdir("./bus", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 7255] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7258] <... write resumed>) = 524288 [pid 7256] <... futex resumed>) = 0 [pid 7255] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7255] <... mount resumed>) = 0 [pid 7254] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5075] close(3 [pid 7256] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7254] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7256] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7255] <... openat resumed>) = 3 [pid 7254] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7256] <... mprotect resumed>) = 0 [pid 7255] chdir("./bus" [pid 7254] mkdir("./bus", 0777 [pid 7256] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7255] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7259 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7260 [pid 7255] ioctl(4, LOOP_CLR_FD [pid 7254] <... mkdir resumed>) = 0 [pid 7258] munmap(0x7fee02dd3000, 524288 [pid 7256] <... clone resumed>, parent_tid=[7261], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7261 [pid 7255] <... ioctl resumed>) = 0 [pid 7254] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7258] <... munmap resumed>) = 0 [pid 7256] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7255] close(4 [pid 7258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7256] <... futex resumed>) = 0 [pid 7255] <... close resumed>) = 0 ./strace-static-x86_64: Process 7259 attached [pid 7258] <... openat resumed>) = 4 [pid 7256] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 103.569076][ T7254] loop0: detected capacity change from 0 to 1024 [ 103.571820][ T7255] loop5: detected capacity change from 0 to 1024 [pid 7255] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] set_robust_list(0x555556b055e0, 24 [pid 7258] ioctl(4, LOOP_SET_FD, 3 [pid 7255] <... futex resumed>) = 1 [pid 7252] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7261 attached ./strace-static-x86_64: Process 7260 attached [pid 7259] <... set_robust_list resumed>) = 0 [pid 7255] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7254] <... mount resumed>) = 0 [pid 7252] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] set_robust_list(0x7fee0b1f39e0, 24 [pid 7260] set_robust_list(0x555556b055e0, 24 [pid 7259] chdir("./121" [pid 7255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7254] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7252] <... futex resumed>) = 0 [pid 7261] <... set_robust_list resumed>) = 0 [pid 7260] <... set_robust_list resumed>) = 0 [pid 7259] <... chdir resumed>) = 0 [pid 7255] creat("./bus", 000 [pid 7254] <... openat resumed>) = 3 [pid 7252] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7261] memfd_create("syzkaller", 0 [pid 7260] chdir("./120" [pid 7259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7255] <... creat resumed>) = 4 [pid 7254] chdir("./bus" [pid 7261] <... memfd_create resumed>) = 3 [pid 7260] <... chdir resumed>) = 0 [pid 7259] <... prctl resumed>) = 0 [pid 7255] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7254] <... chdir resumed>) = 0 [pid 7261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7259] setpgid(0, 0 [pid 7255] <... futex resumed>) = 1 [pid 7254] ioctl(4, LOOP_CLR_FD [pid 7252] <... futex resumed>) = 0 [pid 7259] <... setpgid resumed>) = 0 [pid 7255] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7254] <... ioctl resumed>) = 0 [pid 7252] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... mmap resumed>) = 0x7fee02dd3000 [pid 7260] <... prctl resumed>) = 0 [pid 7259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7254] close(4 [pid 7252] <... futex resumed>) = 0 [pid 7259] <... openat resumed>) = 3 [pid 7255] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7252] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7260] setpgid(0, 0 [pid 7259] write(3, "1000", 4 [pid 7254] <... close resumed>) = 0 [pid 7260] <... setpgid resumed>) = 0 [pid 7259] <... write resumed>) = 4 [pid 7254] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] close(3 [pid 7254] <... futex resumed>) = 1 [pid 7253] <... futex resumed>) = 0 [pid 7260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7259] <... close resumed>) = 0 [pid 7254] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] <... openat resumed>) = 3 [pid 7259] symlink("/dev/binderfs", "./binderfs" [pid 7254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7253] <... futex resumed>) = 0 [pid 7260] write(3, "1000", 4 [pid 7259] <... symlink resumed>) = 0 [pid 7258] <... ioctl resumed>) = 0 [pid 7254] creat("./bus", 000 [pid 7253] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7260] <... write resumed>) = 4 [pid 7259] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] close(3 [pid 7260] close(3 [pid 7259] <... futex resumed>) = 0 [pid 7258] <... close resumed>) = 0 [pid 7254] <... creat resumed>) = 4 [pid 7260] <... close resumed>) = 0 [pid 7259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7258] mkdir("./bus", 0777 [pid 7254] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... write resumed>) = 524288 [pid 7260] symlink("/dev/binderfs", "./binderfs" [pid 7259] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7258] <... mkdir resumed>) = 0 [pid 7254] <... futex resumed>) = 1 [pid 7253] <... futex resumed>) = 0 [pid 7259] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7261] munmap(0x7fee02dd3000, 524288 [pid 7260] <... symlink resumed>) = 0 [pid 7259] <... mprotect resumed>) = 0 [pid 7258] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7254] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... munmap resumed>) = 0 [pid 7260] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7253] <... futex resumed>) = 0 [pid 7261] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7260] <... futex resumed>) = 0 [pid 7258] <... mount resumed>) = 0 [pid 7254] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 103.610805][ T7258] loop3: detected capacity change from 0 to 1024 [ 103.627205][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.640126][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7253] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7262 attached [pid 7261] <... openat resumed>) = 4 [pid 7260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7259] <... clone resumed>, parent_tid=[7262], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7262 [pid 7258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7259] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] <... openat resumed>) = 3 [pid 7259] <... futex resumed>) = 0 [pid 7259] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7258] chdir("./bus" [pid 7261] ioctl(4, LOOP_SET_FD, 3 [pid 7260] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7258] <... chdir resumed>) = 0 [pid 7258] ioctl(4, LOOP_CLR_FD) = 0 [pid 7258] close(4) = 0 [pid 7258] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] <... futex resumed>) = 0 [pid 7258] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7257] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7257] <... futex resumed>) = 0 [pid 7258] creat("./bus", 000 [pid 7257] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7258] <... creat resumed>) = 4 [pid 7258] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] <... futex resumed>) = 0 [pid 7258] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7257] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7257] <... futex resumed>) = 0 [pid 7262] set_robust_list(0x7fee0b1f39e0, 24 [pid 7261] <... ioctl resumed>) = 0 [pid 7260] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7258] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7257] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7262] <... set_robust_list resumed>) = 0 [pid 7261] close(3 [pid 7260] <... mprotect resumed>) = 0 [pid 7252] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7252] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] memfd_create("syzkaller", 0 [pid 7252] <... futex resumed>) = 0 [pid 7262] <... memfd_create resumed>) = 3 [pid 7260] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7261] <... close resumed>) = 0 [pid 7262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7252] <... mmap resumed>) = 0x7fee02e32000 [pid 7260] <... clone resumed>, parent_tid=[7263], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7263 [pid 7252] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7262] <... mmap resumed>) = 0x7fee02dd3000 [pid 7261] mkdir("./bus", 0777 [pid 7260] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] <... mprotect resumed>) = 0 [pid 7252] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7263 attached [pid 7262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7261] <... mkdir resumed>) = 0 [pid 7260] <... futex resumed>) = 0 [pid 7252] <... clone resumed>, parent_tid=[7264], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7264 [pid 7252] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7252] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7264 attached [pid 7264] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7264] creat("./file1", 000 [pid 7262] <... write resumed>) = 524288 [pid 7261] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7260] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 103.656255][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.665744][ T7261] loop4: detected capacity change from 0 to 1024 [ 103.668886][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.682349][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.693986][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7253] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] set_robust_list(0x7fee0b1f39e0, 24 [pid 7262] munmap(0x7fee02dd3000, 524288 [pid 7261] <... mount resumed>) = 0 [pid 7253] <... futex resumed>) = 0 [pid 7263] <... set_robust_list resumed>) = 0 [pid 7262] <... munmap resumed>) = 0 [pid 7261] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7263] memfd_create("syzkaller", 0 [pid 7262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7261] <... openat resumed>) = 3 [pid 7253] <... mmap resumed>) = 0x7fee02e32000 [pid 7263] <... memfd_create resumed>) = 3 [pid 7262] <... openat resumed>) = 4 [pid 7261] chdir("./bus" [pid 7253] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7257] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7257] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7257] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7265], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7265 [pid 7257] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7257] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7264] <... creat resumed>) = 5 [pid 7264] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7252] <... futex resumed>) = 0 [pid 7264] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7265 attached [pid 7265] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7265] creat("./file1", 000 [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7262] ioctl(4, LOOP_SET_FD, 3 [pid 7261] <... chdir resumed>) = 0 [pid 7253] <... mprotect resumed>) = 0 [ 103.705927][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.715108][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.722630][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.723541][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.730986][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.742655][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.752647][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7263] <... mmap resumed>) = 0x7fee02dd3000 [pid 7265] <... creat resumed>) = 5 [pid 7265] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] <... futex resumed>) = 0 [pid 7265] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7262] <... ioctl resumed>) = 0 [pid 7261] ioctl(4, LOOP_CLR_FD [pid 7253] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7263] <... write resumed>) = 524288 [pid 7262] close(3 [pid 7261] <... ioctl resumed>) = 0 [pid 7255] <... write resumed>) = 57344 [pid 7254] <... write resumed>) = 57344 [pid 7261] close(4 [pid 7253] <... clone resumed>, parent_tid=[7266], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7266 [pid 7261] <... close resumed>) = 0 [pid 7253] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] <... close resumed>) = 0 [pid 7261] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7253] <... futex resumed>) = 0 [pid 7262] mkdir("./bus", 0777 [pid 7261] <... futex resumed>) = 1 [pid 7256] <... futex resumed>) = 0 [pid 7253] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7262] <... mkdir resumed>) = 0 [pid 7261] creat("./bus", 000 [pid 7256] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] munmap(0x7fee02dd3000, 524288 [pid 7262] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7261] <... creat resumed>) = 4 [pid 7256] <... futex resumed>) = 0 [pid 7256] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7261] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7256] <... futex resumed>) = 0 [pid 7261] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7256] <... futex resumed>) = 0 [pid 7261] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7256] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7266 attached [pid 7263] <... munmap resumed>) = 0 [pid 7255] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7254] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7263] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7266] creat("./file1", 000) = 5 [pid 7263] <... openat resumed>) = 4 [pid 7266] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 103.753166][ T7262] loop2: detected capacity change from 0 to 1024 [ 103.764813][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.770215][ T7255] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.775652][ T7258] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.781063][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.781074][ T7254] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.802224][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7263] ioctl(4, LOOP_SET_FD, 3 [pid 7266] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] <... futex resumed>) = 0 [pid 7253] exit_group(0 [pid 7252] exit_group(0 [pid 7266] <... futex resumed>) = ? [pid 7264] <... futex resumed>) = ? [pid 7255] <... futex resumed>) = ? [pid 7253] <... exit_group resumed>) = ? [pid 7252] <... exit_group resumed>) = ? [pid 7266] +++ exited with 0 +++ [pid 7264] +++ exited with 0 +++ [pid 7262] <... mount resumed>) = 0 [pid 7262] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7262] chdir("./bus") = 0 [pid 7255] +++ exited with 0 +++ [pid 7252] +++ exited with 0 +++ [pid 7262] ioctl(4, LOOP_CLR_FD) = 0 [pid 7254] <... futex resumed>) = ? [pid 7262] close(4) = 0 [pid 7254] +++ exited with 0 +++ [pid 7253] +++ exited with 0 +++ [pid 7262] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7259] <... futex resumed>) = 0 [pid 7258] <... write resumed>) = 57344 [pid 7262] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7259] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7259] <... futex resumed>) = 0 [pid 7258] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] creat("./bus", 000 [pid 7259] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7262] <... creat resumed>) = 4 [pid 7258] <... futex resumed>) = 0 [pid 7262] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7259] <... futex resumed>) = 0 [pid 7258] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7262] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7259] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7259] <... futex resumed>) = 0 [pid 7262] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7259] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7263] <... ioctl resumed>) = 0 [pid 7263] close(3) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7252, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7253, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7263] mkdir("./bus", 0777 [pid 5081] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7257] exit_group(0 [pid 7263] <... mkdir resumed>) = 0 [pid 7263] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7265] <... futex resumed>) = ? [pid 7258] <... futex resumed>) = ? [pid 7257] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7265] +++ exited with 0 +++ [pid 7258] +++ exited with 0 +++ [pid 7257] +++ exited with 0 +++ [pid 5081] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7257, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] fstat(3, [pid 5077] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] fstat(3, [pid 5081] getdents64(3, [pid 5077] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(3, [pid 5081] lstat("./122/binderfs", [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./122/binderfs" [pid 5077] getdents64(3, [pid 5074] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [ 103.808759][ T7263] loop1: detected capacity change from 0 to 1024 [ 103.821970][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.830003][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.838843][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.842588][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] lstat("./120/binderfs", [pid 7256] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7256] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./120/binderfs" [pid 7256] <... futex resumed>) = 0 [pid 5077] lstat("./120/binderfs", [pid 5074] <... unlink resumed>) = 0 [pid 7263] <... mount resumed>) = 0 [pid 7263] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7263] chdir("./bus") = 0 [pid 7263] ioctl(4, LOOP_CLR_FD) = 0 [pid 7263] close(4) = 0 [pid 7256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7263] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7260] <... futex resumed>) = 0 [pid 7263] creat("./bus", 000 [pid 7260] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] <... creat resumed>) = 4 [pid 7260] <... futex resumed>) = 0 [pid 7263] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7263] <... futex resumed>) = 0 [pid 7260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7263] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7260] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7260] <... futex resumed>) = 0 [pid 7259] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] <... write resumed>) = 57344 [pid 7260] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7259] <... futex resumed>) = 0 [pid 7256] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] unlink("./120/binderfs" [pid 7261] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7261] <... futex resumed>) = 0 [pid 7259] <... mmap resumed>) = 0x7fee02e32000 [pid 7261] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7259] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7259] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7267], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7267 [pid 7259] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7259] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7267 attached [pid 7267] set_robust_list(0x7fee02e529e0, 24) = 0 [ 103.859189][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 103.866649][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.874091][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.881566][ T7261] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.888965][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.888977][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.889118][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7267] creat("./file1", 000 [pid 7256] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 7256] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7256] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] lstat("./122/bus", [pid 7267] <... creat resumed>) = 5 [pid 7267] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7259] <... futex resumed>) = 0 [ 103.899266][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.913627][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.926562][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 103.930012][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.935408][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.949691][ T7263] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.950318][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7267] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7256] <... clone resumed>, parent_tid=[7268], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7268 [pid 5081] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7256] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7256] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7260] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7256] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 4 [pid 7260] <... futex resumed>) = 0 [pid 7260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] fstat(4, [pid 7260] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 7260] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7260] <... mprotect resumed>) = 0 [pid 7260] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7260] <... clone resumed>, parent_tid=[7269], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7269 [pid 5081] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 7260] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5074] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7260] <... futex resumed>) = 0 [pid 5081] rmdir("./122/bus" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... rmdir resumed>) = 0 [pid 5074] lstat("./120/bus", [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] close(3) = 0 [pid 5074] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] rmdir("./122") = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] mkdir("./123", 0777 [pid 5074] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] fstat(4, [pid 5081] <... openat resumed>) = 3 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7268 attached [pid 7268] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7268] creat("./file1", 000) = 5 ./strace-static-x86_64: Process 7269 attached [pid 7269] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7269] creat("./file1", 000 [pid 7268] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7268] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7269] <... creat resumed>) = 5 [pid 7256] <... futex resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(4, [pid 7256] exit_group(0) = ? [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7261] <... futex resumed>) = ? [pid 7261] +++ exited with 0 +++ [pid 5081] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7270 attached [pid 7269] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7268] <... futex resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 7269] <... futex resumed>) = 1 [pid 7268] +++ exited with 0 +++ [pid 7260] <... futex resumed>) = 0 [pid 7256] +++ exited with 0 +++ [pid 7269] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] close(4 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7270 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7256, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7270] set_robust_list(0x555556b055e0, 24 [pid 5074] <... close resumed>) = 0 [pid 7270] <... set_robust_list resumed>) = 0 [pid 5077] lstat("./120/bus", [pid 7262] <... write resumed>) = 57344 [pid 5074] rmdir("./120/bus" [pid 7270] chdir("./123" [pid 7262] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7270] <... chdir resumed>) = 0 [pid 7262] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 7270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7262] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 7270] <... prctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7270] setpgid(0, 0 [pid 5077] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7270] <... setpgid resumed>) = 0 [pid 5080] fstat(3, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... openat resumed>) = 4 [pid 7270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7259] exit_group(0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(4, [pid 5074] close(3 [pid 7270] <... openat resumed>) = 3 [pid 7267] <... futex resumed>) = ? [pid 7259] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7270] write(3, "1000", 4 [pid 7267] +++ exited with 0 +++ [pid 7262] <... futex resumed>) = ? [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 7270] <... write resumed>) = 4 [pid 5080] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7270] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5074] rmdir("./120" [pid 7270] <... close resumed>) = 0 [pid 5080] lstat("./119/binderfs", [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7270] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] close(4 [pid 7262] +++ exited with 0 +++ [pid 7259] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 7270] <... symlink resumed>) = 0 [pid 7263] <... write resumed>) = 57344 [pid 5080] unlink("./119/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7259, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5074] mkdir("./121", 0777 [pid 7270] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5077] rmdir("./120/bus" [pid 5074] <... mkdir resumed>) = 0 [pid 7270] <... futex resumed>) = 0 [pid 5080] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 7270] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7270] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] close(3 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7270] <... mprotect resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] close(3 [pid 7270] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 103.974346][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [ 103.991694][ T7262] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] rmdir("./120" [pid 5076] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 7263] <... futex resumed>) = 0 [pid 7260] exit_group(0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7270] <... clone resumed>, parent_tid=[7271], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7271 [pid 7269] <... futex resumed>) = ? [pid 7260] <... exit_group resumed>) = ? [pid 5080] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] mkdir("./121", 0777 [pid 5076] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7270] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7272 [pid 7270] <... futex resumed>) = 0 [pid 7269] +++ exited with 0 +++ [pid 5080] lstat("./119/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] fstat(3, [pid 7270] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7263] +++ exited with 0 +++ [pid 7260] +++ exited with 0 +++ [pid 5080] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7260, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] close(3 [pid 5076] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] fstat(4, [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] lstat("./121/binderfs", [pid 5075] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(4, [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7273 [pid 5076] unlink("./121/binderfs" [pid 5075] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 5076] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] close(4 [pid 5075] getdents64(3, [pid 5080] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7272 attached [pid 5080] rmdir("./119/bus" [pid 5075] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7272] set_robust_list(0x555556b055e0, 24 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7272] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, [pid 5075] lstat("./120/binderfs", [pid 7272] chdir("./121" [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7272] <... chdir resumed>) = 0 [pid 5080] close(3 [pid 5075] unlink("./120/binderfs" [pid 7272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7272] <... prctl resumed>) = 0 [pid 5080] rmdir("./119" [pid 5075] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7272] setpgid(0, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7272] <... setpgid resumed>) = 0 [pid 5080] mkdir("./120", 0777 [pid 7272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... mkdir resumed>) = 0 [pid 7272] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7272] write(3, "1000", 4 [pid 5080] <... openat resumed>) = 3 [pid 7272] <... write resumed>) = 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7272] close(3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7272] <... close resumed>) = 0 [pid 5080] close(3 [pid 7272] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... close resumed>) = 0 [pid 7272] <... symlink resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7272] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7274 [pid 7272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7272] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7272] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7275], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7275 [pid 7272] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7272] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7274 attached [pid 7274] set_robust_list(0x555556b055e0, 24) = 0 [pid 7274] chdir("./120") = 0 [pid 7274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7274] setpgid(0, 0) = 0 [pid 7274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 7273 attached ./strace-static-x86_64: Process 7275 attached ./strace-static-x86_64: Process 7271 attached [pid 7274] write(3, "1000", 4 [pid 7273] set_robust_list(0x555556b055e0, 24 [pid 7271] set_robust_list(0x7fee0b1f39e0, 24 [pid 7273] <... set_robust_list resumed>) = 0 [pid 7271] <... set_robust_list resumed>) = 0 [pid 7273] chdir("./121" [pid 7271] memfd_create("syzkaller", 0 [pid 7275] set_robust_list(0x7fee0b1f39e0, 24 [pid 7273] <... chdir resumed>) = 0 [pid 7271] <... memfd_create resumed>) = 3 [pid 7275] <... set_robust_list resumed>) = 0 [pid 7274] <... write resumed>) = 4 [pid 7273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7273] <... prctl resumed>) = 0 [pid 7271] <... mmap resumed>) = 0x7fee02dd3000 [pid 5076] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7275] memfd_create("syzkaller", 0 [pid 7274] close(3 [pid 7273] setpgid(0, 0 [pid 7271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = 0 [pid 7275] <... memfd_create resumed>) = 3 [pid 7274] <... close resumed>) = 0 [pid 7273] <... setpgid resumed>) = 0 [pid 7271] <... write resumed>) = 524288 [pid 5075] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7274] symlink("/dev/binderfs", "./binderfs" [pid 7273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7271] munmap(0x7fee02dd3000, 524288 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7275] <... mmap resumed>) = 0x7fee02dd3000 [pid 7274] <... symlink resumed>) = 0 [pid 7273] <... openat resumed>) = 3 [pid 7271] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] lstat("./120/bus", [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(4 [pid 5075] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7274] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] write(3, "1000", 4 [pid 7271] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] rmdir("./121/bus" [pid 5075] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7274] <... futex resumed>) = 0 [pid 7273] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7273] close(3 [pid 7271] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] fstat(4, [pid 7274] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7273] <... close resumed>) = 0 [pid 7271] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [ 104.017105][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.049895][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 104.058668][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7274] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7273] symlink("/dev/binderfs", "./binderfs" [pid 5076] close(3 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./121" [pid 5075] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./122", 0777 [pid 5075] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] rmdir("./120/bus" [pid 5076] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(3, [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] close(3 [pid 7274] <... mprotect resumed>) = 0 [pid 7273] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] rmdir("./120") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7276 [pid 5075] mkdir("./121", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7275] <... write resumed>) = 524288 [pid 7274] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7273] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] munmap(0x7fee02dd3000, 524288 [pid 7273] <... futex resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7277 [pid 7275] <... munmap resumed>) = 0 [pid 7274] <... clone resumed>, parent_tid=[7278], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7278 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7277 attached [pid 7275] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7274] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7277] set_robust_list(0x555556b055e0, 24 [pid 7275] <... openat resumed>) = 4 [pid 7274] <... futex resumed>) = 0 [pid 7273] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7276 attached [pid 7277] <... set_robust_list resumed>) = 0 [pid 7275] ioctl(4, LOOP_SET_FD, 3 [pid 7274] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7273] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 7278 attached [pid 7276] set_robust_list(0x555556b055e0, 24 [pid 7278] set_robust_list(0x7fee0b1f39e0, 24 [pid 7276] <... set_robust_list resumed>) = 0 [pid 7278] <... set_robust_list resumed>) = 0 [pid 7276] chdir("./122" [pid 7278] memfd_create("syzkaller", 0 [pid 7276] <... chdir resumed>) = 0 [pid 7278] <... memfd_create resumed>) = 3 [pid 7276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7276] <... prctl resumed>) = 0 [pid 7278] <... mmap resumed>) = 0x7fee02dd3000 [pid 7276] setpgid(0, 0) = 0 [pid 7276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7277] chdir("./121" [pid 7276] <... openat resumed>) = 3 [pid 7273] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7277] <... chdir resumed>) = 0 [pid 7276] write(3, "1000", 4 [pid 7271] <... ioctl resumed>) = 0 [pid 7277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7276] <... write resumed>) = 4 [pid 7273] <... clone resumed>, parent_tid=[7279], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7279 [pid 7277] <... prctl resumed>) = 0 [pid 7276] close(3 [pid 7273] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] close(3./strace-static-x86_64: Process 7279 attached [pid 7277] setpgid(0, 0 [pid 7276] <... close resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7277] <... setpgid resumed>) = 0 [pid 7276] symlink("/dev/binderfs", "./binderfs" [pid 7273] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7271] <... close resumed>) = 0 [pid 7277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7276] <... symlink resumed>) = 0 [pid 7271] mkdir("./bus", 0777 [pid 7279] set_robust_list(0x7fee0b1f39e0, 24 [pid 7277] <... openat resumed>) = 3 [pid 7276] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] <... mkdir resumed>) = 0 [pid 7275] <... ioctl resumed>) = 0 [pid 7279] <... set_robust_list resumed>) = 0 [pid 7278] <... write resumed>) = 524288 [pid 7277] write(3, "1000", 4 [pid 7276] <... futex resumed>) = 0 [pid 7275] close(3 [pid 7271] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7279] memfd_create("syzkaller", 0 [pid 7278] munmap(0x7fee02dd3000, 524288 [pid 7277] <... write resumed>) = 4 [pid 7276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7279] <... memfd_create resumed>) = 3 [pid 7277] close(3 [pid 7276] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7275] <... close resumed>) = 0 [pid 7279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7278] <... munmap resumed>) = 0 [pid 7277] <... close resumed>) = 0 [pid 7276] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7275] mkdir("./bus", 0777 [pid 7271] <... mount resumed>) = 0 [pid 7279] <... mmap resumed>) = 0x7fee02dd3000 [pid 7277] symlink("/dev/binderfs", "./binderfs" [pid 7276] <... mprotect resumed>) = 0 [pid 7271] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7277] <... symlink resumed>) = 0 [pid 7276] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7277] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] <... openat resumed>) = 3 [pid 7277] <... futex resumed>) = 0 [pid 7276] <... clone resumed>, parent_tid=[7280], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7280 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7276] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] chdir("./bus" [pid 7277] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7276] <... futex resumed>) = 0 [pid 7271] <... chdir resumed>) = 0 [pid 7277] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7276] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7277] <... mprotect resumed>) = 0 [pid 7271] ioctl(4, LOOP_CLR_FD [pid 7277] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7271] <... ioctl resumed>) = 0 [pid 7271] close(4 [pid 7277] <... clone resumed>, parent_tid=[7281], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7281 [pid 7275] <... mkdir resumed>) = 0 [pid 7271] <... close resumed>) = 0 [pid 7277] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7277] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7271] <... futex resumed>) = 1 [pid 7270] <... futex resumed>) = 0 [pid 7278] <... openat resumed>) = 4 [pid 7270] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] ioctl(4, LOOP_SET_FD, 3 [pid 7270] <... futex resumed>) = 0 [pid 7271] creat("./bus", 000 [pid 7270] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7281 attached [pid 7279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7281] set_robust_list(0x7fee0b1f39e0, 24 [pid 7275] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7271] <... creat resumed>) = 4 [pid 7281] <... set_robust_list resumed>) = 0 [ 104.095937][ T7271] loop5: detected capacity change from 0 to 1024 [ 104.118018][ T7275] loop0: detected capacity change from 0 to 1024 [pid 7271] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] memfd_create("syzkaller", 0 [pid 7271] <... futex resumed>) = 1 [pid 7270] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7280 attached [pid 7281] <... memfd_create resumed>) = 3 [pid 7271] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7270] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] set_robust_list(0x7fee0b1f39e0, 24 [pid 7271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7270] <... futex resumed>) = 0 [pid 7281] <... mmap resumed>) = 0x7fee02dd3000 [pid 7280] <... set_robust_list resumed>) = 0 [pid 7270] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7280] memfd_create("syzkaller", 0 [pid 7271] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7280] <... memfd_create resumed>) = 3 [ 104.146959][ T7278] loop4: detected capacity change from 0 to 1024 [ 104.162033][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.169507][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.177181][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.178593][ T7281] loop1: detected capacity change from 0 to 1024 [pid 7280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7275] <... mount resumed>) = 0 [pid 7281] <... write resumed>) = 524288 [pid 7280] <... mmap resumed>) = 0x7fee02dd3000 [pid 7279] <... write resumed>) = 524288 [pid 7278] <... ioctl resumed>) = 0 [pid 7280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7281] munmap(0x7fee02dd3000, 524288) = 0 [pid 7278] close(3) = 0 [pid 7278] mkdir("./bus", 0777) = 0 [pid 7281] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7281] ioctl(4, LOOP_SET_FD, 3 [pid 7275] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7275] chdir("./bus") = 0 [pid 7275] ioctl(4, LOOP_CLR_FD) = 0 [pid 7280] <... write resumed>) = 524288 [pid 7278] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7275] close(4 [pid 7280] munmap(0x7fee02dd3000, 524288) = 0 [pid 7280] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7280] ioctl(4, LOOP_SET_FD, 3 [pid 7281] <... ioctl resumed>) = 0 [pid 7279] munmap(0x7fee02dd3000, 524288 [pid 7275] <... close resumed>) = 0 [pid 7270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7270] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7270] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7270] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7281] close(3 [pid 7270] <... clone resumed>, parent_tid=[7282], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7282 [pid 7270] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7279] <... munmap resumed>) = 0 [pid 7275] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7270] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7282 attached [pid 7281] <... close resumed>) = 0 [pid 7280] <... ioctl resumed>) = 0 [pid 7279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7275] <... futex resumed>) = 1 [pid 7272] <... futex resumed>) = 0 [pid 7271] <... write resumed>) = 57344 [pid 7282] set_robust_list(0x7fee02e529e0, 24 [pid 7281] mkdir("./bus", 0777 [pid 7280] close(3 [pid 7279] <... openat resumed>) = 4 [pid 7278] <... mount resumed>) = 0 [pid 7275] creat("./bus", 000 [pid 7272] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... set_robust_list resumed>) = 0 [pid 7281] <... mkdir resumed>) = 0 [pid 7280] <... close resumed>) = 0 [pid 7279] ioctl(4, LOOP_SET_FD, 3 [pid 7278] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7275] <... creat resumed>) = 4 [pid 7272] <... futex resumed>) = 0 [pid 7280] mkdir("./bus", 0777 [pid 7278] <... openat resumed>) = 3 [pid 7272] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7280] <... mkdir resumed>) = 0 [pid 7278] chdir("./bus" [pid 7271] <... futex resumed>) = 0 [pid 7280] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7278] <... chdir resumed>) = 0 [pid 7280] <... mount resumed>) = 0 [pid 7278] ioctl(4, LOOP_CLR_FD [pid 7280] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7278] <... ioctl resumed>) = 0 [pid 7280] <... openat resumed>) = 3 [pid 7278] close(4 [pid 7280] chdir("./bus" [pid 7278] <... close resumed>) = 0 [pid 7280] <... chdir resumed>) = 0 [pid 7278] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] ioctl(4, LOOP_CLR_FD [pid 7278] <... futex resumed>) = 1 [pid 7280] <... ioctl resumed>) = 0 [pid 7278] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7280] close(4) = 0 [pid 7280] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7276] <... futex resumed>) = 0 [pid 7280] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7276] <... futex resumed>) = 0 [pid 7280] creat("./bus", 000 [pid 7276] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7281] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7280] <... creat resumed>) = 4 [pid 7275] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7271] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7280] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = 1 [pid 7274] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7272] <... futex resumed>) = 0 [pid 7280] <... futex resumed>) = 1 [pid 7276] <... futex resumed>) = 0 [pid 7272] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7280] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7276] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7272] <... futex resumed>) = 0 [pid 7280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7276] <... futex resumed>) = 0 [pid 7272] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 104.184580][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.200538][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.205029][ T7280] loop2: detected capacity change from 0 to 1024 [ 104.208439][ T7271] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.236503][ T7279] loop3: detected capacity change from 0 to 1024 [pid 7280] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7276] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] creat("./file1", 000 [pid 7279] <... ioctl resumed>) = 0 [pid 7278] <... futex resumed>) = 0 [pid 7275] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7274] <... futex resumed>) = 1 [pid 7279] close(3 [pid 7278] creat("./bus", 000 [pid 7279] <... close resumed>) = 0 [pid 7278] <... creat resumed>) = 4 [pid 7274] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7281] <... mount resumed>) = 0 [pid 7279] mkdir("./bus", 0777 [pid 7278] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7278] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7274] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] <... futex resumed>) = 0 [pid 7274] <... futex resumed>) = 1 [pid 7278] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7274] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] <... creat resumed>) = 5 [pid 7281] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7279] <... mkdir resumed>) = 0 [pid 7270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 104.247704][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.258690][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.259151][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.270407][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.275217][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.282498][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7282] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] <... openat resumed>) = 3 [pid 7279] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7272] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7272] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7272] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7283], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7283 [pid 7272] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7272] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7283 attached [pid 7282] <... futex resumed>) = 0 [pid 7281] chdir("./bus" [pid 7279] <... mount resumed>) = 0 [pid 7276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7276] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7276] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7276] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7284], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7284 [pid 7276] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7276] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7270] exit_group(0) = ? [pid 7281] <... chdir resumed>) = 0 [pid 7279] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7271] <... futex resumed>) = ? [pid 7274] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7274] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... openat resumed>) = 3 [pid 7274] <... futex resumed>) = 0 [pid 7271] +++ exited with 0 +++ [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7282] +++ exited with 0 +++ [pid 7274] <... mmap resumed>) = 0x7fee02e32000 [pid 7270] +++ exited with 0 +++ [pid 7281] ioctl(4, LOOP_CLR_FD [pid 7274] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7270, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 7281] <... ioctl resumed>) = 0 [pid 7279] chdir("./bus" [pid 7274] <... mprotect resumed>) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 7283] set_robust_list(0x7fee02e529e0, 24 [pid 7281] close(4 [pid 7279] <... chdir resumed>) = 0 [pid 7274] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 7285 attached ./strace-static-x86_64: Process 7284 attached [pid 7283] <... set_robust_list resumed>) = 0 [pid 7281] <... close resumed>) = 0 [pid 7279] ioctl(4, LOOP_CLR_FD [pid 7274] <... clone resumed>, parent_tid=[7285], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7285 [pid 7274] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7274] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7274] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7285] set_robust_list(0x7fee02e529e0, 24 [pid 7284] set_robust_list(0x7fee02e529e0, 24 [pid 7283] creat("./file1", 000 [pid 7281] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... ioctl resumed>) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7283] <... creat resumed>) = 5 [pid 7285] <... set_robust_list resumed>) = 0 [pid 7284] <... set_robust_list resumed>) = 0 [pid 7281] <... futex resumed>) = 1 [pid 7279] close(4 [pid 7277] <... futex resumed>) = 0 [ 104.289380][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.302251][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.305501][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7285] creat("./file1", 000 [pid 7284] creat("./file1", 000 [pid 7283] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] <... close resumed>) = 0 [pid 7277] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./123/binderfs") = 0 [pid 5081] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7283] <... futex resumed>) = 1 [pid 7281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 0 [pid 7276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7272] <... futex resumed>) = 0 [pid 7283] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7281] creat("./bus", 000 [pid 7279] <... futex resumed>) = 1 [ 104.343911][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.348114][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.359322][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 104.359598][ T7275] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7277] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] <... write resumed>) = 57344 [pid 7273] <... futex resumed>) = 0 [pid 7281] <... creat resumed>) = 4 [pid 7279] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... umount2 resumed>) = 0 [pid 7273] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7273] <... futex resumed>) = 0 [pid 5081] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7281] <... futex resumed>) = 1 [pid 7279] creat("./bus", 000 [pid 7277] <... futex resumed>) = 0 [pid 7273] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7281] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7279] <... creat resumed>) = 4 [pid 5081] lstat("./123/bus", [pid 7277] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7279] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 0 [pid 7281] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7279] <... futex resumed>) = 1 [pid 7273] <... futex resumed>) = 0 [pid 7277] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7279] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7273] <... futex resumed>) = 0 [pid 5081] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7273] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 7274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] rmdir("./123/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./123") = 0 [pid 5081] mkdir("./124", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7286 ./strace-static-x86_64: Process 7286 attached [pid 7286] set_robust_list(0x555556b055e0, 24) = 0 [pid 7286] chdir("./124") = 0 [pid 7286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7286] setpgid(0, 0) = 0 [pid 7286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7286] write(3, "1000", 4) = 4 [pid 7286] close(3) = 0 [pid 7286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7286] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7286] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7286] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7284] <... creat resumed>) = 5 [pid 7275] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7284] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7272] exit_group(0 [pid 7284] <... futex resumed>) = 0 [pid 7286] <... clone resumed>, parent_tid=[7287], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7287 [pid 7284] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7283] <... futex resumed>) = ? [pid 7275] <... futex resumed>) = ? [pid 7272] <... exit_group resumed>) = ? [pid 7286] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7283] +++ exited with 0 +++ [pid 7275] +++ exited with 0 +++ [pid 7286] <... futex resumed>) = 0 [pid 7286] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7272] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7272, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7287 attached [pid 7287] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7287] memfd_create("syzkaller", 0 [pid 5074] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7287] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7287] <... mmap resumed>) = 0x7fee02dd3000 [ 104.390372][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.391825][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.404604][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.412327][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.422454][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.437110][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] <... openat resumed>) = 3 [pid 7287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./121/binderfs") = 0 [pid 5074] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7277] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = 0 [pid 7287] <... write resumed>) = 524288 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7277] <... mmap resumed>) = 0x7fee02e32000 [pid 7277] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7273] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... umount2 resumed>) = 0 [pid 7287] munmap(0x7fee02dd3000, 524288) = 0 [pid 7277] <... mprotect resumed>) = 0 [pid 7273] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7287] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7277] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7273] <... mprotect resumed>) = 0 [pid 7287] <... openat resumed>) = 4 [pid 7273] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7287] ioctl(4, LOOP_SET_FD, 3 [pid 7277] <... clone resumed>, parent_tid=[7288], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7288 ./strace-static-x86_64: Process 7288 attached [pid 7277] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] <... clone resumed>, parent_tid=[7289], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7289 [pid 5074] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7289 attached [pid 7289] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7289] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] <... ioctl resumed>) = 0 [pid 7287] close(3) = 0 [pid 7287] mkdir("./bus", 0777 [pid 7277] <... futex resumed>) = 0 [pid 7273] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7289] <... futex resumed>) = 0 [pid 7288] set_robust_list(0x7fee02e529e0, 24 [pid 7277] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] <... futex resumed>) = 1 [pid 5074] lstat("./121/bus", [pid 7289] creat("./file1", 000 [pid 7288] <... set_robust_list resumed>) = 0 [pid 7273] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7288] creat("./file1", 000 [pid 5074] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7288] <... creat resumed>) = 5 [pid 5074] getdents64(4, [pid 7288] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7288] <... futex resumed>) = 1 [pid 7277] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7288] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] rmdir("./121/bus" [pid 7280] <... write resumed>) = 57344 [pid 7287] <... mkdir resumed>) = 0 [pid 7280] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 [pid 7287] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7280] <... futex resumed>) = 0 [ 104.444968][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 104.446874][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.460225][ T7280] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.470148][ T7287] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(3, [pid 7280] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7276] exit_group(0 [pid 7280] <... futex resumed>) = ? [pid 7276] <... exit_group resumed>) = ? [pid 7280] +++ exited with 0 +++ [pid 7287] <... mount resumed>) = 0 [pid 7287] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7287] chdir("./bus") = 0 [pid 7287] ioctl(4, LOOP_CLR_FD) = 0 [pid 7285] <... creat resumed>) = 5 [pid 7287] close(4 [pid 7285] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] <... close resumed>) = 0 [pid 7285] <... futex resumed>) = 0 [pid 7284] <... futex resumed>) = ? [pid 5074] close(3 [pid 7287] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7285] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7284] +++ exited with 0 +++ [pid 7276] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 7287] <... futex resumed>) = 1 [pid 7286] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7276, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7287] creat("./bus", 000 [pid 7286] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] rmdir("./121" [pid 7287] <... creat resumed>) = 4 [pid 7286] <... futex resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7287] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7286] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7287] <... futex resumed>) = 0 [pid 7286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... rmdir resumed>) = 0 [ 104.489320][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.503830][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.504299][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.525017][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.531611][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7287] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7286] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./122", 0777 [pid 7286] <... futex resumed>) = 0 [pid 7273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7286] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./122/binderfs") = 0 [pid 5076] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 7289] <... creat resumed>) = 5 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7290 [ 104.532291][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.532429][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.540239][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.551311][ T7278] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.559356][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.563194][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 104.582057][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7289] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7289] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7286] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7286] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7286] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7286] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7291], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7291 [pid 7286] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7290 attached [pid 7290] set_robust_list(0x555556b055e0, 24) = 0 [pid 7290] chdir("./122") = 0 [pid 7290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7290] setpgid(0, 0) = 0 [pid 7290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7290] write(3, "1000", 4) = 4 [pid 7290] close(3) = 0 [pid 7290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7290] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7290] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7278] <... write resumed>) = 57344 [pid 7290] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7292], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7292 [pid 7290] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7292 attached [pid 7292] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7292] memfd_create("syzkaller", 0) = 3 [pid 7292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7291 attached [pid 7292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7287] <... write resumed>) = 57344 [pid 7281] <... write resumed>) = 57344 [pid 7278] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7291] set_robust_list(0x7fee02e529e0, 24 [pid 7278] <... futex resumed>) = 0 [pid 7274] exit_group(0 [pid 7291] <... set_robust_list resumed>) = 0 [pid 7274] <... exit_group resumed>) = ? [pid 7291] creat("./file1", 000 [pid 7278] +++ exited with 0 +++ [pid 7291] <... creat resumed>) = 5 [pid 7291] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7291] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7281] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7281] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] exit_group(0 [pid 7288] <... futex resumed>) = ? [pid 7277] <... exit_group resumed>) = ? [pid 7288] +++ exited with 0 +++ [pid 7281] <... futex resumed>) = ? [pid 7286] <... futex resumed>) = 0 [pid 7285] <... futex resumed>) = ? [pid 7281] +++ exited with 0 +++ [pid 7277] +++ exited with 0 +++ [pid 7285] +++ exited with 0 +++ [pid 7274] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7274, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7277, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5080] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] <... write resumed>) = 524288 [pid 7287] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] <... write resumed>) = 57344 [pid 5080] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 7279] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, [pid 5076] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7287] <... futex resumed>) = 0 [pid 7279] <... futex resumed>) = 0 [pid 7273] exit_group(0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7289] <... futex resumed>) = ? [pid 7287] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] exit_group(0 [pid 7273] <... exit_group resumed>) = ? [pid 5080] getdents64(3, [pid 5076] lstat("./122/bus", [pid 7292] munmap(0x7fee02dd3000, 524288 [pid 7291] <... futex resumed>) = ? [pid 7289] +++ exited with 0 +++ [pid 7287] <... futex resumed>) = ? [pid 7286] <... exit_group resumed>) = ? [pid 7279] +++ exited with 0 +++ [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7292] <... munmap resumed>) = 0 [pid 7287] +++ exited with 0 +++ [pid 7273] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7291] +++ exited with 0 +++ [pid 7286] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7292] <... openat resumed>) = 4 [pid 5080] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] fstat(3, [pid 7292] ioctl(4, LOOP_SET_FD, 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7286, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7273, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5076] <... openat resumed>) = 4 [ 104.582372][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.599472][ T7281] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.606959][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.615313][ T7287] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.621629][ T7279] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5080] lstat("./120/binderfs", [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] fstat(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 5080] unlink("./120/binderfs" [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7292] <... ioctl resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] close(3 [pid 5081] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7292] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 7292] mkdir("./bus", 0777 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7292] <... mkdir resumed>) = 0 [pid 5076] close(4 [pid 7292] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./122/bus") = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5081] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./122" [pid 5075] lstat("./121/binderfs", [pid 5081] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5081] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 5076] mkdir("./123", 0777 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 5076] <... mkdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] unlink("./121/binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7293 [pid 5080] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7293 attached [pid 7293] set_robust_list(0x555556b055e0, 24) = 0 [pid 7293] chdir("./123") = 0 [pid 7293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7293] setpgid(0, 0) = 0 [pid 7293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7293] write(3, "1000", 4) = 4 [pid 7293] close(3) = 0 [pid 7293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7293] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7293] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7293] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7294], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7294 [pid 7293] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... unlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 7292] <... mount resumed>) = 0 [pid 5075] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7292] chdir("./bus") = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7292] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] <... ioctl resumed>) = 0 [pid 5080] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7292] close(4) = 0 [pid 7292] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7290] <... futex resumed>) = 0 [pid 7292] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7290] <... futex resumed>) = 0 [pid 7292] creat("./bus", 000 [pid 7290] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7292] <... creat resumed>) = 4 [pid 7292] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7290] <... futex resumed>) = 0 [pid 7293] <... futex resumed>) = 0 [pid 7292] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7290] <... futex resumed>) = 0 [pid 7292] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7290] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7294 attached [pid 7294] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7294] memfd_create("syzkaller", 0) = 3 [pid 7294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 104.649087][ T7292] loop0: detected capacity change from 0 to 1024 [ 104.659504][ T11] hfsplus: b-tree write err: -5, ino 4 [ 104.685497][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5081] lstat("./124/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] lstat("./120/bus", [pid 5081] unlink("./124/binderfs" [pid 5077] lstat("./121/binderfs", [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./121/binderfs") = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7294] <... mmap resumed>) = 0x7fee02dd3000 [pid 7294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5075] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./121/bus", [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5075] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] close(4 [pid 5075] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./120/bus" [pid 5075] <... openat resumed>) = 4 [pid 5075] fstat(4, [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5075] getdents64(4, [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] close(3) = 0 [pid 5075] getdents64(4, [pid 5080] rmdir("./120" [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] mkdir("./121", 0777 [pid 5075] rmdir("./121/bus") = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, [pid 7294] <... write resumed>) = 524288 [pid 7294] munmap(0x7fee02dd3000, 524288) = 0 [pid 7294] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7294] ioctl(4, LOOP_SET_FD, 3 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] close(3 [pid 7290] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7290] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7290] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7290] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7295], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7295 [pid 7290] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... close resumed>) = 0 [pid 7290] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] rmdir("./121" [pid 7294] <... ioctl resumed>) = 0 [pid 7294] close(3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] <... rmdir resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] mkdir("./122", 0777 [pid 5080] close(3) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7294] <... close resumed>) = 0 [pid 7294] mkdir("./bus", 0777) = 0 [ 104.693612][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.700922][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.722002][ T52] hfsplus: b-tree write err: -5, ino 4 [ 104.727262][ T7294] loop2: detected capacity change from 0 to 1024 [ 104.734889][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7294] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7295 attached [pid 7295] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7295] creat("./file1", 000./strace-static-x86_64: Process 7296 attached [pid 7296] set_robust_list(0x555556b055e0, 24 [pid 5075] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7296 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7296] <... set_robust_list resumed>) = 0 [pid 7296] chdir("./121" [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7297 [pid 7296] <... chdir resumed>) = 0 [pid 7296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7296] setpgid(0, 0 [pid 7294] <... mount resumed>) = 0 [pid 7296] <... setpgid resumed>) = 0 [pid 7296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7294] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7296] <... openat resumed>) = 3 [pid 7294] chdir("./bus") = 0 [pid 7294] ioctl(4, LOOP_CLR_FD [pid 7296] write(3, "1000", 4) = 4 [pid 7296] close(3) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5081] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./124/bus", [pid 5077] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7297 attached [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7297] set_robust_list(0x555556b055e0, 24 [pid 5081] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./121/bus", [pid 7297] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7297] chdir("./122" [pid 5081] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7297] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 104.748405][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7296] symlink("/dev/binderfs", "./binderfs" [pid 7294] <... ioctl resumed>) = 0 [pid 5081] fstat(4, [pid 5077] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7297] <... prctl resumed>) = 0 [pid 7296] <... symlink resumed>) = 0 [pid 7294] close(4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 4 [pid 7297] setpgid(0, 0 [pid 7296] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] fstat(4, [pid 7297] <... setpgid resumed>) = 0 [pid 7296] <... futex resumed>) = 0 [pid 7294] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7294] <... futex resumed>) = 1 [pid 7293] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 7297] <... openat resumed>) = 3 [pid 7296] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7294] creat("./bus", 000 [pid 7293] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7297] write(3, "1000", 4 [pid 7296] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7294] <... creat resumed>) = 4 [pid 7293] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5077] getdents64(4, [pid 7297] <... write resumed>) = 4 [pid 7296] <... mprotect resumed>) = 0 [pid 7294] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7297] close(3 [pid 7296] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7294] <... futex resumed>) = 0 [pid 7293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] rmdir("./124/bus" [pid 5077] close(4 [pid 7295] <... creat resumed>) = 5 ./strace-static-x86_64: Process 7298 attached [pid 7297] <... close resumed>) = 0 [pid 7295] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7293] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... close resumed>) = 0 [pid 7298] set_robust_list(0x7fee0b1f39e0, 24 [pid 7297] symlink("/dev/binderfs", "./binderfs" [pid 7296] <... clone resumed>, parent_tid=[7298], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7298 [pid 7295] <... futex resumed>) = 0 [pid 7294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7293] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] rmdir("./121/bus" [pid 7298] <... set_robust_list resumed>) = 0 [pid 7297] <... symlink resumed>) = 0 [pid 7296] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 104.772138][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.795610][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.807903][ T7292] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7295] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7294] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7293] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 5077] <... rmdir resumed>) = 0 [pid 7298] memfd_create("syzkaller", 0 [pid 7297] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7298] <... memfd_create resumed>) = 3 [pid 7297] <... futex resumed>) = 0 [pid 5081] close(3 [pid 7298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 7298] <... mmap resumed>) = 0x7fee02dd3000 [pid 7297] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] rmdir("./124" [pid 7298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7297] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7292] <... write resumed>) = 57344 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 7298] <... write resumed>) = 524288 [pid 7297] <... mprotect resumed>) = 0 [pid 7296] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7292] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] mkdir("./125", 0777 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7298] munmap(0x7fee02dd3000, 524288 [pid 7297] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7292] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] close(3 [pid 7298] <... munmap resumed>) = 0 [pid 7292] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7290] exit_group(0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7298] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7297] <... clone resumed>, parent_tid=[7299], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7299 [pid 7295] <... futex resumed>) = ? [pid 7292] <... futex resumed>) = ? [pid 7290] <... exit_group resumed>) = ? [pid 5081] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 7298] <... openat resumed>) = 4 [pid 7297] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7295] +++ exited with 0 +++ [pid 7292] +++ exited with 0 +++ [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7298] ioctl(4, LOOP_SET_FD, 3 [pid 7297] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7298] <... ioctl resumed>) = 0 [pid 7297] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7290] +++ exited with 0 +++ [pid 5081] close(3 [pid 5077] rmdir("./121" [pid 7298] close(3 [pid 5081] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7290, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7298] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7298] mkdir("./bus", 0777) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7300 [pid 7298] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5074] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./122/binderfs") = 0 [ 104.818404][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.835109][ T7298] loop4: detected capacity change from 0 to 1024 [ 104.836111][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.849386][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.857790][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.865460][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5074] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7300 attached ./strace-static-x86_64: Process 7299 attached [pid 5077] <... rmdir resumed>) = 0 [pid 7299] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7299] memfd_create("syzkaller", 0) = 3 [pid 7299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7299] munmap(0x7fee02dd3000, 524288) = 0 [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7299] ioctl(4, LOOP_SET_FD, 3 [pid 7300] set_robust_list(0x555556b055e0, 24 [pid 7298] <... mount resumed>) = 0 [pid 7293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] mkdir("./122", 0777 [pid 7298] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7298] chdir("./bus") = 0 [pid 7298] ioctl(4, LOOP_CLR_FD) = 0 [pid 7298] close(4) = 0 [pid 7298] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7300] <... set_robust_list resumed>) = 0 [pid 7298] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7293] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mkdir resumed>) = 0 [pid 7296] <... futex resumed>) = 0 [pid 7293] <... futex resumed>) = 0 [pid 7300] chdir("./125" [pid 7296] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7298] <... futex resumed>) = 0 [pid 7296] <... futex resumed>) = 1 [pid 7300] <... chdir resumed>) = 0 [pid 7298] creat("./bus", 000 [pid 7293] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7299] <... ioctl resumed>) = 0 [pid 7298] <... creat resumed>) = 4 [pid 7296] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7294] <... write resumed>) = 57344 [pid 7300] <... prctl resumed>) = 0 [pid 7298] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... openat resumed>) = 3 [pid 7296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7299] close(3 [pid 7294] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = 0 [pid 7298] <... futex resumed>) = 0 [pid 7300] setpgid(0, 0 [pid 7298] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] <... futex resumed>) = 0 [pid 7293] <... mprotect resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7300] <... setpgid resumed>) = 0 [pid 7299] <... close resumed>) = 0 [pid 7298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7296] <... futex resumed>) = 0 [pid 7294] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7293] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7299] mkdir("./bus", 0777 [pid 7298] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7296] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] close(3 [pid 7300] <... openat resumed>) = 3 [pid 7299] <... mkdir resumed>) = 0 [pid 7293] <... clone resumed>, parent_tid=[7301], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7301 [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7293] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] lstat("./122/bus", [pid 7293] <... futex resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7293] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7302 [pid 5074] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 104.871262][ T7299] loop1: detected capacity change from 0 to 1024 [ 104.878469][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.886260][ T7294] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7300] write(3, "1000", 4 [pid 7299] <... mount resumed>) = 0 [pid 5074] fstat(4, [pid 7299] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7299] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7299] chdir("./bus" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7299] <... chdir resumed>) = 0 [pid 5074] getdents64(4, [pid 7299] ioctl(4, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7299] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 7299] close(4 [pid 5074] <... close resumed>) = 0 [pid 7299] <... close resumed>) = 0 [pid 5074] rmdir("./122/bus" [pid 7299] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 [pid 7299] <... futex resumed>) = 1 [pid 7297] <... futex resumed>) = 0 [pid 5074] getdents64(3, [pid 7299] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7297] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7297] <... futex resumed>) = 0 [pid 5074] close(3 [pid 7300] <... write resumed>) = 4 [pid 7299] creat("./bus", 000 [pid 7297] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 7300] close(3 [pid 7299] <... creat resumed>) = 4 [pid 5074] rmdir("./122" [pid 7300] <... close resumed>) = 0 [pid 7299] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 [pid 7300] symlink("/dev/binderfs", "./binderfs" [pid 7299] <... futex resumed>) = 1 [pid 7297] <... futex resumed>) = 0 [pid 5074] mkdir("./123", 0777 [pid 7300] <... symlink resumed>) = 0 [pid 7299] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7297] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... mkdir resumed>) = 0 [pid 7300] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7297] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 7302 attached ./strace-static-x86_64: Process 7301 attached [pid 7300] <... futex resumed>) = 0 [pid 7299] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7297] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... openat resumed>) = 3 [pid 7302] set_robust_list(0x555556b055e0, 24 [pid 7301] set_robust_list(0x7fee02e529e0, 24 [pid 7300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7303 [pid 7302] <... set_robust_list resumed>) = 0 [pid 7301] <... set_robust_list resumed>) = 0 [pid 7300] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7302] chdir("./122" [pid 7296] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7301] creat("./file1", 000 [pid 7296] <... futex resumed>) = 0 [pid 7302] <... chdir resumed>) = 0 [pid 7300] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7303 attached [pid 7302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7301] <... creat resumed>) = 5 [pid 7300] <... mprotect resumed>) = 0 [pid 7296] <... mmap resumed>) = 0x7fee02e32000 [pid 7303] set_robust_list(0x555556b055e0, 24 [pid 7302] <... prctl resumed>) = 0 [pid 7301] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7300] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 104.920043][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.938176][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.939131][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.949434][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.956839][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7296] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7293] exit_group(0./strace-static-x86_64: Process 7304 attached [pid 7303] <... set_robust_list resumed>) = 0 [pid 7302] setpgid(0, 0 [pid 7296] <... mprotect resumed>) = 0 [pid 7294] <... futex resumed>) = ? [pid 7293] <... exit_group resumed>) = ? [pid 7303] chdir("./123" [pid 7296] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7294] +++ exited with 0 +++ [pid 7303] <... chdir resumed>) = 0 [pid 7304] set_robust_list(0x7fee0b1f39e0, 24 [pid 7303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7302] <... setpgid resumed>) = 0 [pid 7301] <... futex resumed>) = ? [pid 7300] <... clone resumed>, parent_tid=[7304], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7304 [pid 7296] <... clone resumed>, parent_tid=[7305], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7305 [pid 7304] <... set_robust_list resumed>) = 0 [pid 7303] <... prctl resumed>) = 0 [pid 7302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7296] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] setpgid(0, 0 [pid 7296] <... futex resumed>) = 0 [pid 7303] <... setpgid resumed>) = 0 [pid 7301] +++ exited with 0 +++ [pid 7300] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7293] +++ exited with 0 +++ [pid 7304] memfd_create("syzkaller", 0 [pid 7303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7302] <... openat resumed>) = 3 [pid 7300] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7305 attached [pid 7304] <... memfd_create resumed>) = 3 [pid 7303] <... openat resumed>) = 3 [pid 7302] write(3, "1000", 4 [pid 7300] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7293, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7305] set_robust_list(0x7fee02e529e0, 24 [pid 7304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7303] write(3, "1000", 4 [pid 7302] <... write resumed>) = 4 [pid 5076] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7305] <... set_robust_list resumed>) = 0 [pid 7303] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7305] creat("./file1", 000 [pid 7303] close(3 [pid 5076] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7303] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7303] symlink("/dev/binderfs", "./binderfs" [pid 5076] fstat(3, [pid 7304] <... mmap resumed>) = 0x7fee02dd3000 [pid 7303] <... symlink resumed>) = 0 [pid 7302] close(3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7303] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 7303] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7303] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7303] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] lstat("./123/binderfs", [pid 7303] <... mprotect resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7303] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] unlink("./123/binderfs") = 0 [pid 7303] <... clone resumed>, parent_tid=[7306], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7306 [pid 5076] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7303] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7303] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7297] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7297] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7297] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7297] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7307], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7307 [pid 7297] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7297] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7307 attached [pid 7307] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7307] creat("./file1", 000) = 5 [pid 7307] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7297] <... futex resumed>) = 0 [pid 7307] <... futex resumed>) = 1 [pid 7307] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 104.973924][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.987076][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 104.995146][ T7298] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.002786][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.002802][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.018986][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7304] munmap(0x7fee02dd3000, 524288./strace-static-x86_64: Process 7306 attached [pid 7302] <... close resumed>) = 0 [pid 7298] <... write resumed>) = 57344 [pid 7306] set_robust_list(0x7fee0b1f39e0, 24 [pid 7302] symlink("/dev/binderfs", "./binderfs" [pid 7306] <... set_robust_list resumed>) = 0 [pid 7302] <... symlink resumed>) = 0 [pid 7306] memfd_create("syzkaller", 0 [pid 7302] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7306] <... memfd_create resumed>) = 3 [pid 7302] <... futex resumed>) = 0 [pid 7306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7306] <... mmap resumed>) = 0x7fee02dd3000 [pid 7302] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7302] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7306] <... write resumed>) = 524288 [pid 7305] <... creat resumed>) = 5 [pid 7302] <... mprotect resumed>) = 0 [pid 7302] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7308], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7308 [pid 7302] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7302] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7306] munmap(0x7fee02dd3000, 524288) = 0 [pid 7306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7306] ioctl(4, LOOP_SET_FD, 3 [pid 7305] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] <... munmap resumed>) = 0 [pid 7298] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7306] <... ioctl resumed>) = 0 [pid 7306] close(3) = 0 [pid 7306] mkdir("./bus", 0777) = 0 [pid 7306] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7305] <... futex resumed>) = 0 [pid 7296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7305] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] exit_group(0 [pid 7306] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7305] <... futex resumed>) = ? [pid 7298] <... futex resumed>) = ? [pid 7296] <... exit_group resumed>) = ? [pid 7305] +++ exited with 0 +++ [pid 7298] +++ exited with 0 +++ [pid 7306] <... openat resumed>) = 3 [pid 7306] chdir("./bus") = 0 [pid 7306] ioctl(4, LOOP_CLR_FD) = 0 [pid 7296] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7296, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7306] close(4 [pid 7304] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 ./strace-static-x86_64: Process 7308 attached [pid 7304] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5080] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7308] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7308] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, [pid 7299] <... write resumed>) = 57344 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7306] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./121/binderfs") = 0 [pid 5080] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7308] memfd_create("syzkaller", 0 [pid 5076] lstat("./123/bus", [pid 7308] <... memfd_create resumed>) = 3 [pid 7304] <... ioctl resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7308] <... mmap resumed>) = 0x7fee02dd3000 [pid 5076] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7306] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] close(3 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5080] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7299] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7299] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5080] <... openat resumed>) = 4 [pid 7297] exit_group(0 [pid 5080] fstat(4, [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 7307] <... futex resumed>) = ? [pid 7299] <... futex resumed>) = ? [pid 7297] <... exit_group resumed>) = ? [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 7307] +++ exited with 0 +++ [pid 7299] +++ exited with 0 +++ [pid 7297] +++ exited with 0 +++ [pid 5080] getdents64(4, [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7297, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5080] close(4 [pid 5076] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] rmdir("./123/bus" [pid 5080] rmdir("./121/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7308] <... write resumed>) = 524288 [pid 7306] <... futex resumed>) = 1 [pid 7304] <... close resumed>) = 0 [pid 7303] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7303] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7308] munmap(0x7fee02dd3000, 524288 [pid 7306] creat("./bus", 000 [pid 7304] mkdir("./bus", 0777 [pid 7303] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 7303] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] fstat(3, [pid 7308] <... munmap resumed>) = 0 [pid 7306] <... creat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5076] rmdir("./123" [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7306] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./121" [pid 5075] getdents64(3, [pid 7308] <... openat resumed>) = 4 [pid 7306] <... futex resumed>) = 1 [pid 7304] <... mkdir resumed>) = 0 [pid 7303] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [ 105.025366][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.030098][ T7306] loop0: detected capacity change from 0 to 1024 [ 105.033379][ T7299] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.055549][ T7304] loop5: detected capacity change from 0 to 1024 [ 105.062624][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7308] ioctl(4, LOOP_SET_FD, 3 [pid 7306] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7303] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./122", 0777 [pid 5076] mkdir("./124", 0777 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5075] lstat("./122/binderfs", [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] unlink("./122/binderfs" [pid 5080] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 7308] <... ioctl resumed>) = 0 [pid 7306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7304] <... mount resumed>) = 0 [pid 7303] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7308] close(3 [pid 7306] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7304] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7303] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7308] <... close resumed>) = 0 [pid 7304] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 7308] mkdir("./bus", 0777 [pid 7304] chdir("./bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7308] <... mkdir resumed>) = 0 [pid 7304] <... chdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7309 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = 0 [pid 7308] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7304] ioctl(4, LOOP_CLR_FD [pid 5076] close(3 [pid 5075] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7309 attached [pid 7308] <... mount resumed>) = 0 [pid 7304] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7308] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7304] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7308] <... openat resumed>) = 3 [pid 7304] <... close resumed>) = 0 [pid 7308] chdir("./bus" [pid 7304] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7310 [pid 7308] <... chdir resumed>) = 0 [pid 7304] <... futex resumed>) = 1 [pid 7300] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7308] ioctl(4, LOOP_CLR_FD [pid 7304] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7300] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] lstat("./122/bus", [pid 7308] <... ioctl resumed>) = 0 [pid 7304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7300] <... futex resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7308] close(4 [pid 7304] creat("./bus", 000 [pid 7300] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] set_robust_list(0x555556b055e0, 24 [pid 7308] <... close resumed>) = 0 [pid 7304] <... creat resumed>) = 4 [pid 5075] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7309] <... set_robust_list resumed>) = 0 [pid 7308] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7310 attached [pid 7309] chdir("./122" [pid 7308] <... futex resumed>) = 1 [pid 7304] <... futex resumed>) = 1 [pid 7302] <... futex resumed>) = 0 [pid 7300] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7310] set_robust_list(0x555556b055e0, 24 [pid 7309] <... chdir resumed>) = 0 [pid 7308] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7302] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7300] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 4 [pid 7310] <... set_robust_list resumed>) = 0 [pid 7309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 105.101973][ T7308] loop3: detected capacity change from 0 to 1024 [ 105.114772][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 105.116977][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7302] <... futex resumed>) = 0 [pid 7300] <... futex resumed>) = 0 [pid 5075] fstat(4, [pid 7310] chdir("./124" [pid 7309] <... prctl resumed>) = 0 [pid 7308] creat("./bus", 000 [pid 7304] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7300] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7310] <... chdir resumed>) = 0 [pid 7309] setpgid(0, 0 [pid 7308] <... creat resumed>) = 4 [pid 7302] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7309] <... setpgid resumed>) = 0 [pid 7308] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... prctl resumed>) = 0 [pid 7308] <... futex resumed>) = 0 [pid 7310] setpgid(0, 0 [pid 7308] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] <... setpgid resumed>) = 0 [pid 7310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7310] <... openat resumed>) = 3 [pid 7309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(4, [pid 7310] write(3, "1000", 4) = 4 [pid 7310] close(3) = 0 [pid 7302] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7308] <... futex resumed>) = 0 [pid 7302] <... futex resumed>) = 1 [pid 7310] <... symlink resumed>) = 0 [pid 7309] <... openat resumed>) = 3 [pid 7308] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5075] getdents64(4, [pid 7310] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] write(3, "1000", 4 [pid 7303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7302] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7310] <... futex resumed>) = 0 [pid 7303] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7303] <... futex resumed>) = 0 [pid 7310] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7310] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7303] <... mmap resumed>) = 0x7fee02e32000 [pid 7310] <... mprotect resumed>) = 0 [pid 7309] <... write resumed>) = 4 [pid 7303] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7310] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7309] close(3 [pid 7303] <... mprotect resumed>) = 0 [pid 5075] close(4 [pid 7303] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... close resumed>) = 0 [pid 7309] <... close resumed>) = 0 [pid 7310] <... clone resumed>, parent_tid=[7311], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7311 [pid 7309] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./122/bus" [pid 7310] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] <... clone resumed>, parent_tid=[7312], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7312 [pid 7310] <... futex resumed>) = 0 [pid 7303] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7303] <... futex resumed>) = 0 [pid 7303] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] <... symlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7309] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7311 attached [pid 7311] set_robust_list(0x7fee0b1f39e0, 24 [pid 7309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7311] <... set_robust_list resumed>) = 0 [pid 7311] memfd_create("syzkaller", 0 [pid 7309] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] close(3 [pid 7309] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... close resumed>) = 0 [pid 7311] <... memfd_create resumed>) = 3 [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7309] <... mprotect resumed>) = 0 [pid 5075] rmdir("./122" [pid 7311] <... mmap resumed>) = 0x7fee02dd3000 [pid 7309] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... rmdir resumed>) = 0 [pid 7309] <... clone resumed>, parent_tid=[7313], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7313 [ 105.150188][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.157950][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.170794][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.174519][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.189004][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7312 attached [pid 7311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7309] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mkdir("./123", 0777 [pid 7312] set_robust_list(0x7fee02e529e0, 24 [pid 7309] <... futex resumed>) = 0 [pid 7300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7300] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7300] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7300] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7314], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7314 [pid 7300] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7300] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7313 attached [pid 7313] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7313] memfd_create("syzkaller", 0) = 3 [pid 7313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7311] <... write resumed>) = 524288 [pid 7312] <... set_robust_list resumed>) = 0 [pid 7309] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7314 attached [pid 7312] creat("./file1", 000 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7311] munmap(0x7fee02dd3000, 524288 [pid 7314] set_robust_list(0x7fee02e529e0, 24 [pid 5075] <... openat resumed>) = 3 [pid 7314] <... set_robust_list resumed>) = 0 [pid 7314] creat("./file1", 000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7311] <... munmap resumed>) = 0 [pid 7314] <... creat resumed>) = 5 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7311] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7314] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(3 [pid 7314] <... futex resumed>) = 1 [pid 7311] <... openat resumed>) = 4 [pid 7300] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7313] <... write resumed>) = 524288 [pid 7311] ioctl(4, LOOP_SET_FD, 3 [pid 7314] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 105.202922][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.203333][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.211057][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.234524][ T7311] loop2: detected capacity change from 0 to 1024 [ 105.241477][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7312] <... creat resumed>) = 5 [pid 7302] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] munmap(0x7fee02dd3000, 524288) = 0 [pid 7312] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... futex resumed>) = 0 [pid 7312] <... futex resumed>) = 0 [pid 7302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7315 [pid 7313] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7313] ioctl(4, LOOP_SET_FD, 3 [pid 7312] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7302] <... mmap resumed>) = 0x7fee02e32000 [pid 7302] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7302] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7316], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7316 [pid 7302] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7302] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] <... ioctl resumed>) = 0 [pid 7311] close(3) = 0 [pid 7311] mkdir("./bus", 0777) = 0 ./strace-static-x86_64: Process 7316 attached ./strace-static-x86_64: Process 7315 attached [pid 7311] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7316] set_robust_list(0x7fee02e529e0, 24 [pid 7315] set_robust_list(0x555556b055e0, 24 [pid 7316] <... set_robust_list resumed>) = 0 [pid 7306] <... write resumed>) = 57344 [pid 7304] <... write resumed>) = 57344 [pid 7313] <... ioctl resumed>) = 0 [pid 7313] close(3) = 0 [pid 7313] mkdir("./bus", 0777) = 0 [ 105.242749][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.256668][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.266138][ T7304] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.267815][ T7313] loop4: detected capacity change from 0 to 1024 [ 105.273780][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.287943][ T7306] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7313] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7316] creat("./file1", 000 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7306] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... creat resumed>) = 5 [pid 7315] chdir("./123" [pid 7313] <... mount resumed>) = 0 [pid 7311] <... mount resumed>) = 0 [pid 7303] exit_group(0 [pid 7300] exit_group(0 [pid 7315] <... chdir resumed>) = 0 [pid 7313] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7312] <... futex resumed>) = ? [pid 7311] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7303] <... exit_group resumed>) = ? [pid 7300] <... exit_group resumed>) = ? [pid 7315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7313] <... openat resumed>) = 3 [pid 7312] +++ exited with 0 +++ [pid 7311] <... openat resumed>) = 3 [pid 7316] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] <... prctl resumed>) = 0 [pid 7314] <... futex resumed>) = ? [pid 7313] chdir("./bus" [pid 7311] chdir("./bus" [pid 7306] <... futex resumed>) = ? [pid 7304] <... futex resumed>) = ? [pid 7315] setpgid(0, 0 [pid 7313] <... chdir resumed>) = 0 [pid 7311] <... chdir resumed>) = 0 [pid 7315] <... setpgid resumed>) = 0 [pid 7313] ioctl(4, LOOP_CLR_FD [pid 7311] ioctl(4, LOOP_CLR_FD [pid 7315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7313] <... ioctl resumed>) = 0 [pid 7311] <... ioctl resumed>) = 0 [pid 7315] <... openat resumed>) = 3 [pid 7313] close(4 [pid 7311] close(4 [pid 7315] write(3, "1000", 4 [pid 7313] <... close resumed>) = 0 [pid 7311] <... close resumed>) = 0 [pid 7315] <... write resumed>) = 4 [pid 7313] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... futex resumed>) = 1 [pid 7315] close(3 [pid 7314] +++ exited with 0 +++ [pid 7313] <... futex resumed>) = 1 [pid 7311] <... futex resumed>) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 7302] <... futex resumed>) = 0 [pid 7315] <... close resumed>) = 0 [pid 7313] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7311] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7306] +++ exited with 0 +++ [pid 7303] +++ exited with 0 +++ [pid 7315] symlink("/dev/binderfs", "./binderfs" [pid 7313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 7304] +++ exited with 0 +++ [pid 7300] +++ exited with 0 +++ [pid 7315] <... symlink resumed>) = 0 [pid 7313] creat("./bus", 000 [pid 7311] creat("./bus", 000 [pid 7310] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7316] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7303, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7315] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... creat resumed>) = 4 [pid 7311] <... creat resumed>) = 4 [pid 5074] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7315] <... futex resumed>) = 0 [pid 7313] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7300, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7313] <... futex resumed>) = 1 [pid 7311] <... futex resumed>) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5074] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7315] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7313] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7311] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7315] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 5074] fstat(3, [pid 7315] <... mprotect resumed>) = 0 [pid 7313] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7311] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7310] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7315] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./125/binderfs") = 0 [pid 5081] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./123/binderfs") = 0 [pid 5074] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7317 attached [pid 7317] set_robust_list(0x7fee0b1f39e0, 24) = 0 [ 105.296397][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.305618][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.313550][ T7308] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.337770][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.345836][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7317] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7315] <... clone resumed>, parent_tid=[7317], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7317 [pid 7315] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7317] <... futex resumed>) = 0 [pid 7315] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7308] <... write resumed>) = 57344 [pid 7317] memfd_create("syzkaller", 0 [pid 7308] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] <... memfd_create resumed>) = 3 [pid 7308] <... futex resumed>) = 0 [pid 7302] exit_group(0) = ? [pid 7317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7316] <... futex resumed>) = ? [pid 7317] <... mmap resumed>) = 0x7fee02dd3000 [pid 7316] +++ exited with 0 +++ [pid 7308] +++ exited with 0 +++ [pid 7302] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7302, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] fstat(3, [pid 7310] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7310] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 0 [pid 7310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7310] <... mmap resumed>) = 0x7fee02e32000 [pid 7309] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7310] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7309] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] getdents64(3, [pid 7310] <... mprotect resumed>) = 0 [pid 7309] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7310] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7309] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7309] <... clone resumed>, parent_tid=[7319], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7319 [pid 5077] lstat("./122/binderfs", [pid 7309] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7309] <... futex resumed>) = 0 [pid 5077] unlink("./122/binderfs" [pid 7309] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... unlink resumed>) = 0 [pid 5077] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7310] <... clone resumed>, parent_tid=[7318], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7318 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 105.350994][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.354637][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.360131][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.366277][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 105.374169][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7317] <... write resumed>) = 524288 [pid 7317] munmap(0x7fee02dd3000, 524288) = 0 [pid 7317] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7317] ioctl(4, LOOP_SET_FD, 3 [pid 7310] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./125/bus", ./strace-static-x86_64: Process 7318 attached [pid 7310] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7319 attached [pid 7319] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7319] creat("./file1", 000 [pid 7317] <... ioctl resumed>) = 0 [pid 7317] close(3) = 0 [pid 7317] mkdir("./bus", 0777) = 0 [pid 7317] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7319] <... creat resumed>) = 5 [pid 7319] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7310] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7318] set_robust_list(0x7fee02e529e0, 24 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7318] <... set_robust_list resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] creat("./file1", 000 [pid 7319] <... futex resumed>) = 1 [pid 7309] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] <... umount2 resumed>) = 0 [pid 5081] fstat(4, [pid 7319] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./122/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5081] getdents64(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] close(4 [pid 5081] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 7317] <... mount resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./122/bus" [pid 5074] <... umount2 resumed>) = 0 [pid 7317] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7317] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7317] chdir("./bus" [pid 5081] rmdir("./125/bus" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] lstat("./123/bus", [pid 7317] <... chdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 7317] ioctl(4, LOOP_CLR_FD [pid 5077] <... close resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7317] <... ioctl resumed>) = 0 [pid 5077] rmdir("./122" [pid 7317] close(4 [pid 5077] <... rmdir resumed>) = 0 [pid 7317] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] mkdir("./123", 0777 [pid 5074] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 105.407601][ T11] hfsplus: b-tree write err: -5, ino 4 [ 105.411971][ T7317] loop1: detected capacity change from 0 to 1024 [ 105.420519][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7317] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mkdir resumed>) = 0 [pid 7317] <... futex resumed>) = 1 [pid 7315] <... futex resumed>) = 0 [pid 7310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7317] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7315] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7315] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7318] <... creat resumed>) = 5 [pid 7317] creat("./bus", 000 [pid 7315] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... openat resumed>) = 4 [pid 7317] <... creat resumed>) = 4 [pid 5077] close(3 [pid 7318] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] rmdir("./125" [pid 5077] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 7318] <... futex resumed>) = 0 [pid 7317] <... futex resumed>) = 0 [pid 7315] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7318] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7317] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7315] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7320 ./strace-static-x86_64: Process 7320 attached [pid 7320] set_robust_list(0x555556b055e0, 24) = 0 [pid 7320] chdir("./123") = 0 [pid 7320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7320] setpgid(0, 0) = 0 [pid 7320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7315] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] mkdir("./126", 0777 [pid 5074] getdents64(4, [pid 7320] <... openat resumed>) = 3 [pid 7320] write(3, "1000", 4 [pid 5081] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7320] <... write resumed>) = 4 [ 105.465396][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.472872][ T7313] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.485349][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.498691][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.498896][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(4, [pid 7320] close(3) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7320] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7320] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7320] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7321], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7321 [pid 7320] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7320] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7321 attached [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] close(4 [pid 7321] set_robust_list(0x7fee0b1f39e0, 24 [pid 7313] <... write resumed>) = 57344 [pid 7311] <... write resumed>) = 57344 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... close resumed>) = 0 [pid 7321] <... set_robust_list resumed>) = 0 [pid 7313] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] exit_group(0 [pid 7319] <... futex resumed>) = ? [pid 7309] <... exit_group resumed>) = ? [pid 7319] +++ exited with 0 +++ [pid 5081] close(3 [pid 7321] memfd_create("syzkaller", 0 [pid 7313] <... futex resumed>) = ? [pid 7311] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5074] rmdir("./123/bus" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7322 [pid 7321] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 7322 attached [pid 7313] +++ exited with 0 +++ [pid 7309] +++ exited with 0 +++ [pid 7311] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] exit_group(0 [pid 7321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7318] <... futex resumed>) = ? [pid 7311] <... futex resumed>) = ? [pid 7310] <... exit_group resumed>) = ? [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7309, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... rmdir resumed>) = 0 [pid 7321] <... mmap resumed>) = 0x7fee02dd3000 [pid 7318] +++ exited with 0 +++ [pid 7311] +++ exited with 0 +++ [pid 5080] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7310] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7310, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... restart_syscall resumed>) = 0 [pid 7321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7322] set_robust_list(0x555556b055e0, 24 [pid 5080] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7322] <... set_robust_list resumed>) = 0 [pid 5080] fstat(3, [pid 5076] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7322] chdir("./126" [pid 7321] <... write resumed>) = 524288 [pid 7315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7322] <... chdir resumed>) = 0 [pid 7321] munmap(0x7fee02dd3000, 524288 [pid 7315] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [ 105.517164][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.518403][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.531913][ T7311] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.540619][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.548309][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... openat resumed>) = 3 [pid 7322] <... prctl resumed>) = 0 [pid 5080] umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(3, [pid 7322] setpgid(0, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7322] <... setpgid resumed>) = 0 [pid 5080] lstat("./122/binderfs", [pid 5076] getdents64(3, [pid 7322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7322] <... openat resumed>) = 3 [pid 5080] unlink("./122/binderfs" [pid 5076] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7322] write(3, "1000", 4 [pid 7315] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./123" [pid 7322] <... write resumed>) = 4 [pid 7321] <... munmap resumed>) = 0 [pid 5080] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./124/binderfs", [pid 7322] close(3 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7322] <... close resumed>) = 0 [pid 5076] unlink("./124/binderfs" [pid 7322] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 7322] <... symlink resumed>) = 0 [pid 5076] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7322] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7322] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7322] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7323], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7323 [pid 7322] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7322] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7321] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7323 attached [pid 7323] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7323] memfd_create("syzkaller", 0) = 3 [pid 7323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] <... openat resumed>) = 4 [pid 5074] mkdir("./124", 0777 [pid 7321] ioctl(4, LOOP_SET_FD, 3 [pid 7317] <... write resumed>) = 57344 [pid 7315] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... mkdir resumed>) = 0 [pid 7317] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7317] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7323] <... write resumed>) = 524288 [pid 7323] munmap(0x7fee02dd3000, 524288) = 0 [pid 7323] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7323] ioctl(4, LOOP_SET_FD, 3 [pid 7321] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7315] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... openat resumed>) = 3 [pid 7315] <... mprotect resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7315] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] close(3 [pid 7315] <... clone resumed>, parent_tid=[7324], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7324 [pid 7315] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 7315] <... futex resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7315] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7325 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7324 attached [pid 7321] close(3 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7325 attached [ 105.566561][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.574738][ T7317] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.582799][ T11] hfsplus: b-tree write err: -5, ino 4 [ 105.588544][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 105.595421][ T7321] loop3: detected capacity change from 0 to 1024 [pid 5080] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] lstat("./124/bus", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7325] set_robust_list(0x555556b055e0, 24 [pid 7324] set_robust_list(0x7fee02e529e0, 24 [pid 7323] <... ioctl resumed>) = 0 [pid 7321] <... close resumed>) = 0 [pid 5080] lstat("./122/bus", [pid 5076] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7325] <... set_robust_list resumed>) = 0 [pid 7324] <... set_robust_list resumed>) = 0 [pid 7323] close(3 [pid 7321] mkdir("./bus", 0777 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] chdir("./124" [pid 7324] creat("./file1", 000 [pid 7325] <... chdir resumed>) = 0 [pid 7323] <... close resumed>) = 0 [pid 7321] <... mkdir resumed>) = 0 [pid 5080] umount2("./122/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7324] <... creat resumed>) = 5 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] <... prctl resumed>) = 0 [pid 7324] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] mkdir("./bus", 0777 [pid 7321] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] openat(AT_FDCWD, "./122/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 7325] setpgid(0, 0 [pid 7324] <... futex resumed>) = 1 [pid 7315] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 7325] <... setpgid resumed>) = 0 [pid 7315] exit_group(0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7317] <... futex resumed>) = ? [pid 7315] <... exit_group resumed>) = ? [pid 5080] fstat(4, [pid 5076] getdents64(4, [pid 7325] <... openat resumed>) = 3 [pid 7324] +++ exited with 0 +++ [pid 7317] +++ exited with 0 +++ [pid 7315] +++ exited with 0 +++ [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7325] write(3, "1000", 4 [pid 7323] <... mkdir resumed>) = 0 [pid 7321] <... mount resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7315, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7325] <... write resumed>) = 4 [pid 7323] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7325] close(3 [pid 7321] <... openat resumed>) = 3 [pid 5080] getdents64(4, [pid 5076] close(4 [pid 7325] <... close resumed>) = 0 [pid 7321] chdir("./bus" [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 7325] symlink("/dev/binderfs", "./binderfs" [pid 7321] <... chdir resumed>) = 0 [pid 5080] close(4 [pid 5076] rmdir("./124/bus" [pid 7325] <... symlink resumed>) = 0 [pid 7321] ioctl(4, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 7325] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... mount resumed>) = 0 [pid 7321] <... ioctl resumed>) = 0 [pid 5080] rmdir("./122/bus" [pid 5076] <... rmdir resumed>) = 0 [pid 7325] <... futex resumed>) = 0 [pid 7323] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7321] close(4 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7323] <... openat resumed>) = 3 [pid 7321] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7323] chdir("./bus" [pid 7321] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7325] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7323] <... chdir resumed>) = 0 [pid 7321] <... futex resumed>) = 1 [pid 7320] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7325] <... mprotect resumed>) = 0 [pid 7323] ioctl(4, LOOP_CLR_FD [pid 7321] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7320] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] rmdir("./124" [pid 5075] fstat(3, [pid 7325] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7323] <... ioctl resumed>) = 0 [pid 7321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7320] <... futex resumed>) = 0 [pid 5080] rmdir("./122" [pid 5076] <... rmdir resumed>) = 0 [pid 7323] close(4 [pid 7321] creat("./bus", 000 [pid 7320] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... rmdir resumed>) = 0 [pid 5076] mkdir("./125", 0777 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7325] <... clone resumed>, parent_tid=[7326], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7326 [ 105.612849][ T7323] loop5: detected capacity change from 0 to 1024 [pid 7323] <... close resumed>) = 0 [pid 7321] <... creat resumed>) = 4 [pid 5080] mkdir("./123", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, [pid 7325] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7321] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7325] <... futex resumed>) = 0 [pid 7323] <... futex resumed>) = 1 [pid 7322] <... futex resumed>) = 0 [pid 7321] <... futex resumed>) = 1 [pid 7320] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7325] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7323] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7321] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7320] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7326 attached [pid 7323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7322] <... futex resumed>) = 0 [pid 7321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7320] <... futex resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] creat("./bus", 000 [pid 7322] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7321] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7320] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5075] lstat("./123/binderfs", [pid 7323] <... creat resumed>) = 4 [pid 5080] close(3 [pid 5076] <... close resumed>) = 0 [pid 7323] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7323] <... futex resumed>) = 1 [pid 7322] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7323] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7327 [pid 7323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7328 [ 105.664043][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.671542][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.685193][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.692516][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.704951][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7323] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7328 attached ./strace-static-x86_64: Process 7327 attached [pid 7326] set_robust_list(0x7fee0b1f39e0, 24 [pid 7322] <... futex resumed>) = 0 [pid 5075] unlink("./123/binderfs" [pid 7328] set_robust_list(0x555556b055e0, 24 [pid 7327] set_robust_list(0x555556b055e0, 24 [pid 7326] <... set_robust_list resumed>) = 0 [pid 7322] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... unlink resumed>) = 0 [pid 7328] <... set_robust_list resumed>) = 0 [pid 7327] <... set_robust_list resumed>) = 0 [pid 7326] memfd_create("syzkaller", 0 [pid 5075] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7328] chdir("./123" [pid 7327] chdir("./125" [pid 7326] <... memfd_create resumed>) = 3 [pid 7328] <... chdir resumed>) = 0 [pid 7327] <... chdir resumed>) = 0 [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7326] <... mmap resumed>) = 0x7fee02dd3000 [pid 7328] <... prctl resumed>) = 0 [pid 7327] <... prctl resumed>) = 0 [pid 7328] setpgid(0, 0 [pid 7327] setpgid(0, 0 [pid 7326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7328] <... setpgid resumed>) = 0 [pid 7327] <... setpgid resumed>) = 0 [pid 7326] <... write resumed>) = 524288 [pid 7320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7326] munmap(0x7fee02dd3000, 524288 [ 105.712505][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.716247][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.728978][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.729831][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.736809][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 105.746544][ T7321] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7320] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] write(3, "1000", 4 [pid 7327] <... openat resumed>) = 3 [pid 7326] <... munmap resumed>) = 0 [pid 7320] <... futex resumed>) = 0 [pid 7328] <... write resumed>) = 4 [pid 7327] write(3, "1000", 4 [pid 7326] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7328] close(3 [pid 7327] <... write resumed>) = 4 [pid 7326] <... openat resumed>) = 4 [pid 7320] <... mmap resumed>) = 0x7fee02e32000 [pid 7328] <... close resumed>) = 0 [pid 7327] close(3 [pid 7326] ioctl(4, LOOP_SET_FD, 3 [pid 7320] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7328] symlink("/dev/binderfs", "./binderfs" [pid 7327] <... close resumed>) = 0 [pid 7322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7321] <... write resumed>) = 57344 [pid 7320] <... mprotect resumed>) = 0 [pid 7328] <... symlink resumed>) = 0 [pid 7327] symlink("/dev/binderfs", "./binderfs" [pid 7322] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7328] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... symlink resumed>) = 0 [pid 7322] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7328] <... futex resumed>) = 0 [pid 7327] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7320] <... clone resumed>, parent_tid=[7329], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7329 [pid 7328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7327] <... futex resumed>) = 0 [pid 7322] <... mmap resumed>) = 0x7fee02e32000 [pid 7321] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7322] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7320] <... futex resumed>) = 0 [pid 7328] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7327] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7322] <... mprotect resumed>) = 0 [pid 7320] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7328] <... mprotect resumed>) = 0 [pid 7327] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7322] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7328] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7327] <... mprotect resumed>) = 0 [pid 7327] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7322] <... clone resumed>, parent_tid=[7330], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7330 [pid 7328] <... clone resumed>, parent_tid=[7331], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7331 [pid 7322] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... clone resumed>, parent_tid=[7332], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7332 [pid 7322] <... futex resumed>) = 0 [pid 7328] <... futex resumed>) = 0 [pid 7327] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7322] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7328] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7327] <... futex resumed>) = 0 [pid 7327] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7326] <... ioctl resumed>) = 0 [pid 7326] close(3) = 0 [pid 7326] mkdir("./bus", 0777) = 0 [pid 7326] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7332 attached [pid 7332] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7321] <... futex resumed>) = 0 [pid 7321] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7332] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 7330 attached [pid 7330] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7330] creat("./file1", 000 [pid 7332] <... mmap resumed>) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7329 attached [pid 7329] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7329] creat("./file1", 000) = 5 [pid 7329] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] <... futex resumed>) = 0 [pid 7320] exit_group(0) = ? [pid 7329] <... futex resumed>) = ? [pid 7329] +++ exited with 0 +++ [pid 7321] <... futex resumed>) = ? [pid 5075] lstat("./123/bus", [pid 7332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] +++ exited with 0 +++ [pid 7320] +++ exited with 0 +++ [pid 7326] <... mount resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7326] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7320, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7326] <... openat resumed>) = 3 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 7326] chdir("./bus" [pid 5077] <... restart_syscall resumed>) = 0 [pid 7326] <... chdir resumed>) = 0 [pid 7326] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7331 attached [pid 7326] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7326] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7326] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... openat resumed>) = 3 [pid 7332] <... write resumed>) = 524288 [pid 7326] <... futex resumed>) = 1 [pid 5077] fstat(3, [pid 7326] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./123/binderfs") = 0 [pid 5077] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7332] munmap(0x7fee02dd3000, 524288) = 0 [pid 7332] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7332] ioctl(4, LOOP_SET_FD, 3 [pid 7325] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7326] <... futex resumed>) = 0 [pid 7325] <... futex resumed>) = 1 [pid 7326] creat("./bus", 000 [pid 7325] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] <... creat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 7326] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7326] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 105.759344][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.761148][ T7326] loop0: detected capacity change from 0 to 1024 [ 105.784023][ T7323] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.804053][ T7332] loop2: detected capacity change from 0 to 1024 [pid 5075] fstat(4, [pid 7331] set_robust_list(0x7fee0b1f39e0, 24 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7325] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7332] <... ioctl resumed>) = 0 [pid 7326] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7325] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(4, [pid 7332] close(3) = 0 [pid 7331] <... set_robust_list resumed>) = 0 [pid 7330] <... creat resumed>) = 5 [pid 7323] <... write resumed>) = 57344 [pid 7322] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7332] mkdir("./bus", 0777 [pid 7330] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7332] <... mkdir resumed>) = 0 [pid 7331] memfd_create("syzkaller", 0 [pid 7330] <... futex resumed>) = 0 [pid 7323] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7332] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7330] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] lstat("./123/bus", [pid 7332] <... mount resumed>) = 0 [pid 7331] <... memfd_create resumed>) = 3 [pid 7323] <... futex resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7332] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7323] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] exit_group(0 [pid 5077] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7332] <... openat resumed>) = 3 [pid 7330] <... futex resumed>) = ? [pid 7322] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 7332] chdir("./bus" [pid 7331] <... mmap resumed>) = 0x7fee02dd3000 [pid 7330] +++ exited with 0 +++ [pid 7323] <... futex resumed>) = ? [pid 5077] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7332] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 7332] ioctl(4, LOOP_CLR_FD [pid 5077] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 7332] <... ioctl resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7332] close(4 [pid 5077] getdents64(4, [pid 7332] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7332] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(4, [pid 7332] <... futex resumed>) = 1 [pid 7327] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7332] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7327] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(4 [pid 7332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7327] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7332] creat("./bus", 000 [pid 7327] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] rmdir("./123/bus" [pid 7332] <... creat resumed>) = 4 [pid 7331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... rmdir resumed>) = 0 [pid 7332] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 7332] <... futex resumed>) = 1 [pid 7331] <... write resumed>) = 524288 [pid 7327] <... futex resumed>) = 0 [pid 7323] +++ exited with 0 +++ [pid 7322] +++ exited with 0 +++ [pid 5075] rmdir("./123/bus" [pid 7332] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] munmap(0x7fee02dd3000, 524288 [pid 7327] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 105.807250][ T52] hfsplus: b-tree write err: -5, ino 4 [ 105.826852][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.846515][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7331] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 7331] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7331] <... openat resumed>) = 4 [pid 5075] close(3 [pid 7331] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... close resumed>) = 0 [pid 7332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7327] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7322, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] close(3 [pid 5075] rmdir("./123") = 0 [pid 5075] mkdir("./124", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 7332] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7327] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7333 [pid 7325] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./123" [pid 7325] <... futex resumed>) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7331] <... ioctl resumed>) = 0 [pid 7331] close(3) = 0 [pid 7331] mkdir("./bus", 0777) = 0 [pid 7331] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7333 attached [pid 7325] <... mmap resumed>) = 0x7fee02e32000 [ 105.862661][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.867926][ T7331] loop4: detected capacity change from 0 to 1024 [ 105.870778][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.886630][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.897677][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.902406][ T7326] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] mkdir("./124", 0777 [pid 7331] <... mount resumed>) = 0 [pid 7331] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7331] chdir("./bus") = 0 [pid 7331] ioctl(4, LOOP_CLR_FD) = 0 [pid 7331] close(4 [pid 7333] set_robust_list(0x555556b055e0, 24 [pid 7331] <... close resumed>) = 0 [pid 7325] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 7331] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7333] <... set_robust_list resumed>) = 0 [pid 7333] chdir("./124" [pid 7328] <... futex resumed>) = 0 [pid 7325] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7333] <... chdir resumed>) = 0 [pid 7328] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7331] <... futex resumed>) = 0 [pid 7328] <... futex resumed>) = 1 [pid 7325] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 7333] <... prctl resumed>) = 0 [pid 7331] creat("./bus", 000 [pid 7328] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7333] setpgid(0, 0 [pid 7331] <... creat resumed>) = 4 [pid 7325] <... clone resumed>, parent_tid=[7334], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7334 [pid 5081] fstat(3, ./strace-static-x86_64: Process 7334 attached [pid 7333] <... setpgid resumed>) = 0 [pid 7331] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] <... write resumed>) = 57344 [pid 7325] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7326] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7326] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7331] <... futex resumed>) = 1 [pid 7327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7325] <... futex resumed>) = 0 [pid 5077] close(3 [pid 7328] <... futex resumed>) = 0 [pid 7334] set_robust_list(0x7fee02e529e0, 24 [pid 5081] getdents64(3, [pid 7333] <... openat resumed>) = 3 [pid 7333] write(3, "1000", 4) = 4 [pid 7333] close(3) = 0 [pid 7334] <... set_robust_list resumed>) = 0 [pid 7331] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7328] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 7334] creat("./file1", 000 [pid 7331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7328] <... futex resumed>) = 0 [pid 7327] <... futex resumed>) = 0 [pid 5081] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7334] <... creat resumed>) = 5 [pid 7331] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7328] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7334] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] lstat("./126/binderfs", [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7335 [pid 7334] <... futex resumed>) = 1 [pid 7327] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7325] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7334] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7327] <... mprotect resumed>) = 0 [pid 7325] exit_group(0 [ 105.906101][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.921032][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.929647][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.940616][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.949045][ T7332] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] unlink("./126/binderfs"./strace-static-x86_64: Process 7335 attached [pid 7334] <... futex resumed>) = ? [pid 7333] symlink("/dev/binderfs", "./binderfs" [pid 7327] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7326] <... futex resumed>) = ? [pid 7325] <... exit_group resumed>) = ? [pid 7332] <... write resumed>) = 57344 [pid 5081] <... unlink resumed>) = 0 [pid 7335] set_robust_list(0x555556b055e0, 24 [pid 7333] <... symlink resumed>) = 0 [pid 7332] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] +++ exited with 0 +++ [pid 7335] <... set_robust_list resumed>) = 0 [pid 7334] +++ exited with 0 +++ [pid 7333] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7332] <... futex resumed>) = 0 [pid 7325] +++ exited with 0 +++ ./strace-static-x86_64: Process 7336 attached [pid 7335] chdir("./124" [pid 7333] <... futex resumed>) = 0 [pid 7332] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7325, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7335] <... chdir resumed>) = 0 [pid 7333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7333] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7335] <... prctl resumed>) = 0 [pid 7333] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7335] setpgid(0, 0 [pid 7333] <... mprotect resumed>) = 0 [pid 7335] <... setpgid resumed>) = 0 [pid 7333] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7327] <... clone resumed>, parent_tid=[7336], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7336 [pid 7336] set_robust_list(0x7fee02e529e0, 24 [pid 7335] <... openat resumed>) = 3 [pid 7333] <... clone resumed>, parent_tid=[7337], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7337 [pid 5074] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7335] write(3, "1000", 4 [pid 7333] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7335] <... write resumed>) = 4 [pid 7333] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7335] close(3 [pid 7333] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] <... openat resumed>) = 3 [pid 7335] <... close resumed>) = 0 [pid 5074] fstat(3, [pid 7335] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7335] <... symlink resumed>) = 0 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7337 attached [pid 7336] <... set_robust_list resumed>) = 0 [pid 7335] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7337] set_robust_list(0x7fee0b1f39e0, 24 [pid 7336] creat("./file1", 000 [pid 7335] <... futex resumed>) = 0 [pid 7327] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5074] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7335] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./124/binderfs", [pid 7335] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7335] <... mprotect resumed>) = 0 [pid 5081] lstat("./126/bus", [pid 5074] unlink("./124/binderfs" [pid 7335] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5081] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7337] <... set_robust_list resumed>) = 0 [pid 7335] <... clone resumed>, parent_tid=[7338], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7338 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7336] <... creat resumed>) = 5 ./strace-static-x86_64: Process 7338 attached [pid 7337] memfd_create("syzkaller", 0 [pid 7336] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7327] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7335] <... futex resumed>) = 0 [ 105.963388][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.972549][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.981045][ T11] hfsplus: b-tree write err: -5, ino 4 [ 105.988783][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [ 105.996430][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.006040][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7335] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 4 [pid 7338] set_robust_list(0x7fee0b1f39e0, 24 [pid 7337] <... memfd_create resumed>) = 3 [pid 7336] <... futex resumed>) = 0 [pid 7331] <... write resumed>) = 57344 [pid 7328] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7338] <... set_robust_list resumed>) = 0 [pid 7337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7336] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] <... futex resumed>) = 0 [pid 7327] exit_group(0 [pid 7338] memfd_create("syzkaller", 0 [pid 7337] <... mmap resumed>) = 0x7fee02dd3000 [pid 7336] <... futex resumed>) = ? [pid 7331] <... futex resumed>) = 0 [pid 7328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7327] <... exit_group resumed>) = ? [pid 7338] <... memfd_create resumed>) = 3 [pid 7337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7336] +++ exited with 0 +++ [pid 7331] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7328] <... mmap resumed>) = 0x7fee02e32000 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7328] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7338] <... mmap resumed>) = 0x7fee02dd3000 [pid 7332] <... futex resumed>) = ? [pid 7328] <... mprotect resumed>) = 0 [pid 5081] fstat(4, [pid 7338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7328] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7338] <... write resumed>) = 524288 [pid 7332] +++ exited with 0 +++ [pid 7327] +++ exited with 0 +++ [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7338] munmap(0x7fee02dd3000, 524288 [pid 7328] <... clone resumed>, parent_tid=[7339], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7339 [pid 5081] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7327, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7338] <... munmap resumed>) = 0 [pid 7337] <... write resumed>) = 524288 [pid 7328] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7338] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7328] <... futex resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7338] <... openat resumed>) = 4 [pid 7328] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7338] ioctl(4, LOOP_SET_FD, 3 [pid 5081] getdents64(4, [pid 5076] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5081] close(4 [pid 5076] fstat(3, [pid 5074] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] rmdir("./126/bus" [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5076] lstat("./125/binderfs", [pid 7337] munmap(0x7fee02dd3000, 524288 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./124/bus", ./strace-static-x86_64: Process 7339 attached [pid 7337] <... munmap resumed>) = 0 [pid 5081] close(3 [pid 5076] unlink("./125/binderfs" [pid 7339] set_robust_list(0x7fee02e529e0, 24 [pid 7337] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7337] <... openat resumed>) = 4 [pid 5081] rmdir("./126" [pid 5076] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7337] ioctl(4, LOOP_SET_FD, 3 [pid 7339] <... set_robust_list resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7338] <... ioctl resumed>) = 0 [pid 7338] close(3) = 0 [pid 7338] mkdir("./bus", 0777) = 0 [pid 7338] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7338] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7338] chdir("./bus") = 0 [pid 7338] ioctl(4, LOOP_CLR_FD) = 0 [pid 7338] close(4) = 0 [pid 7338] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7338] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7337] <... ioctl resumed>) = 0 [pid 7337] close(3) = 0 [pid 7337] mkdir("./bus", 0777 [pid 7339] creat("./file1", 000 [pid 5081] mkdir("./127", 0777 [pid 5074] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7337] <... mkdir resumed>) = 0 [pid 7337] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7337] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7337] chdir("./bus") = 0 [pid 7337] ioctl(4, LOOP_CLR_FD) = 0 [pid 7337] close(4) = 0 [pid 7337] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7333] <... futex resumed>) = 0 [pid 7335] <... futex resumed>) = 0 [pid 7337] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7335] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 4 [pid 5081] <... mkdir resumed>) = 0 [pid 7335] <... futex resumed>) = 1 [pid 7338] <... futex resumed>) = 0 [pid 7338] creat("./bus", 000 [pid 7339] <... creat resumed>) = 5 [pid 7338] <... creat resumed>) = 4 [pid 7335] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7333] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] fstat(4, [pid 7338] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7339] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7333] <... futex resumed>) = 1 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7339] <... futex resumed>) = 1 [pid 7335] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7328] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7328] exit_group(0 [pid 7331] <... futex resumed>) = ? [pid 7328] <... exit_group resumed>) = ? [pid 7331] +++ exited with 0 +++ [pid 7335] <... futex resumed>) = 0 [pid 7338] <... futex resumed>) = 0 [pid 7335] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7338] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5074] getdents64(4, [pid 7339] +++ exited with 0 +++ [pid 7328] +++ exited with 0 +++ [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7328, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] close(4 [pid 5081] <... close resumed>) = 0 [ 106.014979][ T7331] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.016597][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 106.039419][ T7338] loop3: detected capacity change from 0 to 1024 [ 106.052018][ T7337] loop1: detected capacity change from 0 to 1024 [ 106.058863][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... restart_syscall resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7337] <... futex resumed>) = 0 [pid 7337] creat("./bus", 000) = 4 [pid 5074] rmdir("./124/bus" [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7340 [pid 7337] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7333] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7333] <... futex resumed>) = 0 [pid 7333] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 7337] <... futex resumed>) = 1 [pid 7337] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 5080] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 5080] umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./124" [pid 5080] lstat("./123/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./123/binderfs") = 0 [pid 5074] mkdir("./125", 0777 [pid 5080] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7340 attached ) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7340] set_robust_list(0x555556b055e0, 24 [pid 5080] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7340] <... set_robust_list resumed>) = 0 [pid 7335] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./125/bus", [pid 5074] <... openat resumed>) = 3 [pid 7335] <... futex resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7340] chdir("./127" [pid 7335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7340] <... chdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7335] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] lstat("./123/bus", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 7340] <... prctl resumed>) = 0 [pid 7340] setpgid(0, 0 [pid 7335] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 7340] <... setpgid resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7335] <... mprotect resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 106.080148][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.095872][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.103908][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7341 attached ) = 3 [pid 7335] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./123/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7340] write(3, "1000", 4 [pid 7341] set_robust_list(0x555556b055e0, 24 [pid 7340] <... write resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7341 [pid 7340] close(3 [pid 7335] <... clone resumed>, parent_tid=[7342], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7342 [pid 7333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] openat(AT_FDCWD, "./123/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7341] <... set_robust_list resumed>) = 0 [pid 7340] <... close resumed>) = 0 [pid 7335] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] symlink("/dev/binderfs", "./binderfs" [pid 7335] <... futex resumed>) = 0 [pid 7333] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 7340] <... symlink resumed>) = 0 [pid 7335] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] fstat(4, [pid 7341] chdir("./125" [pid 7340] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] close(4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7341] <... chdir resumed>) = 0 [pid 7340] <... futex resumed>) = 0 [pid 7333] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7333] <... mprotect resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 7341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7340] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7333] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7343], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7343 ./strace-static-x86_64: Process 7342 attached [pid 7333] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] set_robust_list(0x7fee02e529e0, 24 [pid 7333] <... futex resumed>) = 0 [pid 7342] <... set_robust_list resumed>) = 0 [pid 7333] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7342] creat("./file1", 000./strace-static-x86_64: Process 7343 attached [pid 7343] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7343] creat("./file1", 000 [pid 7342] <... creat resumed>) = 5 [pid 7342] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7342] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7341] <... prctl resumed>) = 0 [pid 7340] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7335] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [ 106.130475][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.150935][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.154711][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.159004][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.173372][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] rmdir("./125/bus" [pid 7341] setpgid(0, 0 [pid 7340] <... mprotect resumed>) = 0 [pid 5080] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 7341] <... setpgid resumed>) = 0 [pid 7341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7341] write(3, "1000", 4) = 4 [pid 7341] close(3) = 0 [pid 7341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7341] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7341] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7341] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7344], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7344 [pid 7341] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7341] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7340] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 7344 attached [pid 5080] close(4 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7344] set_robust_list(0x7fee0b1f39e0, 24 [pid 7340] <... clone resumed>, parent_tid=[7345], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7345 [pid 5080] <... close resumed>) = 0 [pid 5076] close(3 [pid 7344] <... set_robust_list resumed>) = 0 [pid 7340] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./123/bus" [pid 5076] <... close resumed>) = 0 [pid 7344] memfd_create("syzkaller", 0 [pid 7340] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] rmdir("./125" [pid 7344] <... memfd_create resumed>) = 3 [pid 7340] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5076] <... rmdir resumed>) = 0 [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./126", 0777 [pid 7344] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] close(3 [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7345 attached [pid 7344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7343] <... creat resumed>) = 5 [pid 5080] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7344] <... write resumed>) = 524288 [pid 5080] rmdir("./123" [pid 5076] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] mkdir("./124", 0777 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 7345] set_robust_list(0x7fee0b1f39e0, 24 [pid 7343] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 7344] munmap(0x7fee02dd3000, 524288 [pid 5080] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7344] <... munmap resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7344] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7346 [pid 7344] <... openat resumed>) = 4 [pid 5080] close(3 [pid 7344] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... close resumed>) = 0 [pid 7345] <... set_robust_list resumed>) = 0 [pid 7343] <... futex resumed>) = 0 [pid 7338] <... write resumed>) = 57344 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7346 attached [pid 7345] memfd_create("syzkaller", 0 [pid 7344] <... ioctl resumed>) = 0 [pid 7343] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7338] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7337] <... write resumed>) = 57344 [pid 7335] exit_group(0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7347 [pid 7346] set_robust_list(0x555556b055e0, 24 [pid 7345] <... memfd_create resumed>) = 3 [pid 7342] <... futex resumed>) = ? [pid 7338] <... futex resumed>) = ? [pid 7337] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... exit_group resumed>) = ? [pid 7344] close(3 [pid 7342] +++ exited with 0 +++ ./strace-static-x86_64: Process 7347 attached [pid 7347] set_robust_list(0x555556b055e0, 24) = 0 [pid 7347] chdir("./124" [pid 7338] +++ exited with 0 +++ [pid 7346] <... set_robust_list resumed>) = 0 [pid 7345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7337] <... futex resumed>) = 0 [pid 7335] +++ exited with 0 +++ [pid 7333] exit_group(0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7335, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7345] <... mmap resumed>) = 0x7fee02dd3000 [pid 7333] <... exit_group resumed>) = ? [pid 7343] <... futex resumed>) = ? [pid 7346] chdir("./126" [pid 7343] +++ exited with 0 +++ [pid 7337] +++ exited with 0 +++ [pid 7347] <... chdir resumed>) = 0 [pid 5077] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7333] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7333, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] fstat(3, [pid 5075] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5075] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7346] <... chdir resumed>) = 0 [pid 7345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 3 [pid 5077] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./124/binderfs", [pid 5075] getdents64(3, [pid 7347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7347] <... prctl resumed>) = 0 [pid 7346] <... prctl resumed>) = 0 [pid 5077] unlink("./124/binderfs" [pid 5075] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7347] setpgid(0, 0 [pid 7346] setpgid(0, 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7347] <... setpgid resumed>) = 0 [pid 7346] <... setpgid resumed>) = 0 [pid 7345] <... write resumed>) = 524288 [pid 7344] <... close resumed>) = 0 [pid 5077] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./124/binderfs", [pid 7347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 106.174956][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.189072][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.196878][ T7338] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.205010][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.212473][ T7337] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.216955][ T7344] loop0: detected capacity change from 0 to 1024 [pid 7345] munmap(0x7fee02dd3000, 524288 [pid 7344] mkdir("./bus", 0777 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7346] write(3, "1000", 4 [pid 7345] <... munmap resumed>) = 0 [pid 7344] <... mkdir resumed>) = 0 [pid 7346] <... write resumed>) = 4 [pid 7345] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7344] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7346] close(3 [pid 7345] <... openat resumed>) = 4 [pid 7344] <... mount resumed>) = 0 [pid 7347] <... openat resumed>) = 3 [pid 7346] <... close resumed>) = 0 [pid 5075] unlink("./124/binderfs" [pid 7347] write(3, "1000", 4 [pid 7346] symlink("/dev/binderfs", "./binderfs" [pid 7345] ioctl(4, LOOP_SET_FD, 3 [pid 7344] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7347] <... write resumed>) = 4 [pid 7346] <... symlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7346] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... openat resumed>) = 3 [pid 7346] <... futex resumed>) = 0 [pid 7346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7344] chdir("./bus" [pid 7346] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7346] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7344] <... chdir resumed>) = 0 [pid 7346] <... mprotect resumed>) = 0 [pid 7346] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7344] ioctl(4, LOOP_CLR_FD) = 0 [pid 7346] <... clone resumed>, parent_tid=[7348], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7348 [pid 7344] close(4 [pid 7347] close(3 [pid 7346] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... close resumed>) = 0 [pid 5075] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7346] <... futex resumed>) = 0 [pid 7344] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7346] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7344] <... futex resumed>) = 1 [pid 7341] <... futex resumed>) = 0 [pid 7344] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7341] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7341] <... futex resumed>) = 0 [pid 7344] creat("./bus", 000 [pid 7341] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... creat resumed>) = 4 [pid 7344] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7341] <... futex resumed>) = 0 [pid 7344] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7341] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7341] <... futex resumed>) = 0 [pid 7344] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7341] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7347] <... close resumed>) = 0 [pid 7347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7345] <... ioctl resumed>) = 0 [pid 7347] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7345] close(3 [pid 7347] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7347] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7345] <... close resumed>) = 0 [pid 7347] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7349], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7349 [pid 7345] mkdir("./bus", 0777 [pid 7347] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7345] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7348 attached [pid 5077] <... umount2 resumed>) = 0 [pid 7345] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7349 attached [pid 7349] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7349] memfd_create("syzkaller", 0 [pid 7345] <... mount resumed>) = 0 [pid 7349] <... memfd_create resumed>) = 3 [pid 7345] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7345] chdir("./bus") = 0 [pid 7345] ioctl(4, LOOP_CLR_FD) = 0 [pid 7348] set_robust_list(0x7fee0b1f39e0, 24 [ 106.245100][ T52] hfsplus: b-tree write err: -5, ino 4 [ 106.252539][ T7345] loop5: detected capacity change from 0 to 1024 [ 106.271260][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7348] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./124/bus", [pid 7348] memfd_create("syzkaller", 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7348] <... memfd_create resumed>) = 3 [pid 5077] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7348] <... mmap resumed>) = 0x7fee02dd3000 [pid 7345] close(4 [pid 5077] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7345] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 7345] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] fstat(4, [pid 7345] <... futex resumed>) = 1 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7345] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7340] <... futex resumed>) = 0 [pid 5077] getdents64(4, [pid 7340] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7340] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 7340] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 7349] <... write resumed>) = 524288 [pid 7345] creat("./bus", 000 [pid 5077] <... close resumed>) = 0 [pid 7348] <... write resumed>) = 524288 [pid 7345] <... creat resumed>) = 4 [pid 5077] rmdir("./124/bus" [pid 7345] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7340] <... futex resumed>) = 0 [pid 7345] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7340] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 7345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7340] <... futex resumed>) = 0 [pid 7348] munmap(0x7fee02dd3000, 524288 [pid 7345] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7340] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(3, [pid 7348] <... munmap resumed>) = 0 [pid 7341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7348] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7341] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7348] <... openat resumed>) = 4 [pid 7341] <... futex resumed>) = 0 [pid 7348] ioctl(4, LOOP_SET_FD, 3 [pid 7341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] close(3 [pid 7349] munmap(0x7fee02dd3000, 524288 [pid 7341] <... mmap resumed>) = 0x7fee02e32000 [pid 7349] <... munmap resumed>) = 0 [pid 7341] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7341] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7349] <... openat resumed>) = 4 [pid 7349] ioctl(4, LOOP_SET_FD, 3 [pid 7341] <... clone resumed>, parent_tid=[7350], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7350 [ 106.293059][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 106.303816][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.311404][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.329152][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7341] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 7341] <... futex resumed>) = 0 [pid 5077] rmdir("./124" [pid 7341] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./125", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5075] lstat("./124/bus", [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7348] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7348] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7348] <... close resumed>) = 0 ./strace-static-x86_64: Process 7350 attached [pid 7349] <... ioctl resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] close(3 [pid 5075] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7349] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7349] mkdir("./bus", 0777 [pid 5075] fstat(4, [pid 7349] <... mkdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7349] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./124/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./124" [pid 7350] set_robust_list(0x7fee02e529e0, 24 [pid 7348] mkdir("./bus", 0777 [pid 5077] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 7349] <... mount resumed>) = 0 [pid 5075] mkdir("./125", 0777) = 0 [pid 7349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7349] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 7349] chdir("./bus" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7349] <... chdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7349] ioctl(4, LOOP_CLR_FD [pid 5075] close(3 [pid 7349] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7349] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7349] <... close resumed>) = 0 [pid 7349] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7351 [pid 7349] <... futex resumed>) = 1 [pid 7349] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7350] <... set_robust_list resumed>) = 0 [pid 7348] <... mkdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 106.340529][ T7348] loop2: detected capacity change from 0 to 1024 [ 106.343846][ T7349] loop4: detected capacity change from 0 to 1024 [ 106.356811][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.364559][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.364761][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.379423][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7350] creat("./file1", 000 [pid 7348] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7347] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7348] <... mount resumed>) = 0 [pid 7347] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7349] <... futex resumed>) = 0 [pid 7347] <... futex resumed>) = 1 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7352 [pid 7349] creat("./bus", 000 [pid 7347] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7349] <... creat resumed>) = 4 [pid 7348] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7340] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] <... openat resumed>) = 3 [pid 7340] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 1 [pid 7348] chdir("./bus" [pid 7347] <... futex resumed>) = 0 [pid 7340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7349] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7348] <... chdir resumed>) = 0 [pid 7347] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... mmap resumed>) = 0x7fee02e32000 [pid 7349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7348] ioctl(4, LOOP_CLR_FD [pid 7347] <... futex resumed>) = 0 [pid 7340] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7349] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7348] <... ioctl resumed>) = 0 [pid 7347] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7340] <... mprotect resumed>) = 0 [pid 7348] close(4 [pid 7340] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7348] <... close resumed>) = 0 [pid 7348] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... clone resumed>, parent_tid=[7353], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7353 [pid 7348] <... futex resumed>) = 1 [pid 7346] <... futex resumed>) = 0 [pid 7340] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... futex resumed>) = 0 [pid 7348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7346] <... futex resumed>) = 0 [pid 7340] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] creat("./bus", 000 [pid 7346] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] <... creat resumed>) = 4 [pid 7348] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7351 attached ) = 1 [pid 7346] <... futex resumed>) = 0 [pid 7351] set_robust_list(0x555556b055e0, 24 [pid 7348] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... set_robust_list resumed>) = 0 [pid 7348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7346] <... futex resumed>) = 0 [pid 7351] chdir("./125" [pid 7348] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7346] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7351] <... chdir resumed>) = 0 [pid 7351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7351] setpgid(0, 0) = 0 [pid 7351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 7353 attached [pid 7351] write(3, "1000", 4./strace-static-x86_64: Process 7352 attached [pid 7353] set_robust_list(0x7fee02e529e0, 24 [pid 7351] <... write resumed>) = 4 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7352] set_robust_list(0x555556b055e0, 24 [pid 7351] close(3 [pid 7353] creat("./file1", 000 [pid 7352] <... set_robust_list resumed>) = 0 [pid 7351] <... close resumed>) = 0 [pid 7352] chdir("./125" [pid 7351] symlink("/dev/binderfs", "./binderfs" [pid 7352] <... chdir resumed>) = 0 [pid 7351] <... symlink resumed>) = 0 [pid 7352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7351] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... prctl resumed>) = 0 [pid 7351] <... futex resumed>) = 0 [pid 7352] setpgid(0, 0 [pid 7351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7352] <... setpgid resumed>) = 0 [pid 7351] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7351] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7352] <... openat resumed>) = 3 [pid 7351] <... mprotect resumed>) = 0 [pid 7352] write(3, "1000", 4 [pid 7351] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7352] <... write resumed>) = 4 [pid 7352] close(3 [pid 7351] <... clone resumed>, parent_tid=[7354], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7354 [pid 7352] <... close resumed>) = 0 [pid 7351] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] symlink("/dev/binderfs", "./binderfs" [pid 7351] <... futex resumed>) = 0 [pid 7352] <... symlink resumed>) = 0 [pid 7351] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7352] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7354 attached ) = 0x7fee0b1d3000 [pid 7352] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7354] set_robust_list(0x7fee0b1f39e0, 24 [pid 7352] <... mprotect resumed>) = 0 [ 106.388536][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.406493][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.415682][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.422994][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.424042][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.437865][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7352] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7347] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... clone resumed>, parent_tid=[7355], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7355 [pid 7347] <... futex resumed>) = 0 [pid 7352] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7352] <... futex resumed>) = 0 [pid 7340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7354] <... set_robust_list resumed>) = 0 [pid 7352] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7347] <... mmap resumed>) = 0x7fee02e32000 [pid 7354] memfd_create("syzkaller", 0 [pid 7347] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7354] <... memfd_create resumed>) = 3 [pid 7347] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7355 attached [pid 7355] set_robust_list(0x7fee0b1f39e0, 24 [pid 7354] <... mmap resumed>) = 0x7fee02dd3000 [pid 7347] <... clone resumed>, parent_tid=[7356], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7356 [pid 7347] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7355] <... set_robust_list resumed>) = 0 [pid 7347] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7355] memfd_create("syzkaller", 0 [pid 7346] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7355] <... memfd_create resumed>) = 3 [pid 7346] <... futex resumed>) = 0 [pid 7355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7355] <... mmap resumed>) = 0x7fee02dd3000 [pid 7346] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7356 attached [pid 7355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7346] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7346] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7357], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7357 [pid 7346] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7346] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7356] set_robust_list(0x7fee02e529e0, 24 [pid 7354] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7357 attached [pid 7357] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7357] creat("./file1", 000 [pid 7355] <... write resumed>) = 524288 [pid 7350] <... creat resumed>) = 5 [pid 7344] <... write resumed>) = 57344 [pid 7356] <... set_robust_list resumed>) = 0 [pid 7355] munmap(0x7fee02dd3000, 524288 [pid 7354] munmap(0x7fee02dd3000, 524288 [pid 7350] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] creat("./file1", 000 [pid 7355] <... munmap resumed>) = 0 [pid 7354] <... munmap resumed>) = 0 [pid 7350] <... futex resumed>) = 0 [pid 7344] <... futex resumed>) = 0 [pid 7355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7354] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7350] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7344] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7341] exit_group(0 [pid 7355] <... openat resumed>) = 4 [pid 7354] <... openat resumed>) = 4 [pid 7350] <... futex resumed>) = ? [pid 7344] <... futex resumed>) = ? [pid 7341] <... exit_group resumed>) = ? [ 106.449292][ T7344] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.469227][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.475265][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7355] ioctl(4, LOOP_SET_FD, 3 [pid 7354] ioctl(4, LOOP_SET_FD, 3 [pid 7350] +++ exited with 0 +++ [pid 7344] +++ exited with 0 +++ [pid 7341] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7341, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7355] <... ioctl resumed>) = 0 [pid 7355] close(3) = 0 [pid 7355] mkdir("./bus", 0777) = 0 [pid 7355] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7353] <... creat resumed>) = 5 [pid 7354] <... ioctl resumed>) = 0 [pid 7356] <... creat resumed>) = 5 [pid 7354] close(3 [pid 7356] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] <... close resumed>) = 0 [pid 7356] <... futex resumed>) = 0 [pid 7356] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7354] mkdir("./bus", 0777) = 0 [pid 7353] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7345] <... write resumed>) = 57344 [pid 7354] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7353] <... futex resumed>) = 0 [pid 7345] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7345] <... futex resumed>) = 0 [pid 7345] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7340] exit_group(0 [pid 5074] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7353] <... futex resumed>) = ? [pid 7345] <... futex resumed>) = ? [pid 7340] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7354] <... mount resumed>) = 0 [pid 7353] +++ exited with 0 +++ [pid 7345] +++ exited with 0 +++ [pid 7340] +++ exited with 0 +++ [pid 7355] <... mount resumed>) = 0 [pid 7355] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7355] chdir("./bus") = 0 [pid 7355] ioctl(4, LOOP_CLR_FD) = 0 [pid 7355] close(4) = 0 [pid 7355] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7355] <... futex resumed>) = 1 [pid 7355] creat("./bus", 000) = 4 [pid 7355] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7355] <... futex resumed>) = 1 [pid 7355] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7354] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 7354] <... openat resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7340, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 106.498370][ T7345] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.498957][ T7355] loop3: detected capacity change from 0 to 1024 [ 106.505897][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.513101][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.519584][ T7354] loop1: detected capacity change from 0 to 1024 [ 106.541012][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] fstat(3, [pid 7354] chdir("./bus") = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7354] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7354] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7354] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7354] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 5081] fstat(3, [pid 5074] lstat("./125/binderfs", [pid 7354] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7351] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7351] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7354] creat("./bus", 000 [pid 7351] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] unlink("./125/binderfs" [pid 7354] <... creat resumed>) = 4 [pid 5081] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7354] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 7354] <... futex resumed>) = 1 [pid 7351] <... futex resumed>) = 0 [pid 5081] lstat("./127/binderfs", [pid 5074] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7354] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7351] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7351] <... futex resumed>) = 0 [pid 7354] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7351] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./127/binderfs") = 0 [pid 5081] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7352] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7352] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7352] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7358], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7358 [pid 7352] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7357] <... creat resumed>) = 5 [pid 7357] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.557858][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.577434][ T52] hfsplus: b-tree write err: -5, ino 4 [ 106.580451][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.592167][ T7349] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.592218][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7357] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./125/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7349] <... write resumed>) = 57344 [pid 5074] fstat(4, [pid 7349] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7349] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7358 attached [pid 7351] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] getdents64(4, [pid 7358] set_robust_list(0x7fee02e529e0, 24 [pid 7351] <... futex resumed>) = 0 [pid 7358] <... set_robust_list resumed>) = 0 [pid 7351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7358] creat("./file1", 000 [pid 7351] <... mmap resumed>) = 0x7fee02e32000 [pid 7351] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7351] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7359], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7359 [pid 7351] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7351] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7359 attached [pid 7359] set_robust_list(0x7fee02e529e0, 24) = 0 [ 106.614641][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.623048][ T9] hfsplus: b-tree write err: -5, ino 4 [ 106.631860][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.641445][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.649615][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.653934][ T7348] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7359] creat("./file1", 000 [pid 7352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7347] exit_group(0 [pid 5074] getdents64(4, [pid 7356] <... futex resumed>) = ? [pid 7349] <... futex resumed>) = ? [pid 7347] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7356] +++ exited with 0 +++ [pid 7349] +++ exited with 0 +++ [pid 7347] +++ exited with 0 +++ [pid 5074] close(4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7347, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./127/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, [pid 5080] umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./127/bus") = 0 [pid 5081] getdents64(3, [pid 7351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./125/bus" [pid 5080] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5080] fstat(3, [pid 5074] getdents64(3, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] close(3 [pid 5080] umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5081] rmdir("./127" [pid 5080] lstat("./124/binderfs", [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] rmdir("./125" [pid 5081] mkdir("./128", 0777 [pid 5080] unlink("./124/binderfs" [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./126", 0777 [pid 7359] <... creat resumed>) = 5 [ 106.658088][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.671652][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.679158][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.687961][ T7355] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] <... openat resumed>) = 3 [pid 7359] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7358] <... creat resumed>) = 5 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7360 ./strace-static-x86_64: Process 7360 attached [pid 7359] <... futex resumed>) = 0 [pid 7358] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7355] <... write resumed>) = 57344 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = 0 [pid 7360] set_robust_list(0x555556b055e0, 24 [pid 7359] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7358] <... futex resumed>) = 0 [pid 7355] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] exit_group(0 [pid 7348] <... write resumed>) = 57344 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7360] <... set_robust_list resumed>) = 0 [pid 7355] <... futex resumed>) = ? [pid 7352] <... exit_group resumed>) = ? [pid 5081] close(3 [pid 7348] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7360] chdir("./126" [pid 7358] +++ exited with 0 +++ [pid 7355] +++ exited with 0 +++ [pid 7354] <... write resumed>) = 57344 [pid 7352] +++ exited with 0 +++ [pid 7348] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./124/bus", [pid 7360] <... chdir resumed>) = 0 [pid 7354] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] exit_group(0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7352, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7357] <... futex resumed>) = ? [pid 7354] <... futex resumed>) = 0 [pid 7351] exit_group(0 [pid 7348] <... futex resumed>) = ? [pid 7346] <... exit_group resumed>) = ? [pid 5080] umount2("./124/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7360] <... prctl resumed>) = 0 [pid 7359] <... futex resumed>) = ? [pid 7357] +++ exited with 0 +++ [pid 7351] <... exit_group resumed>) = ? [pid 7348] +++ exited with 0 +++ [pid 7346] +++ exited with 0 +++ [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7361 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7360] setpgid(0, 0 [pid 7359] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./124/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7346, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7360] <... setpgid resumed>) = 0 [pid 7354] +++ exited with 0 +++ [pid 7351] +++ exited with 0 +++ [pid 5080] <... openat resumed>) = 4 [pid 7360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] fstat(4, [pid 7360] <... openat resumed>) = 3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7351, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7360] write(3, "1000", 4 [pid 5080] getdents64(4, [pid 5076] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7360] <... write resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7360] close(3 [pid 5080] getdents64(4, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7360] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7361 attached [pid 7360] symlink("/dev/binderfs", "./binderfs" [pid 5080] close(4 [pid 5077] <... openat resumed>) = 3 [pid 5076] fstat(3, [pid 5075] fstat(3, [pid 7361] set_robust_list(0x555556b055e0, 24 [pid 7360] <... symlink resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] fstat(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7361] <... set_robust_list resumed>) = 0 [pid 7360] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./124/bus" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7361] chdir("./128" [pid 7360] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(3, [pid 7361] <... chdir resumed>) = 0 [pid 7360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7360] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7361] <... prctl resumed>) = 0 [pid 7360] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] close(3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./126/binderfs", [pid 5075] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7361] setpgid(0, 0 [pid 7360] <... mprotect resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] lstat("./125/binderfs", [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] <... setpgid resumed>) = 0 [pid 7360] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] rmdir("./124" [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./126/binderfs" [pid 7361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... rmdir resumed>) = 0 [pid 5077] unlink("./125/binderfs" [pid 5076] <... unlink resumed>) = 0 [ 106.715451][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.715485][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 106.722745][ T7354] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] lstat("./125/binderfs", [pid 7361] <... openat resumed>) = 3 [pid 7360] <... clone resumed>, parent_tid=[7362], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7362 [pid 5080] mkdir("./125", 0777 [pid 5077] <... unlink resumed>) = 0 [pid 5076] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7362 attached [pid 7361] write(3, "1000", 4 [pid 7360] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./125/binderfs" [pid 7362] set_robust_list(0x7fee0b1f39e0, 24 [pid 7360] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 7362] <... set_robust_list resumed>) = 0 [pid 7360] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 5075] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7362] memfd_create("syzkaller", 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7362] <... memfd_create resumed>) = 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] close(3 [pid 7362] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] <... close resumed>) = 0 [pid 7362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7363 [pid 7362] <... write resumed>) = 524288 [pid 7362] munmap(0x7fee02dd3000, 524288) = 0 [pid 7362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7362] ioctl(4, LOOP_SET_FD, 3 [pid 7361] <... write resumed>) = 4 [pid 7361] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 7361] <... close resumed>) = 0 [pid 7361] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7361] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] lstat("./125/bus", [pid 7361] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7361] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] lstat("./125/bus", [pid 5075] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7361] <... mprotect resumed>) = 0 [pid 5076] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7361] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] <... clone resumed>, parent_tid=[7364], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7364 [pid 5077] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(4, [pid 5076] lstat("./126/bus", [pid 7361] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5077] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] fstat(4, [pid 5075] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5075] close(4 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 7361] <... futex resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] rmdir("./125/bus" [pid 7361] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 5076] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./125/bus" [pid 5076] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3./strace-static-x86_64: Process 7363 attached [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] fstat(4, [pid 5075] rmdir("./125" [pid 7363] set_robust_list(0x555556b055e0, 24 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7364 attached [pid 7363] <... set_robust_list resumed>) = 0 [pid 5077] close(3 [pid 5076] getdents64(4, [pid 5075] mkdir("./126", 0777 [pid 7364] set_robust_list(0x7fee0b1f39e0, 24 [pid 7363] chdir("./125" [pid 5077] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... mkdir resumed>) = 0 [pid 7364] <... set_robust_list resumed>) = 0 [pid 7363] <... chdir resumed>) = 0 [pid 5077] rmdir("./125" [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7364] memfd_create("syzkaller", 0 [pid 7363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7362] <... ioctl resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7364] <... memfd_create resumed>) = 3 [pid 7363] <... prctl resumed>) = 0 [pid 7362] close(3 [pid 5077] mkdir("./126", 0777 [pid 5076] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7363] setpgid(0, 0 [pid 7362] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7364] <... mmap resumed>) = 0x7fee02dd3000 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] close(3 [pid 7363] <... setpgid resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] rmdir("./126/bus" [pid 5075] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7365 [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7366 ./strace-static-x86_64: Process 7365 attached [pid 7365] set_robust_list(0x555556b055e0, 24) = 0 [pid 7365] chdir("./126") = 0 [pid 7365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7365] setpgid(0, 0./strace-static-x86_64: Process 7366 attached ) = 0 [pid 7366] set_robust_list(0x555556b055e0, 24) = 0 [pid 7365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7366] chdir("./126" [pid 7365] <... openat resumed>) = 3 [pid 7366] <... chdir resumed>) = 0 [pid 7366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7365] write(3, "1000", 4 [pid 7363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 7366] setpgid(0, 0 [pid 7363] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7366] <... setpgid resumed>) = 0 [pid 7365] <... write resumed>) = 4 [ 106.776386][ T9] hfsplus: b-tree write err: -5, ino 4 [ 106.782251][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 106.793921][ T7362] loop0: detected capacity change from 0 to 1024 [ 106.804413][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7363] write(3, "1000", 4 [pid 5076] close(3 [pid 7366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7365] close(3 [pid 7363] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 7366] <... openat resumed>) = 3 [pid 7365] <... close resumed>) = 0 [pid 7363] close(3 [pid 5076] rmdir("./126" [pid 7366] write(3, "1000", 4 [pid 7365] symlink("/dev/binderfs", "./binderfs" [pid 7366] <... write resumed>) = 4 [pid 7365] <... symlink resumed>) = 0 [pid 7363] <... close resumed>) = 0 [pid 7366] close(3 [pid 7365] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 7366] <... close resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7363] <... symlink resumed>) = 0 [pid 5076] mkdir("./127", 0777 [pid 7366] symlink("/dev/binderfs", "./binderfs" [pid 7365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7363] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] <... symlink resumed>) = 0 [pid 7365] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7363] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7366] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7366] <... futex resumed>) = 0 [pid 7365] <... mprotect resumed>) = 0 [pid 7362] mkdir("./bus", 0777 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7365] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7363] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] <... openat resumed>) = 3 [pid 7366] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7363] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7362] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7366] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7365] <... clone resumed>, parent_tid=[7367], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7367 [pid 7363] <... mprotect resumed>) = 0 [pid 7362] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7366] <... mprotect resumed>) = 0 [pid 7365] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] close(3 [pid 7366] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7365] <... futex resumed>) = 0 [pid 7365] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7363] <... clone resumed>, parent_tid=[7368], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7368 [pid 5076] <... close resumed>) = 0 [pid 7366] <... clone resumed>, parent_tid=[7369], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7369 [pid 7363] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7366] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... futex resumed>) = 0 [pid 7366] <... futex resumed>) = 0 [pid 7366] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7363] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7370 ./strace-static-x86_64: Process 7368 attached [pid 7368] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7368] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 7369 attached [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7367 attached [pid 7369] set_robust_list(0x7fee0b1f39e0, 24 [pid 7368] <... mmap resumed>) = 0x7fee02dd3000 [pid 7364] <... write resumed>) = 524288 [pid 7369] <... set_robust_list resumed>) = 0 [pid 7368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7367] set_robust_list(0x7fee0b1f39e0, 24 [pid 7364] munmap(0x7fee02dd3000, 524288 [pid 7362] <... mount resumed>) = 0 [pid 7369] memfd_create("syzkaller", 0 [pid 7367] <... set_robust_list resumed>) = 0 [pid 7369] <... memfd_create resumed>) = 3 [pid 7367] memfd_create("syzkaller", 0 [pid 7364] <... munmap resumed>) = 0 [pid 7362] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7370 attached [pid 7369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7367] <... memfd_create resumed>) = 3 [pid 7364] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7362] <... openat resumed>) = 3 [pid 7369] <... mmap resumed>) = 0x7fee02dd3000 [pid 7367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7364] <... openat resumed>) = 4 [pid 7362] chdir("./bus" [pid 7370] set_robust_list(0x555556b055e0, 24) = 0 [pid 7369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7367] <... mmap resumed>) = 0x7fee02dd3000 [pid 7364] ioctl(4, LOOP_SET_FD, 3 [pid 7362] <... chdir resumed>) = 0 [pid 7367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7370] chdir("./127" [pid 7362] ioctl(4, LOOP_CLR_FD [pid 7370] <... chdir resumed>) = 0 [pid 7368] <... write resumed>) = 524288 [pid 7362] <... ioctl resumed>) = 0 [pid 7362] close(4 [pid 7370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7362] <... close resumed>) = 0 [pid 7370] <... prctl resumed>) = 0 [pid 7362] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] munmap(0x7fee02dd3000, 524288 [pid 7370] setpgid(0, 0 [pid 7362] <... futex resumed>) = 1 [pid 7360] <... futex resumed>) = 0 [pid 7370] <... setpgid resumed>) = 0 [pid 7369] <... write resumed>) = 524288 [pid 7368] <... munmap resumed>) = 0 [pid 7367] <... write resumed>) = 524288 [pid 7364] <... ioctl resumed>) = 0 [pid 7362] creat("./bus", 000 [pid 7360] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] munmap(0x7fee02dd3000, 524288 [pid 7368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7367] munmap(0x7fee02dd3000, 524288 [pid 7360] <... futex resumed>) = 0 [pid 7370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7369] <... munmap resumed>) = 0 [pid 7368] <... openat resumed>) = 4 [pid 7367] <... munmap resumed>) = 0 [pid 7364] close(3 [pid 7362] <... creat resumed>) = 4 [pid 7360] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7370] <... openat resumed>) = 3 [pid 7369] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7368] ioctl(4, LOOP_SET_FD, 3 [pid 7367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7364] <... close resumed>) = 0 [pid 7362] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] write(3, "1000", 4 [pid 7369] <... openat resumed>) = 4 [pid 7367] <... openat resumed>) = 4 [pid 7364] mkdir("./bus", 0777 [pid 7362] <... futex resumed>) = 1 [pid 7360] <... futex resumed>) = 0 [pid 7370] <... write resumed>) = 4 [pid 7369] ioctl(4, LOOP_SET_FD, 3 [pid 7367] ioctl(4, LOOP_SET_FD, 3 [pid 7362] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7360] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] close(3 [pid 7368] <... ioctl resumed>) = 0 [pid 7364] <... mkdir resumed>) = 0 [pid 7362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7360] <... futex resumed>) = 0 [pid 7370] <... close resumed>) = 0 [pid 7368] close(3 [pid 7364] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7362] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7360] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7370] symlink("/dev/binderfs", "./binderfs" [pid 7368] <... close resumed>) = 0 [pid 7364] <... mount resumed>) = 0 [pid 7370] <... symlink resumed>) = 0 [pid 7368] mkdir("./bus", 0777 [pid 7364] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7370] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] <... mkdir resumed>) = 0 [pid 7364] <... openat resumed>) = 3 [pid 7370] <... futex resumed>) = 0 [pid 7368] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7364] chdir("./bus" [pid 7370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7364] <... chdir resumed>) = 0 [pid 7370] <... mmap resumed>) = 0x7fee0b1d3000 [ 106.879343][ T7364] loop5: detected capacity change from 0 to 1024 [ 106.897661][ T7368] loop4: detected capacity change from 0 to 1024 [ 106.905631][ T7367] loop1: detected capacity change from 0 to 1024 [ 106.919171][ T7369] loop3: detected capacity change from 0 to 1024 [pid 7364] ioctl(4, LOOP_CLR_FD [pid 7370] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7364] <... ioctl resumed>) = 0 [pid 7370] <... mprotect resumed>) = 0 [pid 7364] close(4 [pid 7370] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7369] <... ioctl resumed>) = 0 [pid 7368] <... mount resumed>) = 0 [pid 7367] <... ioctl resumed>) = 0 [pid 7364] <... close resumed>) = 0 [pid 7368] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7364] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] <... clone resumed>, parent_tid=[7371], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7371 [pid 7368] <... openat resumed>) = 3 [pid 7364] <... futex resumed>) = 1 [pid 7361] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] chdir("./bus" [pid 7364] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7371 attached [pid 7370] <... futex resumed>) = 0 [pid 7369] close(3 [pid 7368] <... chdir resumed>) = 0 [pid 7367] close(3 [pid 7364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7361] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7368] ioctl(4, LOOP_CLR_FD [pid 7364] creat("./bus", 000 [pid 7361] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] <... ioctl resumed>) = 0 [pid 7364] <... creat resumed>) = 4 [pid 7368] close(4 [pid 7364] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] set_robust_list(0x7fee0b1f39e0, 24 [pid 7369] <... close resumed>) = 0 [pid 7368] <... close resumed>) = 0 [pid 7367] <... close resumed>) = 0 [pid 7371] <... set_robust_list resumed>) = 0 [pid 7369] mkdir("./bus", 0777 [pid 7367] mkdir("./bus", 0777 [pid 7371] memfd_create("syzkaller", 0 [pid 7369] <... mkdir resumed>) = 0 [pid 7367] <... mkdir resumed>) = 0 [pid 7371] <... memfd_create resumed>) = 3 [pid 7369] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7367] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7368] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7364] <... futex resumed>) = 1 [pid 7361] <... futex resumed>) = 0 [pid 7371] munmap(0x7fee02dd3000, 524288) = 0 [pid 7371] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 106.928356][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.936158][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.943912][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.951771][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.960887][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.970723][ T7362] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7371] ioctl(4, LOOP_SET_FD, 3 [pid 7369] <... mount resumed>) = 0 [pid 7368] <... futex resumed>) = 1 [pid 7367] <... mount resumed>) = 0 [pid 7364] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] <... futex resumed>) = 0 [pid 7361] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7369] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7368] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7363] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] <... futex resumed>) = 0 [pid 7360] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... openat resumed>) = 3 [pid 7368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] <... openat resumed>) = 3 [pid 7364] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7363] <... futex resumed>) = 0 [pid 7361] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7360] <... futex resumed>) = 0 [pid 7369] chdir("./bus" [pid 7368] creat("./bus", 000 [pid 7367] chdir("./bus" [pid 7369] <... chdir resumed>) = 0 [pid 7367] <... chdir resumed>) = 0 [pid 7363] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7369] ioctl(4, LOOP_CLR_FD [pid 7368] <... creat resumed>) = 4 [pid 7367] ioctl(4, LOOP_CLR_FD [pid 7369] <... ioctl resumed>) = 0 [pid 7367] <... ioctl resumed>) = 0 [pid 7360] <... mmap resumed>) = 0x7fee02e32000 [pid 7368] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] close(4 [pid 7367] close(4 [pid 7369] <... close resumed>) = 0 [pid 7368] <... futex resumed>) = 1 [pid 7367] <... close resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7360] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7369] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... futex resumed>) = 1 [pid 7367] <... futex resumed>) = 1 [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7369] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7369] creat("./bus", 000 [pid 7367] creat("./bus", 000 [pid 7366] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7365] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7369] <... creat resumed>) = 4 [pid 7367] <... creat resumed>) = 4 [pid 7369] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... futex resumed>) = 1 [pid 7367] <... futex resumed>) = 1 [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7369] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7369] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 106.972584][ T7371] loop2: detected capacity change from 0 to 1024 [ 106.990449][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 106.995832][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.007530][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.007541][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.007550][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7367] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7366] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7365] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7363] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] <... mprotect resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [pid 7362] <... write resumed>) = 57344 [pid 7361] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7360] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7361] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7363] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] <... mmap resumed>) = 0x7fee02e32000 [pid 7361] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7362] <... futex resumed>) = 0 [pid 7362] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] <... mprotect resumed>) = 0 [pid 7360] <... clone resumed>, parent_tid=[7372], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7372 [pid 7361] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7360] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] <... clone resumed>, parent_tid=[7373], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7373 [pid 7360] <... futex resumed>) = 0 [pid 7361] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7361] <... futex resumed>) = 0 [pid 7361] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7371] <... ioctl resumed>) = 0 [pid 7371] close(3) = 0 [pid 7371] mkdir("./bus", 0777) = 0 [pid 7371] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7373 attached [pid 7373] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7373] creat("./file1", 000) = 5 [pid 7373] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] <... mount resumed>) = 0 [pid 7371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7361] <... futex resumed>) = 0 [pid 7373] <... futex resumed>) = 1 [pid 7373] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7371] <... openat resumed>) = 3 [pid 7371] chdir("./bus") = 0 [pid 7371] ioctl(4, LOOP_CLR_FD) = 0 [pid 7371] close(4) = 0 [pid 7371] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 107.024450][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.030836][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.044441][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.065617][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.067784][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7371] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7370] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7371] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7371] creat("./bus", 000 [pid 7366] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] <... creat resumed>) = 4 [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7371] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7371] <... futex resumed>) = 0 [pid 7366] <... mmap resumed>) = 0x7fee02e32000 [pid 7365] <... mmap resumed>) = 0x7fee02e32000 [pid 7371] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7365] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7366] <... mprotect resumed>) = 0 [pid 7365] <... mprotect resumed>) = 0 [pid 7366] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7365] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7366] <... clone resumed>, parent_tid=[7374], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7374 [pid 7365] <... clone resumed>, parent_tid=[7375], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7375 [pid 7366] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7366] <... futex resumed>) = 0 [pid 7365] <... futex resumed>) = 0 [pid 7366] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7365] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7370] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] <... futex resumed>) = 0 [pid 7370] <... futex resumed>) = 1 [pid 7371] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7370] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7372 attached [pid 7372] set_robust_list(0x7fee02e529e0, 24 [pid 7364] <... write resumed>) = 57344 [pid 7363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7374 attached ./strace-static-x86_64: Process 7375 attached [pid 7374] set_robust_list(0x7fee02e529e0, 24 [pid 7375] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7374] <... set_robust_list resumed>) = 0 [pid 7375] creat("./file1", 000 [pid 7374] creat("./file1", 000 [pid 7372] <... set_robust_list resumed>) = 0 [pid 7364] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7364] <... futex resumed>) = 0 [pid 7363] <... futex resumed>) = 0 [ 107.082940][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.094074][ T7364] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.095068][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.104053][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.112146][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.117057][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7372] creat("./file1", 000 [pid 7364] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7361] exit_group(0 [pid 7373] <... futex resumed>) = ? [pid 7361] <... exit_group resumed>) = ? [pid 7373] +++ exited with 0 +++ [pid 7366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7372] <... creat resumed>) = 5 [pid 7364] <... futex resumed>) = ? [pid 7363] <... mmap resumed>) = 0x7fee02e32000 [pid 7372] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7364] +++ exited with 0 +++ [pid 7363] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7361] +++ exited with 0 +++ [pid 7360] exit_group(0 [pid 7372] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] <... mprotect resumed>) = 0 [pid 7360] <... exit_group resumed>) = ? [pid 7362] <... futex resumed>) = ? [pid 7362] +++ exited with 0 +++ [pid 7370] <... futex resumed>) = 0 [pid 7370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7361, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 107.131921][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.139012][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.142464][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.147770][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.161277][ T7368] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.164500][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7372] +++ exited with 0 +++ [pid 7370] <... mmap resumed>) = 0x7fee02e32000 [pid 7363] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7360] +++ exited with 0 +++ [pid 5081] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7370] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7360, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7370] <... mprotect resumed>) = 0 [pid 7370] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7363] <... clone resumed>, parent_tid=[7376], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7376 [pid 5081] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7363] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5074] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7363] <... futex resumed>) = 0 [pid 5081] fstat(3, [pid 7374] <... creat resumed>) = 5 [pid 7374] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7370] <... clone resumed>, parent_tid=[7377], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7377 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7374] <... futex resumed>) = 0 [pid 7370] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5074] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7368] <... write resumed>) = 57344 [pid 7374] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7370] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7376 attached [pid 7370] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] fstat(3, [pid 5081] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5081] lstat("./128/binderfs", [pid 7368] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7377 attached [pid 7376] set_robust_list(0x7fee02e529e0, 24 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7368] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] unlink("./128/binderfs" [pid 5074] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7376] <... set_robust_list resumed>) = 0 [pid 7377] set_robust_list(0x7fee02e529e0, 24 [pid 7376] creat("./file1", 000 [pid 7375] <... creat resumed>) = 5 [pid 5081] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7375] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] <... set_robust_list resumed>) = 0 [pid 7375] <... futex resumed>) = 0 [pid 7376] <... creat resumed>) = 5 [pid 7375] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7377] creat("./file1", 000 [pid 5074] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7376] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] <... creat resumed>) = 5 [pid 7376] <... futex resumed>) = 1 [pid 7363] <... futex resumed>) = 0 [pid 5074] unlink("./126/binderfs" [pid 7377] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7363] exit_group(0 [pid 5074] <... unlink resumed>) = 0 [pid 7377] <... futex resumed>) = 1 [pid 7376] <... futex resumed>) = ? [pid 7370] <... futex resumed>) = 0 [pid 7368] <... futex resumed>) = ? [pid 7363] <... exit_group resumed>) = ? [pid 5074] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7377] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7376] +++ exited with 0 +++ [pid 7368] +++ exited with 0 +++ [pid 7363] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7363, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7367] <... write resumed>) = 57344 [pid 7367] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7367] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... restart_syscall resumed>) = 0 [pid 5080] umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./125/binderfs") = 0 [pid 5080] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7365] exit_group(0 [pid 7375] <... futex resumed>) = ? [pid 7367] <... futex resumed>) = ? [pid 7365] <... exit_group resumed>) = ? [ 107.177668][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.196149][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.196632][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.211540][ T7367] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.212020][ T52] hfsplus: b-tree write err: -5, ino 4 [ 107.225288][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7375] +++ exited with 0 +++ [pid 7367] +++ exited with 0 +++ [pid 7365] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7365, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./126/binderfs") = 0 [pid 5075] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 7369] <... write resumed>) = 57344 [pid 7369] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 107.225413][ T11] hfsplus: b-tree write err: -5, ino 4 [ 107.232562][ T7371] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.243989][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.253242][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 107.254177][ T52] hfsplus: b-tree write err: -5, ino 4 [ 107.264750][ T7369] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7369] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7366] exit_group(0 [pid 7374] <... futex resumed>) = ? [pid 7366] <... exit_group resumed>) = ? [pid 7374] +++ exited with 0 +++ [pid 7369] <... futex resumed>) = ? [pid 7369] +++ exited with 0 +++ [pid 7366] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7366, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5077] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./126/binderfs") = 0 [pid 5077] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./128/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./128/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./128" [pid 7371] <... write resumed>) = 57344 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7371] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7371] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./129", 0777 [pid 7370] exit_group(0 [pid 7371] <... futex resumed>) = ? [pid 7370] <... exit_group resumed>) = ? [pid 7377] <... futex resumed>) = ? [pid 7371] +++ exited with 0 +++ [pid 5074] lstat("./126/bus", [pid 7377] +++ exited with 0 +++ [pid 7370] +++ exited with 0 +++ [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7370, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./127/binderfs") = 0 [pid 5076] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./125/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./125/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./125/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 4 [pid 5077] lstat("./126/bus", [pid 5075] lstat("./126/bus", [pid 5080] fstat(4, [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(4, [pid 5075] fstat(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5077] getdents64(4, [pid 5075] getdents64(4, [pid 5080] getdents64(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] fstat(4, [pid 5077] getdents64(4, [pid 5075] getdents64(4, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4 [pid 5075] close(4 [pid 5077] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] rmdir("./126/bus" [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] rmdir("./126/bus" [pid 5074] getdents64(4, [pid 5080] getdents64(4, [pid 5077] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 5080] close(4 [pid 5077] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] rmdir("./126" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] rmdir("./125/bus" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] lstat("./127/bus", [pid 5075] rmdir("./126" [pid 5074] close(4 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... rmdir resumed>) = 0 [pid 5077] mkdir("./127", 0777 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] getdents64(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./127", 0777 [pid 5074] <... close resumed>) = 0 [pid 5081] close(3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] rmdir("./126/bus" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5080] rmdir("./125" [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] fstat(4, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7378 [pid 5077] close(3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] close(3 [pid 5074] getdents64(3, [pid 5080] mkdir("./126", 0777 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7379 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7380 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] rmdir("./127/bus" [pid 5074] rmdir("./126" [pid 5080] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] mkdir("./127", 0777 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] rmdir("./127"./strace-static-x86_64: Process 7378 attached ) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7378] set_robust_list(0x555556b055e0, 24 [pid 5076] mkdir("./128", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7378] <... set_robust_list resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7381 [pid 5076] <... mkdir resumed>) = 0 [pid 7378] chdir("./129" [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7378] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7380 attached [pid 7378] <... prctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7380] set_robust_list(0x555556b055e0, 24 [pid 7378] setpgid(0, 0 [pid 5076] close(3 [pid 5074] close(3 [pid 7380] <... set_robust_list resumed>) = 0 [pid 7378] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7380] chdir("./127" [pid 7378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 107.283795][ T9] hfsplus: b-tree write err: -5, ino 4 [ 107.315190][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7380] <... chdir resumed>) = 0 [pid 7378] <... openat resumed>) = 3 [pid 7380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7378] write(3, "1000", 4 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7382 [pid 7380] <... prctl resumed>) = 0 [pid 7378] <... write resumed>) = 4 [pid 7380] setpgid(0, 0 [pid 7378] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7383 [pid 7380] <... setpgid resumed>) = 0 [pid 7378] <... close resumed>) = 0 [pid 7380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7378] symlink("/dev/binderfs", "./binderfs" [pid 7380] <... openat resumed>) = 3 [pid 7378] <... symlink resumed>) = 0 [pid 7380] write(3, "1000", 4 [pid 7378] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] <... write resumed>) = 4 [pid 7378] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7381 attached [pid 7380] close(3 [pid 7378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7381] set_robust_list(0x555556b055e0, 24 [pid 7380] <... close resumed>) = 0 [pid 7378] <... mmap resumed>) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7382 attached [pid 7381] <... set_robust_list resumed>) = 0 [pid 7380] symlink("/dev/binderfs", "./binderfs" [pid 7378] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7382] set_robust_list(0x555556b055e0, 24 [pid 7381] chdir("./126" [pid 7380] <... symlink resumed>) = 0 [pid 7378] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 7383 attached [pid 7382] <... set_robust_list resumed>) = 0 [pid 7381] <... chdir resumed>) = 0 [pid 7380] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7382] chdir("./128" [pid 7381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7380] <... futex resumed>) = 0 [pid 7383] set_robust_list(0x555556b055e0, 24 [pid 7382] <... chdir resumed>) = 0 [pid 7381] <... prctl resumed>) = 0 [pid 7380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7378] <... clone resumed>, parent_tid=[7384], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7384 [pid 7383] <... set_robust_list resumed>) = 0 [pid 7382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7381] setpgid(0, 0 [pid 7380] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7378] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7379 attached [pid 7383] chdir("./127" [pid 7382] <... prctl resumed>) = 0 [pid 7381] <... setpgid resumed>) = 0 [pid 7380] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7378] <... futex resumed>) = 0 [pid 7383] <... chdir resumed>) = 0 [pid 7382] setpgid(0, 0 [pid 7381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7380] <... mprotect resumed>) = 0 [pid 7378] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7382] <... setpgid resumed>) = 0 [pid 7380] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7379] set_robust_list(0x555556b055e0, 24 [pid 7381] <... openat resumed>) = 3 [pid 7383] <... prctl resumed>) = 0 [pid 7382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7379] <... set_robust_list resumed>) = 0 [pid 7383] setpgid(0, 0 [pid 7382] <... openat resumed>) = 3 [pid 7381] write(3, "1000", 4 [pid 7380] <... clone resumed>, parent_tid=[7385], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7385 [pid 7379] chdir("./127" [pid 7383] <... setpgid resumed>) = 0 [pid 7382] write(3, "1000", 4 [pid 7381] <... write resumed>) = 4 [pid 7380] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7382] <... write resumed>) = 4 [pid 7380] <... futex resumed>) = 0 [pid 7383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7382] close(3 [pid 7381] close(3 [pid 7380] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7379] <... chdir resumed>) = 0 [pid 7382] <... close resumed>) = 0 ./strace-static-x86_64: Process 7384 attached [pid 7382] symlink("/dev/binderfs", "./binderfs" [pid 7381] <... close resumed>) = 0 [pid 7384] set_robust_list(0x7fee0b1f39e0, 24 [pid 7383] <... openat resumed>) = 3 [pid 7382] <... symlink resumed>) = 0 [pid 7381] symlink("/dev/binderfs", "./binderfs" [pid 7379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7384] <... set_robust_list resumed>) = 0 [pid 7382] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] <... symlink resumed>) = 0 [pid 7384] memfd_create("syzkaller", 0 [pid 7383] write(3, "1000", 4 [pid 7382] <... futex resumed>) = 0 [pid 7381] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] <... prctl resumed>) = 0 [pid 7384] <... memfd_create resumed>) = 3 [pid 7383] <... write resumed>) = 4 [pid 7382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7381] <... futex resumed>) = 0 [pid 7384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7383] close(3 [pid 7382] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7379] setpgid(0, 0 [pid 7384] <... mmap resumed>) = 0x7fee02dd3000 [pid 7383] <... close resumed>) = 0 [pid 7382] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7381] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7379] <... setpgid resumed>) = 0 [pid 7384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7383] symlink("/dev/binderfs", "./binderfs" [pid 7382] <... mprotect resumed>) = 0 [pid 7381] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7385 attached [pid 7383] <... symlink resumed>) = 0 [pid 7382] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7381] <... mprotect resumed>) = 0 [pid 7379] <... openat resumed>) = 3 [pid 7385] set_robust_list(0x7fee0b1f39e0, 24 [pid 7383] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7379] write(3, "1000", 4 [pid 7385] <... set_robust_list resumed>) = 0 [pid 7383] <... futex resumed>) = 0 [pid 7382] <... clone resumed>, parent_tid=[7386], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7386 [pid 7379] <... write resumed>) = 4 [pid 7383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7382] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] <... clone resumed>, parent_tid=[7387], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7387 [pid 7379] close(3 [pid 7385] memfd_create("syzkaller", 0) = 3 [pid 7384] <... write resumed>) = 524288 [pid 7383] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7382] <... futex resumed>) = 0 [pid 7381] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] <... close resumed>) = 0 [pid 7385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7383] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7382] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7381] <... futex resumed>) = 0 [pid 7379] symlink("/dev/binderfs", "./binderfs" [pid 7384] munmap(0x7fee02dd3000, 524288 [pid 7383] <... mprotect resumed>) = 0 [pid 7381] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7387 attached [pid 7385] <... mmap resumed>) = 0x7fee02dd3000 [pid 7384] <... munmap resumed>) = 0 [pid 7383] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7379] <... symlink resumed>) = 0 [pid 7387] set_robust_list(0x7fee0b1f39e0, 24 [pid 7384] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7387] <... set_robust_list resumed>) = 0 [pid 7384] <... openat resumed>) = 4 [pid 7379] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] memfd_create("syzkaller", 0 [pid 7384] ioctl(4, LOOP_SET_FD, 3 [pid 7383] <... clone resumed>, parent_tid=[7388], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7388 [pid 7379] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7386 attached [pid 7387] <... memfd_create resumed>) = 3 [pid 7385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7383] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7385] <... write resumed>) = 524288 [pid 7383] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7388 attached [pid 7379] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7388] set_robust_list(0x7fee0b1f39e0, 24 [pid 7386] set_robust_list(0x7fee0b1f39e0, 24 [pid 7385] munmap(0x7fee02dd3000, 524288 [pid 7383] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7379] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7388] <... set_robust_list resumed>) = 0 [pid 7388] memfd_create("syzkaller", 0 [pid 7386] <... set_robust_list resumed>) = 0 [pid 7385] <... munmap resumed>) = 0 [pid 7379] <... mprotect resumed>) = 0 [pid 7388] <... memfd_create resumed>) = 3 [pid 7388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7379] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7388] <... mmap resumed>) = 0x7fee02dd3000 [pid 7386] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7389 attached [pid 7388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7386] <... memfd_create resumed>) = 3 [pid 7385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7379] <... clone resumed>, parent_tid=[7389], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7389 [pid 7389] set_robust_list(0x7fee0b1f39e0, 24 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7385] <... openat resumed>) = 4 [pid 7379] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] <... set_robust_list resumed>) = 0 [pid 7387] <... write resumed>) = 524288 [pid 7386] <... mmap resumed>) = 0x7fee02dd3000 [pid 7385] ioctl(4, LOOP_SET_FD, 3 [pid 7379] <... futex resumed>) = 0 [pid 7388] <... write resumed>) = 524288 [pid 7386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7379] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7387] munmap(0x7fee02dd3000, 524288) = 0 [pid 7387] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7387] ioctl(4, LOOP_SET_FD, 3 [pid 7389] memfd_create("syzkaller", 0 [pid 7384] <... ioctl resumed>) = 0 [pid 7388] munmap(0x7fee02dd3000, 524288 [pid 7384] close(3) = 0 [pid 7389] <... memfd_create resumed>) = 3 [pid 7388] <... munmap resumed>) = 0 [pid 7386] <... write resumed>) = 524288 [pid 7388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7384] mkdir("./bus", 0777 [pid 7388] <... openat resumed>) = 4 [pid 7384] <... mkdir resumed>) = 0 [pid 7388] ioctl(4, LOOP_SET_FD, 3 [pid 7384] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7386] munmap(0x7fee02dd3000, 524288 [pid 7389] <... mmap resumed>) = 0x7fee02dd3000 [pid 7384] <... mount resumed>) = 0 [pid 7384] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7384] chdir("./bus") = 0 [pid 7384] ioctl(4, LOOP_CLR_FD) = 0 [pid 7384] close(4) = 0 [pid 7386] <... munmap resumed>) = 0 [pid 7384] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7378] <... futex resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7384] creat("./bus", 000 [pid 7378] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] <... creat resumed>) = 4 [pid 7378] <... futex resumed>) = 0 [pid 7386] <... openat resumed>) = 4 [pid 7384] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7384] <... futex resumed>) = 0 [pid 7378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7384] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 107.396516][ T7384] loop5: detected capacity change from 0 to 1024 [ 107.424708][ T7387] loop4: detected capacity change from 0 to 1024 [ 107.425044][ T7385] loop1: detected capacity change from 0 to 1024 [ 107.433829][ T7388] loop0: detected capacity change from 0 to 1024 [pid 7378] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7386] ioctl(4, LOOP_SET_FD, 3 [pid 7378] <... futex resumed>) = 0 [pid 7378] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] <... ioctl resumed>) = 0 [pid 7387] close(3) = 0 [pid 7387] mkdir("./bus", 0777) = 0 [pid 7387] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7388] <... ioctl resumed>) = 0 [pid 7388] close(3) = 0 [pid 7388] mkdir("./bus", 0777) = 0 [pid 7388] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7388] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7388] chdir("./bus") = 0 [pid 7389] <... write resumed>) = 524288 [pid 7386] <... ioctl resumed>) = 0 [pid 7385] <... ioctl resumed>) = 0 [pid 7388] ioctl(4, LOOP_CLR_FD) = 0 [pid 7388] close(4) = 0 [pid 7388] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 107.452276][ T5083] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.453793][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.464189][ T5085] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.478910][ T7386] loop2: detected capacity change from 0 to 1024 [ 107.487095][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.494925][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7388] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7389] munmap(0x7fee02dd3000, 524288 [pid 7386] close(3 [pid 7385] close(3 [pid 7383] <... futex resumed>) = 0 [pid 7389] <... munmap resumed>) = 0 [pid 7387] <... mount resumed>) = 0 [pid 7386] <... close resumed>) = 0 [pid 7385] <... close resumed>) = 0 [pid 7383] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7388] <... futex resumed>) = 0 [pid 7387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7386] mkdir("./bus", 0777 [pid 7385] mkdir("./bus", 0777 [pid 7383] <... futex resumed>) = 1 [pid 7378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7389] <... openat resumed>) = 4 [pid 7388] creat("./bus", 000 [pid 7387] <... openat resumed>) = 3 [pid 7378] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7388] <... creat resumed>) = 4 [pid 7387] chdir("./bus" [pid 7378] <... futex resumed>) = 0 [pid 7388] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... chdir resumed>) = 0 [pid 7386] <... mkdir resumed>) = 0 [pid 7378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7389] ioctl(4, LOOP_SET_FD, 3 [pid 7388] <... futex resumed>) = 0 [pid 7387] ioctl(4, LOOP_CLR_FD [pid 7385] <... mkdir resumed>) = 0 [pid 7383] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] <... mmap resumed>) = 0x7fee02e32000 [pid 7388] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7387] <... ioctl resumed>) = 0 [pid 7378] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7387] close(4 [pid 7378] <... mprotect resumed>) = 0 [pid 7387] <... close resumed>) = 0 [pid 7378] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7387] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7378] <... clone resumed>, parent_tid=[7390], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7390 [pid 7387] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7378] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7378] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7381] <... futex resumed>) = 0 [pid 7383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7381] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... futex resumed>) = 0 [pid 7381] <... futex resumed>) = 1 [pid 7387] creat("./bus", 000 [pid 7389] <... ioctl resumed>) = 0 [pid 7388] <... futex resumed>) = 0 [pid 7387] <... creat resumed>) = 4 [pid 7386] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7385] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7383] <... futex resumed>) = 1 [pid 7381] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7388] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7387] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7387] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7390 attached [pid 7390] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7390] creat("./file1", 000 [pid 7383] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7389] close(3 [pid 7386] <... mount resumed>) = 0 [ 107.502702][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.522294][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.531640][ T7389] loop3: detected capacity change from 0 to 1024 [ 107.539201][ T7384] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7385] <... mount resumed>) = 0 [pid 7384] <... write resumed>) = 57344 [pid 7381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7389] <... close resumed>) = 0 [pid 7386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7385] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7381] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] mkdir("./bus", 0777 [pid 7386] <... openat resumed>) = 3 [pid 7385] <... openat resumed>) = 3 [pid 7381] <... futex resumed>) = 1 [pid 7389] <... mkdir resumed>) = 0 [pid 7386] chdir("./bus" [pid 7385] chdir("./bus" [pid 7381] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7389] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7386] <... chdir resumed>) = 0 [pid 7385] <... chdir resumed>) = 0 [pid 7389] <... mount resumed>) = 0 [pid 7386] ioctl(4, LOOP_CLR_FD [pid 7385] ioctl(4, LOOP_CLR_FD [pid 7389] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7386] <... ioctl resumed>) = 0 [pid 7385] <... ioctl resumed>) = 0 [pid 7389] <... openat resumed>) = 3 [pid 7386] close(4 [pid 7385] close(4 [pid 7390] <... creat resumed>) = 5 [pid 7389] chdir("./bus" [pid 7387] <... futex resumed>) = 0 [pid 7386] <... close resumed>) = 0 [pid 7385] <... close resumed>) = 0 [pid 7384] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] <... chdir resumed>) = 0 [pid 7386] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] ioctl(4, LOOP_CLR_FD [pid 7386] <... futex resumed>) = 1 [pid 7385] <... futex resumed>) = 1 [pid 7389] <... ioctl resumed>) = 0 [pid 7386] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7389] close(4) = 0 [pid 7389] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7379] <... futex resumed>) = 0 [pid 7389] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7379] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7379] <... futex resumed>) = 0 [pid 7389] creat("./bus", 000 [pid 7379] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] <... creat resumed>) = 4 [pid 7387] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7384] <... futex resumed>) = 0 [pid 7382] <... futex resumed>) = 0 [pid 7380] <... futex resumed>) = 0 [pid 7390] <... futex resumed>) = 1 [pid 7389] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7384] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7382] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] <... futex resumed>) = 0 [pid 7389] <... futex resumed>) = 1 [pid 7379] <... futex resumed>) = 0 [pid 7389] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7379] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7379] <... futex resumed>) = 0 [pid 7389] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7379] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7386] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [pid 7383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7382] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 1 [pid 7378] exit_group(0 [pid 7386] creat("./bus", 000 [pid 7385] creat("./bus", 000 [pid 7383] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] <... creat resumed>) = 4 [pid 7385] <... creat resumed>) = 4 [ 107.549957][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.567328][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.578184][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.580927][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.587028][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7383] <... futex resumed>) = 0 [pid 7386] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7386] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [pid 7383] <... mmap resumed>) = 0x7fee02e32000 [pid 7386] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7383] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7390] <... futex resumed>) = ? [pid 7384] <... futex resumed>) = ? [pid 7383] <... mprotect resumed>) = 0 [pid 7382] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7380] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] <... exit_group resumed>) = ? [pid 7383] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7381] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7390] +++ exited with 0 +++ [pid 7384] +++ exited with 0 +++ [pid 7383] <... clone resumed>, parent_tid=[7391], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7391 [pid 7382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7383] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] <... mmap resumed>) = 0x7fee02e32000 [pid 7378] +++ exited with 0 +++ [pid 7380] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7382] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] <... futex resumed>) = 0 [pid 7381] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7383] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7381] <... mprotect resumed>) = 0 [pid 7381] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7392], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7392 [pid 7381] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7381] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7391 attached [pid 7391] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7391] creat("./file1", 000 [pid 7386] <... futex resumed>) = 0 [pid 7385] <... futex resumed>) = 0 [ 107.601005][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.606159][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.609023][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.624951][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.632740][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.635206][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7382] <... futex resumed>) = 1 [pid 7380] <... futex resumed>) = 1 ./strace-static-x86_64: Process 7392 attached [pid 7386] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7385] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7392] set_robust_list(0x7fee02e529e0, 24 [pid 7391] <... creat resumed>) = 5 [pid 7382] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7391] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7391] <... futex resumed>) = 1 [pid 7383] <... futex resumed>) = 0 [pid 7379] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7379] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7391] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7379] <... clone resumed>, parent_tid=[7393], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7393 [pid 7379] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7379] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7381] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7392] <... set_robust_list resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7378, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 7393 attached [pid 7392] creat("./file1", 000 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 7393] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7392] <... creat resumed>) = 5 [pid 7387] <... write resumed>) = 57344 [pid 5081] <... restart_syscall resumed>) = 0 [pid 7393] creat("./file1", 000 [pid 7392] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7393] <... creat resumed>) = 5 [ 107.641795][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.654977][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.656935][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.662253][ T7388] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.676960][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.684853][ T7387] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.692504][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7381] exit_group(0 [pid 7392] <... futex resumed>) = ? [pid 7381] <... exit_group resumed>) = ? [pid 7392] +++ exited with 0 +++ [pid 7393] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... futex resumed>) = ? [pid 5081] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7388] <... write resumed>) = 57344 [pid 7388] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] exit_group(0 [pid 7391] <... futex resumed>) = ? [pid 7383] <... exit_group resumed>) = ? [pid 7391] +++ exited with 0 +++ [pid 7388] <... futex resumed>) = ? [pid 7388] +++ exited with 0 +++ [pid 7383] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7383, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, [pid 7387] +++ exited with 0 +++ [pid 7381] +++ exited with 0 +++ [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7381, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7393] <... futex resumed>) = 1 [pid 7379] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./127/binderfs", [pid 5080] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5074] unlink("./127/binderfs" [pid 5080] fstat(3, [pid 5074] <... unlink resumed>) = 0 [pid 7393] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./126/binderfs") = 0 [pid 7382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... openat resumed>) = 3 [pid 7382] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 7382] <... futex resumed>) = 0 [pid 7380] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] getdents64(3, [pid 7382] <... mmap resumed>) = 0x7fee02e32000 [pid 7380] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7382] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7380] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7382] <... mprotect resumed>) = 0 [pid 7380] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7382] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7380] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7382] <... clone resumed>, parent_tid=[7394], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7394 [pid 7380] <... clone resumed>, parent_tid=[7395], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7395 [pid 5081] unlink("./129/binderfs" [pid 7382] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 7382] <... futex resumed>) = 0 [pid 7380] <... futex resumed>) = 0 [pid 5081] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7382] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 107.703619][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.711232][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.722428][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.730414][ T7389] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.733031][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.743756][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7394 attached [pid 7394] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7394] creat("./file1", 000) = 5 [pid 7394] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7382] <... futex resumed>) = 0 [pid 7394] <... futex resumed>) = 1 [pid 7394] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7395 attached [pid 7395] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7395] creat("./file1", 000) = 5 [pid 7395] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7395] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7389] <... write resumed>) = 57344 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./129/bus", [pid 7389] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] exit_group(0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7379] <... exit_group resumed>) = ? [pid 7393] <... futex resumed>) = ? [pid 7389] <... futex resumed>) = ? [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 7393] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = 0 [pid 7389] +++ exited with 0 +++ [pid 7379] +++ exited with 0 +++ [pid 5074] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7379, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] rmdir("./129/bus" [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5077] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./129" [pid 5077] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5081] mkdir("./130", 0777 [pid 5077] fstat(3, [pid 5081] <... mkdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] getdents64(3, [pid 5081] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 107.745614][ T9] hfsplus: b-tree write err: -5, ino 4 [ 107.758387][ T52] hfsplus: b-tree write err: -5, ino 4 [ 107.764721][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.772006][ T7386] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.783497][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5081] close(3 [pid 5077] lstat("./127/binderfs", [pid 5081] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./127/bus", [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./127/binderfs" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7396 [pid 5080] lstat("./126/bus", [pid 5077] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./126/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./126/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] rmdir("./126/bus") = 0 [pid 5074] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7396 attached [pid 5080] getdents64(3, [pid 7396] set_robust_list(0x555556b055e0, 24 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7396] <... set_robust_list resumed>) = 0 [pid 5080] close(3 [pid 5077] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7396] chdir("./130" [pid 5080] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7396] <... chdir resumed>) = 0 [pid 5080] rmdir("./126" [pid 5077] lstat("./127/bus", [pid 7396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7396] <... prctl resumed>) = 0 [pid 5080] mkdir("./127", 0777 [pid 5077] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7396] setpgid(0, 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] fstat(4, [pid 7396] <... setpgid resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 7396] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] fstat(4, [pid 7396] write(3, "1000", 4 [pid 7386] <... write resumed>) = 57344 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7396] <... write resumed>) = 4 [pid 5080] close(3 [pid 5077] getdents64(4, [pid 7386] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 7396] close(3 [pid 5080] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7396] <... close resumed>) = 0 [pid 7382] exit_group(0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(4, [pid 7386] <... futex resumed>) = ? [pid 5074] close(4 [pid 7396] symlink("/dev/binderfs", "./binderfs" [pid 7394] <... futex resumed>) = ? [pid 7382] <... exit_group resumed>) = ? [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 7396] <... symlink resumed>) = 0 [pid 7394] +++ exited with 0 +++ [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7397 [pid 5077] close(4 [pid 5074] rmdir("./127/bus" [pid 7396] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] +++ exited with 0 +++ [pid 7382] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [ 107.811719][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.828483][ T11] hfsplus: b-tree write err: -5, ino 4 [ 107.843542][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7396] <... futex resumed>) = 0 [pid 5077] rmdir("./127/bus" [pid 5074] <... rmdir resumed>) = 0 [pid 7396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7382, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7396] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] getdents64(3, [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7396] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7396] <... mprotect resumed>) = 0 [pid 5077] close(3./strace-static-x86_64: Process 7397 attached [pid 7396] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... close resumed>) = 0 [pid 7397] set_robust_list(0x555556b055e0, 24 [pid 5077] rmdir("./127" [pid 5076] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7397] <... set_robust_list resumed>) = 0 [pid 7396] <... clone resumed>, parent_tid=[7398], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7398 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7397] chdir("./127" [pid 7396] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./128", 0777 [pid 5076] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 7397] <... chdir resumed>) = 0 [pid 7396] <... futex resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7396] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] fstat(3, [pid 5074] close(3 [pid 7397] <... prctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7397] setpgid(0, 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 7397] <... setpgid resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] rmdir("./127" [pid 7397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5076] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7397] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 7397] write(3, "1000", 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] lstat("./128/binderfs", [pid 5074] mkdir("./128", 0777 [pid 7397] <... write resumed>) = 4 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7398 attached [pid 7397] close(3 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7399 [pid 5076] unlink("./128/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 7398] set_robust_list(0x7fee0b1f39e0, 24 [pid 7397] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7398] <... set_robust_list resumed>) = 0 [pid 7397] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7397] <... symlink resumed>) = 0 [pid 7397] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7397] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7397] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7399 attached [pid 7399] set_robust_list(0x555556b055e0, 24 [pid 7397] <... clone resumed>, parent_tid=[7400], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7400 [pid 7399] <... set_robust_list resumed>) = 0 [pid 7397] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7399] chdir("./128" [pid 7397] <... futex resumed>) = 0 [pid 7399] <... chdir resumed>) = 0 [pid 7397] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7399] setpgid(0, 0) = 0 [pid 7399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7399] write(3, "1000", 4) = 4 [pid 7399] close(3) = 0 [pid 7399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7399] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7398] memfd_create("syzkaller", 0 [pid 5074] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7400 attached [pid 7399] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7400] set_robust_list(0x7fee0b1f39e0, 24 [pid 7399] <... mprotect resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7400] <... set_robust_list resumed>) = 0 [pid 7399] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7400] memfd_create("syzkaller", 0) = 3 [pid 7399] <... clone resumed>, parent_tid=[7401], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7401 [pid 7400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7399] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 7400] <... mmap resumed>) = 0x7fee02dd3000 [pid 7399] <... futex resumed>) = 0 [pid 7398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 7400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7399] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7401 attached [pid 7401] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7401] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7401] <... memfd_create resumed>) = 3 [pid 7398] <... mmap resumed>) = 0x7fee02dd3000 [pid 7401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7400] <... write resumed>) = 524288 [pid 7398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] lstat("./128/bus", [pid 7401] <... mmap resumed>) = 0x7fee02dd3000 [pid 7401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7400] munmap(0x7fee02dd3000, 524288) = 0 [pid 7400] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7402 [pid 5076] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7400] <... openat resumed>) = 4 [ 107.865268][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.886555][ T7385] hfsplus: request for non-existent node 16715520 in B*Tree [ 107.895041][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5076] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7400] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7402 attached [pid 7401] <... write resumed>) = 524288 [pid 7398] <... write resumed>) = 524288 [pid 5076] fstat(4, [pid 7398] munmap(0x7fee02dd3000, 524288 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7402] set_robust_list(0x555556b055e0, 24) = 0 [pid 7398] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 7402] chdir("./128" [pid 7398] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7385] <... write resumed>) = 57344 [pid 7402] <... chdir resumed>) = 0 [pid 7398] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 7402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7398] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7401] munmap(0x7fee02dd3000, 524288) = 0 [pid 7401] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7401] ioctl(4, LOOP_SET_FD, 3 [pid 7402] <... prctl resumed>) = 0 [pid 5076] close(4 [pid 7401] <... ioctl resumed>) = 0 [pid 7401] close(3) = 0 [pid 7401] mkdir("./bus", 0777) = 0 [pid 7400] <... ioctl resumed>) = 0 [pid 7400] close(3) = 0 [pid 7400] mkdir("./bus", 0777) = 0 [pid 7401] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7402] setpgid(0, 0 [pid 7385] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 7400] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7380] exit_group(0 [pid 7395] <... futex resumed>) = ? [pid 7380] <... exit_group resumed>) = ? [pid 7402] <... setpgid resumed>) = 0 [pid 7398] <... ioctl resumed>) = 0 [pid 7395] +++ exited with 0 +++ [pid 7385] <... futex resumed>) = ? [pid 5076] rmdir("./128/bus" [pid 7402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7400] <... mount resumed>) = 0 [pid 7398] close(3 [pid 7385] +++ exited with 0 +++ [pid 7380] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 7402] <... openat resumed>) = 3 [pid 7398] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 7402] write(3, "1000", 4 [pid 7398] mkdir("./bus", 0777 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7402] <... write resumed>) = 4 [pid 7400] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7398] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7380, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7402] close(3 [pid 7400] <... openat resumed>) = 3 [pid 7398] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7402] <... close resumed>) = 0 [pid 5076] rmdir("./128" [pid 7402] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 7402] <... symlink resumed>) = 0 [pid 5076] mkdir("./129", 0777 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7402] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] chdir("./bus" [pid 7398] <... mount resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7402] <... futex resumed>) = 0 [pid 7400] <... chdir resumed>) = 0 [pid 7398] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7400] ioctl(4, LOOP_CLR_FD [pid 7398] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 7402] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7400] <... ioctl resumed>) = 0 [pid 7398] chdir("./bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7402] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7400] close(4 [pid 7398] <... chdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7402] <... mprotect resumed>) = 0 [pid 7401] <... mount resumed>) = 0 [pid 7400] <... close resumed>) = 0 [pid 7398] ioctl(4, LOOP_CLR_FD [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7402] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7401] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7400] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7401] <... openat resumed>) = 3 [pid 7400] <... futex resumed>) = 1 [pid 7398] close(4 [pid 7397] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] fstat(3, [pid 7402] <... clone resumed>, parent_tid=[7403], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7403 [pid 7401] chdir("./bus" [pid 7400] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7398] <... close resumed>) = 0 [pid 7397] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7404 attached [pid 7402] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... chdir resumed>) = 0 [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7398] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] <... futex resumed>) = 0 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7403 attached [pid 7404] set_robust_list(0x555556b055e0, 24 [pid 7402] <... futex resumed>) = 0 [pid 7401] ioctl(4, LOOP_CLR_FD [pid 7400] creat("./bus", 000 [pid 7398] <... futex resumed>) = 1 [pid 7397] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7396] <... futex resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7404 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7404] <... set_robust_list resumed>) = 0 [pid 7403] set_robust_list(0x7fee0b1f39e0, 24 [pid 7402] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7401] <... ioctl resumed>) = 0 [pid 7400] <... creat resumed>) = 4 [pid 7398] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7396] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7404] chdir("./129" [pid 7403] <... set_robust_list resumed>) = 0 [pid 7401] close(4 [pid 7400] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7396] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7401] <... close resumed>) = 0 [pid 7400] <... futex resumed>) = 1 [pid 7397] <... futex resumed>) = 0 [pid 7396] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] lstat("./127/binderfs", [pid 7404] <... chdir resumed>) = 0 [pid 7403] memfd_create("syzkaller", 0 [pid 7401] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7398] creat("./bus", 000 [pid 7397] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7403] <... memfd_create resumed>) = 3 [pid 7401] <... futex resumed>) = 1 [ 107.926976][ T7400] loop4: detected capacity change from 0 to 1024 [ 107.939401][ T7398] loop5: detected capacity change from 0 to 1024 [ 107.942505][ T7401] loop3: detected capacity change from 0 to 1024 [ 107.947524][ T5083] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [pid 7400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 7398] <... creat resumed>) = 4 [pid 7397] <... futex resumed>) = 0 [pid 5075] unlink("./127/binderfs" [pid 7404] <... prctl resumed>) = 0 [pid 7403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7401] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7400] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7399] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... unlink resumed>) = 0 [pid 7401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 5075] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7404] setpgid(0, 0 [pid 7401] creat("./bus", 000 [pid 7399] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7398] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7404] <... setpgid resumed>) = 0 [pid 7403] <... mmap resumed>) = 0x7fee02dd3000 [pid 7401] <... creat resumed>) = 4 [pid 7398] <... futex resumed>) = 1 [pid 7404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7398] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7404] <... openat resumed>) = 3 [pid 7403] <... write resumed>) = 524288 [pid 7396] <... futex resumed>) = 0 [pid 7404] write(3, "1000", 4 [pid 7403] munmap(0x7fee02dd3000, 524288 [pid 7404] <... write resumed>) = 4 [pid 7403] <... munmap resumed>) = 0 [pid 7404] close(3) = 0 [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7404] symlink("/dev/binderfs", "./binderfs" [pid 7403] <... openat resumed>) = 4 [pid 7404] <... symlink resumed>) = 0 [pid 7403] ioctl(4, LOOP_SET_FD, 3 [pid 7404] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7396] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = 0 [pid 7404] <... futex resumed>) = 0 [pid 7404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7401] <... futex resumed>) = 1 [pid 7396] <... futex resumed>) = 1 [pid 7404] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7399] <... futex resumed>) = 0 [pid 7398] <... futex resumed>) = 0 [pid 5075] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7404] <... mprotect resumed>) = 0 [pid 7401] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7399] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7396] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7404] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7399] <... futex resumed>) = 0 [pid 7404] <... clone resumed>, parent_tid=[7405], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7405 [ 108.014571][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.022356][ T11] hfsplus: b-tree write err: -5, ino 4 [ 108.026511][ T7403] loop0: detected capacity change from 0 to 1024 [ 108.036331][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.050644][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7404] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7404] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] lstat("./127/bus", [pid 7401] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7399] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7403] <... ioctl resumed>) = 0 [pid 7403] close(3) = 0 [pid 7403] mkdir("./bus", 0777) = 0 [pid 7403] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] fstat(4, [pid 7397] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7405 attached [pid 7403] <... mount resumed>) = 0 [pid 7397] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7403] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7403] chdir("./bus") = 0 [pid 7403] ioctl(4, LOOP_CLR_FD) = 0 [pid 7403] close(4) = 0 [pid 7403] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7402] <... futex resumed>) = 0 [pid 7403] creat("./bus", 000 [pid 7402] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... creat resumed>) = 4 [pid 7402] <... futex resumed>) = 0 [pid 7403] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7402] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7403] <... futex resumed>) = 0 [pid 7402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7403] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 108.056473][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.059222][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.066234][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.073251][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.088483][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.096471][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.097138][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7402] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] set_robust_list(0x7fee0b1f39e0, 24 [pid 7402] <... futex resumed>) = 0 [pid 7399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7397] <... futex resumed>) = 0 [pid 7396] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] getdents64(4, [pid 7402] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7405] <... set_robust_list resumed>) = 0 [pid 7399] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7396] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7405] memfd_create("syzkaller", 0 [pid 7399] <... futex resumed>) = 0 [pid 7397] <... mmap resumed>) = 0x7fee02e32000 [pid 7396] <... futex resumed>) = 0 [pid 7396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] close(4 [pid 7399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 7399] <... mmap resumed>) = 0x7fee02e32000 [pid 7396] <... mmap resumed>) = 0x7fee02e32000 [pid 7399] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7397] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7396] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] rmdir("./127/bus" [pid 7405] <... memfd_create resumed>) = 3 [pid 7405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7399] <... mprotect resumed>) = 0 [pid 7397] <... mprotect resumed>) = 0 [pid 7396] <... mprotect resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7405] <... mmap resumed>) = 0x7fee02dd3000 [pid 7399] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7397] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7396] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 108.104140][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.119078][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.129054][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.132017][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.140456][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.144529][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7408 attached ./strace-static-x86_64: Process 7406 attached [pid 7405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7402] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7408] set_robust_list(0x7fee02e529e0, 24 [pid 7406] set_robust_list(0x7fee02e529e0, 24 [pid 7402] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7402] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7402] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7409], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7409 [pid 7402] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7402] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7408] <... set_robust_list resumed>) = 0 [pid 7406] <... set_robust_list resumed>) = 0 [pid 7405] <... write resumed>) = 524288 [pid 7399] <... clone resumed>, parent_tid=[7406], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7406 [pid 7397] <... clone resumed>, parent_tid=[7407], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7407 [pid 7396] <... clone resumed>, parent_tid=[7408], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7408 [pid 5075] close(3 [pid 7397] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7399] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7396] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 7406] creat("./file1", 000 [pid 7408] creat("./file1", 000 [pid 7399] <... futex resumed>) = 0 [pid 7396] <... futex resumed>) = 0 [pid 5075] rmdir("./127"./strace-static-x86_64: Process 7407 attached [pid 7407] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7407] creat("./file1", 000 [pid 7399] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7396] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7409 attached [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./128", 0777 [pid 7409] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7409] creat("./file1", 000 [pid 7405] munmap(0x7fee02dd3000, 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7407] <... creat resumed>) = 5 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7407] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7407] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7408] <... creat resumed>) = 5 [pid 7408] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7408] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7396] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7398] <... write resumed>) = 57344 [pid 7405] <... munmap resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7407] <... futex resumed>) = 0 [pid 7405] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7400] <... write resumed>) = 57344 [pid 7397] <... futex resumed>) = 1 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7407] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7405] <... openat resumed>) = 4 [pid 7400] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7400] <... futex resumed>) = 0 [pid 7405] ioctl(4, LOOP_SET_FD, 3 [pid 7400] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 108.151872][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.162054][ T7400] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.176311][ T7398] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.176955][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.199107][ T7401] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.208895][ T7405] loop2: detected capacity change from 0 to 1024 [pid 7397] exit_group(0 [pid 7407] <... futex resumed>) = ? [pid 7400] <... futex resumed>) = ? [pid 7397] <... exit_group resumed>) = ? [pid 7407] +++ exited with 0 +++ [pid 7398] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7398] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7410 attached [pid 7406] <... creat resumed>) = 5 [pid 7405] <... ioctl resumed>) = 0 [pid 7400] +++ exited with 0 +++ [pid 7397] +++ exited with 0 +++ [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7410 [pid 7406] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7396] exit_group(0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7397, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7406] <... futex resumed>) = 1 [pid 7399] <... futex resumed>) = 0 [pid 7396] <... exit_group resumed>) = ? [pid 7406] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 7408] <... futex resumed>) = ? [pid 7398] <... futex resumed>) = ? [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7408] +++ exited with 0 +++ [pid 5080] umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7401] <... write resumed>) = 57344 [pid 7398] +++ exited with 0 +++ [pid 7409] <... creat resumed>) = 5 [pid 7396] +++ exited with 0 +++ [pid 5080] lstat("./127/binderfs", [pid 7409] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7409] <... futex resumed>) = 1 [pid 7402] <... futex resumed>) = 0 [pid 7401] <... futex resumed>) = 0 [pid 7399] exit_group(0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7396, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5080] unlink("./127/binderfs" [pid 7406] <... futex resumed>) = ? [pid 7405] close(3 [pid 7399] <... exit_group resumed>) = ? [pid 5081] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 7406] +++ exited with 0 +++ [pid 7405] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7405] mkdir("./bus", 0777 [pid 5081] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7405] <... mkdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7405] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] fstat(3, [pid 7410] set_robust_list(0x555556b055e0, 24 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7410] <... set_robust_list resumed>) = 0 [pid 5081] getdents64(3, [pid 7410] chdir("./128" [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7410] <... chdir resumed>) = 0 [pid 5081] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7409] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7410] <... prctl resumed>) = 0 [pid 5081] lstat("./130/binderfs", [pid 7410] setpgid(0, 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7410] <... setpgid resumed>) = 0 [pid 5081] unlink("./130/binderfs" [pid 7410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... unlink resumed>) = 0 [pid 7410] <... openat resumed>) = 3 [pid 5081] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7410] write(3, "1000", 4) = 4 [pid 7410] close(3) = 0 [pid 7410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7410] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] +++ exited with 0 +++ [pid 7399] +++ exited with 0 +++ [pid 7410] <... futex resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7399, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7410] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7410] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7411], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7411 [pid 7410] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7410] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7410] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7411 attached ) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./128/binderfs") = 0 [pid 5077] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./130/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./130/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [ 108.209713][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.226469][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.234154][ T11] hfsplus: b-tree write err: -5, ino 4 [ 108.240780][ T52] hfsplus: b-tree write err: -5, ino 4 [ 108.248304][ T7403] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] close(3) = 0 [pid 5081] rmdir("./130") = 0 [pid 5081] mkdir("./131", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7411] set_robust_list(0x7fee0b1f39e0, 24 [pid 7405] <... mount resumed>) = 0 [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = 0 [pid 7405] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7411] <... set_robust_list resumed>) = 0 [pid 7405] <... openat resumed>) = 3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7411] memfd_create("syzkaller", 0 [pid 7405] chdir("./bus" [pid 5080] lstat("./127/bus", [pid 7411] <... memfd_create resumed>) = 3 [pid 7405] <... chdir resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7412 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7405] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./127/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7405] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7405] close(4 [pid 5080] openat(AT_FDCWD, "./127/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7405] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7405] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 7411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7405] <... futex resumed>) = 1 [pid 7404] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7405] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 7411] <... mmap resumed>) = 0x7fee02dd3000 [pid 7404] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./127/bus" [pid 5077] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7412 attached [pid 5080] <... rmdir resumed>) = 0 [pid 5077] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7412] set_robust_list(0x555556b055e0, 24 [pid 5080] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7412] <... set_robust_list resumed>) = 0 [pid 7411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7405] <... futex resumed>) = 0 [pid 7404] <... futex resumed>) = 1 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] lstat("./128/bus", [pid 7412] chdir("./131" [pid 7405] creat("./bus", 000 [pid 7404] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] close(3 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7412] <... chdir resumed>) = 0 [pid 7411] <... write resumed>) = 524288 [pid 7405] <... creat resumed>) = 4 [pid 5080] <... close resumed>) = 0 [pid 5077] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7405] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./127" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7412] <... prctl resumed>) = 0 [pid 7405] <... futex resumed>) = 1 [pid 7404] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7412] setpgid(0, 0 [pid 7411] munmap(0x7fee02dd3000, 524288 [pid 7405] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7404] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./128", 0777 [pid 5077] <... openat resumed>) = 4 [pid 7412] <... setpgid resumed>) = 0 [pid 7411] <... munmap resumed>) = 0 [pid 7405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7404] <... futex resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5077] fstat(4, [ 108.263677][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7405] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7404] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7412] <... openat resumed>) = 3 [pid 7411] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7403] <... write resumed>) = 57344 [pid 5080] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 7412] write(3, "1000", 4 [pid 7411] <... openat resumed>) = 4 [pid 7403] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7412] <... write resumed>) = 4 [pid 7411] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] getdents64(4, [pid 7412] close(3 [pid 7411] <... ioctl resumed>) = 0 [pid 7403] <... futex resumed>) = 0 [pid 7411] close(3 [pid 7403] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7402] exit_group(0 [pid 7411] <... close resumed>) = 0 [pid 7409] <... futex resumed>) = ? [pid 7403] <... futex resumed>) = ? [pid 7402] <... exit_group resumed>) = ? [pid 7411] mkdir("./bus", 0777 [pid 7409] +++ exited with 0 +++ [pid 7403] +++ exited with 0 +++ [pid 7402] +++ exited with 0 +++ [pid 7411] <... mkdir resumed>) = 0 [pid 7411] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7411] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7411] chdir("./bus") = 0 [pid 7411] ioctl(4, LOOP_CLR_FD) = 0 [pid 7411] close(4 [pid 7412] <... close resumed>) = 0 [pid 7411] <... close resumed>) = 0 [pid 5080] close(3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7412] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7412] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7412] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7413], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7413 [pid 7412] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5077] close(4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7402, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 7413 attached [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... close resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7413] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5077] rmdir("./128/bus" [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7414 [pid 7413] memfd_create("syzkaller", 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./128" [pid 5074] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7413] <... memfd_create resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./129", 0777 [pid 5074] <... openat resumed>) = 3 [pid 7413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7411] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7410] <... futex resumed>) = 0 [pid 5074] getdents64(3, [pid 7411] <... futex resumed>) = 1 [pid 7410] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7411] creat("./bus", 000 [pid 7410] <... futex resumed>) = 0 [pid 5077] close(3 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7410] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7413] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] lstat("./128/binderfs", [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7415 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./128/binderfs") = 0 [ 108.307873][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.317322][ T7411] loop1: detected capacity change from 0 to 1024 [ 108.319402][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.332023][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.339551][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.347998][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7414 attached [pid 7411] <... creat resumed>) = 4 [pid 7404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7414] set_robust_list(0x555556b055e0, 24 [pid 7413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7415 attached [pid 7415] set_robust_list(0x555556b055e0, 24) = 0 [pid 7415] chdir("./129") = 0 [pid 7415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7415] setpgid(0, 0) = 0 [pid 7415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7411] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7404] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] <... set_robust_list resumed>) = 0 [pid 7411] <... futex resumed>) = 1 [pid 7410] <... futex resumed>) = 0 [pid 7404] <... futex resumed>) = 0 [pid 7415] <... openat resumed>) = 3 [pid 7414] chdir("./128" [pid 7413] <... write resumed>) = 524288 [pid 7411] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7410] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] <... write resumed>) = 57344 [pid 7404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7415] write(3, "1000", 4 [pid 7414] <... chdir resumed>) = 0 [pid 7410] <... futex resumed>) = 0 [pid 7405] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7404] <... mmap resumed>) = 0x7fee02e32000 [pid 7415] <... write resumed>) = 4 [pid 7414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7410] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7405] <... futex resumed>) = 0 [pid 7404] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... umount2 resumed>) = 0 [pid 7415] close(3 [pid 7414] <... prctl resumed>) = 0 [pid 7405] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7404] <... mprotect resumed>) = 0 [pid 7415] <... close resumed>) = 0 [pid 7414] setpgid(0, 0 [pid 7404] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7415] symlink("/dev/binderfs", "./binderfs" [pid 7414] <... setpgid resumed>) = 0 [pid 7415] <... symlink resumed>) = 0 [pid 7414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7404] <... clone resumed>, parent_tid=[7416], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7416 [pid 7415] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] <... openat resumed>) = 3 [pid 7404] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7415] <... futex resumed>) = 0 [pid 7414] write(3, "1000", 4 [pid 7404] <... futex resumed>) = 0 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7414] <... write resumed>) = 4 [pid 7404] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7415] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7414] close(3 [pid 7413] munmap(0x7fee02dd3000, 524288 [pid 7415] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7414] <... close resumed>) = 0 [pid 7415] <... mprotect resumed>) = 0 [pid 7414] symlink("/dev/binderfs", "./binderfs" [pid 7413] <... munmap resumed>) = 0 [pid 7415] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7414] <... symlink resumed>) = 0 [pid 7413] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7414] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7417 attached ./strace-static-x86_64: Process 7416 attached [pid 7415] <... clone resumed>, parent_tid=[7417], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7417 [pid 7414] <... futex resumed>) = 0 [pid 7413] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7417] set_robust_list(0x7fee0b1f39e0, 24 [pid 7416] set_robust_list(0x7fee02e529e0, 24 [pid 7415] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7417] <... set_robust_list resumed>) = 0 [pid 7416] <... set_robust_list resumed>) = 0 [pid 5074] lstat("./128/bus", [pid 7417] memfd_create("syzkaller", 0 [pid 7416] creat("./file1", 000 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7417] <... memfd_create resumed>) = 3 [pid 7416] <... creat resumed>) = 5 [pid 5074] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7416] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7417] <... mmap resumed>) = 0x7fee02dd3000 [pid 7416] <... futex resumed>) = 1 [pid 5074] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7416] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] <... futex resumed>) = 0 [pid 7414] <... mmap resumed>) = 0x7fee0b1d3000 [ 108.364579][ T52] hfsplus: b-tree write err: -5, ino 4 [ 108.373692][ T7405] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.395614][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.403903][ T7413] loop5: detected capacity change from 0 to 1024 [pid 7404] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7415] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7414] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7413] <... ioctl resumed>) = 0 [pid 7404] exit_group(0 [pid 5074] fstat(4, [pid 7417] <... write resumed>) = 524288 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./128/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 7416] <... futex resumed>) = ? [pid 7414] <... mprotect resumed>) = 0 [pid 7404] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 7416] +++ exited with 0 +++ [pid 7405] <... futex resumed>) = ? [pid 5074] rmdir("./128" [pid 7414] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... rmdir resumed>) = 0 [pid 7405] +++ exited with 0 +++ [pid 7404] +++ exited with 0 +++ [pid 5074] mkdir("./129", 0777./strace-static-x86_64: Process 7418 attached [pid 7413] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7417] munmap(0x7fee02dd3000, 524288 [pid 5074] close(3 [pid 7418] set_robust_list(0x7fee0b1f39e0, 24 [pid 7414] <... clone resumed>, parent_tid=[7418], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7418 [pid 7413] <... close resumed>) = 0 [pid 7410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7404, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... close resumed>) = 0 [pid 7418] <... set_robust_list resumed>) = 0 [pid 7414] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] mkdir("./bus", 0777 [pid 7410] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7418] memfd_create("syzkaller", 0 [pid 7414] <... futex resumed>) = 0 [pid 7413] <... mkdir resumed>) = 0 [pid 7410] <... futex resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7418] <... memfd_create resumed>) = 3 [pid 7417] <... munmap resumed>) = 0 [pid 7414] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7413] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7419 [pid 7417] ioctl(4, LOOP_SET_FD, 3 [pid 7418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7410] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7419 attached [pid 7419] set_robust_list(0x555556b055e0, 24) = 0 [pid 7419] chdir("./129") = 0 [pid 7419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7419] setpgid(0, 0) = 0 [pid 7419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7419] write(3, "1000", 4) = 4 [pid 7419] close(3) = 0 [pid 7419] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7419] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7419] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7418] <... mmap resumed>) = 0x7fee02dd3000 [pid 7410] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7419] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7410] <... mprotect resumed>) = 0 [pid 5076] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7419] <... clone resumed>, parent_tid=[7420], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7420 [pid 7419] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7419] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7417] <... ioctl resumed>) = 0 [pid 7417] close(3) = 0 [pid 7417] mkdir("./bus", 0777 [pid 7418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7410] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7417] <... mkdir resumed>) = 0 [pid 7417] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7418] <... write resumed>) = 524288 [pid 7410] <... clone resumed>, parent_tid=[7421], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7421 [pid 5076] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7410] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7418] munmap(0x7fee02dd3000, 524288 [pid 7413] <... mount resumed>) = 0 [pid 7410] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7413] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7411] <... write resumed>) = 57344 [pid 7410] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] fstat(3, [pid 7413] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7418] <... munmap resumed>) = 0 [pid 7413] chdir("./bus" [pid 7411] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, ./strace-static-x86_64: Process 7420 attached [pid 7418] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7413] <... chdir resumed>) = 0 [pid 7413] ioctl(4, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7413] <... ioctl resumed>) = 0 [ 108.411044][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.418917][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.428590][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.439385][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.442473][ T7417] loop3: detected capacity change from 0 to 1024 [ 108.447704][ T7411] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7420] set_robust_list(0x7fee0b1f39e0, 24 [pid 7418] <... openat resumed>) = 4 [pid 7413] close(4 [pid 7411] <... futex resumed>) = 0 [pid 5076] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7421 attached [pid 7420] <... set_robust_list resumed>) = 0 [pid 7418] ioctl(4, LOOP_SET_FD, 3 [pid 7417] <... mount resumed>) = 0 [pid 7413] <... close resumed>) = 0 [pid 7411] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7421] set_robust_list(0x7fee02e529e0, 24 [pid 7420] memfd_create("syzkaller", 0 [pid 7418] <... ioctl resumed>) = 0 [pid 7417] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7413] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] lstat("./129/binderfs", [pid 7421] <... set_robust_list resumed>) = 0 [pid 7420] <... memfd_create resumed>) = 3 [pid 7418] close(3 [pid 7417] <... openat resumed>) = 3 [pid 7413] <... futex resumed>) = 1 [pid 7412] <... futex resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7421] creat("./file1", 000 [pid 7420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7418] <... close resumed>) = 0 [pid 7417] chdir("./bus" [pid 7413] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7412] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./129/binderfs" [pid 7421] <... creat resumed>) = 5 [pid 7420] <... mmap resumed>) = 0x7fee02dd3000 [pid 7418] mkdir("./bus", 0777 [pid 7417] <... chdir resumed>) = 0 [pid 7413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7412] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7421] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7418] <... mkdir resumed>) = 0 [pid 7417] ioctl(4, LOOP_CLR_FD [pid 7413] creat("./bus", 000 [pid 7412] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7421] <... futex resumed>) = 1 [pid 7420] <... write resumed>) = 524288 [pid 7418] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7417] <... ioctl resumed>) = 0 [pid 7413] <... creat resumed>) = 4 [pid 7410] <... futex resumed>) = 0 [pid 7421] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7420] munmap(0x7fee02dd3000, 524288 [pid 7417] close(4 [pid 7413] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] exit_group(0 [pid 7421] <... futex resumed>) = ? [pid 7420] <... munmap resumed>) = 0 [pid 7417] <... close resumed>) = 0 [pid 7413] <... futex resumed>) = 1 [pid 7411] <... futex resumed>) = ? [pid 7410] <... exit_group resumed>) = ? [pid 7421] +++ exited with 0 +++ [pid 7420] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7417] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7411] +++ exited with 0 +++ [pid 7410] +++ exited with 0 +++ [pid 7420] <... openat resumed>) = 4 [pid 7417] <... futex resumed>) = 1 [pid 7415] <... futex resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7410, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7420] ioctl(4, LOOP_SET_FD, 3 [pid 7417] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7420] <... ioctl resumed>) = 0 [pid 7417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7415] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7420] close(3 [pid 7417] creat("./bus", 000 [pid 7418] <... mount resumed>) = 0 [pid 7415] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7412] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] <... close resumed>) = 0 [pid 7418] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7417] <... creat resumed>) = 4 [pid 7413] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 1 [pid 7420] mkdir("./bus", 0777 [pid 7418] <... openat resumed>) = 3 [pid 7417] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7412] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7420] <... mkdir resumed>) = 0 [pid 7418] chdir("./bus" [pid 7417] <... futex resumed>) = 1 [pid 7415] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7420] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7417] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7415] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7417] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7415] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] fstat(3, [pid 5076] <... umount2 resumed>) = 0 [pid 7418] <... chdir resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7418] ioctl(4, LOOP_CLR_FD [pid 5076] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 7418] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7418] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7418] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7418] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] lstat("./129/bus", [ 108.473751][ T7418] loop4: detected capacity change from 0 to 1024 [ 108.491689][ T52] hfsplus: b-tree write err: -5, ino 4 [ 108.495889][ T7420] loop0: detected capacity change from 0 to 1024 [ 108.514422][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] lstat("./128/binderfs", [pid 7418] <... futex resumed>) = 1 [pid 7414] <... futex resumed>) = 0 [pid 7420] <... mount resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7420] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7414] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./128/binderfs" [pid 7420] <... openat resumed>) = 3 [pid 7414] <... futex resumed>) = 0 [pid 7418] creat("./bus", 000 [pid 5075] <... unlink resumed>) = 0 [pid 5076] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7420] chdir("./bus" [pid 7414] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7420] <... chdir resumed>) = 0 [pid 7418] <... creat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7420] ioctl(4, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7420] <... ioctl resumed>) = 0 [pid 7418] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] close(4 [pid 7418] <... futex resumed>) = 1 [pid 7414] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7420] <... close resumed>) = 0 [pid 7418] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7414] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [pid 7420] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7414] <... futex resumed>) = 0 [pid 7420] <... futex resumed>) = 1 [pid 7419] <... futex resumed>) = 0 [pid 7418] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7414] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7420] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7419] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7419] <... futex resumed>) = 0 [pid 7420] creat("./bus", 000 [pid 7419] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 7420] <... creat resumed>) = 4 [pid 7420] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7420] <... futex resumed>) = 1 [pid 7419] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 7420] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7419] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7419] <... futex resumed>) = 0 [pid 5076] close(4 [pid 7420] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7419] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./129/bus") = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./129" [pid 7415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... rmdir resumed>) = 0 [pid 7415] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7415] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7415] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7422], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7422 [pid 7415] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.521800][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.530371][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.544289][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.557452][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.561803][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7415] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7412] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./130", 0777./strace-static-x86_64: Process 7422 attached [pid 7422] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7422] creat("./file1", 000 [pid 7412] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7419] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... openat resumed>) = 3 [pid 7419] <... futex resumed>) = 0 [pid 7419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7412] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7419] <... mmap resumed>) = 0x7fee02e32000 [pid 7414] <... mmap resumed>) = 0x7fee02e32000 [pid 7412] <... mprotect resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7419] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7414] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] close(3 [pid 7412] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7414] <... mprotect resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7419] <... mprotect resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7419] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 108.567235][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.572898][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.581242][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.588195][ T52] hfsplus: b-tree write err: -5, ino 4 [ 108.595279][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.608562][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7414] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7419] <... clone resumed>, parent_tid=[7425], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7425 [pid 7414] <... clone resumed>, parent_tid=[7424], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7424 [pid 7412] <... clone resumed>, parent_tid=[7426], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7426 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7423 [pid 7419] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] <... futex resumed>) = 0 [pid 7419] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7414] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7419] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7412] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7422] <... creat resumed>) = 5 [pid 7422] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7422] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7424 attached ./strace-static-x86_64: Process 7426 attached ./strace-static-x86_64: Process 7425 attached ./strace-static-x86_64: Process 7423 attached [pid 7425] set_robust_list(0x7fee02e529e0, 24 [pid 7423] set_robust_list(0x555556b055e0, 24 [pid 7425] <... set_robust_list resumed>) = 0 [pid 7423] <... set_robust_list resumed>) = 0 [pid 7425] creat("./file1", 000 [pid 7423] chdir("./130" [pid 7426] set_robust_list(0x7fee02e529e0, 24 [pid 7424] set_robust_list(0x7fee02e529e0, 24 [pid 7426] <... set_robust_list resumed>) = 0 [pid 7424] <... set_robust_list resumed>) = 0 [pid 7423] <... chdir resumed>) = 0 [pid 7426] creat("./file1", 000 [pid 7424] creat("./file1", 000 [pid 7423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7423] setpgid(0, 0) = 0 [pid 7423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7423] write(3, "1000", 4) = 4 [pid 7423] close(3) = 0 [pid 7423] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = 0 [ 108.617685][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.631621][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.640614][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.654222][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.662931][ T7413] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7423] <... symlink resumed>) = 0 [pid 7419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7423] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7423] <... futex resumed>) = 0 [pid 5075] lstat("./128/bus", [pid 7423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7423] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7423] <... mprotect resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7426] <... creat resumed>) = 5 [pid 7426] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7426] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7423] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7423] <... clone resumed>, parent_tid=[7427], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7427 [pid 5075] <... openat resumed>) = 4 [pid 7423] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] fstat(4, [pid 7423] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7423] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7413] <... write resumed>) = 57344 [pid 5075] close(4 [pid 7413] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] exit_group(0 [pid 7426] <... futex resumed>) = ? [pid 7412] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 7426] +++ exited with 0 +++ [pid 5075] rmdir("./128/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 7417] <... write resumed>) = 57344 [pid 7417] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./128" [pid 7415] exit_group(0 [pid 7422] <... futex resumed>) = ? [pid 7415] <... exit_group resumed>) = ? [pid 7422] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./129", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7427 attached ) = 3 [pid 7427] set_robust_list(0x7fee0b1f39e0, 24 [pid 7413] +++ exited with 0 +++ [pid 7412] +++ exited with 0 +++ [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7427] <... set_robust_list resumed>) = 0 [pid 7417] +++ exited with 0 +++ [pid 7415] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7412, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7415, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] close(3 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7427] memfd_create("syzkaller", 0 [pid 5081] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7428 [pid 7427] <... memfd_create resumed>) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 7427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7427] <... mmap resumed>) = 0x7fee02dd3000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5081] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7428 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7428] set_robust_list(0x555556b055e0, 24 [ 108.671117][ T7417] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.679283][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.688007][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] lstat("./131/binderfs", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7428] <... set_robust_list resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] lstat("./129/binderfs", [pid 7427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7425] <... creat resumed>) = 5 [pid 7425] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7425] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] unlink("./131/binderfs" [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7428] chdir("./129" [pid 7424] <... creat resumed>) = 5 [pid 5081] <... unlink resumed>) = 0 [pid 7427] <... write resumed>) = 524288 [pid 7427] munmap(0x7fee02dd3000, 524288) = 0 [pid 7427] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7427] ioctl(4, LOOP_SET_FD, 3 [pid 7428] <... chdir resumed>) = 0 [pid 7424] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7418] <... write resumed>) = 57344 [pid 5081] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./129/binderfs" [pid 7428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7424] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7428] <... prctl resumed>) = 0 [pid 7424] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7428] setpgid(0, 0) = 0 [pid 7428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7428] write(3, "1000", 4) = 4 [pid 7428] close(3) = 0 [pid 7428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7428] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7428] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7428] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7429 attached [pid 7427] <... ioctl resumed>) = 0 [pid 7420] <... write resumed>) = 57344 [pid 7418] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7420] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 108.716829][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.725586][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.727592][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.732867][ T7420] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.740349][ T7418] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.753364][ T7427] loop2: detected capacity change from 0 to 1024 [ 108.761779][ T33] hfsplus: b-tree write err: -5, ino 4 [pid 7427] close(3) = 0 [pid 7427] mkdir("./bus", 0777 [pid 7419] exit_group(0 [pid 7414] exit_group(0) = ? [pid 7424] <... futex resumed>) = ? [pid 7425] <... futex resumed>) = ? [pid 7420] <... futex resumed>) = ? [pid 7419] <... exit_group resumed>) = ? [pid 7428] <... clone resumed>, parent_tid=[7429], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7429 [pid 7425] +++ exited with 0 +++ [pid 7424] +++ exited with 0 +++ [pid 7420] +++ exited with 0 +++ [pid 7427] <... mkdir resumed>) = 0 [pid 7427] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7429] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7418] <... futex resumed>) = ? [pid 7429] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7418] +++ exited with 0 +++ [pid 7414] +++ exited with 0 +++ [pid 7427] <... mount resumed>) = 0 [pid 7427] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7414, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7427] chdir("./bus") = 0 [pid 7427] ioctl(4, LOOP_CLR_FD [pid 7419] +++ exited with 0 +++ [pid 7427] <... ioctl resumed>) = 0 [pid 7427] close(4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7419, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7428] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7428] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7429] <... futex resumed>) = 0 [pid 7429] memfd_create("syzkaller", 0) = 3 [pid 7427] <... close resumed>) = 0 [pid 7429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7427] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] <... mmap resumed>) = 0x7fee02dd3000 [pid 7423] <... futex resumed>) = 0 [pid 7423] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7423] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7427] <... futex resumed>) = 1 [pid 7427] creat("./bus", 000) = 4 [pid 7429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7427] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] <... futex resumed>) = 0 [pid 7423] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7423] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7427] <... futex resumed>) = 1 [pid 5080] umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7427] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5081] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 5074] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./131/bus", [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [ 108.769354][ T52] hfsplus: b-tree write err: -5, ino 4 [ 108.804292][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7429] <... write resumed>) = 524288 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./129/bus", [pid 5074] <... openat resumed>) = 3 [pid 7429] munmap(0x7fee02dd3000, 524288 [pid 5081] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7429] <... munmap resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5080] lstat("./128/binderfs", [pid 5077] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] fstat(4, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 7429] <... openat resumed>) = 4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] unlink("./128/binderfs" [pid 5077] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7429] ioctl(4, LOOP_SET_FD, 3 [pid 5081] getdents64(4, [pid 5080] <... unlink resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5074] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./129/binderfs", [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] close(4 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] unlink("./129/binderfs" [pid 5081] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 5074] <... unlink resumed>) = 0 [pid 5081] rmdir("./131/bus" [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 5081] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] rmdir("./129/bus" [pid 5081] close(3 [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] getdents64(3, [pid 5081] rmdir("./131" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] close(3 [pid 5081] mkdir("./132", 0777 [pid 5077] <... close resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] rmdir("./129" [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] mkdir("./130", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] <... mkdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7430 [pid 5077] <... close resumed>) = 0 [pid 7423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7423] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7431 [pid 7429] <... ioctl resumed>) = 0 [pid 7429] close(3) = 0 [pid 7429] mkdir("./bus", 0777) = 0 [pid 7429] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7431 attached [pid 7431] set_robust_list(0x555556b055e0, 24) = 0 [pid 7431] chdir("./130") = 0 [pid 7431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7431] setpgid(0, 0) = 0 [pid 7431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7423] <... futex resumed>) = 0 [pid 7431] write(3, "1000", 4) = 4 [pid 7431] close(3) = 0 [pid 7431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7431] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 5074] <... umount2 resumed>) = 0 [pid 7431] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7431] <... mprotect resumed>) = 0 [pid 7431] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7432], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7432 [pid 7431] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 108.816038][ T7429] loop1: detected capacity change from 0 to 1024 [ 108.824012][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.831724][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 108.837425][ T11] hfsplus: b-tree write err: -5, ino 4 [ 108.844207][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.856457][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7431] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7430 attached [pid 7423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./128/bus", [pid 7430] set_robust_list(0x555556b055e0, 24 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7430] <... set_robust_list resumed>) = 0 [pid 7429] <... mount resumed>) = 0 [pid 7423] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] umount2("./128/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./129/bus", [pid 7429] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7429] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./128/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7429] chdir("./bus" [pid 5080] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7432 attached [pid 7429] <... chdir resumed>) = 0 [pid 5080] fstat(4, [pid 7432] set_robust_list(0x7fee0b1f39e0, 24 [pid 7429] ioctl(4, LOOP_CLR_FD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7432] <... set_robust_list resumed>) = 0 [pid 7429] <... ioctl resumed>) = 0 [pid 5080] getdents64(4, [pid 7432] memfd_create("syzkaller", 0 [pid 7429] close(4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7432] <... memfd_create resumed>) = 3 [pid 7430] chdir("./132" [pid 7429] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 7432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7429] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7432] <... mmap resumed>) = 0x7fee02dd3000 [pid 7429] <... futex resumed>) = 1 [pid 7428] <... futex resumed>) = 0 [pid 5080] close(4 [pid 7432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7430] <... chdir resumed>) = 0 [pid 7429] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7428] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... close resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7428] <... futex resumed>) = 0 [pid 7423] <... mprotect resumed>) = 0 [pid 5080] rmdir("./128/bus" [pid 5074] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7430] <... prctl resumed>) = 0 [pid 7429] creat("./bus", 000 [pid 7428] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7427] <... write resumed>) = 57344 [pid 7423] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7432] <... write resumed>) = 524288 [pid 7430] setpgid(0, 0 [pid 7429] <... creat resumed>) = 4 [pid 7427] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5074] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7432] munmap(0x7fee02dd3000, 524288 [pid 7430] <... setpgid resumed>) = 0 [pid 7429] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7427] <... futex resumed>) = 0 [pid 7423] <... clone resumed>, parent_tid=[7433], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7433 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7429] <... futex resumed>) = 1 [pid 7428] <... futex resumed>) = 0 [pid 5080] close(3./strace-static-x86_64: Process 7433 attached [pid 7432] <... munmap resumed>) = 0 [pid 7430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7429] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7428] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7427] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7423] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 7433] set_robust_list(0x7fee02e529e0, 24 [pid 7432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7430] <... openat resumed>) = 3 [pid 7429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7428] <... futex resumed>) = 0 [pid 5080] rmdir("./128" [pid 7432] <... openat resumed>) = 4 [pid 7430] write(3, "1000", 4 [pid 7429] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7428] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7423] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7433] <... set_robust_list resumed>) = 0 [ 108.866631][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.875285][ T7427] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.907724][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7432] ioctl(4, LOOP_SET_FD, 3 [pid 7430] <... write resumed>) = 4 [pid 7423] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(4, [pid 7433] creat("./file1", 000 [pid 7432] <... ioctl resumed>) = 0 [pid 7430] close(3 [pid 5080] mkdir("./129", 0777 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7433] <... creat resumed>) = 5 [pid 7430] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 7433] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7430] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7433] <... futex resumed>) = 1 [pid 7430] <... symlink resumed>) = 0 [pid 7423] <... futex resumed>) = 0 [pid 5074] close(4 [pid 7433] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 7433] <... futex resumed>) = ? [pid 7430] <... futex resumed>) = 0 [pid 7427] <... futex resumed>) = ? [pid 7423] <... exit_group resumed>) = ? [pid 5074] rmdir("./129/bus" [pid 7433] +++ exited with 0 +++ [pid 7430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7427] +++ exited with 0 +++ [pid 7423] +++ exited with 0 +++ [pid 5080] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7430] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5074] getdents64(3, [pid 7430] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7430] <... mprotect resumed>) = 0 [pid 5074] close(3 [pid 7430] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./129" [pid 7430] <... clone resumed>, parent_tid=[7434], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7434 [pid 5074] <... rmdir resumed>) = 0 [pid 7430] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] mkdir("./130", 0777 [pid 7430] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7430] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3./strace-static-x86_64: Process 7434 attached [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 7434] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7423, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7434] <... set_robust_list resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7434] memfd_create("syzkaller", 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7435 [pid 7434] <... memfd_create resumed>) = 3 [pid 5080] close(3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 7432] close(3 [pid 7434] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7432] <... close resumed>) = 0 [pid 7432] mkdir("./bus", 0777 [pid 5076] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7432] <... mkdir resumed>) = 0 [pid 7432] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7436 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./130/binderfs" [pid 7428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7428] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7436 attached ./strace-static-x86_64: Process 7435 attached [pid 7434] <... write resumed>) = 524288 [pid 7428] <... futex resumed>) = 0 [pid 7432] <... mount resumed>) = 0 [pid 7432] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 108.910168][ T7432] loop3: detected capacity change from 0 to 1024 [ 108.915502][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.930326][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.938183][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.949186][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7432] chdir("./bus") = 0 [pid 7432] ioctl(4, LOOP_CLR_FD) = 0 [pid 7432] close(4 [pid 7434] munmap(0x7fee02dd3000, 524288 [pid 7432] <... close resumed>) = 0 [pid 7428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7435] set_robust_list(0x555556b055e0, 24 [pid 5076] <... unlink resumed>) = 0 [pid 7432] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... munmap resumed>) = 0 [pid 7432] <... futex resumed>) = 1 [pid 7436] set_robust_list(0x555556b055e0, 24 [pid 7435] <... set_robust_list resumed>) = 0 [pid 7434] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7432] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] <... futex resumed>) = 0 [pid 7429] <... write resumed>) = 57344 [pid 7428] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7436] <... set_robust_list resumed>) = 0 [pid 7435] chdir("./130" [pid 7434] <... openat resumed>) = 4 [pid 7432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7428] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7436] chdir("./129" [pid 7435] <... chdir resumed>) = 0 [pid 7434] ioctl(4, LOOP_SET_FD, 3 [pid 7431] <... futex resumed>) = 0 [pid 7428] <... mprotect resumed>) = 0 [pid 7436] <... chdir resumed>) = 0 [pid 7435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7434] <... ioctl resumed>) = 0 [pid 7432] creat("./bus", 000 [pid 7431] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7429] <... futex resumed>) = 0 [pid 7428] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7435] <... prctl resumed>) = 0 [pid 7434] close(3 [pid 7432] <... creat resumed>) = 4 [pid 7436] <... prctl resumed>) = 0 [pid 7435] setpgid(0, 0 [pid 7434] <... close resumed>) = 0 [pid 7432] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7428] <... clone resumed>, parent_tid=[7437], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7437 [pid 7436] setpgid(0, 0 [pid 7435] <... setpgid resumed>) = 0 [pid 7434] mkdir("./bus", 0777 [pid 7432] <... futex resumed>) = 1 [pid 7431] <... futex resumed>) = 0 [pid 7428] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] <... setpgid resumed>) = 0 [pid 7435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7434] <... mkdir resumed>) = 0 [pid 7432] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7428] <... futex resumed>) = 0 [pid 7436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7435] <... openat resumed>) = 3 [pid 7434] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] <... futex resumed>) = 0 [pid 7429] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7428] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7436] <... openat resumed>) = 3 [pid 7435] write(3, "1000", 4 [pid 7432] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7431] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = 0 [pid 7436] write(3, "1000", 4 [pid 7435] <... write resumed>) = 4 [pid 7434] <... mount resumed>) = 0 [pid 7436] <... write resumed>) = 4 [pid 7435] close(3 [pid 7434] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7436] close(3 [pid 7435] <... close resumed>) = 0 [pid 7434] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7436] <... close resumed>) = 0 [pid 7435] symlink("/dev/binderfs", "./binderfs" [pid 7434] chdir("./bus" [pid 5076] lstat("./130/bus", ./strace-static-x86_64: Process 7437 attached [pid 7436] symlink("/dev/binderfs", "./binderfs" [pid 7435] <... symlink resumed>) = 0 [pid 7434] <... chdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7436] <... symlink resumed>) = 0 [pid 7435] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7435] <... futex resumed>) = 0 [ 108.967729][ T7429] hfsplus: request for non-existent node 16715520 in B*Tree [ 108.978656][ T11] hfsplus: b-tree write err: -5, ino 4 [ 108.981001][ T7434] loop5: detected capacity change from 0 to 1024 [ 109.006059][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7436] <... futex resumed>) = 0 [pid 7435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7435] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7436] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7435] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7436] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7435] <... mprotect resumed>) = 0 [pid 7436] <... mprotect resumed>) = 0 [pid 7435] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7436] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7435] <... clone resumed>, parent_tid=[7438], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7438 [pid 7436] <... clone resumed>, parent_tid=[7439], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7439 [pid 7435] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7435] <... futex resumed>) = 0 [pid 7437] set_robust_list(0x7fee02e529e0, 24 [pid 7436] <... futex resumed>) = 0 [pid 7435] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7434] ioctl(4, LOOP_CLR_FD [pid 5076] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7436] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7438 attached [pid 7438] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7438] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7439 attached [pid 7439] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7439] memfd_create("syzkaller", 0 [pid 7438] <... memfd_create resumed>) = 3 [pid 7439] <... memfd_create resumed>) = 3 [pid 7438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7438] <... mmap resumed>) = 0x7fee02dd3000 [pid 7439] <... mmap resumed>) = 0x7fee02dd3000 [pid 7438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7437] <... set_robust_list resumed>) = 0 [pid 7434] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7437] creat("./file1", 000 [pid 7434] close(4 [pid 5076] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7437] <... creat resumed>) = 5 [pid 7434] <... close resumed>) = 0 [pid 7438] <... write resumed>) = 524288 [pid 7437] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... openat resumed>) = 4 [pid 7437] <... futex resumed>) = 0 [pid 7434] <... futex resumed>) = 1 [pid 7430] <... futex resumed>) = 0 [pid 7428] exit_group(0 [pid 5076] fstat(4, [pid 7434] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7430] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7429] <... futex resumed>) = ? [pid 7428] <... exit_group resumed>) = ? [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7439] <... write resumed>) = 524288 [pid 7437] +++ exited with 0 +++ [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7430] <... futex resumed>) = 0 [pid 7429] +++ exited with 0 +++ [pid 7428] +++ exited with 0 +++ [pid 5076] getdents64(4, [pid 7431] <... futex resumed>) = 0 [pid 7431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7428, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7431] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7438] munmap(0x7fee02dd3000, 524288 [pid 7431] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7439] munmap(0x7fee02dd3000, 524288 [pid 7438] <... munmap resumed>) = 0 [pid 7431] <... mprotect resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7439] <... munmap resumed>) = 0 [pid 7438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7431] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... openat resumed>) = 3 [pid 7439] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7438] <... openat resumed>) = 4 [pid 5075] fstat(3, [pid 7439] <... openat resumed>) = 4 [pid 7438] ioctl(4, LOOP_SET_FD, 3 [pid 7434] creat("./bus", 000 [pid 7431] <... clone resumed>, parent_tid=[7440], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7440 [ 109.018186][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.026070][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.033883][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.043938][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.058538][ T7432] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7430] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7440 attached [pid 7434] <... creat resumed>) = 4 [pid 7432] <... write resumed>) = 57344 [pid 7431] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 7440] set_robust_list(0x7fee02e529e0, 24 [pid 7434] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7432] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7440] <... set_robust_list resumed>) = 0 [pid 7434] <... futex resumed>) = 1 [pid 7432] <... futex resumed>) = 0 [pid 7430] <... futex resumed>) = 0 [pid 5076] close(4 [pid 7440] creat("./file1", 000 [pid 7434] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7432] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 7440] <... creat resumed>) = 5 [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7430] <... futex resumed>) = 0 [pid 5076] rmdir("./130/bus" [pid 5075] getdents64(3, [pid 7440] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7439] ioctl(4, LOOP_SET_FD, 3 [pid 7438] <... ioctl resumed>) = 0 [pid 7434] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7431] <... futex resumed>) = 0 [pid 7430] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... rmdir resumed>) = 0 [pid 7440] <... futex resumed>) = 0 [pid 7439] <... ioctl resumed>) = 0 [pid 7438] close(3 [pid 7431] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7439] close(3 [pid 7438] <... close resumed>) = 0 [pid 7431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7439] <... close resumed>) = 0 [pid 7438] mkdir("./bus", 0777 [pid 7431] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7439] mkdir("./bus", 0777 [pid 7438] <... mkdir resumed>) = 0 [pid 7432] <... futex resumed>) = ? [pid 7431] <... exit_group resumed>) = ? [pid 5076] getdents64(3, [pid 5075] lstat("./129/binderfs", [pid 7439] <... mkdir resumed>) = 0 [pid 7438] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7439] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] unlink("./129/binderfs") = 0 [pid 5075] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7440] +++ exited with 0 +++ [pid 7432] +++ exited with 0 +++ [pid 7431] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7431, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./130" [pid 5077] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./129/bus", [pid 5077] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] mkdir("./131", 0777 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5077] fstat(3, [pid 7439] <... mount resumed>) = 0 [pid 7438] <... mount resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 7439] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7438] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5077] lstat("./130/binderfs", [pid 5076] <... close resumed>) = 0 [pid 7439] <... openat resumed>) = 3 [pid 7438] <... openat resumed>) = 3 [pid 7439] chdir("./bus" [pid 7438] chdir("./bus" [pid 7439] <... chdir resumed>) = 0 [pid 7438] <... chdir resumed>) = 0 [pid 7439] ioctl(4, LOOP_CLR_FD [pid 7438] ioctl(4, LOOP_CLR_FD [pid 7439] <... ioctl resumed>) = 0 [pid 7438] <... ioctl resumed>) = 0 [pid 7439] close(4 [pid 7438] close(4 [pid 7439] <... close resumed>) = 0 [pid 7438] <... close resumed>) = 0 [pid 7439] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7439] <... futex resumed>) = 1 [pid 7438] <... futex resumed>) = 1 [pid 7436] <... futex resumed>) = 0 [pid 7435] <... futex resumed>) = 0 [pid 7439] creat("./bus", 000 [pid 7438] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7436] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7435] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7439] <... creat resumed>) = 4 [pid 7438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7436] <... futex resumed>) = 0 [pid 7435] <... futex resumed>) = 0 [pid 7439] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] creat("./bus", 000 [pid 7436] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7435] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7439] <... futex resumed>) = 0 [pid 7438] <... creat resumed>) = 4 [pid 7436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7439] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7438] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7438] <... futex resumed>) = 1 [pid 7436] <... futex resumed>) = 0 [pid 7435] <... futex resumed>) = 0 [pid 7439] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7438] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7436] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7435] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 109.066941][ T7438] loop0: detected capacity change from 0 to 1024 [ 109.075561][ T7439] loop4: detected capacity change from 0 to 1024 [ 109.076577][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.089747][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.098432][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 109.099558][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.112813][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7435] <... futex resumed>) = 0 [pid 7438] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7435] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] unlink("./130/binderfs" [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7441 attached [pid 7430] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7441] set_robust_list(0x555556b055e0, 24 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7441 [pid 5075] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7430] <... futex resumed>) = 0 [pid 5077] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7441] <... set_robust_list resumed>) = 0 [pid 7441] chdir("./131" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7441] <... chdir resumed>) = 0 [pid 7441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... openat resumed>) = 4 [pid 7441] <... prctl resumed>) = 0 [pid 7441] setpgid(0, 0 [pid 7430] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] fstat(4, [pid 7441] <... setpgid resumed>) = 0 [pid 7441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7441] write(3, "1000", 4) = 4 [pid 7441] close(3) = 0 [pid 7441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7441] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7441] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7441] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7442], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7442 [pid 7441] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7441] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7430] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 109.138001][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.147165][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.155714][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.163011][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.173576][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 109.175893][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7430] <... mprotect resumed>) = 0 [pid 5075] getdents64(4, [pid 7436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7436] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7430] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7436] <... mmap resumed>) = 0x7fee02e32000 [pid 7430] <... clone resumed>, parent_tid=[7443], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7443 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7443 attached ./strace-static-x86_64: Process 7442 attached [pid 7436] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7443] set_robust_list(0x7fee02e529e0, 24 [pid 7442] set_robust_list(0x7fee0b1f39e0, 24 [pid 7436] <... mprotect resumed>) = 0 [pid 7430] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7436] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7444], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7444 [pid 7430] <... futex resumed>) = 0 [pid 7436] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(4 [pid 7436] <... futex resumed>) = 0 [pid 7436] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7443] <... set_robust_list resumed>) = 0 [pid 7442] <... set_robust_list resumed>) = 0 [pid 7430] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5077] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7443] creat("./file1", 000 [pid 5075] rmdir("./129/bus" [pid 5077] lstat("./130/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] getdents64(3, [pid 5077] fstat(4, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 5075] close(3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5075] rmdir("./129" [pid 5077] rmdir("./130/bus") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./130", 0777 [pid 7442] memfd_create("syzkaller", 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./130") = 0 [pid 7442] <... memfd_create resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5077] mkdir("./131", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7444 attached [pid 7444] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7444] creat("./file1", 000 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7445 ./strace-static-x86_64: Process 7445 attached [pid 7445] set_robust_list(0x555556b055e0, 24) = 0 [pid 7445] chdir("./131") = 0 [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7445] setpgid(0, 0) = 0 [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7445] write(3, "1000", 4) = 4 [pid 7445] close(3) = 0 [pid 7445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7445] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7445] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7446], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7446 [pid 7445] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7444] <... creat resumed>) = 5 [pid 7435] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7435] <... futex resumed>) = 0 [pid 7444] <... futex resumed>) = 1 [pid 7436] <... futex resumed>) = 0 [pid 7435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7444] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7442] <... mmap resumed>) = 0x7fee02dd3000 [pid 7435] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... openat resumed>) = 3 [pid 7435] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7435] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7447], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7447 [pid 7435] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7435] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7446 attached [pid 7446] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7446] memfd_create("syzkaller", 0) = 3 [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7447 attached [pid 7447] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7447] creat("./file1", 000 [pid 7446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7443] <... creat resumed>) = 5 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7443] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... write resumed>) = 57344 [pid 7434] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7443] <... futex resumed>) = 1 [pid 7430] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7434] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] exit_group(0 [pid 7434] <... futex resumed>) = ? [pid 7430] <... exit_group resumed>) = ? [pid 7434] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7443] +++ exited with 0 +++ [pid 7430] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7430, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5081] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7448 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.186810][ T7434] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.213565][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.222415][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] lstat("./132/binderfs", [pid 7442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7448 attached [pid 7448] set_robust_list(0x555556b055e0, 24 [pid 7442] <... write resumed>) = 524288 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7446] <... write resumed>) = 524288 [pid 7446] munmap(0x7fee02dd3000, 524288) = 0 [pid 7446] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7446] ioctl(4, LOOP_SET_FD, 3 [pid 7448] <... set_robust_list resumed>) = 0 [pid 7442] munmap(0x7fee02dd3000, 524288 [pid 5081] unlink("./132/binderfs" [pid 7447] <... creat resumed>) = 5 [pid 7447] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7435] <... futex resumed>) = 0 [pid 7447] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] chdir("./130" [pid 7446] <... ioctl resumed>) = 0 [pid 7442] <... munmap resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 7448] <... chdir resumed>) = 0 [pid 7442] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7448] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7442] <... openat resumed>) = 4 [pid 7448] <... prctl resumed>) = 0 [pid 7442] ioctl(4, LOOP_SET_FD, 3 [pid 7448] setpgid(0, 0 [pid 7442] <... ioctl resumed>) = 0 [pid 7448] <... setpgid resumed>) = 0 [pid 7442] close(3 [pid 7448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7442] <... close resumed>) = 0 [pid 7448] <... openat resumed>) = 3 [pid 7442] mkdir("./bus", 0777 [pid 7448] write(3, "1000", 4 [pid 7442] <... mkdir resumed>) = 0 [pid 7448] <... write resumed>) = 4 [pid 7442] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7448] close(3) = 0 [pid 7448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7448] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 109.239621][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.245074][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.252132][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.257613][ T7446] loop3: detected capacity change from 0 to 1024 [ 109.262264][ T7439] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.274505][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.282690][ T7442] loop2: detected capacity change from 0 to 1024 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7448] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7449], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7449 [pid 7448] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7446] close(3 [pid 7439] <... write resumed>) = 57344 [pid 7439] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] <... close resumed>) = 0 [pid 7446] mkdir("./bus", 0777 [pid 7442] <... mount resumed>) = 0 [pid 7439] <... futex resumed>) = 0 [pid 7436] exit_group(0./strace-static-x86_64: Process 7449 attached [pid 7446] <... mkdir resumed>) = 0 [pid 7444] <... futex resumed>) = ? [pid 7442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7436] <... exit_group resumed>) = ? [pid 7446] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7449] set_robust_list(0x7fee0b1f39e0, 24 [pid 7444] +++ exited with 0 +++ [pid 7442] <... openat resumed>) = 3 [pid 7439] +++ exited with 0 +++ [pid 7436] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7436, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7449] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7442] chdir("./bus" [pid 7449] memfd_create("syzkaller", 0 [pid 7446] <... mount resumed>) = 0 [pid 7442] <... chdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 7449] <... memfd_create resumed>) = 3 [pid 7446] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7442] ioctl(4, LOOP_CLR_FD [pid 5081] <... openat resumed>) = 4 [pid 5080] fstat(3, [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7446] <... openat resumed>) = 3 [pid 7442] <... ioctl resumed>) = 0 [pid 5081] fstat(4, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7449] <... mmap resumed>) = 0x7fee02dd3000 [pid 7446] chdir("./bus" [pid 7442] close(4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 7446] <... chdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7446] ioctl(4, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7446] <... ioctl resumed>) = 0 [pid 7442] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] close(4 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] lstat("./129/binderfs", [pid 7446] <... close resumed>) = 0 [pid 5081] close(4 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7446] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5080] unlink("./129/binderfs" [pid 7446] <... futex resumed>) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7442] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./132/bus" [pid 5080] <... unlink resumed>) = 0 [pid 7446] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] <... futex resumed>) = 1 [pid 7441] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7449] <... write resumed>) = 524288 [pid 7446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7445] <... futex resumed>) = 0 [pid 7442] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7441] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5080] <... umount2 resumed>) = 0 [pid 7449] munmap(0x7fee02dd3000, 524288 [pid 7446] creat("./bus", 000 [pid 7445] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7441] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7449] <... munmap resumed>) = 0 [pid 7446] <... creat resumed>) = 4 [pid 7442] creat("./bus", 000 [pid 7441] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7446] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] <... creat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./129/bus", [pid 7449] <... openat resumed>) = 4 [pid 7446] <... futex resumed>) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7442] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./132" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7449] ioctl(4, LOOP_SET_FD, 3 [pid 7446] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] <... futex resumed>) = 1 [pid 7441] <... futex resumed>) = 0 [pid 7438] <... write resumed>) = 57344 [ 109.290187][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.298954][ T7438] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.330316][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] umount2("./129/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7446] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7445] <... futex resumed>) = 0 [pid 5081] mkdir("./133", 0777 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7445] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... mkdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./129/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5080] fstat(4, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] getdents64(4, [pid 5081] close(3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 5080] getdents64(4, [pid 7449] <... ioctl resumed>) = 0 [pid 7442] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7441] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7438] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7449] close(3 [pid 7442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7441] <... futex resumed>) = 0 [pid 7438] <... futex resumed>) = 0 [pid 7435] exit_group(0 [pid 5080] close(4 [pid 7449] <... close resumed>) = 0 [pid 7447] <... futex resumed>) = ? [pid 7442] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7441] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7435] <... exit_group resumed>) = ? [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7450 [pid 5080] <... close resumed>) = 0 [pid 7449] mkdir("./bus", 0777 [pid 7447] +++ exited with 0 +++ [pid 5080] rmdir("./129/bus" [pid 7438] +++ exited with 0 +++ [pid 7435] +++ exited with 0 +++ [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7435, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5080] close(3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7450 attached [pid 5080] rmdir("./129" [pid 7450] set_robust_list(0x555556b055e0, 24 [pid 5080] <... rmdir resumed>) = 0 [pid 5074] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7450] <... set_robust_list resumed>) = 0 [pid 5080] mkdir("./130", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7450] chdir("./133" [pid 5080] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7450] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... openat resumed>) = 3 [pid 5074] fstat(3, [pid 7450] <... prctl resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7450] setpgid(0, 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] getdents64(3, [pid 7450] <... setpgid resumed>) = 0 [pid 5080] close(3 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... close resumed>) = 0 [pid 5074] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7450] <... openat resumed>) = 3 [pid 7449] <... mkdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7450] write(3, "1000", 4 [pid 7449] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5074] lstat("./130/binderfs", [pid 7450] <... write resumed>) = 4 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7451 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7450] close(3 [pid 5074] unlink("./130/binderfs" [pid 7450] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7450] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7450] <... symlink resumed>) = 0 [pid 7449] <... mount resumed>) = 0 [pid 7450] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 109.351710][ T7449] loop1: detected capacity change from 0 to 1024 [ 109.360165][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.374066][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.375453][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.381486][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7449] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7450] <... futex resumed>) = 0 [pid 7445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7451 attached [pid 7450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7445] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] set_robust_list(0x555556b055e0, 24 [pid 7450] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7445] <... futex resumed>) = 0 [pid 7451] <... set_robust_list resumed>) = 0 [pid 7450] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7451] chdir("./130" [pid 7450] <... mprotect resumed>) = 0 [pid 7445] <... mmap resumed>) = 0x7fee02e32000 [pid 7451] <... chdir resumed>) = 0 [pid 7450] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7445] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7445] <... mprotect resumed>) = 0 [pid 7451] <... prctl resumed>) = 0 [pid 7450] <... clone resumed>, parent_tid=[7452], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7452 [pid 7449] <... openat resumed>) = 3 [pid 7445] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7451] setpgid(0, 0 [pid 7450] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] <... setpgid resumed>) = 0 [pid 7450] <... futex resumed>) = 0 [pid 7445] <... clone resumed>, parent_tid=[7453], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7453 [pid 7451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7450] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7445] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] <... openat resumed>) = 3 [pid 7445] <... futex resumed>) = 0 [pid 7451] write(3, "1000", 4 [pid 7445] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7451] <... write resumed>) = 4 [pid 7451] close(3) = 0 [pid 7451] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 7453 attached [pid 7451] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7453] set_robust_list(0x7fee02e529e0, 24 [pid 7451] <... futex resumed>) = 0 [pid 7453] <... set_robust_list resumed>) = 0 [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7453] creat("./file1", 000 [pid 7451] <... mmap resumed>) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7452 attached [pid 7451] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7449] chdir("./bus" [pid 7441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7452] set_robust_list(0x7fee0b1f39e0, 24 [pid 7451] <... mprotect resumed>) = 0 [pid 7451] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7454], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7454 [pid 5074] <... umount2 resumed>) = 0 [pid 7451] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7451] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./130/bus", ./strace-static-x86_64: Process 7454 attached [pid 7452] <... set_robust_list resumed>) = 0 [pid 7449] <... chdir resumed>) = 0 [pid 7441] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7454] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7454] memfd_create("syzkaller", 0 [pid 5074] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7454] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5074] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7452] memfd_create("syzkaller", 0 [pid 7441] <... futex resumed>) = 0 [pid 7449] ioctl(4, LOOP_CLR_FD [pid 7453] <... creat resumed>) = 5 [pid 7452] <... memfd_create resumed>) = 3 [pid 7449] <... ioctl resumed>) = 0 [pid 7441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... openat resumed>) = 4 [ 109.404376][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 109.423038][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.430985][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.444827][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7453] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7449] close(4 [pid 7441] <... mmap resumed>) = 0x7fee02e32000 [pid 7454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] fstat(4, [pid 7453] <... futex resumed>) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7453] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./130/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7452] <... mmap resumed>) = 0x7fee02dd3000 [pid 7449] <... close resumed>) = 0 [pid 7441] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] close(3) = 0 [pid 5074] rmdir("./130" [pid 7454] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./131", 0777 [pid 7454] munmap(0x7fee02dd3000, 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 7454] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7454] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7454] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7454] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7449] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7441] <... mprotect resumed>) = 0 [pid 5074] close(3 [pid 7449] <... futex resumed>) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7441] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... close resumed>) = 0 [pid 7449] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7452] <... write resumed>) = 524288 [pid 7449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7448] <... futex resumed>) = 0 [pid 7441] <... clone resumed>, parent_tid=[7455], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7455 [pid 7452] munmap(0x7fee02dd3000, 524288 [pid 7449] creat("./bus", 000 [pid 7448] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7441] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7456 [pid 7452] <... munmap resumed>) = 0 [pid 7449] <... creat resumed>) = 4 [pid 7441] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7455 attached [pid 7452] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7449] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7441] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7456 attached [pid 7455] set_robust_list(0x7fee02e529e0, 24 [pid 7452] <... openat resumed>) = 4 [pid 7449] <... futex resumed>) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7456] set_robust_list(0x555556b055e0, 24 [pid 7455] <... set_robust_list resumed>) = 0 [pid 7452] ioctl(4, LOOP_SET_FD, 3 [pid 7449] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7456] <... set_robust_list resumed>) = 0 [pid 7456] chdir("./131") = 0 [pid 7456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7456] setpgid(0, 0) = 0 [pid 7456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7456] write(3, "1000", 4) = 4 [pid 7456] close(3) = 0 [pid 7456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7455] creat("./file1", 000 [pid 7452] <... ioctl resumed>) = 0 [pid 7449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7448] <... futex resumed>) = 0 [pid 7456] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7454] <... ioctl resumed>) = 0 [pid 7452] close(3 [pid 7448] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7456] <... futex resumed>) = 0 [pid 7454] close(3 [pid 7452] <... close resumed>) = 0 [ 109.454830][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.472888][ T7454] loop4: detected capacity change from 0 to 1024 [ 109.486045][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.495772][ T7452] loop5: detected capacity change from 0 to 1024 [pid 7456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7454] <... close resumed>) = 0 [pid 7456] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7454] mkdir("./bus", 0777 [pid 7456] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7454] <... mkdir resumed>) = 0 [pid 7456] <... mprotect resumed>) = 0 [pid 7454] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7456] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7454] <... mount resumed>) = 0 [pid 7452] mkdir("./bus", 0777 [pid 7456] <... clone resumed>, parent_tid=[7457], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7457 [pid 7454] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7456] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7454] <... openat resumed>) = 3 [pid 7456] <... futex resumed>) = 0 [pid 7454] chdir("./bus" [pid 7456] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7454] <... chdir resumed>) = 0 [pid 7454] ioctl(4, LOOP_CLR_FD) = 0 [pid 7454] close(4) = 0 [pid 7454] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7457 attached [pid 7454] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] set_robust_list(0x7fee0b1f39e0, 24 [pid 7454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7451] <... futex resumed>) = 0 [pid 7457] <... set_robust_list resumed>) = 0 [pid 7454] creat("./bus", 000 [pid 7451] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7457] memfd_create("syzkaller", 0 [pid 7454] <... creat resumed>) = 4 [pid 7457] <... memfd_create resumed>) = 3 [pid 7454] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7454] <... futex resumed>) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7457] <... mmap resumed>) = 0x7fee02dd3000 [pid 7454] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7455] <... creat resumed>) = 5 [pid 7454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7452] <... mkdir resumed>) = 0 [pid 7451] <... futex resumed>) = 0 [pid 7442] <... write resumed>) = 57344 [pid 7455] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7454] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7452] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7451] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7442] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] <... write resumed>) = 524288 [pid 7455] <... futex resumed>) = 1 [pid 7441] <... futex resumed>) = 0 [pid 7457] munmap(0x7fee02dd3000, 524288) = 0 [pid 7457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7457] ioctl(4, LOOP_SET_FD, 3 [pid 7442] <... futex resumed>) = 0 [pid 7455] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7441] exit_group(0 [pid 7448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7441] <... exit_group resumed>) = ? [pid 7455] <... futex resumed>) = ? [pid 7448] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] +++ exited with 0 +++ [ 109.505186][ T7442] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.515099][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.523356][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.540541][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.542509][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7455] +++ exited with 0 +++ [pid 7452] <... mount resumed>) = 0 [pid 7448] <... futex resumed>) = 0 [pid 7441] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7441, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7452] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7452] <... openat resumed>) = 3 [pid 7448] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] getdents64(3, [pid 7452] chdir("./bus" [pid 7448] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7452] <... chdir resumed>) = 0 [pid 7448] <... mprotect resumed>) = 0 [pid 5076] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7452] ioctl(4, LOOP_CLR_FD [pid 7448] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7452] <... ioctl resumed>) = 0 [pid 7451] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] lstat("./131/binderfs", [pid 7452] close(4 [pid 7451] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] <... clone resumed>, parent_tid=[7458], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7458 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7452] <... close resumed>) = 0 [pid 7451] <... futex resumed>) = 0 [pid 5076] unlink("./131/binderfs" [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 7451] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7451] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7451] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7459], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7459 [pid 7452] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] <... futex resumed>) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7450] <... futex resumed>) = 0 [pid 7448] <... futex resumed>) = 0 [pid 7452] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7450] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7450] <... futex resumed>) = 0 [pid 7452] creat("./bus", 000 [pid 7450] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7459 attached [pid 7452] <... creat resumed>) = 4 [pid 7459] set_robust_list(0x7fee02e529e0, 24 [pid 7457] <... ioctl resumed>) = 0 [pid 7452] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7459] <... set_robust_list resumed>) = 0 [pid 7457] close(3 [pid 7452] <... futex resumed>) = 1 [pid 7450] <... futex resumed>) = 0 [pid 7459] creat("./file1", 000 [pid 7457] <... close resumed>) = 0 [pid 7452] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7450] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] mkdir("./bus", 0777) = 0 [ 109.559420][ T7457] loop0: detected capacity change from 0 to 1024 [ 109.560098][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.568352][ T7446] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.580566][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.583508][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7457] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7459] <... creat resumed>) = 5 [pid 7459] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7459] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7450] <... futex resumed>) = 0 [pid 7450] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7458 attached [pid 7452] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7446] <... write resumed>) = 57344 [pid 7446] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] exit_group(0 [pid 7453] <... futex resumed>) = ? [pid 7445] <... exit_group resumed>) = ? [pid 7453] +++ exited with 0 +++ [pid 7446] +++ exited with 0 +++ [pid 7445] +++ exited with 0 +++ [ 109.608185][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.611972][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.616495][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.625083][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.638601][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.641678][ T7449] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7458] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7445, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7458] creat("./file1", 000 [pid 5077] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7457] <... mount resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7457] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7457] <... openat resumed>) = 3 [pid 7457] chdir("./bus") = 0 [pid 5077] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 7457] ioctl(4, LOOP_CLR_FD [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7457] <... ioctl resumed>) = 0 [pid 5077] getdents64(3, [pid 7457] close(4) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7457] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7457] <... futex resumed>) = 1 [pid 7456] <... futex resumed>) = 0 [pid 7450] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] creat("./bus", 000 [pid 7456] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] <... futex resumed>) = 0 [pid 7457] <... creat resumed>) = 4 [pid 7456] <... futex resumed>) = 0 [pid 7450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7457] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7456] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7450] <... mmap resumed>) = 0x7fee02e32000 [pid 7457] <... futex resumed>) = 0 [pid 7456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7450] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7457] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7450] <... mprotect resumed>) = 0 [pid 7457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7456] <... futex resumed>) = 0 [pid 7450] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7457] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7456] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7450] <... clone resumed>, parent_tid=[7460], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7460 [pid 7450] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7450] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7460 attached [pid 7460] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7460] creat("./file1", 000 [pid 5077] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./131/binderfs") = 0 [pid 5077] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7458] <... creat resumed>) = 5 [pid 7458] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7458] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7449] <... write resumed>) = 57344 [pid 7449] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7448] exit_group(0 [pid 7458] <... futex resumed>) = ? [pid 7448] <... exit_group resumed>) = ? [pid 7458] +++ exited with 0 +++ [pid 7449] <... futex resumed>) = ? [pid 7449] +++ exited with 0 +++ [pid 7448] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7448, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 109.652273][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.653776][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.686583][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7450] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7456] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] lstat("./131/bus", [pid 5075] <... openat resumed>) = 3 [pid 7456] <... futex resumed>) = 0 [pid 7454] <... write resumed>) = 57344 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(3, [pid 5076] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 7456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7454] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] fstat(4, [pid 5075] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7456] <... mmap resumed>) = 0x7fee02e32000 [pid 7454] <... futex resumed>) = 0 [pid 7451] exit_group(0 [pid 5076] getdents64(4, [pid 5075] lstat("./130/binderfs", [pid 7459] <... futex resumed>) = ? [pid 7456] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7451] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7459] +++ exited with 0 +++ [pid 7456] <... mprotect resumed>) = 0 [pid 7454] +++ exited with 0 +++ [pid 7451] +++ exited with 0 +++ [pid 7456] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] getdents64(4, [pid 5075] unlink("./130/binderfs" [pid 7456] <... clone resumed>, parent_tid=[7461], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7461 [pid 7456] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7456] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7461 attached [pid 7461] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7461] creat("./file1", 000 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5076] close(4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7451, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] <... close resumed>) = 0 [pid 5080] umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./131/bus" [pid 5075] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] lstat("./131/bus", [pid 5076] getdents64(3, [pid 5080] fstat(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./131" [pid 5080] umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./132", 0777 [pid 5080] lstat("./130/binderfs", [pid 5075] lstat("./130/bus", [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 109.703967][ T7454] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.712801][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.712860][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 109.720817][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.731765][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.754731][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5080] unlink("./130/binderfs" [pid 5075] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] fstat(4, [pid 5077] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5077] close(4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5077] rmdir("./131/bus" [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5077] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./130/bus" [pid 5077] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5080] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5077] rmdir("./131" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5077] mkdir("./132", 0777 [pid 5075] <... close resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] rmdir("./130" [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5075] mkdir("./131", 0777 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5077] close(3 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... openat resumed>) = 3 [pid 5077] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 7456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7462 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7464 ./strace-static-x86_64: Process 7462 attached [pid 7462] set_robust_list(0x555556b055e0, 24) = 0 [pid 7462] chdir("./132" [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7463 [pid 5080] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7462] <... chdir resumed>) = 0 [pid 5080] lstat("./130/bus", ./strace-static-x86_64: Process 7464 attached [pid 7462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7464] set_robust_list(0x555556b055e0, 24 [pid 7462] <... prctl resumed>) = 0 [pid 5080] umount2("./130/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7464] <... set_robust_list resumed>) = 0 [pid 7462] setpgid(0, 0 [pid 7464] chdir("./131" [pid 7462] <... setpgid resumed>) = 0 [pid 7464] <... chdir resumed>) = 0 [pid 7462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7462] <... openat resumed>) = 3 [pid 7464] <... prctl resumed>) = 0 [pid 7462] write(3, "1000", 4 [pid 7464] setpgid(0, 0 [pid 7462] <... write resumed>) = 4 [pid 7464] <... setpgid resumed>) = 0 [pid 7462] close(3 [pid 7464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7462] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7464] <... openat resumed>) = 3 [pid 7462] symlink("/dev/binderfs", "./binderfs" [pid 5080] openat(AT_FDCWD, "./130/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7464] write(3, "1000", 4 [pid 7462] <... symlink resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7464] <... write resumed>) = 4 [pid 7462] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 7464] close(3 [pid 7462] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7464] <... close resumed>) = 0 [pid 7462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 7463 attached [pid 7464] symlink("/dev/binderfs", "./binderfs" [pid 7462] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] getdents64(4, [pid 7464] <... symlink resumed>) = 0 [pid 7462] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7463] set_robust_list(0x555556b055e0, 24 [pid 7464] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7462] <... mprotect resumed>) = 0 [pid 7461] <... creat resumed>) = 5 [pid 5080] getdents64(4, [pid 7463] <... set_robust_list resumed>) = 0 [pid 7464] <... futex resumed>) = 0 [ 109.776973][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.786654][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 109.795842][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7462] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7461] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7463] chdir("./132" [pid 7464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7461] <... futex resumed>) = 0 [pid 7460] <... creat resumed>) = 5 [pid 7464] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7462] <... clone resumed>, parent_tid=[7465], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7465 [pid 7461] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7460] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7462] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7460] <... futex resumed>) = 0 [pid 7464] <... mprotect resumed>) = 0 [pid 7462] <... futex resumed>) = 0 [pid 7460] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7464] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7462] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7464] <... clone resumed>, parent_tid=[7466], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7466 [pid 7464] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7464] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7465 attached [pid 7465] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7465] memfd_create("syzkaller", 0 [pid 7463] <... chdir resumed>) = 0 [pid 5080] close(4 [pid 7465] <... memfd_create resumed>) = 3 [pid 7463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... close resumed>) = 0 [pid 7465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7466 attached [pid 7466] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7466] memfd_create("syzkaller", 0) = 3 [pid 7466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7463] <... prctl resumed>) = 0 [pid 5080] rmdir("./130/bus" [pid 7463] setpgid(0, 0) = 0 [pid 7452] <... write resumed>) = 57344 [pid 5080] <... rmdir resumed>) = 0 [pid 7465] <... write resumed>) = 524288 [pid 7466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7463] <... openat resumed>) = 3 [pid 7452] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 7465] munmap(0x7fee02dd3000, 524288 [pid 7463] write(3, "1000", 4 [pid 7457] <... write resumed>) = 57344 [pid 7452] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7465] <... munmap resumed>) = 0 [pid 7463] <... write resumed>) = 4 [pid 7457] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7450] exit_group(0 [pid 5080] rmdir("./130" [pid 7465] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7463] close(3 [pid 7460] <... futex resumed>) = ? [pid 7457] <... futex resumed>) = 0 [pid 7452] <... futex resumed>) = ? [pid 7450] <... exit_group resumed>) = ? [pid 5080] <... rmdir resumed>) = 0 [pid 7465] <... openat resumed>) = 4 [pid 7463] <... close resumed>) = 0 [pid 7460] +++ exited with 0 +++ [pid 7457] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] exit_group(0 [pid 7452] +++ exited with 0 +++ [pid 5080] mkdir("./131", 0777 [pid 7465] ioctl(4, LOOP_SET_FD, 3 [pid 7463] symlink("/dev/binderfs", "./binderfs" [pid 7450] +++ exited with 0 +++ [pid 5080] <... mkdir resumed>) = 0 [pid 7466] <... write resumed>) = 524288 [pid 7463] <... symlink resumed>) = 0 [pid 7461] <... futex resumed>) = ? [pid 7457] <... futex resumed>) = ? [pid 7456] <... exit_group resumed>) = ? [pid 7466] munmap(0x7fee02dd3000, 524288 [pid 7461] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7450, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7466] <... munmap resumed>) = 0 [pid 7466] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5081] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7466] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 109.832767][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.840308][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.849085][ T7452] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.857843][ T7457] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.872013][ T7465] loop3: detected capacity change from 0 to 1024 [pid 7465] <... ioctl resumed>) = 0 [pid 7463] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] +++ exited with 0 +++ [pid 7456] +++ exited with 0 +++ [pid 5081] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7465] close(3 [pid 7463] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7465] <... close resumed>) = 0 [pid 7463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7456, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7465] mkdir("./bus", 0777 [pid 7463] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7465] <... mkdir resumed>) = 0 [pid 7463] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] close(3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7465] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7463] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... close resumed>) = 0 [pid 7463] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] fstat(3, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, [pid 7463] <... clone resumed>, parent_tid=[7467], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7467 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7468 [pid 5074] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7463] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7463] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7463] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] lstat("./133/binderfs", [pid 5074] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7468 attached [pid 5081] unlink("./133/binderfs" [pid 7468] set_robust_list(0x555556b055e0, 24 [pid 5081] <... unlink resumed>) = 0 [pid 7468] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7468] chdir("./131" [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7467 attached [pid 7466] <... ioctl resumed>) = 0 [pid 7465] <... mount resumed>) = 0 [pid 5074] fstat(3, [pid 7467] set_robust_list(0x7fee0b1f39e0, 24 [pid 7466] close(3 [pid 7465] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7467] <... set_robust_list resumed>) = 0 [pid 7466] <... close resumed>) = 0 [pid 7465] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 7467] memfd_create("syzkaller", 0 [pid 7466] mkdir("./bus", 0777 [pid 7465] chdir("./bus" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7467] <... memfd_create resumed>) = 3 [pid 7466] <... mkdir resumed>) = 0 [pid 7465] <... chdir resumed>) = 0 [pid 5074] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7466] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7465] ioctl(4, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7467] <... mmap resumed>) = 0x7fee02dd3000 [pid 7465] <... ioctl resumed>) = 0 [pid 5074] lstat("./131/binderfs", [pid 7468] <... chdir resumed>) = 0 [pid 7467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7465] close(4 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7467] <... write resumed>) = 524288 [pid 7465] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5074] unlink("./131/binderfs" [pid 7465] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 7465] <... futex resumed>) = 1 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7465] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7467] munmap(0x7fee02dd3000, 524288) = 0 [pid 7467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7467] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7467] close(3) = 0 [pid 7467] mkdir("./bus", 0777 [pid 7462] <... futex resumed>) = 0 [pid 7467] <... mkdir resumed>) = 0 [pid 7467] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7462] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7465] <... futex resumed>) = 0 [pid 7462] <... futex resumed>) = 1 [pid 7462] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7466] <... mount resumed>) = 0 [pid 7465] creat("./bus", 000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./133/bus", [pid 7466] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7465] <... creat resumed>) = 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7466] <... openat resumed>) = 3 [pid 7465] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7466] chdir("./bus" [pid 7465] <... futex resumed>) = 1 [pid 7462] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7466] <... chdir resumed>) = 0 [pid 7465] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 7462] <... futex resumed>) = 0 [pid 7462] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7466] ioctl(4, LOOP_CLR_FD [pid 7465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] getdents64(4, [pid 7466] <... ioctl resumed>) = 0 [ 109.876204][ T7466] loop1: detected capacity change from 0 to 1024 [ 109.897788][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.911884][ T7467] loop2: detected capacity change from 0 to 1024 [ 109.919105][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7465] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7467] <... mount resumed>) = 0 [pid 7466] close(4 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7468] <... prctl resumed>) = 0 [pid 5081] getdents64(4, [pid 7468] setpgid(0, 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7468] <... setpgid resumed>) = 0 [pid 5081] close(4 [pid 7468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... close resumed>) = 0 [pid 7468] <... openat resumed>) = 3 [pid 5081] rmdir("./133/bus" [pid 7468] write(3, "1000", 4 [pid 5081] <... rmdir resumed>) = 0 [pid 7468] <... write resumed>) = 4 [pid 5081] getdents64(3, [pid 7468] close(3 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7468] <... close resumed>) = 0 [pid 5081] close(3 [pid 7468] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... close resumed>) = 0 [pid 7468] <... symlink resumed>) = 0 [pid 7467] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7466] <... close resumed>) = 0 [pid 5081] rmdir("./133" [pid 5074] <... umount2 resumed>) = 0 [pid 7468] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 7468] <... futex resumed>) = 0 [pid 5081] mkdir("./134", 0777 [pid 7468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... mkdir resumed>) = 0 [pid 7468] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7468] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... openat resumed>) = 3 [pid 7468] <... mprotect resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7468] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 7468] <... clone resumed>, parent_tid=[7469], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7469 [pid 5081] <... close resumed>) = 0 [pid 7468] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] <... openat resumed>) = 3 [pid 7466] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7469 attached [pid 7468] <... futex resumed>) = 0 [pid 7467] chdir("./bus" [pid 7466] <... futex resumed>) = 1 [pid 7464] <... futex resumed>) = 0 [pid 7468] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7464] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7470 [pid 7464] <... futex resumed>) = 0 [pid 7464] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7470 attached [pid 7470] set_robust_list(0x555556b055e0, 24) = 0 [pid 7470] chdir("./134") = 0 [ 109.931205][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.951982][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.959592][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.968125][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7469] set_robust_list(0x7fee0b1f39e0, 24 [pid 7467] <... chdir resumed>) = 0 [pid 7466] creat("./bus", 000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7470] <... prctl resumed>) = 0 [pid 7469] <... set_robust_list resumed>) = 0 [pid 7467] ioctl(4, LOOP_CLR_FD [pid 7466] <... creat resumed>) = 4 [pid 5074] lstat("./131/bus", [pid 7470] setpgid(0, 0 [pid 7469] memfd_create("syzkaller", 0 [pid 7467] <... ioctl resumed>) = 0 [pid 7466] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7470] <... setpgid resumed>) = 0 [pid 7469] <... memfd_create resumed>) = 3 [pid 7467] close(4 [pid 7466] <... futex resumed>) = 1 [pid 5074] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7467] <... close resumed>) = 0 [pid 7466] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7470] <... openat resumed>) = 3 [pid 7469] <... mmap resumed>) = 0x7fee02dd3000 [pid 7467] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7470] write(3, "1000", 4 [pid 7469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7467] <... futex resumed>) = 1 [pid 7463] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7470] <... write resumed>) = 4 [pid 7469] <... write resumed>) = 524288 [pid 7467] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7463] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] <... futex resumed>) = 0 [pid 7462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] fstat(4, [pid 7470] close(3 [pid 7469] munmap(0x7fee02dd3000, 524288 [pid 7467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7463] <... futex resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7470] <... close resumed>) = 0 [pid 7469] <... munmap resumed>) = 0 [pid 7467] creat("./bus", 000 [pid 7463] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(4, [pid 7470] symlink("/dev/binderfs", "./binderfs" [pid 7469] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7467] <... creat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7470] <... symlink resumed>) = 0 [pid 7469] <... openat resumed>) = 4 [pid 7467] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 7470] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7469] ioctl(4, LOOP_SET_FD, 3 [pid 7467] <... futex resumed>) = 1 [pid 7463] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7470] <... futex resumed>) = 0 [pid 7467] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7463] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7462] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(4 [pid 7470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7463] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7470] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7467] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7466] <... futex resumed>) = 0 [pid 7463] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7464] <... futex resumed>) = 1 [pid 7462] <... futex resumed>) = 0 [pid 5074] rmdir("./131/bus" [pid 7470] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7466] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7465] <... write resumed>) = 57344 [ 109.977215][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.986284][ T7465] hfsplus: request for non-existent node 16715520 in B*Tree [ 109.989629][ T7469] loop4: detected capacity change from 0 to 1024 [ 110.009399][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.023961][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7464] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7470] <... mprotect resumed>) = 0 [pid 7465] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 7470] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7465] <... futex resumed>) = 0 [pid 7462] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 7470] <... clone resumed>, parent_tid=[7471], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7471 [pid 5074] <... close resumed>) = 0 [pid 7470] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./131" [pid 7470] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7470] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] mkdir("./132", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7472 ./strace-static-x86_64: Process 7471 attached [pid 7471] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7471] memfd_create("syzkaller", 0) = 3 [pid 7471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7469] <... ioctl resumed>) = 0 [pid 7469] close(3) = 0 [pid 7469] mkdir("./bus", 0777) = 0 [pid 7469] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7471] munmap(0x7fee02dd3000, 524288) = 0 [pid 7471] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7471] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7472 attached [pid 7465] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7472] set_robust_list(0x555556b055e0, 24 [pid 7463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7462] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7463] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7469] <... mount resumed>) = 0 [pid 7463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7463] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7469] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7463] <... mprotect resumed>) = 0 [pid 7469] <... openat resumed>) = 3 [pid 7463] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7469] chdir("./bus") = 0 [pid 7463] <... clone resumed>, parent_tid=[7473], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7473 [pid 7469] ioctl(4, LOOP_CLR_FD [pid 7463] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7469] <... ioctl resumed>) = 0 [pid 7463] <... futex resumed>) = 0 [pid 7469] close(4 [pid 7463] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7472] <... set_robust_list resumed>) = 0 [pid 7469] <... close resumed>) = 0 [pid 7464] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7464] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] chdir("./132" [pid 7464] <... futex resumed>) = 0 [pid 7469] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7472] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7474 attached [pid 7462] <... clone resumed>, parent_tid=[7474], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7474 [pid 7469] <... futex resumed>) = 1 [pid 7469] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7464] <... mmap resumed>) = 0x7fee02e32000 [pid 7462] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] <... futex resumed>) = 0 [pid 7474] set_robust_list(0x7fee02e529e0, 24 [pid 7472] <... prctl resumed>) = 0 [pid 7474] <... set_robust_list resumed>) = 0 [pid 7468] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7462] <... futex resumed>) = 0 [pid 7472] setpgid(0, 0 [pid 7469] <... futex resumed>) = 0 [pid 7468] <... futex resumed>) = 1 [pid 7469] creat("./bus", 000 [pid 7464] <... mprotect resumed>) = 0 [pid 7462] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7474] creat("./file1", 000 [pid 7472] <... setpgid resumed>) = 0 [pid 7469] <... creat resumed>) = 4 [pid 7468] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 110.026774][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.031256][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.031413][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.051118][ T7471] loop5: detected capacity change from 0 to 1024 [ 110.061523][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.070275][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7469] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7474] <... creat resumed>) = 5 [pid 7472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7469] <... futex resumed>) = 0 [pid 7468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7474] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] <... openat resumed>) = 3 [pid 7469] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7473 attached [pid 7473] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7473] creat("./file1", 000 [pid 7471] <... ioctl resumed>) = 0 [pid 7471] close(3) = 0 [pid 7471] mkdir("./bus", 0777) = 0 [pid 7471] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7475 attached [pid 7474] <... futex resumed>) = 1 [pid 7472] write(3, "1000", 4 [pid 7468] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] <... write resumed>) = 57344 [pid 7464] <... clone resumed>, parent_tid=[7475], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7475 [pid 7462] <... futex resumed>) = 0 [pid 7475] set_robust_list(0x7fee02e529e0, 24 [pid 7474] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] <... write resumed>) = 4 [pid 7468] <... futex resumed>) = 1 [pid 7464] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7462] exit_group(0 [pid 7475] <... set_robust_list resumed>) = 0 [pid 7474] <... futex resumed>) = ? [pid 7472] close(3 [pid 7468] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7465] <... futex resumed>) = ? [pid 7464] <... futex resumed>) = 0 [pid 7462] <... exit_group resumed>) = ? [pid 7475] creat("./file1", 000 [pid 7474] +++ exited with 0 +++ [pid 7472] <... close resumed>) = 0 [pid 7465] +++ exited with 0 +++ [pid 7464] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7462] +++ exited with 0 +++ [pid 7473] <... creat resumed>) = 5 [pid 7472] symlink("/dev/binderfs", "./binderfs" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7462, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7469] <... futex resumed>) = 0 [pid 7473] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] <... symlink resumed>) = 0 [pid 7469] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7473] <... futex resumed>) = 1 [pid 7472] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7463] <... futex resumed>) = 0 [pid 7473] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] <... futex resumed>) = 0 [pid 5077] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7472] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7472] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... openat resumed>) = 3 [pid 7472] <... mprotect resumed>) = 0 [pid 5077] fstat(3, [pid 7472] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 7472] <... clone resumed>, parent_tid=[7476], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7476 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7472] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7472] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7472] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./132/binderfs") = 0 [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7467] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7471] <... mount resumed>) = 0 [pid 7471] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 110.085340][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.093309][ T7467] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.098501][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.112850][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.120579][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7463] exit_group(0./strace-static-x86_64: Process 7476 attached [pid 7475] <... creat resumed>) = 5 [pid 7473] <... futex resumed>) = ? [pid 7471] <... openat resumed>) = 3 [pid 7467] <... futex resumed>) = ? [pid 7463] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 7476] set_robust_list(0x7fee0b1f39e0, 24 [pid 7475] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] +++ exited with 0 +++ [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7475] <... futex resumed>) = 1 [pid 7464] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7475] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] lstat("./132/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7476] <... set_robust_list resumed>) = 0 [pid 7473] +++ exited with 0 +++ [pid 7471] chdir("./bus" [pid 7463] +++ exited with 0 +++ [pid 5077] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7463, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7468] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... openat resumed>) = 4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7468] <... futex resumed>) = 0 [pid 5077] fstat(4, [pid 7476] memfd_create("syzkaller", 0 [pid 7471] <... chdir resumed>) = 0 [pid 7468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7468] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] getdents64(4, [pid 5076] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7468] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7468] <... mprotect resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7476] <... memfd_create resumed>) = 3 [pid 7471] ioctl(4, LOOP_CLR_FD [pid 7468] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5077] close(4 [pid 5076] fstat(3, [pid 7468] <... clone resumed>, parent_tid=[7477], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7477 [pid 5077] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7468] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./132/bus" [pid 5076] getdents64(3, [pid 7468] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7468] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(3, [pid 5076] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] lstat("./132/binderfs", [pid 5077] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7471] <... ioctl resumed>) = 0 [pid 5077] rmdir("./132" [pid 5076] unlink("./132/binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5077] mkdir("./133", 0777 [pid 5076] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7477 attached [pid 5077] <... mkdir resumed>) = 0 [pid 7477] set_robust_list(0x7fee02e529e0, 24 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7477] <... set_robust_list resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7477] creat("./file1", 000 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7476] <... mmap resumed>) = 0x7fee02dd3000 [pid 7471] close(4 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7478 ./strace-static-x86_64: Process 7478 attached [pid 7478] set_robust_list(0x555556b055e0, 24) = 0 [pid 7478] chdir("./133") = 0 [ 110.131331][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.140115][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.148642][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.160795][ T7466] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.168611][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7478] setpgid(0, 0) = 0 [pid 7478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7471] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7478] <... openat resumed>) = 3 [pid 7471] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7478] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7478] <... write resumed>) = 4 [pid 5076] lstat("./132/bus", [pid 7478] close(3 [pid 7476] <... write resumed>) = 524288 [pid 7471] <... futex resumed>) = 1 [pid 7470] <... futex resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7478] <... close resumed>) = 0 [pid 7471] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7470] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7478] symlink("/dev/binderfs", "./binderfs" [pid 7476] munmap(0x7fee02dd3000, 524288 [pid 7471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7470] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7478] <... symlink resumed>) = 0 [pid 7476] <... munmap resumed>) = 0 [pid 7471] creat("./bus", 000 [pid 7470] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7478] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7476] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7471] <... creat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 7478] <... futex resumed>) = 0 [pid 7476] <... openat resumed>) = 4 [pid 7471] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [ 110.183721][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7476] ioctl(4, LOOP_SET_FD, 3 [pid 7471] <... futex resumed>) = 1 [pid 7470] <... futex resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7478] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7477] <... creat resumed>) = 5 [pid 7476] <... ioctl resumed>) = 0 [pid 7471] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7470] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7466] <... write resumed>) = 57344 [pid 5076] getdents64(4, [pid 7478] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7477] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7478] <... mprotect resumed>) = 0 [pid 7477] <... futex resumed>) = 0 [pid 7470] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 7478] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7477] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7476] close(3 [pid 7471] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7466] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 7478] <... clone resumed>, parent_tid=[7479], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7479 [pid 7464] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 7478] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7475] <... futex resumed>) = ? [pid 7464] <... exit_group resumed>) = ? [pid 5076] rmdir("./132/bus" [pid 7478] <... futex resumed>) = 0 [pid 7475] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 7478] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] getdents64(3, ./strace-static-x86_64: Process 7479 attached [pid 7476] <... close resumed>) = 0 [pid 7470] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... futex resumed>) = ? [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./132") = 0 [pid 5076] mkdir("./133", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 7479] set_robust_list(0x7fee0b1f39e0, 24 [pid 7476] mkdir("./bus", 0777 [pid 7466] +++ exited with 0 +++ [pid 7464] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7464, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7480 [pid 5075] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./131/binderfs" [pid 7479] <... set_robust_list resumed>) = 0 [pid 7476] <... mkdir resumed>) = 0 [ 110.207205][ T7476] loop0: detected capacity change from 0 to 1024 [ 110.218441][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.226498][ T7469] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.236428][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.245348][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7469] <... write resumed>) = 57344 [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7480 attached [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7480] set_robust_list(0x555556b055e0, 24) = 0 [pid 7480] chdir("./133") = 0 [pid 7480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7480] setpgid(0, 0) = 0 [pid 7480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7480] write(3, "1000", 4) = 4 [pid 7480] close(3) = 0 [pid 7480] symlink("/dev/binderfs", "./binderfs" [pid 7479] memfd_create("syzkaller", 0 [pid 7476] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7469] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] exit_group(0 [pid 7480] <... symlink resumed>) = 0 [pid 7479] <... memfd_create resumed>) = 3 [pid 7477] <... futex resumed>) = ? [pid 7469] <... futex resumed>) = ? [pid 7468] <... exit_group resumed>) = ? [pid 7480] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7477] +++ exited with 0 +++ [pid 7480] <... futex resumed>) = 0 [pid 7469] +++ exited with 0 +++ [pid 7468] +++ exited with 0 +++ [pid 7480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7479] <... mmap resumed>) = 0x7fee02dd3000 [pid 7480] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7476] <... mount resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7468, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7480] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7480] <... mprotect resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 7480] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7476] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7480] <... clone resumed>, parent_tid=[7481], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7481 [pid 5080] umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7480] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7480] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7480] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 7479] <... write resumed>) = 524288 [pid 7476] <... openat resumed>) = 3 [pid 5080] fstat(3, [pid 7470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, [pid 7479] munmap(0x7fee02dd3000, 524288 [pid 7476] chdir("./bus" [pid 7470] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7479] <... munmap resumed>) = 0 [pid 7476] <... chdir resumed>) = 0 [pid 7470] <... futex resumed>) = 0 [pid 5080] umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7479] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7476] ioctl(4, LOOP_CLR_FD [pid 7470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] <... openat resumed>) = 4 [pid 7476] <... ioctl resumed>) = 0 [pid 7470] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] lstat("./131/binderfs", ./strace-static-x86_64: Process 7481 attached [pid 7479] ioctl(4, LOOP_SET_FD, 3 [pid 7476] close(4 [pid 7470] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7481] set_robust_list(0x7fee0b1f39e0, 24 [pid 7476] <... close resumed>) = 0 [pid 7470] <... mprotect resumed>) = 0 [pid 5080] unlink("./131/binderfs" [pid 7481] <... set_robust_list resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 7481] memfd_create("syzkaller", 0 [pid 5080] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7481] <... memfd_create resumed>) = 3 [ 110.257278][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.265133][ T11] hfsplus: b-tree write err: -5, ino 4 [ 110.265191][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.295754][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7470] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7476] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7472] <... futex resumed>) = 0 [pid 7470] <... clone resumed>, parent_tid=[7482], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7482 [pid 7476] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7470] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7472] <... futex resumed>) = 0 [pid 7470] <... futex resumed>) = 0 [pid 7476] creat("./bus", 000 [pid 7472] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7470] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7481] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7482 attached [pid 7482] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7482] creat("./file1", 000 [pid 7481] munmap(0x7fee02dd3000, 524288) = 0 [pid 7481] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7476] <... creat resumed>) = 4 [pid 7476] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7472] <... futex resumed>) = 0 [pid 7476] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... openat resumed>) = 4 [pid 7476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7472] <... futex resumed>) = 0 [pid 7481] ioctl(4, LOOP_SET_FD, 3 [pid 7479] <... ioctl resumed>) = 0 [pid 7476] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7472] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7479] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] <... close resumed>) = 0 [pid 5075] lstat("./131/bus", [pid 7479] mkdir("./bus", 0777 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7479] <... mkdir resumed>) = 0 [pid 5075] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7479] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./131/bus" [pid 7482] <... creat resumed>) = 5 [pid 7481] <... ioctl resumed>) = 0 [pid 5080] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7482] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7482] <... futex resumed>) = 1 [pid 7481] <... close resumed>) = 0 [pid 5080] lstat("./131/bus", [pid 7482] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] mkdir("./bus", 0777 [pid 7470] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7481] <... mkdir resumed>) = 0 [pid 7479] <... mount resumed>) = 0 [pid 7471] <... write resumed>) = 57344 [ 110.310312][ T52] hfsplus: b-tree write err: -5, ino 4 [ 110.319345][ T7479] loop3: detected capacity change from 0 to 1024 [ 110.333603][ T7471] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.338891][ T7481] loop2: detected capacity change from 0 to 1024 [ 110.349783][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./131/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 7481] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./131/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./131/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 7479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7471] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./131") = 0 [pid 5080] mkdir("./132", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7483 ./strace-static-x86_64: Process 7483 attached [pid 7479] <... openat resumed>) = 3 [pid 7471] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7483] set_robust_list(0x555556b055e0, 24) = 0 [pid 7483] chdir("./132") = 0 [pid 7483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7483] setpgid(0, 0 [pid 7481] <... mount resumed>) = 0 [pid 7479] chdir("./bus" [pid 7471] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... close resumed>) = 0 [pid 7481] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7483] <... setpgid resumed>) = 0 [pid 7481] <... openat resumed>) = 3 [pid 7483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7481] chdir("./bus" [pid 7472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7483] <... openat resumed>) = 3 [pid 7481] <... chdir resumed>) = 0 [pid 7472] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7483] write(3, "1000", 4 [pid 7481] ioctl(4, LOOP_CLR_FD [pid 7479] <... chdir resumed>) = 0 [pid 7472] <... futex resumed>) = 0 [pid 7470] exit_group(0 [pid 5075] rmdir("./131" [pid 7483] <... write resumed>) = 4 [pid 7482] <... futex resumed>) = ? [pid 7481] <... ioctl resumed>) = 0 [pid 7479] ioctl(4, LOOP_CLR_FD [pid 7472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7471] <... futex resumed>) = ? [pid 7470] <... exit_group resumed>) = ? [pid 7483] close(3 [pid 7482] +++ exited with 0 +++ [pid 7481] close(4 [pid 7472] <... mmap resumed>) = 0x7fee02e32000 [pid 7483] <... close resumed>) = 0 [pid 7481] <... close resumed>) = 0 [pid 7472] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7483] symlink("/dev/binderfs", "./binderfs" [pid 7481] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] <... mprotect resumed>) = 0 [pid 7483] <... symlink resumed>) = 0 [pid 7481] <... futex resumed>) = 1 [pid 7480] <... futex resumed>) = 0 [pid 7472] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7483] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7483] <... futex resumed>) = 0 [pid 7481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7480] <... futex resumed>) = 0 [pid 7472] <... clone resumed>, parent_tid=[7484], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7484 [pid 7483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7481] creat("./bus", 000 [pid 7480] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7472] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7483] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7481] <... creat resumed>) = 4 [pid 7479] <... ioctl resumed>) = 0 [pid 7472] <... futex resumed>) = 0 [pid 7471] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 7483] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7481] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7470] +++ exited with 0 +++ [pid 7483] <... mprotect resumed>) = 0 [pid 7481] <... futex resumed>) = 1 [pid 7480] <... futex resumed>) = 0 [pid 7483] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7481] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7470, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7480] <... futex resumed>) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 7483] <... clone resumed>, parent_tid=[7485], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7485 [ 110.360056][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.368207][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.383118][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.394015][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7481] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7480] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 7485 attached ./strace-static-x86_64: Process 7484 attached [pid 7483] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] close(4 [pid 7476] <... write resumed>) = 57344 [pid 5075] mkdir("./132", 0777 [pid 7485] set_robust_list(0x7fee0b1f39e0, 24 [pid 7484] set_robust_list(0x7fee02e529e0, 24 [pid 7483] <... futex resumed>) = 0 [pid 7479] <... close resumed>) = 0 [pid 7476] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 7485] <... set_robust_list resumed>) = 0 [pid 7484] <... set_robust_list resumed>) = 0 [pid 7479] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7476] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7485] memfd_create("syzkaller", 0 [pid 7484] creat("./file1", 000 [pid 7479] <... futex resumed>) = 1 [pid 7476] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... openat resumed>) = 3 [pid 7485] <... memfd_create resumed>) = 3 [pid 7484] <... creat resumed>) = 5 [pid 7479] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7484] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7485] <... mmap resumed>) = 0x7fee02dd3000 [pid 7484] <... futex resumed>) = 1 [pid 5075] close(3 [pid 7485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7484] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7478] <... futex resumed>) = 0 [pid 7472] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7485] <... write resumed>) = 524288 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7485] munmap(0x7fee02dd3000, 524288 [pid 7478] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] exit_group(0 [pid 5081] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7485] <... munmap resumed>) = 0 [pid 7479] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = 1 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7486 [pid 7485] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7479] creat("./bus", 000 [pid 7485] <... openat resumed>) = 4 [pid 7484] <... futex resumed>) = ? [pid 7479] <... creat resumed>) = 4 [pid 7478] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7476] <... futex resumed>) = ? [pid 7472] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7485] ioctl(4, LOOP_SET_FD, 3 [pid 7484] +++ exited with 0 +++ [pid 7479] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7476] +++ exited with 0 +++ [pid 7479] <... futex resumed>) = 0 [pid 7479] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7478] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] +++ exited with 0 +++ [ 110.409873][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.410352][ T7476] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.427725][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.444948][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.452710][ T7485] loop4: detected capacity change from 0 to 1024 [pid 5081] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7486 attached [pid 7479] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = 1 [pid 5081] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7472, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7479] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7485] <... ioctl resumed>) = 0 [pid 7485] close(3) = 0 [pid 7485] mkdir("./bus", 0777) = 0 [pid 7485] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7486] set_robust_list(0x555556b055e0, 24) = 0 [pid 7486] chdir("./132") = 0 [pid 7486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7478] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 7486] <... prctl resumed>) = 0 [pid 7486] setpgid(0, 0) = 0 [pid 7486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7486] write(3, "1000", 4) = 4 [pid 7486] close(3) = 0 [pid 7486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7486] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7486] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7486] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7487], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7487 [pid 7486] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7487 attached [pid 7480] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(3, [pid 7480] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7480] <... futex resumed>) = 0 [pid 5081] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7480] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] lstat("./134/binderfs", [pid 7480] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7480] <... mprotect resumed>) = 0 [pid 5081] unlink("./134/binderfs" [pid 7480] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7480] <... clone resumed>, parent_tid=[7488], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7488 [pid 7480] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7480] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7488 attached [pid 7487] set_robust_list(0x7fee0b1f39e0, 24 [pid 7481] <... write resumed>) = 57344 [pid 7487] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7487] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7487] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 7487] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] fstat(3, [pid 7488] set_robust_list(0x7fee02e529e0, 24 [pid 7487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7488] <... set_robust_list resumed>) = 0 [pid 5074] getdents64(3, [pid 7488] creat("./file1", 000 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7488] <... creat resumed>) = 5 [pid 5074] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7488] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7488] <... futex resumed>) = 1 [pid 5074] lstat("./132/binderfs", [pid 7488] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./132/binderfs") = 0 [pid 7487] <... write resumed>) = 524288 [ 110.457919][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.468980][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.469798][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.479284][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.483946][ T7481] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.494113][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7487] munmap(0x7fee02dd3000, 524288) = 0 [pid 7487] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7487] ioctl(4, LOOP_SET_FD, 3 [pid 7480] <... futex resumed>) = 0 [pid 7478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7478] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7485] <... mount resumed>) = 0 [pid 7478] <... mmap resumed>) = 0x7fee02e32000 [pid 7485] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7478] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7485] <... openat resumed>) = 3 [pid 7481] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... mprotect resumed>) = 0 [pid 7478] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7489], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7489 [pid 7478] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7478] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7489 attached [pid 7489] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 7485] chdir("./bus" [pid 7481] <... futex resumed>) = 0 [pid 7480] exit_group(0 [pid 5081] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7489] creat("./file1", 000 [pid 7487] <... ioctl resumed>) = 0 [pid 7487] close(3) = 0 [pid 7487] mkdir("./bus", 0777 [pid 7488] <... futex resumed>) = ? [pid 7485] <... chdir resumed>) = 0 [pid 7480] <... exit_group resumed>) = ? [pid 7488] +++ exited with 0 +++ [pid 7485] ioctl(4, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7485] <... ioctl resumed>) = 0 [pid 5081] lstat("./134/bus", [pid 7485] close(4) = 0 [pid 7487] <... mkdir resumed>) = 0 [pid 7487] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7485] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7483] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7485] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7483] <... futex resumed>) = 0 [pid 7485] creat("./bus", 000 [pid 7483] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7485] <... creat resumed>) = 4 [pid 5081] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7485] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7483] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7485] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 7485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7483] <... futex resumed>) = 0 [pid 7485] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7483] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 7487] <... mount resumed>) = 0 [pid 7487] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 110.506471][ T11] hfsplus: b-tree write err: -5, ino 4 [ 110.512421][ T52] hfsplus: b-tree write err: -5, ino 4 [ 110.514746][ T7487] loop1: detected capacity change from 0 to 1024 [pid 7487] chdir("./bus") = 0 [pid 7487] ioctl(4, LOOP_CLR_FD) = 0 [pid 7487] close(4) = 0 [pid 7487] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7487] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7486] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... futex resumed>) = 0 [pid 7486] <... futex resumed>) = 1 [pid 7486] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] creat("./bus", 000) = 4 [pid 5081] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7487] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 7487] <... futex resumed>) = 1 [pid 7486] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 7487] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7486] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./134/bus" [pid 7486] <... futex resumed>) = 0 [pid 7481] +++ exited with 0 +++ [pid 7480] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7486] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7480, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7478] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(3, [pid 5076] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5076] fstat(3, [pid 5074] lstat("./132/bus", [pid 5081] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] rmdir("./134" [pid 5076] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] mkdir("./135", 0777 [pid 5076] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./133/binderfs") = 0 [pid 5076] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7483] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7483] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... openat resumed>) = 3 [ 110.552999][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.556841][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.575913][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.588774][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.592384][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] fstat(4, [pid 7489] <... creat resumed>) = 5 [pid 7489] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7489] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7483] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] getdents64(4, [pid 7486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7483] <... mprotect resumed>) = 0 [pid 5081] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... close resumed>) = 0 [pid 7486] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7486] <... futex resumed>) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 5074] getdents64(4, [pid 7486] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7483] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7490 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7483] <... clone resumed>, parent_tid=[7491], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7491 [pid 5074] <... close resumed>) = 0 [pid 7483] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./132/bus" [pid 7483] <... futex resumed>) = 0 [pid 7486] <... mprotect resumed>) = 0 [pid 7483] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 7486] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 7486] <... clone resumed>, parent_tid=[7492], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7492 [pid 7486] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 7486] <... futex resumed>) = 0 [pid 5074] rmdir("./132" [pid 7486] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./133", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7491 attached [pid 7491] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7493 [pid 7491] creat("./file1", 000./strace-static-x86_64: Process 7493 attached ./strace-static-x86_64: Process 7490 attached [ 110.604506][ T52] hfsplus: b-tree write err: -5, ino 4 [ 110.607746][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.617873][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.633069][ T7479] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7492 attached [pid 7492] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7492] creat("./file1", 000 [pid 7493] set_robust_list(0x555556b055e0, 24 [pid 7490] set_robust_list(0x555556b055e0, 24 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] <... write resumed>) = 57344 [pid 7479] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] exit_group(0 [pid 7489] <... futex resumed>) = ? [pid 7478] <... exit_group resumed>) = ? [pid 7489] +++ exited with 0 +++ [pid 7479] <... futex resumed>) = ? [pid 7479] +++ exited with 0 +++ [pid 7478] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7478, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] lstat("./133/bus", [pid 7493] <... set_robust_list resumed>) = 0 [pid 7490] <... set_robust_list resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7490] chdir("./135" [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7493] chdir("./133" [pid 7490] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7493] <... chdir resumed>) = 0 [pid 7490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7490] <... prctl resumed>) = 0 [pid 7493] <... prctl resumed>) = 0 [pid 7490] setpgid(0, 0 [pid 5076] <... openat resumed>) = 4 [pid 7493] setpgid(0, 0 [pid 7490] <... setpgid resumed>) = 0 [pid 5076] fstat(4, [pid 7493] <... setpgid resumed>) = 0 [pid 7493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7493] <... openat resumed>) = 3 [pid 7490] <... openat resumed>) = 3 [pid 7483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 7493] write(3, "1000", 4 [pid 7490] write(3, "1000", 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7493] <... write resumed>) = 4 [pid 7490] <... write resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7493] close(3 [pid 7490] close(3 [pid 5077] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 7493] <... close resumed>) = 0 [pid 7490] <... close resumed>) = 0 [pid 7486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] fstat(3, [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7493] symlink("/dev/binderfs", "./binderfs" [pid 7490] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(4 [pid 7493] <... symlink resumed>) = 0 [pid 7490] <... symlink resumed>) = 0 [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 7493] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./133/bus" [pid 7493] <... futex resumed>) = 0 [pid 7490] <... futex resumed>) = 0 [pid 5077] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] lstat("./133/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 7493] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7490] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] getdents64(3, [pid 7493] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7490] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] unlink("./133/binderfs" [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7493] <... mprotect resumed>) = 0 [pid 7490] <... mprotect resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] close(3 [pid 7493] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7490] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 110.653623][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.659089][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.661949][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.692170][ T9] hfsplus: b-tree write err: -5, ino 4 [ 110.695408][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7495 attached ./strace-static-x86_64: Process 7494 attached [pid 7492] <... creat resumed>) = 5 [pid 7491] <... creat resumed>) = 5 [pid 7485] <... write resumed>) = 57344 [pid 7495] set_robust_list(0x7fee0b1f39e0, 24 [pid 7494] set_robust_list(0x7fee0b1f39e0, 24 [pid 7493] <... clone resumed>, parent_tid=[7494], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7494 [pid 7492] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7491] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... clone resumed>, parent_tid=[7495], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7495 [pid 7485] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] rmdir("./133" [pid 7495] <... set_robust_list resumed>) = 0 [pid 7494] <... set_robust_list resumed>) = 0 [pid 7493] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7492] <... futex resumed>) = 0 [pid 7491] <... futex resumed>) = 0 [pid 7490] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] <... futex resumed>) = 0 [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 7495] memfd_create("syzkaller", 0 [pid 7494] memfd_create("syzkaller", 0 [pid 7493] <... futex resumed>) = 0 [pid 7491] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7490] <... futex resumed>) = 0 [pid 7485] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./134", 0777 [pid 7495] <... memfd_create resumed>) = 3 [pid 7494] <... memfd_create resumed>) = 3 [pid 7493] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7491] <... futex resumed>) = ? [pid 7490] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7485] <... futex resumed>) = ? [pid 7492] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] <... exit_group resumed>) = ? [pid 5077] lstat("./133/bus", [pid 5076] <... mkdir resumed>) = 0 [pid 7495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7491] +++ exited with 0 +++ [pid 7485] +++ exited with 0 +++ [pid 7483] +++ exited with 0 +++ [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7495] <... mmap resumed>) = 0x7fee02dd3000 [pid 7494] <... mmap resumed>) = 0x7fee02dd3000 [pid 5077] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 7495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7487] <... write resumed>) = 57344 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7483, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7487] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3 [pid 5077] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7487] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7487] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] exit_group(0 [pid 5080] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7492] <... futex resumed>) = ? [pid 7487] <... futex resumed>) = ? [pid 7486] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7492] +++ exited with 0 +++ [pid 7487] +++ exited with 0 +++ [pid 7486] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 4 [pid 5080] fstat(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7486, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(4, [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7496 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7495] <... write resumed>) = 524288 [pid 7494] <... write resumed>) = 524288 [pid 5080] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7495] munmap(0x7fee02dd3000, 524288 [pid 7494] munmap(0x7fee02dd3000, 524288 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(4, ./strace-static-x86_64: Process 7496 attached [pid 7495] <... munmap resumed>) = 0 [pid 7494] <... munmap resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7496] set_robust_list(0x555556b055e0, 24 [pid 7495] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5077] getdents64(4, [pid 7496] <... set_robust_list resumed>) = 0 [pid 7495] <... openat resumed>) = 4 [pid 7494] <... openat resumed>) = 4 [pid 5080] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7496] chdir("./134" [ 110.705232][ T7485] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.717400][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.729476][ T7487] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7495] ioctl(4, LOOP_SET_FD, 3 [pid 7494] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(4 [pid 5075] umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./132/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] unlink("./132/binderfs" [pid 5075] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 5075] fstat(3, [pid 5080] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./132/binderfs") = 0 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7496] <... chdir resumed>) = 0 [pid 7496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7495] <... ioctl resumed>) = 0 [pid 7494] <... ioctl resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7496] setpgid(0, 0 [pid 7495] close(3 [pid 7494] close(3 [pid 5077] rmdir("./133/bus" [pid 7496] <... setpgid resumed>) = 0 [pid 7495] <... close resumed>) = 0 [pid 7494] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7495] mkdir("./bus", 0777 [pid 7494] mkdir("./bus", 0777 [pid 5077] getdents64(3, [pid 7496] <... openat resumed>) = 3 [pid 7495] <... mkdir resumed>) = 0 [pid 7494] <... mkdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7496] write(3, "1000", 4 [pid 7495] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7494] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] close(3 [pid 7496] <... write resumed>) = 4 [pid 7494] <... mount resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7496] close(3 [pid 7495] <... mount resumed>) = 0 [pid 7494] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] rmdir("./133" [pid 7496] <... close resumed>) = 0 [pid 7495] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7494] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 7496] symlink("/dev/binderfs", "./binderfs" [pid 7495] <... openat resumed>) = 3 [pid 7494] chdir("./bus" [pid 5077] mkdir("./134", 0777 [pid 7496] <... symlink resumed>) = 0 [pid 7495] chdir("./bus" [pid 7494] <... chdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 7496] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7495] <... chdir resumed>) = 0 [pid 7494] ioctl(4, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7496] <... futex resumed>) = 0 [pid 7495] ioctl(4, LOOP_CLR_FD [pid 7494] <... ioctl resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7495] <... ioctl resumed>) = 0 [pid 7494] close(4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7496] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7495] close(4 [pid 7494] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7496] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7495] <... close resumed>) = 0 [pid 7494] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(3 [pid 7496] <... mprotect resumed>) = 0 [pid 7495] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7494] <... futex resumed>) = 1 [pid 7493] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7496] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7495] <... futex resumed>) = 1 [pid 7494] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7493] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7495] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7493] <... futex resumed>) = 0 [pid 7490] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7496] <... clone resumed>, parent_tid=[7497], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7497 [pid 7495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7494] creat("./bus", 000 [pid 7493] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7490] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7498 [pid 7496] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7495] creat("./bus", 000 [pid 7494] <... creat resumed>) = 4 [pid 7490] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = 0 [pid 7496] <... futex resumed>) = 0 [pid 7495] <... creat resumed>) = 4 [pid 7494] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7496] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7495] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7494] <... futex resumed>) = 1 [pid 7493] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7495] <... futex resumed>) = 1 [pid 7494] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7493] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... futex resumed>) = 0 [pid 5075] lstat("./132/bus", [pid 7495] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7493] <... futex resumed>) = 0 [pid 7490] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 110.754845][ T7495] loop5: detected capacity change from 0 to 1024 [ 110.761864][ T7494] loop0: detected capacity change from 0 to 1024 [ 110.761952][ T9] hfsplus: b-tree write err: -5, ino 4 [ 110.774365][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7494] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7493] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7490] <... futex resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7498 attached ./strace-static-x86_64: Process 7497 attached [pid 7495] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7490] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7498] set_robust_list(0x555556b055e0, 24 [pid 7497] set_robust_list(0x7fee0b1f39e0, 24 [pid 7498] <... set_robust_list resumed>) = 0 [pid 7497] <... set_robust_list resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7498] chdir("./134" [pid 7497] memfd_create("syzkaller", 0 [pid 7498] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7497] <... memfd_create resumed>) = 3 [pid 5075] fstat(4, [pid 7498] <... prctl resumed>) = 0 [pid 7497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7498] setpgid(0, 0 [pid 7497] <... mmap resumed>) = 0x7fee02dd3000 [pid 5075] getdents64(4, [pid 7498] <... setpgid resumed>) = 0 [pid 7498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7498] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 7498] write(3, "1000", 4 [pid 7497] <... write resumed>) = 524288 [ 110.812341][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.822664][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.826711][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.836567][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] getdents64(4, [pid 7498] <... write resumed>) = 4 [pid 7497] munmap(0x7fee02dd3000, 524288 [pid 5080] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7493] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7493] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7493] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7499], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7499 [pid 7493] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7493] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7490] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7498] close(3 [pid 7490] <... mmap resumed>) = 0x7fee02e32000 [pid 7497] <... munmap resumed>) = 0 [pid 7490] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 7490] <... mprotect resumed>) = 0 [pid 7490] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7500], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7500 [pid 7490] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7490] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7500 attached [pid 7500] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7500] creat("./file1", 000 [pid 7498] <... close resumed>) = 0 [pid 7497] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] lstat("./132/bus", [pid 5075] <... close resumed>) = 0 [pid 7498] symlink("/dev/binderfs", "./binderfs" [pid 7497] <... openat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./132/bus" [pid 7498] <... symlink resumed>) = 0 [pid 7497] ioctl(4, LOOP_SET_FD, 3 [pid 5080] umount2("./132/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7499 attached [pid 7499] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7499] creat("./file1", 000) = 5 [pid 7499] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7493] <... futex resumed>) = 0 [pid 7498] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 7499] <... futex resumed>) = 1 [pid 7498] <... futex resumed>) = 0 [pid 7499] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7497] <... ioctl resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./132/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7500] <... creat resumed>) = 5 [pid 7500] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7490] <... futex resumed>) = 0 [ 110.866960][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.868003][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.882758][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.892649][ T7497] loop2: detected capacity change from 0 to 1024 [ 110.900501][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.902638][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7500] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7497] close(3 [pid 5080] <... openat resumed>) = 4 [pid 5075] close(3 [pid 7498] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7497] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 7498] <... mprotect resumed>) = 0 [pid 7497] mkdir("./bus", 0777 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./132" [pid 7498] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7497] <... mkdir resumed>) = 0 [pid 5080] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 7497] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./133", 0777 [pid 7498] <... clone resumed>, parent_tid=[7501], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7501 [pid 5080] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 7498] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7498] <... futex resumed>) = 0 [pid 5080] close(4 [pid 5075] <... openat resumed>) = 3 [pid 7498] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] rmdir("./132/bus" [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 5075] close(3./strace-static-x86_64: Process 7501 attached [pid 7494] <... write resumed>) = 57344 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7501] set_robust_list(0x7fee0b1f39e0, 24 [pid 7495] <... write resumed>) = 57344 [pid 7494] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 5075] <... close resumed>) = 0 [pid 7501] <... set_robust_list resumed>) = 0 [pid 7497] <... mount resumed>) = 0 [pid 7494] <... futex resumed>) = 0 [pid 7493] exit_group(0 [pid 5080] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7501] memfd_create("syzkaller", 0 [pid 7499] <... futex resumed>) = ? [pid 7497] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7495] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7493] <... exit_group resumed>) = ? [pid 5080] rmdir("./132"./strace-static-x86_64: Process 7502 attached [pid 7501] <... memfd_create resumed>) = 3 [pid 7499] +++ exited with 0 +++ [pid 7497] <... openat resumed>) = 3 [pid 7495] <... futex resumed>) = 0 [pid 7494] +++ exited with 0 +++ [pid 7501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7493] +++ exited with 0 +++ [pid 5080] <... rmdir resumed>) = 0 [pid 7502] set_robust_list(0x555556b055e0, 24 [pid 7501] <... mmap resumed>) = 0x7fee02dd3000 [pid 7497] chdir("./bus" [pid 7495] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7490] exit_group(0 [pid 5080] mkdir("./133", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7502 [pid 7497] <... chdir resumed>) = 0 [pid 7495] <... futex resumed>) = ? [pid 7490] <... exit_group resumed>) = ? [pid 5080] <... mkdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7493, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7497] ioctl(4, LOOP_CLR_FD [pid 7495] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7502] <... set_robust_list resumed>) = 0 [pid 7497] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7502] chdir("./133" [pid 7501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7500] <... futex resumed>) = ? [pid 7497] close(4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7502] <... chdir resumed>) = 0 [pid 7501] <... write resumed>) = 524288 [pid 7500] +++ exited with 0 +++ [pid 7497] <... close resumed>) = 0 [pid 7490] +++ exited with 0 +++ [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7497] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7490, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] close(3 [pid 7501] munmap(0x7fee02dd3000, 524288 [pid 7497] <... futex resumed>) = 1 [pid 7496] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7501] <... munmap resumed>) = 0 [pid 7497] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7496] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7502] <... prctl resumed>) = 0 [pid 7501] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7496] <... futex resumed>) = 0 [pid 7501] <... openat resumed>) = 4 [pid 7496] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7501] ioctl(4, LOOP_SET_FD, 3 [pid 7497] creat("./bus", 000 [pid 5081] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7503 attached [pid 7497] <... creat resumed>) = 4 [pid 7502] setpgid(0, 0 [pid 7497] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7503 [pid 5074] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7502] <... setpgid resumed>) = 0 [pid 7497] <... futex resumed>) = 1 [pid 7496] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7497] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7496] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 7502] <... openat resumed>) = 3 [pid 7497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7496] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5074] fstat(3, [pid 7503] set_robust_list(0x555556b055e0, 24 [pid 7502] write(3, "1000", 4 [pid 7497] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7496] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7503] <... set_robust_list resumed>) = 0 [pid 7502] <... write resumed>) = 4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 7503] chdir("./133") = 0 [ 110.908023][ T7494] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.919559][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.930808][ T7495] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.957351][ T7501] loop3: detected capacity change from 0 to 1024 [pid 7503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7503] setpgid(0, 0) = 0 [pid 7503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7503] write(3, "1000", 4) = 4 [pid 7503] close(3) = 0 [pid 7503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7503] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7503] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7503] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7504], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7504 [pid 7503] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7503] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7502] close(3 [pid 5081] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7502] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 7504 attached [pid 7501] <... ioctl resumed>) = 0 [pid 5074] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7502] symlink("/dev/binderfs", "./binderfs" [pid 5081] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7502] <... symlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./133/binderfs", [pid 7504] set_robust_list(0x7fee0b1f39e0, 24 [pid 7501] close(3 [pid 7502] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./135/binderfs", [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7502] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./133/binderfs" [pid 7504] <... set_robust_list resumed>) = 0 [pid 7501] <... close resumed>) = 0 [pid 7502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] unlink("./135/binderfs" [pid 5074] <... unlink resumed>) = 0 [pid 7504] memfd_create("syzkaller", 0 [pid 7502] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7501] mkdir("./bus", 0777 [pid 5081] <... unlink resumed>) = 0 [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7502] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7502] <... mprotect resumed>) = 0 [pid 7502] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7505], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7505 [pid 7502] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7502] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7504] <... memfd_create resumed>) = 3 [pid 7504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7505 attached [pid 7501] <... mkdir resumed>) = 0 [pid 7505] set_robust_list(0x7fee0b1f39e0, 24 [pid 7501] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7505] <... set_robust_list resumed>) = 0 [pid 7505] memfd_create("syzkaller", 0) = 3 [pid 7505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7504] <... write resumed>) = 524288 [pid 7496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7496] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7501] <... mount resumed>) = 0 [pid 7496] <... futex resumed>) = 0 [pid 7501] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7501] <... openat resumed>) = 3 [pid 7496] <... mmap resumed>) = 0x7fee02e32000 [pid 7501] chdir("./bus" [pid 7496] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7501] <... chdir resumed>) = 0 [pid 7496] <... mprotect resumed>) = 0 [pid 7501] ioctl(4, LOOP_CLR_FD [pid 7496] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7501] <... ioctl resumed>) = 0 [pid 7501] close(4 [pid 7496] <... clone resumed>, parent_tid=[7506], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7506 [pid 7501] <... close resumed>) = 0 [pid 7496] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7501] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7496] <... futex resumed>) = 0 [pid 7501] <... futex resumed>) = 1 [pid 7498] <... futex resumed>) = 0 [ 110.970441][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.978891][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.986986][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 110.997523][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.005205][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 111.012322][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7496] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7504] munmap(0x7fee02dd3000, 524288 [pid 7501] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = 0 [pid 7505] <... write resumed>) = 524288 [pid 7501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7501] creat("./bus", 000) = 4 [pid 7501] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7501] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] munmap(0x7fee02dd3000, 524288) = 0 [pid 7505] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 ./strace-static-x86_64: Process 7506 attached [pid 7501] <... futex resumed>) = 0 [pid 7498] <... futex resumed>) = 1 [pid 7501] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7498] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7501] <... futex resumed>) = 0 [pid 7498] <... futex resumed>) = 1 [pid 7501] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7498] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7505] ioctl(4, LOOP_SET_FD, 3 [pid 7506] set_robust_list(0x7fee02e529e0, 24 [pid 7504] <... munmap resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7506] <... set_robust_list resumed>) = 0 [pid 7506] creat("./file1", 000 [pid 7504] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./133/bus", [pid 7504] <... openat resumed>) = 4 [pid 5081] lstat("./135/bus", [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7505] <... ioctl resumed>) = 0 [pid 7505] close(3 [pid 7504] ioctl(4, LOOP_SET_FD, 3 [pid 7505] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7505] mkdir("./bus", 0777) = 0 [pid 7505] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 7505] <... mount resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(4, [pid 7505] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7505] chdir("./bus") = 0 [pid 7505] ioctl(4, LOOP_CLR_FD) = 0 [pid 5081] getdents64(4, [pid 7505] close(4 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5081] getdents64(4, [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7505] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5081] close(4 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [ 111.022905][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.034987][ T7505] loop1: detected capacity change from 0 to 1024 [ 111.043924][ T7504] loop4: detected capacity change from 0 to 1024 [ 111.045127][ T7497] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.059821][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] close(4 [pid 5081] rmdir("./135/bus" [pid 5074] <... close resumed>) = 0 [pid 7505] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7505] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] <... ioctl resumed>) = 0 [pid 7502] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] rmdir("./133/bus" [pid 7502] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7496] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7502] <... futex resumed>) = 1 [pid 5081] close(3 [pid 5074] getdents64(3, [pid 7505] <... futex resumed>) = 0 [pid 7502] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7505] creat("./bus", 000) = 4 [pid 5081] rmdir("./135" [pid 5074] close(3 [pid 7505] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7502] <... futex resumed>) = 0 [pid 7505] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7502] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] <... creat resumed>) = 5 [pid 7504] close(3 [pid 7502] <... futex resumed>) = 0 [pid 7498] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7506] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] <... futex resumed>) = 0 [pid 7506] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] <... close resumed>) = 0 [pid 7498] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7497] <... write resumed>) = 57344 [pid 5081] mkdir("./136", 0777 [ 111.071775][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.084163][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.089749][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.099103][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.106330][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.113959][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] rmdir("./133" [pid 7504] mkdir("./bus", 0777 [pid 7498] <... futex resumed>) = 0 [pid 7497] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7496] exit_group(0 [pid 7506] <... futex resumed>) = ? [pid 7496] <... exit_group resumed>) = ? [pid 7506] +++ exited with 0 +++ [pid 7504] <... mkdir resumed>) = 0 [pid 7498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7497] <... futex resumed>) = ? [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] mkdir("./134", 0777 [pid 7504] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7498] <... mmap resumed>) = 0x7fee02e32000 [pid 7497] +++ exited with 0 +++ [pid 7496] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 7498] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7496, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7498] <... mprotect resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... openat resumed>) = 3 [pid 7498] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7504] <... mount resumed>) = 0 [pid 7501] <... write resumed>) = 57344 [pid 5081] <... close resumed>) = 0 [pid 5076] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5076] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7508 [pid 5076] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7509 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7504] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7501] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7498] <... clone resumed>, parent_tid=[7507], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7507 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./134/binderfs", [pid 7501] <... futex resumed>) = 0 [pid 7498] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7504] <... openat resumed>) = 3 [pid 7501] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] <... futex resumed>) = 0 [pid 5076] unlink("./134/binderfs") = 0 [pid 7504] chdir("./bus" [pid 7498] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7504] <... chdir resumed>) = 0 [pid 7504] ioctl(4, LOOP_CLR_FD [pid 7502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7504] <... ioctl resumed>) = 0 [pid 7502] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7504] close(4 [pid 7502] <... futex resumed>) = 0 [pid 7504] <... close resumed>) = 0 [pid 7502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7504] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7508 attached [pid 7508] set_robust_list(0x555556b055e0, 24) = 0 [pid 7508] chdir("./136") = 0 [pid 7508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 7507 attached [pid 7507] set_robust_list(0x7fee02e529e0, 24 [pid 7508] setpgid(0, 0 [pid 7507] <... set_robust_list resumed>) = 0 [pid 7508] <... setpgid resumed>) = 0 [pid 7507] creat("./file1", 000 [pid 7508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7507] <... creat resumed>) = 5 [pid 7508] <... openat resumed>) = 3 [pid 7507] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7508] write(3, "1000", 4 [pid 7507] <... futex resumed>) = 1 [pid 7498] <... futex resumed>) = 0 [pid 7508] <... write resumed>) = 4 [pid 7507] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] exit_group(0 [pid 7508] close(3 [pid 7507] <... futex resumed>) = ? [pid 7498] <... exit_group resumed>) = ? [pid 7508] <... close resumed>) = 0 [pid 7507] +++ exited with 0 +++ [pid 7508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7508] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7508] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7508] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7504] <... futex resumed>) = 1 [pid 7501] <... futex resumed>) = ? [pid 7503] <... futex resumed>) = 0 [pid 7508] <... clone resumed>, parent_tid=[7510], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7510 [pid 7502] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7503] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7508] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7508] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7501] +++ exited with 0 +++ [pid 7504] creat("./bus", 000 [pid 7498] +++ exited with 0 +++ [pid 7503] <... futex resumed>) = 0 [pid 7502] <... mprotect resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7498, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7504] <... creat resumed>) = 4 [pid 7503] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7504] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7502] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = 0 [ 111.117131][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.122432][ T7501] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.129798][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.156171][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.163690][ T52] hfsplus: b-tree write err: -5, ino 4 ./strace-static-x86_64: Process 7511 attached ./strace-static-x86_64: Process 7509 attached [pid 7504] <... futex resumed>) = 0 [pid 7503] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./134/bus", [pid 5077] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7510 attached [pid 5077] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7510] set_robust_list(0x7fee0b1f39e0, 24 [pid 5077] fstat(3, [pid 5076] <... openat resumed>) = 4 [pid 7510] <... set_robust_list resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] fstat(4, [pid 7510] memfd_create("syzkaller", 0 [pid 5077] getdents64(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7510] <... memfd_create resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] getdents64(4, [pid 7510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5077] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7510] <... mmap resumed>) = 0x7fee02dd3000 [pid 7504] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7503] <... futex resumed>) = 0 [pid 7502] <... clone resumed>, parent_tid=[7511], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7511 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 7511] set_robust_list(0x7fee02e529e0, 24 [pid 7510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7509] set_robust_list(0x555556b055e0, 24 [pid 7503] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7502] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] lstat("./134/binderfs", [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] close(4 [pid 5077] unlink("./134/binderfs" [pid 5076] <... close resumed>) = 0 [pid 7511] <... set_robust_list resumed>) = 0 [pid 7509] <... set_robust_list resumed>) = 0 [pid 7502] <... futex resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] rmdir("./134/bus" [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 7511] creat("./file1", 000 [pid 7509] chdir("./134" [pid 7505] <... write resumed>) = 57344 [pid 7502] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = 0 [pid 5076] getdents64(3, [pid 7511] <... creat resumed>) = 5 [pid 7509] <... chdir resumed>) = 0 [pid 7505] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7511] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7505] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 7511] <... futex resumed>) = 1 [pid 7509] <... prctl resumed>) = 0 [pid 7505] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7502] <... futex resumed>) = 0 [ 111.180009][ T7505] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.189649][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.197776][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.205795][ T9] hfsplus: b-tree write err: -5, ino 4 [ 111.207748][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.218851][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] lstat("./134/bus", [pid 5076] <... close resumed>) = 0 [pid 7511] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7509] setpgid(0, 0 [pid 7502] exit_group(0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./134" [pid 7510] <... write resumed>) = 524288 [pid 5077] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./135", 0777 [pid 7510] munmap(0x7fee02dd3000, 524288 [pid 5077] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 7510] <... munmap resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7511] <... futex resumed>) = ? [pid 7510] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7509] <... setpgid resumed>) = 0 [pid 7505] <... futex resumed>) = ? [pid 7502] <... exit_group resumed>) = ? [pid 5077] fstat(4, [pid 5076] <... openat resumed>) = 3 [pid 7511] +++ exited with 0 +++ [pid 7510] <... openat resumed>) = 4 [pid 7509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7505] +++ exited with 0 +++ [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7510] ioctl(4, LOOP_SET_FD, 3 [pid 7503] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7502] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7509] <... openat resumed>) = 3 [pid 7504] <... write resumed>) = 57344 [pid 7503] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] close(3 [pid 7510] <... ioctl resumed>) = 0 [pid 7509] write(3, "1000", 4 [pid 7504] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... futex resumed>) = 0 [pid 5077] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 7510] close(3 [pid 7509] <... write resumed>) = 4 [pid 7504] <... futex resumed>) = 0 [pid 7503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7502, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7510] <... close resumed>) = 0 [pid 7509] close(3 [pid 7504] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7503] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7512 attached [pid 7510] mkdir("./bus", 0777 [pid 7509] <... close resumed>) = 0 [pid 7503] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7512] set_robust_list(0x555556b055e0, 24 [pid 7510] <... mkdir resumed>) = 0 [pid 7509] symlink("/dev/binderfs", "./binderfs" [pid 7503] <... mprotect resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7512 [pid 5075] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7512] <... set_robust_list resumed>) = 0 [pid 7510] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7509] <... symlink resumed>) = 0 [pid 7503] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7509] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./134/bus" [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7513 attached [pid 7512] chdir("./135" [pid 7509] <... futex resumed>) = 0 [pid 7503] <... clone resumed>, parent_tid=[7513], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7513 [pid 7509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7503] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7509] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7503] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] fstat(3, [pid 7513] set_robust_list(0x7fee02e529e0, 24 [pid 7512] <... chdir resumed>) = 0 [pid 7509] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7503] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7513] <... set_robust_list resumed>) = 0 [pid 7512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7510] <... mount resumed>) = 0 [pid 7509] <... mprotect resumed>) = 0 [pid 5077] getdents64(3, [pid 7510] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7509] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7514 attached [pid 7513] creat("./file1", 000 [pid 7512] <... prctl resumed>) = 0 [pid 7510] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7514] set_robust_list(0x7fee0b1f39e0, 24 [pid 7510] chdir("./bus" [pid 7509] <... clone resumed>, parent_tid=[7514], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7514 [pid 5077] close(3 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7514] <... set_robust_list resumed>) = 0 [pid 7510] <... chdir resumed>) = 0 [pid 7509] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 5075] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7514] memfd_create("syzkaller", 0 [pid 7512] setpgid(0, 0 [pid 7510] ioctl(4, LOOP_CLR_FD [pid 7509] <... futex resumed>) = 0 [pid 5077] rmdir("./134" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7514] <... memfd_create resumed>) = 3 [pid 7512] <... setpgid resumed>) = 0 [pid 7510] <... ioctl resumed>) = 0 [pid 7509] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7510] close(4 [pid 7514] <... mmap resumed>) = 0x7fee02dd3000 [pid 7510] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7510] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7508] <... futex resumed>) = 0 [pid 5077] mkdir("./135", 0777 [pid 5075] lstat("./133/binderfs", [pid 7510] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7508] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7510] creat("./bus", 000) = 4 [pid 7508] <... futex resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7510] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 111.231046][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.238922][ T7504] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.248764][ T7510] loop5: detected capacity change from 0 to 1024 [pid 7508] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] unlink("./133/binderfs" [pid 7514] <... write resumed>) = 524288 [pid 7512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7510] <... futex resumed>) = 0 [pid 7508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] <... openat resumed>) = 3 [pid 7510] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7508] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 7510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7508] <... futex resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7512] <... openat resumed>) = 3 [pid 7510] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7508] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] close(3 [pid 7514] munmap(0x7fee02dd3000, 524288) = 0 [pid 7514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7514] ioctl(4, LOOP_SET_FD, 3 [pid 7512] write(3, "1000", 4 [pid 5077] <... close resumed>) = 0 [pid 7512] <... write resumed>) = 4 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7512] close(3) = 0 [pid 7512] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7515 ./strace-static-x86_64: Process 7515 attached [pid 7512] <... symlink resumed>) = 0 [pid 7513] <... creat resumed>) = 5 [pid 7512] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7513] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7512] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./133/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7513] <... futex resumed>) = 1 [pid 7503] <... futex resumed>) = 0 [pid 5075] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7503] exit_group(0 [pid 7512] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7512] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7504] <... futex resumed>) = ? [pid 7503] <... exit_group resumed>) = ? [pid 5075] <... openat resumed>) = 4 [pid 7513] +++ exited with 0 +++ [pid 7512] <... mprotect resumed>) = 0 [pid 7504] +++ exited with 0 +++ [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 7503] +++ exited with 0 +++ [pid 5075] rmdir("./133/bus" [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7503, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7512] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7515] set_robust_list(0x555556b055e0, 24 [pid 5075] <... rmdir resumed>) = 0 [pid 7515] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(3, [pid 7515] chdir("./135" [pid 7512] <... clone resumed>, parent_tid=[7516], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7516 [pid 5080] umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7515] <... chdir resumed>) = 0 [pid 7512] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 7515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7514] <... ioctl resumed>) = 0 [pid 7512] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 7516 attached [pid 7515] <... prctl resumed>) = 0 [pid 7514] close(3 [pid 7512] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [ 111.288359][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 111.289340][ T7514] loop0: detected capacity change from 0 to 1024 [ 111.302459][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.321434][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] rmdir("./133" [pid 7516] set_robust_list(0x7fee0b1f39e0, 24 [pid 7515] setpgid(0, 0 [pid 7514] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 5075] <... rmdir resumed>) = 0 [pid 7515] <... setpgid resumed>) = 0 [pid 7514] mkdir("./bus", 0777 [pid 5075] mkdir("./134", 0777 [pid 7515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7514] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7515] <... openat resumed>) = 3 [pid 7514] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7515] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 7515] <... write resumed>) = 4 [pid 7514] <... mount resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7515] close(3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7515] <... close resumed>) = 0 [pid 7514] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] close(3 [pid 7515] symlink("/dev/binderfs", "./binderfs" [pid 7514] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 7515] <... symlink resumed>) = 0 [pid 7514] chdir("./bus" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7515] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] <... chdir resumed>) = 0 [pid 7515] <... futex resumed>) = 0 [pid 7514] ioctl(4, LOOP_CLR_FD [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7517 [pid 7515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7514] <... ioctl resumed>) = 0 [pid 7515] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7514] close(4 [pid 7515] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7514] <... close resumed>) = 0 [pid 7515] <... mprotect resumed>) = 0 [pid 7514] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7516] <... set_robust_list resumed>) = 0 [pid 7514] <... futex resumed>) = 1 [pid 7509] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7515] <... clone resumed>, parent_tid=[7518], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7518 [pid 7514] creat("./bus", 000 [pid 7509] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] <... creat resumed>) = 4 [pid 7509] <... futex resumed>) = 0 [pid 7515] <... futex resumed>) = 0 [pid 7514] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7509] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7515] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7514] <... futex resumed>) = 0 [pid 7509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7514] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7509] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7509] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7517 attached [pid 7517] set_robust_list(0x555556b055e0, 24) = 0 [pid 7517] chdir("./134") = 0 [pid 7517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7517] setpgid(0, 0) = 0 [pid 7508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7516] memfd_create("syzkaller", 0 [pid 7508] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7516] <... memfd_create resumed>) = 3 [pid 7508] <... futex resumed>) = 0 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 7518 attached [pid 7517] <... openat resumed>) = 3 [pid 7508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7518] set_robust_list(0x7fee0b1f39e0, 24 [pid 7516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7518] <... set_robust_list resumed>) = 0 [pid 7517] write(3, "1000", 4 [pid 7518] memfd_create("syzkaller", 0 [pid 7517] <... write resumed>) = 4 [pid 7508] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7518] <... memfd_create resumed>) = 3 [pid 7517] close(3 [pid 7516] <... mmap resumed>) = 0x7fee02dd3000 [pid 7518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7517] <... close resumed>) = 0 [pid 7518] <... mmap resumed>) = 0x7fee02dd3000 [pid 7517] symlink("/dev/binderfs", "./binderfs" [pid 7508] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7517] <... symlink resumed>) = 0 [pid 7516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7508] <... mprotect resumed>) = 0 [pid 5080] lstat("./133/binderfs", [pid 7517] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7517] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7517] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7508] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7518] <... write resumed>) = 524288 [pid 7517] <... clone resumed>, parent_tid=[7519], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7519 [pid 5080] unlink("./133/binderfs" [pid 7517] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7508] <... clone resumed>, parent_tid=[7520], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7520 [pid 7517] <... futex resumed>) = 0 [pid 7508] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7508] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 7508] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7520 attached [pid 7520] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7520] creat("./file1", 000 [pid 5080] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7518] munmap(0x7fee02dd3000, 524288) = 0 ./strace-static-x86_64: Process 7519 attached [pid 7519] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7519] memfd_create("syzkaller", 0 [pid 7518] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7519] <... memfd_create resumed>) = 3 [pid 7518] ioctl(4, LOOP_SET_FD, 3 [pid 7519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7516] <... write resumed>) = 524288 [pid 7519] <... mmap resumed>) = 0x7fee02dd3000 [ 111.334388][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.346783][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.372874][ T7518] loop3: detected capacity change from 0 to 1024 [ 111.378850][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7516] munmap(0x7fee02dd3000, 524288 [pid 7519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7519] munmap(0x7fee02dd3000, 524288) = 0 [pid 7519] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7519] ioctl(4, LOOP_SET_FD, 3 [pid 7516] <... munmap resumed>) = 0 [pid 7509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7509] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7516] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7509] <... mmap resumed>) = 0x7fee02e32000 [pid 7509] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7516] <... openat resumed>) = 4 [pid 7509] <... mprotect resumed>) = 0 [pid 7509] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7516] ioctl(4, LOOP_SET_FD, 3 [pid 7509] <... clone resumed>, parent_tid=[7521], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7521 [pid 7509] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7509] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7518] <... ioctl resumed>) = 0 [pid 7518] close(3) = 0 [pid 7518] mkdir("./bus", 0777) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 7518] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7516] <... ioctl resumed>) = 0 [pid 7516] close(3 [pid 5080] lstat("./133/bus", [pid 7516] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7516] mkdir("./bus", 0777 [pid 5080] umount2("./133/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7520] <... creat resumed>) = 5 [pid 7520] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7520] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./133/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7518] <... mount resumed>) = 0 [pid 7516] <... mkdir resumed>) = 0 [pid 5080] fstat(4, [pid 7518] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7516] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7518] <... openat resumed>) = 3 [pid 7518] chdir("./bus") = 0 [pid 7518] ioctl(4, LOOP_CLR_FD) = 0 [ 111.381139][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.386872][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.398473][ T7519] loop1: detected capacity change from 0 to 1024 [ 111.408663][ T7516] loop2: detected capacity change from 0 to 1024 [ 111.409410][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7518] close(4) = 0 [pid 7518] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7515] <... futex resumed>) = 0 [pid 7518] creat("./bus", 000 [pid 7515] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7518] <... creat resumed>) = 4 [pid 7515] <... futex resumed>) = 0 [pid 7518] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7518] <... futex resumed>) = 0 [pid 7515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7518] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7515] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7515] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7521 attached [pid 7521] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7521] creat("./file1", 000 [pid 7509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7510] <... write resumed>) = 57344 [pid 7510] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7510] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7508] exit_group(0 [pid 7520] <... futex resumed>) = ? [pid 7510] <... futex resumed>) = ? [pid 7508] <... exit_group resumed>) = ? [pid 7520] +++ exited with 0 +++ [pid 7510] +++ exited with 0 +++ [pid 7508] +++ exited with 0 +++ [pid 5080] getdents64(4, [pid 7516] <... mount resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7508, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7521] <... creat resumed>) = 5 [pid 7521] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 111.438239][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.438972][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.446255][ T7510] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.462220][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.470379][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.479016][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7521] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] <... ioctl resumed>) = 0 [pid 7516] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] getdents64(4, [pid 7515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7515] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7519] close(3 [pid 7515] <... futex resumed>) = 0 [pid 7516] <... openat resumed>) = 3 [pid 7515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7519] <... close resumed>) = 0 [pid 7516] chdir("./bus" [pid 7515] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(4 [pid 7515] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7515] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7522], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7522 [pid 7515] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7515] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] mkdir("./bus", 0777 [pid 7516] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7522 attached [pid 7522] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7522] creat("./file1", 000 [pid 7519] <... mkdir resumed>) = 0 [pid 7516] ioctl(4, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] rmdir("./133/bus" [pid 7519] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7516] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 7516] close(4 [pid 5081] fstat(3, [pid 5080] getdents64(3, [pid 7516] <... close resumed>) = 0 [pid 7522] <... creat resumed>) = 5 [pid 7522] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7515] <... futex resumed>) = 0 [pid 7522] <... futex resumed>) = 1 [pid 7522] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7516] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7516] <... futex resumed>) = 1 [pid 7512] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5080] close(3 [pid 7516] creat("./bus", 000 [pid 7512] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... close resumed>) = 0 [pid 7516] <... creat resumed>) = 4 [pid 7512] <... futex resumed>) = 0 [pid 5081] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./133" [pid 7516] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7512] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 7516] <... futex resumed>) = 0 [pid 7512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] lstat("./136/binderfs", [pid 5080] mkdir("./134", 0777 [pid 7516] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7512] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 7512] <... futex resumed>) = 0 [pid 5081] unlink("./136/binderfs" [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7512] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5081] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7523 [ 111.480092][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.495698][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.508479][ T7514] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.516597][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.524300][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 111.530494][ T7518] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7523 attached [pid 7518] <... write resumed>) = 57344 [pid 7514] <... write resumed>) = 57344 [pid 7523] set_robust_list(0x555556b055e0, 24 [pid 7514] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7509] exit_group(0 [pid 7523] <... set_robust_list resumed>) = 0 [pid 7521] <... futex resumed>) = ? [pid 7514] <... futex resumed>) = ? [pid 7509] <... exit_group resumed>) = ? [pid 7523] chdir("./134" [pid 7521] +++ exited with 0 +++ [pid 7514] +++ exited with 0 +++ [pid 7509] +++ exited with 0 +++ [pid 7523] <... chdir resumed>) = 0 [pid 7518] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7518] <... futex resumed>) = 0 [pid 7523] <... prctl resumed>) = 0 [pid 7518] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] setpgid(0, 0) = 0 [pid 7523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7523] write(3, "1000", 4) = 4 [pid 7523] close(3) = 0 [pid 7515] exit_group(0 [pid 7523] symlink("/dev/binderfs", "./binderfs" [pid 7522] <... futex resumed>) = ? [pid 7518] <... futex resumed>) = ? [pid 7515] <... exit_group resumed>) = ? [pid 7523] <... symlink resumed>) = 0 [pid 7522] +++ exited with 0 +++ [pid 7518] +++ exited with 0 +++ [pid 7515] +++ exited with 0 +++ [pid 7523] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7523] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7523] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7524], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7524 [pid 7523] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7523] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7515, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7509, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7519] <... mount resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 7519] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7519] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7524 attached [pid 7524] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7524] memfd_create("syzkaller", 0) = 3 [pid 7524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7519] chdir("./bus" [pid 5081] lstat("./136/bus", [pid 5077] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7512] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7519] <... chdir resumed>) = 0 [pid 7512] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7519] ioctl(4, LOOP_CLR_FD [pid 7512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7519] <... ioctl resumed>) = 0 [pid 5081] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] fstat(3, [pid 7512] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... openat resumed>) = 3 [pid 7519] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7519] <... close resumed>) = 0 [pid 7512] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7519] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7512] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] getdents64(3, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7519] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 7517] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] getdents64(3, [pid 7519] creat("./bus", 000 [pid 7517] <... futex resumed>) = 0 [pid 7517] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7519] <... creat resumed>) = 4 [ 111.533841][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.552292][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.561137][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.570992][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7524] <... write resumed>) = 524288 [pid 7519] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7512] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] fstat(4, [pid 5077] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7524] munmap(0x7fee02dd3000, 524288 [pid 7519] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7524] <... munmap resumed>) = 0 [pid 7517] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7517] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7512] <... clone resumed>, parent_tid=[7525], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7525 [pid 5081] getdents64(4, [pid 7524] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] lstat("./135/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7512] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7524] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./134/binderfs", [pid 7524] ioctl(4, LOOP_SET_FD, 3 [pid 7512] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] unlink("./135/binderfs"./strace-static-x86_64: Process 7525 attached [pid 7525] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7512] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7525] creat("./file1", 000) = 5 [pid 7525] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... unlink resumed>) = 0 [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] unlink("./134/binderfs") = 0 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] close(4) = 0 [pid 5081] rmdir("./136/bus" [pid 7524] <... ioctl resumed>) = 0 [pid 7516] <... write resumed>) = 57344 [pid 7516] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7516] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7524] close(3) = 0 [pid 7524] mkdir("./bus", 0777) = 0 [pid 7524] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7512] exit_group(0 [pid 7516] <... futex resumed>) = ? [pid 7512] <... exit_group resumed>) = ? [pid 7516] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 7524] <... mount resumed>) = 0 [pid 7524] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7524] chdir("./bus") = 0 [pid 7524] ioctl(4, LOOP_CLR_FD) = 0 [pid 7524] close(4 [pid 7525] <... futex resumed>) = ? [pid 5081] getdents64(3, [pid 7525] +++ exited with 0 +++ [pid 7512] +++ exited with 0 +++ [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7512, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./135/binderfs", [pid 7524] <... close resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7524] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./135/binderfs" [pid 7524] <... futex resumed>) = 1 [pid 5076] <... unlink resumed>) = 0 [pid 7524] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 111.583856][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.593908][ T7516] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.604047][ T7524] loop4: detected capacity change from 0 to 1024 [ 111.610854][ T9] hfsplus: b-tree write err: -5, ino 4 [ 111.618325][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.626158][ T33] hfsplus: b-tree write err: -5, ino 4 [ 111.626213][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7523] <... futex resumed>) = 0 [pid 7517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7523] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./136" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7524] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7517] <... futex resumed>) = 0 [pid 5074] rmdir("./134/bus" [pid 7524] creat("./bus", 000 [pid 7523] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] lstat("./135/bus", [pid 5074] <... rmdir resumed>) = 0 [pid 7524] <... creat resumed>) = 4 [pid 7517] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] mkdir("./137", 0777 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 7524] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7524] <... futex resumed>) = 1 [pid 5074] close(3 [pid 7524] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./134") = 0 [pid 5074] mkdir("./135", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3 [pid 7523] <... futex resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7523] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7524] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7517] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7526 [pid 7524] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7523] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7526 attached [pid 7526] set_robust_list(0x555556b055e0, 24) = 0 [ 111.651075][ T33] hfsplus: b-tree write err: -5, ino 4 [ 111.665322][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.677376][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.693146][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7526] chdir("./135" [pid 5077] <... openat resumed>) = 4 [pid 7517] <... clone resumed>, parent_tid=[7527], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7527 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7517] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7527 attached [pid 7526] <... chdir resumed>) = 0 [pid 7517] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5077] fstat(4, [pid 7517] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] getdents64(4, [pid 7527] set_robust_list(0x7fee02e529e0, 24 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7527] <... set_robust_list resumed>) = 0 [pid 7526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7528 [pid 5077] getdents64(4, [pid 7527] creat("./file1", 000 [pid 7526] <... prctl resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7526] setpgid(0, 0 [pid 5077] close(4 [pid 7526] <... setpgid resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] rmdir("./135/bus" [pid 7526] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 7526] write(3, "1000", 4 [pid 5077] getdents64(3, [pid 7526] <... write resumed>) = 4 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7526] close(3 [pid 5077] close(3 [pid 7526] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7526] symlink("/dev/binderfs", "./binderfs" [pid 5077] rmdir("./135" [pid 7526] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7526] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./136", 0777 [pid 7526] <... futex resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 7526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7526] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... openat resumed>) = 3 [pid 7526] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7526] <... mprotect resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7526] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] close(3) = 0 [pid 7526] <... clone resumed>, parent_tid=[7529], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7529 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7526] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7530 [pid 7526] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7528 attached [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./135/bus", ./strace-static-x86_64: Process 7529 attached [pid 7528] set_robust_list(0x555556b055e0, 24 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7529] set_robust_list(0x7fee0b1f39e0, 24 [pid 7528] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7528] chdir("./137" [pid 5076] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7529] <... set_robust_list resumed>) = 0 [pid 5076] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7530 attached [pid 5076] fstat(4, [pid 7530] set_robust_list(0x555556b055e0, 24 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7530] <... set_robust_list resumed>) = 0 [pid 7528] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [pid 7530] chdir("./136" [pid 7529] memfd_create("syzkaller", 0 [pid 7528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7530] <... chdir resumed>) = 0 [pid 7528] <... prctl resumed>) = 0 [pid 5076] close(4 [pid 7530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7528] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 7530] <... prctl resumed>) = 0 [pid 5076] rmdir("./135/bus" [pid 7530] setpgid(0, 0 [pid 7529] <... memfd_create resumed>) = 3 [pid 7528] <... setpgid resumed>) = 0 [pid 7530] <... setpgid resumed>) = 0 [pid 7530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 7530] <... openat resumed>) = 3 [pid 7529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 7530] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7530] <... write resumed>) = 4 [pid 7528] <... openat resumed>) = 3 [pid 5076] close(3 [pid 7529] <... mmap resumed>) = 0x7fee02dd3000 [pid 7530] close(3 [pid 7528] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 7530] <... close resumed>) = 0 [pid 5076] rmdir("./135" [pid 7530] symlink("/dev/binderfs", "./binderfs" [pid 7528] <... write resumed>) = 4 [pid 7530] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7528] close(3 [pid 7530] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./136", 0777 [pid 7530] <... futex resumed>) = 0 [pid 7528] <... close resumed>) = 0 [pid 7530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7528] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 7530] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7528] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7530] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7528] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 7530] <... clone resumed>, parent_tid=[7531], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7531 [pid 7528] <... futex resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7530] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7530] <... futex resumed>) = 0 [pid 5076] close(3 [pid 7530] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7528] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7528] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7527] <... creat resumed>) = 5 [pid 7527] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7519] <... write resumed>) = 57344 [pid 7517] <... futex resumed>) = 0 [pid 7528] <... mprotect resumed>) = 0 [pid 7527] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7531 attached [pid 7531] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7528] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7532 [pid 7517] exit_group(0 [pid 7527] <... futex resumed>) = ? [pid 7519] <... futex resumed>) = ? [pid 7517] <... exit_group resumed>) = ? [pid 7529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7527] +++ exited with 0 +++ [pid 7523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7519] +++ exited with 0 +++ [pid 7517] +++ exited with 0 +++ [pid 7531] memfd_create("syzkaller", 0 [pid 7528] <... clone resumed>, parent_tid=[7533], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7533 [pid 7523] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7517, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7531] <... memfd_create resumed>) = 3 [pid 7528] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... futex resumed>) = 0 [pid 7531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7528] <... futex resumed>) = 0 [pid 7523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7531] <... mmap resumed>) = 0x7fee02dd3000 [pid 7528] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7523] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7533 attached ./strace-static-x86_64: Process 7532 attached [pid 7531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 111.695328][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.710459][ T7519] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7523] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7533] set_robust_list(0x7fee0b1f39e0, 24 [pid 7532] set_robust_list(0x555556b055e0, 24 [pid 7523] <... mprotect resumed>) = 0 [pid 7523] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7523] <... clone resumed>, parent_tid=[7534], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7534 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7523] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7523] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7523] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7531] <... write resumed>) = 524288 [pid 5075] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./134/binderfs") = 0 [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7531] munmap(0x7fee02dd3000, 524288) = 0 ./strace-static-x86_64: Process 7534 attached [pid 7534] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7534] creat("./file1", 000 [pid 7533] <... set_robust_list resumed>) = 0 [pid 7532] <... set_robust_list resumed>) = 0 [pid 7529] <... write resumed>) = 524288 [pid 7531] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7531] ioctl(4, LOOP_SET_FD, 3 [pid 7533] memfd_create("syzkaller", 0 [pid 7532] chdir("./136" [pid 7529] munmap(0x7fee02dd3000, 524288 [pid 7534] <... creat resumed>) = 5 [pid 7533] <... memfd_create resumed>) = 3 [pid 7532] <... chdir resumed>) = 0 [pid 7531] <... ioctl resumed>) = 0 [pid 7529] <... munmap resumed>) = 0 [pid 7534] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7529] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7534] <... futex resumed>) = 1 [pid 7533] <... mmap resumed>) = 0x7fee02dd3000 [pid 7532] <... prctl resumed>) = 0 [pid 7529] <... openat resumed>) = 4 [pid 7534] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7532] setpgid(0, 0 [pid 7531] close(3 [ 111.750138][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.757969][ T52] hfsplus: b-tree write err: -5, ino 4 [ 111.768577][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.774877][ T7531] loop3: detected capacity change from 0 to 1024 [ 111.777246][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.791839][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7529] ioctl(4, LOOP_SET_FD, 3 [pid 7533] <... write resumed>) = 524288 [pid 7532] <... setpgid resumed>) = 0 [pid 7531] <... close resumed>) = 0 [pid 7523] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7533] munmap(0x7fee02dd3000, 524288 [pid 7532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7531] mkdir("./bus", 0777 [pid 7533] <... munmap resumed>) = 0 [pid 7532] <... openat resumed>) = 3 [pid 7531] <... mkdir resumed>) = 0 [pid 7529] <... ioctl resumed>) = 0 [pid 7533] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7532] write(3, "1000", 4 [pid 7531] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7529] close(3 [pid 7533] <... openat resumed>) = 4 [pid 7532] <... write resumed>) = 4 [pid 7529] <... close resumed>) = 0 [pid 7533] ioctl(4, LOOP_SET_FD, 3 [pid 7532] close(3 [pid 7529] mkdir("./bus", 0777 [pid 7531] <... mount resumed>) = 0 [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7531] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7531] <... openat resumed>) = 3 [pid 5075] lstat("./134/bus", [pid 7531] chdir("./bus" [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7532] <... close resumed>) = 0 [pid 7531] <... chdir resumed>) = 0 [pid 5075] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7532] symlink("/dev/binderfs", "./binderfs" [pid 7531] ioctl(4, LOOP_CLR_FD [pid 7524] <... write resumed>) = 57344 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7532] <... symlink resumed>) = 0 [pid 7531] <... ioctl resumed>) = 0 [pid 7524] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7532] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7531] close(4 [pid 7524] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7533] <... ioctl resumed>) = 0 [pid 7532] <... futex resumed>) = 0 [pid 7531] <... close resumed>) = 0 [pid 7529] <... mkdir resumed>) = 0 [pid 7533] close(3 [pid 7532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7529] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7533] <... close resumed>) = 0 [pid 7532] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7529] <... mount resumed>) = 0 [pid 7533] mkdir("./bus", 0777 [pid 7532] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7529] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7533] <... mkdir resumed>) = 0 [pid 7532] <... mprotect resumed>) = 0 [pid 7531] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] <... openat resumed>) = 3 [pid 7524] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] fstat(4, [pid 7533] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7532] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7531] <... futex resumed>) = 1 [pid 7530] <... futex resumed>) = 0 [pid 7523] exit_group(0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7531] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7530] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... futex resumed>) = ? [pid 7523] <... exit_group resumed>) = ? [pid 5075] getdents64(4, [pid 7531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7530] <... futex resumed>) = 0 [pid 7524] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7531] creat("./bus", 000 [pid 7530] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(4, [pid 7531] <... creat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7531] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(4 [pid 7531] <... futex resumed>) = 1 [pid 7530] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7531] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7530] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./134/bus" [pid 7531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7530] <... futex resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7531] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7530] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(3, [pid 7534] <... futex resumed>) = ? [pid 7529] chdir("./bus" [pid 7534] +++ exited with 0 +++ [pid 7532] <... clone resumed>, parent_tid=[7535], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7535 [pid 7529] <... chdir resumed>) = 0 [pid 7523] +++ exited with 0 +++ [pid 7532] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] ioctl(4, LOOP_CLR_FD [pid 7532] <... futex resumed>) = 0 [pid 7529] <... ioctl resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7523, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7532] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7529] close(4 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7529] <... close resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 7529] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7529] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, [pid 7526] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7533] <... mount resumed>) = 0 [pid 7526] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5075] close(3 [pid 7533] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7529] <... futex resumed>) = 0 [pid 7526] <... futex resumed>) = 1 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... close resumed>) = 0 [pid 7533] <... openat resumed>) = 3 [pid 7529] creat("./bus", 000 [pid 7526] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./134"./strace-static-x86_64: Process 7535 attached [pid 7533] chdir("./bus" [pid 7529] <... creat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7535] set_robust_list(0x7fee0b1f39e0, 24 [pid 7533] <... chdir resumed>) = 0 [pid 7529] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./134/binderfs", [pid 5075] <... rmdir resumed>) = 0 [ 111.802482][ T7529] loop0: detected capacity change from 0 to 1024 [ 111.807222][ T7524] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.816760][ T7533] loop5: detected capacity change from 0 to 1024 [ 111.842265][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7535] <... set_robust_list resumed>) = 0 [pid 7533] ioctl(4, LOOP_CLR_FD [pid 7529] <... futex resumed>) = 1 [pid 7526] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7533] <... ioctl resumed>) = 0 [pid 7529] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] unlink("./134/binderfs" [pid 7533] close(4 [pid 5080] <... unlink resumed>) = 0 [pid 7533] <... close resumed>) = 0 [pid 5080] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7533] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7528] <... futex resumed>) = 0 [pid 7533] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7528] <... futex resumed>) = 0 [pid 7533] creat("./bus", 000 [pid 7528] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7533] <... creat resumed>) = 4 [pid 7533] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7528] <... futex resumed>) = 0 [pid 7533] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7528] <... futex resumed>) = 0 [pid 7533] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7528] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] memfd_create("syzkaller", 0 [pid 7526] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mkdir("./135", 0777 [pid 7535] <... memfd_create resumed>) = 3 [pid 7526] <... futex resumed>) = 1 [pid 5075] <... mkdir resumed>) = 0 [pid 7529] <... futex resumed>) = 0 [ 111.858726][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.866428][ T52] hfsplus: b-tree write err: -5, ino 4 [ 111.875500][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.882320][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.884282][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.891544][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7529] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7526] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7535] <... mmap resumed>) = 0x7fee02dd3000 [pid 7530] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 7528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7528] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7528] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7530] <... futex resumed>) = 0 [pid 7528] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7535] <... write resumed>) = 524288 [pid 7531] <... write resumed>) = 57344 [pid 7530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7528] <... clone resumed>, parent_tid=[7536], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7536 [pid 7528] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7528] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] munmap(0x7fee02dd3000, 524288 [pid 7531] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7530] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] close(3 [pid 7531] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7535] <... munmap resumed>) = 0 [pid 7531] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 111.902365][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.906998][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.913228][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.920377][ T7531] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.939826][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.949701][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7530] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7536 attached [pid 7535] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7530] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./134/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7535] <... openat resumed>) = 4 [pid 5080] umount2("./134/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7530] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7537 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./134/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7535] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./134/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 ./strace-static-x86_64: Process 7538 attached [pid 7536] set_robust_list(0x7fee02e529e0, 24 [pid 7535] <... ioctl resumed>) = 0 [pid 7530] <... clone resumed>, parent_tid=[7538], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7538 [pid 7526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] rmdir("./134" [pid 7538] set_robust_list(0x7fee02e529e0, 24 [pid 7536] <... set_robust_list resumed>) = 0 [pid 7535] close(3 [pid 7530] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7526] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 5080] mkdir("./135", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7538] <... set_robust_list resumed>) = 0 [pid 7536] creat("./file1", 000 [pid 7535] <... close resumed>) = 0 [pid 7530] <... futex resumed>) = 0 [pid 7538] creat("./file1", 000 [pid 7526] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7538] <... creat resumed>) = 5 [pid 7536] <... creat resumed>) = 5 [pid 7535] mkdir("./bus", 0777 [pid 7530] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7538] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7536] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7533] <... write resumed>) = 57344 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7539 ./strace-static-x86_64: Process 7537 attached ./strace-static-x86_64: Process 7539 attached [pid 7528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7539] set_robust_list(0x555556b055e0, 24 [pid 7537] set_robust_list(0x555556b055e0, 24 [pid 7539] <... set_robust_list resumed>) = 0 [pid 7537] <... set_robust_list resumed>) = 0 [pid 7539] chdir("./135" [pid 7537] chdir("./135" [pid 7539] <... chdir resumed>) = 0 [pid 7537] <... chdir resumed>) = 0 [pid 7539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7539] <... prctl resumed>) = 0 [pid 7537] <... prctl resumed>) = 0 [pid 7539] setpgid(0, 0 [pid 7537] setpgid(0, 0 [pid 7539] <... setpgid resumed>) = 0 [pid 7537] <... setpgid resumed>) = 0 [pid 7535] <... mkdir resumed>) = 0 [pid 7530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7538] <... futex resumed>) = 0 [pid 7537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7536] <... futex resumed>) = 0 [pid 7535] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7533] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7530] exit_group(0 [pid 7526] <... mmap resumed>) = 0x7fee02e32000 [pid 7539] <... openat resumed>) = 3 [pid 7538] close(0 [pid 7537] <... openat resumed>) = 3 [pid 7536] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7533] <... futex resumed>) = 0 [pid 7530] <... exit_group resumed>) = ? [pid 7526] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7531] <... futex resumed>) = ? [pid 7538] <... close resumed>) = ? [pid 7539] write(3, "1000", 4 [pid 7538] +++ exited with 0 +++ [pid 7537] write(3, "1000", 4 [pid 7533] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] exit_group(0 [pid 7526] <... mprotect resumed>) = 0 [pid 7539] <... write resumed>) = 4 [pid 7537] <... write resumed>) = 4 [pid 7536] <... futex resumed>) = ? [pid 7535] <... mount resumed>) = 0 [pid 7533] <... futex resumed>) = ? [pid 7531] +++ exited with 0 +++ [pid 7530] +++ exited with 0 +++ [pid 7528] <... exit_group resumed>) = ? [ 111.955858][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.966147][ T7535] loop2: detected capacity change from 0 to 1024 [ 111.975523][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.983266][ T7533] hfsplus: request for non-existent node 16715520 in B*Tree [ 111.992311][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7526] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7539] close(3 [pid 7537] close(3 [pid 7539] <... close resumed>) = 0 [pid 7537] <... close resumed>) = 0 [pid 7539] symlink("/dev/binderfs", "./binderfs" [pid 7537] symlink("/dev/binderfs", "./binderfs" [pid 7539] <... symlink resumed>) = 0 [pid 7537] <... symlink resumed>) = 0 [pid 7539] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] <... futex resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 7539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7539] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7537] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7536] +++ exited with 0 +++ [pid 7539] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7537] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7533] +++ exited with 0 +++ [pid 7528] +++ exited with 0 +++ ./strace-static-x86_64: Process 7540 attached [pid 7539] <... mprotect resumed>) = 0 [pid 7537] <... mprotect resumed>) = 0 [pid 7535] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7528, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7539] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7537] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7539] <... clone resumed>, parent_tid=[7541], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7541 [pid 7537] <... clone resumed>, parent_tid=[7542], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7542 [pid 7539] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7539] <... futex resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 7539] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7537] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7542 attached [pid 7540] set_robust_list(0x7fee02e529e0, 24 [pid 7535] <... openat resumed>) = 3 [pid 7526] <... clone resumed>, parent_tid=[7540], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7540 [pid 5081] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7530, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 7541 attached [pid 7542] set_robust_list(0x7fee0b1f39e0, 24 [pid 7540] <... set_robust_list resumed>) = 0 [pid 7535] chdir("./bus" [pid 7529] <... write resumed>) = 57344 [pid 7526] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7542] <... set_robust_list resumed>) = 0 [pid 7541] set_robust_list(0x7fee0b1f39e0, 24 [pid 7540] creat("./file1", 000 [pid 7535] <... chdir resumed>) = 0 [pid 7529] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7526] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7542] memfd_create("syzkaller", 0 [pid 5081] <... openat resumed>) = 3 [pid 7542] <... memfd_create resumed>) = 3 [pid 7541] <... set_robust_list resumed>) = 0 [pid 7540] <... creat resumed>) = 5 [pid 7535] ioctl(4, LOOP_CLR_FD [pid 7529] <... futex resumed>) = 0 [pid 7526] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5077] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7541] memfd_create("syzkaller", 0 [pid 7540] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... ioctl resumed>) = 0 [pid 7529] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7542] <... mmap resumed>) = 0x7fee02dd3000 [pid 7541] <... memfd_create resumed>) = 3 [pid 7540] <... futex resumed>) = 0 [pid 7535] close(4 [pid 7526] exit_group(0 [pid 5081] getdents64(3, [pid 5077] fstat(3, [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./137/binderfs" [pid 7542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7535] <... close resumed>) = 0 [pid 7529] <... futex resumed>) = ? [pid 7526] <... exit_group resumed>) = ? [pid 5081] <... unlink resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7542] <... write resumed>) = 524288 [pid 7541] <... mmap resumed>) = 0x7fee02dd3000 [pid 7540] +++ exited with 0 +++ [pid 7535] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] +++ exited with 0 +++ [pid 7526] +++ exited with 0 +++ [pid 5081] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 7542] munmap(0x7fee02dd3000, 524288 [pid 7541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7535] <... futex resumed>) = 1 [pid 7532] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7542] <... munmap resumed>) = 0 [pid 7535] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7526, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7532] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 112.006837][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.016035][ T7529] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.041774][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 112.052668][ T7542] loop1: detected capacity change from 0 to 1024 [pid 5074] unlink("./135/binderfs" [pid 7535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 7542] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7541] <... write resumed>) = 524288 [pid 7535] creat("./bus", 000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7542] <... openat resumed>) = 4 [pid 7535] <... creat resumed>) = 4 [pid 5077] lstat("./136/binderfs", [pid 7542] ioctl(4, LOOP_SET_FD, 3 [pid 7535] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7535] <... futex resumed>) = 1 [pid 7532] <... futex resumed>) = 0 [pid 5077] unlink("./136/binderfs" [pid 7541] munmap(0x7fee02dd3000, 524288 [pid 7535] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... unlink resumed>) = 0 [pid 7541] <... munmap resumed>) = 0 [pid 7535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7532] <... futex resumed>) = 0 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7541] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7535] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7532] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7541] <... openat resumed>) = 4 [pid 7541] ioctl(4, LOOP_SET_FD, 3 [pid 7542] <... ioctl resumed>) = 0 [pid 7542] close(3) = 0 [pid 7542] mkdir("./bus", 0777) = 0 [pid 7541] <... ioctl resumed>) = 0 [pid 7541] close(3) = 0 [pid 7541] mkdir("./bus", 0777) = 0 [pid 7542] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... umount2 resumed>) = 0 [pid 7541] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./137/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./137/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./137") = 0 [pid 5081] mkdir("./138", 0777 [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./136/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./136/bus") = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5077] rmdir("./136") = 0 [pid 5077] mkdir("./137", 0777 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] close(3) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7543 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7532] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7544 [pid 7532] <... futex resumed>) = 0 [pid 7532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7532] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7532] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7545], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7545 [pid 7532] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7532] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7543 attached [pid 7543] set_robust_list(0x555556b055e0, 24) = 0 ./strace-static-x86_64: Process 7544 attached [pid 7543] chdir("./137" [pid 7544] set_robust_list(0x555556b055e0, 24 [pid 7543] <... chdir resumed>) = 0 [pid 7544] <... set_robust_list resumed>) = 0 [pid 7543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7544] chdir("./138" [pid 7543] <... prctl resumed>) = 0 [pid 7542] <... mount resumed>) = 0 [pid 7544] <... chdir resumed>) = 0 [pid 7543] setpgid(0, 0 [pid 7542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7541] <... mount resumed>) = 0 [pid 7544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7543] <... setpgid resumed>) = 0 [pid 7542] <... openat resumed>) = 3 [pid 7541] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7544] <... prctl resumed>) = 0 [pid 7543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7542] chdir("./bus" [pid 7541] <... openat resumed>) = 3 [pid 7544] setpgid(0, 0 [pid 7543] <... openat resumed>) = 3 [pid 7542] <... chdir resumed>) = 0 [ 112.059722][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 112.062009][ T7541] loop4: detected capacity change from 0 to 1024 [ 112.075814][ T52] hfsplus: b-tree write err: -5, ino 4 [ 112.091958][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7541] chdir("./bus"./strace-static-x86_64: Process 7545 attached [pid 7544] <... setpgid resumed>) = 0 [pid 7543] write(3, "1000", 4 [pid 7542] ioctl(4, LOOP_CLR_FD [pid 7541] <... chdir resumed>) = 0 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7543] <... write resumed>) = 4 [pid 7542] <... ioctl resumed>) = 0 [pid 7541] ioctl(4, LOOP_CLR_FD [pid 7544] <... openat resumed>) = 3 [pid 7543] close(3 [pid 7542] close(4 [pid 7541] <... ioctl resumed>) = 0 [pid 7544] write(3, "1000", 4 [pid 7543] <... close resumed>) = 0 [pid 7542] <... close resumed>) = 0 [pid 7541] close(4 [pid 7544] <... write resumed>) = 4 [pid 7543] symlink("/dev/binderfs", "./binderfs" [pid 7542] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] <... close resumed>) = 0 [pid 7544] close(3 [pid 7543] <... symlink resumed>) = 0 [pid 7542] <... futex resumed>) = 1 [pid 7541] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... close resumed>) = 0 [pid 7543] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 1 [pid 7544] symlink("/dev/binderfs", "./binderfs" [pid 7543] <... futex resumed>) = 0 [pid 7541] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7544] <... symlink resumed>) = 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7544] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7544] <... futex resumed>) = 0 [pid 7543] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7543] <... mprotect resumed>) = 0 [pid 7544] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7543] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7539] <... futex resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 7544] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7539] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... mprotect resumed>) = 0 [pid 7543] <... clone resumed>, parent_tid=[7546], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7546 [pid 7544] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7543] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7542] <... futex resumed>) = 0 [pid 7541] <... futex resumed>) = 0 [pid 7539] <... futex resumed>) = 1 [pid 7537] <... futex resumed>) = 1 [pid 7544] <... clone resumed>, parent_tid=[7547], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7547 [pid 7543] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7542] creat("./bus", 000 [pid 7541] creat("./bus", 000 [pid 7539] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7537] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7545] set_robust_list(0x7fee02e529e0, 24 [pid 7544] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... creat resumed>) = 4 [pid 7541] <... creat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7544] <... futex resumed>) = 0 [pid 7542] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7545] <... set_robust_list resumed>) = 0 [pid 7544] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7542] <... futex resumed>) = 1 [pid 7541] <... futex resumed>) = 1 [pid 7539] <... futex resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 5074] lstat("./135/bus", [pid 7545] creat("./file1", 000 [pid 7542] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7539] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7539] <... futex resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7542] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7541] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7539] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7537] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7547 attached [pid 7545] <... creat resumed>) = 5 [pid 5074] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7547] set_robust_list(0x7fee0b1f39e0, 24./strace-static-x86_64: Process 7546 attached ) = 0 [pid 7547] memfd_create("syzkaller", 0 [pid 7546] set_robust_list(0x7fee0b1f39e0, 24 [pid 7547] <... memfd_create resumed>) = 3 [pid 7546] <... set_robust_list resumed>) = 0 [pid 7547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7546] memfd_create("syzkaller", 0 [pid 7547] <... mmap resumed>) = 0x7fee02dd3000 [pid 7546] <... memfd_create resumed>) = 3 [pid 7546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7545] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7545] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7545] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... openat resumed>) = 4 [ 112.124985][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.141884][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.149539][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.158248][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] fstat(4, [pid 7546] <... write resumed>) = 524288 [pid 7547] <... write resumed>) = 524288 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, [pid 7547] munmap(0x7fee02dd3000, 524288 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7546] munmap(0x7fee02dd3000, 524288 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7547] <... munmap resumed>) = 0 [pid 7546] <... munmap resumed>) = 0 [pid 5074] close(4 [pid 7547] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7546] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7547] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 [pid 7546] <... openat resumed>) = 4 [ 112.169196][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.171378][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.182602][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.199047][ T7547] loop5: detected capacity change from 0 to 1024 [ 112.204044][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.206343][ T7546] loop3: detected capacity change from 0 to 1024 [pid 7546] ioctl(4, LOOP_SET_FD, 3 [pid 7539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] rmdir("./135/bus" [pid 7547] <... ioctl resumed>) = 0 [pid 7547] close(3) = 0 [pid 7547] mkdir("./bus", 0777) = 0 [pid 7547] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7546] <... ioctl resumed>) = 0 [pid 7546] close(3) = 0 [pid 7546] mkdir("./bus", 0777) = 0 [pid 7546] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7539] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... write resumed>) = 57344 [pid 5074] <... rmdir resumed>) = 0 [pid 7539] <... futex resumed>) = 0 [pid 7539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7539] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7539] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7548], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7548 [pid 7539] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7539] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7537] <... futex resumed>) = 0 [pid 7537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7535] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7548 attached [pid 7547] <... mount resumed>) = 0 [pid 7546] <... mount resumed>) = 0 [pid 7537] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7535] <... futex resumed>) = 0 [pid 7532] exit_group(0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7548] set_robust_list(0x7fee02e529e0, 24 [pid 7535] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] close(3 [pid 7548] <... set_robust_list resumed>) = 0 [pid 7547] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7546] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7545] <... futex resumed>) = ? [pid 7537] <... mprotect resumed>) = 0 [pid 7535] <... futex resumed>) = ? [pid 7532] <... exit_group resumed>) = ? [pid 7547] <... openat resumed>) = 3 [pid 7546] <... openat resumed>) = 3 [pid 7537] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7547] chdir("./bus" [pid 7546] chdir("./bus" [pid 7547] <... chdir resumed>) = 0 [pid 7546] <... chdir resumed>) = 0 [pid 7537] <... clone resumed>, parent_tid=[7549], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7549 [pid 7547] ioctl(4, LOOP_CLR_FD [pid 7546] ioctl(4, LOOP_CLR_FD [pid 7537] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... ioctl resumed>) = 0 [pid 7546] <... ioctl resumed>) = 0 [pid 7537] <... futex resumed>) = 0 [pid 7547] close(4 [pid 7546] close(4 [pid 7537] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7549 attached [pid 7548] creat("./file1", 000 [pid 7547] <... close resumed>) = 0 [pid 7546] <... close resumed>) = 0 [pid 7545] +++ exited with 0 +++ [pid 7535] +++ exited with 0 +++ [pid 7532] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 7547] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... futex resumed>) = 1 [pid 7546] <... futex resumed>) = 1 [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 7547] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7544] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 112.213010][ T7535] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.219544][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.226758][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.238454][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.242413][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.260136][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 7547] creat("./bus", 000 [pid 7546] creat("./bus", 000 [pid 7544] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7543] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7549] set_robust_list(0x7fee02e529e0, 24 [pid 7548] <... creat resumed>) = 5 [pid 7547] <... creat resumed>) = 4 [pid 7546] <... creat resumed>) = 4 [pid 5074] rmdir("./135" [pid 7549] <... set_robust_list resumed>) = 0 [pid 7548] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... write resumed>) = 57344 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7532, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7549] creat("./file1", 000 [pid 7548] <... futex resumed>) = 1 [pid 7547] <... futex resumed>) = 1 [pid 7546] <... futex resumed>) = 1 [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 7542] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] <... write resumed>) = 57344 [pid 7539] <... futex resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... rmdir resumed>) = 0 [pid 7549] <... creat resumed>) = 5 [pid 7548] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7547] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7544] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... futex resumed>) = 0 [pid 7541] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] mkdir("./136", 0777 [pid 7549] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 7542] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7549] <... futex resumed>) = 1 [pid 7547] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7546] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7544] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7543] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7541] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7537] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7549] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7539] exit_group(0 [pid 7537] exit_group(0 [pid 5076] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7549] <... futex resumed>) = ? [pid 7548] <... futex resumed>) = ? [pid 7542] <... futex resumed>) = ? [pid 7541] <... futex resumed>) = ? [pid 7539] <... exit_group resumed>) = ? [pid 7537] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7549] +++ exited with 0 +++ [pid 7548] +++ exited with 0 +++ [pid 7542] +++ exited with 0 +++ [pid 7541] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7539] +++ exited with 0 +++ [pid 7537] +++ exited with 0 +++ [pid 5076] fstat(3, [pid 5074] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7539, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7550 [pid 5080] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] lstat("./136/binderfs", [pid 5080] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] fstat(3, [pid 5076] unlink("./136/binderfs" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./135/binderfs") = 0 [ 112.268660][ T7542] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.283807][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.291156][ T7541] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.309900][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7537, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 7550 attached [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7550] set_robust_list(0x555556b055e0, 24 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7544] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7543] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7550] <... set_robust_list resumed>) = 0 [pid 7550] chdir("./136" [pid 7543] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [ 112.318847][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.320779][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.326631][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.334695][ T9] hfsplus: b-tree write err: -5, ino 4 [ 112.341098][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.354160][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 112.354601][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.367909][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 5075] umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7550] <... prctl resumed>) = 0 [pid 7544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7550] setpgid(0, 0 [pid 7544] <... mmap resumed>) = 0x7fee02e32000 [pid 7543] <... mmap resumed>) = 0x7fee02e32000 [pid 7550] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7543] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 7544] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7543] <... mprotect resumed>) = 0 [pid 5075] fstat(3, [pid 7550] <... openat resumed>) = 3 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7544] <... mprotect resumed>) = 0 [pid 5075] getdents64(3, [pid 7543] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7544] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7550] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7550] <... write resumed>) = 4 [pid 5075] lstat("./135/binderfs", ./strace-static-x86_64: Process 7551 attached [pid 7550] close(3 [pid 7544] <... clone resumed>, parent_tid=[7552], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7552 [pid 7543] <... clone resumed>, parent_tid=[7551], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7551 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./136/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./136/bus") = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./136") = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] mkdir("./137", 0777 [pid 5080] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7551] set_robust_list(0x7fee02e529e0, 24 [pid 7550] <... close resumed>) = 0 [pid 7544] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7552 attached [pid 5080] lstat("./135/bus", [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7552] set_robust_list(0x7fee02e529e0, 24 [pid 7551] <... set_robust_list resumed>) = 0 [pid 7550] symlink("/dev/binderfs", "./binderfs" [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] unlink("./135/binderfs" [pid 7552] <... set_robust_list resumed>) = 0 [pid 7551] creat("./file1", 000 [pid 7550] <... symlink resumed>) = 0 [pid 7544] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7543] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 7552] creat("./file1", 000 [pid 7550] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 112.375490][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.387015][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.394943][ T7546] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.402606][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.420348][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7550] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7553 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./135/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./135" [pid 7550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7552] <... creat resumed>) = 5 [pid 7551] <... creat resumed>) = 5 [pid 7550] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7546] <... write resumed>) = 57344 [pid 5080] mkdir("./136", 0777 [pid 7552] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7547] <... write resumed>) = 57344 [pid 7546] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... mkdir resumed>) = 0 [pid 7552] <... futex resumed>) = 1 [pid 7551] <... futex resumed>) = 1 [pid 7550] <... mprotect resumed>) = 0 [pid 7546] <... futex resumed>) = 0 [pid 7544] <... futex resumed>) = 0 [pid 7543] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7553 attached [pid 7552] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... openat resumed>) = 3 [pid 7553] set_robust_list(0x555556b055e0, 24 [pid 7551] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] exit_group(0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7553] <... set_robust_list resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7553] chdir("./137" [pid 5080] close(3 [pid 7551] <... futex resumed>) = ? [pid 7550] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7547] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] <... futex resumed>) = ? [pid 7543] <... exit_group resumed>) = ? [pid 7551] +++ exited with 0 +++ [pid 7547] <... futex resumed>) = 0 [pid 7546] +++ exited with 0 +++ [pid 7544] exit_group(0 [pid 7543] +++ exited with 0 +++ [pid 5080] <... close resumed>) = 0 [pid 7552] <... futex resumed>) = ? [pid 7550] <... clone resumed>, parent_tid=[7554], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7554 [pid 7544] <... exit_group resumed>) = ? [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7554 attached [pid 7553] <... chdir resumed>) = 0 [pid 7552] +++ exited with 0 +++ [pid 7550] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7543, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7554] set_robust_list(0x7fee0b1f39e0, 24 [pid 7553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7550] <... futex resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7555 [pid 5077] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7554] <... set_robust_list resumed>) = 0 [pid 7553] <... prctl resumed>) = 0 [pid 7550] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7554] memfd_create("syzkaller", 0 [pid 7553] setpgid(0, 0 [pid 7547] +++ exited with 0 +++ [pid 7544] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] lstat("./135/bus", [pid 7554] <... memfd_create resumed>) = 3 [pid 7553] <... setpgid resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7544, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] <... openat resumed>) = 3 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] fstat(3, [pid 5075] umount2("./135/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7554] <... mmap resumed>) = 0x7fee02dd3000 [pid 7553] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7553] write(3, "1000", 4 [pid 5081] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5075] openat(AT_FDCWD, "./135/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7553] <... write resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7555 attached [pid 7553] close(3 [pid 5081] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 4 [pid 7555] set_robust_list(0x555556b055e0, 24 [pid 5081] <... openat resumed>) = 3 [pid 5077] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(4, [pid 7555] <... set_robust_list resumed>) = 0 [pid 7553] <... close resumed>) = 0 [pid 5081] fstat(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7554] <... write resumed>) = 524288 [pid 7553] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./137/binderfs", [pid 5075] getdents64(4, [pid 7554] munmap(0x7fee02dd3000, 524288 [pid 7553] <... symlink resumed>) = 0 [pid 5081] getdents64(3, [pid 7554] <... munmap resumed>) = 0 [pid 7553] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7553] <... futex resumed>) = 0 [pid 5081] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./137/binderfs" [pid 7554] <... openat resumed>) = 4 [pid 7553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7554] ioctl(4, LOOP_SET_FD, 3 [pid 7553] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] lstat("./138/binderfs", [pid 5077] <... unlink resumed>) = 0 [ 112.420386][ T7547] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7555] chdir("./136" [pid 7553] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 7555] <... chdir resumed>) = 0 [pid 5081] unlink("./138/binderfs" [pid 5075] <... close resumed>) = 0 [pid 7555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... unlink resumed>) = 0 [pid 5075] rmdir("./135/bus" [pid 7555] <... prctl resumed>) = 0 [pid 5081] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7555] setpgid(0, 0 [pid 5075] getdents64(3, [pid 7555] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 7555] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 7555] write(3, "1000", 4 [pid 5075] rmdir("./135" [pid 7554] <... ioctl resumed>) = 0 [pid 7553] <... mprotect resumed>) = 0 [pid 7554] close(3 [pid 7553] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7554] <... close resumed>) = 0 [pid 7554] mkdir("./bus", 0777 [pid 7553] <... clone resumed>, parent_tid=[7556], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7556 [pid 7554] <... mkdir resumed>) = 0 [pid 7553] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7554] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7553] <... futex resumed>) = 0 [pid 7553] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... rmdir resumed>) = 0 [pid 7554] <... mount resumed>) = 0 ./strace-static-x86_64: Process 7556 attached [pid 7555] <... write resumed>) = 4 [pid 7554] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./136", 0777 [pid 7556] set_robust_list(0x7fee0b1f39e0, 24 [pid 7555] close(3 [pid 7554] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7556] <... set_robust_list resumed>) = 0 [pid 7555] <... close resumed>) = 0 [pid 7554] chdir("./bus" [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7556] memfd_create("syzkaller", 0 [pid 7555] symlink("/dev/binderfs", "./binderfs" [pid 7554] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7556] <... memfd_create resumed>) = 3 [pid 7555] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 7555] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7554] ioctl(4, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7554] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7555] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7554] close(4 [pid 7555] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7554] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7557 [pid 7555] <... mprotect resumed>) = 0 [pid 7554] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7554] <... futex resumed>) = 1 [pid 7550] <... futex resumed>) = 0 [pid 7554] creat("./bus", 000 [pid 7550] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... clone resumed>, parent_tid=[7558], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7558 [pid 7554] <... creat resumed>) = 4 [pid 7550] <... futex resumed>) = 0 [pid 7555] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7554] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7555] <... futex resumed>) = 0 [pid 7554] <... futex resumed>) = 0 [pid 7550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7555] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7554] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7550] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7550] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7558 attached [pid 7558] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7558] memfd_create("syzkaller", 0) = 3 [pid 7558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7557 attached [pid 7558] <... write resumed>) = 524288 [pid 7556] <... mmap resumed>) = 0x7fee02dd3000 [pid 7557] set_robust_list(0x555556b055e0, 24 [pid 7556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... umount2 resumed>) = 0 [pid 7557] <... set_robust_list resumed>) = 0 [pid 7556] <... write resumed>) = 524288 [pid 7557] chdir("./136") = 0 [pid 7557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7557] setpgid(0, 0) = 0 [pid 7557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7557] write(3, "1000", 4) = 4 [pid 7557] close(3) = 0 [pid 7557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7557] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7558] munmap(0x7fee02dd3000, 524288 [pid 7557] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7557] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7558] <... munmap resumed>) = 0 [pid 7557] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7556] munmap(0x7fee02dd3000, 524288 [pid 7558] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7556] <... munmap resumed>) = 0 [pid 5081] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 7558] <... openat resumed>) = 4 [pid 7557] <... clone resumed>, parent_tid=[7559], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7559 [pid 7556] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 112.473302][ T7554] loop0: detected capacity change from 0 to 1024 [ 112.480159][ T52] hfsplus: b-tree write err: -5, ino 4 [ 112.487200][ T9] hfsplus: b-tree write err: -5, ino 4 [ 112.509077][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7558] ioctl(4, LOOP_SET_FD, 3 [pid 7557] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7556] <... openat resumed>) = 4 [pid 5081] lstat("./138/bus", [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7559 attached [pid 7558] <... ioctl resumed>) = 0 [pid 7557] <... futex resumed>) = 0 [pid 7556] ioctl(4, LOOP_SET_FD, 3 [pid 7559] set_robust_list(0x7fee0b1f39e0, 24 [pid 7557] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./137/bus", [pid 7559] <... set_robust_list resumed>) = 0 [pid 7550] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7559] memfd_create("syzkaller", 0 [pid 7550] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7559] <... memfd_create resumed>) = 3 [pid 7550] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7559] <... mmap resumed>) = 0x7fee02dd3000 [pid 7550] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7558] close(3) = 0 [pid 7558] mkdir("./bus", 0777 [pid 7559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7550] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] fstat(4, [pid 5077] <... openat resumed>) = 4 [pid 7550] <... mprotect resumed>) = 0 [pid 5077] fstat(4, [pid 7550] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 7550] <... clone resumed>, parent_tid=[7560], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7560 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7550] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 7550] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7550] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] close(4 [pid 5081] rmdir("./138/bus" [pid 5077] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] rmdir("./137/bus" [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5081] close(3 [pid 5077] getdents64(3, [pid 7559] <... write resumed>) = 524288 [pid 5081] <... close resumed>) = 0 [pid 7558] <... mkdir resumed>) = 0 [pid 5081] rmdir("./138" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7558] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... rmdir resumed>) = 0 [pid 7559] munmap(0x7fee02dd3000, 524288 [pid 5081] mkdir("./139", 0777 [pid 5077] close(3) = 0 ./strace-static-x86_64: Process 7560 attached [pid 7559] <... munmap resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] rmdir("./137" [pid 7559] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7559] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... rmdir resumed>) = 0 [pid 7559] ioctl(4, LOOP_SET_FD, 3 [ 112.536126][ T7558] loop4: detected capacity change from 0 to 1024 [ 112.536310][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.544161][ T7556] loop2: detected capacity change from 0 to 1024 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] mkdir("./138", 0777 [pid 7560] set_robust_list(0x7fee02e529e0, 24 [pid 7558] <... mount resumed>) = 0 [pid 7560] <... set_robust_list resumed>) = 0 [pid 7558] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7560] creat("./file1", 000 [pid 7558] <... openat resumed>) = 3 [pid 7560] <... creat resumed>) = 5 [pid 7558] chdir("./bus" [pid 7560] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7558] <... chdir resumed>) = 0 [pid 7560] <... futex resumed>) = 1 [pid 7558] ioctl(4, LOOP_CLR_FD [pid 7560] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] <... ioctl resumed>) = 0 [pid 7558] close(4) = 0 [pid 7550] <... futex resumed>) = 0 [pid 7558] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7558] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7555] <... futex resumed>) = 0 [pid 7555] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7558] <... futex resumed>) = 0 [pid 7555] <... futex resumed>) = 1 [pid 7558] creat("./bus", 000 [pid 5077] <... mkdir resumed>) = 0 [pid 7555] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7558] <... creat resumed>) = 4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7558] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7558] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7556] <... ioctl resumed>) = 0 [pid 7556] close(3) = 0 [pid 7556] mkdir("./bus", 0777) = 0 [pid 7556] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] close(3 [pid 5077] <... openat resumed>) = 3 [pid 7559] <... ioctl resumed>) = 0 [pid 7555] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 7556] <... mount resumed>) = 0 [pid 7556] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7556] chdir("./bus") = 0 [pid 7559] close(3 [pid 7558] <... futex resumed>) = 0 [pid 7555] <... futex resumed>) = 1 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7558] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7556] ioctl(4, LOOP_CLR_FD) = 0 [pid 7556] close(4) = 0 [pid 7559] <... close resumed>) = 0 [pid 7556] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7553] <... futex resumed>) = 0 [pid 7556] creat("./bus", 000 [pid 7553] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7556] <... creat resumed>) = 4 [pid 7553] <... futex resumed>) = 0 [pid 7556] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7556] <... futex resumed>) = 0 [pid 7553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7556] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 112.578385][ T7559] loop1: detected capacity change from 0 to 1024 [ 112.591935][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.600176][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.610469][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7553] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7553] <... futex resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7561 attached [pid 7559] mkdir("./bus", 0777 [pid 7553] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7561 [pid 5077] close(3 [pid 7561] set_robust_list(0x555556b055e0, 24 [pid 7559] <... mkdir resumed>) = 0 [pid 7554] <... write resumed>) = 57344 [pid 5077] <... close resumed>) = 0 [pid 7561] <... set_robust_list resumed>) = 0 [pid 7559] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7554] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] exit_group(0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7560] <... futex resumed>) = ? [pid 7559] <... mount resumed>) = 0 [pid 7554] <... futex resumed>) = ? [pid 7550] <... exit_group resumed>) = ? [pid 7560] +++ exited with 0 +++ [pid 7559] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7554] +++ exited with 0 +++ [pid 7550] +++ exited with 0 +++ [pid 7561] chdir("./139" [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7562 [pid 7559] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7550, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7561] <... chdir resumed>) = 0 [pid 7559] chdir("./bus") = 0 [pid 7561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7559] ioctl(4, LOOP_CLR_FD) = 0 [pid 5074] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7561] <... prctl resumed>) = 0 [pid 7559] close(4) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7561] setpgid(0, 0 [pid 7559] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7561] <... setpgid resumed>) = 0 [pid 7559] <... futex resumed>) = 1 [pid 7557] <... futex resumed>) = 0 [pid 7559] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7557] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 7559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7557] <... futex resumed>) = 0 [pid 5074] fstat(3, ./strace-static-x86_64: Process 7562 attached [pid 7561] <... openat resumed>) = 3 [pid 7559] creat("./bus", 000 [pid 7562] set_robust_list(0x555556b055e0, 24 [pid 7559] <... creat resumed>) = 4 [pid 7562] <... set_robust_list resumed>) = 0 [pid 7559] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7562] chdir("./138" [pid 7559] <... futex resumed>) = 0 [pid 7562] <... chdir resumed>) = 0 [pid 7559] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7562] setpgid(0, 0) = 0 [pid 7562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7562] write(3, "1000", 4) = 4 [pid 7562] close(3) = 0 [pid 7562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7562] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7562] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7557] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7562] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7561] write(3, "1000", 4) = 4 [pid 7557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] getdents64(3, [pid 7562] <... clone resumed>, parent_tid=[7563], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7563 [pid 7561] close(3 [pid 7562] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7561] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7561] symlink("/dev/binderfs", "./binderfs" [pid 7557] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7562] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7562] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] lstat("./136/binderfs", [pid 7561] <... symlink resumed>) = 0 [pid 7559] <... futex resumed>) = 0 [pid 7557] <... futex resumed>) = 1 [pid 7561] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 112.622450][ T7554] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.624077][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.655033][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.667943][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7557] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7561] <... futex resumed>) = 0 [pid 7555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7555] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7555] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7555] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7564], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7564 [pid 7555] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7563 attached [pid 7563] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7563] memfd_create("syzkaller", 0) = 3 [pid 7563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7564 attached [pid 7564] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7564] creat("./file1", 000 [pid 7561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7553] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] unlink("./136/binderfs" [pid 7553] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 7553] <... futex resumed>) = 0 [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7561] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7561] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7553] <... mmap resumed>) = 0x7fee02e32000 [pid 7561] <... mprotect resumed>) = 0 [pid 7553] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7561] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7553] <... mprotect resumed>) = 0 [pid 7561] <... clone resumed>, parent_tid=[7565], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7565 [pid 7553] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7563] <... write resumed>) = 524288 [pid 7563] munmap(0x7fee02dd3000, 524288) = 0 [pid 7563] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7563] ioctl(4, LOOP_SET_FD, 3 [pid 7561] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7553] <... clone resumed>, parent_tid=[7566], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7566 ./strace-static-x86_64: Process 7565 attached [pid 5074] <... umount2 resumed>) = 0 [pid 7563] <... ioctl resumed>) = 0 [pid 7563] close(3) = 0 [pid 7563] mkdir("./bus", 0777) = 0 [ 112.668645][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.681564][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.698738][ T9] hfsplus: b-tree write err: -5, ino 4 [ 112.701471][ T7563] loop3: detected capacity change from 0 to 1024 [ 112.718062][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7565] set_robust_list(0x7fee0b1f39e0, 24 [pid 7561] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7553] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7563] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7566 attached [pid 7566] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7566] creat("./file1", 000 [pid 7565] <... set_robust_list resumed>) = 0 [pid 7557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7553] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7565] memfd_create("syzkaller", 0 [pid 7557] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] lstat("./136/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7557] <... futex resumed>) = 0 [pid 7557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7565] <... memfd_create resumed>) = 3 [pid 5074] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7557] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7557] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7563] <... mount resumed>) = 0 [pid 7557] <... mprotect resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7565] <... mmap resumed>) = 0x7fee02dd3000 [pid 7563] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7557] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] fstat(4, [pid 7563] <... openat resumed>) = 3 [pid 7563] chdir("./bus") = 0 [pid 7563] ioctl(4, LOOP_CLR_FD) = 0 [pid 7563] close(4./strace-static-x86_64: Process 7567 attached [pid 7565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7563] <... close resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7563] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7562] <... futex resumed>) = 0 [pid 7563] creat("./bus", 000 [pid 7562] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7563] <... creat resumed>) = 4 [pid 7562] <... futex resumed>) = 0 [pid 7563] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7562] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... futex resumed>) = 0 [pid 7562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7563] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 112.721863][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.726053][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.738679][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.744380][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.761266][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.767507][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7562] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] set_robust_list(0x7fee02e529e0, 24 [pid 7565] <... write resumed>) = 524288 [pid 7562] <... futex resumed>) = 0 [pid 7557] <... clone resumed>, parent_tid=[7567], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7567 [pid 5074] getdents64(4, [pid 7562] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7567] <... set_robust_list resumed>) = 0 [pid 7565] munmap(0x7fee02dd3000, 524288 [pid 7557] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7566] <... creat resumed>) = 5 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7566] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7566] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7567] creat("./file1", 000 [pid 7565] <... munmap resumed>) = 0 [pid 7557] <... futex resumed>) = 0 [pid 7553] <... futex resumed>) = 0 [pid 5074] getdents64(4, [pid 7567] <... creat resumed>) = 5 [pid 7557] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7567] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7565] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] close(4 [pid 7567] <... futex resumed>) = 1 [pid 7565] <... openat resumed>) = 4 [pid 7564] <... creat resumed>) = 5 [pid 7557] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7564] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 112.771205][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.786279][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.795556][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.798057][ T7556] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.803781][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.810748][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7564] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7567] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] ioctl(4, LOOP_SET_FD, 3 [pid 7556] <... write resumed>) = 57344 [pid 5074] rmdir("./136/bus" [pid 7562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7562] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7562] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7562] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7568], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7568 [pid 7562] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7562] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7568 attached [pid 7568] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7568] creat("./file1", 000 [pid 7565] <... ioctl resumed>) = 0 [pid 7558] <... write resumed>) = 57344 [pid 7556] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 7556] <... futex resumed>) = ? [pid 7553] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 7556] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./136") = 0 [pid 7565] close(3 [pid 5074] mkdir("./137", 0777 [pid 7565] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7565] mkdir("./bus", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7565] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7565] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7566] <... futex resumed>) = ? [pid 7559] <... write resumed>) = 57344 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 7566] +++ exited with 0 +++ [pid 7553] +++ exited with 0 +++ [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7553, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7569 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./137/binderfs") = 0 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7558] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7558] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7555] exit_group(0 [pid 7565] <... mount resumed>) = 0 [pid 7564] <... futex resumed>) = ? [pid 7559] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7558] <... futex resumed>) = ? [pid 7555] <... exit_group resumed>) = ? [pid 7558] +++ exited with 0 +++ [pid 7557] exit_group(0 [pid 7567] <... futex resumed>) = ? [pid 7557] <... exit_group resumed>) = ? [pid 7567] +++ exited with 0 +++ ./strace-static-x86_64: Process 7569 attached [pid 7569] set_robust_list(0x555556b055e0, 24) = 0 [pid 7569] chdir("./137") = 0 [ 112.819064][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.825458][ T7558] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.836260][ T7559] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.839878][ T7565] loop5: detected capacity change from 0 to 1024 [ 112.849325][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7569] setpgid(0, 0) = 0 [pid 7569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7565] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7564] +++ exited with 0 +++ [pid 7559] <... futex resumed>) = ? [pid 7555] +++ exited with 0 +++ [pid 7569] write(3, "1000", 4 [pid 7565] <... openat resumed>) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7555, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7569] <... write resumed>) = 4 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7569] close(3 [pid 7559] +++ exited with 0 +++ [pid 7557] +++ exited with 0 +++ [pid 5080] <... restart_syscall resumed>) = 0 [pid 7569] <... close resumed>) = 0 [pid 7565] chdir("./bus" [pid 7569] symlink("/dev/binderfs", "./binderfs" [pid 7565] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7557, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7569] <... symlink resumed>) = 0 [pid 7565] ioctl(4, LOOP_CLR_FD [pid 5080] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7569] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7565] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 7569] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... openat resumed>) = 3 [pid 7569] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] fstat(3, [pid 5075] umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7569] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7569] <... mprotect resumed>) = 0 [pid 7565] close(4 [pid 5080] getdents64(3, [pid 5075] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7569] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7565] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7565] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 7569] <... clone resumed>, parent_tid=[7570], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7570 [pid 7565] <... futex resumed>) = 1 [pid 7561] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7569] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7565] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./136/binderfs", [pid 5076] lstat("./137/bus", [pid 5075] getdents64(3, [pid 7569] <... futex resumed>) = 0 [pid 7565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7561] <... futex resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7569] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7565] creat("./bus", 000 [pid 7561] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] unlink("./136/binderfs" [pid 5076] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7570 attached [pid 7565] <... creat resumed>) = 4 [pid 5080] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7570] set_robust_list(0x7fee0b1f39e0, 24 [pid 7565] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] lstat("./136/binderfs", [pid 7570] <... set_robust_list resumed>) = 0 [pid 7565] <... futex resumed>) = 1 [pid 7561] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7570] memfd_create("syzkaller", 0 [pid 5075] unlink("./136/binderfs" [pid 7570] <... memfd_create resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 7570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7570] <... mmap resumed>) = 0x7fee02dd3000 [pid 7568] <... creat resumed>) = 5 [pid 7565] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7570] munmap(0x7fee02dd3000, 524288) = 0 [pid 7570] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7561] <... futex resumed>) = 0 [pid 7568] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7561] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7568] <... futex resumed>) = 0 [pid 7565] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] fstat(4, [pid 5075] <... umount2 resumed>) = 0 [pid 7568] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 112.875067][ T33] hfsplus: b-tree write err: -5, ino 4 [ 112.898617][ T33] hfsplus: b-tree write err: -5, ino 4 [ 112.904880][ T9] hfsplus: b-tree write err: -5, ino 4 [ 112.911507][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./136/bus", [pid 5080] lstat("./136/bus", [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./136/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] openat(AT_FDCWD, "./136/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5080] <... openat resumed>) = 4 [pid 5075] fstat(4, [pid 5080] fstat(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 5080] getdents64(4, [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5080] getdents64(4, [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5080] close(4 [pid 5075] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5075] rmdir("./136/bus" [pid 5080] rmdir("./136/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5080] getdents64(3, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 7570] ioctl(4, LOOP_SET_FD, 3 [pid 5080] close(3 [pid 5075] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] rmdir("./136" [pid 5080] rmdir("./136" [pid 5075] <... rmdir resumed>) = 0 [pid 7561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./137", 0777 [pid 5080] mkdir("./137", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5080] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 5080] close(3 [pid 5075] <... close resumed>) = 0 [pid 7561] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7561] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7571 [pid 7561] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7572 [pid 7561] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7572 attached [ 112.934113][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.941848][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.943071][ T7570] loop0: detected capacity change from 0 to 1024 [ 112.954646][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.966822][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7571 attached [pid 7561] <... mprotect resumed>) = 0 [pid 5076] rmdir("./137/bus" [pid 7572] set_robust_list(0x555556b055e0, 24) = 0 [pid 7572] chdir("./137") = 0 [pid 7572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7572] setpgid(0, 0) = 0 [pid 7572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7572] write(3, "1000", 4) = 4 [pid 7572] close(3) = 0 [pid 7572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7571] set_robust_list(0x555556b055e0, 24 [pid 7561] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7572] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7571] <... set_robust_list resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7572] <... futex resumed>) = 0 [pid 7571] chdir("./137" [pid 7561] <... clone resumed>, parent_tid=[7573], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7573 [pid 5076] getdents64(3, [pid 7572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7571] <... chdir resumed>) = 0 [pid 7561] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7572] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7561] <... futex resumed>) = 0 [pid 5076] close(3./strace-static-x86_64: Process 7573 attached [pid 7572] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7571] <... prctl resumed>) = 0 [pid 7561] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7573] set_robust_list(0x7fee02e529e0, 24 [pid 7572] <... mprotect resumed>) = 0 [pid 7571] setpgid(0, 0 [pid 7570] <... ioctl resumed>) = 0 [pid 7565] <... write resumed>) = 57344 [pid 7563] <... write resumed>) = 57344 [pid 5076] <... close resumed>) = 0 [pid 7573] <... set_robust_list resumed>) = 0 [pid 7572] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7571] <... setpgid resumed>) = 0 [pid 7570] close(3 [pid 7565] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7563] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./137" [pid 7573] creat("./file1", 000 [pid 7571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7570] <... close resumed>) = 0 [pid 7565] <... futex resumed>) = 0 [pid 7563] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7574 attached [pid 7573] <... creat resumed>) = 5 [pid 7572] <... clone resumed>, parent_tid=[7574], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7574 [pid 7571] <... openat resumed>) = 3 [pid 7570] mkdir("./bus", 0777 [pid 7565] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7563] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7562] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 7574] set_robust_list(0x7fee0b1f39e0, 24 [pid 7573] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7572] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7571] write(3, "1000", 4 [pid 7570] <... mkdir resumed>) = 0 [pid 7568] <... futex resumed>) = ? [pid 7563] <... futex resumed>) = ? [pid 7562] <... exit_group resumed>) = ? [pid 7574] <... set_robust_list resumed>) = 0 [pid 7573] <... futex resumed>) = 1 [pid 7572] <... futex resumed>) = 0 [pid 7571] <... write resumed>) = 4 [pid 7570] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7568] +++ exited with 0 +++ [pid 7563] +++ exited with 0 +++ [pid 7562] +++ exited with 0 +++ [pid 7561] <... futex resumed>) = 0 [pid 5076] mkdir("./138", 0777 [pid 7561] exit_group(0 [pid 7574] memfd_create("syzkaller", 0) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 7572] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7571] close(3 [pid 7565] <... futex resumed>) = ? [pid 7561] <... exit_group resumed>) = ? [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7562, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7574] <... mmap resumed>) = 0x7fee02dd3000 [pid 7573] +++ exited with 0 +++ [pid 7571] <... close resumed>) = 0 [pid 7570] <... mount resumed>) = 0 [pid 7565] +++ exited with 0 +++ [pid 7561] +++ exited with 0 +++ [pid 5077] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 7574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7571] symlink("/dev/binderfs", "./binderfs" [pid 7570] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7561, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7571] <... symlink resumed>) = 0 [pid 7570] <... openat resumed>) = 3 [pid 7570] chdir("./bus" [pid 7571] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] <... chdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7571] <... futex resumed>) = 0 [pid 7570] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7570] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 5076] close(3 [pid 7571] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7570] close(4 [pid 5081] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(3, [pid 7574] <... write resumed>) = 524288 [pid 7571] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7570] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 7574] munmap(0x7fee02dd3000, 524288 [pid 7571] <... mprotect resumed>) = 0 [pid 7570] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5077] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7574] <... munmap resumed>) = 0 [pid 7571] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7570] <... futex resumed>) = 1 [pid 7569] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7574] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7570] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7569] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5077] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7575 [pid 7574] <... openat resumed>) = 4 [pid 7571] <... clone resumed>, parent_tid=[7576], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7576 [pid 7570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7569] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7576 attached ./strace-static-x86_64: Process 7575 attached [ 112.977804][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.984402][ T7563] hfsplus: request for non-existent node 16715520 in B*Tree [ 112.986106][ T7565] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7574] ioctl(4, LOOP_SET_FD, 3 [pid 7571] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] creat("./bus", 000 [pid 7569] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./138/binderfs", [pid 7576] set_robust_list(0x7fee0b1f39e0, 24 [pid 7575] set_robust_list(0x555556b055e0, 24 [pid 7571] <... futex resumed>) = 0 [pid 7570] <... creat resumed>) = 4 [pid 7576] <... set_robust_list resumed>) = 0 [pid 7575] <... set_robust_list resumed>) = 0 [pid 7570] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] memfd_create("syzkaller", 0 [pid 7575] chdir("./138" [pid 7570] <... futex resumed>) = 1 [pid 7569] <... futex resumed>) = 0 [pid 7576] <... memfd_create resumed>) = 3 [pid 7575] <... chdir resumed>) = 0 [pid 7570] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7569] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7575] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7569] <... futex resumed>) = 0 [pid 7576] <... mmap resumed>) = 0x7fee02dd3000 [pid 7575] <... prctl resumed>) = 0 [pid 7570] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7569] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7574] <... ioctl resumed>) = 0 [pid 7571] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7574] close(3 [pid 5081] lstat("./139/binderfs", [pid 5077] unlink("./138/binderfs" [pid 7574] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7574] mkdir("./bus", 0777 [pid 5081] unlink("./139/binderfs" [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7575] setpgid(0, 0 [pid 7574] <... mkdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 7574] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7576] <... write resumed>) = 524288 [pid 7575] <... setpgid resumed>) = 0 [pid 7574] <... mount resumed>) = 0 [pid 7574] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7574] chdir("./bus") = 0 [pid 7574] ioctl(4, LOOP_CLR_FD) = 0 [pid 7574] close(4 [pid 7576] munmap(0x7fee02dd3000, 524288 [pid 7574] <... close resumed>) = 0 [pid 7574] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7576] <... munmap resumed>) = 0 [pid 7575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7574] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] <... futex resumed>) = 0 [pid 7576] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7572] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] <... openat resumed>) = 4 [ 113.040057][ T7574] loop4: detected capacity change from 0 to 1024 [ 113.046382][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.055047][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.057861][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.068563][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.073887][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.076813][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7572] <... futex resumed>) = 0 [pid 7576] ioctl(4, LOOP_SET_FD, 3 [pid 7572] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7574] creat("./bus", 000 [pid 7575] <... openat resumed>) = 3 [pid 7575] write(3, "1000", 4) = 4 [pid 7575] close(3) = 0 [pid 7575] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... umount2 resumed>) = 0 [pid 7574] <... creat resumed>) = 4 [pid 7574] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7575] <... symlink resumed>) = 0 [pid 7574] <... futex resumed>) = 1 [pid 7572] <... futex resumed>) = 0 [pid 5081] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7575] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7574] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7575] <... futex resumed>) = 0 [pid 7574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7572] <... futex resumed>) = 0 [pid 7569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] lstat("./139/bus", [pid 7575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7574] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7572] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7569] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7575] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7569] <... futex resumed>) = 0 [pid 7575] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7575] <... mprotect resumed>) = 0 [pid 7575] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7569] <... mmap resumed>) = 0x7fee02e32000 [pid 7575] <... clone resumed>, parent_tid=[7577], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7577 [pid 7575] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7575] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7569] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7569] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7577 attached [pid 7569] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7569] <... clone resumed>, parent_tid=[7578], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7578 [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7577] set_robust_list(0x7fee0b1f39e0, 24 [pid 7569] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 7577] <... set_robust_list resumed>) = 0 [pid 7569] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7576] <... ioctl resumed>) = 0 [pid 7569] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 5077] lstat("./138/bus", [pid 7577] memfd_create("syzkaller", 0 [pid 7576] close(3) = 0 [pid 7576] mkdir("./bus", 0777./strace-static-x86_64: Process 7578 attached ) = 0 [pid 7578] set_robust_list(0x7fee02e529e0, 24 [pid 7576] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7578] <... set_robust_list resumed>) = 0 [pid 7578] creat("./file1", 000 [pid 7576] <... mount resumed>) = 0 [pid 7576] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7577] <... memfd_create resumed>) = 3 [pid 7576] chdir("./bus" [pid 5081] getdents64(4, [pid 5077] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 7577] <... mmap resumed>) = 0x7fee02dd3000 [pid 7576] <... chdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7576] ioctl(4, LOOP_CLR_FD) = 0 [ 113.091653][ T7576] loop1: detected capacity change from 0 to 1024 [ 113.107145][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.116398][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.131570][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7576] close(4) = 0 [pid 7576] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7571] <... futex resumed>) = 0 [pid 7576] creat("./bus", 000 [pid 7571] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] <... creat resumed>) = 4 [pid 7571] <... futex resumed>) = 0 [pid 7576] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7571] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7576] <... futex resumed>) = 0 [pid 7571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] rmdir("./139/bus" [pid 5077] <... openat resumed>) = 4 [pid 7576] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7571] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... write resumed>) = 524288 [pid 7572] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7571] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] fstat(4, [pid 7571] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7578] <... creat resumed>) = 5 [pid 7577] munmap(0x7fee02dd3000, 524288 [pid 7572] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] <... write resumed>) = 57344 [pid 5081] getdents64(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 113.140853][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.153898][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.156106][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.162443][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.169355][ T7570] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.176678][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7578] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7578] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7577] <... munmap resumed>) = 0 [pid 7572] <... futex resumed>) = 0 [pid 7571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7570] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7569] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 7577] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7570] <... futex resumed>) = 0 [pid 7569] exit_group(0 [pid 5081] close(3 [pid 7577] <... openat resumed>) = 4 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7578] <... futex resumed>) = ? [pid 7577] ioctl(4, LOOP_SET_FD, 3 [pid 7574] <... write resumed>) = 57344 [pid 7572] <... mmap resumed>) = 0x7fee02e32000 [pid 7571] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7569] <... exit_group resumed>) = ? [pid 5081] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 7572] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7571] <... futex resumed>) = 0 [pid 7570] +++ exited with 0 +++ [pid 5081] rmdir("./139" [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7572] <... mprotect resumed>) = 0 [pid 7571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 7572] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7571] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] mkdir("./140", 0777 [pid 5077] <... close resumed>) = 0 [pid 7571] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... mkdir resumed>) = 0 [pid 5077] rmdir("./138/bus" [pid 7572] <... clone resumed>, parent_tid=[7579], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7579 [pid 7571] <... mprotect resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... rmdir resumed>) = 0 [pid 7572] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7571] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... openat resumed>) = 3 [pid 5077] getdents64(3, [pid 7572] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7571] <... clone resumed>, parent_tid=[7580], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7580 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 7571] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5077] <... close resumed>) = 0 ./strace-static-x86_64: Process 7580 attached ./strace-static-x86_64: Process 7579 attached [pid 7578] +++ exited with 0 +++ [pid 7571] <... futex resumed>) = 0 [pid 7569] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5077] rmdir("./138" [pid 7577] <... ioctl resumed>) = 0 [pid 7576] <... write resumed>) = 57344 [pid 7574] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] set_robust_list(0x7fee02e529e0, 24 [pid 7579] set_robust_list(0x7fee02e529e0, 24 [pid 7576] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7574] <... futex resumed>) = 0 [pid 7571] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7569, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7580] <... set_robust_list resumed>) = 0 [pid 7579] <... set_robust_list resumed>) = 0 [pid 7576] <... futex resumed>) = 0 [pid 7574] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7580] creat("./file1", 000 [pid 7579] creat("./file1", 000 [pid 7576] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] mkdir("./139", 0777./strace-static-x86_64: Process 7581 attached [pid 7580] <... creat resumed>) = 5 [pid 7579] <... creat resumed>) = 5 [pid 7577] close(3 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7581 [pid 5077] <... mkdir resumed>) = 0 [pid 5074] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7580] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7579] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7581] set_robust_list(0x555556b055e0, 24 [pid 7577] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7581] <... set_robust_list resumed>) = 0 [pid 7577] mkdir("./bus", 0777 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7581] chdir("./140" [pid 7577] <... mkdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7581] <... chdir resumed>) = 0 [pid 7577] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] close(3 [pid 7581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7580] <... futex resumed>) = 1 [pid 7579] <... futex resumed>) = 1 [pid 7572] <... futex resumed>) = 0 [pid 7571] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7581] <... prctl resumed>) = 0 [pid 7580] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7579] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7572] exit_group(0 [pid 7571] exit_group(0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7581] setpgid(0, 0 [pid 7580] <... futex resumed>) = ? [pid 7579] <... futex resumed>) = ? [pid 7576] <... futex resumed>) = ? [pid 7574] <... futex resumed>) = ? [pid 7572] <... exit_group resumed>) = ? [pid 7571] <... exit_group resumed>) = ? [pid 5074] <... openat resumed>) = 3 [pid 7581] <... setpgid resumed>) = 0 [pid 7580] +++ exited with 0 +++ [pid 7579] +++ exited with 0 +++ [pid 7577] <... mount resumed>) = 0 [pid 7576] +++ exited with 0 +++ [pid 7574] +++ exited with 0 +++ [pid 7572] +++ exited with 0 +++ [pid 7571] +++ exited with 0 +++ [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7582 [pid 5074] fstat(3, [pid 7581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7577] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7571, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7581] <... openat resumed>) = 3 [pid 7577] <... openat resumed>) = 3 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7572, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7581] write(3, "1000", 4 [pid 7577] chdir("./bus" [pid 5080] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7581] <... write resumed>) = 4 [pid 7577] <... chdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7581] close(3 [pid 7577] ioctl(4, LOOP_CLR_FD [pid 5080] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7581] <... close resumed>) = 0 [pid 7577] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7581] symlink("/dev/binderfs", "./binderfs" [pid 7577] close(4 [pid 5080] fstat(3, [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7582 attached [pid 7581] <... symlink resumed>) = 0 [pid 7577] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7582] set_robust_list(0x555556b055e0, 24 [pid 7581] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./137/binderfs", [pid 7582] <... set_robust_list resumed>) = 0 [pid 7581] <... futex resumed>) = 0 [pid 7577] <... futex resumed>) = 1 [pid 7575] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7582] chdir("./139" [pid 7581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7577] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7575] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] unlink("./137/binderfs" [pid 7582] <... chdir resumed>) = 0 [pid 7581] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7575] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 7582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7577] creat("./bus", 000 [pid 7575] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 113.184174][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.192225][ T7574] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.198645][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.214802][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.215193][ T7577] loop2: detected capacity change from 0 to 1024 [ 113.222081][ T7576] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7582] <... prctl resumed>) = 0 [pid 7581] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7577] <... creat resumed>) = 4 [pid 5080] lstat("./137/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7582] setpgid(0, 0 [pid 7581] <... mprotect resumed>) = 0 [pid 7577] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] lstat("./137/binderfs", [pid 7582] <... setpgid resumed>) = 0 [pid 7581] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7577] <... futex resumed>) = 1 [pid 7575] <... futex resumed>) = 0 [pid 5080] unlink("./137/binderfs" [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7577] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7575] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... unlink resumed>) = 0 [pid 5075] unlink("./137/binderfs" [pid 7581] <... clone resumed>, parent_tid=[7583], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7583 [pid 5080] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 7581] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7581] <... futex resumed>) = 0 [pid 7581] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7575] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7583 attached [pid 7583] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7583] memfd_create("syzkaller", 0) = 3 [pid 7583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7575] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7577] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./137/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, [pid 7582] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7582] write(3, "1000", 4 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./137/bus", [pid 7582] <... write resumed>) = 4 [pid 7582] close(3 [pid 5075] getdents64(4, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7582] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7582] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... umount2 resumed>) = 0 [pid 5075] getdents64(4, [pid 5080] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7582] <... symlink resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7582] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] lstat("./137/bus", [pid 5075] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./137/bus" [pid 7582] <... futex resumed>) = 0 [pid 5080] umount2("./137/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [ 113.272275][ T9] hfsplus: b-tree write err: -5, ino 4 [ 113.283174][ T52] hfsplus: b-tree write err: -5, ino 4 [ 113.294218][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.299144][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.314582][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] openat(AT_FDCWD, "./137/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7582] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5074] <... openat resumed>) = 4 [pid 5080] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 7583] <... write resumed>) = 524288 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./137" [pid 5080] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 7583] munmap(0x7fee02dd3000, 524288 [pid 7582] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./138", 0777 [pid 5074] fstat(4, [pid 7583] <... munmap resumed>) = 0 [pid 7582] <... mprotect resumed>) = 0 [pid 5080] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 7583] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7583] <... openat resumed>) = 4 [pid 7582] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7583] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7584 attached [pid 7582] <... clone resumed>, parent_tid=[7584], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7584 [pid 7575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] rmdir("./137/bus" [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] getdents64(4, [pid 5080] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5080] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7584] set_robust_list(0x7fee0b1f39e0, 24 [pid 7582] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7575] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7585 [pid 5080] rmdir("./137") = 0 [pid 5080] mkdir("./138", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 7584] <... set_robust_list resumed>) = 0 [pid 7582] <... futex resumed>) = 0 [pid 7575] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7586 ./strace-static-x86_64: Process 7585 attached [pid 7585] set_robust_list(0x555556b055e0, 24) = 0 [pid 7585] chdir("./138") = 0 [pid 7585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7584] memfd_create("syzkaller", 0 [pid 7582] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7585] setpgid(0, 0 [pid 7584] <... memfd_create resumed>) = 3 [pid 7575] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7586 attached [pid 7585] <... setpgid resumed>) = 0 [pid 7586] set_robust_list(0x555556b055e0, 24 [pid 7585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7586] <... set_robust_list resumed>) = 0 [pid 7585] <... openat resumed>) = 3 [pid 7586] chdir("./138" [pid 7585] write(3, "1000", 4 [pid 7586] <... chdir resumed>) = 0 [pid 7585] <... write resumed>) = 4 [pid 7586] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7585] close(3 [pid 7586] <... prctl resumed>) = 0 [pid 7585] <... close resumed>) = 0 [pid 7586] setpgid(0, 0 [pid 7585] symlink("/dev/binderfs", "./binderfs" [pid 7583] <... ioctl resumed>) = 0 [pid 7586] <... setpgid resumed>) = 0 [pid 7585] <... symlink resumed>) = 0 [pid 7583] close(3 [pid 7586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7585] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... close resumed>) = 0 [pid 7586] <... openat resumed>) = 3 [pid 7585] <... futex resumed>) = 0 [pid 7583] mkdir("./bus", 0777 [pid 7586] write(3, "1000", 4 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7583] <... mkdir resumed>) = 0 [pid 7575] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] close(4 [pid 7586] <... write resumed>) = 4 [pid 7585] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7584] <... mmap resumed>) = 0x7fee02dd3000 [pid 7583] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7577] <... write resumed>) = 57344 [pid 7575] <... mprotect resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7586] close(3 [pid 7585] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7586] <... close resumed>) = 0 [pid 7585] <... mprotect resumed>) = 0 [pid 7586] symlink("/dev/binderfs", "./binderfs" [pid 7585] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7586] <... symlink resumed>) = 0 [pid 7586] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] <... clone resumed>, parent_tid=[7587], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7587 [pid 7584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7575] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] rmdir("./137/bus"./strace-static-x86_64: Process 7587 attached [pid 7586] <... futex resumed>) = 0 [pid 7585] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7585] <... futex resumed>) = 0 [pid 7586] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7585] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7586] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7586] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7589 attached ./strace-static-x86_64: Process 7588 attached [pid 7587] set_robust_list(0x7fee0b1f39e0, 24 [pid 7584] <... write resumed>) = 524288 [pid 7583] <... mount resumed>) = 0 [pid 7577] <... futex resumed>) = 0 [pid 7575] <... clone resumed>, parent_tid=[7588], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7588 [pid 5074] getdents64(3, [pid 7586] <... clone resumed>, parent_tid=[7589], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7589 [pid 7584] munmap(0x7fee02dd3000, 524288 [pid 7583] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7577] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... openat resumed>) = 3 [pid 7575] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7586] <... futex resumed>) = 0 [pid 7583] chdir("./bus" [pid 7589] set_robust_list(0x7fee0b1f39e0, 24 [pid 7588] set_robust_list(0x7fee02e529e0, 24 [pid 7587] <... set_robust_list resumed>) = 0 [pid 7586] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7584] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7583] <... chdir resumed>) = 0 [pid 7575] <... futex resumed>) = 0 [pid 5074] close(3 [pid 7583] ioctl(4, LOOP_CLR_FD) = 0 [pid 7583] close(4 [pid 7589] <... set_robust_list resumed>) = 0 [pid 7588] <... set_robust_list resumed>) = 0 [pid 7587] memfd_create("syzkaller", 0 [pid 7584] <... openat resumed>) = 4 [pid 7583] <... close resumed>) = 0 [pid 7575] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 7589] memfd_create("syzkaller", 0 [pid 7588] creat("./file1", 000 [pid 7587] <... memfd_create resumed>) = 3 [ 113.327289][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.337951][ T7583] loop5: detected capacity change from 0 to 1024 [ 113.341016][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.357539][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.366427][ T7577] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7584] ioctl(4, LOOP_SET_FD, 3 [pid 7583] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./137" [pid 7589] <... memfd_create resumed>) = 3 [pid 7588] <... creat resumed>) = 5 [pid 7587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7584] <... ioctl resumed>) = 0 [pid 7583] <... futex resumed>) = 1 [pid 7581] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7588] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7587] <... mmap resumed>) = 0x7fee02dd3000 [pid 7584] close(3 [pid 7583] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7581] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] mkdir("./138", 0777 [pid 7589] <... mmap resumed>) = 0x7fee02dd3000 [pid 7588] <... futex resumed>) = 1 [pid 7587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7584] <... close resumed>) = 0 [pid 7583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7581] <... futex resumed>) = 0 [pid 7575] <... futex resumed>) = 0 [pid 7588] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7583] creat("./bus", 000 [pid 7581] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... mkdir resumed>) = 0 [pid 7587] <... write resumed>) = 524288 [pid 7583] <... creat resumed>) = 4 [pid 7575] exit_group(0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7588] <... futex resumed>) = ? [pid 7587] munmap(0x7fee02dd3000, 524288 [pid 7583] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... futex resumed>) = ? [pid 7575] <... exit_group resumed>) = ? [pid 7588] +++ exited with 0 +++ [pid 7587] <... munmap resumed>) = 0 [pid 7584] mkdir("./bus", 0777 [pid 7583] <... futex resumed>) = 1 [pid 7581] <... futex resumed>) = 0 [pid 7577] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 7587] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7584] <... mkdir resumed>) = 0 [pid 7583] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7581] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7575] +++ exited with 0 +++ [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7587] <... openat resumed>) = 4 [pid 7583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7581] <... futex resumed>) = 0 [pid 7583] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7581] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7589] <... write resumed>) = 524288 [pid 7587] ioctl(4, LOOP_SET_FD, 3 [pid 7584] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7575, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 113.393986][ T7584] loop3: detected capacity change from 0 to 1024 [ 113.418709][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.427278][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.427343][ T7587] loop1: detected capacity change from 0 to 1024 [pid 5074] close(3 [pid 7589] munmap(0x7fee02dd3000, 524288 [pid 7587] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7589] <... munmap resumed>) = 0 [pid 7587] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7589] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7587] <... close resumed>) = 0 [pid 7587] mkdir("./bus", 0777 [pid 7589] <... openat resumed>) = 4 [pid 7589] ioctl(4, LOOP_SET_FD, 3 [pid 7587] <... mkdir resumed>) = 0 [pid 5076] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7590 attached [pid 7589] <... ioctl resumed>) = 0 [pid 7587] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7590 [pid 5076] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./138/binderfs") = 0 [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7589] close(3) = 0 [pid 7589] mkdir("./bus", 0777) = 0 [pid 7590] set_robust_list(0x555556b055e0, 24) = 0 [pid 7590] chdir("./138") = 0 [pid 7590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7589] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7590] setpgid(0, 0) = 0 [pid 7590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7590] write(3, "1000", 4) = 4 [pid 7590] close(3) = 0 [pid 7581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7590] symlink("/dev/binderfs", "./binderfs" [pid 7587] <... mount resumed>) = 0 [pid 7584] <... mount resumed>) = 0 [pid 7581] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] <... symlink resumed>) = 0 [pid 7587] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7584] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7590] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] <... openat resumed>) = 3 [pid 7590] <... futex resumed>) = 0 [pid 7584] chdir("./bus" [pid 7590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7584] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7590] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7584] ioctl(4, LOOP_CLR_FD [pid 7590] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7584] <... ioctl resumed>) = 0 [pid 7590] <... mprotect resumed>) = 0 [pid 7584] close(4 [pid 7590] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7584] <... close resumed>) = 0 [pid 7584] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] <... clone resumed>, parent_tid=[7591], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7591 [pid 7584] <... futex resumed>) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7590] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] <... futex resumed>) = 0 [pid 7584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7582] <... futex resumed>) = 0 [pid 7590] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7589] <... mount resumed>) = 0 [pid 7587] <... openat resumed>) = 3 [pid 7584] creat("./bus", 000 [pid 7582] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7581] <... futex resumed>) = 0 [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7589] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7587] chdir("./bus" [pid 7584] <... creat resumed>) = 4 [pid 7581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7589] <... openat resumed>) = 3 [pid 7584] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] chdir("./bus" [pid 7584] <... futex resumed>) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7589] <... chdir resumed>) = 0 [pid 7584] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] ioctl(4, LOOP_CLR_FD [pid 7584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7582] <... futex resumed>) = 0 [pid 7589] <... ioctl resumed>) = 0 [ 113.441832][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.449999][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.460049][ T7589] loop4: detected capacity change from 0 to 1024 [ 113.462242][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.474039][ T7583] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.481518][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7584] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7582] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7591 attached [pid 7589] close(4 [pid 7587] <... chdir resumed>) = 0 [pid 7581] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7591] set_robust_list(0x7fee0b1f39e0, 24 [pid 7587] ioctl(4, LOOP_CLR_FD [pid 7581] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] lstat("./138/bus", [pid 7591] <... set_robust_list resumed>) = 0 [pid 7587] <... ioctl resumed>) = 0 [pid 7581] <... mprotect resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7591] memfd_create("syzkaller", 0 [pid 7587] close(4 [pid 7581] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7591] <... memfd_create resumed>) = 3 [pid 7589] <... close resumed>) = 0 [pid 7587] <... close resumed>) = 0 [pid 7583] <... write resumed>) = 57344 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7589] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7587] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7581] <... clone resumed>, parent_tid=[7592], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7592 [pid 5076] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7591] <... mmap resumed>) = 0x7fee02dd3000 [pid 7587] <... futex resumed>) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7581] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 7591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7589] <... futex resumed>) = 1 [pid 7587] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] <... futex resumed>) = 0 [pid 7585] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... futex resumed>) = 0 [pid 7581] <... futex resumed>) = 0 [pid 5076] fstat(4, [pid 7591] <... write resumed>) = 524288 [pid 7587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7586] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] <... futex resumed>) = 0 [pid 7581] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7591] munmap(0x7fee02dd3000, 524288 [pid 7587] creat("./bus", 000 [pid 7586] <... futex resumed>) = 0 [pid 7585] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 7591] <... munmap resumed>) = 0 [pid 7587] <... creat resumed>) = 4 [pid 7586] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7591] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7587] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 7591] <... openat resumed>) = 4 [pid 7587] <... futex resumed>) = 1 [pid 7585] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7591] ioctl(4, LOOP_SET_FD, 3 [pid 7587] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(4 [pid 7589] creat("./bus", 000 [pid 7587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7585] <... futex resumed>) = 0 [pid 7583] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7592 attached [pid 7587] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7585] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rmdir("./138/bus" [pid 7591] <... ioctl resumed>) = 0 [pid 7589] <... creat resumed>) = 4 [pid 7591] close(3 [pid 7589] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... close resumed>) = 0 [pid 7589] <... futex resumed>) = 1 [pid 7591] mkdir("./bus", 0777 [pid 7589] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] <... mkdir resumed>) = 0 [ 113.508969][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.517073][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.531321][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.539035][ T7591] loop0: detected capacity change from 0 to 1024 [ 113.541382][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7591] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7586] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7592] set_robust_list(0x7fee02e529e0, 24 [pid 7582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7582] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7582] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7582] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7593], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7593 ./strace-static-x86_64: Process 7593 attached [pid 7592] <... set_robust_list resumed>) = 0 [pid 7586] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7582] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 7582] <... futex resumed>) = 0 [pid 7582] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7584] <... write resumed>) = 57344 [pid 7584] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7584] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7593] set_robust_list(0x7fee02e529e0, 24 [pid 7592] creat("./file1", 000 [pid 7589] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = 1 [pid 7581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7593] <... set_robust_list resumed>) = 0 [pid 7593] creat("./file1", 000) = 5 [pid 7593] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7593] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] exit_group(0 [pid 7593] <... futex resumed>) = ? [pid 7584] <... futex resumed>) = ? [pid 7582] <... exit_group resumed>) = ? [pid 7593] +++ exited with 0 +++ [pid 7592] <... creat resumed>) = 5 [pid 7589] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7586] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7584] +++ exited with 0 +++ [pid 7582] +++ exited with 0 +++ [pid 5076] close(3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7582, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7592] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] unlink("./139/binderfs" [pid 5076] <... close resumed>) = 0 [pid 7592] <... futex resumed>) = 0 [pid 7591] <... mount resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [ 113.548178][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.561063][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.568734][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.574331][ T7584] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.576403][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.590879][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.600997][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7591] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7591] <... openat resumed>) = 3 [pid 7591] chdir("./bus") = 0 [pid 7591] ioctl(4, LOOP_CLR_FD) = 0 [pid 7591] close(4) = 0 [pid 7591] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7590] <... futex resumed>) = 0 [pid 7591] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7590] <... futex resumed>) = 0 [pid 7591] creat("./bus", 000 [pid 7590] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7592] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] <... creat resumed>) = 4 [pid 7585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... umount2 resumed>) = 0 [pid 5076] rmdir("./138" [pid 7591] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7591] <... futex resumed>) = 1 [pid 7590] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7591] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7581] exit_group(0 [pid 5077] lstat("./139/bus", [pid 5076] <... rmdir resumed>) = 0 [pid 7591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7590] <... futex resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 113.610721][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.618446][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.625664][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.633093][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.641366][ T7587] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.648782][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7591] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7590] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7592] <... futex resumed>) = ? [pid 7587] <... write resumed>) = 57344 [pid 7585] <... futex resumed>) = 0 [pid 7583] <... futex resumed>) = ? [pid 7581] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./139", 0777 [pid 7592] +++ exited with 0 +++ [pid 7587] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7583] +++ exited with 0 +++ [pid 7581] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7581, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] fstat(4, [pid 5081] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5081] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5081] fstat(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7587] <... futex resumed>) = 0 [pid 7586] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 7587] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] <... futex resumed>) = 0 [pid 7585] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] getdents64(3, [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7585] <... mprotect resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] rmdir("./139/bus" [pid 5076] <... openat resumed>) = 3 [pid 5081] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5081] lstat("./140/binderfs", [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] close(3 [pid 5081] unlink("./140/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5077] rmdir("./139" [pid 5081] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... rmdir resumed>) = 0 [pid 5077] mkdir("./140", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 7586] <... mmap resumed>) = 0x7fee02e32000 [pid 7585] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7594 [ 113.649413][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.665803][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.674164][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.681454][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.691396][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.699222][ T11] hfsplus: b-tree write err: -5, ino 4 ./strace-static-x86_64: Process 7594 attached [pid 7586] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7594] set_robust_list(0x555556b055e0, 24 [pid 7590] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7589] <... write resumed>) = 57344 [pid 7586] <... mprotect resumed>) = 0 [pid 7585] <... clone resumed>, parent_tid=[7595], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7595 [pid 5076] close(3 [pid 7590] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] <... set_robust_list resumed>) = 0 [pid 7590] <... futex resumed>) = 0 [pid 7589] <... futex resumed>) = 0 [pid 7586] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7585] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 7590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7589] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7590] <... mmap resumed>) = 0x7fee02e32000 [pid 7590] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7590] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7596], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7596 [pid 7590] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7590] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7596 attached [pid 7596] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7596] creat("./file1", 000 [pid 7585] <... futex resumed>) = 0 [pid 7585] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... clone resumed>, parent_tid=[7597], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7597 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7597 attached [pid 7597] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7597] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7586] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7598 [pid 5081] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7598 attached ./strace-static-x86_64: Process 7595 attached [pid 7597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7594] chdir("./140" [pid 7591] <... write resumed>) = 57344 [pid 5081] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7595] set_robust_list(0x7fee02e529e0, 24 [pid 7598] set_robust_list(0x555556b055e0, 24 [pid 7595] <... set_robust_list resumed>) = 0 [pid 7594] <... chdir resumed>) = 0 [pid 7598] <... set_robust_list resumed>) = 0 [pid 7595] creat("./file1", 000 [pid 7594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7598] chdir("./139" [pid 7595] <... creat resumed>) = 5 [pid 7594] <... prctl resumed>) = 0 [pid 7598] <... chdir resumed>) = 0 [pid 7595] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7595] <... futex resumed>) = 1 [pid 7594] setpgid(0, 0 [pid 7585] <... futex resumed>) = 0 [pid 7596] <... creat resumed>) = 5 [pid 7598] <... prctl resumed>) = 0 [pid 7595] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] <... setpgid resumed>) = 0 [pid 7585] exit_group(0 [pid 7598] setpgid(0, 0 [pid 7596] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7595] <... futex resumed>) = ? [pid 7594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7587] <... futex resumed>) = ? [pid 7585] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7598] <... setpgid resumed>) = 0 [pid 7595] +++ exited with 0 +++ [pid 7594] <... openat resumed>) = 3 [pid 7587] +++ exited with 0 +++ [pid 7585] +++ exited with 0 +++ [pid 5081] lstat("./140/bus", [pid 7598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7594] write(3, "1000", 4 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7585, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7598] <... openat resumed>) = 3 [pid 7594] <... write resumed>) = 4 [pid 5081] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7598] write(3, "1000", 4 [pid 7594] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 7598] <... write resumed>) = 4 [pid 7594] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7598] close(3 [pid 7596] <... futex resumed>) = 1 [pid 7594] symlink("/dev/binderfs", "./binderfs" [pid 7590] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7598] <... close resumed>) = 0 [pid 7597] creat("./file1", 000 [pid 7594] <... symlink resumed>) = 0 [pid 7591] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5075] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7598] symlink("/dev/binderfs", "./binderfs" [pid 7597] <... creat resumed>) = 5 [pid 7596] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... futex resumed>) = 0 [pid 7590] exit_group(0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7598] <... symlink resumed>) = 0 [pid 7597] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7596] <... futex resumed>) = ? [pid 7594] <... futex resumed>) = 0 [pid 7590] <... exit_group resumed>) = ? [pid 5081] getdents64(4, [pid 5075] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7598] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7597] <... futex resumed>) = 1 [pid 7596] +++ exited with 0 +++ [pid 7594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7591] +++ exited with 0 +++ [pid 7590] +++ exited with 0 +++ [pid 7586] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 7598] <... futex resumed>) = 0 [pid 7597] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7586] exit_group(0 [pid 5081] getdents64(4, [pid 5075] fstat(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7590, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7597] <... futex resumed>) = ? [pid 7594] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7589] <... futex resumed>) = ? [pid 7586] <... exit_group resumed>) = ? [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7598] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7597] +++ exited with 0 +++ [pid 7594] <... mprotect resumed>) = 0 [pid 7589] +++ exited with 0 +++ [pid 7586] +++ exited with 0 +++ [pid 5081] close(4 [pid 5075] getdents64(3, [pid 7598] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7594] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... close resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7586, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7598] <... mprotect resumed>) = 0 [pid 5081] rmdir("./140/bus" [pid 5075] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7599 attached [pid 7598] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7594] <... clone resumed>, parent_tid=[7599], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7599 [pid 5081] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7600 attached [pid 7594] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 7599] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./138/binderfs", [pid 7600] set_robust_list(0x7fee0b1f39e0, 24 [pid 7599] <... set_robust_list resumed>) = 0 [pid 7598] <... clone resumed>, parent_tid=[7600], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7600 [pid 7594] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7598] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] close(3 [pid 5080] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] unlink("./138/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7598] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7598] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] rmdir("./140" [pid 5080] fstat(3, [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7600] <... set_robust_list resumed>) = 0 [ 113.704047][ T7589] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.715074][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.722594][ T7591] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7599] memfd_create("syzkaller", 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7600] memfd_create("syzkaller", 0 [pid 7599] <... memfd_create resumed>) = 3 [pid 7600] <... memfd_create resumed>) = 3 [pid 7599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7599] <... mmap resumed>) = 0x7fee02dd3000 [pid 7600] <... mmap resumed>) = 0x7fee02dd3000 [pid 7599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] mkdir("./141", 0777 [pid 5080] getdents64(3, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(3, [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] lstat("./138/binderfs", [pid 5075] lstat("./138/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./138/binderfs", [pid 5081] close(3 [pid 5080] unlink("./138/binderfs" [pid 5075] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./138/binderfs" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7601 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./138/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./138") = 0 [pid 5075] mkdir("./139", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7599] <... write resumed>) = 524288 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7602 ./strace-static-x86_64: Process 7601 attached [pid 7599] munmap(0x7fee02dd3000, 524288) = 0 [pid 7601] set_robust_list(0x555556b055e0, 24 [pid 7599] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7602 attached [pid 7601] <... set_robust_list resumed>) = 0 [pid 5080] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7602] set_robust_list(0x555556b055e0, 24 [pid 7601] chdir("./141" [pid 7599] <... openat resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7602] <... set_robust_list resumed>) = 0 [pid 7601] <... chdir resumed>) = 0 [pid 7599] ioctl(4, LOOP_SET_FD, 3 [pid 5080] lstat("./138/bus", [pid 5074] lstat("./138/bus", [pid 7602] chdir("./139" [pid 7601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7602] <... chdir resumed>) = 0 [pid 7601] <... prctl resumed>) = 0 [pid 5074] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7601] setpgid(0, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7602] <... prctl resumed>) = 0 [pid 7601] <... setpgid resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7602] setpgid(0, 0 [pid 7601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 4 [pid 7602] <... setpgid resumed>) = 0 [pid 7601] <... openat resumed>) = 3 [pid 5074] fstat(4, [pid 7602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7601] write(3, "1000", 4 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7602] <... openat resumed>) = 3 [pid 7601] <... write resumed>) = 4 [pid 5074] getdents64(4, [pid 7602] write(3, "1000", 4 [pid 7601] close(3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7602] <... write resumed>) = 4 [pid 7601] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 7602] close(3 [pid 7601] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7602] <... close resumed>) = 0 [pid 7601] <... symlink resumed>) = 0 [pid 5074] close(4 [pid 7602] symlink("/dev/binderfs", "./binderfs" [pid 7601] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 7602] <... symlink resumed>) = 0 [pid 7601] <... futex resumed>) = 0 [pid 5074] rmdir("./138/bus" [pid 7602] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7602] <... futex resumed>) = 0 [pid 7601] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 7602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7601] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./138/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7602] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7601] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 7602] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7601] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./138/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 7602] <... mprotect resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5074] rmdir("./138" [pid 7602] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7601] <... clone resumed>, parent_tid=[7603], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7603 [pid 5080] fstat(4, [pid 5074] <... rmdir resumed>) = 0 [pid 7601] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] mkdir("./139", 0777 [pid 7602] <... clone resumed>, parent_tid=[7604], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7604 [pid 7601] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 5074] <... mkdir resumed>) = 0 [pid 7602] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7600] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7602] <... futex resumed>) = 0 [pid 7600] munmap(0x7fee02dd3000, 524288 [pid 5074] <... openat resumed>) = 3 [pid 7602] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(4 [pid 5074] close(3 [pid 5080] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5080] rmdir("./138/bus" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... rmdir resumed>) = 0 [pid 7600] <... munmap resumed>) = 0 [pid 5080] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7605 ./strace-static-x86_64: Process 7603 attached [pid 7603] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7603] memfd_create("syzkaller", 0) = 3 [pid 7603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7605 attached ) = 0x7fee02dd3000 [pid 7605] set_robust_list(0x555556b055e0, 24) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7605] chdir("./139") = 0 [pid 7605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7605] setpgid(0, 0) = 0 [pid 7605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7605] write(3, "1000", 4) = 4 [pid 7605] close(3) = 0 [pid 7605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] close(3 [pid 7605] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7605] <... futex resumed>) = 0 [pid 7600] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] rmdir("./138" [pid 7605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7600] <... openat resumed>) = 4 [pid 5080] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7604 attached [pid 7605] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7600] ioctl(4, LOOP_SET_FD, 3 [ 113.765994][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.781379][ T33] hfsplus: b-tree write err: -5, ino 4 [ 113.795685][ T52] hfsplus: b-tree write err: -5, ino 4 [ 113.808655][ T7599] loop3: detected capacity change from 0 to 1024 [pid 5080] mkdir("./139", 0777 [pid 7605] <... mprotect resumed>) = 0 [pid 7604] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... mkdir resumed>) = 0 [pid 7605] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7605] <... clone resumed>, parent_tid=[7606], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7606 [pid 7605] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7605] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7603] <... write resumed>) = 524288 [pid 7603] munmap(0x7fee02dd3000, 524288) = 0 [pid 7603] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7603] ioctl(4, LOOP_SET_FD, 3 [pid 7604] <... set_robust_list resumed>) = 0 [pid 7599] <... ioctl resumed>) = 0 [pid 5080] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7606 attached [pid 7606] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7606] memfd_create("syzkaller", 0) = 3 [pid 7606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7604] memfd_create("syzkaller", 0 [pid 7603] <... ioctl resumed>) = 0 [pid 7600] <... ioctl resumed>) = 0 [pid 7599] close(3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7606] <... mmap resumed>) = 0x7fee02dd3000 [pid 7604] <... memfd_create resumed>) = 3 [pid 7603] close(3 [pid 7600] close(3 [pid 7599] <... close resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7603] <... close resumed>) = 0 [pid 7600] <... close resumed>) = 0 [pid 7599] mkdir("./bus", 0777 [pid 5080] close(3 [pid 7603] mkdir("./bus", 0777 [pid 5080] <... close resumed>) = 0 [pid 7603] <... mkdir resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7603] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7599] <... mkdir resumed>) = 0 [pid 7604] <... mmap resumed>) = 0x7fee02dd3000 [pid 7599] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7600] mkdir("./bus", 0777 [pid 7599] <... mount resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7607 [pid 7599] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7599] chdir("./bus" [pid 7600] <... mkdir resumed>) = 0 [pid 7599] <... chdir resumed>) = 0 [pid 7600] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7599] ioctl(4, LOOP_CLR_FD [pid 7603] <... mount resumed>) = 0 [pid 7599] <... ioctl resumed>) = 0 [pid 7603] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7599] close(4 [pid 7603] <... openat resumed>) = 3 [pid 7599] <... close resumed>) = 0 [pid 7606] <... write resumed>) = 524288 [pid 7604] <... write resumed>) = 524288 [pid 7603] chdir("./bus" [pid 7600] <... mount resumed>) = 0 [pid 7599] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7607 attached [pid 7606] munmap(0x7fee02dd3000, 524288 [pid 7604] munmap(0x7fee02dd3000, 524288 [pid 7603] <... chdir resumed>) = 0 [pid 7600] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7599] <... futex resumed>) = 1 [pid 7594] <... futex resumed>) = 0 [pid 7604] <... munmap resumed>) = 0 [pid 7603] ioctl(4, LOOP_CLR_FD [pid 7600] <... openat resumed>) = 3 [pid 7599] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] set_robust_list(0x555556b055e0, 24 [pid 7606] <... munmap resumed>) = 0 [pid 7604] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7603] <... ioctl resumed>) = 0 [pid 7600] chdir("./bus" [pid 7599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7594] <... futex resumed>) = 0 [pid 7606] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7604] <... openat resumed>) = 4 [pid 7603] close(4 [pid 7600] <... chdir resumed>) = 0 [pid 7599] creat("./bus", 000 [pid 7594] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7606] <... openat resumed>) = 4 [pid 7604] ioctl(4, LOOP_SET_FD, 3 [pid 7603] <... close resumed>) = 0 [pid 7600] ioctl(4, LOOP_CLR_FD [pid 7599] <... creat resumed>) = 4 [pid 7606] ioctl(4, LOOP_SET_FD, 3 [ 113.838926][ T7600] loop2: detected capacity change from 0 to 1024 [ 113.843345][ T7603] loop5: detected capacity change from 0 to 1024 [pid 7603] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... ioctl resumed>) = 0 [pid 7599] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] <... futex resumed>) = 1 [pid 7601] <... futex resumed>) = 0 [pid 7600] close(4 [pid 7603] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7601] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... close resumed>) = 0 [pid 7603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7601] <... futex resumed>) = 0 [pid 7600] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] creat("./bus", 000 [pid 7601] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7600] <... futex resumed>) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7603] <... creat resumed>) = 4 [pid 7600] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 7603] <... futex resumed>) = 1 [pid 7601] <... futex resumed>) = 0 [pid 7600] creat("./bus", 000 [pid 7599] <... futex resumed>) = 1 [pid 7598] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7594] <... futex resumed>) = 0 [pid 7603] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7601] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... creat resumed>) = 4 [pid 7603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7601] <... futex resumed>) = 0 [pid 7600] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7603] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7601] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7600] <... futex resumed>) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7607] <... set_robust_list resumed>) = 0 [pid 7606] <... ioctl resumed>) = 0 [pid 7604] <... ioctl resumed>) = 0 [pid 7600] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7599] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] chdir("./139" [pid 7606] close(3 [pid 7604] close(3 [pid 7600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7599] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7598] <... futex resumed>) = 0 [pid 7594] <... futex resumed>) = 0 [ 113.887862][ T7604] loop1: detected capacity change from 0 to 1024 [ 113.894550][ T7606] loop0: detected capacity change from 0 to 1024 [ 113.898839][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.914075][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.921377][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.925462][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7607] <... chdir resumed>) = 0 [pid 7606] <... close resumed>) = 0 [pid 7604] <... close resumed>) = 0 [pid 7600] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7599] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7598] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7594] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7606] mkdir("./bus", 0777 [pid 7604] mkdir("./bus", 0777) = 0 [pid 7604] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7607] <... prctl resumed>) = 0 [pid 7606] <... mkdir resumed>) = 0 [pid 7604] <... mount resumed>) = 0 [pid 7601] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7604] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7601] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] setpgid(0, 0 [pid 7606] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7604] <... openat resumed>) = 3 [pid 7601] <... futex resumed>) = 0 [pid 7607] <... setpgid resumed>) = 0 [pid 7604] chdir("./bus" [pid 7601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7604] <... chdir resumed>) = 0 [pid 7601] <... mmap resumed>) = 0x7fee02e32000 [pid 7604] ioctl(4, LOOP_CLR_FD [pid 7601] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7604] <... ioctl resumed>) = 0 [pid 7601] <... mprotect resumed>) = 0 [pid 7604] close(4 [pid 7601] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7604] <... close resumed>) = 0 [pid 7604] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... clone resumed>, parent_tid=[7608], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7608 [pid 7604] <... futex resumed>) = 1 [pid 7601] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7601] <... futex resumed>) = 0 [pid 7601] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7608 attached [pid 7608] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7608] creat("./file1", 000) = 5 [pid 7608] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... futex resumed>) = 0 [pid 7607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7608] <... futex resumed>) = 1 [pid 7608] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7602] <... futex resumed>) = 0 [ 113.937678][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.946369][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.947154][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.953862][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.969323][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.980100][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7607] <... openat resumed>) = 3 [pid 7602] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7598] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7598] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7598] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7609], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7609 [pid 7598] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] write(3, "1000", 4 [pid 7602] <... futex resumed>) = 1 [pid 7604] <... futex resumed>) = 0 [pid 7602] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7607] <... write resumed>) = 4 [pid 7604] creat("./bus", 000) = 4 [pid 7604] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7607] close(3 [pid 7594] <... futex resumed>) = 0 [pid 7607] <... close resumed>) = 0 [pid 7602] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] symlink("/dev/binderfs", "./binderfs" [pid 7604] <... futex resumed>) = 0 [pid 7602] <... futex resumed>) = 1 [pid 7594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7607] <... symlink resumed>) = 0 [pid 7604] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7607] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7602] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7594] <... mmap resumed>) = 0x7fee02e32000 ./strace-static-x86_64: Process 7609 attached [pid 7609] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7609] creat("./file1", 000 [pid 7606] <... mount resumed>) = 0 [pid 7607] <... futex resumed>) = 0 [pid 7607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7606] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7594] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7607] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7607] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7606] <... openat resumed>) = 3 [pid 7603] <... write resumed>) = 57344 [pid 7594] <... mprotect resumed>) = 0 [ 113.980305][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 113.991391][ T7603] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.016342][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.018060][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7607] <... mprotect resumed>) = 0 [pid 7606] chdir("./bus" [pid 7603] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7601] exit_group(0 [pid 7608] <... futex resumed>) = ? [pid 7601] <... exit_group resumed>) = ? [pid 7608] +++ exited with 0 +++ [pid 7609] <... creat resumed>) = 5 [pid 7609] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7609] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7600] <... write resumed>) = 57344 [pid 7600] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] exit_group(0 [pid 7609] <... futex resumed>) = ? [pid 7598] <... exit_group resumed>) = ? [pid 7609] +++ exited with 0 +++ [pid 7600] <... futex resumed>) = ? [pid 7600] +++ exited with 0 +++ [pid 7598] +++ exited with 0 +++ [pid 7607] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7606] <... chdir resumed>) = 0 [pid 7603] <... futex resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7598, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 7610 attached [pid 7610] set_robust_list(0x7fee02e529e0, 24) = 0 [ 114.032815][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.034972][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.042613][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.054734][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.054748][ T7600] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.059028][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.062831][ T7599] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7610] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7611 attached [pid 7606] ioctl(4, LOOP_CLR_FD [pid 7603] +++ exited with 0 +++ [pid 7601] +++ exited with 0 +++ [pid 7594] <... clone resumed>, parent_tid=[7610], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7610 [pid 7607] <... clone resumed>, parent_tid=[7611], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7611 [pid 7606] <... ioctl resumed>) = 0 [pid 7594] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7601, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7607] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7606] close(4 [pid 7594] <... futex resumed>) = 1 [pid 5076] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7607] <... futex resumed>) = 0 [pid 7606] <... close resumed>) = 0 [pid 7602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7594] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7607] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7606] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7602] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7606] <... futex resumed>) = 1 [pid 7605] <... futex resumed>) = 0 [pid 7602] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7606] creat("./bus", 000 [pid 7605] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(3, [pid 7606] <... creat resumed>) = 4 [pid 7605] <... futex resumed>) = 0 [pid 7602] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7606] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7602] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7606] <... futex resumed>) = 0 [pid 7605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7602] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 7606] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7605] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7602] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] fstat(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7605] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7606] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7605] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7602] <... clone resumed>, parent_tid=[7612], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7612 [pid 5081] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7612 attached [pid 7610] <... futex resumed>) = 0 [pid 7602] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7599] <... write resumed>) = 57344 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] lstat("./139/binderfs", [pid 7602] <... futex resumed>) = 0 [pid 5081] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7602] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./139/binderfs" [pid 5081] lstat("./141/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] unlink("./141/binderfs") = 0 [pid 5081] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7611] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7611] memfd_create("syzkaller", 0) = 3 [pid 7611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7612] set_robust_list(0x7fee02e529e0, 24 [pid 7610] creat("./file1", 000 [pid 7599] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7611] munmap(0x7fee02dd3000, 524288) = 0 [pid 7611] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7612] <... set_robust_list resumed>) = 0 [pid 7611] <... openat resumed>) = 4 [pid 7610] <... creat resumed>) = 5 [pid 7599] <... futex resumed>) = 0 [pid 7612] creat("./file1", 000 [pid 7610] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7599] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 114.071894][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.095655][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.102963][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.104713][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.118498][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 114.124164][ T52] hfsplus: b-tree write err: -5, ino 4 [ 114.131577][ T7611] loop4: detected capacity change from 0 to 1024 [pid 7611] ioctl(4, LOOP_SET_FD, 3 [pid 7610] <... futex resumed>) = 1 [pid 7594] <... futex resumed>) = 0 [pid 7594] exit_group(0) = ? [pid 7612] <... creat resumed>) = 5 [pid 7611] <... ioctl resumed>) = 0 [pid 7605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7604] <... write resumed>) = 57344 [pid 7599] <... futex resumed>) = ? [pid 7612] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7610] +++ exited with 0 +++ [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7599] +++ exited with 0 +++ [pid 7594] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7594, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 7612] <... futex resumed>) = 1 [pid 7605] <... futex resumed>) = 0 [pid 7602] <... futex resumed>) = 0 [pid 7612] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7605] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7611] close(3 [pid 7605] <... mmap resumed>) = 0x7fee02e32000 [pid 7604] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7602] exit_group(0 [pid 7612] <... futex resumed>) = ? [pid 7602] <... exit_group resumed>) = ? [pid 7612] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./141/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./141/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./141") = 0 [pid 5081] mkdir("./142", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 7611] <... close resumed>) = 0 [pid 7605] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7604] <... futex resumed>) = ? [pid 5077] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7611] mkdir("./bus", 0777 [pid 7605] <... mprotect resumed>) = 0 [pid 7611] <... mkdir resumed>) = 0 [pid 7605] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7604] +++ exited with 0 +++ [pid 7602] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 7605] <... clone resumed>, parent_tid=[7613], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7613 [pid 7605] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7611] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] fstat(3, ./strace-static-x86_64: Process 7613 attached [pid 7613] set_robust_list(0x7fee02e529e0, 24 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7613] <... set_robust_list resumed>) = 0 [pid 7613] creat("./file1", 000 [pid 5077] getdents64(3, ./strace-static-x86_64: Process 7614 attached [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7602, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7614] set_robust_list(0x555556b055e0, 24) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7614] chdir("./142" [pid 5075] <... openat resumed>) = 3 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./139/bus", [pid 7614] <... chdir resumed>) = 0 [pid 7614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./140/binderfs", [pid 5076] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7614 [pid 7614] <... prctl resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7614] setpgid(0, 0 [pid 5075] getdents64(3, [pid 5077] unlink("./140/binderfs" [pid 5076] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7614] <... setpgid resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] lstat("./139/binderfs", [pid 5076] getdents64(4, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] unlink("./139/binderfs" [pid 7614] <... openat resumed>) = 3 [pid 7614] write(3, "1000", 4) = 4 [pid 7614] close(3) = 0 [pid 7614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7614] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.133893][ T7604] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.139194][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.156468][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.178479][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7614] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 7614] <... mprotect resumed>) = 0 [pid 7614] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7615], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7615 [pid 7614] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7614] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7615 attached [pid 7615] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7615] memfd_create("syzkaller", 0) = 3 [pid 7615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./139/bus") = 0 [pid 7611] <... mount resumed>) = 0 [pid 7611] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 7611] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 7611] chdir("./bus") = 0 [pid 5076] <... close resumed>) = 0 [pid 7611] ioctl(4, LOOP_CLR_FD [pid 5076] rmdir("./139" [pid 7611] <... ioctl resumed>) = 0 [pid 7611] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 7615] <... write resumed>) = 524288 [pid 7615] munmap(0x7fee02dd3000, 524288) = 0 [pid 7615] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7615] ioctl(4, LOOP_SET_FD, 3 [pid 7611] <... close resumed>) = 0 [pid 5076] mkdir("./140", 0777 [pid 7611] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 7611] <... futex resumed>) = 1 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7611] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7607] <... futex resumed>) = 0 [pid 7607] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7607] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... openat resumed>) = 3 [pid 7611] creat("./bus", 000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7611] <... creat resumed>) = 4 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7611] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] close(3 [pid 7611] <... futex resumed>) = 1 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 7607] <... futex resumed>) = 0 [pid 7607] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7607] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7605] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... umount2 resumed>) = 0 [pid 7611] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7615] <... ioctl resumed>) = 0 [pid 7613] <... creat resumed>) = 5 [pid 7606] <... write resumed>) = 57344 [pid 5077] lstat("./140/bus", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7615] close(3 [pid 7613] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7616 [pid 5075] lstat("./139/bus", [pid 7615] <... close resumed>) = 0 [pid 5077] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7615] mkdir("./bus", 0777 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7615] <... mkdir resumed>) = 0 [pid 7613] <... futex resumed>) = 0 [pid 7606] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7615] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7615] <... mount resumed>) = 0 [pid 7613] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] <... futex resumed>) = 0 [pid 7605] exit_group(0 [pid 5077] fstat(4, [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7616 attached [ 114.197778][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 114.207349][ T52] hfsplus: b-tree write err: -5, ino 4 [ 114.219916][ T7615] loop5: detected capacity change from 0 to 1024 [ 114.221253][ T7606] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.237894][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7615] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7613] <... futex resumed>) = ? [pid 7605] <... exit_group resumed>) = ? [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] fstat(4, [pid 7615] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7615] chdir("./bus" [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7615] <... chdir resumed>) = 0 [pid 5077] getdents64(4, [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7615] ioctl(4, LOOP_CLR_FD [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 7615] <... ioctl resumed>) = 0 [pid 5077] close(4 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7615] close(4 [pid 5077] <... close resumed>) = 0 [pid 5075] close(4 [pid 7615] <... close resumed>) = 0 [pid 7613] +++ exited with 0 +++ [pid 7606] +++ exited with 0 +++ [pid 7605] +++ exited with 0 +++ [pid 5077] rmdir("./140/bus" [pid 5075] <... close resumed>) = 0 [pid 7616] set_robust_list(0x555556b055e0, 24 [pid 7615] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] rmdir("./139/bus" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7605, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7615] <... futex resumed>) = 1 [pid 5077] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 7615] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5077] close(3 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7616] <... set_robust_list resumed>) = 0 [pid 7614] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] close(3 [pid 5077] rmdir("./140" [pid 5075] <... close resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5075] rmdir("./139" [pid 5074] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7616] chdir("./140" [pid 7614] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./141", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5075] mkdir("./140", 0777 [pid 5074] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] fstat(3, [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5077] close(3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7616] <... chdir resumed>) = 0 [pid 7615] <... futex resumed>) = 0 [pid 7614] <... futex resumed>) = 1 [pid 7607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7615] creat("./bus", 000 [pid 7614] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] lstat("./139/binderfs", [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7617 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7616] <... prctl resumed>) = 0 [pid 7615] <... creat resumed>) = 4 [pid 7607] <... futex resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7618 [pid 5074] unlink("./139/binderfs"./strace-static-x86_64: Process 7617 attached [pid 7616] setpgid(0, 0 [pid 7615] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7618 attached [pid 7618] set_robust_list(0x555556b055e0, 24) = 0 [pid 7618] chdir("./140") = 0 [pid 7618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7618] setpgid(0, 0) = 0 [pid 7618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7616] <... setpgid resumed>) = 0 [pid 7615] <... futex resumed>) = 1 [pid 7618] <... openat resumed>) = 3 [pid 7617] set_robust_list(0x555556b055e0, 24 [pid 7616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7614] <... futex resumed>) = 0 [pid 7611] <... write resumed>) = 57344 [pid 7607] <... mmap resumed>) = 0x7fee02e32000 [ 114.259222][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.269426][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.282869][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.292661][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.300870][ T7611] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7618] write(3, "1000", 4) = 4 [pid 7618] close(3) = 0 [pid 7618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7618] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7618] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7617] <... set_robust_list resumed>) = 0 [pid 7616] <... openat resumed>) = 3 [pid 7615] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7614] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7611] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7618] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7619], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7619 [pid 7618] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7617] chdir("./141" [pid 7616] write(3, "1000", 4 [pid 7615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7614] <... futex resumed>) = 0 [pid 7611] <... futex resumed>) = 0 [pid 7607] <... mprotect resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7618] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7617] <... chdir resumed>) = 0 [pid 7616] <... write resumed>) = 4 [pid 7615] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7614] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7611] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7607] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7616] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7617] <... prctl resumed>) = 0 [pid 7616] <... close resumed>) = 0 [pid 7607] <... clone resumed>, parent_tid=[7620], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7620 [pid 5074] lstat("./139/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7619 attached ) = 4 [pid 7619] set_robust_list(0x7fee0b1f39e0, 24 [pid 5074] fstat(4, [pid 7619] <... set_robust_list resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7619] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 7619] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 7619] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(4) = 0 [pid 5074] rmdir("./139/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./139" [pid 7619] <... write resumed>) = 524288 [pid 7617] setpgid(0, 0 [pid 7616] symlink("/dev/binderfs", "./binderfs" [pid 7607] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7620 attached [pid 7617] <... setpgid resumed>) = 0 [pid 7616] <... symlink resumed>) = 0 [pid 7607] <... futex resumed>) = 0 [pid 5074] mkdir("./140", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 114.309638][ T52] hfsplus: b-tree write err: -5, ino 4 [ 114.333709][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.341029][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] close(3 [pid 7620] set_robust_list(0x7fee02e529e0, 24 [pid 7617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7616] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7620] <... set_robust_list resumed>) = 0 [pid 7617] <... openat resumed>) = 3 [pid 7616] <... futex resumed>) = 0 [pid 7620] creat("./file1", 000 [pid 7619] munmap(0x7fee02dd3000, 524288 [pid 7617] write(3, "1000", 4 [pid 7616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7621 [pid 7620] <... creat resumed>) = 5 [pid 7619] <... munmap resumed>) = 0 [pid 7617] <... write resumed>) = 4 [pid 7616] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7620] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7617] close(3 [pid 7616] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7619] <... openat resumed>) = 4 [pid 7619] ioctl(4, LOOP_SET_FD, 3 [pid 7617] <... close resumed>) = 0 [pid 7616] <... mprotect resumed>) = 0 [pid 7607] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7621 attached [pid 7621] set_robust_list(0x555556b055e0, 24) = 0 [pid 7621] chdir("./140") = 0 [pid 7621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7621] setpgid(0, 0) = 0 [pid 7621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7621] write(3, "1000", 4) = 4 [pid 7621] close(3) = 0 [pid 7621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7621] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7621] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7621] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7622], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7622 [pid 7621] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7621] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7622 attached [pid 7622] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7622] memfd_create("syzkaller", 0) = 3 [pid 7622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7617] symlink("/dev/binderfs", "./binderfs" [pid 7616] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7607] exit_group(0 [pid 7617] <... symlink resumed>) = 0 [pid 7614] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7611] <... futex resumed>) = ? [pid 7607] <... exit_group resumed>) = ? [pid 7617] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7611] +++ exited with 0 +++ [pid 7614] <... mmap resumed>) = 0x7fee02e32000 [pid 7617] <... futex resumed>) = 0 [pid 7616] <... clone resumed>, parent_tid=[7623], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7623 [pid 7614] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7616] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7614] <... mprotect resumed>) = 0 [pid 7617] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7616] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7614] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7617] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7614] <... clone resumed>, parent_tid=[7624], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7624 [pid 7617] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7614] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7625 attached ./strace-static-x86_64: Process 7624 attached ./strace-static-x86_64: Process 7623 attached [pid 7620] <... futex resumed>) = ? [pid 7619] <... ioctl resumed>) = 0 [pid 7617] <... clone resumed>, parent_tid=[7625], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7625 [pid 7615] <... write resumed>) = 57344 [pid 7614] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7625] set_robust_list(0x7fee0b1f39e0, 24 [pid 7624] set_robust_list(0x7fee02e529e0, 24 [pid 7623] set_robust_list(0x7fee0b1f39e0, 24 [pid 7622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7620] +++ exited with 0 +++ [pid 7619] close(3 [pid 7617] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7615] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] +++ exited with 0 +++ [pid 7625] <... set_robust_list resumed>) = 0 [pid 7624] <... set_robust_list resumed>) = 0 [pid 7623] <... set_robust_list resumed>) = 0 [pid 7622] <... write resumed>) = 524288 [pid 7619] <... close resumed>) = 0 [pid 7617] <... futex resumed>) = 0 [pid 7615] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7607, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7625] memfd_create("syzkaller", 0 [pid 7624] creat("./file1", 000 [pid 7623] memfd_create("syzkaller", 0 [pid 7622] munmap(0x7fee02dd3000, 524288 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7619] mkdir("./bus", 0777 [pid 7617] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7615] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7625] <... memfd_create resumed>) = 3 [pid 7624] <... creat resumed>) = 5 [pid 7622] <... munmap resumed>) = 0 [pid 7622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7624] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... restart_syscall resumed>) = 0 [pid 7625] <... mmap resumed>) = 0x7fee02dd3000 [ 114.355335][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.362885][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.374167][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.375974][ T7619] loop1: detected capacity change from 0 to 1024 [ 114.381726][ T7615] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7624] <... futex resumed>) = 1 [pid 7623] <... memfd_create resumed>) = 3 [pid 7619] <... mkdir resumed>) = 0 [pid 7614] <... futex resumed>) = 0 [pid 7625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7624] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7619] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7614] exit_group(0 [pid 7622] <... ioctl resumed>) = 0 [pid 7614] <... exit_group resumed>) = ? [pid 5080] umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7615] <... futex resumed>) = ? [pid 7624] <... futex resumed>) = ? [pid 7622] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7622] <... close resumed>) = 0 [pid 7615] +++ exited with 0 +++ [pid 7622] mkdir("./bus", 0777 [pid 7624] +++ exited with 0 +++ [pid 7622] <... mkdir resumed>) = 0 [pid 7614] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7622] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7614, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] <... openat resumed>) = 3 [pid 7625] <... write resumed>) = 524288 [pid 7623] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] fstat(3, [pid 7625] munmap(0x7fee02dd3000, 524288 [pid 7622] <... mount resumed>) = 0 [pid 7619] <... mount resumed>) = 0 [pid 5081] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7622] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7619] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] getdents64(3, [pid 7625] <... munmap resumed>) = 0 [pid 7622] <... openat resumed>) = 3 [pid 7619] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7625] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7622] chdir("./bus" [pid 7619] chdir("./bus" [pid 5081] <... openat resumed>) = 3 [pid 5080] umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7625] <... openat resumed>) = 4 [pid 7622] <... chdir resumed>) = 0 [pid 7619] <... chdir resumed>) = 0 [pid 5081] fstat(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7625] ioctl(4, LOOP_SET_FD, 3 [pid 7622] ioctl(4, LOOP_CLR_FD [pid 7619] ioctl(4, LOOP_CLR_FD [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] lstat("./139/binderfs", [pid 7622] <... ioctl resumed>) = 0 [pid 7619] <... ioctl resumed>) = 0 [pid 5081] getdents64(3, [pid 7622] close(4 [pid 7619] close(4 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7625] <... ioctl resumed>) = 0 [pid 7623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7622] <... close resumed>) = 0 [pid 7619] <... close resumed>) = 0 [pid 5081] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7625] close(3 [pid 7623] <... write resumed>) = 524288 [pid 7622] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] unlink("./139/binderfs" [pid 7625] <... close resumed>) = 0 [pid 7623] munmap(0x7fee02dd3000, 524288 [pid 7622] <... futex resumed>) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7619] <... futex resumed>) = 1 [pid 7618] <... futex resumed>) = 0 [pid 5081] lstat("./142/binderfs", [pid 5080] <... unlink resumed>) = 0 [pid 7625] mkdir("./bus", 0777 [pid 7623] <... munmap resumed>) = 0 [pid 7622] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7621] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7618] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 114.408429][ T7622] loop0: detected capacity change from 0 to 1024 [ 114.425862][ T7625] loop3: detected capacity change from 0 to 1024 [pid 7625] <... mkdir resumed>) = 0 [pid 7623] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7621] <... futex resumed>) = 0 [pid 7619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7618] <... futex resumed>) = 0 [pid 5081] unlink("./142/binderfs" [pid 7625] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7623] <... openat resumed>) = 4 [pid 7622] creat("./bus", 000 [pid 7621] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7619] creat("./bus", 000 [pid 7618] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... unlink resumed>) = 0 [pid 7622] <... creat resumed>) = 4 [pid 7619] <... creat resumed>) = 4 [pid 5081] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7625] <... mount resumed>) = 0 [pid 7623] ioctl(4, LOOP_SET_FD, 3 [pid 7622] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = 0 [pid 7625] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7622] <... futex resumed>) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7619] <... futex resumed>) = 1 [pid 7618] <... futex resumed>) = 0 [pid 5080] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7625] <... openat resumed>) = 3 [pid 7622] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7621] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7618] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7625] chdir("./bus" [pid 7622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7621] <... futex resumed>) = 0 [pid 7619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7618] <... futex resumed>) = 0 [pid 5081] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] lstat("./139/bus", [pid 7625] <... chdir resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7625] ioctl(4, LOOP_CLR_FD [pid 7622] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7621] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7619] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7618] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./139/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7625] <... ioctl resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7625] close(4 [pid 5080] openat(AT_FDCWD, "./139/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7625] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7625] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 7625] <... futex resumed>) = 1 [pid 7617] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7625] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7617] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 7625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7617] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7625] creat("./bus", 000 [pid 7617] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 7625] <... creat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7625] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(4 [pid 7625] <... futex resumed>) = 1 [pid 7617] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7625] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7617] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] rmdir("./139/bus" [pid 7625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7617] <... futex resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7625] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7617] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 114.451696][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 114.465005][ T52] hfsplus: b-tree write err: -5, ino 4 [ 114.473543][ T7623] loop2: detected capacity change from 0 to 1024 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./139") = 0 [pid 5080] mkdir("./140", 0777 [pid 7623] <... ioctl resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 7623] close(3 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7623] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7623] mkdir("./bus", 0777 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7623] <... mkdir resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7623] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7626 [pid 7623] <... mount resumed>) = 0 [pid 7623] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7623] chdir("./bus") = 0 [pid 7623] ioctl(4, LOOP_CLR_FD) = 0 [pid 7623] close(4) = 0 [pid 7623] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7626 attached ) = 1 [pid 7616] <... futex resumed>) = 0 [pid 7626] set_robust_list(0x555556b055e0, 24 [pid 7623] creat("./bus", 000 [pid 7616] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... set_robust_list resumed>) = 0 [pid 7623] <... creat resumed>) = 4 [pid 7616] <... futex resumed>) = 0 [pid 7626] chdir("./140" [pid 7623] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 114.495319][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.495444][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.502648][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.511872][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5081] lstat("./142/bus", [pid 7626] <... chdir resumed>) = 0 [pid 7623] <... futex resumed>) = 0 [pid 7621] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7623] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7617] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... prctl resumed>) = 0 [pid 7623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7617] <... futex resumed>) = 0 [pid 7616] <... futex resumed>) = 0 [pid 7626] setpgid(0, 0 [pid 7623] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7616] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] <... setpgid resumed>) = 0 [pid 7621] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7618] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7617] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7617] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7626] <... openat resumed>) = 3 [pid 7617] <... mprotect resumed>) = 0 [pid 7626] write(3, "1000", 4 [pid 7617] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7626] <... write resumed>) = 4 [pid 7626] close(3 [pid 7617] <... clone resumed>, parent_tid=[7627], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7627 [pid 7626] <... close resumed>) = 0 [pid 7621] <... futex resumed>) = 0 [pid 7618] <... futex resumed>) = 0 [pid 7617] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7626] symlink("/dev/binderfs", "./binderfs" [pid 7617] <... futex resumed>) = 0 [pid 7626] <... symlink resumed>) = 0 [pid 7617] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7626] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7626] <... futex resumed>) = 0 [pid 7626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7626] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 7627 attached ) = 0 [pid 7627] set_robust_list(0x7fee02e529e0, 24 [pid 7626] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7627] <... set_robust_list resumed>) = 0 [pid 7627] creat("./file1", 000 [pid 7626] <... clone resumed>, parent_tid=[7628], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7628 [pid 7626] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7621] <... mmap resumed>) = 0x7fee02e32000 [pid 7618] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7626] <... futex resumed>) = 0 [pid 7626] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7621] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7618] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7628 attached [ 114.543110][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.547663][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.550903][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.567539][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.575241][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.583794][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7628] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7628] memfd_create("syzkaller", 0) = 3 [pid 7628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7621] <... mprotect resumed>) = 0 [pid 7618] <... mprotect resumed>) = 0 [pid 5081] fstat(4, [pid 7621] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7618] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 7621] <... clone resumed>, parent_tid=[7629], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7629 [pid 7618] <... clone resumed>, parent_tid=[7630], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7630 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7621] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7618] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 7628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7630 attached [pid 7616] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] set_robust_list(0x7fee02e529e0, 24 [pid 7616] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7629 attached [pid 7630] <... set_robust_list resumed>) = 0 [pid 7627] <... creat resumed>) = 5 [pid 7621] <... futex resumed>) = 0 [pid 7618] <... futex resumed>) = 0 [pid 7616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7630] creat("./file1", 000 [pid 7627] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] <... mmap resumed>) = 0x7fee02e32000 [pid 7627] <... futex resumed>) = 1 [pid 7617] <... futex resumed>) = 0 [pid 7616] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7627] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7616] <... mprotect resumed>) = 0 [pid 7630] <... creat resumed>) = 5 [pid 7629] set_robust_list(0x7fee02e529e0, 24 [pid 7621] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7618] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7616] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] close(4 [pid 7630] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7628] <... write resumed>) = 524288 [pid 7616] <... clone resumed>, parent_tid=[7631], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7631 [pid 7630] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7628] munmap(0x7fee02dd3000, 524288 [pid 7616] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] <... munmap resumed>) = 0 [pid 7616] <... futex resumed>) = 0 [pid 7628] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7616] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] <... openat resumed>) = 4 [pid 7628] ioctl(4, LOOP_SET_FD, 3 [pid 7629] <... set_robust_list resumed>) = 0 [pid 7628] <... ioctl resumed>) = 0 [pid 7618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 7631 attached [pid 7631] set_robust_list(0x7fee02e529e0, 24) = 0 [ 114.592212][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.604138][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.612151][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.616442][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.620972][ T7622] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.632983][ T7628] loop4: detected capacity change from 0 to 1024 [pid 7631] creat("./file1", 000 [pid 7629] creat("./file1", 000 [pid 5081] rmdir("./142/bus" [pid 7628] close(3) = 0 [pid 7628] mkdir("./bus", 0777 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7628] <... mkdir resumed>) = 0 [pid 7628] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7631] <... creat resumed>) = 5 [pid 7631] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7616] <... futex resumed>) = 0 [pid 7631] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] close(3 [pid 7629] <... creat resumed>) = 5 [pid 5081] <... close resumed>) = 0 [pid 7628] <... mount resumed>) = 0 [pid 7628] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7628] chdir("./bus") = 0 [pid 7628] ioctl(4, LOOP_CLR_FD) = 0 [pid 7628] close(4) = 0 [pid 7628] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... futex resumed>) = 0 [pid 7626] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] <... futex resumed>) = 1 [pid 7628] creat("./bus", 000) = 4 [pid 7628] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... futex resumed>) = 0 [pid 7626] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] <... futex resumed>) = 1 [pid 7628] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7629] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./142" [pid 7622] <... write resumed>) = 57344 [pid 7622] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 114.634564][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.648318][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.657813][ T7619] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.665554][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.666241][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.673346][ T7625] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7622] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7629] <... futex resumed>) = 0 [pid 7621] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... rmdir resumed>) = 0 [pid 7625] <... write resumed>) = 57344 [pid 7619] <... write resumed>) = 57344 [pid 7625] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] <... futex resumed>) = 0 [pid 7619] <... futex resumed>) = 0 [pid 7625] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7619] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7629] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7621] exit_group(0 [pid 7617] exit_group(0 [pid 5081] mkdir("./143", 0777) = 0 [pid 7618] exit_group(0 [pid 7617] <... exit_group resumed>) = ? [pid 7629] <... futex resumed>) = ? [pid 7621] <... exit_group resumed>) = ? [pid 7629] +++ exited with 0 +++ [pid 7627] <... futex resumed>) = ? [pid 7625] <... futex resumed>) = ? [pid 7622] <... futex resumed>) = ? [pid 7618] <... exit_group resumed>) = ? [pid 7630] <... futex resumed>) = ? [pid 7627] +++ exited with 0 +++ [pid 7625] +++ exited with 0 +++ [pid 7622] +++ exited with 0 +++ [pid 7621] +++ exited with 0 +++ [pid 7619] <... futex resumed>) = ? [pid 7617] +++ exited with 0 +++ [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7630] +++ exited with 0 +++ [pid 7619] +++ exited with 0 +++ [pid 7618] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 3 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7617, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7618, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7621, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] close(3 [pid 5077] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7632 [pid 5077] fstat(3, [pid 5075] fstat(3, [pid 5074] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] lstat("./140/binderfs", [pid 5074] lstat("./140/binderfs", [pid 5077] unlink("./141/binderfs" [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 5075] unlink("./140/binderfs" [pid 5074] unlink("./140/binderfs" [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 114.690348][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.695279][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.709275][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.717698][ T7623] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.718750][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.735216][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 7632 attached [pid 7632] set_robust_list(0x555556b055e0, 24) = 0 [pid 7632] chdir("./143") = 0 [pid 7632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7632] setpgid(0, 0) = 0 [pid 7632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7632] write(3, "1000", 4) = 4 [pid 7632] close(3) = 0 [pid 7632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7632] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7626] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7626] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7632] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7632] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7632] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7633], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7633 [pid 7632] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7632] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7626] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7623] <... write resumed>) = 57344 [pid 7623] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7623] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7633 attached [pid 7626] <... clone resumed>, parent_tid=[7634], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7634 [pid 7633] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7633] memfd_create("syzkaller", 0 [pid 7626] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7626] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7633] <... memfd_create resumed>) = 3 [pid 7633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7634 attached [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./140/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7634] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7634] creat("./file1", 000 [pid 5075] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, [pid 7634] <... creat resumed>) = 5 [pid 7633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7628] <... write resumed>) = 57344 [pid 7616] exit_group(0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = 0 [pid 7634] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./140/bus", [pid 7634] <... futex resumed>) = 1 [pid 7631] <... futex resumed>) = ? [pid 7628] <... futex resumed>) = 0 [pid 7626] <... futex resumed>) = 0 [pid 7623] <... futex resumed>) = ? [pid 7616] <... exit_group resumed>) = ? [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7634] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7631] +++ exited with 0 +++ [pid 7626] exit_group(0 [pid 7623] +++ exited with 0 +++ [pid 5077] lstat("./141/bus", [pid 7634] <... futex resumed>) = ? [pid 7626] <... exit_group resumed>) = ? [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 7634] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5074] fstat(4, [pid 5077] <... openat resumed>) = 4 [pid 5077] fstat(4, [pid 5075] rmdir("./140/bus" [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, [pid 7616] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7616, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] getdents64(4, [pid 7633] <... write resumed>) = 524288 [pid 7628] +++ exited with 0 +++ [pid 7626] +++ exited with 0 +++ [pid 5077] getdents64(4, [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7626, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] close(4 [pid 5077] close(4 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [ 114.737138][ T52] hfsplus: b-tree write err: -5, ino 4 [ 114.743376][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.748396][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 114.762863][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.764149][ T9] hfsplus: b-tree write err: -5, ino 4 [ 114.772628][ T7628] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] rmdir("./140/bus" [pid 5077] rmdir("./141/bus" [pid 5076] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5077] getdents64(3, [pid 5076] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] fstat(3, [pid 5074] <... close resumed>) = 0 [pid 7633] munmap(0x7fee02dd3000, 524288 [pid 5080] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... close resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] rmdir("./140" [pid 7633] <... munmap resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] rmdir("./141" [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7633] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] fstat(3, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] rmdir("./140" [pid 5074] mkdir("./141", 0777 [pid 7633] <... openat resumed>) = 4 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] mkdir("./142", 0777 [pid 5076] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7633] ioctl(4, LOOP_SET_FD, 3 [pid 5080] getdents64(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./141", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] lstat("./140/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 5080] umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] unlink("./140/binderfs" [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] lstat("./140/binderfs", [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] close(3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] close(3 [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5080] unlink("./140/binderfs" [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... unlink resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7635 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7636 [pid 5076] lstat("./140/bus", [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7633] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7633] close(3 [pid 5076] getdents64(4, [pid 7633] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7633] mkdir("./bus", 0777 [pid 5076] close(4./strace-static-x86_64: Process 7635 attached [pid 7633] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7637 [pid 7633] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5076] rmdir("./140/bus" [pid 7635] set_robust_list(0x555556b055e0, 24 [pid 5076] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7636 attached [pid 7635] <... set_robust_list resumed>) = 0 [pid 5076] getdents64(3, [pid 7636] set_robust_list(0x555556b055e0, 24 [pid 7635] chdir("./141" [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7636] <... set_robust_list resumed>) = 0 [pid 7635] <... chdir resumed>) = 0 [pid 5076] close(3./strace-static-x86_64: Process 7637 attached [pid 7636] chdir("./142" [pid 7635] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7633] <... mount resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7637] set_robust_list(0x555556b055e0, 24 [pid 7636] <... chdir resumed>) = 0 [pid 7635] <... prctl resumed>) = 0 [pid 7633] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5076] rmdir("./140" [pid 7637] <... set_robust_list resumed>) = 0 [pid 7636] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7635] setpgid(0, 0 [pid 7633] <... openat resumed>) = 3 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7637] chdir("./141" [pid 7636] <... prctl resumed>) = 0 [pid 7635] <... setpgid resumed>) = 0 [pid 7633] chdir("./bus" [pid 5080] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./141", 0777 [pid 7637] <... chdir resumed>) = 0 [pid 7636] setpgid(0, 0 [pid 7635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7633] <... chdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 7636] <... setpgid resumed>) = 0 [pid 7633] ioctl(4, LOOP_CLR_FD [pid 5080] lstat("./140/bus", [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7635] <... openat resumed>) = 3 [pid 7633] <... ioctl resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7637] <... prctl resumed>) = 0 [pid 7636] <... openat resumed>) = 3 [pid 7635] write(3, "1000", 4 [pid 7633] close(4 [pid 5080] umount2("./140/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7637] setpgid(0, 0 [pid 7636] write(3, "1000", 4 [pid 7635] <... write resumed>) = 4 [pid 7633] <... close resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7637] <... setpgid resumed>) = 0 [pid 7636] <... write resumed>) = 4 [pid 7635] close(3 [pid 7633] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./140/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 7637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7636] close(3 [pid 7635] <... close resumed>) = 0 [pid 7633] <... futex resumed>) = 1 [pid 7632] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 7636] <... close resumed>) = 0 [pid 7633] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7632] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(4, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7637] <... openat resumed>) = 3 [pid 7636] symlink("/dev/binderfs", "./binderfs" [pid 7635] symlink("/dev/binderfs", "./binderfs" [pid 7633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7632] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7637] write(3, "1000", 4 [pid 7636] <... symlink resumed>) = 0 [pid 7635] <... symlink resumed>) = 0 [pid 7633] creat("./bus", 000 [pid 7632] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7638 [pid 7637] <... write resumed>) = 4 [pid 7636] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7633] <... creat resumed>) = 4 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7637] close(3 [pid 7636] <... futex resumed>) = 0 [pid 7635] <... futex resumed>) = 0 [pid 7633] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 7637] <... close resumed>) = 0 [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7633] <... futex resumed>) = 1 [pid 7632] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7637] symlink("/dev/binderfs", "./binderfs" [pid 7636] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7635] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7633] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7632] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(4 [pid 7636] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7632] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7637] <... symlink resumed>) = 0 [pid 7636] <... mprotect resumed>) = 0 [pid 7635] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [ 114.833704][ T7633] loop5: detected capacity change from 0 to 1024 [ 114.844662][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 114.858215][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 7633] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7632] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] rmdir("./140/bus"./strace-static-x86_64: Process 7638 attached [pid 7637] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7636] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7635] <... mprotect resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7638] set_robust_list(0x555556b055e0, 24 [pid 7637] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 7638] <... set_robust_list resumed>) = 0 [pid 7637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7636] <... clone resumed>, parent_tid=[7639], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7639 [pid 7635] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7638] chdir("./141" [pid 7636] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 7638] <... chdir resumed>) = 0 [pid 7637] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7636] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7638] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7637] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7636] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7635] <... clone resumed>, parent_tid=[7640], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7640 [pid 5080] rmdir("./140" [pid 7638] <... prctl resumed>) = 0 [pid 7637] <... mprotect resumed>) = 0 [pid 7635] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rmdir resumed>) = 0 [pid 7638] setpgid(0, 0 [pid 7637] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7635] <... futex resumed>) = 0 [pid 5080] mkdir("./141", 0777./strace-static-x86_64: Process 7639 attached [pid 7638] <... setpgid resumed>) = 0 [pid 7635] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... mkdir resumed>) = 0 [pid 7639] set_robust_list(0x7fee0b1f39e0, 24 [pid 7638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7637] <... clone resumed>, parent_tid=[7641], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7641 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7639] <... set_robust_list resumed>) = 0 [pid 7638] <... openat resumed>) = 3 [pid 7637] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 7639] memfd_create("syzkaller", 0 [pid 7638] write(3, "1000", 4 [pid 7637] <... futex resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7639] <... memfd_create resumed>) = 3 [pid 7638] <... write resumed>) = 4 [pid 7637] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7638] close(3 [pid 5080] close(3 [pid 7639] <... mmap resumed>) = 0x7fee02dd3000 [pid 7638] <... close resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7638] symlink("/dev/binderfs", "./binderfs" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7638] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 7640 attached ./strace-static-x86_64: Process 7641 attached [pid 7639] <... write resumed>) = 524288 [pid 7638] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7642 [pid 7641] set_robust_list(0x7fee0b1f39e0, 24 [pid 7640] set_robust_list(0x7fee0b1f39e0, 24 [pid 7638] <... futex resumed>) = 0 [pid 7638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7640] <... set_robust_list resumed>) = 0 [pid 7641] <... set_robust_list resumed>) = 0 [pid 7638] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7638] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7640] memfd_create("syzkaller", 0 [pid 7638] <... mprotect resumed>) = 0 [pid 7641] memfd_create("syzkaller", 0 [pid 7638] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7641] <... memfd_create resumed>) = 3 [pid 7640] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 7642 attached [pid 7640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7638] <... clone resumed>, parent_tid=[7643], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7643 [pid 7642] set_robust_list(0x555556b055e0, 24 [pid 7641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7640] <... mmap resumed>) = 0x7fee02dd3000 [pid 7638] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] <... set_robust_list resumed>) = 0 [pid 7639] munmap(0x7fee02dd3000, 524288 [pid 7638] <... futex resumed>) = 0 [pid 7642] chdir("./141" [pid 7639] <... munmap resumed>) = 0 [pid 7638] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7642] <... chdir resumed>) = 0 [pid 7641] <... mmap resumed>) = 0x7fee02dd3000 [pid 7639] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7639] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7643 attached [pid 7642] <... prctl resumed>) = 0 [ 114.906767][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.921398][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7639] ioctl(4, LOOP_SET_FD, 3 [pid 7643] set_robust_list(0x7fee0b1f39e0, 24 [pid 7642] setpgid(0, 0 [pid 7641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7643] <... set_robust_list resumed>) = 0 [pid 7642] <... setpgid resumed>) = 0 [pid 7643] memfd_create("syzkaller", 0 [pid 7642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7643] <... memfd_create resumed>) = 3 [pid 7642] <... openat resumed>) = 3 [pid 7643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7641] <... write resumed>) = 524288 [pid 7640] <... write resumed>) = 524288 [pid 7639] <... ioctl resumed>) = 0 [pid 7641] munmap(0x7fee02dd3000, 524288 [pid 7640] munmap(0x7fee02dd3000, 524288 [pid 7641] <... munmap resumed>) = 0 [pid 7640] <... munmap resumed>) = 0 [pid 7641] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7640] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7641] <... openat resumed>) = 4 [pid 7640] <... openat resumed>) = 4 [pid 7641] ioctl(4, LOOP_SET_FD, 3 [pid 7640] ioctl(4, LOOP_SET_FD, 3 [pid 7643] <... mmap resumed>) = 0x7fee02dd3000 [pid 7642] write(3, "1000", 4 [pid 7632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7639] close(3) = 0 [pid 7639] mkdir("./bus", 0777) = 0 [pid 7639] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [ 114.948076][ T7639] loop3: detected capacity change from 0 to 1024 [ 114.956256][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.964068][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.968671][ T7641] loop1: detected capacity change from 0 to 1024 [ 114.974437][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [ 114.978268][ T7640] loop0: detected capacity change from 0 to 1024 [pid 7639] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7639] chdir("./bus") = 0 [pid 7639] ioctl(4, LOOP_CLR_FD) = 0 [pid 7639] close(4 [pid 7643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7642] <... write resumed>) = 4 [pid 7641] <... ioctl resumed>) = 0 [pid 7640] <... ioctl resumed>) = 0 [pid 7639] <... close resumed>) = 0 [pid 7633] <... write resumed>) = 57344 [pid 7632] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... write resumed>) = 524288 [pid 7642] close(3 [pid 7632] <... futex resumed>) = 0 [pid 7643] munmap(0x7fee02dd3000, 524288 [pid 7642] <... close resumed>) = 0 [pid 7633] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7643] <... munmap resumed>) = 0 [pid 7642] symlink("/dev/binderfs", "./binderfs" [pid 7633] <... futex resumed>) = 0 [pid 7632] <... mmap resumed>) = 0x7fee02e32000 [pid 7643] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7642] <... symlink resumed>) = 0 [pid 7633] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7632] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7643] <... openat resumed>) = 4 [pid 7642] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] <... mprotect resumed>) = 0 [pid 7643] ioctl(4, LOOP_SET_FD, 3 [pid 7642] <... futex resumed>) = 0 [pid 7632] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7641] close(3 [pid 7640] close(3 [pid 7639] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] <... close resumed>) = 0 [pid 7641] mkdir("./bus", 0777) = 0 [pid 7640] <... close resumed>) = 0 [pid 7640] mkdir("./bus", 0777 [pid 7639] <... futex resumed>) = 1 [pid 7636] <... futex resumed>) = 0 [pid 7639] creat("./bus", 000 [pid 7636] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7639] <... creat resumed>) = 4 [pid 7636] <... futex resumed>) = 0 [pid 7642] <... mmap resumed>) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7644 attached [pid 7643] <... ioctl resumed>) = 0 [pid 7642] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7640] <... mkdir resumed>) = 0 [pid 7641] <... mount resumed>) = 0 [pid 7639] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7636] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7642] <... mprotect resumed>) = 0 [pid 7641] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7640] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7639] <... futex resumed>) = 0 [pid 7636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7632] <... clone resumed>, parent_tid=[7644], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7644 [pid 7644] set_robust_list(0x7fee02e529e0, 24 [pid 7643] close(3 [pid 7642] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7641] <... openat resumed>) = 3 [pid 7639] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7636] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7644] <... set_robust_list resumed>) = 0 [pid 7643] <... close resumed>) = 0 [pid 7636] <... futex resumed>) = 0 [pid 7632] <... futex resumed>) = 0 [pid 7644] creat("./file1", 000 [pid 7643] mkdir("./bus", 0777 [pid 7642] <... clone resumed>, parent_tid=[7645], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7645 [pid 7636] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] <... creat resumed>) = 5 [pid 7643] <... mkdir resumed>) = 0 [pid 7642] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7644] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7642] <... futex resumed>) = 0 [pid 7644] <... futex resumed>) = 1 [pid 7642] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7632] <... futex resumed>) = 0 [ 114.985162][ T7633] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.010437][ T7643] loop2: detected capacity change from 0 to 1024 [ 115.032143][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.039498][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7644] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7643] <... mount resumed>) = 0 [pid 7640] <... mount resumed>) = 0 [pid 7632] exit_group(0 [pid 7644] <... futex resumed>) = ? [pid 7643] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7633] <... futex resumed>) = ? [pid 7632] <... exit_group resumed>) = ? [pid 7644] +++ exited with 0 +++ [pid 7643] <... openat resumed>) = 3 [pid 7633] +++ exited with 0 +++ [pid 7632] +++ exited with 0 +++ [pid 7643] chdir("./bus") = 0 [pid 7643] ioctl(4, LOOP_CLR_FD) = 0 [pid 7643] close(4) = 0 [pid 7643] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7638] <... futex resumed>) = 0 [pid 7643] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7638] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7638] <... futex resumed>) = 0 [pid 7643] creat("./bus", 000 [pid 7638] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] <... creat resumed>) = 4 [pid 7643] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7638] <... futex resumed>) = 0 [pid 7643] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7638] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7638] <... futex resumed>) = 0 [pid 7643] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7638] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7641] chdir("./bus" [pid 7640] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7645 attached [pid 7645] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7645] memfd_create("syzkaller", 0) = 3 [pid 7645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7641] <... chdir resumed>) = 0 [pid 7640] <... openat resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7632, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7641] ioctl(4, LOOP_CLR_FD [pid 7640] chdir("./bus" [pid 7641] <... ioctl resumed>) = 0 [pid 7640] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7645] munmap(0x7fee02dd3000, 524288) = 0 [pid 7645] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7641] close(4 [pid 7640] ioctl(4, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7636] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7636] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7636] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7646], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7646 [pid 7636] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 115.039512][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.039639][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.052874][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.070804][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.078606][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.081355][ T7645] loop4: detected capacity change from 0 to 1024 [pid 7645] ioctl(4, LOOP_SET_FD, 3 [pid 7641] <... close resumed>) = 0 [pid 7640] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7641] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] close(4 [pid 5081] fstat(3, ./strace-static-x86_64: Process 7646 attached [pid 7646] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7646] creat("./file1", 000 [pid 7640] <... close resumed>) = 0 [pid 7645] <... ioctl resumed>) = 0 [pid 7641] <... futex resumed>) = 1 [pid 7640] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7637] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7641] creat("./bus", 000 [pid 7640] <... futex resumed>) = 1 [pid 7638] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7637] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 7638] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7637] <... futex resumed>) = 0 [pid 7635] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7641] <... creat resumed>) = 4 [pid 7640] creat("./bus", 000 [pid 7638] <... mmap resumed>) = 0x7fee02e32000 [pid 7637] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7635] <... futex resumed>) = 0 [pid 7641] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7638] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7635] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7641] <... futex resumed>) = 0 [pid 7640] <... creat resumed>) = 4 [pid 7638] <... mprotect resumed>) = 0 [pid 7637] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7641] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7640] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7638] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7637] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7640] <... futex resumed>) = 1 [pid 7637] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7635] <... futex resumed>) = 0 [pid 5081] lstat("./143/binderfs", [pid 7640] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7638] <... clone resumed>, parent_tid=[7647], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7647 [pid 7638] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7638] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7645] close(3) = 0 [pid 7645] mkdir("./bus", 0777) = 0 [pid 7645] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7645] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7645] chdir("./bus") = 0 [pid 7645] ioctl(4, LOOP_CLR_FD) = 0 [pid 7645] close(4) = 0 [pid 7645] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7645] <... futex resumed>) = 1 [pid 7645] creat("./bus", 000 [pid 7635] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7635] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7640] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7635] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./143/binderfs") = 0 [pid 5081] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7645] <... creat resumed>) = 4 [pid 7645] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7636] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 7645] <... futex resumed>) = 1 [pid 7636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7645] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 7647 attached [pid 7647] set_robust_list(0x7fee02e529e0, 24) = 0 [ 115.094458][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.102191][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.120337][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.130727][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.136611][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7647] creat("./file1", 000 [pid 7638] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7638] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7638] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7637] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7642] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7642] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7642] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7648], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7648 [pid 7642] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7648 attached [pid 7648] set_robust_list(0x7fee02e529e0, 24) = 0 [ 115.144643][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.153057][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 115.163558][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.171236][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.174046][ T7639] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.179124][ T7643] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7648] creat("./file1", 000 [pid 7637] <... futex resumed>) = 0 [pid 7635] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7646] <... creat resumed>) = 5 [pid 7646] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7646] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7639] <... write resumed>) = 57344 [pid 7639] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7636] exit_group(0 [pid 7646] <... futex resumed>) = ? [pid 7636] <... exit_group resumed>) = ? [pid 7646] +++ exited with 0 +++ [pid 7639] <... futex resumed>) = ? [pid 7648] <... creat resumed>) = 5 [pid 7648] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7648] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7635] <... futex resumed>) = 0 [pid 7639] +++ exited with 0 +++ [pid 7636] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7636, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 7637] <... mmap resumed>) = 0x7fee02e32000 [pid 7635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... restart_syscall resumed>) = 0 [pid 7647] <... creat resumed>) = 5 [pid 7637] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7635] <... mmap resumed>) = 0x7fee02e32000 [pid 7647] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7647] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7637] <... mprotect resumed>) = 0 [pid 7635] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./142/binderfs") = 0 [ 115.192846][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.198305][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.207536][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.209304][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.217127][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.223322][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.241948][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7643] <... write resumed>) = 57344 [pid 7637] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7635] <... mprotect resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7643] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7635] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] lstat("./143/bus", [pid 7643] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7637] <... clone resumed>, parent_tid=[7649], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7649 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 7638] exit_group(0 [pid 7647] <... futex resumed>) = ? [pid 7638] <... exit_group resumed>) = ? [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7647] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./142/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7643] <... futex resumed>) = ? [pid 7637] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] <... clone resumed>, parent_tid=[7650], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7650 [pid 5081] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(4, [pid 7643] +++ exited with 0 +++ [pid 7638] +++ exited with 0 +++ [pid 7637] <... futex resumed>) = 0 [pid 7635] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7650 attached [pid 5077] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7638, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7650] set_robust_list(0x7fee02e529e0, 24 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7650] <... set_robust_list resumed>) = 0 [pid 5077] close(4 [pid 7650] creat("./file1", 000 [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./142/bus") = 0 [pid 5077] getdents64(3, ./strace-static-x86_64: Process 7649 attached [pid 7637] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7635] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7635] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... openat resumed>) = 4 [pid 5077] close(3 [pid 5076] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7649] set_robust_list(0x7fee02e529e0, 24 [pid 5081] fstat(4, [pid 5077] rmdir("./142" [pid 5076] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7649] <... set_robust_list resumed>) = 0 [pid 7641] <... write resumed>) = 57344 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 115.249697][ T11] hfsplus: b-tree write err: -5, ino 4 [ 115.251793][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.264829][ T7641] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.284793][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7649] creat("./file1", 000 [pid 7641] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5077] mkdir("./143", 0777 [pid 5076] fstat(3, [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(3, [pid 5077] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5076] lstat("./141/binderfs", [pid 7649] <... creat resumed>) = 5 [pid 7641] <... futex resumed>) = 0 [pid 7640] <... write resumed>) = 57344 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 7649] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7640] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 7649] <... futex resumed>) = 1 [pid 7640] <... futex resumed>) = 0 [pid 7637] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7649] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7640] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7637] exit_group(0 [pid 5081] close(4 [pid 7649] <... futex resumed>) = ? [pid 7641] <... futex resumed>) = ? [pid 7637] <... exit_group resumed>) = ? [pid 5081] <... close resumed>) = 0 [pid 7649] +++ exited with 0 +++ [pid 7641] +++ exited with 0 +++ [pid 7637] +++ exited with 0 +++ [pid 5081] rmdir("./143/bus") = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7637, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./141/binderfs" [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7650] <... creat resumed>) = 5 [pid 5081] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./143") = 0 [pid 5075] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] mkdir("./144", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7651 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7651 attached [pid 7650] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7645] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 3 [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(3, [pid 7651] set_robust_list(0x555556b055e0, 24 [pid 7650] <... futex resumed>) = 1 [pid 7645] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] <... futex resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7635] exit_group(0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] getdents64(3, [pid 7640] <... futex resumed>) = ? [pid 7635] <... exit_group resumed>) = ? [pid 5081] close(3 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7640] +++ exited with 0 +++ [pid 5081] <... close resumed>) = 0 [pid 5075] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7650] +++ exited with 0 +++ [pid 7635] +++ exited with 0 +++ [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./141/binderfs", [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7652 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./141/binderfs") = 0 [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7652 attached [pid 7651] <... set_robust_list resumed>) = 0 [pid 7645] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7635, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7652] set_robust_list(0x555556b055e0, 24 [pid 7651] chdir("./143" [pid 7645] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] exit_group(0 [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7652] <... set_robust_list resumed>) = 0 [pid 7651] <... chdir resumed>) = 0 [pid 7648] <... futex resumed>) = ? [pid 7645] <... futex resumed>) = ? [pid 7642] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7652] chdir("./144" [pid 7651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7648] +++ exited with 0 +++ [pid 7645] +++ exited with 0 +++ [pid 7642] +++ exited with 0 +++ [pid 5076] lstat("./141/bus", [pid 7652] <... chdir resumed>) = 0 [pid 7651] <... prctl resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7651] setpgid(0, 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7642, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7652] <... prctl resumed>) = 0 [pid 7651] <... setpgid resumed>) = 0 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7652] setpgid(0, 0 [pid 7651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7652] <... setpgid resumed>) = 0 [pid 7651] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7651] write(3, "1000", 4 [pid 5076] fstat(4, [pid 5074] <... openat resumed>) = 3 [pid 7652] <... openat resumed>) = 3 [pid 7651] <... write resumed>) = 4 [pid 5080] umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(3, [pid 7652] write(3, "1000", 4 [pid 7651] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7652] <... write resumed>) = 4 [pid 7651] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 7652] close(3 [pid 7651] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7652] <... close resumed>) = 0 [pid 7651] <... symlink resumed>) = 0 [pid 5080] fstat(3, [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [ 115.299601][ T7640] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.309482][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.319585][ T7645] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.329854][ T11] hfsplus: b-tree write err: -5, ino 4 [ 115.340551][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5074] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7652] symlink("/dev/binderfs", "./binderfs" [pid 7651] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7652] <... symlink resumed>) = 0 [pid 7651] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5074] lstat("./141/binderfs", [pid 7652] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] rmdir("./141/bus" [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7652] <... futex resumed>) = 0 [pid 7651] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5074] unlink("./141/binderfs" [pid 7652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7651] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 7652] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7651] <... mprotect resumed>) = 0 [pid 5080] lstat("./141/binderfs", [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7652] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7651] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] close(3 [pid 7652] <... mprotect resumed>) = 0 [pid 5080] unlink("./141/binderfs" [pid 5076] <... close resumed>) = 0 [pid 7652] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7651] <... clone resumed>, parent_tid=[7653], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7653 [pid 5080] <... unlink resumed>) = 0 [pid 5076] rmdir("./141" [pid 7651] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 7652] <... clone resumed>, parent_tid=[7654], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7654 [pid 7651] <... futex resumed>) = 0 [pid 5076] mkdir("./142", 0777 [pid 7652] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7651] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... mkdir resumed>) = 0 [pid 7652] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7652] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7654 attached [pid 5080] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] lstat("./141/bus", [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7655 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./141/bus", [pid 5075] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] lstat("./141/bus", [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./141/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] fstat(4, [pid 5074] openat(AT_FDCWD, "./141/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 4 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7655 attached [pid 5080] fstat(4, [pid 5075] getdents64(4, [pid 5074] fstat(4, ./strace-static-x86_64: Process 7653 attached [pid 7655] set_robust_list(0x555556b055e0, 24 [pid 7654] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7655] <... set_robust_list resumed>) = 0 [pid 7654] <... set_robust_list resumed>) = 0 [pid 7653] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] getdents64(4, [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 7655] chdir("./142" [pid 7654] memfd_create("syzkaller", 0 [pid 7653] <... set_robust_list resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7655] <... chdir resumed>) = 0 [pid 7654] <... memfd_create resumed>) = 3 [pid 7653] memfd_create("syzkaller", 0 [pid 5080] getdents64(4, [pid 5075] close(4 [pid 5074] getdents64(4, [pid 7655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7653] <... memfd_create resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7655] <... prctl resumed>) = 0 [pid 7654] <... mmap resumed>) = 0x7fee02dd3000 [pid 7653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] close(4 [pid 5075] rmdir("./141/bus" [pid 5074] close(4 [pid 7655] setpgid(0, 0 [pid 7653] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7655] <... setpgid resumed>) = 0 [pid 7653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] rmdir("./141/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./141/bus" [pid 7655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7653] <... write resumed>) = 524288 [pid 5080] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 7655] <... openat resumed>) = 3 [pid 5080] getdents64(3, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 7655] write(3, "1000", 4 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7655] <... write resumed>) = 4 [pid 5080] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] close(3 [pid 7655] close(3 [pid 5080] <... close resumed>) = 0 [pid 5075] rmdir("./141" [pid 5074] <... close resumed>) = 0 [pid 7655] <... close resumed>) = 0 [pid 5080] rmdir("./141" [pid 5074] rmdir("./141" [pid 7655] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7655] <... symlink resumed>) = 0 [pid 5080] mkdir("./142", 0777 [pid 5075] mkdir("./142", 0777 [pid 5074] mkdir("./142", 0777 [pid 7655] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] munmap(0x7fee02dd3000, 524288 [pid 5080] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7655] <... futex resumed>) = 0 [pid 7653] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7653] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7655] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7653] <... openat resumed>) = 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [ 115.368334][ T11] hfsplus: b-tree write err: -5, ino 4 [ 115.374341][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7655] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7653] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7655] <... mprotect resumed>) = 0 [pid 7654] <... write resumed>) = 524288 [pid 5080] close(3 [pid 5075] close(3 [pid 7654] munmap(0x7fee02dd3000, 524288 [pid 5075] <... close resumed>) = 0 [pid 7654] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7654] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7656 [pid 7654] ioctl(4, LOOP_SET_FD, 3 [pid 7655] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... close resumed>) = 0 [pid 5074] close(3./strace-static-x86_64: Process 7656 attached [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 7657 attached [pid 7656] set_robust_list(0x555556b055e0, 24 [pid 7655] <... clone resumed>, parent_tid=[7657], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7657 [pid 7653] <... ioctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7657] set_robust_list(0x7fee0b1f39e0, 24 [pid 7656] <... set_robust_list resumed>) = 0 [pid 7655] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7658 [pid 7656] chdir("./142" [pid 7657] <... set_robust_list resumed>) = 0 [pid 7656] <... chdir resumed>) = 0 [pid 7655] <... futex resumed>) = 0 [pid 7653] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7659 [pid 7656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7655] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7653] mkdir("./bus", 0777 [pid 7656] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7659 attached ./strace-static-x86_64: Process 7658 attached [pid 7657] memfd_create("syzkaller", 0 [pid 7656] setpgid(0, 0 [pid 7654] <... ioctl resumed>) = 0 [pid 7653] <... mkdir resumed>) = 0 [pid 7659] set_robust_list(0x555556b055e0, 24 [pid 7658] set_robust_list(0x555556b055e0, 24 [pid 7657] <... memfd_create resumed>) = 3 [pid 7656] <... setpgid resumed>) = 0 [pid 7654] close(3 [pid 7653] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7659] <... set_robust_list resumed>) = 0 [pid 7658] <... set_robust_list resumed>) = 0 [pid 7657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7654] <... close resumed>) = 0 [pid 7659] chdir("./142" [pid 7658] chdir("./142" [pid 7657] <... mmap resumed>) = 0x7fee02dd3000 [pid 7656] <... openat resumed>) = 3 [pid 7654] mkdir("./bus", 0777 [pid 7659] <... chdir resumed>) = 0 [pid 7653] <... mount resumed>) = 0 [pid 7653] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7653] chdir("./bus") = 0 [pid 7659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7656] write(3, "1000", 4 [pid 7653] ioctl(4, LOOP_CLR_FD [pid 7659] <... prctl resumed>) = 0 [pid 7658] <... chdir resumed>) = 0 [pid 7656] <... write resumed>) = 4 [pid 7654] <... mkdir resumed>) = 0 [pid 7653] <... ioctl resumed>) = 0 [pid 7659] setpgid(0, 0 [pid 7656] close(3 [pid 7653] close(4 [pid 7659] <... setpgid resumed>) = 0 [pid 7658] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7657] <... write resumed>) = 524288 [pid 7656] <... close resumed>) = 0 [pid 7654] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7653] <... close resumed>) = 0 [pid 7659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7656] symlink("/dev/binderfs", "./binderfs" [pid 7653] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7651] <... futex resumed>) = 0 [pid 7656] <... symlink resumed>) = 0 [pid 7653] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] <... openat resumed>) = 3 [pid 7656] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = 0 [pid 7659] write(3, "1000", 4 [pid 7656] <... futex resumed>) = 0 [pid 7653] creat("./bus", 000 [pid 7651] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] <... write resumed>) = 4 [pid 7656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7653] <... creat resumed>) = 4 [pid 7653] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] close(3 [pid 7656] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7653] <... futex resumed>) = 1 [pid 7651] <... futex resumed>) = 0 [pid 7659] <... close resumed>) = 0 [pid 7656] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7653] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] symlink("/dev/binderfs", "./binderfs" [pid 7656] <... mprotect resumed>) = 0 [pid 7653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = 0 [pid 7659] <... symlink resumed>) = 0 [ 115.422996][ T7653] loop3: detected capacity change from 0 to 1024 [ 115.433726][ T7654] loop5: detected capacity change from 0 to 1024 [pid 7653] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7651] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... prctl resumed>) = 0 [pid 7657] munmap(0x7fee02dd3000, 524288 [pid 7656] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7659] <... futex resumed>) = 0 [pid 7658] setpgid(0, 0 [pid 7657] <... munmap resumed>) = 0 [pid 7659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7658] <... setpgid resumed>) = 0 [pid 7657] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7656] <... clone resumed>, parent_tid=[7660], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7660 [pid 7659] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7657] <... openat resumed>) = 4 [pid 7656] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7658] <... openat resumed>) = 3 [pid 7657] ioctl(4, LOOP_SET_FD, 3 [pid 7656] <... futex resumed>) = 0 [pid 7659] <... mprotect resumed>) = 0 [pid 7658] write(3, "1000", 4 [pid 7657] <... ioctl resumed>) = 0 [pid 7656] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7660 attached [pid 7659] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7658] <... write resumed>) = 4 [pid 7657] close(3 [pid 7654] <... mount resumed>) = 0 [pid 7658] close(3 [pid 7657] <... close resumed>) = 0 [pid 7659] <... clone resumed>, parent_tid=[7661], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7661 [pid 7658] <... close resumed>) = 0 [pid 7657] mkdir("./bus", 0777 [pid 7659] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] symlink("/dev/binderfs", "./binderfs" [pid 7657] <... mkdir resumed>) = 0 [pid 7659] <... futex resumed>) = 0 [pid 7658] <... symlink resumed>) = 0 [pid 7657] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7659] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7658] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7654] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7660] set_robust_list(0x7fee0b1f39e0, 24 [pid 7658] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7658] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7658] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7662], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7662 [pid 7658] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7658] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7661 attached [pid 7661] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7661] memfd_create("syzkaller", 0) = 3 [pid 7661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7654] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7662 attached [pid 7660] <... set_robust_list resumed>) = 0 [pid 7657] <... mount resumed>) = 0 [pid 7654] chdir("./bus" [pid 7662] set_robust_list(0x7fee0b1f39e0, 24 [pid 7660] memfd_create("syzkaller", 0 [pid 7657] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7654] <... chdir resumed>) = 0 [pid 7662] <... set_robust_list resumed>) = 0 [pid 7660] <... memfd_create resumed>) = 3 [pid 7654] ioctl(4, LOOP_CLR_FD [pid 7662] memfd_create("syzkaller", 0 [pid 7660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7657] <... openat resumed>) = 3 [pid 7654] <... ioctl resumed>) = 0 [pid 7662] <... memfd_create resumed>) = 3 [pid 7660] <... mmap resumed>) = 0x7fee02dd3000 [pid 7657] chdir("./bus" [pid 7654] close(4 [pid 7662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7657] <... chdir resumed>) = 0 [pid 7662] <... mmap resumed>) = 0x7fee02dd3000 [pid 7657] ioctl(4, LOOP_CLR_FD [pid 7654] <... close resumed>) = 0 [pid 7657] <... ioctl resumed>) = 0 [pid 7654] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] close(4) = 0 [pid 7657] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7655] <... futex resumed>) = 0 [pid 7662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7657] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7655] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7654] <... futex resumed>) = 1 [pid 7652] <... futex resumed>) = 0 [pid 7661] <... write resumed>) = 524288 [pid 7657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7655] <... futex resumed>) = 0 [pid 7654] creat("./bus", 000 [pid 7652] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] creat("./bus", 000 [pid 7655] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7654] <... creat resumed>) = 4 [pid 7652] <... futex resumed>) = 0 [pid 7661] munmap(0x7fee02dd3000, 524288 [pid 7657] <... creat resumed>) = 4 [pid 7654] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7661] <... munmap resumed>) = 0 [pid 7657] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7654] <... futex resumed>) = 0 [pid 7652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7661] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7657] <... futex resumed>) = 1 [ 115.469614][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.476677][ T7657] loop2: detected capacity change from 0 to 1024 [ 115.486447][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.494309][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.502012][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7655] <... futex resumed>) = 0 [pid 7654] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7651] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... openat resumed>) = 4 [pid 7657] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7655] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... futex resumed>) = 0 [pid 7661] ioctl(4, LOOP_SET_FD, 3 [pid 7657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7655] <... futex resumed>) = 0 [pid 7652] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7662] <... write resumed>) = 524288 [pid 7660] <... write resumed>) = 524288 [pid 7657] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7655] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = 0 [pid 7662] munmap(0x7fee02dd3000, 524288 [pid 7660] munmap(0x7fee02dd3000, 524288 [pid 7662] <... munmap resumed>) = 0 [pid 7661] <... ioctl resumed>) = 0 [pid 7660] <... munmap resumed>) = 0 [pid 7654] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7662] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7660] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7651] <... mmap resumed>) = 0x7fee02e32000 [pid 7662] <... openat resumed>) = 4 [pid 7660] <... openat resumed>) = 4 [pid 7651] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7662] ioctl(4, LOOP_SET_FD, 3 [pid 7660] ioctl(4, LOOP_SET_FD, 3 [pid 7651] <... mprotect resumed>) = 0 [ 115.528232][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.531239][ T7661] loop0: detected capacity change from 0 to 1024 [ 115.546292][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.554196][ T7653] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.555536][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.565214][ T7662] loop4: detected capacity change from 0 to 1024 [pid 7660] <... ioctl resumed>) = 0 [pid 7653] <... write resumed>) = 57344 [pid 7651] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7663], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7663 [pid 7651] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7651] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7661] close(3) = 0 [pid 7661] mkdir("./bus", 0777) = 0 [pid 7661] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7660] close(3) = 0 [ 115.575522][ T7660] loop1: detected capacity change from 0 to 1024 [ 115.577528][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.589551][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.591915][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.598103][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.604643][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.611876][ T7657] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7663 attached [pid 7662] <... ioctl resumed>) = 0 [pid 7661] <... mount resumed>) = 0 [pid 7655] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7653] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7661] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7655] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... openat resumed>) = 3 [pid 7655] <... futex resumed>) = 0 [pid 7661] chdir("./bus" [pid 7655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7661] <... chdir resumed>) = 0 [pid 7655] <... mmap resumed>) = 0x7fee02e32000 [pid 7661] ioctl(4, LOOP_CLR_FD [pid 7655] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7661] <... ioctl resumed>) = 0 [pid 7655] <... mprotect resumed>) = 0 [pid 7661] close(4 [pid 7660] mkdir("./bus", 0777 [pid 7655] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7663] set_robust_list(0x7fee02e529e0, 24 [pid 7662] close(3 [pid 7661] <... close resumed>) = 0 [pid 7657] <... write resumed>) = 57344 [pid 7653] <... futex resumed>) = 0 [pid 7652] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7661] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7655] <... clone resumed>, parent_tid=[7664], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7664 [pid 7661] <... futex resumed>) = 1 [pid 7659] <... futex resumed>) = 0 [pid 7655] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7655] <... futex resumed>) = 0 [pid 7661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7659] <... futex resumed>) = 0 [pid 7655] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7661] creat("./bus", 000 [pid 7659] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7661] <... creat resumed>) = 4 [pid 7661] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7659] <... futex resumed>) = 0 [pid 7661] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7659] <... futex resumed>) = 0 [pid 7661] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7659] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7664 attached [pid 7663] <... set_robust_list resumed>) = 0 [pid 7662] <... close resumed>) = 0 [pid 7660] <... mkdir resumed>) = 0 [pid 7657] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] <... futex resumed>) = 0 [pid 7664] set_robust_list(0x7fee02e529e0, 24 [pid 7663] creat("./file1", 000 [pid 7662] mkdir("./bus", 0777 [pid 7660] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7657] <... futex resumed>) = 0 [pid 7652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7664] <... set_robust_list resumed>) = 0 [pid 7663] <... creat resumed>) = 5 [pid 7662] <... mkdir resumed>) = 0 [pid 7657] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] <... mmap resumed>) = 0x7fee02e32000 [pid 7664] creat("./file1", 000 [pid 7663] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7652] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7651] exit_group(0 [pid 7664] <... creat resumed>) = 5 [pid 7663] <... futex resumed>) = ? [pid 7653] <... futex resumed>) = ? [pid 7652] <... mprotect resumed>) = 0 [pid 7651] <... exit_group resumed>) = ? [pid 7664] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] +++ exited with 0 +++ [pid 7653] +++ exited with 0 +++ [pid 7652] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7651] +++ exited with 0 +++ ./strace-static-x86_64: Process 7665 attached [pid 7664] <... futex resumed>) = 1 [pid 7655] <... futex resumed>) = 0 [pid 7654] <... write resumed>) = 57344 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7651, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7665] set_robust_list(0x7fee02e529e0, 24 [pid 7664] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7654] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... clone resumed>, parent_tid=[7665], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7665 [pid 7665] <... set_robust_list resumed>) = 0 [pid 7654] <... futex resumed>) = 0 [pid 7652] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7665] creat("./file1", 000 [pid 7654] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] <... futex resumed>) = 0 [ 115.626675][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.634957][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.643505][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.650810][ T7654] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.656668][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.666580][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7665] <... creat resumed>) = 5 [pid 7652] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7665] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7665] <... futex resumed>) = 0 [pid 7652] exit_group(0 [pid 7654] <... futex resumed>) = ? [pid 7652] <... exit_group resumed>) = ? [pid 5077] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7665] +++ exited with 0 +++ [pid 7655] exit_group(0 [pid 7654] +++ exited with 0 +++ [pid 7652] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7652, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, [pid 5081] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 5081] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] <... openat resumed>) = 3 [pid 5077] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] fstat(3, [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7655] <... exit_group resumed>) = ? [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] lstat("./143/binderfs", [pid 7664] <... futex resumed>) = ? [pid 7662] <... mount resumed>) = 0 [pid 7660] <... mount resumed>) = 0 [pid 7657] <... futex resumed>) = ? [pid 5081] getdents64(3, [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7664] +++ exited with 0 +++ [pid 7662] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7660] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] unlink("./143/binderfs" [pid 7662] <... openat resumed>) = 3 [pid 7660] <... openat resumed>) = 3 [pid 5081] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... unlink resumed>) = 0 [pid 7662] chdir("./bus" [pid 7660] chdir("./bus" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7662] <... chdir resumed>) = 0 [pid 7660] <... chdir resumed>) = 0 [pid 5081] lstat("./144/binderfs", [pid 7662] ioctl(4, LOOP_CLR_FD [pid 7660] ioctl(4, LOOP_CLR_FD [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7662] <... ioctl resumed>) = 0 [pid 7660] <... ioctl resumed>) = 0 [pid 5081] unlink("./144/binderfs" [pid 7662] close(4 [pid 7660] close(4 [pid 5081] <... unlink resumed>) = 0 [pid 7662] <... close resumed>) = 0 [pid 7660] <... close resumed>) = 0 [pid 5081] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7662] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7660] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] +++ exited with 0 +++ [pid 7655] +++ exited with 0 +++ [pid 7662] <... futex resumed>) = 1 [pid 7660] <... futex resumed>) = 1 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7655, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7662] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7660] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7658] <... futex resumed>) = 0 [pid 7656] <... futex resumed>) = 0 [pid 5076] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./142/binderfs") = 0 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7658] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... futex resumed>) = 0 [pid 7658] <... futex resumed>) = 1 [pid 7662] creat("./bus", 000 [pid 7658] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7662] <... creat resumed>) = 4 [pid 7662] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7659] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7658] <... futex resumed>) = 0 [pid 7662] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7658] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7658] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7656] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7660] <... futex resumed>) = 0 [pid 7656] <... futex resumed>) = 1 [pid 7660] creat("./bus", 000 [pid 7656] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7660] <... creat resumed>) = 4 [pid 7660] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7656] <... futex resumed>) = 0 [pid 7660] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 115.674940][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.682938][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.694326][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.706334][ T7661] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.714034][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 115.720176][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7656] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7656] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... write resumed>) = 57344 [pid 7659] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7661] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7661] <... futex resumed>) = 0 [pid 7659] <... mmap resumed>) = 0x7fee02e32000 [pid 7661] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7659] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] lstat("./142/bus", [pid 7659] <... mprotect resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7659] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 115.726020][ T52] hfsplus: b-tree write err: -5, ino 4 [ 115.735862][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.744725][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.753687][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.753939][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.761330][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7658] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7656] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... futex resumed>) = 0 [pid 7656] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7659] <... clone resumed>, parent_tid=[7666], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7666 [pid 7658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 7659] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [pid 7659] <... futex resumed>) = 0 [pid 7659] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7658] <... mmap resumed>) = 0x7fee02e32000 [pid 7656] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7658] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7656] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7658] <... mprotect resumed>) = 0 [pid 7656] <... mprotect resumed>) = 0 [pid 7658] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7656] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 7658] <... clone resumed>, parent_tid=[7668], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7668 [pid 7656] <... clone resumed>, parent_tid=[7667], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7667 [pid 5076] rmdir("./142/bus" [pid 7658] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7656] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... futex resumed>) = 0 [pid 7656] <... futex resumed>) = 0 [pid 7658] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7656] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7668 attached ./strace-static-x86_64: Process 7667 attached [pid 5081] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 7667] set_robust_list(0x7fee02e529e0, 24 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7668] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7667] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 7667] creat("./file1", 000 [pid 5076] <... close resumed>) = 0 [pid 7668] creat("./file1", 000 [pid 5076] rmdir("./142" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5081] lstat("./144/bus", [pid 5077] lstat("./143/bus", [pid 5076] mkdir("./143", 0777 [pid 7667] <... creat resumed>) = 5 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7667] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 7667] <... futex resumed>) = 1 [pid 7656] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... openat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 5077] fstat(4, [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 5077] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7667] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5081] rmdir("./144/bus" [pid 5077] rmdir("./143/bus" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] getdents64(3, [pid 5077] getdents64(3, [pid 5076] close(3 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [ 115.769982][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.789200][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.815339][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5077] close(3./strace-static-x86_64: Process 7666 attached [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7666] set_robust_list(0x7fee02e529e0, 24 [pid 5081] rmdir("./144" [pid 5077] rmdir("./143" [pid 7666] <... set_robust_list resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7666] creat("./file1", 000 [pid 5081] mkdir("./145", 0777 [pid 5077] mkdir("./144", 0777 [pid 7666] <... creat resumed>) = 5 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] <... mkdir resumed>) = 0 [pid 7666] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7666] <... futex resumed>) = 1 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... openat resumed>) = 3 [pid 7666] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] <... futex resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] close(3 [pid 5077] close(3 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7669 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7670 ./strace-static-x86_64: Process 7669 attached [pid 7659] exit_group(0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7669] set_robust_list(0x555556b055e0, 24 [pid 7666] <... futex resumed>) = ? [pid 7661] <... futex resumed>) = ? [pid 7659] <... exit_group resumed>) = ? [pid 7669] <... set_robust_list resumed>) = 0 [pid 7666] +++ exited with 0 +++ [pid 7661] +++ exited with 0 +++ ./strace-static-x86_64: Process 7670 attached [pid 7659] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7671 [pid 7669] chdir("./145" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7659, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7669] <... chdir resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7670] set_robust_list(0x555556b055e0, 24 [pid 7658] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... restart_syscall resumed>) = 0 [pid 7670] <... set_robust_list resumed>) = 0 [pid 7669] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7671 attached [pid 7670] chdir("./144" [pid 7669] setpgid(0, 0 [pid 7671] set_robust_list(0x555556b055e0, 24 [pid 7670] <... chdir resumed>) = 0 [pid 7669] <... setpgid resumed>) = 0 [pid 5074] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7671] <... set_robust_list resumed>) = 0 [pid 7670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7671] chdir("./143" [pid 7670] <... prctl resumed>) = 0 [pid 7669] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7671] <... chdir resumed>) = 0 [pid 7670] setpgid(0, 0 [pid 7669] write(3, "1000", 4 [pid 7660] <... write resumed>) = 57344 [pid 5074] <... openat resumed>) = 3 [pid 7671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7670] <... setpgid resumed>) = 0 [pid 7669] <... write resumed>) = 4 [pid 7660] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] fstat(3, [pid 7671] <... prctl resumed>) = 0 [pid 7670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7669] close(3 [pid 7660] <... futex resumed>) = 0 [pid 7656] exit_group(0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7671] setpgid(0, 0 [pid 7670] <... openat resumed>) = 3 [pid 7669] <... close resumed>) = 0 [pid 7667] <... futex resumed>) = ? [pid 7656] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 7671] <... setpgid resumed>) = 0 [pid 7670] write(3, "1000", 4 [pid 7669] symlink("/dev/binderfs", "./binderfs" [pid 7667] +++ exited with 0 +++ [pid 7660] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7670] <... write resumed>) = 4 [pid 7656] +++ exited with 0 +++ [pid 5074] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7670] close(3 [pid 7669] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7671] <... openat resumed>) = 3 [pid 7670] <... close resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7656, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] lstat("./142/binderfs", [pid 7670] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7670] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./142/binderfs" [pid 7670] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 7671] write(3, "1000", 4 [pid 7670] <... futex resumed>) = 0 [pid 7669] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7671] <... write resumed>) = 4 [pid 7670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7668] <... creat resumed>) = 5 [pid 5075] fstat(3, [pid 7671] close(3 [pid 7670] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7669] <... mmap resumed>) = 0x7fee0b1d3000 [ 115.829496][ T7660] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.843225][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7668] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7671] <... close resumed>) = 0 [pid 7670] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7669] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7668] <... futex resumed>) = 0 [pid 5075] getdents64(3, [pid 7671] symlink("/dev/binderfs", "./binderfs" [pid 7669] <... mprotect resumed>) = 0 [pid 7668] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7671] <... symlink resumed>) = 0 [pid 7669] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7671] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7669] <... clone resumed>, parent_tid=[7672], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7672 [pid 7671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7669] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7671] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7669] <... futex resumed>) = 0 [pid 7671] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7669] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7671] <... mprotect resumed>) = 0 [pid 7671] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7673], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7673 [pid 7671] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7671] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7673 attached [pid 7673] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7673] memfd_create("syzkaller", 0) = 3 [pid 7673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7673] munmap(0x7fee02dd3000, 524288) = 0 [pid 7673] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7673] ioctl(4, LOOP_SET_FD, 3 [pid 7670] <... mprotect resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7670] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7674 attached ./strace-static-x86_64: Process 7672 attached [pid 5075] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 7670] <... clone resumed>, parent_tid=[7674], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7674 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7674] set_robust_list(0x7fee0b1f39e0, 24 [pid 7672] set_robust_list(0x7fee0b1f39e0, 24 [pid 7670] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] lstat("./142/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7674] <... set_robust_list resumed>) = 0 [pid 7672] <... set_robust_list resumed>) = 0 [pid 7670] <... futex resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] lstat("./142/bus", [pid 7674] memfd_create("syzkaller", 0 [pid 7672] memfd_create("syzkaller", 0 [pid 7670] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] unlink("./142/binderfs" [pid 7672] <... memfd_create resumed>) = 3 [pid 5074] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7674] <... memfd_create resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7662] <... write resumed>) = 57344 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7672] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] <... openat resumed>) = 4 [pid 5074] fstat(4, [pid 7674] <... mmap resumed>) = 0x7fee02dd3000 [pid 7662] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7662] <... futex resumed>) = 0 [pid 7674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7662] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] getdents64(4, [pid 7672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7658] exit_group(0) = ? [pid 7662] <... futex resumed>) = ? [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7668] <... futex resumed>) = ? [pid 7668] +++ exited with 0 +++ [pid 7662] +++ exited with 0 +++ [pid 7658] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7658, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7674] <... write resumed>) = 524288 [pid 7673] <... ioctl resumed>) = 0 [pid 7672] <... write resumed>) = 524288 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7674] munmap(0x7fee02dd3000, 524288 [pid 7672] munmap(0x7fee02dd3000, 524288 [pid 5080] umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./142/bus" [pid 7673] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 7673] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 5074] getdents64(3, [pid 7673] mkdir("./bus", 0777 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5074] close(3 [pid 7674] <... munmap resumed>) = 0 [pid 7672] <... munmap resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... close resumed>) = 0 [pid 5080] umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./142" [pid 7674] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7672] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 7674] <... openat resumed>) = 4 [pid 7672] <... openat resumed>) = 4 [pid 5080] lstat("./142/binderfs", [pid 5074] mkdir("./143", 0777 [ 115.876666][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.884498][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 115.889505][ T7673] loop2: detected capacity change from 0 to 1024 [ 115.898836][ T7662] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.916811][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7674] ioctl(4, LOOP_SET_FD, 3 [pid 7672] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7673] <... mkdir resumed>) = 0 [pid 7672] <... ioctl resumed>) = 0 [pid 5080] unlink("./142/binderfs" [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7673] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5080] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] lstat("./142/bus", [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7675 ./strace-static-x86_64: Process 7675 attached [pid 7675] set_robust_list(0x555556b055e0, 24) = 0 [pid 7675] chdir("./143") = 0 [pid 7675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7675] setpgid(0, 0) = 0 [pid 7675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7675] write(3, "1000", 4) = 4 [pid 7675] close(3) = 0 [pid 7675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7675] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7675] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7675] <... mprotect resumed>) = 0 [pid 7675] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7676], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7676 [pid 7675] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7672] close(3) = 0 [pid 7672] mkdir("./bus", 0777 [pid 7674] <... ioctl resumed>) = 0 [pid 7674] close(3) = 0 [pid 7674] mkdir("./bus", 0777 [pid 5075] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7674] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7672] <... mkdir resumed>) = 0 [pid 7672] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] <... openat resumed>) = 4 [pid 5075] fstat(4, [pid 7674] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7673] <... mount resumed>) = 0 [pid 7673] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(4, [pid 7673] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7673] chdir("./bus" [pid 5075] getdents64(4, [pid 7673] <... chdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 7673] ioctl(4, LOOP_CLR_FD [pid 7672] <... mount resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7674] <... mount resumed>) = 0 [pid 7673] <... ioctl resumed>) = 0 [pid 7672] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] rmdir("./142/bus" [pid 7674] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7672] <... openat resumed>) = 3 [pid 7674] <... openat resumed>) = 3 [pid 7672] chdir("./bus"./strace-static-x86_64: Process 7676 attached [pid 7674] chdir("./bus" [pid 7672] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7673] close(4 [pid 7676] set_robust_list(0x7fee0b1f39e0, 24 [pid 7674] <... chdir resumed>) = 0 [pid 7672] ioctl(4, LOOP_CLR_FD [pid 5075] getdents64(3, [pid 7673] <... close resumed>) = 0 [pid 7676] <... set_robust_list resumed>) = 0 [pid 7674] ioctl(4, LOOP_CLR_FD [pid 7672] <... ioctl resumed>) = 0 [pid 7676] memfd_create("syzkaller", 0 [pid 7674] <... ioctl resumed>) = 0 [pid 7673] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7672] close(4 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7676] <... memfd_create resumed>) = 3 [pid 7674] close(4 [pid 7673] <... futex resumed>) = 1 [pid 7672] <... close resumed>) = 0 [pid 7671] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7674] <... close resumed>) = 0 [pid 7673] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7671] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] <... mmap resumed>) = 0x7fee02dd3000 [pid 7674] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7672] <... futex resumed>) = 1 [pid 7671] <... futex resumed>) = 0 [pid 7669] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7674] <... futex resumed>) = 1 [pid 7673] creat("./bus", 000 [pid 7672] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7671] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7670] <... futex resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./142" [pid 7674] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7670] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7669] <... futex resumed>) = 0 [pid 7674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7673] <... creat resumed>) = 4 [pid 7672] creat("./bus", 000 [pid 7670] <... futex resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... rmdir resumed>) = 0 [pid 7676] <... write resumed>) = 524288 [pid 7674] creat("./bus", 000 [pid 7672] <... creat resumed>) = 4 [pid 7670] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7674] <... creat resumed>) = 4 [pid 7672] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7672] <... futex resumed>) = 0 [pid 7674] <... futex resumed>) = 1 [pid 7672] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7670] <... futex resumed>) = 0 [pid 7674] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7670] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7670] <... futex resumed>) = 0 [pid 7674] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7670] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7673] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... umount2 resumed>) = 0 [ 115.929892][ T7674] loop3: detected capacity change from 0 to 1024 [ 115.936732][ T7672] loop5: detected capacity change from 0 to 1024 [ 115.951498][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5075] mkdir("./143", 0777 [pid 7673] <... futex resumed>) = 1 [pid 7671] <... futex resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7671] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7673] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7672] <... futex resumed>) = 0 [pid 7669] <... futex resumed>) = 1 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 7672] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7676] munmap(0x7fee02dd3000, 524288 [pid 7671] <... futex resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./142/bus", [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7676] <... munmap resumed>) = 0 [pid 7676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7676] ioctl(4, LOOP_SET_FD, 3 [pid 7671] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [ 115.980497][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.990740][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [ 115.991598][ T7676] loop0: detected capacity change from 0 to 1024 [ 116.004607][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.005495][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.012004][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] umount2("./142/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7670] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7670] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] openat(AT_FDCWD, "./142/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7670] <... mprotect resumed>) = 0 [pid 5075] close(3 [pid 7670] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5080] fstat(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7670] <... clone resumed>, parent_tid=[7677], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7677 [pid 7670] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7670] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7677 attached [pid 7677] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7677] creat("./file1", 000 [pid 5080] getdents64(4, [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7678 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7678 attached [pid 7676] <... ioctl resumed>) = 0 [pid 7676] close(3) = 0 [pid 7676] mkdir("./bus", 0777 [pid 5080] close(4 [pid 7676] <... mkdir resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./142/bus" [pid 7678] set_robust_list(0x555556b055e0, 24 [pid 7676] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... rmdir resumed>) = 0 [pid 7669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7677] <... creat resumed>) = 5 [pid 7677] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7669] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 7677] <... futex resumed>) = 1 [pid 7670] <... futex resumed>) = 0 [pid 7669] <... futex resumed>) = 0 [pid 7678] <... set_robust_list resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] close(3 [pid 7677] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7669] <... mmap resumed>) = 0x7fee02e32000 [pid 7669] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... close resumed>) = 0 [pid 7678] chdir("./143" [pid 7669] <... mprotect resumed>) = 0 [pid 5080] rmdir("./142" [pid 7669] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7679 attached [pid 7678] <... chdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7679] set_robust_list(0x7fee02e529e0, 24 [pid 7678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7669] <... clone resumed>, parent_tid=[7679], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7679 [pid 5080] mkdir("./143", 0777 [pid 7679] <... set_robust_list resumed>) = 0 [pid 7678] <... prctl resumed>) = 0 [pid 7676] <... mount resumed>) = 0 [pid 7669] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... mkdir resumed>) = 0 [pid 7678] setpgid(0, 0 [pid 7669] <... futex resumed>) = 0 [pid 7679] creat("./file1", 000 [pid 7676] <... openat resumed>) = 3 [pid 7676] chdir("./bus") = 0 [pid 7676] ioctl(4, LOOP_CLR_FD [pid 7671] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7669] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7676] <... ioctl resumed>) = 0 [pid 7676] close(4) = 0 [pid 7671] <... futex resumed>) = 0 [pid 7676] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7675] <... futex resumed>) = 0 [pid 7676] creat("./bus", 000 [pid 7675] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] <... creat resumed>) = 4 [pid 7675] <... futex resumed>) = 0 [pid 7676] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7678] <... setpgid resumed>) = 0 [pid 7676] <... futex resumed>) = 0 [pid 7675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7676] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 116.020126][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.038007][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.051400][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.060099][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.066783][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7675] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7675] <... futex resumed>) = 0 [pid 7671] <... mmap resumed>) = 0x7fee02e32000 [pid 7675] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... openat resumed>) = 3 [pid 7678] <... openat resumed>) = 3 [pid 7671] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7678] write(3, "1000", 4 [pid 7671] <... mprotect resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 116.086789][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.096174][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.096613][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.104579][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.113371][ T7673] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.119181][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7678] <... write resumed>) = 4 [pid 7671] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] close(3 [pid 7671] <... clone resumed>, parent_tid=[7680], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7680 [pid 7671] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7671] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7680 attached [pid 7680] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7680] creat("./file1", 000) = 5 [pid 7680] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7671] <... futex resumed>) = 0 [pid 7680] <... futex resumed>) = 1 [pid 7680] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] close(3 [pid 7669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... close resumed>) = 0 [pid 7675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7675] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7678] <... close resumed>) = 0 [pid 7673] <... write resumed>) = 57344 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7675] <... futex resumed>) = 0 [pid 7673] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7673] <... futex resumed>) = 0 [pid 7678] symlink("/dev/binderfs", "./binderfs" [pid 7673] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7678] <... symlink resumed>) = 0 [pid 7675] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7671] exit_group(0 [pid 7678] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7681 [pid 7678] <... futex resumed>) = 0 [pid 7673] <... futex resumed>) = ? [pid 7671] <... exit_group resumed>) = ? [pid 7675] <... clone resumed>, parent_tid=[7682], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7682 [pid 7673] +++ exited with 0 +++ [pid 7678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7675] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7678] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7675] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7678] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7680] <... futex resumed>) = ? [pid 7680] +++ exited with 0 +++ [pid 7671] +++ exited with 0 +++ ./strace-static-x86_64: Process 7682 attached [pid 7682] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7682] creat("./file1", 000./strace-static-x86_64: Process 7681 attached [pid 7678] <... mprotect resumed>) = 0 [ 116.126669][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.140092][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.160774][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.167506][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.169026][ T7672] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7681] set_robust_list(0x555556b055e0, 24 [pid 7678] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7671, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 7683 attached [pid 7682] <... creat resumed>) = 5 [pid 7681] <... set_robust_list resumed>) = 0 [pid 7679] <... creat resumed>) = 5 [pid 7683] set_robust_list(0x7fee0b1f39e0, 24 [pid 7681] chdir("./143" [pid 7679] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7678] <... clone resumed>, parent_tid=[7683], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7683 [pid 7683] <... set_robust_list resumed>) = 0 [pid 7681] <... chdir resumed>) = 0 [pid 7679] <... futex resumed>) = 0 [pid 7678] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7683] memfd_create("syzkaller", 0 [pid 7681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7679] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7683] <... memfd_create resumed>) = 3 [pid 7681] <... prctl resumed>) = 0 [pid 7678] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7681] setpgid(0, 0 [pid 5076] <... openat resumed>) = 3 [pid 7683] <... mmap resumed>) = 0x7fee02dd3000 [pid 7681] <... setpgid resumed>) = 0 [pid 5076] fstat(3, [pid 7683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7682] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7674] <... write resumed>) = 57344 [pid 7672] <... write resumed>) = 57344 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7683] <... write resumed>) = 524288 [pid 7681] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 7681] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7682] <... futex resumed>) = 1 [pid 7681] <... write resumed>) = 4 [pid 7676] <... write resumed>) = 57344 [pid 7675] <... futex resumed>) = 0 [pid 7674] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7683] munmap(0x7fee02dd3000, 524288 [pid 7672] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7682] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7681] close(3 [pid 7674] <... futex resumed>) = 0 [pid 7672] <... futex resumed>) = 0 [pid 7669] exit_group(0 [pid 7681] <... close resumed>) = 0 [pid 7679] <... futex resumed>) = ? [pid 7674] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7669] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7681] symlink("/dev/binderfs", "./binderfs" [pid 7679] +++ exited with 0 +++ [pid 7672] +++ exited with 0 +++ [pid 7683] <... munmap resumed>) = 0 [pid 7683] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7669] +++ exited with 0 +++ [pid 7683] <... openat resumed>) = 4 [pid 5076] lstat("./143/binderfs", [pid 7683] ioctl(4, LOOP_SET_FD, 3 [pid 7681] <... symlink resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7669, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7681] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./143/binderfs" [pid 7681] <... futex resumed>) = 0 [pid 7676] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... unlink resumed>) = 0 [pid 7681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7676] <... futex resumed>) = 0 [pid 7670] exit_group(0 [pid 5081] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7681] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7676] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7670] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7681] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7681] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 7681] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] fstat(3, [pid 7683] <... ioctl resumed>) = 0 [pid 7677] <... futex resumed>) = ? [pid 7675] exit_group(0 [pid 7674] <... futex resumed>) = ? [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7681] <... clone resumed>, parent_tid=[7684], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7684 [pid 5081] getdents64(3, [pid 7681] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7681] <... futex resumed>) = 0 [pid 5081] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7681] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./145/binderfs") = 0 [pid 7677] +++ exited with 0 +++ [pid 7676] <... futex resumed>) = ? [pid 7675] <... exit_group resumed>) = ? [pid 5081] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7682] <... futex resumed>) = ? [pid 7676] +++ exited with 0 +++ [pid 7674] +++ exited with 0 +++ [pid 7670] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7670, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7683] close(3 [pid 7682] +++ exited with 0 +++ [pid 7675] +++ exited with 0 +++ [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7675, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 5074] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5074] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7684 attached [pid 7683] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 7684] set_robust_list(0x7fee0b1f39e0, 24 [pid 7683] mkdir("./bus", 0777 [pid 5081] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7684] <... set_robust_list resumed>) = 0 [pid 7683] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7684] memfd_create("syzkaller", 0 [pid 7683] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] lstat("./145/bus", [pid 5076] lstat("./143/bus", [pid 7684] <... memfd_create resumed>) = 3 [pid 7683] <... mount resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7683] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7684] <... mmap resumed>) = 0x7fee02dd3000 [pid 7683] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7683] chdir("./bus" [pid 5081] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] lstat("./144/binderfs", [pid 5076] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] lstat("./143/binderfs", [pid 7683] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7683] ioctl(4, LOOP_CLR_FD [pid 5081] fstat(4, [pid 5077] unlink("./144/binderfs" [pid 5076] fstat(4, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7683] <... ioctl resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7684] <... write resumed>) = 524288 [ 116.176629][ T7674] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.183700][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.197877][ T7676] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.209297][ T7683] loop1: detected capacity change from 0 to 1024 [ 116.216027][ T9] hfsplus: b-tree write err: -5, ino 4 [ 116.224813][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7683] close(4 [pid 5081] getdents64(4, [pid 5077] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] unlink("./143/binderfs" [pid 7683] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7683] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5076] getdents64(4, [pid 7683] <... futex resumed>) = 1 [pid 7678] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7683] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4 [pid 5076] close(4 [pid 7683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7678] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7683] creat("./bus", 000 [pid 7678] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./145/bus" [pid 5076] rmdir("./143/bus" [pid 7683] <... creat resumed>) = 4 [pid 5081] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7683] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5076] getdents64(3, [pid 7683] <... futex resumed>) = 1 [pid 7678] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7684] munmap(0x7fee02dd3000, 524288 [pid 7683] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5076] close(3 [pid 7684] <... munmap resumed>) = 0 [pid 7683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7678] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7684] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7683] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7678] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./145" [pid 5076] rmdir("./143" [pid 7684] <... openat resumed>) = 4 [pid 7684] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7684] <... ioctl resumed>) = 0 [pid 7684] close(3) = 0 [pid 7684] mkdir("./bus", 0777) = 0 [pid 7684] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 5081] mkdir("./146", 0777 [pid 5076] mkdir("./144", 0777 [pid 7684] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... mkdir resumed>) = 0 [pid 7684] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 7684] chdir("./bus" [pid 5081] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7684] <... chdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7684] ioctl(4, LOOP_CLR_FD [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... openat resumed>) = 3 [ 116.257619][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.266912][ T9] hfsplus: b-tree write err: -5, ino 4 [ 116.269682][ T7684] loop4: detected capacity change from 0 to 1024 [ 116.273753][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 116.283673][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.293943][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7684] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7684] close(4) = 0 [pid 7678] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... close resumed>) = 0 [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7678] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7678] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7678] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7685], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7685 [pid 7678] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7678] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7684] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7684] <... futex resumed>) = 1 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 7681] <... futex resumed>) = 0 [pid 7681] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] lstat("./144/bus", [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7686 attached [pid 7684] creat("./bus", 000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7686 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7686] set_robust_list(0x555556b055e0, 24 [pid 7684] <... creat resumed>) = 4 [pid 5077] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7686] <... set_robust_list resumed>) = 0 [pid 7684] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7687 [pid 7686] chdir("./146"./strace-static-x86_64: Process 7685 attached [pid 7684] <... futex resumed>) = 1 [pid 7683] <... write resumed>) = 57344 [pid 7681] <... futex resumed>) = 0 [pid 7686] <... chdir resumed>) = 0 [pid 5077] <... openat resumed>) = 4 [pid 7686] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7685] set_robust_list(0x7fee02e529e0, 24 [pid 7684] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7683] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7681] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] fstat(4, [pid 7686] <... prctl resumed>) = 0 [pid 7685] <... set_robust_list resumed>) = 0 [pid 7684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7683] <... futex resumed>) = 0 [pid 7681] <... futex resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7686] setpgid(0, 0 [pid 7685] creat("./file1", 000 [pid 7684] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7683] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7681] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] getdents64(4, [pid 7686] <... setpgid resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] getdents64(4, [pid 7686] <... openat resumed>) = 3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7686] write(3, "1000", 4 [pid 7685] <... creat resumed>) = 5 [pid 5077] close(4 [pid 7686] <... write resumed>) = 4 [pid 7685] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 7686] close(3 [pid 7685] <... futex resumed>) = 1 [pid 7678] <... futex resumed>) = 0 [pid 5077] rmdir("./144/bus" [pid 7686] <... close resumed>) = 0 [pid 7685] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] exit_group(0) = ? ./strace-static-x86_64: Process 7687 attached [pid 7687] set_robust_list(0x555556b055e0, 24) = 0 [pid 7687] chdir("./144") = 0 [pid 7687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7687] setpgid(0, 0) = 0 [pid 7687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7687] write(3, "1000", 4) = 4 [pid 7687] close(3 [pid 5077] <... rmdir resumed>) = 0 [ 116.305250][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.315194][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.322630][ T7683] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.338005][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.348774][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7686] symlink("/dev/binderfs", "./binderfs" [pid 7685] <... futex resumed>) = ? [pid 7683] <... futex resumed>) = ? [pid 5077] getdents64(3, [pid 7687] <... close resumed>) = 0 [pid 7686] <... symlink resumed>) = 0 [pid 7685] +++ exited with 0 +++ [pid 7687] symlink("/dev/binderfs", "./binderfs" [pid 7683] +++ exited with 0 +++ [pid 7678] +++ exited with 0 +++ [pid 7686] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7678, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7687] <... symlink resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7687] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7687] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7687] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7687] <... mprotect resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7687] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7687] <... clone resumed>, parent_tid=[7688], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7688 [pid 5075] getdents64(3, [pid 7687] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7687] <... futex resumed>) = 0 [pid 5075] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7687] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5075] lstat("./143/binderfs", [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./143/binderfs" [pid 5074] lstat("./143/bus", [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7688 attached [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7686] <... futex resumed>) = 0 [pid 5077] close(3 [pid 5074] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7688] set_robust_list(0x7fee0b1f39e0, 24 [pid 7686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... close resumed>) = 0 [pid 7688] <... set_robust_list resumed>) = 0 [pid 7686] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] rmdir("./144" [pid 7688] memfd_create("syzkaller", 0 [pid 7686] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... rmdir resumed>) = 0 [pid 7688] <... memfd_create resumed>) = 3 [pid 7686] <... mprotect resumed>) = 0 [pid 5077] mkdir("./145", 0777 [pid 7688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7686] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... mkdir resumed>) = 0 [pid 7688] <... mmap resumed>) = 0x7fee02dd3000 [pid 7681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7686] <... clone resumed>, parent_tid=[7689], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7689 [pid 7681] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... openat resumed>) = 3 [pid 7686] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7681] <... futex resumed>) = 0 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7686] <... futex resumed>) = 0 [pid 7681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7686] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7681] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] close(3 [pid 7681] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... close resumed>) = 0 [pid 7681] <... mprotect resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7681] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7688] <... write resumed>) = 524288 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7690 [pid 7681] <... clone resumed>, parent_tid=[7691], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7691 [pid 7681] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7690 attached [pid 7690] set_robust_list(0x555556b055e0, 24) = 0 [pid 7690] chdir("./145") = 0 [pid 7688] munmap(0x7fee02dd3000, 524288) = 0 [pid 7690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7690] setpgid(0, 0./strace-static-x86_64: Process 7691 attached [pid 7691] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7690] <... setpgid resumed>) = 0 [pid 7691] creat("./file1", 000 [pid 7690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7690] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 7688] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7690] write(3, "1000", 4 [pid 7688] <... openat resumed>) = 4 [pid 7690] <... write resumed>) = 4 [ 116.357166][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.366253][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.383752][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.391053][ T7684] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.400587][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7688] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7689 attached [pid 7690] close(3 [pid 5074] fstat(4, [pid 7689] set_robust_list(0x7fee0b1f39e0, 24 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7689] <... set_robust_list resumed>) = 0 [pid 5074] getdents64(4, [pid 7689] memfd_create("syzkaller", 0 [pid 7691] <... creat resumed>) = 5 [pid 7690] <... close resumed>) = 0 [pid 7688] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7691] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7690] symlink("/dev/binderfs", "./binderfs" [pid 7688] close(3 [pid 7691] <... futex resumed>) = 1 [pid 7690] <... symlink resumed>) = 0 [pid 7689] <... memfd_create resumed>) = 3 [pid 7688] <... close resumed>) = 0 [pid 7681] <... futex resumed>) = 0 [pid 5074] getdents64(4, [pid 7691] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7688] mkdir("./bus", 0777 [pid 7690] <... futex resumed>) = 0 [pid 7688] <... mkdir resumed>) = 0 [pid 7690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7688] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7690] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] <... umount2 resumed>) = 0 [pid 7690] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7690] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7688] <... mount resumed>) = 0 [pid 7690] <... clone resumed>, parent_tid=[7692], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7692 [pid 7688] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7690] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7688] <... openat resumed>) = 3 [pid 7690] <... futex resumed>) = 0 [pid 7689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7688] chdir("./bus" [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7690] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7689] <... mmap resumed>) = 0x7fee02dd3000 [pid 7688] <... chdir resumed>) = 0 [pid 5074] close(4 [pid 7688] ioctl(4, LOOP_CLR_FD) = 0 [pid 7688] close(4 [pid 7689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7688] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7688] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7687] <... futex resumed>) = 0 [pid 5074] rmdir("./143/bus" [pid 7688] creat("./bus", 000 [pid 7687] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7688] <... creat resumed>) = 4 [pid 7687] <... futex resumed>) = 0 [pid 7688] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 7687] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7688] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7687] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7688] <... futex resumed>) = 0 [pid 7687] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7688] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7692 attached [pid 7689] <... write resumed>) = 524288 [pid 7684] <... write resumed>) = 57344 [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7689] munmap(0x7fee02dd3000, 524288 [pid 7684] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 7689] <... munmap resumed>) = 0 [pid 7684] <... futex resumed>) = 0 [pid 5075] lstat("./143/bus", [pid 5074] <... close resumed>) = 0 [pid 7692] set_robust_list(0x7fee0b1f39e0, 24 [pid 7689] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7684] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] rmdir("./143" [pid 7692] <... set_robust_list resumed>) = 0 [pid 7689] <... openat resumed>) = 4 [pid 5075] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 7692] memfd_create("syzkaller", 0 [ 116.409307][ T7688] loop2: detected capacity change from 0 to 1024 [ 116.438683][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.450012][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7689] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./144", 0777 [pid 7692] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... mkdir resumed>) = 0 [pid 7692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7692] <... mmap resumed>) = 0x7fee02dd3000 [pid 5075] fstat(4, [pid 5074] <... openat resumed>) = 3 [pid 7692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7681] exit_group(0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(4 [pid 7692] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7693 [pid 5075] rmdir("./143/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 7684] <... futex resumed>) = ? [pid 7681] <... exit_group resumed>) = ? [pid 5075] rmdir("./143" [pid 7684] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./144", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7694 [pid 7691] <... futex resumed>) = ? [pid 7692] munmap(0x7fee02dd3000, 524288) = 0 [pid 7691] +++ exited with 0 +++ [pid 7681] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7681, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7692] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7687] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7692] <... openat resumed>) = 4 [pid 7687] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] ioctl(4, LOOP_SET_FD, 3 [pid 7687] <... futex resumed>) = 0 [pid 5080] umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7693 attached [pid 7687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7687] <... mmap resumed>) = 0x7fee02e32000 [pid 5080] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7694 attached [pid 7687] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... openat resumed>) = 3 [pid 7694] set_robust_list(0x555556b055e0, 24 [pid 7693] set_robust_list(0x555556b055e0, 24 [pid 7687] <... mprotect resumed>) = 0 [pid 5080] fstat(3, [pid 7694] <... set_robust_list resumed>) = 0 [pid 7693] <... set_robust_list resumed>) = 0 [pid 7687] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7694] chdir("./144" [pid 7693] chdir("./144" [pid 5080] getdents64(3, [pid 7694] <... chdir resumed>) = 0 [pid 7693] <... chdir resumed>) = 0 [pid 7687] <... clone resumed>, parent_tid=[7695], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7695 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7687] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7694] <... prctl resumed>) = 0 [pid 7687] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7694] setpgid(0, 0 [pid 7687] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./143/binderfs", [pid 7694] <... setpgid resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] unlink("./143/binderfs" [pid 7694] <... openat resumed>) = 3 [pid 5080] <... unlink resumed>) = 0 [pid 7694] write(3, "1000", 4 [pid 5080] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7694] <... write resumed>) = 4 [pid 7694] close(3) = 0 [pid 7694] symlink("/dev/binderfs", "./binderfs") = 0 [ 116.452391][ T7689] loop5: detected capacity change from 0 to 1024 [ 116.457568][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.471170][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.487445][ T7692] loop3: detected capacity change from 0 to 1024 [ 116.500683][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7694] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 ./strace-static-x86_64: Process 7695 attached [pid 7694] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7693] <... prctl resumed>) = 0 [pid 7694] <... mprotect resumed>) = 0 [pid 7694] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7696], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7696 [pid 7694] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7689] <... ioctl resumed>) = 0 [pid 7689] close(3) = 0 [pid 7689] mkdir("./bus", 0777) = 0 [pid 7689] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7692] <... ioctl resumed>) = 0 [pid 7692] close(3) = 0 [pid 7692] mkdir("./bus", 0777 [pid 7695] set_robust_list(0x7fee02e529e0, 24 [pid 7693] setpgid(0, 0 [pid 7692] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7696 attached [pid 7695] <... set_robust_list resumed>) = 0 [pid 7693] <... setpgid resumed>) = 0 [pid 7696] set_robust_list(0x7fee0b1f39e0, 24 [pid 7695] creat("./file1", 000 [pid 7692] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7696] <... set_robust_list resumed>) = 0 [pid 7693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7696] memfd_create("syzkaller", 0) = 3 [pid 7696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] <... umount2 resumed>) = 0 [pid 7693] <... openat resumed>) = 3 [pid 7693] write(3, "1000", 4 [pid 7692] <... mount resumed>) = 0 [pid 7689] <... mount resumed>) = 0 [pid 5080] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7693] <... write resumed>) = 4 [pid 7692] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7689] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7693] close(3 [pid 7692] <... openat resumed>) = 3 [pid 7689] <... openat resumed>) = 3 [pid 5080] lstat("./143/bus", [pid 7693] <... close resumed>) = 0 [pid 7692] chdir("./bus" [pid 7689] chdir("./bus" [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7695] <... creat resumed>) = 5 [pid 7693] symlink("/dev/binderfs", "./binderfs" [pid 7692] <... chdir resumed>) = 0 [pid 7689] <... chdir resumed>) = 0 [pid 5080] umount2("./143/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7688] <... write resumed>) = 57344 [pid 7695] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] <... symlink resumed>) = 0 [pid 7692] ioctl(4, LOOP_CLR_FD [pid 7689] ioctl(4, LOOP_CLR_FD [pid 7688] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7695] <... futex resumed>) = 1 [pid 7693] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... ioctl resumed>) = 0 [pid 7689] <... ioctl resumed>) = 0 [pid 7688] <... futex resumed>) = 0 [pid 7687] <... futex resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./143/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7696] <... write resumed>) = 524288 [pid 7695] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] <... futex resumed>) = 0 [pid 7692] close(4 [pid 7689] close(4 [pid 7688] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7687] exit_group(0 [pid 5080] <... openat resumed>) = 4 [pid 7692] <... close resumed>) = 0 [pid 7689] <... close resumed>) = 0 [pid 7687] <... exit_group resumed>) = ? [pid 7695] <... futex resumed>) = ? [pid 7693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7692] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7689] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... futex resumed>) = 1 [pid 7690] <... futex resumed>) = 0 [pid 7689] <... futex resumed>) = 1 [pid 7686] <... futex resumed>) = 0 [pid 7692] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7689] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7686] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7690] <... futex resumed>) = 0 [pid 7689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7686] <... futex resumed>) = 0 [pid 7692] creat("./bus", 000 [pid 7690] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7689] creat("./bus", 000 [pid 7686] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7692] <... creat resumed>) = 4 [pid 7689] <... creat resumed>) = 4 [pid 7692] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7689] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7695] +++ exited with 0 +++ [pid 7692] <... futex resumed>) = 1 [pid 7690] <... futex resumed>) = 0 [pid 7689] <... futex resumed>) = 1 [pid 7686] <... futex resumed>) = 0 [pid 7693] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] fstat(4, [pid 7692] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7689] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7686] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] <... mprotect resumed>) = 0 [pid 7692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7690] <... futex resumed>) = 0 [pid 7689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7686] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7693] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7692] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 116.508508][ T52] hfsplus: b-tree write err: -5, ino 4 [ 116.508657][ T7688] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.548215][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7690] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7689] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7686] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(4, ./strace-static-x86_64: Process 7697 attached [pid 7696] munmap(0x7fee02dd3000, 524288 [pid 7688] <... futex resumed>) = ? [pid 7697] set_robust_list(0x7fee0b1f39e0, 24 [pid 7696] <... munmap resumed>) = 0 [pid 7693] <... clone resumed>, parent_tid=[7697], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7697 [pid 7688] +++ exited with 0 +++ [pid 7687] +++ exited with 0 +++ [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [ 116.556752][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.560905][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.566274][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.578721][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.583873][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.587903][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.594326][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7697] <... set_robust_list resumed>) = 0 [pid 7696] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7693] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7690] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] getdents64(4, [pid 7690] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7690] <... futex resumed>) = 0 [pid 7686] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7686] <... futex resumed>) = 0 [pid 7690] <... mmap resumed>) = 0x7fee02e32000 [pid 7686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7690] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7686] <... mmap resumed>) = 0x7fee02e32000 [pid 7690] <... mprotect resumed>) = 0 [pid 7686] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7690] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7686] <... mprotect resumed>) = 0 [pid 7686] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7690] <... clone resumed>, parent_tid=[7698], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7698 [pid 7690] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] <... clone resumed>, parent_tid=[7699], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7699 [pid 7690] <... futex resumed>) = 0 [pid 7686] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7690] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7686] <... futex resumed>) = 0 [pid 7686] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7698 attached [pid 7698] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7698] creat("./file1", 000./strace-static-x86_64: Process 7699 attached [pid 7697] memfd_create("syzkaller", 0 [pid 7696] <... openat resumed>) = 4 [pid 7693] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7687, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7697] <... memfd_create resumed>) = 3 [pid 7696] ioctl(4, LOOP_SET_FD, 3 [pid 7693] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] close(4 [pid 5076] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7698] <... creat resumed>) = 5 [pid 7697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7699] set_robust_list(0x7fee02e529e0, 24 [pid 7697] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] rmdir("./143/bus" [pid 5076] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7699] <... set_robust_list resumed>) = 0 [pid 7697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7699] creat("./file1", 000 [pid 5080] getdents64(3, [pid 5076] fstat(3, [pid 7698] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7698] <... futex resumed>) = 1 [pid 7690] <... futex resumed>) = 0 [pid 7698] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] close(3 [pid 5076] getdents64(3, [pid 5080] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] rmdir("./143" [pid 5076] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7697] <... write resumed>) = 524288 [pid 5080] mkdir("./144", 0777 [pid 5076] lstat("./144/binderfs", [pid 5080] <... mkdir resumed>) = 0 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] unlink("./144/binderfs" [pid 5080] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 7699] <... creat resumed>) = 5 [pid 7696] <... ioctl resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7699] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7697] munmap(0x7fee02dd3000, 524288 [pid 7696] close(3 [pid 7692] <... write resumed>) = 57344 [pid 7689] <... write resumed>) = 57344 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7696] <... close resumed>) = 0 [pid 7696] mkdir("./bus", 0777) = 0 [pid 7696] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7697] <... munmap resumed>) = 0 [pid 7697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7697] ioctl(4, LOOP_SET_FD, 3 [pid 7699] <... futex resumed>) = 1 [pid 7686] <... futex resumed>) = 0 [pid 5080] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 7699] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7697] <... ioctl resumed>) = 0 [pid 7696] <... mount resumed>) = 0 [pid 7692] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7689] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7697] close(3 [pid 7696] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7692] <... futex resumed>) = 0 [pid 7689] <... futex resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7697] <... close resumed>) = 0 [pid 7696] <... openat resumed>) = 3 [pid 7692] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] exit_group(0 [pid 7689] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7686] exit_group(0 [pid 7698] <... futex resumed>) = ? [pid 7690] <... exit_group resumed>) = ? [pid 7686] <... exit_group resumed>) = ? [pid 5076] lstat("./144/bus", [pid 7699] <... futex resumed>) = ? [pid 7689] <... futex resumed>) = ? [pid 7692] <... futex resumed>) = ? [pid 7698] +++ exited with 0 +++ [pid 7697] mkdir("./bus", 0777 [pid 7699] +++ exited with 0 +++ [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7689] +++ exited with 0 +++ ./strace-static-x86_64: Process 7700 attached [pid 7700] set_robust_list(0x555556b055e0, 24) = 0 [pid 7700] chdir("./144") = 0 [pid 7700] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7686] +++ exited with 0 +++ [pid 7700] <... prctl resumed>) = 0 [pid 7700] setpgid(0, 0) = 0 [pid 7700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7692] +++ exited with 0 +++ [pid 7690] +++ exited with 0 +++ [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7700 [pid 5076] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7700] write(3, "1000", 4) = 4 [pid 7697] <... mkdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7686, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7690, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5076] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7697] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 4 [pid 7700] close(3 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5076] fstat(4, [pid 5077] <... restart_syscall resumed>) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7700] <... close resumed>) = 0 [pid 5081] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 7700] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5081] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7700] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7700] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(4 [pid 7700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] fstat(3, [pid 5077] <... openat resumed>) = 3 [pid 7700] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 5076] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./144/bus" [pid 5081] getdents64(3, [pid 5077] getdents64(3, [pid 7700] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] <... rmdir resumed>) = 0 [pid 7700] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5081] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7700] <... clone resumed>, parent_tid=[7701], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7701 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./145/binderfs", [pid 5076] close(3 [ 116.601023][ T7692] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.614292][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.616995][ T7696] loop1: detected capacity change from 0 to 1024 [ 116.624721][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.636571][ T7689] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.645572][ T52] hfsplus: b-tree write err: -5, ino 4 [ 116.648988][ T7697] loop0: detected capacity change from 0 to 1024 [pid 7700] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./146/binderfs", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] <... close resumed>) = 0 [pid 7700] <... futex resumed>) = 0 [pid 7700] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./145/binderfs" [pid 5076] rmdir("./144" [pid 5081] unlink("./146/binderfs"./strace-static-x86_64: Process 7701 attached [pid 7701] set_robust_list(0x7fee0b1f39e0, 24 [pid 5077] <... unlink resumed>) = 0 [pid 7701] <... set_robust_list resumed>) = 0 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./145", 0777 [pid 7701] memfd_create("syzkaller", 0) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 7701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7701] <... write resumed>) = 524288 [pid 7701] munmap(0x7fee02dd3000, 524288) = 0 [pid 7701] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7701] ioctl(4, LOOP_SET_FD, 3 [pid 7697] <... mount resumed>) = 0 [pid 7696] chdir("./bus" [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 7697] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7696] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5076] close(3 [pid 7701] <... ioctl resumed>) = 0 [pid 7697] <... openat resumed>) = 3 [pid 7696] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 7697] chdir("./bus" [pid 7696] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7697] <... chdir resumed>) = 0 [pid 7696] close(4 [pid 5081] lstat("./146/bus", [pid 7697] ioctl(4, LOOP_CLR_FD [pid 7696] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7697] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7702 [pid 7701] close(3 [pid 7697] close(4 [pid 7696] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7701] <... close resumed>) = 0 [pid 7697] <... close resumed>) = 0 [pid 7696] <... futex resumed>) = 1 [pid 7694] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7694] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7697] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] creat("./bus", 000 [pid 5081] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7697] <... futex resumed>) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7696] <... creat resumed>) = 4 [pid 7693] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7697] creat("./bus", 000 [pid 7696] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 4 [pid 7693] <... futex resumed>) = 0 [pid 7701] mkdir("./bus", 0777 [pid 7697] <... creat resumed>) = 4 [pid 7696] <... futex resumed>) = 1 [pid 7694] <... futex resumed>) = 0 [pid 7693] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(4, [pid 7694] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7697] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 116.688395][ T52] hfsplus: b-tree write err: -5, ino 4 [ 116.694326][ T33] hfsplus: b-tree write err: -5, ino 4 [ 116.696695][ T7701] loop4: detected capacity change from 0 to 1024 [pid 7696] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7697] <... futex resumed>) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7697] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7693] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, ./strace-static-x86_64: Process 7702 attached [pid 7702] set_robust_list(0x555556b055e0, 24) = 0 [pid 7702] chdir("./145") = 0 [pid 7702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7702] setpgid(0, 0) = 0 [pid 7702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7702] write(3, "1000", 4) = 4 [pid 7702] close(3) = 0 [pid 7702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7702] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7702] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7702] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7693] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7693] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4) = 0 [pid 7702] <... clone resumed>, parent_tid=[7703], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7703 [pid 7702] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7702] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] rmdir("./146/bus"./strace-static-x86_64: Process 7703 attached ) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7703] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 5081] close(3 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./146" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rmdir resumed>) = 0 [pid 5077] lstat("./145/bus", [pid 5081] mkdir("./147", 0777 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7703] memfd_create("syzkaller", 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5077] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 4 [pid 7703] <... memfd_create resumed>) = 3 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] close(3 [pid 5077] fstat(4, [pid 5081] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7703] <... mmap resumed>) = 0x7fee02dd3000 [pid 5077] getdents64(4, [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7704 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7701] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7704 attached [pid 7701] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] getdents64(4, [pid 7703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7704] set_robust_list(0x555556b055e0, 24 [ 116.731799][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.741189][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.755849][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.764131][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.764700][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] close(4 [pid 7704] <... set_robust_list resumed>) = 0 [pid 7694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... close resumed>) = 0 [pid 7694] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7694] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7694] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7705], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7705 [pid 7694] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7705 attached [pid 7704] chdir("./147" [pid 7701] <... mount resumed>) = 0 [pid 7694] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] rmdir("./145/bus" [pid 7705] set_robust_list(0x7fee02e529e0, 24 [pid 7704] <... chdir resumed>) = 0 [pid 7701] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7693] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... set_robust_list resumed>) = 0 [pid 7704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7701] <... openat resumed>) = 3 [pid 7693] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7703] <... write resumed>) = 524288 [pid 7703] munmap(0x7fee02dd3000, 524288) = 0 [pid 7705] creat("./file1", 000 [pid 7704] <... prctl resumed>) = 0 [pid 7701] chdir("./bus" [pid 7693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] getdents64(3, [pid 7701] <... chdir resumed>) = 0 [pid 7693] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7704] setpgid(0, 0 [pid 7701] ioctl(4, LOOP_CLR_FD [pid 5077] close(3 [pid 7703] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7701] <... ioctl resumed>) = 0 [pid 7704] <... setpgid resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7703] ioctl(4, LOOP_SET_FD, 3 [pid 7704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7701] close(4 [pid 7693] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] rmdir("./145" [pid 7704] <... openat resumed>) = 3 [pid 7701] <... close resumed>) = 0 [pid 7693] <... mprotect resumed>) = 0 [pid 7705] <... creat resumed>) = 5 [pid 5077] <... rmdir resumed>) = 0 [pid 7705] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] write(3, "1000", 4 [pid 7701] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7696] <... write resumed>) = 57344 [pid 7693] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 116.771851][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.779311][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.798690][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.808326][ T7703] loop2: detected capacity change from 0 to 1024 [ 116.808512][ T7696] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] mkdir("./146", 0777 [pid 7705] <... futex resumed>) = 1 [pid 7704] <... write resumed>) = 4 [pid 7694] <... futex resumed>) = 0 [pid 7701] <... futex resumed>) = 1 [pid 7700] <... futex resumed>) = 0 [pid 7696] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] close(3 [pid 7701] creat("./bus", 000 [pid 7700] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] <... futex resumed>) = 0 [pid 7694] exit_group(0 [pid 7693] <... clone resumed>, parent_tid=[7706], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7706 [pid 5077] <... mkdir resumed>) = 0 [pid 7700] <... futex resumed>) = 0 [pid 7694] <... exit_group resumed>) = ? [pid 7704] <... close resumed>) = 0 [pid 7700] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7701] <... creat resumed>) = 4 [pid 7696] +++ exited with 0 +++ [pid 7705] <... futex resumed>) = ? [pid 7704] symlink("/dev/binderfs", "./binderfs" [pid 7693] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7701] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7703] <... ioctl resumed>) = 0 [pid 7703] close(3) = 0 [pid 7703] mkdir("./bus", 0777 [pid 7705] +++ exited with 0 +++ [pid 7694] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7694, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7704] <... symlink resumed>) = 0 [pid 7693] <... futex resumed>) = 0 [pid 7701] <... futex resumed>) = 1 [pid 7700] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 7704] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7701] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7700] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7693] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7704] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 0 [pid 5075] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7706 attached [pid 7704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7703] <... mkdir resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7704] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7700] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] close(3 [pid 7704] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7706] set_robust_list(0x7fee02e529e0, 24 [pid 7704] <... mprotect resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7706] <... set_robust_list resumed>) = 0 [pid 7704] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7703] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7706] creat("./file1", 000 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7707 [pid 7704] <... clone resumed>, parent_tid=[7708], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7708 [pid 7704] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7704] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7706] <... creat resumed>) = 5 [pid 7706] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7693] <... futex resumed>) = 0 [ 116.825379][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.839943][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.850376][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.856012][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.864818][ T7697] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7706] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7707 attached ./strace-static-x86_64: Process 7708 attached [pid 5075] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./144/binderfs") = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7707] set_robust_list(0x555556b055e0, 24) = 0 [pid 7707] chdir("./146" [pid 7697] <... write resumed>) = 57344 [pid 7697] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7697] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7707] <... chdir resumed>) = 0 [pid 7693] exit_group(0 [pid 7706] <... futex resumed>) = ? [pid 7697] <... futex resumed>) = ? [pid 7693] <... exit_group resumed>) = ? [pid 7706] +++ exited with 0 +++ [pid 7697] +++ exited with 0 +++ [pid 7693] +++ exited with 0 +++ [pid 7707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7707] setpgid(0, 0) = 0 [pid 7707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7693, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7708] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7708] memfd_create("syzkaller", 0) = 3 [pid 7708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7703] <... mount resumed>) = 0 [pid 7700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7708] <... write resumed>) = 524288 [pid 7700] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7708] munmap(0x7fee02dd3000, 524288 [pid 7707] write(3, "1000", 4 [pid 7703] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7700] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7708] <... munmap resumed>) = 0 [pid 7700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7708] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7700] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7708] <... openat resumed>) = 4 [pid 7700] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... openat resumed>) = 3 [pid 7708] ioctl(4, LOOP_SET_FD, 3 [pid 7703] <... openat resumed>) = 3 [pid 7700] <... mprotect resumed>) = 0 [pid 7707] <... write resumed>) = 4 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] fstat(3, [pid 7707] close(3 [pid 7703] chdir("./bus" [pid 7700] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7707] <... close resumed>) = 0 [pid 7703] <... chdir resumed>) = 0 [pid 5075] lstat("./144/bus", [pid 7707] symlink("/dev/binderfs", "./binderfs" [pid 7703] ioctl(4, LOOP_CLR_FD [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7707] <... symlink resumed>) = 0 [pid 7703] <... ioctl resumed>) = 0 [pid 5075] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7707] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7703] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7707] <... futex resumed>) = 0 [pid 7703] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7703] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 4 [pid 7707] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7703] <... futex resumed>) = 1 [pid 5075] fstat(4, [pid 7707] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7703] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7707] <... mprotect resumed>) = 0 [pid 5075] getdents64(4, [pid 7707] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7707] <... clone resumed>, parent_tid=[7709], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7709 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7707] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(4 [pid 7707] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7707] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] rmdir("./144/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7702] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7702] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7701] <... write resumed>) = 57344 [pid 7700] <... clone resumed>, parent_tid=[7710], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7710 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 7701] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./144" [pid 7703] <... futex resumed>) = 0 [pid 7702] <... futex resumed>) = 1 [pid 7701] <... futex resumed>) = 0 [pid 7700] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7701] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] mkdir("./145", 0777./strace-static-x86_64: Process 7710 attached [pid 7703] creat("./bus", 000 [pid 7702] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7710] set_robust_list(0x7fee02e529e0, 24 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7710] <... set_robust_list resumed>) = 0 [pid 7703] <... creat resumed>) = 4 [pid 7700] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7710] creat("./file1", 000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7710] <... creat resumed>) = 5 [pid 7703] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] lstat("./144/binderfs", [pid 7710] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7703] <... futex resumed>) = 1 [pid 7702] <... futex resumed>) = 0 [pid 5075] close(3 [pid 7710] <... futex resumed>) = 1 [pid 7700] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [ 116.875819][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.883279][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.891444][ T33] hfsplus: b-tree write err: -5, ino 4 [ 116.908273][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.916317][ T7701] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.916611][ T7708] loop5: detected capacity change from 0 to 1024 [pid 7702] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7710] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7703] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7700] exit_group(0 [pid 7702] <... futex resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7710] <... futex resumed>) = ? [pid 7702] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7701] <... futex resumed>) = ? [pid 7700] <... exit_group resumed>) = ? [pid 7710] +++ exited with 0 +++ [pid 7701] +++ exited with 0 +++ [pid 7700] +++ exited with 0 +++ [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7711 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7700, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5080] umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./144/binderfs") = 0 [pid 5080] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7711 attached [pid 7711] set_robust_list(0x555556b055e0, 24) = 0 [pid 7711] chdir("./145") = 0 [pid 7711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7711] setpgid(0, 0) = 0 [pid 7711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7711] write(3, "1000", 4) = 4 [pid 5074] unlink("./144/binderfs") = 0 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7711] close(3) = 0 [pid 7711] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7709 attached ) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 7711] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7711] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] lstat("./144/bus", [pid 7711] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7711] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7711] <... mprotect resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7711] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7711] <... clone resumed>, parent_tid=[7712], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7712 [pid 5080] fstat(4, [pid 7711] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7711] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 7711] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./144/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./144") = 0 [pid 5080] mkdir("./145", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7712 attached [pid 5080] close(3 [pid 7712] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... close resumed>) = 0 [pid 7712] <... set_robust_list resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7712] memfd_create("syzkaller", 0) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7713 [pid 7712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7709] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7709] memfd_create("syzkaller", 0) = 3 [pid 7709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 ./strace-static-x86_64: Process 7713 attached [pid 7713] set_robust_list(0x555556b055e0, 24) = 0 [pid 7713] chdir("./145" [pid 7712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7713] <... chdir resumed>) = 0 [pid 7713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7713] <... prctl resumed>) = 0 [pid 7713] setpgid(0, 0) = 0 [pid 7713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7713] write(3, "1000", 4) = 4 [pid 7713] close(3) = 0 [pid 7713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7713] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7712] <... write resumed>) = 524288 [pid 7702] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7713] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7702] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7713] <... mprotect resumed>) = 0 [pid 7702] <... futex resumed>) = 0 [ 116.938769][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [ 116.946477][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 116.959374][ T33] hfsplus: b-tree write err: -5, ino 4 [ 116.969433][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7713] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7712] munmap(0x7fee02dd3000, 524288 [pid 7702] <... mmap resumed>) = 0x7fee02e32000 [pid 7713] <... clone resumed>, parent_tid=[7714], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7714 [pid 7712] <... munmap resumed>) = 0 [pid 7702] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7713] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7702] <... mprotect resumed>) = 0 [pid 7713] <... futex resumed>) = 0 [pid 7712] <... openat resumed>) = 4 [pid 7702] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7713] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7712] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7715 attached [pid 7709] <... write resumed>) = 524288 [pid 7708] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7715] set_robust_list(0x7fee02e529e0, 24 [pid 7709] munmap(0x7fee02dd3000, 524288 [pid 7702] <... clone resumed>, parent_tid=[7715], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7715 [pid 7702] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7714 attached [pid 7714] set_robust_list(0x7fee0b1f39e0, 24 [pid 7709] <... munmap resumed>) = 0 [pid 7702] <... futex resumed>) = 0 [pid 7714] <... set_robust_list resumed>) = 0 [pid 7715] <... set_robust_list resumed>) = 0 [pid 7714] memfd_create("syzkaller", 0 [pid 7709] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7708] close(3 [pid 7702] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7714] <... memfd_create resumed>) = 3 [pid 7714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7715] creat("./file1", 000 [pid 7714] <... mmap resumed>) = 0x7fee02dd3000 [pid 7709] <... openat resumed>) = 4 [pid 7708] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7709] ioctl(4, LOOP_SET_FD, 3 [pid 7708] mkdir("./bus", 0777 [pid 7714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5074] lstat("./144/bus", [pid 7708] <... mkdir resumed>) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7708] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7712] <... ioctl resumed>) = 0 [pid 5074] umount2("./144/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7714] munmap(0x7fee02dd3000, 524288 [pid 7712] close(3 [pid 7709] <... ioctl resumed>) = 0 [pid 7708] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7715] <... creat resumed>) = 5 [pid 7714] <... munmap resumed>) = 0 [pid 7712] <... close resumed>) = 0 [pid 7709] close(3 [pid 7708] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7715] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] mkdir("./bus", 0777 [pid 5074] openat(AT_FDCWD, "./144/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7715] <... futex resumed>) = 1 [pid 7714] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7709] <... close resumed>) = 0 [pid 7708] <... openat resumed>) = 3 [pid 7702] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7714] <... openat resumed>) = 4 [pid 7709] mkdir("./bus", 0777 [pid 7708] chdir("./bus" [pid 5074] fstat(4, [pid 7714] ioctl(4, LOOP_SET_FD, 3 [ 116.998585][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.008853][ T7712] loop1: detected capacity change from 0 to 1024 [ 117.020908][ T7709] loop3: detected capacity change from 0 to 1024 [ 117.029861][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.038838][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7709] <... mkdir resumed>) = 0 [pid 7708] <... chdir resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7715] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7714] <... ioctl resumed>) = 0 [pid 7712] <... mkdir resumed>) = 0 [pid 7709] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7708] ioctl(4, LOOP_CLR_FD [pid 5074] getdents64(4, [pid 7708] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7708] close(4 [pid 5074] getdents64(4, [pid 7714] close(3 [pid 7712] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7708] <... close resumed>) = 0 [pid 7703] <... write resumed>) = 57344 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7714] <... close resumed>) = 0 [pid 7703] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(4 [pid 7714] mkdir("./bus", 0777 [pid 7703] <... futex resumed>) = 0 [pid 7702] exit_group(0 [pid 7715] <... futex resumed>) = ? [pid 7714] <... mkdir resumed>) = 0 [pid 7702] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 7715] +++ exited with 0 +++ [pid 7714] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7712] <... mount resumed>) = 0 [pid 7708] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7703] +++ exited with 0 +++ [pid 7702] +++ exited with 0 +++ [pid 5074] rmdir("./144/bus" [pid 7712] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7708] <... futex resumed>) = 1 [pid 7704] <... futex resumed>) = 0 [pid 7712] <... openat resumed>) = 3 [pid 7708] creat("./bus", 000 [pid 7704] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7702, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7709] <... mount resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7714] <... mount resumed>) = 0 [pid 7712] chdir("./bus" [pid 7708] <... creat resumed>) = 4 [pid 7704] <... futex resumed>) = 0 [pid 5076] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7709] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 7714] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7712] <... chdir resumed>) = 0 [pid 7708] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7704] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7714] <... openat resumed>) = 3 [pid 7712] ioctl(4, LOOP_CLR_FD [pid 7709] <... openat resumed>) = 3 [pid 7708] <... futex resumed>) = 0 [pid 7704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 7714] chdir("./bus" [pid 7712] <... ioctl resumed>) = 0 [pid 7709] chdir("./bus" [pid 7708] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7714] <... chdir resumed>) = 0 [pid 7712] close(4 [pid 7709] <... chdir resumed>) = 0 [pid 7708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7704] <... futex resumed>) = 0 [pid 5076] fstat(3, [pid 5074] rmdir("./144" [pid 7714] ioctl(4, LOOP_CLR_FD [pid 7712] <... close resumed>) = 0 [pid 7709] ioctl(4, LOOP_CLR_FD [pid 7708] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7704] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7714] <... ioctl resumed>) = 0 [pid 7712] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 7714] close(4 [pid 7712] <... futex resumed>) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7709] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7714] <... close resumed>) = 0 [pid 7711] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7714] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7711] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7714] <... futex resumed>) = 1 [pid 7713] <... futex resumed>) = 0 [pid 7711] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] lstat("./145/binderfs", [pid 7714] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7713] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7713] <... futex resumed>) = 0 [pid 5076] unlink("./145/binderfs" [pid 7714] creat("./bus", 000 [pid 7713] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... unlink resumed>) = 0 [pid 7714] <... creat resumed>) = 4 [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7714] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7713] <... futex resumed>) = 0 [pid 7714] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7713] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7713] <... futex resumed>) = 0 [ 117.045047][ T7714] loop4: detected capacity change from 0 to 1024 [ 117.046635][ T7703] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.072750][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.077795][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.087898][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7714] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7713] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7712] creat("./bus", 000 [pid 7709] close(4 [pid 5074] mkdir("./145", 0777 [pid 7712] <... creat resumed>) = 4 [pid 7709] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7712] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7712] <... futex resumed>) = 1 [pid 7709] <... futex resumed>) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7707] <... futex resumed>) = 0 [pid 7711] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7707] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7711] <... futex resumed>) = 0 [pid 7707] <... futex resumed>) = 0 [pid 7711] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7707] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7712] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7709] creat("./bus", 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 7709] <... creat resumed>) = 4 [pid 7704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] lstat("./145/bus", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7704] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7704] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7704] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7716], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7716 [pid 7704] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7704] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7709] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7709] <... futex resumed>) = 1 [pid 7707] <... futex resumed>) = 0 [pid 5076] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 7709] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7707] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7707] <... futex resumed>) = 0 [pid 7707] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 117.093778][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.106237][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.115803][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.126104][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.136622][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7717 attached [pid 7713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7713] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7713] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7713] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7718], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7718 [pid 7713] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7713] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7717 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7711] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] getdents64(4, [pid 7711] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7711] <... futex resumed>) = 0 [pid 5076] close(4 [pid 7717] set_robust_list(0x555556b055e0, 24 [pid 7711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7711] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7711] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7719], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7719 [pid 7711] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7711] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7718 attached [pid 7718] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7718] creat("./file1", 000./strace-static-x86_64: Process 7716 attached [pid 7717] <... set_robust_list resumed>) = 0 [pid 7704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7719 attached [pid 7719] set_robust_list(0x7fee02e529e0, 24) = 0 [ 117.146992][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.152273][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.172329][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.176303][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.182211][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7719] creat("./file1", 000 [pid 7717] chdir("./145" [pid 7716] set_robust_list(0x7fee02e529e0, 24 [pid 7707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] rmdir("./145/bus" [pid 7717] <... chdir resumed>) = 0 [pid 7716] <... set_robust_list resumed>) = 0 [pid 7707] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 7717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7716] creat("./file1", 000 [pid 7713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7707] <... futex resumed>) = 0 [pid 7717] <... prctl resumed>) = 0 [pid 5076] getdents64(3, [pid 7711] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7718] <... creat resumed>) = 5 [pid 7718] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7707] <... mmap resumed>) = 0x7fee02e32000 [pid 7717] setpgid(0, 0 [pid 7707] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7717] <... setpgid resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7707] <... mprotect resumed>) = 0 [pid 7717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7707] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] close(3 [pid 7717] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 7717] write(3, "1000", 4 [pid 7707] <... clone resumed>, parent_tid=[7720], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7720 [pid 5076] rmdir("./145"./strace-static-x86_64: Process 7720 attached [pid 7717] <... write resumed>) = 4 [pid 7707] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 7717] close(3 [pid 7707] <... futex resumed>) = 0 [pid 5076] mkdir("./146", 0777 [pid 7707] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7717] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7720] set_robust_list(0x7fee02e529e0, 24 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7719] <... creat resumed>) = 5 [pid 7719] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... set_robust_list resumed>) = 0 [pid 7719] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... openat resumed>) = 3 [pid 7717] <... futex resumed>) = 0 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7720] creat("./file1", 000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7717] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 7717] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] <... close resumed>) = 0 [pid 7717] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 117.188925][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.196006][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.203180][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.209883][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.236462][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7721 attached [pid 7721] set_robust_list(0x555556b055e0, 24) = 0 [pid 7721] chdir("./146") = 0 [pid 7721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7721] setpgid(0, 0) = 0 [pid 7721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7722 attached [pid 7722] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7722] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7721] <... openat resumed>) = 3 [pid 7721] write(3, "1000", 4) = 4 [pid 7721] close(3) = 0 [pid 7721] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7721] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7721] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7717] <... clone resumed>, parent_tid=[7722], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7722 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7721 [pid 7717] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] <... mprotect resumed>) = 0 [pid 7721] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7717] <... futex resumed>) = 1 [pid 7722] <... futex resumed>) = 0 [pid 7722] memfd_create("syzkaller", 0) = 3 [pid 7722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7721] <... clone resumed>, parent_tid=[7723], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7723 [pid 7721] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7721] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7717] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7716] <... creat resumed>) = 5 [pid 7716] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7723 attached [pid 7716] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7714] <... write resumed>) = 57344 [pid 7708] <... write resumed>) = 57344 [pid 7720] <... creat resumed>) = 5 [pid 7712] <... write resumed>) = 57344 [pid 7712] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7712] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] set_robust_list(0x7fee0b1f39e0, 24 [pid 7720] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7714] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7711] exit_group(0 [pid 7708] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... set_robust_list resumed>) = 0 [pid 7720] <... futex resumed>) = 0 [pid 7719] <... futex resumed>) = ? [pid 7714] <... futex resumed>) = 0 [pid 7713] exit_group(0 [pid 7712] <... futex resumed>) = ? [pid 7711] <... exit_group resumed>) = ? [pid 7708] <... futex resumed>) = 0 [pid 7704] exit_group(0 [pid 7723] memfd_create("syzkaller", 0 [pid 7720] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7719] +++ exited with 0 +++ [pid 7718] <... futex resumed>) = ? [pid 7716] <... futex resumed>) = ? [pid 7713] <... exit_group resumed>) = ? [pid 7712] +++ exited with 0 +++ [pid 7704] <... exit_group resumed>) = ? [pid 7718] +++ exited with 0 +++ [pid 7716] +++ exited with 0 +++ [pid 7711] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7711, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, [pid 7714] +++ exited with 0 +++ [pid 7713] +++ exited with 0 +++ [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 7723] <... memfd_create resumed>) = 3 [pid 7722] <... write resumed>) = 524288 [pid 7708] +++ exited with 0 +++ [pid 7704] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7713, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7704, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 5075] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7723] <... mmap resumed>) = 0x7fee02dd3000 [pid 7722] munmap(0x7fee02dd3000, 524288 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7722] <... munmap resumed>) = 0 [pid 5075] lstat("./145/binderfs", [pid 7722] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7722] <... openat resumed>) = 4 [pid 5075] unlink("./145/binderfs" [pid 7722] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... unlink resumed>) = 0 [ 117.245046][ T7714] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.247431][ T7708] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.261050][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.262112][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.268750][ T7712] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7722] <... ioctl resumed>) = 0 [pid 7722] close(3) = 0 [pid 7722] mkdir("./bus", 0777) = 0 [pid 7722] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7722] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7722] chdir("./bus") = 0 [pid 7722] ioctl(4, LOOP_CLR_FD) = 0 [pid 7722] close(4) = 0 [pid 7722] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7722] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] <... write resumed>) = 524288 [pid 5081] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7717] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7723] munmap(0x7fee02dd3000, 524288) = 0 [pid 7723] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7723] ioctl(4, LOOP_SET_FD, 3 [pid 7717] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7717] <... futex resumed>) = 1 [pid 7709] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7717] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] fstat(3, [pid 5080] <... openat resumed>) = 3 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] fstat(3, [pid 7723] <... ioctl resumed>) = 0 [pid 7709] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7723] close(3 [pid 7709] <... futex resumed>) = 0 [pid 7707] exit_group(0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] getdents64(3, [pid 7723] <... close resumed>) = 0 [pid 7720] <... futex resumed>) = ? [pid 7707] <... exit_group resumed>) = ? [pid 5081] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7723] mkdir("./bus", 0777 [pid 7720] +++ exited with 0 +++ [pid 7709] +++ exited with 0 +++ [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./145/bus", [pid 7707] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7707, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] lstat("./147/binderfs", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7723] <... mkdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] lstat("./145/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7723] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] unlink("./147/binderfs" [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... unlink resumed>) = 0 [pid 5080] unlink("./145/binderfs" [pid 5075] <... openat resumed>) = 4 [pid 5081] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... unlink resumed>) = 0 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 117.297777][ T7722] loop0: detected capacity change from 0 to 1024 [ 117.298825][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.313010][ T9] hfsplus: b-tree write err: -5, ino 4 [ 117.319895][ T7709] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.326162][ T7723] loop2: detected capacity change from 0 to 1024 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./145/bus") = 0 [pid 7722] <... futex resumed>) = 0 [pid 5075] getdents64(3, [pid 7722] creat("./bus", 000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7722] <... creat resumed>) = 4 [pid 5075] close(3) = 0 [pid 5075] rmdir("./145") = 0 [pid 5075] mkdir("./146", 0777 [pid 7722] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 7722] <... futex resumed>) = 1 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7722] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... futex resumed>) = 0 [pid 5080] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7722] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7717] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7722] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7717] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7717] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = 0 [pid 5080] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 7723] <... mount resumed>) = 0 [pid 5080] lstat("./145/bus", [pid 5077] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7723] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] fstat(3, [pid 7723] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7724 [pid 7723] chdir("./bus" [pid 5081] lstat("./147/bus", [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(3, [pid 7723] <... chdir resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... openat resumed>) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, ./strace-static-x86_64: Process 7724 attached 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7724] set_robust_list(0x555556b055e0, 24 [pid 5080] close(4 [pid 7724] <... set_robust_list resumed>) = 0 [pid 5080] <... close resumed>) = 0 [ 117.351419][ T9] hfsplus: b-tree write err: -5, ino 4 [ 117.359366][ T52] hfsplus: b-tree write err: -5, ino 4 [ 117.379218][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7724] chdir("./146" [pid 5080] rmdir("./145/bus" [pid 7724] <... chdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] getdents64(3, [pid 7724] <... prctl resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7724] setpgid(0, 0 [pid 5080] close(3 [pid 7724] <... setpgid resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7723] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] rmdir("./145" [pid 5077] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7724] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 7724] write(3, "1000", 4 [pid 5080] mkdir("./146", 0777 [pid 7724] <... write resumed>) = 4 [pid 5080] <... mkdir resumed>) = 0 [pid 7724] close(3 [pid 7723] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7724] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7724] symlink("/dev/binderfs", "./binderfs" [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7724] <... symlink resumed>) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7724] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] close(3 [pid 7724] <... futex resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7724] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7724] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7725 [pid 7724] <... mprotect resumed>) = 0 [pid 7724] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7726], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7726 [pid 7724] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7724] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7725 attached [pid 7725] set_robust_list(0x555556b055e0, 24 [pid 7723] close(4 [pid 5081] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] lstat("./146/binderfs", [pid 7725] <... set_robust_list resumed>) = 0 [pid 7725] chdir("./146") = 0 [pid 7725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7725] setpgid(0, 0) = 0 [pid 7725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 7726 attached [pid 7726] set_robust_list(0x7fee0b1f39e0, 24 [pid 7725] write(3, "1000", 4 [pid 7726] <... set_robust_list resumed>) = 0 [pid 7725] <... write resumed>) = 4 [pid 7726] memfd_create("syzkaller", 0 [pid 7725] close(3 [pid 7726] <... memfd_create resumed>) = 3 [pid 7725] <... close resumed>) = 0 [pid 7726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7725] symlink("/dev/binderfs", "./binderfs" [pid 7726] <... mmap resumed>) = 0x7fee02dd3000 [pid 7725] <... symlink resumed>) = 0 [pid 7725] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7723] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7723] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5077] unlink("./146/binderfs" [pid 7725] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7723] <... futex resumed>) = 1 [pid 7721] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7725] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7723] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7721] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7725] <... mprotect resumed>) = 0 [pid 7723] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7721] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7726] <... write resumed>) = 524288 [pid 7725] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7721] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7725] <... clone resumed>, parent_tid=[7727], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7727 [pid 7725] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7725] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7726] munmap(0x7fee02dd3000, 524288) = 0 ./strace-static-x86_64: Process 7727 attached [pid 7723] creat("./bus", 000 [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(4, [pid 7717] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... creat resumed>) = 4 [pid 7717] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7727] set_robust_list(0x7fee0b1f39e0, 24 [pid 5081] close(4 [pid 7717] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./147/bus" [pid 7717] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 7727] <... set_robust_list resumed>) = 0 [pid 7717] <... mprotect resumed>) = 0 [pid 7723] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] memfd_create("syzkaller", 0 [pid 7726] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7723] <... futex resumed>) = 1 [pid 7721] <... futex resumed>) = 0 [pid 7717] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] getdents64(3, [pid 7727] <... memfd_create resumed>) = 3 [pid 7726] <... openat resumed>) = 4 [pid 7721] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7726] ioctl(4, LOOP_SET_FD, 3 [pid 7721] <... futex resumed>) = 0 [ 117.396787][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.407833][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.430207][ T52] hfsplus: b-tree write err: -5, ino 4 [ 117.435495][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7727] <... mmap resumed>) = 0x7fee02dd3000 [pid 7723] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7721] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 7727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7728 attached [pid 7728] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7728] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... clone resumed>, parent_tid=[7728], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7728 [pid 7717] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7727] <... write resumed>) = 524288 [pid 7727] munmap(0x7fee02dd3000, 524288) = 0 [pid 7728] <... futex resumed>) = 0 [pid 7717] <... futex resumed>) = 1 [pid 5081] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7717] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] rmdir("./147" [pid 5077] lstat("./146/bus", [pid 7728] creat("./file1", 000 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] mkdir("./148", 0777 [pid 7727] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] <... mkdir resumed>) = 0 [pid 5077] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7727] <... openat resumed>) = 4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7727] ioctl(4, LOOP_SET_FD, 3 [pid 5081] close(3 [pid 5077] <... openat resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 7726] <... ioctl resumed>) = 0 [pid 7726] close(3) = 0 [pid 7726] mkdir("./bus", 0777) = 0 [pid 7726] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] fstat(4, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7729 [pid 7726] <... mount resumed>) = 0 [pid 7726] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7726] chdir("./bus") = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7726] ioctl(4, LOOP_CLR_FD) = 0 [pid 7726] close(4) = 0 [pid 7726] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7726] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7724] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7724] <... futex resumed>) = 0 [pid 7726] creat("./bus", 000 [pid 7724] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7726] <... creat resumed>) = 4 [pid 7726] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7726] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7724] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7724] <... futex resumed>) = 0 [pid 7726] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 117.449903][ T7726] loop1: detected capacity change from 0 to 1024 [ 117.458475][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.475588][ T7727] loop4: detected capacity change from 0 to 1024 [ 117.483989][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7724] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7729 attached [pid 7728] <... creat resumed>) = 5 [pid 7721] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] getdents64(4, [pid 7728] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7728] <... futex resumed>) = 0 [pid 7721] <... futex resumed>) = 0 [pid 7728] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7727] <... ioctl resumed>) = 0 [pid 7721] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7727] close(3 [pid 7721] <... mmap resumed>) = 0x7fee02e32000 [pid 7727] <... close resumed>) = 0 [pid 7721] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7727] mkdir("./bus", 0777 [pid 7721] <... mprotect resumed>) = 0 [pid 7727] <... mkdir resumed>) = 0 [pid 7721] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7727] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7721] <... clone resumed>, parent_tid=[7730], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7730 [pid 7721] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7729] set_robust_list(0x555556b055e0, 24 [pid 7721] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7729] <... set_robust_list resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7727] <... mount resumed>) = 0 [pid 7727] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7727] chdir("./bus") = 0 [pid 7727] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 7730 attached [pid 7727] close(4 [pid 7730] set_robust_list(0x7fee02e529e0, 24 [pid 7727] <... close resumed>) = 0 [pid 7730] <... set_robust_list resumed>) = 0 [pid 7727] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] creat("./file1", 000 [pid 7727] <... futex resumed>) = 1 [pid 7725] <... futex resumed>) = 0 [pid 7729] chdir("./148" [pid 7727] creat("./bus", 000 [pid 7725] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(4, [pid 7727] <... creat resumed>) = 4 [pid 7725] <... futex resumed>) = 0 [pid 7727] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7727] <... futex resumed>) = 0 [pid 7725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7727] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 117.496945][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.505244][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.512673][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.520498][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.528862][ T7722] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.541653][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7725] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... creat resumed>) = 5 [pid 7729] <... chdir resumed>) = 0 [pid 7725] <... futex resumed>) = 0 [pid 7724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7730] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7724] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... futex resumed>) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7721] <... futex resumed>) = 0 [pid 7730] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7724] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7724] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7731], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7731 [pid 7724] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7724] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7729] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] close(4 [pid 7729] <... prctl resumed>) = 0 [pid 7722] <... write resumed>) = 57344 ./strace-static-x86_64: Process 7731 attached [pid 7731] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7731] creat("./file1", 000) = 5 [pid 7729] setpgid(0, 0 [pid 7722] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 7731] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7731] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] <... setpgid resumed>) = 0 [pid 7722] <... futex resumed>) = 0 [pid 7717] exit_group(0 [pid 5077] rmdir("./146/bus" [pid 7729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7717] <... exit_group resumed>) = ? [pid 7728] <... futex resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 7728] +++ exited with 0 +++ [ 117.543925][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.556376][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.564577][ T7723] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.572430][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.575716][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.580215][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7729] <... openat resumed>) = 3 [pid 7723] <... write resumed>) = 57344 [pid 7722] +++ exited with 0 +++ [pid 7717] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7717, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, [pid 7725] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7725] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7725] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] lstat("./145/binderfs", [pid 7725] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7725] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] unlink("./145/binderfs" [pid 7725] <... mprotect resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7725] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7729] write(3, "1000", 4 [pid 7723] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7725] <... clone resumed>, parent_tid=[7732], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7732 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7725] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] exit_group(0 [pid 7730] <... futex resumed>) = ? [pid 7725] <... futex resumed>) = 0 [pid 7721] <... exit_group resumed>) = ? [pid 7730] +++ exited with 0 +++ [pid 7725] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7732 attached [pid 7729] <... write resumed>) = 4 [pid 7726] <... write resumed>) = 57344 [pid 7723] <... futex resumed>) = ? [pid 5077] close(3 [pid 7729] close(3 [pid 7723] +++ exited with 0 +++ [pid 7721] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 7732] set_robust_list(0x7fee02e529e0, 24 [pid 7729] <... close resumed>) = 0 [pid 5077] rmdir("./146" [pid 7732] <... set_robust_list resumed>) = 0 [pid 7729] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7721, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7732] creat("./file1", 000 [pid 7729] <... symlink resumed>) = 0 [pid 5077] mkdir("./147", 0777 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7729] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7729] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... openat resumed>) = 3 [pid 7729] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7729] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7729] <... mprotect resumed>) = 0 [pid 5077] close(3 [pid 5076] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7729] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] fstat(3, [pid 7729] <... clone resumed>, parent_tid=[7733], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7733 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7729] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7734 [pid 5076] getdents64(3, [pid 7729] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7729] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./146/binderfs") = 0 [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7726] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7732] <... creat resumed>) = 5 [pid 7732] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7732] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7724] exit_group(0 [pid 7726] <... futex resumed>) = ? [pid 7724] <... exit_group resumed>) = ? [pid 7726] +++ exited with 0 +++ [pid 7725] <... futex resumed>) = 0 [pid 7731] <... futex resumed>) = ? [pid 7731] +++ exited with 0 +++ [pid 7724] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7724, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./146/binderfs") = 0 [ 117.596565][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.598944][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.611966][ T7726] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.615392][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.627158][ T33] hfsplus: b-tree write err: -5, ino 4 [ 117.634349][ T52] hfsplus: b-tree write err: -5, ino 4 [ 117.645460][ T5162] hfsplus: b-tree write err: -5, ino 4 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./145/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./145/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./145/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./146/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] fstat(4, [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./146/bus") = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] lstat("./146/bus", [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./146") = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, [pid 5076] mkdir("./147", 0777 [pid 5075] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7735 ./strace-static-x86_64: Process 7735 attached [pid 7735] set_robust_list(0x555556b055e0, 24) = 0 [pid 7735] chdir("./147") = 0 [pid 7735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7735] setpgid(0, 0) = 0 [pid 7735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7735] write(3, "1000", 4) = 4 [pid 7735] close(3) = 0 [pid 7735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7735] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7735] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7735] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7736], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7736 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5075] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] fstat(4, [pid 5074] rmdir("./145/bus" [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7735] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] getdents64(3, [pid 7735] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7735] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] close(4 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./146/bus" [pid 5074] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./145" [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7734 attached ./strace-static-x86_64: Process 7733 attached 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7736 attached [pid 7736] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7736] memfd_create("syzkaller", 0) = 3 [pid 7736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5075] close(3 [pid 5074] mkdir("./146", 0777 [pid 7734] set_robust_list(0x555556b055e0, 24 [pid 7733] set_robust_list(0x7fee0b1f39e0, 24 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./146" [pid 5074] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7734] <... set_robust_list resumed>) = 0 [pid 7733] <... set_robust_list resumed>) = 0 [pid 5075] mkdir("./147", 0777 [pid 5074] <... openat resumed>) = 3 [pid 7734] chdir("./147" [pid 7733] memfd_create("syzkaller", 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7734] <... chdir resumed>) = 0 [pid 7733] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 7734] <... prctl resumed>) = 0 [pid 7733] <... mmap resumed>) = 0x7fee02dd3000 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 7734] setpgid(0, 0 [pid 7736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7734] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7737 [pid 7734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7738 [pid 7734] write(3, "1000", 4) = 4 [pid 7734] close(3) = 0 [pid 7733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7734] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7738 attached [pid 7738] set_robust_list(0x555556b055e0, 24 [pid 7734] <... symlink resumed>) = 0 [pid 7738] <... set_robust_list resumed>) = 0 [pid 7734] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7737 attached [pid 7736] <... write resumed>) = 524288 [pid 7733] <... write resumed>) = 524288 [pid 7727] <... write resumed>) = 57344 [pid 7734] <... futex resumed>) = 0 [pid 7734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7738] chdir("./147" [pid 7737] set_robust_list(0x555556b055e0, 24 [pid 7736] munmap(0x7fee02dd3000, 524288 [pid 7734] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7727] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] exit_group(0 [pid 7734] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7738] <... chdir resumed>) = 0 [pid 7737] <... set_robust_list resumed>) = 0 [pid 7736] <... munmap resumed>) = 0 [pid 7734] <... mprotect resumed>) = 0 [pid 7733] munmap(0x7fee02dd3000, 524288 [pid 7732] <... futex resumed>) = ? [pid 7727] <... futex resumed>) = ? [pid 7725] <... exit_group resumed>) = ? [pid 7738] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7737] chdir("./146" [pid 7736] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7734] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7732] +++ exited with 0 +++ [pid 7727] +++ exited with 0 +++ [pid 7738] <... prctl resumed>) = 0 [pid 7737] <... chdir resumed>) = 0 [pid 7736] <... openat resumed>) = 4 [pid 7738] setpgid(0, 0 [pid 7737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7736] ioctl(4, LOOP_SET_FD, 3 [pid 7734] <... clone resumed>, parent_tid=[7739], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7739 [pid 7738] <... setpgid resumed>) = 0 [ 117.646155][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.687085][ T7727] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7737] <... prctl resumed>) = 0 [pid 7734] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7737] setpgid(0, 0 [pid 7738] <... openat resumed>) = 3 [pid 7737] <... setpgid resumed>) = 0 [pid 7738] write(3, "1000", 4 [pid 7737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7738] <... write resumed>) = 4 [pid 7737] <... openat resumed>) = 3 [pid 7738] close(3 [pid 7737] write(3, "1000", 4 [pid 7738] <... close resumed>) = 0 [pid 7737] <... write resumed>) = 4 [pid 7738] symlink("/dev/binderfs", "./binderfs" [pid 7737] close(3 [pid 7738] <... symlink resumed>) = 0 [pid 7737] <... close resumed>) = 0 [pid 7738] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] symlink("/dev/binderfs", "./binderfs" [pid 7738] <... futex resumed>) = 0 [pid 7737] <... symlink resumed>) = 0 [pid 7738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7737] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7736] <... ioctl resumed>) = 0 [pid 7736] close(3) = 0 [pid 7736] mkdir("./bus", 0777) = 0 [pid 7736] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7734] <... futex resumed>) = 0 [pid 7734] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7739 attached [pid 7738] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7737] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7733] <... munmap resumed>) = 0 [pid 7725] +++ exited with 0 +++ [pid 7739] set_robust_list(0x7fee0b1f39e0, 24 [pid 7738] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7737] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7733] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7739] <... set_robust_list resumed>) = 0 [pid 7738] <... mprotect resumed>) = 0 [pid 7737] <... mprotect resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7725, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7733] <... openat resumed>) = 4 [pid 7738] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7737] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7739] memfd_create("syzkaller", 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7738] <... clone resumed>, parent_tid=[7740], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7740 [pid 7737] <... clone resumed>, parent_tid=[7741], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7741 [pid 7733] ioctl(4, LOOP_SET_FD, 3 [pid 5080] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7739] <... memfd_create resumed>) = 3 [pid 7738] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 7738] <... futex resumed>) = 0 [pid 7737] <... futex resumed>) = 0 [pid 5080] fstat(3, [pid 7738] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7737] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7733] <... ioctl resumed>) = 0 [pid 5080] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7739] <... mmap resumed>) = 0x7fee02dd3000 [pid 7733] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./146/binderfs") = 0 [pid 5080] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7740 attached [pid 7740] set_robust_list(0x7fee0b1f39e0, 24 [pid 7739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7740] <... set_robust_list resumed>) = 0 [pid 7740] memfd_create("syzkaller", 0) = 3 [pid 7740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7736] <... mount resumed>) = 0 [pid 7736] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7736] chdir("./bus") = 0 [pid 7736] ioctl(4, LOOP_CLR_FD) = 0 [pid 7736] close(4) = 0 [pid 7736] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7735] <... futex resumed>) = 0 [pid 7736] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7735] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7735] <... futex resumed>) = 0 [pid 7740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7736] creat("./bus", 000 [pid 7735] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7741 attached [pid 7740] <... write resumed>) = 524288 [pid 7739] <... write resumed>) = 524288 [pid 7736] <... creat resumed>) = 4 [pid 7733] <... close resumed>) = 0 [pid 7736] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] set_robust_list(0x7fee0b1f39e0, 24 [pid 7740] munmap(0x7fee02dd3000, 524288 [pid 7739] munmap(0x7fee02dd3000, 524288 [pid 7736] <... futex resumed>) = 1 [pid 7735] <... futex resumed>) = 0 [pid 7733] mkdir("./bus", 0777 [pid 7741] <... set_robust_list resumed>) = 0 [pid 7740] <... munmap resumed>) = 0 [pid 7739] <... munmap resumed>) = 0 [pid 7733] <... mkdir resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 7741] memfd_create("syzkaller", 0 [pid 7740] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7739] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7733] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7741] <... memfd_create resumed>) = 3 [pid 7740] <... openat resumed>) = 4 [pid 7739] <... openat resumed>) = 4 [pid 7741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7740] ioctl(4, LOOP_SET_FD, 3 [ 117.733014][ T7736] loop2: detected capacity change from 0 to 1024 [ 117.737464][ T5083] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.754755][ T7733] loop5: detected capacity change from 0 to 1024 [ 117.767723][ T33] hfsplus: b-tree write err: -5, ino 4 [pid 7739] ioctl(4, LOOP_SET_FD, 3 [pid 7741] <... mmap resumed>) = 0x7fee02dd3000 [pid 7736] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7735] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7735] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7735] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./146/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./146/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./146") = 0 [pid 5080] mkdir("./147", 0777) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5080] close(3 [pid 7741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7740] <... ioctl resumed>) = 0 [pid 7739] <... ioctl resumed>) = 0 [pid 7733] <... mount resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7742 ./strace-static-x86_64: Process 7742 attached [pid 7742] set_robust_list(0x555556b055e0, 24) = 0 [pid 7742] chdir("./147") = 0 [pid 7742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7741] <... write resumed>) = 524288 [pid 7740] close(3 [pid 7733] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7741] munmap(0x7fee02dd3000, 524288 [pid 7740] <... close resumed>) = 0 [pid 7739] close(3 [pid 7733] <... openat resumed>) = 3 [pid 7742] <... prctl resumed>) = 0 [pid 7741] <... munmap resumed>) = 0 [pid 7740] mkdir("./bus", 0777 [pid 7739] <... close resumed>) = 0 [pid 7733] chdir("./bus") = 0 [pid 7741] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7740] <... mkdir resumed>) = 0 [pid 7739] mkdir("./bus", 0777 [pid 7733] ioctl(4, LOOP_CLR_FD [pid 7742] setpgid(0, 0 [pid 7739] <... mkdir resumed>) = 0 [pid 7733] <... ioctl resumed>) = 0 [pid 7741] <... openat resumed>) = 4 [pid 7740] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7739] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7733] close(4 [pid 7742] <... setpgid resumed>) = 0 [ 117.794804][ T7740] loop1: detected capacity change from 0 to 1024 [ 117.800424][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.801393][ T7739] loop3: detected capacity change from 0 to 1024 [ 117.818529][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.835447][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7741] ioctl(4, LOOP_SET_FD, 3 [pid 7733] <... close resumed>) = 0 [pid 7742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7742] write(3, "1000", 4) = 4 [pid 7742] close(3) = 0 [pid 7742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7742] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7742] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7742] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7743], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7743 [pid 7742] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7742] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7743 attached [pid 7743] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7743] memfd_create("syzkaller", 0) = 3 [pid 7743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7733] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7729] <... futex resumed>) = 0 [pid 7733] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7729] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7733] creat("./bus", 000 [pid 7739] <... mount resumed>) = 0 [pid 7735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7729] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7739] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7735] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7733] <... creat resumed>) = 4 [pid 7735] <... futex resumed>) = 0 [pid 7733] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... openat resumed>) = 3 [pid 7739] chdir("./bus" [pid 7733] <... futex resumed>) = 1 [pid 7735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7729] <... futex resumed>) = 0 [pid 7739] <... chdir resumed>) = 0 [pid 7733] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7735] <... mmap resumed>) = 0x7fee02e32000 [pid 7729] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] ioctl(4, LOOP_CLR_FD [pid 7733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7735] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7729] <... futex resumed>) = 0 [pid 7740] <... mount resumed>) = 0 [pid 7739] <... ioctl resumed>) = 0 [pid 7735] <... mprotect resumed>) = 0 [pid 7733] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7729] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7741] <... ioctl resumed>) = 0 [pid 7740] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7739] close(4 [pid 7735] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7740] <... openat resumed>) = 3 [pid 7739] <... close resumed>) = 0 [pid 7735] <... clone resumed>, parent_tid=[7744], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7744 [pid 7735] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] chdir("./bus" [pid 7739] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] close(3 [pid 7740] <... chdir resumed>) = 0 [pid 7739] <... futex resumed>) = 1 [pid 7734] <... futex resumed>) = 0 [pid 7741] <... close resumed>) = 0 [pid 7741] mkdir("./bus", 0777 [pid 7740] ioctl(4, LOOP_CLR_FD [pid 7739] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7734] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] <... mkdir resumed>) = 0 [pid 7740] <... ioctl resumed>) = 0 [pid 7739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7741] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7734] <... futex resumed>) = 0 [pid 7743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7740] close(4 [pid 7739] creat("./bus", 000 [ 117.843896][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.851973][ T7741] loop0: detected capacity change from 0 to 1024 [ 117.866294][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.879083][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7734] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7741] <... mount resumed>) = 0 [pid 7740] <... close resumed>) = 0 [pid 7739] <... creat resumed>) = 4 [pid 7741] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7740] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7744 attached [pid 7744] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7744] creat("./file1", 000 [pid 7743] <... write resumed>) = 524288 [pid 7743] munmap(0x7fee02dd3000, 524288) = 0 [pid 7743] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7743] ioctl(4, LOOP_SET_FD, 3 [pid 7741] <... openat resumed>) = 3 [pid 7740] <... futex resumed>) = 1 [pid 7739] <... futex resumed>) = 1 [pid 7738] <... futex resumed>) = 0 [pid 7734] <... futex resumed>) = 0 [pid 7738] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... ioctl resumed>) = 0 [pid 7743] close(3) = 0 [pid 7743] mkdir("./bus", 0777 [pid 7729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7729] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7729] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7729] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7745], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7745 [pid 7729] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7729] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... mkdir resumed>) = 0 [pid 7743] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7745 attached [pid 7745] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7745] creat("./file1", 000 [pid 7741] chdir("./bus" [pid 7740] creat("./bus", 000 [pid 7739] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7734] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7744] <... creat resumed>) = 5 [pid 7736] <... write resumed>) = 57344 [pid 7735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7744] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] <... chdir resumed>) = 0 [pid 7744] <... futex resumed>) = 0 [pid 7740] <... creat resumed>) = 4 [pid 7741] ioctl(4, LOOP_CLR_FD [pid 7739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7736] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7734] <... futex resumed>) = 0 [pid 7744] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7741] <... ioctl resumed>) = 0 [pid 7740] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7736] <... futex resumed>) = 0 [pid 7734] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7735] exit_group(0 [pid 7744] <... futex resumed>) = ? [pid 7735] <... exit_group resumed>) = ? [pid 7744] +++ exited with 0 +++ [pid 7743] <... mount resumed>) = 0 [pid 7743] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7743] chdir("./bus") = 0 [pid 7743] ioctl(4, LOOP_CLR_FD) = 0 [pid 7743] close(4) = 0 [pid 7741] close(4 [pid 7740] <... futex resumed>) = 1 [pid 7738] <... futex resumed>) = 0 [pid 7743] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 117.889599][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.897487][ T7736] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.902280][ T7743] loop4: detected capacity change from 0 to 1024 [ 117.905394][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.920101][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.931545][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7738] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] <... futex resumed>) = 1 [pid 7742] <... futex resumed>) = 0 [pid 7738] <... futex resumed>) = 0 [pid 7743] creat("./bus", 000 [pid 7742] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7738] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... creat resumed>) = 4 [pid 7742] <... futex resumed>) = 0 [pid 7743] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7742] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] <... futex resumed>) = 0 [pid 7742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7743] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7742] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] <... close resumed>) = 0 [pid 7742] <... futex resumed>) = 0 [pid 7741] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7736] +++ exited with 0 +++ [pid 7735] +++ exited with 0 +++ [pid 7729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7742] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7741] <... futex resumed>) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7737] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7735, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7737] <... futex resumed>) = 0 [pid 5076] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7737] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./147/binderfs") = 0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7741] creat("./bus", 000 [pid 7734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 117.941192][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.950076][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.951498][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.957813][ T7733] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.978277][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7741] <... creat resumed>) = 4 [pid 7738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7734] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7738] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7738] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7738] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7746], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7746 [pid 7738] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7741] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7734] <... futex resumed>) = 0 [pid 7745] <... creat resumed>) = 5 [pid 7741] <... futex resumed>) = 1 [pid 7737] <... futex resumed>) = 0 [pid 7734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7733] <... write resumed>) = 57344 [pid 7745] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7745] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = 0 [pid 7741] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7734] <... mmap resumed>) = 0x7fee02e32000 [pid 7741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7737] <... futex resumed>) = 0 [pid 7734] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7741] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7737] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7734] <... mprotect resumed>) = 0 [pid 7734] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] close(4 [pid 7742] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 7742] <... futex resumed>) = 0 [pid 5076] rmdir("./147/bus"./strace-static-x86_64: Process 7747 attached ./strace-static-x86_64: Process 7746 attached [pid 7742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7733] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 7746] set_robust_list(0x7fee02e529e0, 24 [pid 7742] <... mmap resumed>) = 0x7fee02e32000 [pid 5076] getdents64(3, [pid 7746] <... set_robust_list resumed>) = 0 [ 117.989486][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 117.997071][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 118.000918][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.010616][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.021319][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7742] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7747] set_robust_list(0x7fee02e529e0, 24 [pid 7746] creat("./file1", 000 [pid 7742] <... mprotect resumed>) = 0 [pid 7734] <... clone resumed>, parent_tid=[7747], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7747 [pid 7733] <... futex resumed>) = 0 [pid 7729] exit_group(0 [pid 5076] close(3 [pid 7745] <... futex resumed>) = ? [pid 7742] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7738] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7729] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 7745] +++ exited with 0 +++ [pid 5076] rmdir("./147" [pid 7747] <... set_robust_list resumed>) = 0 [pid 7742] <... clone resumed>, parent_tid=[7748], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7748 [pid 7734] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 7747] creat("./file1", 000 [pid 7742] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7734] <... futex resumed>) = 0 [pid 5076] mkdir("./148", 0777 [pid 7747] <... creat resumed>) = 5 [pid 7742] <... futex resumed>) = 0 [pid 7734] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7733] +++ exited with 0 +++ [pid 7729] +++ exited with 0 +++ [pid 5076] <... mkdir resumed>) = 0 [pid 7747] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7742] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7729, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7748 attached [pid 7747] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7748] set_robust_list(0x7fee02e529e0, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7748] <... set_robust_list resumed>) = 0 [pid 5081] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7748] creat("./file1", 000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 7747] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7737] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7749 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./148/binderfs") = 0 [pid 5081] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7748] <... creat resumed>) = 5 [pid 7748] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7742] <... futex resumed>) = 0 [ 118.039013][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.045224][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.046624][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.065869][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.073606][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.081063][ T7739] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.088742][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7749 attached [pid 7748] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7746] <... creat resumed>) = 5 [pid 7739] <... write resumed>) = 57344 [pid 7737] <... futex resumed>) = 0 [pid 7749] set_robust_list(0x555556b055e0, 24 [pid 7746] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7734] exit_group(0 [pid 7749] <... set_robust_list resumed>) = 0 [pid 7747] <... futex resumed>) = ? [pid 7746] <... futex resumed>) = 0 [pid 7739] <... futex resumed>) = ? [pid 7737] <... mmap resumed>) = 0x7fee02e32000 [pid 7734] <... exit_group resumed>) = ? [pid 7746] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7749] chdir("./148" [pid 7747] +++ exited with 0 +++ [pid 7739] +++ exited with 0 +++ [pid 7737] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7734] +++ exited with 0 +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7734, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5077] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./147/binderfs" [pid 7749] <... chdir resumed>) = 0 [pid 7737] <... mprotect resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7740] <... write resumed>) = 57344 [ 118.088878][ T52] hfsplus: b-tree write err: -5, ino 4 [ 118.096281][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.112029][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.113905][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.122776][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.134754][ T7740] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7749] <... prctl resumed>) = 0 [pid 7740] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7738] exit_group(0 [pid 5081] <... umount2 resumed>) = 0 [pid 7746] <... futex resumed>) = ? [pid 7738] <... exit_group resumed>) = ? [pid 7746] +++ exited with 0 +++ [pid 5081] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./148/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7749] setpgid(0, 0 [pid 7740] <... futex resumed>) = ? [pid 5081] getdents64(4, ./strace-static-x86_64: Process 7750 attached [pid 7749] <... setpgid resumed>) = 0 [pid 7741] <... write resumed>) = 57344 [pid 7740] +++ exited with 0 +++ [pid 7738] +++ exited with 0 +++ [pid 7737] <... clone resumed>, parent_tid=[7750], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7750 [pid 7750] set_robust_list(0x7fee02e529e0, 24 [pid 7749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7741] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7750] <... set_robust_list resumed>) = 0 [pid 7749] <... openat resumed>) = 3 [pid 7741] <... futex resumed>) = 0 [pid 7737] <... futex resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7738, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7750] creat("./file1", 000 [pid 7749] write(3, "1000", 4 [pid 7741] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7737] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7750] <... creat resumed>) = 5 [pid 7749] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7750] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7749] close(3 [pid 5075] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7750] <... futex resumed>) = 1 [pid 7749] <... close resumed>) = 0 [pid 7737] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7750] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7749] symlink("/dev/binderfs", "./binderfs" [pid 7737] exit_group(0 [pid 5075] fstat(3, [pid 7750] <... futex resumed>) = ? [pid 7749] <... symlink resumed>) = 0 [pid 7741] <... futex resumed>) = ? [pid 7737] <... exit_group resumed>) = ? [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7750] +++ exited with 0 +++ [pid 7749] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] +++ exited with 0 +++ [pid 7737] +++ exited with 0 +++ [pid 5075] getdents64(3, [pid 7749] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7737, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7749] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7749] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] lstat("./147/binderfs", [pid 5074] <... restart_syscall resumed>) = 0 [pid 7749] <... mprotect resumed>) = 0 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7749] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] unlink("./147/binderfs") = 0 [pid 5074] umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7749] <... clone resumed>, parent_tid=[7751], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7751 [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7749] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7749] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7749] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] lstat("./146/binderfs", [pid 5081] close(4 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] <... close resumed>) = 0 [pid 5074] unlink("./146/binderfs" [pid 5081] rmdir("./148/bus" [pid 5074] <... unlink resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./148") = 0 [pid 5081] mkdir("./149", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 118.142419][ T7741] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.150271][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.157888][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 118.166493][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.184190][ T5162] hfsplus: b-tree write err: -5, ino 4 ./strace-static-x86_64: Process 7751 attached [pid 7743] <... write resumed>) = 57344 [pid 5077] lstat("./147/bus", [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7751] set_robust_list(0x7fee0b1f39e0, 24 [pid 7743] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7751] <... set_robust_list resumed>) = 0 [pid 7743] <... futex resumed>) = 0 [pid 5077] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7751] memfd_create("syzkaller", 0 [pid 7743] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./147/bus", [pid 5074] lstat("./146/bus", [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./146/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./146/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5075] fstat(4, [pid 5074] fstat(4, [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 7742] exit_group(0 [pid 5077] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7748] <... futex resumed>) = ? [pid 7742] <... exit_group resumed>) = ? [pid 5077] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] getdents64(4, [pid 7748] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] close(4 [pid 5077] fstat(4, [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] rmdir("./147/bus" [pid 5074] rmdir("./146/bus" [pid 7751] <... memfd_create resumed>) = 3 [pid 7743] <... futex resumed>) = ? [pid 5077] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5077] getdents64(4, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5077] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5075] rmdir("./147" [pid 5074] rmdir("./146" [pid 5077] rmdir("./147/bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] mkdir("./148", 0777 [pid 5074] mkdir("./147", 0777 [pid 7743] +++ exited with 0 +++ [pid 7751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7742] +++ exited with 0 +++ [pid 5077] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7752 attached [pid 7751] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7742, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7752] set_robust_list(0x555556b055e0, 24 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7752] <... set_robust_list resumed>) = 0 [pid 5077] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7752] chdir("./149" [pid 5077] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7752] <... chdir resumed>) = 0 [pid 5077] rmdir("./147" [pid 5075] close(3 [pid 5074] close(3 [pid 7752] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7752] <... prctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7752] setpgid(0, 0 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7752 [pid 5077] <... rmdir resumed>) = 0 [pid 7752] <... setpgid resumed>) = 0 [pid 5077] mkdir("./148", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7753 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7754 [pid 7752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 7752] write(3, "1000", 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7752] <... write resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 7752] close(3) = 0 [pid 5080] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7752] symlink("/dev/binderfs", "./binderfs" [pid 5080] fstat(3, [pid 7752] <... symlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7752] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(3 [pid 7752] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 7752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... close resumed>) = 0 [pid 7752] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7752] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7752] <... mprotect resumed>) = 0 [pid 7752] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] lstat("./147/binderfs", ./strace-static-x86_64: Process 7754 attached ./strace-static-x86_64: Process 7753 attached [pid 7752] <... clone resumed>, parent_tid=[7756], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7756 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7755 [pid 7754] set_robust_list(0x555556b055e0, 24 [pid 7753] set_robust_list(0x555556b055e0, 24 [pid 7752] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./147/binderfs" [pid 7754] <... set_robust_list resumed>) = 0 [pid 7753] <... set_robust_list resumed>) = 0 [pid 7752] <... futex resumed>) = 0 [pid 7754] chdir("./147" [pid 7753] chdir("./148" [pid 7752] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... unlink resumed>) = 0 [pid 7754] <... chdir resumed>) = 0 [pid 7753] <... chdir resumed>) = 0 [pid 5080] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7753] prctl(PR_SET_PDEATHSIG, SIGKILL [ 118.195804][ T33] hfsplus: b-tree write err: -5, ino 4 [ 118.198655][ T7743] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7754] <... prctl resumed>) = 0 [pid 7753] <... prctl resumed>) = 0 [pid 7751] <... write resumed>) = 524288 [pid 7754] setpgid(0, 0 [pid 7753] setpgid(0, 0./strace-static-x86_64: Process 7755 attached [pid 7754] <... setpgid resumed>) = 0 [pid 7753] <... setpgid resumed>) = 0 [pid 7754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7755] set_robust_list(0x555556b055e0, 24./strace-static-x86_64: Process 7756 attached [pid 7751] munmap(0x7fee02dd3000, 524288 [pid 7755] <... set_robust_list resumed>) = 0 [pid 7751] <... munmap resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 7756] set_robust_list(0x7fee0b1f39e0, 24 [pid 7755] chdir("./148" [pid 7754] <... openat resumed>) = 3 [pid 7753] <... openat resumed>) = 3 [pid 7751] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7755] <... chdir resumed>) = 0 [pid 7754] write(3, "1000", 4 [pid 7753] write(3, "1000", 4 [pid 7751] <... openat resumed>) = 4 [pid 7755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7751] ioctl(4, LOOP_SET_FD, 3 [pid 7756] <... set_robust_list resumed>) = 0 [pid 7755] <... prctl resumed>) = 0 [pid 7754] <... write resumed>) = 4 [pid 7753] <... write resumed>) = 4 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7756] memfd_create("syzkaller", 0 [pid 7755] setpgid(0, 0 [pid 7754] close(3 [pid 7753] close(3 [pid 5080] lstat("./147/bus", [pid 7756] <... memfd_create resumed>) = 3 [pid 7755] <... setpgid resumed>) = 0 [pid 7754] <... close resumed>) = 0 [pid 7753] <... close resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7754] symlink("/dev/binderfs", "./binderfs" [pid 7753] symlink("/dev/binderfs", "./binderfs" [pid 5080] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7756] <... mmap resumed>) = 0x7fee02dd3000 [pid 7755] <... openat resumed>) = 3 [pid 7754] <... symlink resumed>) = 0 [pid 7753] <... symlink resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7755] write(3, "1000", 4) = 4 [pid 7755] close(3) = 0 [pid 7755] symlink("/dev/binderfs", "./binderfs" [pid 7756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7753] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7754] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7755] <... symlink resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7755] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] fstat(4, [pid 7755] <... futex resumed>) = 0 [pid 7754] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7753] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7754] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7753] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] getdents64(4, [pid 7755] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7754] <... mprotect resumed>) = 0 [pid 7753] <... mprotect resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7756] <... write resumed>) = 524288 [pid 7756] munmap(0x7fee02dd3000, 524288 [pid 7755] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7754] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7753] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] getdents64(4, [pid 7756] <... munmap resumed>) = 0 [pid 7755] <... mprotect resumed>) = 0 [pid 7751] <... ioctl resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7755] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7751] close(3) = 0 [pid 7755] <... clone resumed>, parent_tid=[7759], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7759 [pid 7751] mkdir("./bus", 0777 [pid 7755] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7751] <... mkdir resumed>) = 0 [pid 7756] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7755] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7754] <... clone resumed>, parent_tid=[7757], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7757 [pid 7753] <... clone resumed>, parent_tid=[7758], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7758 [pid 7751] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [ 118.242705][ T33] hfsplus: b-tree write err: -5, ino 4 [ 118.258039][ T7751] loop2: detected capacity change from 0 to 1024 [pid 5080] close(4./strace-static-x86_64: Process 7759 attached ./strace-static-x86_64: Process 7758 attached ./strace-static-x86_64: Process 7757 attached [pid 7756] <... openat resumed>) = 4 [pid 7754] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7759] set_robust_list(0x7fee0b1f39e0, 24 [pid 7758] set_robust_list(0x7fee0b1f39e0, 24 [pid 7757] set_robust_list(0x7fee0b1f39e0, 24 [pid 7756] ioctl(4, LOOP_SET_FD, 3 [pid 7754] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = 0 [pid 7751] <... mount resumed>) = 0 [pid 5080] rmdir("./147/bus" [pid 7759] <... set_robust_list resumed>) = 0 [pid 7758] <... set_robust_list resumed>) = 0 [pid 7757] <... set_robust_list resumed>) = 0 [pid 7751] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7751] chdir("./bus") = 0 [pid 7751] ioctl(4, LOOP_CLR_FD) = 0 [pid 7751] close(4 [pid 7759] memfd_create("syzkaller", 0 [pid 7758] memfd_create("syzkaller", 0 [pid 7757] memfd_create("syzkaller", 0 [pid 7756] <... ioctl resumed>) = 0 [pid 7754] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7753] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7751] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7759] <... memfd_create resumed>) = 3 [pid 7758] <... memfd_create resumed>) = 3 [pid 7757] <... memfd_create resumed>) = 3 [pid 7756] close(3 [pid 7751] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(3, [pid 7759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7756] <... close resumed>) = 0 [pid 7751] <... futex resumed>) = 1 [pid 7749] <... futex resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7759] <... mmap resumed>) = 0x7fee02dd3000 [pid 7758] <... mmap resumed>) = 0x7fee02dd3000 [pid 7757] <... mmap resumed>) = 0x7fee02dd3000 [pid 7756] mkdir("./bus", 0777 [pid 5080] close(3 [pid 7759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7751] creat("./bus", 000 [pid 7749] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... close resumed>) = 0 [pid 7756] <... mkdir resumed>) = 0 [pid 7751] <... creat resumed>) = 4 [pid 7749] <... futex resumed>) = 0 [pid 5080] rmdir("./147" [pid 7751] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7749] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7751] <... futex resumed>) = 0 [pid 7749] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... rmdir resumed>) = 0 [pid 7756] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7751] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7749] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./148", 0777 [pid 7751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7749] <... futex resumed>) = 0 [pid 7751] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7749] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... mkdir resumed>) = 0 [pid 7759] <... write resumed>) = 524288 [pid 7758] <... write resumed>) = 524288 [pid 7757] <... write resumed>) = 524288 [pid 7756] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7758] munmap(0x7fee02dd3000, 524288 [pid 7756] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 7758] <... munmap resumed>) = 0 [pid 7756] <... openat resumed>) = 3 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7758] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7757] munmap(0x7fee02dd3000, 524288 [pid 7756] chdir("./bus" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7758] <... openat resumed>) = 4 [pid 7757] <... munmap resumed>) = 0 [pid 7756] <... chdir resumed>) = 0 [pid 5080] close(3 [pid 7758] ioctl(4, LOOP_SET_FD, 3 [pid 7757] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7756] ioctl(4, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 7758] <... ioctl resumed>) = 0 [pid 7757] <... openat resumed>) = 4 [pid 7756] <... ioctl resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7758] close(3 [pid 7757] ioctl(4, LOOP_SET_FD, 3 [pid 7756] close(4./strace-static-x86_64: Process 7760 attached [pid 7759] munmap(0x7fee02dd3000, 524288 [pid 7758] <... close resumed>) = 0 [pid 7756] <... close resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7760 [ 118.294935][ T7756] loop5: detected capacity change from 0 to 1024 [ 118.319736][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.326945][ T7758] loop1: detected capacity change from 0 to 1024 [ 118.335155][ T7757] loop0: detected capacity change from 0 to 1024 [pid 7760] set_robust_list(0x555556b055e0, 24 [pid 7759] <... munmap resumed>) = 0 [pid 7758] mkdir("./bus", 0777 [pid 7756] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7758] <... mkdir resumed>) = 0 [pid 7756] <... futex resumed>) = 1 [pid 7752] <... futex resumed>) = 0 [pid 7759] <... openat resumed>) = 4 [pid 7758] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7756] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7752] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] ioctl(4, LOOP_SET_FD, 3 [pid 7756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7752] <... futex resumed>) = 0 [pid 7760] <... set_robust_list resumed>) = 0 [pid 7756] creat("./bus", 000 [pid 7752] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] chdir("./148" [pid 7756] <... creat resumed>) = 4 [pid 7760] <... chdir resumed>) = 0 [pid 7756] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7758] <... mount resumed>) = 0 [pid 7756] <... futex resumed>) = 1 [pid 7752] <... futex resumed>) = 0 [pid 7758] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7756] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7752] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... prctl resumed>) = 0 [pid 7758] <... openat resumed>) = 3 [pid 7756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7752] <... futex resumed>) = 0 [pid 7758] chdir("./bus" [pid 7756] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7752] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] setpgid(0, 0 [pid 7758] <... chdir resumed>) = 0 [pid 7760] <... setpgid resumed>) = 0 [pid 7758] ioctl(4, LOOP_CLR_FD) = 0 [pid 7760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7758] close(4) = 0 [pid 7758] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7758] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7753] <... futex resumed>) = 0 [pid 7758] creat("./bus", 000 [pid 7753] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7758] <... creat resumed>) = 4 [pid 7758] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7758] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7753] <... futex resumed>) = 0 [pid 7758] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7753] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7757] <... ioctl resumed>) = 0 [pid 7757] close(3) = 0 [pid 7757] mkdir("./bus", 0777) = 0 [pid 7757] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7759] <... ioctl resumed>) = 0 [pid 7759] close(3) = 0 [pid 7759] mkdir("./bus", 0777) = 0 [pid 7759] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7760] <... openat resumed>) = 3 [pid 7749] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7760] write(3, "1000", 4 [pid 7749] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... write resumed>) = 4 [pid 7749] <... futex resumed>) = 0 [ 118.341653][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.345167][ T7759] loop3: detected capacity change from 0 to 1024 [ 118.364148][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.370613][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.373720][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.379962][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7760] close(3 [pid 7749] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7760] <... close resumed>) = 0 [pid 7759] <... mount resumed>) = 0 [pid 7757] <... mount resumed>) = 0 [pid 7749] <... mmap resumed>) = 0x7fee02e32000 [pid 7759] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7757] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7759] <... openat resumed>) = 3 [pid 7757] <... openat resumed>) = 3 [pid 7760] symlink("/dev/binderfs", "./binderfs" [pid 7749] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7759] chdir("./bus" [pid 7757] chdir("./bus" [pid 7760] <... symlink resumed>) = 0 [pid 7759] <... chdir resumed>) = 0 [pid 7757] <... chdir resumed>) = 0 [pid 7759] ioctl(4, LOOP_CLR_FD [pid 7757] ioctl(4, LOOP_CLR_FD [pid 7760] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7749] <... mprotect resumed>) = 0 [pid 7759] <... ioctl resumed>) = 0 [pid 7757] <... ioctl resumed>) = 0 [pid 7759] close(4 [pid 7757] close(4 [pid 7759] <... close resumed>) = 0 [pid 7757] <... close resumed>) = 0 [pid 7759] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] <... futex resumed>) = 1 [pid 7757] <... futex resumed>) = 1 [pid 7755] <... futex resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7759] creat("./bus", 000 [pid 7757] creat("./bus", 000 [pid 7755] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... futex resumed>) = 0 [pid 7759] <... creat resumed>) = 4 [pid 7757] <... creat resumed>) = 4 [pid 7755] <... futex resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7749] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7759] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7755] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7754] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7759] <... futex resumed>) = 0 [pid 7757] <... futex resumed>) = 0 [pid 7755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7760] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7759] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7757] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7755] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7755] <... futex resumed>) = 0 [pid 7754] <... futex resumed>) = 0 [pid 7760] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7759] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7757] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7755] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7754] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7752] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7749] <... clone resumed>, parent_tid=[7761], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7761 ./strace-static-x86_64: Process 7761 attached [pid 7760] <... mprotect resumed>) = 0 [pid 7753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7752] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7752] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = 0 [pid 7752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7752] <... mmap resumed>) = 0x7fee02e32000 [pid 7753] <... mmap resumed>) = 0x7fee02e32000 [pid 7752] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7753] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7752] <... mprotect resumed>) = 0 [pid 7761] set_robust_list(0x7fee02e529e0, 24 [pid 7760] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7753] <... mprotect resumed>) = 0 [pid 7752] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7749] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7752] <... clone resumed>, parent_tid=[7762], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7762 [pid 7753] <... clone resumed>, parent_tid=[7763], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7763 [pid 7752] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7753] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7752] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = 0 [pid 7752] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 118.396375][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.414610][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.426850][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.433925][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7753] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7761] <... set_robust_list resumed>) = 0 [pid 7749] <... futex resumed>) = 0 [pid 7761] creat("./file1", 000 [pid 7760] <... clone resumed>, parent_tid=[7764], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7764 [pid 7749] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7762 attached [pid 7762] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7762] creat("./file1", 000 [pid 7760] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7760] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7764 attached ./strace-static-x86_64: Process 7763 attached [pid 7754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7754] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7764] set_robust_list(0x7fee0b1f39e0, 24 [pid 7763] set_robust_list(0x7fee02e529e0, 24 [pid 7754] <... mmap resumed>) = 0x7fee02e32000 [pid 7754] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7754] <... mprotect resumed>) = 0 [pid 7755] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7764] <... set_robust_list resumed>) = 0 [pid 7763] <... set_robust_list resumed>) = 0 [pid 7755] <... futex resumed>) = 0 [pid 7754] <... clone resumed>, parent_tid=[7765], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7765 [pid 7755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 118.437742][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.451334][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.451636][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.459234][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.476644][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.482460][ T7751] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7754] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7764] memfd_create("syzkaller", 0 [pid 7763] creat("./file1", 000 [pid 7755] <... mmap resumed>) = 0x7fee02e32000 [pid 7754] <... futex resumed>) = 0 [pid 7753] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7752] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7754] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7765 attached [pid 7765] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7765] creat("./file1", 000 [pid 7764] <... memfd_create resumed>) = 3 [pid 7755] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7749] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7755] <... mprotect resumed>) = 0 [pid 7764] <... mmap resumed>) = 0x7fee02dd3000 [pid 7755] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7761] <... creat resumed>) = 5 [pid 7755] <... clone resumed>, parent_tid=[7766], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7766 [pid 7755] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7761] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7755] <... futex resumed>) = 0 [pid 7765] <... creat resumed>) = 5 [pid 7765] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7761] <... futex resumed>) = 0 [pid 7755] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7765] <... futex resumed>) = 1 [pid 7754] <... futex resumed>) = 0 [pid 7765] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7761] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7764] <... write resumed>) = 524288 [pid 7751] <... write resumed>) = 57344 ./strace-static-x86_64: Process 7766 attached [pid 7764] munmap(0x7fee02dd3000, 524288 [pid 7751] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7764] <... munmap resumed>) = 0 [pid 7751] <... futex resumed>) = 0 [pid 7766] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7764] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7751] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7749] exit_group(0 [pid 7764] <... openat resumed>) = 4 [pid 7761] <... futex resumed>) = ? [pid 7749] <... exit_group resumed>) = ? [ 118.491558][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.502810][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.514692][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.516623][ T7756] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.523189][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.538407][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7761] +++ exited with 0 +++ [pid 7766] creat("./file1", 000 [pid 7764] ioctl(4, LOOP_SET_FD, 3 [pid 7751] <... futex resumed>) = ? [pid 7762] <... creat resumed>) = 5 [pid 7762] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7762] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7764] <... ioctl resumed>) = 0 [pid 7763] <... creat resumed>) = 5 [pid 7756] <... write resumed>) = 57344 [pid 7755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7751] +++ exited with 0 +++ [pid 7749] +++ exited with 0 +++ [pid 7764] close(3) = 0 [pid 7764] mkdir("./bus", 0777) = 0 [pid 7764] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7763] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7756] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7752] exit_group(0 [pid 7762] <... futex resumed>) = ? [pid 7752] <... exit_group resumed>) = ? [pid 7766] <... creat resumed>) = 5 [pid 7762] +++ exited with 0 +++ [pid 7766] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... futex resumed>) = 0 [pid 7756] <... futex resumed>) = ? [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7749, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 118.547476][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.555920][ T7764] loop4: detected capacity change from 0 to 1024 [ 118.556342][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.565867][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.578444][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.578805][ T7758] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7766] <... futex resumed>) = 0 [pid 7764] <... mount resumed>) = 0 [pid 7763] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7758] <... write resumed>) = 57344 [pid 7756] +++ exited with 0 +++ [pid 7752] +++ exited with 0 +++ [pid 5076] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7764] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7764] chdir("./bus") = 0 [pid 7764] ioctl(4, LOOP_CLR_FD) = 0 [pid 7764] close(4) = 0 [pid 7764] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7764] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7760] <... futex resumed>) = 0 [pid 7758] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7760] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] <... futex resumed>) = 0 [pid 7753] exit_group(0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7752, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5076] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7763] <... futex resumed>) = ? [pid 7760] <... futex resumed>) = 1 [pid 7753] <... exit_group resumed>) = ? [pid 5081] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 7763] +++ exited with 0 +++ [pid 7760] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7758] +++ exited with 0 +++ [pid 7753] +++ exited with 0 +++ [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(3, [pid 7764] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7764] creat("./bus", 000 [pid 5081] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7753, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7764] <... creat resumed>) = 4 [pid 7757] <... write resumed>) = 57344 [pid 7764] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7764] <... futex resumed>) = 1 [pid 7760] <... futex resumed>) = 0 [pid 7757] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... restart_syscall resumed>) = 0 [pid 7764] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7760] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7754] exit_group(0 [pid 5081] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7765] <... futex resumed>) = ? [pid 7764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7760] <... futex resumed>) = 0 [pid 7757] <... futex resumed>) = ? [pid 7754] <... exit_group resumed>) = ? [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] lstat("./148/binderfs", [pid 7765] +++ exited with 0 +++ [pid 7764] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7760] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7757] +++ exited with 0 +++ [pid 7754] +++ exited with 0 +++ [pid 5081] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./148/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7754, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5081] lstat("./149/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5081] unlink("./149/binderfs" [pid 5075] fstat(3, [pid 5081] <... unlink resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5075] lstat("./148/binderfs", [pid 5074] fstat(3, [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] unlink("./148/binderfs" [pid 5074] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./147/binderfs") = 0 [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7759] <... write resumed>) = 57344 [ 118.587281][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.594691][ T7757] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.606657][ T7759] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.626212][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.634595][ T33] hfsplus: b-tree write err: -5, ino 4 [ 118.640382][ T33] hfsplus: b-tree write err: -5, ino 4 [pid 7759] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7755] exit_group(0 [pid 7766] <... futex resumed>) = ? [pid 7755] <... exit_group resumed>) = ? [pid 7766] +++ exited with 0 +++ [pid 7759] <... futex resumed>) = ? [pid 7760] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7759] +++ exited with 0 +++ [pid 7755] +++ exited with 0 +++ [pid 7760] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7755, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7760] <... mmap resumed>) = 0x7fee02e32000 [pid 7760] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5077] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7760] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... openat resumed>) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7760] <... clone resumed>, parent_tid=[7767], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7767 [pid 7760] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./148/binderfs") = 0 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7767 attached [pid 7767] set_robust_list(0x7fee02e529e0, 24) = 0 [ 118.646176][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 118.646229][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.651944][ T52] hfsplus: b-tree write err: -5, ino 4 [ 118.659687][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.672892][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7767] creat("./file1", 000 [pid 7760] <... futex resumed>) = 0 [pid 7760] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = 0 [pid 5075] lstat("./148/bus", [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5076] lstat("./148/bus", [pid 5075] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] lstat("./149/bus", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] lstat("./147/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./147/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 4 [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./147/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./148/bus", [pid 5081] fstat(4, [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(4, [pid 5077] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] getdents64(4, [pid 5077] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] fstat(4, [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(4 [pid 7767] <... creat resumed>) = 5 [pid 5081] rmdir("./149/bus" [pid 5077] getdents64(4, [pid 5081] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./147/bus" [pid 7767] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7764] <... write resumed>) = 57344 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5081] close(3 [pid 7767] <... futex resumed>) = 1 [pid 7764] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] fstat(4, [pid 5074] getdents64(3, [pid 5081] rmdir("./149" [pid 7767] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7764] <... futex resumed>) = 0 [pid 7760] exit_group(0 [pid 5081] <... rmdir resumed>) = 0 [pid 5077] close(4 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7767] <... futex resumed>) = ? [pid 7760] <... exit_group resumed>) = ? [pid 5081] mkdir("./150", 0777 [pid 5077] <... close resumed>) = 0 [pid 5076] fstat(4, [pid 5075] getdents64(4, [pid 7767] +++ exited with 0 +++ [pid 7764] +++ exited with 0 +++ [pid 7760] +++ exited with 0 +++ [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7760, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] rmdir("./148/bus" [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] getdents64(4, [pid 5075] close(4 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] close(4 [pid 5075] rmdir("./148/bus" [pid 5080] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./147" [pid 5081] <... openat resumed>) = 3 [pid 5076] rmdir("./148/bus" [pid 5075] getdents64(3, [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5075] close(3 [pid 5080] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 5075] rmdir("./148" [pid 5080] <... openat resumed>) = 3 [pid 5077] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] mkdir("./148", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5076] rmdir("./148" [pid 5075] mkdir("./149", 0777 [pid 5080] fstat(3, [pid 5077] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] rmdir("./148" [pid 5076] mkdir("./149", 0777 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] getdents64(3, [pid 5077] <... rmdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] mkdir("./149", 0777 [ 118.704118][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 118.707636][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.718806][ T7764] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5080] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] close(3 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7768 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7769 ./strace-static-x86_64: Process 7769 attached [pid 7769] set_robust_list(0x555556b055e0, 24) = 0 [pid 7769] chdir("./149") = 0 [pid 7769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7769] setpgid(0, 0) = 0 [pid 7769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7769] write(3, "1000", 4) = 4 [pid 7769] close(3) = 0 ./strace-static-x86_64: Process 7768 attached [pid 7769] symlink("/dev/binderfs", "./binderfs" [pid 7768] set_robust_list(0x555556b055e0, 24 [pid 7769] <... symlink resumed>) = 0 [pid 7768] <... set_robust_list resumed>) = 0 [pid 7768] chdir("./149" [pid 7769] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7768] <... chdir resumed>) = 0 [pid 7769] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7768] setpgid(0, 0) = 0 [pid 7768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7769] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7768] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5080] lstat("./148/binderfs", [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] unlink("./148/binderfs" [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] close(3./strace-static-x86_64: Process 7770 attached [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7770 [pid 5080] <... unlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... close resumed>) = 0 [pid 5080] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7771 [pid 7769] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7768] write(3, "1000", 4) = 4 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7772 [pid 7769] <... clone resumed>, parent_tid=[7773], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7773 [pid 7768] close(3 [pid 7769] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7768] <... close resumed>) = 0 [pid 7769] <... futex resumed>) = 0 [pid 7768] symlink("/dev/binderfs", "./binderfs" [pid 7769] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7768] <... symlink resumed>) = 0 [pid 7768] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7768] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7768] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7774], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7774 [pid 7768] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7773 attached [pid 7773] set_robust_list(0x7fee0b1f39e0, 24) = 0 ./strace-static-x86_64: Process 7771 attached ./strace-static-x86_64: Process 7772 attached [pid 7770] set_robust_list(0x555556b055e0, 24 [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7770] <... set_robust_list resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7771] set_robust_list(0x555556b055e0, 24 [pid 5080] lstat("./148/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 7771] <... set_robust_list resumed>) = 0 [pid 7770] chdir("./150" [pid 7772] set_robust_list(0x555556b055e0, 24 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7773] memfd_create("syzkaller", 0 [pid 7770] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 7773] <... memfd_create resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7770] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] close(4 [pid 7773] <... mmap resumed>) = 0x7fee02dd3000 [pid 7770] <... prctl resumed>) = 0 [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7774 attached [pid 7772] <... set_robust_list resumed>) = 0 [pid 7771] chdir("./148" [pid 7770] setpgid(0, 0 [pid 5080] rmdir("./148/bus" [pid 7774] set_robust_list(0x7fee0b1f39e0, 24 [pid 7772] chdir("./149" [pid 7771] <... chdir resumed>) = 0 [pid 7770] <... setpgid resumed>) = 0 [pid 7774] <... set_robust_list resumed>) = 0 [pid 7773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7772] <... chdir resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7774] memfd_create("syzkaller", 0 [pid 7772] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] getdents64(3, [pid 7774] <... memfd_create resumed>) = 3 [pid 7773] <... write resumed>) = 524288 [pid 7772] <... prctl resumed>) = 0 [pid 7771] <... prctl resumed>) = 0 [pid 7770] <... openat resumed>) = 3 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7773] munmap(0x7fee02dd3000, 524288 [pid 5080] close(3 [pid 7774] <... mmap resumed>) = 0x7fee02dd3000 [pid 7773] <... munmap resumed>) = 0 [pid 7772] setpgid(0, 0 [pid 7771] setpgid(0, 0 [pid 7770] write(3, "1000", 4 [pid 5080] <... close resumed>) = 0 [pid 7773] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7772] <... setpgid resumed>) = 0 [pid 7771] <... setpgid resumed>) = 0 [pid 7770] <... write resumed>) = 4 [pid 5080] rmdir("./148" [pid 7774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7773] <... openat resumed>) = 4 [pid 7772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7770] close(3 [ 118.793615][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7773] ioctl(4, LOOP_SET_FD, 3 [pid 7772] <... openat resumed>) = 3 [pid 7771] <... openat resumed>) = 3 [pid 7770] <... close resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7774] <... write resumed>) = 524288 [pid 7772] write(3, "1000", 4 [pid 7771] write(3, "1000", 4 [pid 7770] symlink("/dev/binderfs", "./binderfs" [pid 7774] munmap(0x7fee02dd3000, 524288 [pid 7772] <... write resumed>) = 4 [pid 7771] <... write resumed>) = 4 [pid 7770] <... symlink resumed>) = 0 [pid 7774] <... munmap resumed>) = 0 [pid 7772] close(3 [pid 7771] close(3 [pid 7770] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7774] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7772] <... close resumed>) = 0 [pid 7771] <... close resumed>) = 0 [pid 7770] <... futex resumed>) = 0 [pid 7774] <... openat resumed>) = 4 [pid 7772] symlink("/dev/binderfs", "./binderfs" [pid 7771] symlink("/dev/binderfs", "./binderfs" [pid 7770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7774] ioctl(4, LOOP_SET_FD, 3 [pid 7772] <... symlink resumed>) = 0 [pid 7771] <... symlink resumed>) = 0 [pid 7770] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7773] <... ioctl resumed>) = 0 [pid 7772] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] mkdir("./149", 0777 [pid 7773] close(3 [pid 5080] <... mkdir resumed>) = 0 [pid 7773] <... close resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7773] mkdir("./bus", 0777 [pid 5080] <... openat resumed>) = 3 [pid 7773] <... mkdir resumed>) = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7773] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7774] <... ioctl resumed>) = 0 [pid 7772] <... futex resumed>) = 0 [pid 7771] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7770] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7774] close(3 [pid 7772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7771] <... futex resumed>) = 0 [pid 7770] <... mprotect resumed>) = 0 [pid 5080] close(3 [pid 7774] <... close resumed>) = 0 [pid 7772] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7770] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7774] mkdir("./bus", 0777 [pid 7772] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7771] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] <... close resumed>) = 0 [pid 7774] <... mkdir resumed>) = 0 [pid 7772] <... mprotect resumed>) = 0 [pid 7771] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7770] <... clone resumed>, parent_tid=[7775], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7775 [pid 7774] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7772] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7771] <... mprotect resumed>) = 0 [pid 7770] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7771] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7770] <... futex resumed>) = 0 [pid 7772] <... clone resumed>, parent_tid=[7776], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7776 [pid 7770] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7774] <... mount resumed>) = 0 [pid 7772] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7771] <... clone resumed>, parent_tid=[7777], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7777 [pid 7774] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7772] <... futex resumed>) = 0 [pid 7771] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7774] <... openat resumed>) = 3 [pid 7772] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7771] <... futex resumed>) = 0 [pid 7774] chdir("./bus" [pid 7771] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7774] <... chdir resumed>) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7778 [pid 7774] ioctl(4, LOOP_CLR_FD) = 0 [pid 7774] close(4) = 0 [pid 7774] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7768] <... futex resumed>) = 0 [pid 7768] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7776 attached [pid 7774] creat("./bus", 000 [pid 7776] set_robust_list(0x7fee0b1f39e0, 24 [pid 7774] <... creat resumed>) = 4 [pid 7776] <... set_robust_list resumed>) = 0 [pid 7774] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7775 attached [pid 7776] memfd_create("syzkaller", 0 [pid 7774] <... futex resumed>) = 1 [pid 7768] <... futex resumed>) = 0 [pid 7776] <... memfd_create resumed>) = 3 [pid 7775] set_robust_list(0x7fee0b1f39e0, 24 [pid 7774] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7775] <... set_robust_list resumed>) = 0 [pid 7774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7768] <... futex resumed>) = 0 [pid 7776] <... mmap resumed>) = 0x7fee02dd3000 [pid 7775] memfd_create("syzkaller", 0 [pid 7774] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7768] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7778 attached ./strace-static-x86_64: Process 7777 attached [pid 7773] <... mount resumed>) = 0 [pid 7778] set_robust_list(0x555556b055e0, 24 [pid 7777] set_robust_list(0x7fee0b1f39e0, 24 [pid 7773] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7778] <... set_robust_list resumed>) = 0 [pid 7777] <... set_robust_list resumed>) = 0 [pid 7773] <... openat resumed>) = 3 [pid 7778] chdir("./149" [pid 7777] memfd_create("syzkaller", 0 [pid 7773] chdir("./bus" [pid 7778] <... chdir resumed>) = 0 [pid 7777] <... memfd_create resumed>) = 3 [pid 7775] <... memfd_create resumed>) = 3 [pid 7773] <... chdir resumed>) = 0 [pid 7778] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7773] ioctl(4, LOOP_CLR_FD [pid 7778] <... prctl resumed>) = 0 [pid 7777] <... mmap resumed>) = 0x7fee02dd3000 [ 118.837983][ T7773] loop2: detected capacity change from 0 to 1024 [ 118.841554][ T7774] loop1: detected capacity change from 0 to 1024 [ 118.867562][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7773] <... ioctl resumed>) = 0 [pid 7778] setpgid(0, 0 [pid 7777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7773] close(4 [pid 7778] <... setpgid resumed>) = 0 [pid 7777] <... write resumed>) = 524288 [pid 7775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7773] <... close resumed>) = 0 [pid 7778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7777] munmap(0x7fee02dd3000, 524288 [pid 7776] <... write resumed>) = 524288 [pid 7773] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... openat resumed>) = 3 [pid 7777] <... munmap resumed>) = 0 [pid 7773] <... futex resumed>) = 1 [pid 7769] <... futex resumed>) = 0 [pid 7778] write(3, "1000", 4 [pid 7777] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7773] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7769] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... write resumed>) = 4 [pid 7777] <... openat resumed>) = 4 [pid 7773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7769] <... futex resumed>) = 0 [pid 7778] close(3 [pid 7777] ioctl(4, LOOP_SET_FD, 3 [pid 7773] creat("./bus", 000 [pid 7769] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7778] <... close resumed>) = 0 [pid 7776] munmap(0x7fee02dd3000, 524288 [pid 7775] <... mmap resumed>) = 0x7fee02dd3000 [pid 7773] <... creat resumed>) = 4 [pid 7778] symlink("/dev/binderfs", "./binderfs" [pid 7773] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... symlink resumed>) = 0 [pid 7773] <... futex resumed>) = 1 [pid 7769] <... futex resumed>) = 0 [pid 7778] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7773] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7769] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... futex resumed>) = 0 [pid 7773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7769] <... futex resumed>) = 0 [pid 7778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7773] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7769] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7778] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7776] <... munmap resumed>) = 0 [pid 7778] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7778] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7779], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7779 [pid 7778] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7778] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7777] <... ioctl resumed>) = 0 [pid 7777] close(3) = 0 [pid 7775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7776] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7777] mkdir("./bus", 0777 [pid 7768] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 118.884165][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.902049][ T7777] loop0: detected capacity change from 0 to 1024 [ 118.903670][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.916206][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.930299][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7777] <... mkdir resumed>) = 0 [pid 7776] <... openat resumed>) = 4 [pid 7768] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7768] <... futex resumed>) = 0 [pid 7776] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7779 attached [pid 7779] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7779] memfd_create("syzkaller", 0) = 3 [pid 7779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7768] <... mmap resumed>) = 0x7fee02e32000 [pid 7768] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7777] <... mount resumed>) = 0 [pid 7768] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7777] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7779] <... write resumed>) = 524288 [pid 7777] <... openat resumed>) = 3 [pid 7777] chdir("./bus") = 0 [pid 7777] ioctl(4, LOOP_CLR_FD) = 0 [pid 7777] close(4) = 0 [pid 7777] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7771] <... futex resumed>) = 0 [pid 7777] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7771] <... futex resumed>) = 0 [pid 7777] creat("./bus", 000 [pid 7771] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7777] <... creat resumed>) = 4 [pid 7777] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7771] <... futex resumed>) = 0 [pid 7779] munmap(0x7fee02dd3000, 524288 [pid 7777] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7771] <... futex resumed>) = 0 [pid 7768] <... clone resumed>, parent_tid=[7780], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7780 [pid 7777] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7771] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7768] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7779] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7780 attached [pid 7779] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7776] <... ioctl resumed>) = 0 [pid 7775] <... write resumed>) = 524288 [pid 7768] <... futex resumed>) = 0 [pid 7780] set_robust_list(0x7fee02e529e0, 24 [pid 7779] <... openat resumed>) = 4 [pid 7776] close(3 [pid 7775] munmap(0x7fee02dd3000, 524288 [pid 7768] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7780] <... set_robust_list resumed>) = 0 [pid 7779] ioctl(4, LOOP_SET_FD, 3 [pid 7776] <... close resumed>) = 0 [pid 7780] creat("./file1", 000 [pid 7775] <... munmap resumed>) = 0 [pid 7769] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7769] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7769] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7769] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7769] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7781], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7781 [pid 7769] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7769] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7781 attached [pid 7781] set_robust_list(0x7fee02e529e0, 24) = 0 [ 118.937772][ T7776] loop3: detected capacity change from 0 to 1024 [ 118.957111][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.960144][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.973593][ T7779] loop4: detected capacity change from 0 to 1024 [ 118.974206][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7781] creat("./file1", 000 [pid 7776] mkdir("./bus", 0777 [pid 7780] <... creat resumed>) = 5 [pid 7775] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7780] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7776] <... mkdir resumed>) = 0 [pid 7775] <... openat resumed>) = 4 [pid 7780] <... futex resumed>) = 1 [pid 7776] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7775] ioctl(4, LOOP_SET_FD, 3 [pid 7768] <... futex resumed>) = 0 [pid 7771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7771] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7771] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7779] <... ioctl resumed>) = 0 [pid 7771] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7779] close(3) = 0 [pid 7771] <... clone resumed>, parent_tid=[7782], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7782 [pid 7779] mkdir("./bus", 0777 [pid 7771] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7779] <... mkdir resumed>) = 0 [pid 7771] <... futex resumed>) = 0 [pid 7779] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7771] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7780] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7779] <... mount resumed>) = 0 [pid 7779] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7779] chdir("./bus") = 0 [pid 7779] ioctl(4, LOOP_CLR_FD) = 0 [ 118.987939][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.993776][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [ 118.996041][ T7774] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.003892][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.010303][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.025297][ T7775] loop5: detected capacity change from 0 to 1024 [pid 7779] close(4./strace-static-x86_64: Process 7782 attached [pid 7781] <... creat resumed>) = 5 [pid 7779] <... close resumed>) = 0 [pid 7776] <... mount resumed>) = 0 [pid 7775] <... ioctl resumed>) = 0 [pid 7774] <... write resumed>) = 57344 [pid 7769] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7781] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7779] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = 0 [pid 7779] <... futex resumed>) = 1 [pid 7778] <... futex resumed>) = 0 [pid 7781] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7779] creat("./bus", 000 [pid 7778] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7779] <... creat resumed>) = 4 [pid 7778] <... futex resumed>) = 0 [pid 7779] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7779] <... futex resumed>) = 0 [pid 7778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7779] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7778] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7778] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7782] set_robust_list(0x7fee02e529e0, 24 [pid 7776] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7775] close(3 [pid 7774] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7773] <... write resumed>) = 57344 [pid 7782] <... set_robust_list resumed>) = 0 [pid 7776] <... openat resumed>) = 3 [pid 7775] <... close resumed>) = 0 [pid 7774] <... futex resumed>) = 0 [pid 7782] creat("./file1", 000 [pid 7776] chdir("./bus" [pid 7775] mkdir("./bus", 0777 [pid 7774] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] exit_group(0 [pid 7780] <... futex resumed>) = ? [pid 7776] <... chdir resumed>) = 0 [pid 7775] <... mkdir resumed>) = 0 [pid 7774] <... futex resumed>) = ? [pid 7768] <... exit_group resumed>) = ? [pid 7780] +++ exited with 0 +++ [pid 7776] ioctl(4, LOOP_CLR_FD [pid 7775] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7774] +++ exited with 0 +++ [pid 7768] +++ exited with 0 +++ [pid 7782] <... creat resumed>) = 5 [pid 7776] <... ioctl resumed>) = 0 [pid 7775] <... mount resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7768, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7776] close(4 [pid 7775] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7776] <... close resumed>) = 0 [pid 7775] <... openat resumed>) = 3 [pid 7776] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] chdir("./bus" [pid 5075] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7776] <... futex resumed>) = 1 [pid 7775] <... chdir resumed>) = 0 [pid 7772] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7776] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7775] ioctl(4, LOOP_CLR_FD [pid 7772] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7775] <... ioctl resumed>) = 0 [pid 7772] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7782] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7776] creat("./bus", 000 [pid 7775] close(4 [pid 7772] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] fstat(3, [pid 7782] <... futex resumed>) = 1 [pid 7776] <... creat resumed>) = 4 [pid 7775] <... close resumed>) = 0 [pid 7771] <... futex resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7782] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7776] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 7776] <... futex resumed>) = 1 [pid 7775] <... futex resumed>) = 1 [pid 7772] <... futex resumed>) = 0 [pid 7770] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7776] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7775] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7773] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7772] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7770] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7773] <... futex resumed>) = 0 [pid 7772] <... futex resumed>) = 0 [pid 7770] <... futex resumed>) = 0 [ 119.035647][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.042930][ T7773] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.049040][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.059731][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7776] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7775] creat("./bus", 000 [pid 7773] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7772] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7770] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7769] exit_group(0 [pid 5075] lstat("./149/binderfs", [pid 7781] <... futex resumed>) = ? [pid 7775] <... creat resumed>) = 4 [pid 7773] <... futex resumed>) = ? [pid 7769] <... exit_group resumed>) = ? [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7781] +++ exited with 0 +++ [pid 7775] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7773] +++ exited with 0 +++ [pid 7769] +++ exited with 0 +++ [pid 5075] unlink("./149/binderfs" [pid 7775] <... futex resumed>) = 1 [pid 7770] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7775] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7770] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7769, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7770] <... futex resumed>) = 0 [pid 5076] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7775] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7770] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 7778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./149/binderfs") = 0 [ 119.082710][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.095332][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.101697][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.110016][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.110144][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.122487][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.124969][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7778] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7772] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7772] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7772] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7772] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7783], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7783 [pid 7772] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7770] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7772] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7770] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7778] <... futex resumed>) = 0 [pid 7770] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7770] <... mprotect resumed>) = 0 [pid 7770] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7784], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7784 [pid 7770] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7770] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7783 attached ./strace-static-x86_64: Process 7784 attached [pid 7783] set_robust_list(0x7fee02e529e0, 24 [pid 7784] set_robust_list(0x7fee02e529e0, 24 [pid 7783] <... set_robust_list resumed>) = 0 [pid 7784] <... set_robust_list resumed>) = 0 [pid 7783] creat("./file1", 000 [pid 7784] creat("./file1", 000 [pid 7783] <... creat resumed>) = 5 [pid 7783] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7778] <... mmap resumed>) = 0x7fee02e32000 [pid 7772] <... futex resumed>) = 0 [pid 7783] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7778] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7778] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7785], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7785 [pid 7778] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7778] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7785 attached [pid 7785] set_robust_list(0x7fee02e529e0, 24) = 0 [ 119.132886][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.137957][ T11] hfsplus: b-tree write err: -5, ino 4 [ 119.152207][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.163608][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.167115][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.181519][ T7777] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7785] creat("./file1", 000 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./149/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7770] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7770] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... openat resumed>) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./149/bus" [pid 7784] <... creat resumed>) = 5 [pid 7778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... rmdir resumed>) = 0 [pid 7784] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 7784] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7784] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] close(3) = 0 [pid 5076] rmdir("./149") = 0 [pid 5076] mkdir("./150", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./149/bus", [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7786 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7786 attached [pid 5075] getdents64(4, [pid 7786] set_robust_list(0x555556b055e0, 24 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7786] <... set_robust_list resumed>) = 0 [pid 5075] close(4 [pid 7786] chdir("./150" [pid 5075] <... close resumed>) = 0 [pid 7786] <... chdir resumed>) = 0 [pid 5075] rmdir("./149/bus" [pid 7786] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... rmdir resumed>) = 0 [pid 7786] <... prctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7786] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7786] <... setpgid resumed>) = 0 [pid 7777] <... write resumed>) = 57344 [pid 5075] close(3 [pid 7786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7777] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 7786] <... openat resumed>) = 3 [pid 7776] <... write resumed>) = 57344 [ 119.182559][ T7776] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.212511][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] rmdir("./149" [pid 7786] write(3, "1000", 4 [pid 7777] <... futex resumed>) = 0 [pid 7776] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... rmdir resumed>) = 0 [pid 7786] <... write resumed>) = 4 [pid 7776] <... futex resumed>) = 0 [pid 7772] exit_group(0 [pid 5075] mkdir("./150", 0777 [pid 7786] close(3 [pid 7783] <... futex resumed>) = ? [pid 7772] <... exit_group resumed>) = ? [pid 5075] <... mkdir resumed>) = 0 [pid 7786] <... close resumed>) = 0 [pid 7783] +++ exited with 0 +++ [pid 7776] +++ exited with 0 +++ [pid 7772] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7786] symlink("/dev/binderfs", "./binderfs" [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7772, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 7786] <... symlink resumed>) = 0 [pid 7777] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] exit_group(0 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7786] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] <... futex resumed>) = ? [pid 7777] <... futex resumed>) = ? [pid 7771] <... exit_group resumed>) = ? [pid 5077] <... restart_syscall resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7786] <... futex resumed>) = 0 [pid 7782] +++ exited with 0 +++ [pid 5075] close(3 [pid 7786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7777] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 7786] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7786] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7771] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7786] <... mprotect resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7787 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7771, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7786] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7785] <... creat resumed>) = 5 [pid 5077] <... openat resumed>) = 3 [pid 7785] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] fstat(3, [pid 7786] <... clone resumed>, parent_tid=[7788], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7788 [pid 7785] <... futex resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7786] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7787 attached [pid 7786] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7787] set_robust_list(0x555556b055e0, 24 [pid 7786] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7787] <... set_robust_list resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] fstat(3, [pid 7787] chdir("./150" [pid 5077] lstat("./149/binderfs", [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7788 attached [pid 7787] <... chdir resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] getdents64(3, [pid 7788] set_robust_list(0x7fee0b1f39e0, 24 [pid 7787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] unlink("./149/binderfs" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7788] <... set_robust_list resumed>) = 0 [pid 7787] <... prctl resumed>) = 0 [pid 7785] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... unlink resumed>) = 0 [pid 5074] umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7788] memfd_create("syzkaller", 0 [pid 7787] setpgid(0, 0 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7788] <... memfd_create resumed>) = 3 [pid 7787] <... setpgid resumed>) = 0 [pid 5074] lstat("./148/binderfs", [pid 7788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7788] <... mmap resumed>) = 0x7fee02dd3000 [pid 7787] <... openat resumed>) = 3 [pid 5074] unlink("./148/binderfs" [pid 7788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7787] write(3, "1000", 4 [pid 5074] <... unlink resumed>) = 0 [pid 7787] <... write resumed>) = 4 [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7787] close(3) = 0 [ 119.243835][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.264107][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.274959][ T52] hfsplus: b-tree write err: -5, ino 4 [ 119.285197][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7787] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7787] <... symlink resumed>) = 0 [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7787] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7787] <... futex resumed>) = 0 [pid 5074] lstat("./148/bus", [pid 7787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7788] <... write resumed>) = 524288 [pid 7787] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./148/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7787] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7788] munmap(0x7fee02dd3000, 524288 [pid 7787] <... mprotect resumed>) = 0 [pid 5077] lstat("./149/bus", [pid 5074] openat(AT_FDCWD, "./148/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7788] <... munmap resumed>) = 0 [pid 7787] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5077] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] fstat(4, [pid 7788] <... openat resumed>) = 4 [pid 7787] <... clone resumed>, parent_tid=[7789], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7789 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7788] ioctl(4, LOOP_SET_FD, 3 [pid 7787] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 7787] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7787] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./148/bus") = 0 ./strace-static-x86_64: Process 7789 attached [pid 5074] getdents64(3, [pid 7789] set_robust_list(0x7fee0b1f39e0, 24 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7789] <... set_robust_list resumed>) = 0 [pid 5074] close(3 [pid 7789] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 7789] <... memfd_create resumed>) = 3 [pid 5074] rmdir("./148" [pid 7789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7789] <... mmap resumed>) = 0x7fee02dd3000 [pid 5077] <... openat resumed>) = 4 [pid 5074] mkdir("./149", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3 [pid 7789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7790 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7788] <... ioctl resumed>) = 0 [pid 5077] getdents64(4, [pid 7788] close(3 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7788] <... close resumed>) = 0 [pid 5077] getdents64(4, [pid 7788] mkdir("./bus", 0777 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7790 attached [pid 7788] <... mkdir resumed>) = 0 [pid 5077] close(4 [pid 7790] set_robust_list(0x555556b055e0, 24 [pid 7789] <... write resumed>) = 524288 [pid 7788] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5077] <... close resumed>) = 0 [pid 7790] <... set_robust_list resumed>) = 0 [ 119.292406][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.316501][ T7788] loop2: detected capacity change from 0 to 1024 [ 119.323361][ T7779] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.333175][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7789] munmap(0x7fee02dd3000, 524288 [pid 5077] rmdir("./149/bus" [pid 7790] chdir("./149" [pid 7789] <... munmap resumed>) = 0 [pid 7779] <... write resumed>) = 57344 [pid 7790] <... chdir resumed>) = 0 [pid 7789] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7789] <... openat resumed>) = 4 [pid 7790] <... prctl resumed>) = 0 [pid 7789] ioctl(4, LOOP_SET_FD, 3 [pid 7790] setpgid(0, 0 [pid 7779] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7775] <... write resumed>) = 57344 [pid 5077] <... rmdir resumed>) = 0 [pid 7779] <... futex resumed>) = 0 [pid 7775] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] getdents64(3, [pid 7779] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7775] <... futex resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7775] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] close(3) = 0 [pid 7778] exit_group(0 [pid 5077] rmdir("./149" [pid 7785] <... futex resumed>) = ? [pid 7779] <... futex resumed>) = ? [pid 7778] <... exit_group resumed>) = ? [pid 5077] <... rmdir resumed>) = 0 [pid 7785] +++ exited with 0 +++ [pid 7779] +++ exited with 0 +++ [pid 7778] +++ exited with 0 +++ [pid 5077] mkdir("./150", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 7790] <... setpgid resumed>) = 0 [pid 7789] <... ioctl resumed>) = 0 [pid 7788] <... mount resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7789] close(3 [pid 7788] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7778, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7790] <... openat resumed>) = 3 [pid 7789] <... close resumed>) = 0 [pid 7788] <... openat resumed>) = 3 [pid 7770] exit_group(0 [pid 7790] write(3, "1000", 4 [pid 7789] mkdir("./bus", 0777 [pid 7788] chdir("./bus" [pid 7784] <... futex resumed>) = ? [pid 7770] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7791 attached [pid 7790] <... write resumed>) = 4 [pid 7789] <... mkdir resumed>) = 0 [pid 7788] <... chdir resumed>) = 0 [pid 7784] +++ exited with 0 +++ [pid 7775] <... futex resumed>) = ? [pid 5080] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7791] set_robust_list(0x555556b055e0, 24 [pid 7790] close(3 [pid 7789] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7788] ioctl(4, LOOP_CLR_FD [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7791 [pid 7791] <... set_robust_list resumed>) = 0 [pid 7790] <... close resumed>) = 0 [pid 7788] <... ioctl resumed>) = 0 [pid 7775] +++ exited with 0 +++ [pid 7770] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7789] <... mount resumed>) = 0 [pid 7791] chdir("./150" [pid 7790] symlink("/dev/binderfs", "./binderfs" [pid 7789] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7788] close(4 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7770, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5080] <... openat resumed>) = 3 [pid 7791] <... chdir resumed>) = 0 [pid 7790] <... symlink resumed>) = 0 [pid 7789] <... openat resumed>) = 3 [pid 7788] <... close resumed>) = 0 [pid 5080] fstat(3, [pid 7791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7790] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] chdir("./bus" [pid 7788] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7791] <... prctl resumed>) = 0 [pid 7790] <... futex resumed>) = 0 [pid 7789] <... chdir resumed>) = 0 [pid 7788] <... futex resumed>) = 1 [pid 7786] <... futex resumed>) = 0 [pid 5080] getdents64(3, [pid 7791] setpgid(0, 0 [pid 7790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7789] ioctl(4, LOOP_CLR_FD [pid 7788] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7786] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7791] <... setpgid resumed>) = 0 [pid 7790] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7789] <... ioctl resumed>) = 0 [pid 7788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7786] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7790] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7789] close(4 [pid 7788] creat("./bus", 000 [pid 7786] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7791] <... openat resumed>) = 3 [pid 7790] <... mprotect resumed>) = 0 [pid 7789] <... close resumed>) = 0 [pid 7788] <... creat resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5080] lstat("./149/binderfs", [pid 7791] write(3, "1000", 4 [pid 7790] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7789] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(3, [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7791] <... write resumed>) = 4 [pid 7789] <... futex resumed>) = 1 [pid 7788] <... futex resumed>) = 1 [pid 7787] <... futex resumed>) = 0 [pid 7786] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] unlink("./149/binderfs" [pid 7791] close(3 [pid 7790] <... clone resumed>, parent_tid=[7792], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7792 [pid 7789] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7788] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7787] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7786] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5080] <... unlink resumed>) = 0 [pid 7791] <... close resumed>) = 0 [pid 7790] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7787] <... futex resumed>) = 0 [pid 7786] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7791] symlink("/dev/binderfs", "./binderfs" [pid 7790] <... futex resumed>) = 0 [pid 7789] creat("./bus", 000 [pid 7788] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7787] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7786] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7791] <... symlink resumed>) = 0 [pid 7790] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7789] <... creat resumed>) = 4 [pid 7791] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7791] <... futex resumed>) = 0 [pid 7789] <... futex resumed>) = 1 [pid 7787] <... futex resumed>) = 0 [pid 7791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7789] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7787] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7791] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7789] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7787] <... futex resumed>) = 0 [pid 7791] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7789] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7787] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7791] <... mprotect resumed>) = 0 [pid 7791] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7793], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7793 [pid 7791] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7791] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7793 attached [pid 7793] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7793] memfd_create("syzkaller", 0) = 3 [pid 7793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 119.352616][ T7775] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.355842][ T7789] loop1: detected capacity change from 0 to 1024 [ 119.391082][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5081] lstat("./150/binderfs", [pid 5080] <... umount2 resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./150/binderfs") = 0 [pid 5081] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7792 attached [pid 5080] lstat("./149/bus", [pid 7786] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7786] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7792] set_robust_list(0x7fee0b1f39e0, 24 [pid 7786] <... futex resumed>) = 0 [pid 5080] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7792] <... set_robust_list resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7786] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7787] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7786] <... mprotect resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7787] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7786] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7787] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 7792] memfd_create("syzkaller", 0 [pid 7787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] fstat(4, [pid 7792] <... memfd_create resumed>) = 3 [pid 7787] <... mmap resumed>) = 0x7fee02e32000 [pid 7786] <... clone resumed>, parent_tid=[7794], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7794 [pid 7787] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7786] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7787] <... mprotect resumed>) = 0 [pid 7786] <... futex resumed>) = 0 [pid 5080] getdents64(4, [pid 7787] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7786] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7792] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] getdents64(4, [pid 7787] <... clone resumed>, parent_tid=[7795], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7795 [pid 7787] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7787] <... futex resumed>) = 0 [pid 5080] close(4 [pid 7787] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./149/bus" [pid 7793] <... write resumed>) = 524288 [pid 5080] <... rmdir resumed>) = 0 [pid 7793] munmap(0x7fee02dd3000, 524288 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [pid 5080] rmdir("./149" [pid 7793] <... munmap resumed>) = 0 [pid 5080] <... rmdir resumed>) = 0 [pid 7793] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5080] mkdir("./150", 0777 [ 119.398995][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.407717][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.421464][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.425517][ T11] hfsplus: b-tree write err: -5, ino 4 [ 119.429536][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7793] ioctl(4, LOOP_SET_FD, 3 [pid 7792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7795 attached [pid 7795] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7795] creat("./file1", 000 [pid 5081] lstat("./150/bus", [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] close(3./strace-static-x86_64: Process 7794 attached [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... close resumed>) = 0 [pid 7794] set_robust_list(0x7fee02e529e0, 24 [pid 5081] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7794] <... set_robust_list resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7794] creat("./file1", 000 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7796 [pid 5081] getdents64(4, [pid 7794] <... creat resumed>) = 5 [pid 7794] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7794] <... futex resumed>) = 1 [pid 7786] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 7794] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./150/bus" [pid 7792] <... write resumed>) = 524288 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 7793] <... ioctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 7793] close(3 [pid 5081] rmdir("./150" [pid 7793] <... close resumed>) = 0 [pid 7793] mkdir("./bus", 0777 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./151", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7793] <... mkdir resumed>) = 0 [pid 7793] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7797 [pid 7795] <... creat resumed>) = 5 [pid 7795] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7787] <... futex resumed>) = 0 [pid 7795] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7792] munmap(0x7fee02dd3000, 524288./strace-static-x86_64: Process 7796 attached [pid 7793] <... mount resumed>) = 0 [pid 7793] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7792] <... munmap resumed>) = 0 [pid 7796] set_robust_list(0x555556b055e0, 24 [pid 7793] <... openat resumed>) = 3 [pid 7793] chdir("./bus") = 0 [pid 7793] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 7797 attached [pid 7796] <... set_robust_list resumed>) = 0 [pid 7793] <... ioctl resumed>) = 0 [pid 7792] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7793] close(4 [pid 7792] <... openat resumed>) = 4 [pid 7796] chdir("./150" [pid 7797] set_robust_list(0x555556b055e0, 24 [pid 7793] <... close resumed>) = 0 [pid 7792] ioctl(4, LOOP_SET_FD, 3 [pid 7796] <... chdir resumed>) = 0 [pid 7793] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7791] <... futex resumed>) = 0 [pid 7793] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7791] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7791] <... futex resumed>) = 0 [pid 7796] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7793] creat("./bus", 000 [pid 7791] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7793] <... creat resumed>) = 4 [pid 7793] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7791] <... futex resumed>) = 0 [pid 7793] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7791] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7791] <... futex resumed>) = 0 [ 119.452375][ T7793] loop3: detected capacity change from 0 to 1024 [ 119.465111][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.484451][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.494234][ T7792] loop0: detected capacity change from 0 to 1024 [pid 7793] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7791] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7797] <... set_robust_list resumed>) = 0 [pid 7796] <... prctl resumed>) = 0 [pid 7796] setpgid(0, 0 [pid 7797] chdir("./151" [pid 7796] <... setpgid resumed>) = 0 [pid 7797] <... chdir resumed>) = 0 [pid 7796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7792] <... ioctl resumed>) = 0 [pid 7797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7796] <... openat resumed>) = 3 [pid 7792] close(3 [pid 7797] <... prctl resumed>) = 0 [pid 7796] write(3, "1000", 4 [pid 7792] <... close resumed>) = 0 [pid 7796] <... write resumed>) = 4 [pid 7792] mkdir("./bus", 0777 [pid 7797] setpgid(0, 0 [pid 7792] <... mkdir resumed>) = 0 [pid 7797] <... setpgid resumed>) = 0 [pid 7796] close(3) = 0 [pid 7797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7796] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7797] <... openat resumed>) = 3 [pid 7796] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7792] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7797] write(3, "1000", 4 [pid 7796] <... futex resumed>) = 0 [pid 7796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7797] <... write resumed>) = 4 [pid 7796] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7797] close(3 [pid 7796] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7797] <... close resumed>) = 0 [pid 7796] <... mprotect resumed>) = 0 [pid 7797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7797] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7797] <... futex resumed>) = 0 [pid 7797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7797] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7796] <... clone resumed>, parent_tid=[7798], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7798 [pid 7797] <... mprotect resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7797] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7796] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7797] <... clone resumed>, parent_tid=[7799], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7799 [pid 7797] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7792] <... mount resumed>) = 0 [pid 7797] <... futex resumed>) = 0 [pid 7792] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7797] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7792] <... openat resumed>) = 3 [pid 7792] chdir("./bus"./strace-static-x86_64: Process 7798 attached ) = 0 [pid 7792] ioctl(4, LOOP_CLR_FD) = 0 [ 119.497989][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.509284][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.517523][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.533584][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.546200][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 7799 attached [pid 7798] set_robust_list(0x7fee0b1f39e0, 24 [pid 7792] close(4 [pid 7799] set_robust_list(0x7fee0b1f39e0, 24 [pid 7798] <... set_robust_list resumed>) = 0 [pid 7792] <... close resumed>) = 0 [pid 7791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7791] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7791] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7798] memfd_create("syzkaller", 0 [pid 7799] <... set_robust_list resumed>) = 0 [pid 7792] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7799] memfd_create("syzkaller", 0 [pid 7791] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7792] <... futex resumed>) = 1 [pid 7799] <... memfd_create resumed>) = 3 [pid 7798] <... memfd_create resumed>) = 3 [pid 7792] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7790] <... futex resumed>) = 0 [pid 7799] <... mmap resumed>) = 0x7fee02dd3000 [pid 7791] <... clone resumed>, parent_tid=[7800], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7800 [pid 7790] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] <... mmap resumed>) = 0x7fee02dd3000 [pid 7792] <... futex resumed>) = 0 [pid 7791] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7790] <... futex resumed>) = 1 [pid 7792] creat("./bus", 000 [pid 7791] <... futex resumed>) = 0 [pid 7790] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7792] <... creat resumed>) = 4 [pid 7791] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7792] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7790] <... futex resumed>) = 0 [pid 7792] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7790] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7790] <... futex resumed>) = 0 [ 119.554739][ T7788] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.555733][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.562846][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.585317][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.586419][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7792] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7790] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7788] <... write resumed>) = 57344 [pid 7788] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7786] exit_group(0 [pid 7794] <... futex resumed>) = ? [pid 7788] <... futex resumed>) = ? [pid 7786] <... exit_group resumed>) = ? [pid 7794] +++ exited with 0 +++ [pid 7788] +++ exited with 0 +++ [pid 7786] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7786, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, [pid 7799] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./150/binderfs") = 0 [pid 7799] munmap(0x7fee02dd3000, 524288 [pid 7798] <... write resumed>) = 524288 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7800 attached [pid 7799] <... munmap resumed>) = 0 [pid 7798] munmap(0x7fee02dd3000, 524288 [pid 7791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7789] <... write resumed>) = 57344 [pid 7800] set_robust_list(0x7fee02e529e0, 24 [pid 7799] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7798] <... munmap resumed>) = 0 [pid 7789] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7787] exit_group(0 [pid 7800] <... set_robust_list resumed>) = 0 [pid 7799] <... openat resumed>) = 4 [pid 7798] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7795] <... futex resumed>) = ? [pid 7789] <... futex resumed>) = ? [pid 7787] <... exit_group resumed>) = ? [pid 7795] +++ exited with 0 +++ [pid 7789] +++ exited with 0 +++ [pid 7787] +++ exited with 0 +++ [ 119.592676][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.600998][ T7789] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.621682][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.621812][ T9] hfsplus: b-tree write err: -5, ino 4 [ 119.629275][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.645038][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7800] creat("./file1", 000 [pid 7799] ioctl(4, LOOP_SET_FD, 3 [pid 7798] <... openat resumed>) = 4 [pid 7790] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7790] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7790] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7790] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7801], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7801 [pid 7790] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7790] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7801 attached [pid 7801] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7801] creat("./file1", 000 [pid 7798] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7787, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7799] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7799] close(3 [pid 7798] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7799] <... close resumed>) = 0 [pid 7798] close(3 [pid 5075] fstat(3, [pid 7799] mkdir("./bus", 0777 [pid 7798] <... close resumed>) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, [pid 7798] mkdir("./bus", 0777 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7799] <... mkdir resumed>) = 0 [pid 5075] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7799] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7798] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7798] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5075] lstat("./150/binderfs", [pid 7801] <... creat resumed>) = 5 [pid 7800] <... creat resumed>) = 5 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7801] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7800] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] <... write resumed>) = 57344 [pid 7792] <... write resumed>) = 57344 [pid 5075] unlink("./150/binderfs" [pid 7801] <... futex resumed>) = 1 [pid 7800] <... futex resumed>) = 0 [pid 7799] <... mount resumed>) = 0 [pid 7798] <... mount resumed>) = 0 [pid 7793] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7792] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7790] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 7801] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7800] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7799] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [ 119.652402][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.660725][ T7799] loop5: detected capacity change from 0 to 1024 [ 119.667490][ T7798] loop4: detected capacity change from 0 to 1024 [ 119.676249][ T7793] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.690743][ T7792] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7798] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7793] <... futex resumed>) = 0 [pid 7792] <... futex resumed>) = 0 [pid 7791] exit_group(0 [pid 7790] exit_group(0 [pid 5076] lstat("./150/bus", [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7801] <... futex resumed>) = ? [pid 7800] <... futex resumed>) = ? [pid 7799] <... openat resumed>) = 3 [pid 7798] <... openat resumed>) = 3 [pid 7791] <... exit_group resumed>) = ? [pid 7790] <... exit_group resumed>) = ? [pid 7801] +++ exited with 0 +++ [pid 7800] +++ exited with 0 +++ [pid 7798] chdir("./bus" [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7798] <... chdir resumed>) = 0 [pid 5076] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7798] ioctl(4, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7798] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7798] close(4) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7798] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] fstat(4, [pid 7798] <... futex resumed>) = 1 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7798] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./150/bus") = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./150" [pid 7799] chdir("./bus" [pid 7796] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./151", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7802 ./strace-static-x86_64: Process 7802 attached [pid 7802] set_robust_list(0x555556b055e0, 24) = 0 [pid 7802] chdir("./151") = 0 [pid 7802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7802] setpgid(0, 0) = 0 [pid 7802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7802] write(3, "1000", 4) = 4 [pid 7802] close(3 [pid 7799] <... chdir resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] +++ exited with 0 +++ [pid 7791] +++ exited with 0 +++ [pid 7799] ioctl(4, LOOP_CLR_FD [pid 7798] <... futex resumed>) = 0 [pid 7796] <... futex resumed>) = 1 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7791, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7798] creat("./bus", 000) = 4 [pid 7798] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7799] <... ioctl resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = 0 [pid 7796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7799] close(4 [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7799] <... close resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7799] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] <... futex resumed>) = 0 [pid 7796] <... futex resumed>) = 1 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7799] <... futex resumed>) = 1 [pid 7798] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7797] <... futex resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7792] +++ exited with 0 +++ [pid 7790] +++ exited with 0 +++ [pid 5077] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] lstat("./150/bus", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7790, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7802] <... close resumed>) = 0 [pid 5074] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7802] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7802] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7802] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 7802] <... futex resumed>) = 0 [pid 5074] fstat(3, [pid 7802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7802] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5074] getdents64(3, [pid 7802] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7802] <... mprotect resumed>) = 0 [pid 5074] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7802] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./149/binderfs", [pid 7802] <... clone resumed>, parent_tid=[7803], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7803 [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7802] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] unlink("./149/binderfs" [pid 7802] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7802] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7803 attached [pid 7803] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7803] memfd_create("syzkaller", 0) = 3 [pid 7799] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... openat resumed>) = 3 [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7797] <... futex resumed>) = 0 [pid 5077] fstat(3, [pid 5075] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7799] creat("./bus", 000 [pid 7797] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7799] <... creat resumed>) = 4 [pid 5077] getdents64(3, [pid 5075] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7799] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] <... openat resumed>) = 4 [pid 7799] <... futex resumed>) = 1 [pid 7797] <... futex resumed>) = 0 [pid 5077] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] fstat(4, [pid 5074] <... umount2 resumed>) = 0 [pid 7799] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7797] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 119.706699][ T33] hfsplus: b-tree write err: -5, ino 4 [ 119.741776][ T33] hfsplus: b-tree write err: -5, ino 4 [ 119.742861][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7797] <... futex resumed>) = 0 [pid 5077] lstat("./150/binderfs", [pid 5075] getdents64(4, [pid 7797] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] unlink("./150/binderfs" [pid 7803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7803] munmap(0x7fee02dd3000, 524288) = 0 [pid 7803] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7803] ioctl(4, LOOP_SET_FD, 3 [pid 5077] <... unlink resumed>) = 0 [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./150/bus" [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] lstat("./149/bus", [pid 7803] <... ioctl resumed>) = 0 [pid 7803] close(3) = 0 [pid 7803] mkdir("./bus", 0777) = 0 [pid 7803] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7796] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 119.766065][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.771142][ T7803] loop2: detected capacity change from 0 to 1024 [ 119.782003][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.786703][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.795725][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.804283][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7797] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7796] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7797] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] <... futex resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7796] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7803] <... mount resumed>) = 0 [pid 7796] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7796] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] rmdir("./150" [pid 5074] <... openat resumed>) = 4 [pid 7803] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7803] chdir("./bus" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] fstat(4, [pid 7803] <... chdir resumed>) = 0 [pid 7803] ioctl(4, LOOP_CLR_FD [pid 7796] <... mprotect resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7796] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] mkdir("./151", 0777 [pid 5074] getdents64(4, [pid 7803] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7803] close(4) = 0 [pid 7803] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] <... clone resumed>, parent_tid=[7804], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7804 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 7803] <... futex resumed>) = 1 [pid 7802] <... futex resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7803] creat("./bus", 000 [pid 7802] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] close(4 [pid 7803] <... creat resumed>) = 4 [pid 7802] <... futex resumed>) = 0 [pid 7796] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7803] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7802] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7803] <... futex resumed>) = 0 [pid 7802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7803] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7802] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7797] <... futex resumed>) = 0 [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7802] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7797] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] rmdir("./149/bus"./strace-static-x86_64: Process 7804 attached [pid 7804] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7804] creat("./file1", 000 [pid 7797] <... mmap resumed>) = 0x7fee02e32000 [pid 5077] lstat("./150/bus", [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... rmdir resumed>) = 0 [pid 7804] <... creat resumed>) = 5 [pid 7804] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 119.804897][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.831249][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.840479][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.846408][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.849519][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7804] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7797] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7796] <... futex resumed>) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] close(3 [pid 5074] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7797] <... mprotect resumed>) = 0 [pid 5074] close(3 [pid 7797] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7805 attached [pid 7805] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7805] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7806 attached [pid 7797] <... clone resumed>, parent_tid=[7805], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7805 [pid 5077] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./149" [pid 7806] set_robust_list(0x555556b055e0, 24 [pid 7797] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7806 [pid 5074] <... rmdir resumed>) = 0 [pid 7806] <... set_robust_list resumed>) = 0 [pid 7797] <... futex resumed>) = 1 [pid 5077] fstat(4, [pid 5074] mkdir("./150", 0777 [pid 7805] <... futex resumed>) = 0 [pid 7802] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7805] creat("./file1", 000 [pid 7802] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7806] chdir("./151" [pid 7802] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7797] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7802] <... mprotect resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5077] getdents64(4, [pid 7806] <... chdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7802] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7806] <... prctl resumed>) = 0 [pid 5077] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 7806] setpgid(0, 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7802] <... clone resumed>, parent_tid=[7807], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7807 [pid 7806] <... setpgid resumed>) = 0 [pid 7802] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] close(4 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7802] <... futex resumed>) = 0 [pid 7802] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7805] <... creat resumed>) = 5 [pid 7806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./150/bus" [pid 5074] close(3 [pid 7806] <... openat resumed>) = 3 [pid 7799] <... write resumed>) = 57344 [pid 5077] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7805] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7805] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7807 attached [pid 7806] write(3, "1000", 4 [pid 7799] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7798] <... write resumed>) = 57344 [pid 7797] <... futex resumed>) = 0 [pid 5077] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7806] <... write resumed>) = 4 [pid 7797] exit_group(0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [ 119.862501][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.871795][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.880888][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.884238][ T7798] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.888869][ T7799] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7806] close(3 [pid 7799] <... futex resumed>) = ? [pid 7797] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 7806] <... close resumed>) = 0 [pid 7799] +++ exited with 0 +++ [pid 5077] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7808 [pid 7806] symlink("/dev/binderfs", "./binderfs" [pid 5077] rmdir("./150" [pid 7806] <... symlink resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7806] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] mkdir("./151", 0777./strace-static-x86_64: Process 7808 attached [pid 7806] <... futex resumed>) = 0 [pid 7805] <... futex resumed>) = ? [pid 5077] <... mkdir resumed>) = 0 [pid 7808] set_robust_list(0x555556b055e0, 24 [pid 7806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7808] <... set_robust_list resumed>) = 0 [pid 7807] set_robust_list(0x7fee02e529e0, 24 [pid 7806] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7805] +++ exited with 0 +++ [pid 7798] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7797] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 3 [pid 7808] chdir("./150" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7797, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7808] <... chdir resumed>) = 0 [pid 7808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7808] setpgid(0, 0) = 0 [pid 7808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7808] write(3, "1000", 4) = 4 [pid 7808] close(3) = 0 [pid 7808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7808] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7808] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7808] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... openat resumed>) = 3 [pid 7808] <... mprotect resumed>) = 0 [pid 5081] fstat(3, [pid 7808] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7807] <... set_robust_list resumed>) = 0 [pid 7798] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 7808] <... clone resumed>, parent_tid=[7809], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7809 [pid 7807] creat("./file1", 000 [pid 7798] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7808] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7808] <... futex resumed>) = 0 [pid 7806] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] ioctl(3, LOOP_CLR_FD [pid 7808] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./151/binderfs" [pid 7806] <... mprotect resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7796] exit_group(0./strace-static-x86_64: Process 7809 attached [pid 7807] <... creat resumed>) = 5 [pid 7806] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7803] <... write resumed>) = 57344 [pid 7796] <... exit_group resumed>) = ? [pid 5077] close(3 [pid 7809] set_robust_list(0x7fee0b1f39e0, 24 [pid 7807] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7803] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... close resumed>) = 0 [pid 7809] <... set_robust_list resumed>) = 0 [pid 7807] <... futex resumed>) = 1 [pid 7806] <... clone resumed>, parent_tid=[7810], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7810 [pid 7803] <... futex resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7809] memfd_create("syzkaller", 0 [pid 7807] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7806] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7804] <... futex resumed>) = ? [pid 7803] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7809] <... memfd_create resumed>) = 3 [pid 7806] <... futex resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7811 [pid 7809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7806] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7809] <... mmap resumed>) = 0x7fee02dd3000 [pid 7809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7804] +++ exited with 0 +++ [pid 7802] <... futex resumed>) = 0 [pid 7798] <... futex resumed>) = ? [pid 7809] <... write resumed>) = 524288 [pid 7802] exit_group(0 [pid 7809] munmap(0x7fee02dd3000, 524288 [pid 7807] <... futex resumed>) = ? [pid 7803] <... futex resumed>) = ? [pid 7802] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7811 attached ./strace-static-x86_64: Process 7810 attached [pid 7809] <... munmap resumed>) = 0 [pid 7807] +++ exited with 0 +++ [pid 7803] +++ exited with 0 +++ [pid 7798] +++ exited with 0 +++ [pid 7796] +++ exited with 0 +++ [pid 7811] set_robust_list(0x555556b055e0, 24 [pid 7810] set_robust_list(0x7fee0b1f39e0, 24 [pid 7809] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7802] +++ exited with 0 +++ [pid 7809] <... openat resumed>) = 4 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7796, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7809] ioctl(4, LOOP_SET_FD, 3 [ 119.912938][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.924307][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.931650][ T7803] hfsplus: request for non-existent node 16715520 in B*Tree [ 119.942422][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7811] <... set_robust_list resumed>) = 0 [pid 7810] <... set_robust_list resumed>) = 0 [pid 7809] <... ioctl resumed>) = 0 [pid 5080] <... restart_syscall resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7802, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7811] chdir("./151" [pid 7810] memfd_create("syzkaller", 0 [pid 5076] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7811] <... chdir resumed>) = 0 [pid 7810] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5080] unlink("./150/binderfs") = 0 [pid 5080] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7811] <... prctl resumed>) = 0 [pid 7811] setpgid(0, 0 [pid 7810] <... mmap resumed>) = 0x7fee02dd3000 [pid 5076] <... openat resumed>) = 3 [pid 7811] <... setpgid resumed>) = 0 [pid 7810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... umount2 resumed>) = 0 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] fstat(3, [pid 7811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7810] <... write resumed>) = 524288 [pid 5081] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7811] <... openat resumed>) = 3 [pid 7810] munmap(0x7fee02dd3000, 524288 [pid 7809] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 7811] write(3, "1000", 4 [pid 7810] <... munmap resumed>) = 0 [pid 7809] <... close resumed>) = 0 [pid 5081] lstat("./151/bus", [pid 5080] lstat("./150/bus", [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7811] <... write resumed>) = 4 [pid 5080] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... openat resumed>) = 4 [pid 7811] close(3 [pid 5080] fstat(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7811] <... close resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, [pid 7811] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] lstat("./151/binderfs", [pid 5080] close(4) = 0 [pid 5080] rmdir("./150/bus") = 0 [pid 7811] <... symlink resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7811] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] close(3 [pid 7811] <... futex resumed>) = 0 [pid 5081] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... close resumed>) = 0 [pid 5076] unlink("./151/binderfs" [pid 5080] rmdir("./150" [pid 7811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5080] mkdir("./151", 0777 [pid 7811] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7810] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7809] mkdir("./bus", 0777 [pid 5081] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... mkdir resumed>) = 0 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7811] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7811] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5080] ioctl(3, LOOP_CLR_FD [ 119.964771][ T7809] loop0: detected capacity change from 0 to 1024 [ 119.980567][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7811] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7810] <... openat resumed>) = 4 [pid 5081] fstat(4, [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7810] ioctl(4, LOOP_SET_FD, 3 [pid 7809] <... mkdir resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7811] <... clone resumed>, parent_tid=[7812], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7812 [pid 5080] close(3 [pid 7811] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7810] <... ioctl resumed>) = 0 [pid 7809] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] getdents64(4, [pid 5080] <... close resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7811] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7813 ./strace-static-x86_64: Process 7812 attached [pid 7812] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7811] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 7812] memfd_create("syzkaller", 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./151/bus" [pid 7812] <... memfd_create resumed>) = 3 [pid 7812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, ./strace-static-x86_64: Process 7813 attached [pid 7813] set_robust_list(0x555556b055e0, 24 [pid 7812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7810] close(3 [pid 7809] <... mount resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7810] <... close resumed>) = 0 [pid 7809] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] close(3 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7813] <... set_robust_list resumed>) = 0 [pid 7810] mkdir("./bus", 0777 [pid 7809] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7813] chdir("./151" [pid 7810] <... mkdir resumed>) = 0 [pid 7809] chdir("./bus" [pid 5081] rmdir("./151" [pid 5076] lstat("./151/bus", [pid 7813] <... chdir resumed>) = 0 [pid 7812] <... write resumed>) = 524288 [pid 7810] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7809] <... chdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7812] munmap(0x7fee02dd3000, 524288 [pid 7813] setpgid(0, 0) = 0 [pid 7812] <... munmap resumed>) = 0 [pid 7809] ioctl(4, LOOP_CLR_FD [pid 5081] mkdir("./152", 0777 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7812] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7809] <... ioctl resumed>) = 0 [pid 7813] <... openat resumed>) = 3 [pid 7812] <... openat resumed>) = 4 [pid 5081] <... mkdir resumed>) = 0 [pid 5076] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7813] write(3, "1000", 4 [pid 7812] ioctl(4, LOOP_SET_FD, 3 [pid 7813] <... write resumed>) = 4 [pid 7810] <... mount resumed>) = 0 [pid 7809] close(4 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7810] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7809] <... close resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7810] <... openat resumed>) = 3 [pid 7809] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 4 [pid 7813] close(3 [pid 7810] chdir("./bus" [pid 7809] <... futex resumed>) = 1 [pid 7808] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5076] fstat(4, [pid 7810] <... chdir resumed>) = 0 [pid 7809] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7810] ioctl(4, LOOP_CLR_FD [pid 7809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7808] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 7810] <... ioctl resumed>) = 0 [pid 7809] creat("./bus", 000 [pid 7808] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7813] <... close resumed>) = 0 [pid 7810] close(4 [pid 7809] <... creat resumed>) = 4 [pid 5076] getdents64(4, [pid 7813] symlink("/dev/binderfs", "./binderfs" [pid 7810] <... close resumed>) = 0 [pid 7809] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7814 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7813] <... symlink resumed>) = 0 [pid 7810] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] <... futex resumed>) = 1 [pid 7808] <... futex resumed>) = 0 [pid 5076] close(4 [pid 7813] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7810] <... futex resumed>) = 1 [pid 7809] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7806] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7813] <... futex resumed>) = 0 [pid 7810] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7808] <... futex resumed>) = 0 [pid 7806] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./151/bus" [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7809] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7808] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7806] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7814 attached [pid 7813] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7810] creat("./bus", 000 [pid 5076] getdents64(3, [pid 7814] set_robust_list(0x555556b055e0, 24 [pid 7810] <... creat resumed>) = 4 [ 120.012372][ T11] hfsplus: b-tree write err: -5, ino 4 [ 120.014754][ T7810] loop1: detected capacity change from 0 to 1024 [ 120.049534][ T7812] loop3: detected capacity change from 0 to 1024 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7814] <... set_robust_list resumed>) = 0 [pid 7810] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3 [pid 7814] chdir("./152" [pid 7810] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7814] <... chdir resumed>) = 0 [pid 7810] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] rmdir("./151" [pid 7814] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... rmdir resumed>) = 0 [pid 7814] <... prctl resumed>) = 0 [pid 5076] mkdir("./152", 0777 [pid 7814] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7814] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 7814] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7814] write(3, "1000", 4 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7814] <... write resumed>) = 4 [pid 5076] close(3 [pid 7814] close(3 [pid 5076] <... close resumed>) = 0 [pid 7814] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7815 [pid 7814] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7814] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7814] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7816], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7816 [pid 7814] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7815 attached [pid 7815] set_robust_list(0x555556b055e0, 24) = 0 [pid 7815] chdir("./152" [pid 7806] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7813] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7813] <... mprotect resumed>) = 0 [pid 7806] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7810] <... futex resumed>) = 0 [pid 7806] <... futex resumed>) = 1 [pid 7810] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7806] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7815] <... chdir resumed>) = 0 [pid 7813] <... clone resumed>, parent_tid=[7817], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7817 [pid 7815] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7813] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7815] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7816 attached [pid 7815] setpgid(0, 0 [pid 7812] <... ioctl resumed>) = 0 [pid 7816] set_robust_list(0x7fee0b1f39e0, 24 [pid 7815] <... setpgid resumed>) = 0 [pid 7812] close(3 [pid 7816] <... set_robust_list resumed>) = 0 [pid 7815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7812] <... close resumed>) = 0 [pid 7816] memfd_create("syzkaller", 0 [pid 7815] <... openat resumed>) = 3 [pid 7812] mkdir("./bus", 0777./strace-static-x86_64: Process 7817 attached [pid 7816] <... memfd_create resumed>) = 3 [pid 7815] write(3, "1000", 4 [pid 7817] set_robust_list(0x7fee0b1f39e0, 24 [pid 7816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7815] <... write resumed>) = 4 [pid 7817] <... set_robust_list resumed>) = 0 [pid 7816] <... mmap resumed>) = 0x7fee02dd3000 [pid 7815] close(3 [pid 7817] memfd_create("syzkaller", 0 [pid 7815] <... close resumed>) = 0 [pid 7817] <... memfd_create resumed>) = 3 [pid 7815] symlink("/dev/binderfs", "./binderfs" [pid 7808] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7815] <... symlink resumed>) = 0 [pid 7808] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] <... mmap resumed>) = 0x7fee02dd3000 [pid 7816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7815] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] <... futex resumed>) = 0 [pid 7817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7815] <... futex resumed>) = 0 [pid 7808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7808] <... mmap resumed>) = 0x7fee02e32000 [pid 7815] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7808] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7816] <... write resumed>) = 524288 [ 120.074642][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.081965][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.093764][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.105936][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.106634][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7815] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7808] <... mprotect resumed>) = 0 [pid 7817] <... write resumed>) = 524288 [pid 7816] munmap(0x7fee02dd3000, 524288 [pid 7815] <... mprotect resumed>) = 0 [pid 7808] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7815] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7808] <... clone resumed>, parent_tid=[7818], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7818 [pid 7815] <... clone resumed>, parent_tid=[7819], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7819 [pid 7808] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7815] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] <... futex resumed>) = 0 [pid 7815] <... futex resumed>) = 0 [pid 7808] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7815] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7819 attached [pid 7816] <... munmap resumed>) = 0 [pid 7817] munmap(0x7fee02dd3000, 524288 [pid 7819] set_robust_list(0x7fee0b1f39e0, 24 [pid 7816] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 7818 attached [pid 7819] <... set_robust_list resumed>) = 0 [pid 7816] <... openat resumed>) = 4 [pid 7812] <... mkdir resumed>) = 0 [pid 7819] memfd_create("syzkaller", 0 [pid 7818] set_robust_list(0x7fee02e529e0, 24 [pid 7817] <... munmap resumed>) = 0 [pid 7816] ioctl(4, LOOP_SET_FD, 3 [pid 7812] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7819] <... memfd_create resumed>) = 3 [pid 7818] <... set_robust_list resumed>) = 0 [pid 7817] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7818] creat("./file1", 000 [pid 7817] <... openat resumed>) = 4 [pid 7819] <... mmap resumed>) = 0x7fee02dd3000 [pid 7817] ioctl(4, LOOP_SET_FD, 3 [pid 7819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7812] <... mount resumed>) = 0 [pid 7806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7812] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7806] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... creat resumed>) = 5 [pid 7816] <... ioctl resumed>) = 0 [pid 7812] <... openat resumed>) = 3 [pid 7806] <... futex resumed>) = 0 [pid 7818] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] close(3 [pid 7812] chdir("./bus" [pid 7806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7818] <... futex resumed>) = 1 [pid 7816] <... close resumed>) = 0 [pid 7812] <... chdir resumed>) = 0 [pid 7808] <... futex resumed>) = 0 [pid 7806] <... mmap resumed>) = 0x7fee02e32000 [pid 7818] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] <... write resumed>) = 524288 [pid 7819] munmap(0x7fee02dd3000, 524288) = 0 [pid 7819] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7812] ioctl(4, LOOP_CLR_FD [pid 7806] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7816] mkdir("./bus", 0777 [pid 7819] <... openat resumed>) = 4 [pid 7819] ioctl(4, LOOP_SET_FD, 3 [pid 7816] <... mkdir resumed>) = 0 [pid 7812] <... ioctl resumed>) = 0 [pid 7806] <... mprotect resumed>) = 0 [ 120.130938][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.142430][ T7816] loop5: detected capacity change from 0 to 1024 [ 120.147202][ T7817] loop4: detected capacity change from 0 to 1024 [ 120.158853][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.166978][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.169943][ T7819] loop2: detected capacity change from 0 to 1024 [pid 7817] <... ioctl resumed>) = 0 [pid 7817] close(3) = 0 [pid 7817] mkdir("./bus", 0777) = 0 [pid 7817] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7816] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7812] close(4 [pid 7806] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7819] <... ioctl resumed>) = 0 [pid 7819] close(3 [pid 7817] <... mount resumed>) = 0 [pid 7812] <... close resumed>) = 0 [pid 7812] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7811] <... futex resumed>) = 0 [pid 7812] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7811] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7811] <... futex resumed>) = 0 [pid 7812] creat("./bus", 000 [pid 7811] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] <... close resumed>) = 0 [pid 7817] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7812] <... creat resumed>) = 4 [pid 7819] mkdir("./bus", 0777 [pid 7817] <... openat resumed>) = 3 [pid 7812] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] <... mkdir resumed>) = 0 [pid 7817] chdir("./bus" [pid 7812] <... futex resumed>) = 1 [pid 7811] <... futex resumed>) = 0 [pid 7819] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7817] <... chdir resumed>) = 0 [pid 7812] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7811] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] ioctl(4, LOOP_CLR_FD [pid 7812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7811] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7820 attached [pid 7817] <... ioctl resumed>) = 0 [pid 7812] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7811] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7816] <... mount resumed>) = 0 [pid 7806] <... clone resumed>, parent_tid=[7820], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7820 [pid 7820] set_robust_list(0x7fee02e529e0, 24 [pid 7806] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7820] <... set_robust_list resumed>) = 0 [pid 7806] <... futex resumed>) = 0 [pid 7820] creat("./file1", 000 [pid 7806] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7817] close(4 [pid 7816] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 120.175108][ T7809] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.188390][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.206712][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.208921][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.215763][ T7810] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7816] chdir("./bus" [pid 7817] <... close resumed>) = 0 [pid 7816] <... chdir resumed>) = 0 [pid 7809] <... write resumed>) = 57344 [pid 7809] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7809] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7820] <... creat resumed>) = 5 [pid 7820] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7806] <... futex resumed>) = 0 [pid 7820] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] <... mount resumed>) = 0 [pid 7817] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] ioctl(4, LOOP_CLR_FD [pid 7810] <... write resumed>) = 57344 [pid 7810] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7810] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7817] <... futex resumed>) = 1 [pid 7816] <... ioctl resumed>) = 0 [pid 7808] exit_group(0 [pid 7818] <... futex resumed>) = ? [pid 7817] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7816] close(4 [pid 7808] <... exit_group resumed>) = ? [pid 7818] +++ exited with 0 +++ [pid 7816] <... close resumed>) = 0 [pid 7816] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7814] <... futex resumed>) = 0 [pid 7816] creat("./bus", 000 [pid 7814] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] <... creat resumed>) = 4 [pid 7814] <... futex resumed>) = 0 [pid 7813] <... futex resumed>) = 0 [pid 7809] <... futex resumed>) = ? [pid 7816] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7814] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7816] <... futex resumed>) = 0 [pid 7814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7816] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7814] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] <... openat resumed>) = 3 [pid 7814] <... futex resumed>) = 0 [pid 7819] chdir("./bus" [pid 7814] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7819] <... chdir resumed>) = 0 [pid 7813] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] ioctl(4, LOOP_CLR_FD) = 0 [pid 7819] close(4 [pid 7809] +++ exited with 0 +++ [pid 7808] +++ exited with 0 +++ [pid 7806] exit_group(0 [pid 7820] <... futex resumed>) = ? [pid 7819] <... close resumed>) = 0 [pid 7817] <... futex resumed>) = 0 [pid 7813] <... futex resumed>) = 1 [pid 7811] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7810] <... futex resumed>) = ? [pid 7806] <... exit_group resumed>) = ? [pid 7820] +++ exited with 0 +++ [pid 7819] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] creat("./bus", 000 [pid 7813] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7811] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7810] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7808, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7819] <... futex resumed>) = 1 [pid 7817] <... creat resumed>) = 4 [pid 7815] <... futex resumed>) = 0 [pid 7811] <... futex resumed>) = 0 [pid 7806] +++ exited with 0 +++ [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7819] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7817] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7815] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7817] <... futex resumed>) = 1 [pid 7815] <... futex resumed>) = 0 [pid 7811] <... mmap resumed>) = 0x7fee02e32000 [pid 7819] creat("./bus", 000 [pid 7817] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7815] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7811] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7819] <... creat resumed>) = 4 [pid 7811] <... mprotect resumed>) = 0 [pid 5074] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7819] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7819] <... futex resumed>) = 1 [pid 7815] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7819] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7815] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] <... clone resumed>, parent_tid=[7821], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7821 [pid 5074] <... openat resumed>) = 3 [pid 7819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7815] <... futex resumed>) = 0 [pid 7811] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] fstat(3, [pid 7819] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7815] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7811] <... futex resumed>) = 0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7821 attached [pid 7813] <... futex resumed>) = 0 [pid 7811] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [ 120.229960][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.238743][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.246627][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.257575][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.270289][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5074] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7821] set_robust_list(0x7fee02e529e0, 24 [pid 7813] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7806, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./150/binderfs") = 0 [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7821] <... set_robust_list resumed>) = 0 [pid 7817] <... futex resumed>) = 0 [pid 7814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7813] <... futex resumed>) = 1 [pid 7812] <... write resumed>) = 57344 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7817] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7814] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7814] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7814] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7822], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7822 [pid 7814] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7822 attached [pid 7822] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7822] creat("./file1", 000) = 5 [pid 7822] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7814] <... futex resumed>) = 0 [pid 7822] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7821] creat("./file1", 000 [pid 7813] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7812] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7815] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7815] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7815] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7823], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7823 [pid 7815] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7815] <... futex resumed>) = 0 [pid 7815] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7823 attached [pid 7823] set_robust_list(0x7fee02e529e0, 24) = 0 [ 120.287556][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.294134][ T7812] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.297709][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.309759][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.317289][ T9] hfsplus: b-tree write err: -5, ino 4 [ 120.318094][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.323553][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7823] creat("./file1", 000 [pid 7821] <... creat resumed>) = 5 [pid 7812] <... futex resumed>) = 0 [pid 7821] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7812] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7821] <... futex resumed>) = 0 [pid 5075] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7821] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./151/binderfs" [pid 7811] exit_group(0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7811] <... exit_group resumed>) = ? [ 120.338319][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.340792][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.346798][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.353728][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.368943][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.369620][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7821] <... futex resumed>) = ? [pid 7813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7812] <... futex resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 7821] +++ exited with 0 +++ [pid 7813] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7812] +++ exited with 0 +++ [pid 7811] +++ exited with 0 +++ [pid 7813] <... futex resumed>) = 0 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7811, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7813] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7813] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7824], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7824 [pid 7815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7813] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7824 attached ) = 0 [pid 5077] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7813] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] unlink("./151/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... unlink resumed>) = 0 [pid 5074] lstat("./150/bus", [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./150/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./150") = 0 [pid 5074] mkdir("./151", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7825 [pid 7824] set_robust_list(0x7fee02e529e0, 24 [pid 7823] <... creat resumed>) = 5 [ 120.384749][ T7816] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.392274][ T52] hfsplus: b-tree write err: -5, ino 4 [ 120.398672][ T7819] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.406861][ T52] hfsplus: b-tree write err: -5, ino 4 [ 120.417713][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.425214][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7819] <... write resumed>) = 57344 [pid 7816] <... write resumed>) = 57344 [pid 5077] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7825 attached [pid 7824] <... set_robust_list resumed>) = 0 [pid 7823] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7819] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7815] exit_group(0 [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] set_robust_list(0x555556b055e0, 24 [pid 7824] creat("./file1", 000 [pid 7819] <... futex resumed>) = ? [pid 7816] <... futex resumed>) = 0 [pid 7815] <... exit_group resumed>) = ? [pid 7814] exit_group(0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7825] <... set_robust_list resumed>) = 0 [pid 7822] <... futex resumed>) = ? [pid 7819] +++ exited with 0 +++ [pid 7814] <... exit_group resumed>) = ? [pid 5077] lstat("./151/bus", [pid 7825] chdir("./151" [pid 7822] +++ exited with 0 +++ [pid 7816] +++ exited with 0 +++ [pid 7814] +++ exited with 0 +++ [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7825] <... chdir resumed>) = 0 [pid 7823] <... futex resumed>) = ? [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7814, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5077] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] <... prctl resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7825] setpgid(0, 0 [pid 7823] +++ exited with 0 +++ [pid 7815] +++ exited with 0 +++ [pid 5081] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7825] <... setpgid resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] fstat(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7815, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] lstat("./151/bus", [pid 7825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7825] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5077] getdents64(4, [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] write(3, "1000", 4 [pid 5081] fstat(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7825] <... write resumed>) = 4 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, [pid 7825] close(3 [pid 5081] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7825] symlink("/dev/binderfs", "./binderfs" [pid 5081] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7825] <... symlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./151/bus" [pid 5076] <... openat resumed>) = 3 [pid 7825] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./152/binderfs", [pid 5077] <... rmdir resumed>) = 0 [pid 5076] fstat(3, [pid 7825] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] getdents64(3, [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] unlink("./152/binderfs" [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 7825] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] <... unlink resumed>) = 0 [pid 5077] close(3 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7825] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5076] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] <... mprotect resumed>) = 0 [pid 5077] rmdir("./151" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7825] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... rmdir resumed>) = 0 [pid 5076] lstat("./152/binderfs", [pid 5077] mkdir("./152", 0777 [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7825] <... clone resumed>, parent_tid=[7826], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7826 [pid 5077] <... mkdir resumed>) = 0 [pid 5076] unlink("./152/binderfs" [pid 7825] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 7825] <... futex resumed>) = 0 [pid 5077] <... openat resumed>) = 3 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7825] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7827 ./strace-static-x86_64: Process 7826 attached [pid 7826] set_robust_list(0x7fee0b1f39e0, 24) = 0 ./strace-static-x86_64: Process 7827 attached [pid 7826] memfd_create("syzkaller", 0 [pid 7827] set_robust_list(0x555556b055e0, 24) = 0 [pid 7827] chdir("./152" [pid 7826] <... memfd_create resumed>) = 3 [pid 7826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7827] <... chdir resumed>) = 0 [pid 7827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7827] setpgid(0, 0) = 0 [pid 7827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7827] write(3, "1000", 4) = 4 [pid 7824] <... creat resumed>) = 5 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7824] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7824] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7817] <... write resumed>) = 57344 [pid 5075] fstat(4, [pid 7827] close(3) = 0 [pid 7827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./152/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./152/bus") = 0 [pid 5076] getdents64(3, [pid 7827] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7827] <... futex resumed>) = 0 [pid 5076] close(3 [pid 7827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7827] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5076] rmdir("./152" [pid 7827] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 7827] <... mprotect resumed>) = 0 [pid 5076] mkdir("./153", 0777 [pid 7827] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7827] <... clone resumed>, parent_tid=[7828], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7828 [pid 5076] <... openat resumed>) = 3 [pid 7827] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7827] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7827] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(4, [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7829 [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7829 attached 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 7829] set_robust_list(0x555556b055e0, 24 [pid 5075] <... close resumed>) = 0 [pid 7829] <... set_robust_list resumed>) = 0 [pid 5075] rmdir("./151/bus") = 0 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7828 attached [pid 7828] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7828] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 7829] chdir("./153") = 0 [pid 7829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7828] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./151" [pid 7829] setpgid(0, 0 [pid 7828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7829] <... setpgid resumed>) = 0 [pid 7828] <... mmap resumed>) = 0x7fee02dd3000 [pid 7829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] mkdir("./152", 0777 [pid 7829] <... openat resumed>) = 3 [pid 7828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... umount2 resumed>) = 0 [pid 7829] write(3, "1000", 4) = 4 [pid 5081] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 7829] close(3 [pid 7817] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7829] <... close resumed>) = 0 [pid 5081] lstat("./152/bus", [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7829] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5081] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7813] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7829] <... symlink resumed>) = 0 [pid 7824] <... futex resumed>) = ? [pid 7813] <... exit_group resumed>) = ? [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7829] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7824] +++ exited with 0 +++ [pid 7817] <... futex resumed>) = ? [pid 5081] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 7829] <... futex resumed>) = 0 [pid 7829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7828] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 7829] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7829] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7829] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7831], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7831 [pid 7829] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7829] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7830 attached [pid 7830] set_robust_list(0x555556b055e0, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7830 [pid 7830] <... set_robust_list resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 7830] chdir("./152" [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7828] munmap(0x7fee02dd3000, 524288 [pid 7830] <... chdir resumed>) = 0 [pid 7817] +++ exited with 0 +++ [pid 7813] +++ exited with 0 +++ [pid 5081] getdents64(4, [pid 7830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7813, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 7830] <... prctl resumed>) = 0 [pid 7828] <... munmap resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7831 attached [pid 7830] setpgid(0, 0 [pid 7828] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] getdents64(4, [pid 5080] <... restart_syscall resumed>) = 0 [pid 7831] set_robust_list(0x7fee0b1f39e0, 24 [pid 7830] <... setpgid resumed>) = 0 [pid 7828] <... openat resumed>) = 4 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7831] <... set_robust_list resumed>) = 0 [pid 7830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7828] ioctl(4, LOOP_SET_FD, 3 [ 120.434304][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.449027][ T7817] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.457278][ T5162] hfsplus: b-tree write err: -5, ino 4 [ 120.463071][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 5081] close(4 [pid 7831] memfd_create("syzkaller", 0 [pid 7830] <... openat resumed>) = 3 [pid 7826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... close resumed>) = 0 [pid 5080] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7831] <... memfd_create resumed>) = 3 [pid 7830] write(3, "1000", 4 [pid 7828] <... ioctl resumed>) = 0 [pid 5081] rmdir("./152/bus" [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7830] <... write resumed>) = 4 [pid 7828] close(3 [pid 7830] close(3 [pid 7828] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7830] <... close resumed>) = 0 [pid 7828] mkdir("./bus", 0777 [pid 5081] getdents64(3, [pid 5080] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7830] symlink("/dev/binderfs", "./binderfs" [pid 7828] <... mkdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5080] <... openat resumed>) = 3 [pid 7830] <... symlink resumed>) = 0 [pid 5081] close(3 [pid 5080] fstat(3, [pid 7830] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] <... close resumed>) = 0 [pid 7831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7830] <... futex resumed>) = 0 [pid 7826] <... write resumed>) = 524288 [pid 5081] rmdir("./152" [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7831] <... mmap resumed>) = 0x7fee02dd3000 [pid 7830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7828] <... mount resumed>) = 0 [pid 7826] munmap(0x7fee02dd3000, 524288 [pid 5081] <... rmdir resumed>) = 0 [pid 5080] getdents64(3, [pid 7830] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7828] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] mkdir("./153", 0777 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7830] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7828] <... openat resumed>) = 3 [pid 7830] <... mprotect resumed>) = 0 [pid 7828] chdir("./bus" [pid 5081] <... mkdir resumed>) = 0 [pid 5080] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7830] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7828] <... chdir resumed>) = 0 [pid 7830] <... clone resumed>, parent_tid=[7832], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7832 [pid 7828] ioctl(4, LOOP_CLR_FD [pid 5081] <... openat resumed>) = 3 [pid 5080] lstat("./151/binderfs", [pid 7830] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] <... ioctl resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7830] <... futex resumed>) = 0 [pid 7828] close(4 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] unlink("./151/binderfs" [pid 7830] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7828] <... close resumed>) = 0 [pid 5081] close(3 [pid 7828] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [pid 7828] <... futex resumed>) = 1 [pid 7827] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7828] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7827] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7827] <... futex resumed>) = 0 [pid 7828] creat("./bus", 000 [pid 7827] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7828] <... creat resumed>) = 4 [pid 7828] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7833 [pid 7828] <... futex resumed>) = 1 [pid 7827] <... futex resumed>) = 0 [pid 7828] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7827] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7827] <... futex resumed>) = 0 ./strace-static-x86_64: Process 7832 attached [pid 7828] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7827] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7833 attached [pid 7832] set_robust_list(0x7fee0b1f39e0, 24 [pid 7831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7826] <... munmap resumed>) = 0 [pid 7833] set_robust_list(0x555556b055e0, 24 [pid 7832] <... set_robust_list resumed>) = 0 [pid 7831] <... write resumed>) = 524288 [pid 7826] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... umount2 resumed>) = 0 [pid 7833] <... set_robust_list resumed>) = 0 [pid 7832] memfd_create("syzkaller", 0 [pid 7831] munmap(0x7fee02dd3000, 524288 [pid 7826] <... openat resumed>) = 4 [pid 5080] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7833] chdir("./153" [pid 7832] <... memfd_create resumed>) = 3 [pid 7826] ioctl(4, LOOP_SET_FD, 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 120.506633][ T7828] loop3: detected capacity change from 0 to 1024 [ 120.531847][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.539579][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 7833] <... chdir resumed>) = 0 [pid 7832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5080] lstat("./151/bus", [pid 7832] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5080] close(4) = 0 [pid 5080] rmdir("./151/bus") = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7826] <... ioctl resumed>) = 0 [pid 7833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] close(3 [pid 7833] <... prctl resumed>) = 0 [pid 5080] <... close resumed>) = 0 [pid 7833] setpgid(0, 0 [pid 5080] rmdir("./151") = 0 [pid 7833] <... setpgid resumed>) = 0 [pid 5080] mkdir("./152", 0777 [pid 7833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... mkdir resumed>) = 0 [pid 7831] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7833] <... openat resumed>) = 3 [pid 7832] <... write resumed>) = 524288 [pid 7831] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] <... openat resumed>) = 3 [pid 7833] write(3, "1000", 4 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7833] <... write resumed>) = 4 [pid 7832] munmap(0x7fee02dd3000, 524288 [pid 7831] <... openat resumed>) = 4 [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7833] close(3 [pid 7832] <... munmap resumed>) = 0 [pid 7831] ioctl(4, LOOP_SET_FD, 3 [pid 5080] close(3 [pid 7833] <... close resumed>) = 0 [pid 7832] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5080] <... close resumed>) = 0 [pid 7832] <... openat resumed>) = 4 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7832] ioctl(4, LOOP_SET_FD, 3 [pid 7833] symlink("/dev/binderfs", "./binderfs" [pid 7826] close(3 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7834 ./strace-static-x86_64: Process 7834 attached [pid 7833] <... symlink resumed>) = 0 [pid 7833] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] <... ioctl resumed>) = 0 [pid 7826] <... close resumed>) = 0 [pid 7834] set_robust_list(0x555556b055e0, 24 [pid 7833] <... futex resumed>) = 0 [pid 7831] close(3 [pid 7826] mkdir("./bus", 0777 [pid 7834] <... set_robust_list resumed>) = 0 [pid 7834] chdir("./152") = 0 [pid 7834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7834] setpgid(0, 0) = 0 [pid 7834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7834] write(3, "1000", 4) = 4 [pid 7834] close(3 [pid 7833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7826] <... mkdir resumed>) = 0 [pid 7833] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7834] <... close resumed>) = 0 [pid 7833] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7826] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7834] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] <... mprotect resumed>) = 0 [pid 7834] <... futex resumed>) = 0 [pid 7834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7833] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7834] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7834] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7833] <... clone resumed>, parent_tid=[7835], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7835 [pid 7827] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7834] <... mprotect resumed>) = 0 [pid 7833] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] <... futex resumed>) = 0 [pid 7834] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7833] <... futex resumed>) = 0 [pid 7827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7833] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7827] <... mmap resumed>) = 0x7fee02e32000 [pid 7834] <... clone resumed>, parent_tid=[7836], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7836 [pid 7827] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7834] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] <... mprotect resumed>) = 0 [pid 7834] <... futex resumed>) = 0 [pid 7827] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7826] <... mount resumed>) = 0 ./strace-static-x86_64: Process 7835 attached [pid 7834] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7835] set_robust_list(0x7fee0b1f39e0, 24 [pid 7827] <... clone resumed>, parent_tid=[7837], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7837 [pid 7826] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7835] <... set_robust_list resumed>) = 0 [ 120.554191][ T7826] loop0: detected capacity change from 0 to 1024 [ 120.567376][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.575544][ T7831] loop2: detected capacity change from 0 to 1024 [ 120.576814][ T7832] loop1: detected capacity change from 0 to 1024 [pid 7827] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7837 attached ./strace-static-x86_64: Process 7836 attached [pid 7835] memfd_create("syzkaller", 0 [pid 7832] <... ioctl resumed>) = 0 [pid 7831] <... close resumed>) = 0 [pid 7827] <... futex resumed>) = 0 [pid 7826] <... openat resumed>) = 3 [pid 7837] set_robust_list(0x7fee02e529e0, 24 [pid 7836] set_robust_list(0x7fee0b1f39e0, 24 [pid 7832] close(3 [pid 7831] mkdir("./bus", 0777 [pid 7826] chdir("./bus" [pid 7837] <... set_robust_list resumed>) = 0 [pid 7836] <... set_robust_list resumed>) = 0 [pid 7832] <... close resumed>) = 0 [pid 7831] <... mkdir resumed>) = 0 [pid 7826] <... chdir resumed>) = 0 [pid 7837] creat("./file1", 000 [pid 7836] memfd_create("syzkaller", 0 [pid 7832] mkdir("./bus", 0777 [pid 7831] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7826] ioctl(4, LOOP_CLR_FD [pid 7837] <... creat resumed>) = 5 [pid 7836] <... memfd_create resumed>) = 3 [pid 7835] <... memfd_create resumed>) = 3 [pid 7832] <... mkdir resumed>) = 0 [pid 7827] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7826] <... ioctl resumed>) = 0 [pid 7836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7832] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7826] close(4 [pid 7837] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] <... mmap resumed>) = 0x7fee02dd3000 [pid 7835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7826] <... close resumed>) = 0 [pid 7836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7826] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7837] <... futex resumed>) = 0 [pid 7835] <... mmap resumed>) = 0x7fee02dd3000 [pid 7831] <... mount resumed>) = 0 [pid 7826] <... futex resumed>) = 1 [pid 7825] <... futex resumed>) = 0 [pid 7837] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7836] <... write resumed>) = 524288 [pid 7835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7832] <... mount resumed>) = 0 [pid 7831] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7828] <... write resumed>) = 57344 [pid 7826] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] munmap(0x7fee02dd3000, 524288 [pid 7832] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7831] <... openat resumed>) = 3 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7825] <... futex resumed>) = 0 [pid 7836] <... munmap resumed>) = 0 [pid 7832] <... openat resumed>) = 3 [pid 7831] chdir("./bus" [pid 7826] creat("./bus", 000 [pid 7825] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7835] <... write resumed>) = 524288 [pid 7832] chdir("./bus" [pid 7831] <... chdir resumed>) = 0 [pid 7826] <... creat resumed>) = 4 [pid 7836] <... openat resumed>) = 4 [pid 7835] munmap(0x7fee02dd3000, 524288 [pid 7832] <... chdir resumed>) = 0 [pid 7831] ioctl(4, LOOP_CLR_FD [pid 7828] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7827] exit_group(0 [ 120.601912][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.609678][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.620426][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.628432][ T7828] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7826] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7837] <... futex resumed>) = ? [pid 7836] ioctl(4, LOOP_SET_FD, 3 [pid 7832] ioctl(4, LOOP_CLR_FD [pid 7831] <... ioctl resumed>) = 0 [pid 7827] <... exit_group resumed>) = ? [pid 7826] <... futex resumed>) = 1 [pid 7825] <... futex resumed>) = 0 [pid 7837] +++ exited with 0 +++ [pid 7835] <... munmap resumed>) = 0 [pid 7832] <... ioctl resumed>) = 0 [pid 7831] close(4 [pid 7828] <... futex resumed>) = ? [pid 7835] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7828] +++ exited with 0 +++ [pid 7827] +++ exited with 0 +++ [pid 7835] <... openat resumed>) = 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7827, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7835] ioctl(4, LOOP_SET_FD, 3 [pid 7836] <... ioctl resumed>) = 0 [pid 7832] close(4 [pid 7831] <... close resumed>) = 0 [pid 7826] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] close(3 [pid 7832] <... close resumed>) = 0 [pid 7831] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7825] <... futex resumed>) = 0 [pid 7836] <... close resumed>) = 0 [pid 7832] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] <... futex resumed>) = 1 [pid 7829] <... futex resumed>) = 0 [pid 7826] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7825] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7836] mkdir("./bus", 0777 [pid 7835] <... ioctl resumed>) = 0 [pid 7832] <... futex resumed>) = 1 [pid 7831] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7830] <... futex resumed>) = 0 [pid 7829] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7835] close(3 [pid 7830] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7835] <... close resumed>) = 0 [pid 7830] <... futex resumed>) = 0 [pid 7829] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... openat resumed>) = 3 [pid 7835] mkdir("./bus", 0777 [pid 7830] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] fstat(3, [pid 7835] <... mkdir resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7835] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7832] creat("./bus", 000 [pid 7831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5077] getdents64(3, [pid 7836] <... mkdir resumed>) = 0 [pid 7832] <... creat resumed>) = 4 [pid 7831] creat("./bus", 000 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7835] <... mount resumed>) = 0 [pid 5077] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7835] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] lstat("./152/binderfs", [pid 7835] <... openat resumed>) = 3 [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7835] chdir("./bus" [pid 5077] unlink("./152/binderfs" [pid 7835] <... chdir resumed>) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7835] ioctl(4, LOOP_CLR_FD [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7835] <... ioctl resumed>) = 0 [ 120.651977][ T7836] loop4: detected capacity change from 0 to 1024 [ 120.654016][ T7835] loop5: detected capacity change from 0 to 1024 [ 120.679832][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.688582][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.696343][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7835] close(4 [pid 7836] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7835] <... close resumed>) = 0 [pid 7832] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] <... creat resumed>) = 4 [pid 7835] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7835] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7833] <... futex resumed>) = 0 [pid 7832] <... futex resumed>) = 1 [pid 7831] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7830] <... futex resumed>) = 0 [pid 7833] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7832] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... futex resumed>) = 1 [pid 7830] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] <... futex resumed>) = 0 [pid 7836] <... mount resumed>) = 0 [pid 7835] <... futex resumed>) = 0 [pid 7833] <... futex resumed>) = 1 [pid 7832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7831] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7830] <... futex resumed>) = 0 [pid 7829] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = 0 [pid 7836] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7835] creat("./bus", 000 [pid 7833] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7832] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7830] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7829] <... futex resumed>) = 0 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7836] <... openat resumed>) = 3 [pid 7835] <... creat resumed>) = 4 [ 120.696725][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.709586][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.721101][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.736943][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.742032][ T7826] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7831] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7825] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7836] chdir("./bus" [pid 7835] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7825] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7836] <... chdir resumed>) = 0 [pid 7825] <... futex resumed>) = 0 [pid 7836] ioctl(4, LOOP_CLR_FD [pid 7825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7836] <... ioctl resumed>) = 0 [pid 7825] <... mmap resumed>) = 0x7fee02e32000 [pid 7836] close(4 [pid 7825] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7836] <... close resumed>) = 0 [pid 7825] <... mprotect resumed>) = 0 [pid 7836] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7825] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7836] <... futex resumed>) = 1 [pid 7836] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] <... clone resumed>, parent_tid=[7838], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7838 [pid 7825] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7825] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7838 attached [pid 7838] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7838] creat("./file1", 000 [pid 7835] <... futex resumed>) = 1 [pid 7833] <... futex resumed>) = 0 [pid 5077] lstat("./152/bus", [pid 7833] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7833] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] <... creat resumed>) = 5 [pid 7838] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7825] <... futex resumed>) = 0 [pid 7838] <... futex resumed>) = 1 [pid 7838] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7835] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7834] <... futex resumed>) = 0 [pid 7826] <... write resumed>) = 57344 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7834] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] <... futex resumed>) = 0 [pid 7834] <... futex resumed>) = 1 [pid 7836] creat("./bus", 000 [pid 7834] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] <... creat resumed>) = 4 [pid 7836] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7834] <... futex resumed>) = 0 [pid 7826] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7836] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7834] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7834] <... futex resumed>) = 0 [pid 7830] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7826] <... futex resumed>) = 0 [pid 7834] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7830] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7825] exit_group(0 [pid 7838] <... futex resumed>) = ? [pid 7830] <... futex resumed>) = 0 [pid 7825] <... exit_group resumed>) = ? [pid 7838] +++ exited with 0 +++ [pid 7830] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7830] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7830] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7839], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7839 [pid 7830] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 120.747985][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.751973][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.770517][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.776245][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.786492][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.788423][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7830] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7839 attached [pid 7839] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7839] creat("./file1", 000 [pid 7833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7833] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7833] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7833] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7833] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7840], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7840 [pid 7833] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7833] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7840 attached [pid 7840] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 5077] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7840] creat("./file1", 000 [pid 7829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7826] +++ exited with 0 +++ [pid 7825] +++ exited with 0 +++ [pid 5077] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7825, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] unlink("./151/binderfs") = 0 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7829] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [ 120.794731][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.809586][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.816969][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.826085][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.828989][ T7832] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.839268][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.840950][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] fstat(4, [pid 7839] <... creat resumed>) = 5 [pid 7834] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7832] <... write resumed>) = 57344 [pid 7830] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7829] <... futex resumed>) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7839] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7839] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7834] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7834] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7834] <... mprotect resumed>) = 0 [pid 7834] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7841], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7841 [pid 7834] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7834] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] getdents64(4, [pid 7829] <... mmap resumed>) = 0x7fee02e32000 [pid 7840] <... creat resumed>) = 5 [pid 7832] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7840] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7840] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7830] exit_group(0 [pid 7839] <... futex resumed>) = ? [pid 7839] +++ exited with 0 +++ [pid 7830] <... exit_group resumed>) = ? [pid 7829] <... mprotect resumed>) = 0 [pid 5077] getdents64(4, ./strace-static-x86_64: Process 7841 attached [pid 7832] <... futex resumed>) = ? [pid 7829] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7841] set_robust_list(0x7fee02e529e0, 24 [pid 7832] +++ exited with 0 +++ [pid 7830] +++ exited with 0 +++ [pid 5077] close(4 [pid 7841] <... set_robust_list resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7830, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./152/binderfs") = 0 [ 120.856081][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.856129][ T9] hfsplus: b-tree write err: -5, ino 4 [ 120.865806][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.877578][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.885574][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.895020][ T7831] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7842 attached [pid 7841] creat("./file1", 000 [pid 7831] <... write resumed>) = 57344 [pid 7829] <... clone resumed>, parent_tid=[7842], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7842 [pid 5077] <... close resumed>) = 0 [pid 7842] set_robust_list(0x7fee02e529e0, 24 [pid 7835] <... write resumed>) = 57344 [pid 7842] <... set_robust_list resumed>) = 0 [pid 7835] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7831] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rmdir("./152/bus" [pid 7833] exit_group(0 [pid 7840] <... futex resumed>) = ? [pid 7833] <... exit_group resumed>) = ? [pid 7840] +++ exited with 0 +++ [pid 7834] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... umount2 resumed>) = 0 [pid 7842] creat("./file1", 000 [pid 7835] <... futex resumed>) = ? [pid 7831] <... futex resumed>) = 0 [pid 7829] <... futex resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 7831] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7829] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7842] <... creat resumed>) = 5 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./151/bus", [pid 7842] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7841] <... creat resumed>) = 5 [pid 7835] +++ exited with 0 +++ [pid 7833] +++ exited with 0 +++ [pid 5077] getdents64(3, [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7842] <... futex resumed>) = 1 [pid 7841] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7833, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7842] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7841] <... futex resumed>) = 0 [pid 7829] exit_group(0 [pid 7842] <... futex resumed>) = ? [pid 7841] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... futex resumed>) = ? [pid 7829] <... exit_group resumed>) = ? [pid 7842] +++ exited with 0 +++ [pid 7831] +++ exited with 0 +++ [pid 7829] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7829, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./153/binderfs") = 0 [ 120.902858][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.904086][ T52] hfsplus: b-tree write err: -5, ino 4 [ 120.910706][ T7835] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.923883][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.943369][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.951338][ T11] hfsplus: b-tree write err: -5, ino 4 [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] unlink("./153/binderfs") = 0 [pid 5081] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 5077] rmdir("./152") = 0 [pid 5077] mkdir("./153", 0777) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... close resumed>) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7843 [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./153/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./152/bus", [pid 5074] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] fstat(4, [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] fstat(4, [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] fstat(4, [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./153/bus"./strace-static-x86_64: Process 7843 attached ) = 0 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] close(4 [pid 7843] set_robust_list(0x555556b055e0, 24 [pid 5076] getdents64(3, [pid 5075] getdents64(4, [pid 7843] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 7843] chdir("./153" [pid 5076] close(3 [pid 5081] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./151/bus" [pid 7843] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./153" [pid 5081] lstat("./153/bus", [pid 5075] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7843] <... prctl resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5074] getdents64(3, [pid 7843] setpgid(0, 0 [pid 5081] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] mkdir("./154", 0777 [pid 5075] <... close resumed>) = 0 [pid 7843] <... setpgid resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] rmdir("./152/bus" [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 7843] <... openat resumed>) = 3 [pid 7836] <... write resumed>) = 57344 [pid 5081] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 7843] write(3, "1000", 4 [pid 7836] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] fstat(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./151" [pid 7843] <... write resumed>) = 4 [pid 7836] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 7843] close(3 [pid 7836] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7834] exit_group(0 [pid 5081] getdents64(4, [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("./152", 0777 [pid 7843] <... close resumed>) = 0 [pid 7841] <... futex resumed>) = ? [pid 7836] <... futex resumed>) = ? [pid 7834] <... exit_group resumed>) = ? [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./152" [pid 5074] <... mkdir resumed>) = 0 [pid 7836] +++ exited with 0 +++ [pid 5081] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./153", 0777 [pid 5074] <... openat resumed>) = 3 [pid 5081] close(4 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] rmdir("./153/bus" [pid 5075] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5081] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5081] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7844 [pid 5081] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] rmdir("./153" [pid 7843] symlink("/dev/binderfs", "./binderfs" [pid 7841] +++ exited with 0 +++ [pid 7834] +++ exited with 0 +++ [pid 5081] <... rmdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7845 [pid 5081] mkdir("./154", 0777 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7834, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] <... mkdir resumed>) = 0 [pid 7843] <... symlink resumed>) = 0 [pid 7843] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7843] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7846 [pid 7843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5080] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7843] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5081] close(3 [pid 5080] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7843] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 3 [ 120.956088][ T7836] hfsplus: request for non-existent node 16715520 in B*Tree [ 120.965161][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] fstat(3, [pid 7843] <... mprotect resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7843] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7847 [pid 5080] getdents64(3, ./strace-static-x86_64: Process 7846 attached 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7846] set_robust_list(0x555556b055e0, 24 [pid 7843] <... clone resumed>, parent_tid=[7848], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7848 [pid 5080] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7846] <... set_robust_list resumed>) = 0 [pid 7843] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7846] chdir("./154" [pid 7843] <... futex resumed>) = 0 [pid 5080] lstat("./152/binderfs", [pid 7846] <... chdir resumed>) = 0 [pid 7843] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 7844 attached [pid 7846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] unlink("./152/binderfs" [pid 7846] <... prctl resumed>) = 0 [pid 7844] set_robust_list(0x555556b055e0, 24 [pid 7846] setpgid(0, 0 [pid 7844] <... set_robust_list resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7847 attached [pid 7846] <... setpgid resumed>) = 0 [pid 7844] chdir("./152" [pid 5080] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7847] set_robust_list(0x555556b055e0, 24 [pid 7846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7844] <... chdir resumed>) = 0 [pid 7847] <... set_robust_list resumed>) = 0 [pid 7846] <... openat resumed>) = 3 [pid 7844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7847] chdir("./154" [pid 7846] write(3, "1000", 4 [pid 7844] <... prctl resumed>) = 0 [pid 7847] <... chdir resumed>) = 0 [pid 7846] <... write resumed>) = 4 [pid 7844] setpgid(0, 0 [pid 7847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7846] close(3 [pid 7844] <... setpgid resumed>) = 0 [pid 7847] <... prctl resumed>) = 0 [pid 7846] <... close resumed>) = 0 [pid 7844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7847] setpgid(0, 0 [pid 7846] symlink("/dev/binderfs", "./binderfs" [pid 7844] <... openat resumed>) = 3 [pid 7847] <... setpgid resumed>) = 0 [pid 7846] <... symlink resumed>) = 0 [pid 7844] write(3, "1000", 4 [pid 7847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7846] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] <... write resumed>) = 4 [pid 7847] <... openat resumed>) = 3 [pid 7846] <... futex resumed>) = 0 [pid 7844] close(3 [pid 7847] write(3, "1000", 4 [pid 7846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7844] <... close resumed>) = 0 [pid 7847] <... write resumed>) = 4 [pid 7846] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7844] symlink("/dev/binderfs", "./binderfs" [pid 7847] close(3 [pid 7846] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7844] <... symlink resumed>) = 0 [pid 7847] <... close resumed>) = 0 [pid 7846] <... mprotect resumed>) = 0 [pid 7844] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7847] symlink("/dev/binderfs", "./binderfs" [pid 7846] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7844] <... futex resumed>) = 0 [pid 7847] <... symlink resumed>) = 0 [pid 7844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7847] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7846] <... clone resumed>, parent_tid=[7849], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7849 [pid 7844] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7847] <... futex resumed>) = 0 [pid 7846] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7846] <... futex resumed>) = 0 [pid 7844] <... mprotect resumed>) = 0 [pid 7847] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7846] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7844] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7847] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7844] <... clone resumed>, parent_tid=[7850], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7850 [pid 7847] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7844] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7847] <... clone resumed>, parent_tid=[7851], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7851 [pid 7844] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7847] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7847] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] <... umount2 resumed>) = 0 [pid 5080] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7845 attached ) = -1 EINVAL (Invalid argument) [pid 5080] lstat("./152/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7845] set_robust_list(0x555556b055e0, 24) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7849 attached [pid 5080] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7850 attached [pid 7849] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... openat resumed>) = 4 [pid 7845] chdir("./153" [pid 5080] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7845] <... chdir resumed>) = 0 [pid 5080] getdents64(4, [pid 7850] set_robust_list(0x7fee0b1f39e0, 24 [pid 7849] <... set_robust_list resumed>) = 0 [pid 7845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7850] <... set_robust_list resumed>) = 0 [pid 7849] memfd_create("syzkaller", 0 [pid 7845] <... prctl resumed>) = 0 [pid 5080] getdents64(4, [pid 7850] memfd_create("syzkaller", 0 [pid 7849] <... memfd_create resumed>) = 3 [pid 7845] setpgid(0, 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7850] <... memfd_create resumed>) = 3 [pid 7849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7845] <... setpgid resumed>) = 0 [pid 5080] close(4 [pid 7850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7849] <... mmap resumed>) = 0x7fee02dd3000 [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7848 attached [pid 7850] <... mmap resumed>) = 0x7fee02dd3000 [pid 7849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] rmdir("./152/bus"./strace-static-x86_64: Process 7851 attached [pid 7850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7848] set_robust_list(0x7fee0b1f39e0, 24 [pid 7845] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 7845] write(3, "1000", 4 [pid 7848] <... set_robust_list resumed>) = 0 [pid 5080] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7848] memfd_create("syzkaller", 0 [pid 7845] <... write resumed>) = 4 [pid 5080] close(3 [pid 7851] set_robust_list(0x7fee0b1f39e0, 24 [pid 7848] <... memfd_create resumed>) = 3 [pid 7845] close(3 [pid 5080] <... close resumed>) = 0 [pid 7851] <... set_robust_list resumed>) = 0 [pid 7849] <... write resumed>) = 524288 [pid 7848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7845] <... close resumed>) = 0 [pid 5080] rmdir("./152" [pid 7851] memfd_create("syzkaller", 0 [pid 7848] <... mmap resumed>) = 0x7fee02dd3000 [pid 7845] symlink("/dev/binderfs", "./binderfs" [pid 7851] <... memfd_create resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 [pid 7850] <... write resumed>) = 524288 [pid 7849] munmap(0x7fee02dd3000, 524288 [pid 7850] munmap(0x7fee02dd3000, 524288 [pid 7849] <... munmap resumed>) = 0 [pid 7848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7845] <... symlink resumed>) = 0 [pid 5080] mkdir("./153", 0777 [pid 7850] <... munmap resumed>) = 0 [pid 7851] <... mmap resumed>) = 0x7fee02dd3000 [pid 7845] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7849] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5080] <... mkdir resumed>) = 0 [pid 7850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7849] ioctl(4, LOOP_SET_FD, 3 [pid 7851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7850] ioctl(4, LOOP_SET_FD, 3 [pid 7848] <... write resumed>) = 524288 [pid 7845] <... futex resumed>) = 0 [ 121.024673][ T11] hfsplus: b-tree write err: -5, ino 4 [ 121.062207][ T7849] loop2: detected capacity change from 0 to 1024 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7851] <... write resumed>) = 524288 [pid 7849] <... ioctl resumed>) = 0 [pid 7848] munmap(0x7fee02dd3000, 524288 [pid 7845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... openat resumed>) = 3 [pid 7851] munmap(0x7fee02dd3000, 524288 [pid 7849] close(3 [pid 7848] <... munmap resumed>) = 0 [pid 7845] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7851] <... munmap resumed>) = 0 [pid 7850] <... ioctl resumed>) = 0 [pid 7850] close(3) = 0 [pid 7850] mkdir("./bus", 0777) = 0 [pid 7848] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7845] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7850] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7851] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7849] <... close resumed>) = 0 [pid 7848] <... openat resumed>) = 4 [pid 7845] <... mprotect resumed>) = 0 [pid 5080] close(3 [pid 7851] <... openat resumed>) = 4 [pid 7849] mkdir("./bus", 0777 [pid 7848] ioctl(4, LOOP_SET_FD, 3 [pid 7845] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... close resumed>) = 0 ./strace-static-x86_64: Process 7852 attached [pid 7851] ioctl(4, LOOP_SET_FD, 3 [pid 7849] <... mkdir resumed>) = 0 [pid 7848] <... ioctl resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7848] close(3) = 0 [pid 7848] mkdir("./bus", 0777) = 0 [pid 7848] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "") = 0 [pid 7848] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7848] chdir("./bus") = 0 [pid 7848] ioctl(4, LOOP_CLR_FD) = 0 [pid 7848] close(4 [pid 7852] set_robust_list(0x7fee0b1f39e0, 24 [pid 7851] <... ioctl resumed>) = 0 [pid 7849] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7848] <... close resumed>) = 0 [pid 7845] <... clone resumed>, parent_tid=[7852], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7852 [pid 7852] <... set_robust_list resumed>) = 0 [pid 7851] close(3 [pid 7850] <... mount resumed>) = 0 [pid 7848] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7845] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7853 ./strace-static-x86_64: Process 7853 attached [pid 7852] memfd_create("syzkaller", 0 [pid 7851] <... close resumed>) = 0 [pid 7850] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7849] <... mount resumed>) = 0 [pid 7848] <... futex resumed>) = 1 [pid 7845] <... futex resumed>) = 0 [pid 7843] <... futex resumed>) = 0 [pid 7852] <... memfd_create resumed>) = 3 [pid 7851] mkdir("./bus", 0777 [pid 7848] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7845] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7843] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7851] <... mkdir resumed>) = 0 [pid 7850] <... openat resumed>) = 3 [pid 7849] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7843] <... futex resumed>) = 0 [pid 7852] <... mmap resumed>) = 0x7fee02dd3000 [pid 7851] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7850] chdir("./bus" [pid 7853] set_robust_list(0x555556b055e0, 24 [pid 7849] <... openat resumed>) = 3 [pid 7848] creat("./bus", 000 [pid 7843] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] <... set_robust_list resumed>) = 0 [pid 7850] <... chdir resumed>) = 0 [pid 7849] chdir("./bus" [pid 7853] chdir("./153" [pid 7850] ioctl(4, LOOP_CLR_FD [pid 7849] <... chdir resumed>) = 0 [pid 7848] <... creat resumed>) = 4 [pid 7853] <... chdir resumed>) = 0 [pid 7850] <... ioctl resumed>) = 0 [pid 7849] ioctl(4, LOOP_CLR_FD [pid 7848] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7850] close(4 [pid 7849] <... ioctl resumed>) = 0 [pid 7848] <... futex resumed>) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7853] <... prctl resumed>) = 0 [pid 7852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7850] <... close resumed>) = 0 [ 121.072175][ T7850] loop0: detected capacity change from 0 to 1024 [ 121.087756][ T7848] loop3: detected capacity change from 0 to 1024 [ 121.096202][ T7851] loop5: detected capacity change from 0 to 1024 [pid 7849] close(4 [pid 7848] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7843] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] setpgid(0, 0 [pid 7850] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7849] <... close resumed>) = 0 [pid 7843] <... futex resumed>) = 0 [pid 7853] <... setpgid resumed>) = 0 [pid 7850] <... futex resumed>) = 1 [pid 7849] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] <... futex resumed>) = 0 [pid 7843] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7850] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] <... futex resumed>) = 1 [pid 7846] <... futex resumed>) = 0 [pid 7844] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] <... openat resumed>) = 3 [pid 7850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7849] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7846] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] <... futex resumed>) = 0 [pid 7853] write(3, "1000", 4 [pid 7850] creat("./bus", 000 [pid 7849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7846] <... futex resumed>) = 0 [pid 7844] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] <... write resumed>) = 4 [pid 7850] <... creat resumed>) = 4 [pid 7849] creat("./bus", 000 [pid 7846] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] close(3 [pid 7850] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7849] <... creat resumed>) = 4 [pid 7853] <... close resumed>) = 0 [pid 7850] <... futex resumed>) = 1 [pid 7849] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] <... futex resumed>) = 0 [pid 7853] symlink("/dev/binderfs", "./binderfs" [pid 7850] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] <... futex resumed>) = 1 [pid 7846] <... futex resumed>) = 0 [pid 7844] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] <... symlink resumed>) = 0 [pid 7850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7849] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7846] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] <... futex resumed>) = 0 [pid 7851] <... mount resumed>) = 0 [pid 7853] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... write resumed>) = 524288 [pid 7850] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7846] <... futex resumed>) = 0 [pid 7844] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] <... futex resumed>) = 0 [pid 7849] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7846] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7853] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7853] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7854], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7854 [pid 7852] munmap(0x7fee02dd3000, 524288 [pid 7851] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7853] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7853] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7854 attached [pid 7854] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7854] memfd_create("syzkaller", 0) = 3 [pid 7854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7852] <... munmap resumed>) = 0 [pid 7851] <... openat resumed>) = 3 [ 121.126688][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.139065][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.147945][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.156674][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.157454][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7852] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7851] chdir("./bus" [pid 7854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7854] munmap(0x7fee02dd3000, 524288) = 0 [pid 7854] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7854] ioctl(4, LOOP_SET_FD, 3 [pid 7852] <... openat resumed>) = 4 [pid 7851] <... chdir resumed>) = 0 [pid 7848] <... write resumed>) = 57344 [pid 7846] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7846] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7846] <... futex resumed>) = 0 [pid 7844] <... futex resumed>) = 0 [pid 7846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7846] <... mmap resumed>) = 0x7fee02e32000 [pid 7844] <... mmap resumed>) = 0x7fee02e32000 [pid 7846] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7844] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7846] <... mprotect resumed>) = 0 [pid 7844] <... mprotect resumed>) = 0 [pid 7846] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7844] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7846] <... clone resumed>, parent_tid=[7855], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7855 [pid 7844] <... clone resumed>, parent_tid=[7856], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7856 [pid 7846] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7846] <... futex resumed>) = 0 [pid 7844] <... futex resumed>) = 0 [pid 7846] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7844] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7852] ioctl(4, LOOP_SET_FD, 3 [pid 7851] ioctl(4, LOOP_CLR_FD [pid 7848] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7843] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7848] <... futex resumed>) = 0 [pid 7843] <... futex resumed>) = 0 [pid 7851] <... ioctl resumed>) = 0 [pid 7843] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7848] creat("./file1", 000 [pid 7851] close(4 [pid 7848] <... creat resumed>) = 5 ./strace-static-x86_64: Process 7856 attached [pid 7852] <... ioctl resumed>) = 0 [pid 7851] <... close resumed>) = 0 [pid 7848] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7855 attached [pid 7855] set_robust_list(0x7fee02e529e0, 24) = 0 [ 121.166013][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.172196][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.178979][ T7848] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.190936][ T7854] loop4: detected capacity change from 0 to 1024 [ 121.194627][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.207802][ T7852] loop1: detected capacity change from 0 to 1024 [ 121.216063][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7855] creat("./file1", 000 [pid 7856] set_robust_list(0x7fee02e529e0, 24 [pid 7852] close(3 [pid 7851] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7848] <... futex resumed>) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7856] <... set_robust_list resumed>) = 0 [pid 7852] <... close resumed>) = 0 [pid 7851] <... futex resumed>) = 1 [pid 7848] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7847] <... futex resumed>) = 0 [pid 7843] exit_group(0 [pid 7847] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7856] creat("./file1", 000 [pid 7852] mkdir("./bus", 0777 [pid 7851] creat("./bus", 000 [pid 7847] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7848] <... futex resumed>) = ? [pid 7843] <... exit_group resumed>) = ? [pid 7851] <... creat resumed>) = 4 [pid 7852] <... mkdir resumed>) = 0 [pid 7856] <... creat resumed>) = 5 [pid 7848] +++ exited with 0 +++ [pid 7843] +++ exited with 0 +++ [pid 7856] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7851] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7843, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5077] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7856] <... futex resumed>) = 1 [pid 7851] <... futex resumed>) = 1 [pid 7847] <... futex resumed>) = 0 [pid 7844] <... futex resumed>) = 0 [pid 5077] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7847] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7856] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7851] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7847] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7847] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] <... openat resumed>) = 3 [pid 5077] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./153/binderfs") = 0 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7854] <... ioctl resumed>) = 0 [pid 7854] close(3) = 0 [pid 7854] mkdir("./bus", 0777) = 0 [pid 7854] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7855] <... creat resumed>) = 5 [pid 7855] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7846] <... futex resumed>) = 0 [ 121.224013][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.225762][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.248069][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.252416][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.256748][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.270902][ T9] hfsplus: b-tree write err: -5, ino 4 [pid 7855] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7854] <... mount resumed>) = 0 [pid 7854] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7854] chdir("./bus") = 0 [pid 7854] ioctl(4, LOOP_CLR_FD) = 0 [pid 7854] close(4) = 0 [pid 7854] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7853] <... futex resumed>) = 0 [pid 7853] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7853] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7854] creat("./bus", 000) = 4 [pid 7854] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7853] <... futex resumed>) = 0 [pid 7853] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... mount resumed>) = 0 [pid 7853] <... futex resumed>) = 0 [pid 7853] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7854] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7852] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7847] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7852] chdir("./bus" [pid 7850] <... write resumed>) = 57344 [pid 7847] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... chdir resumed>) = 0 [pid 7850] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7847] <... futex resumed>) = 0 [pid 7844] exit_group(0 [pid 7852] ioctl(4, LOOP_CLR_FD [pid 7847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7844] <... exit_group resumed>) = ? [pid 7856] <... futex resumed>) = ? [pid 7850] <... futex resumed>) = ? [pid 7847] <... mmap resumed>) = 0x7fee02e32000 [pid 7856] +++ exited with 0 +++ [ 121.271360][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.285650][ T7850] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.295119][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.303197][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.307738][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.318412][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7852] <... ioctl resumed>) = 0 [pid 7850] +++ exited with 0 +++ [pid 7847] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7844] +++ exited with 0 +++ [pid 5077] <... umount2 resumed>) = 0 [pid 7853] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7852] close(4 [pid 7847] <... mprotect resumed>) = 0 [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7853] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7853] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7853] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7857], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7857 [pid 7853] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7853] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7852] <... close resumed>) = 0 [pid 7851] <... write resumed>) = 57344 [pid 7849] <... write resumed>) = 57344 [pid 7847] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7844, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 7857 attached [pid 7857] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7857] creat("./file1", 000 [pid 7852] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7851] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7849] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7846] exit_group(0 [pid 5077] lstat("./153/bus", [pid 5074] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7858 attached [pid 7852] <... futex resumed>) = 1 [pid 7851] <... futex resumed>) = 0 [pid 7849] <... futex resumed>) = ? [pid 7847] <... clone resumed>, parent_tid=[7858], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7858 [pid 7855] <... futex resumed>) = ? [pid 7846] <... exit_group resumed>) = ? [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7855] +++ exited with 0 +++ [pid 7851] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7847] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7845] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7858] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7858] creat("./file1", 000) = 5 [pid 7849] +++ exited with 0 +++ [pid 7846] +++ exited with 0 +++ [pid 7845] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7847] <... futex resumed>) = 0 [pid 7852] creat("./bus", 000 [pid 7845] <... futex resumed>) = 0 [pid 7847] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7846, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7845] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7852] <... creat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7852] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5074] fstat(3, [pid 5076] fstat(3, [pid 7858] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7858] <... futex resumed>) = 1 [pid 5076] getdents64(3, [pid 7858] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [ 121.329041][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.334407][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.344568][ T7849] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.352551][ T7851] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.360775][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.369033][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7852] <... futex resumed>) = 1 [pid 7847] <... futex resumed>) = 0 [pid 7845] <... futex resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./154/binderfs") = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7852] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7847] exit_group(0 [pid 7858] <... futex resumed>) = ? [pid 7847] <... exit_group resumed>) = ? [pid 7858] +++ exited with 0 +++ [pid 7845] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7852] <... futex resumed>) = 0 [pid 7845] <... futex resumed>) = 1 [pid 7852] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7845] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7851] <... futex resumed>) = ? [pid 5077] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 7851] +++ exited with 0 +++ [pid 7847] +++ exited with 0 +++ [pid 5077] fstat(4, [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7847, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5077] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] lstat("./152/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] getdents64(4, [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5081] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./152/binderfs" [pid 5081] <... openat resumed>) = 3 [pid 5077] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5081] fstat(3, [pid 5077] <... close resumed>) = 0 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] rmdir("./153/bus" [pid 5081] getdents64(3, [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] getdents64(3, [pid 5081] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] close(3 [pid 5081] lstat("./154/binderfs", [pid 5077] <... close resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] rmdir("./153" [pid 5081] unlink("./154/binderfs" [pid 5077] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5077] mkdir("./154", 0777 [pid 5081] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7853] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... openat resumed>) = 3 [pid 5077] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5077] close(3) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7859 ./strace-static-x86_64: Process 7859 attached [pid 7859] set_robust_list(0x555556b055e0, 24) = 0 [pid 7859] chdir("./154") = 0 [pid 7859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7859] setpgid(0, 0) = 0 [pid 7859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7859] write(3, "1000", 4) = 4 [pid 7859] close(3) = 0 [pid 7859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7859] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7859] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [ 121.381617][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.390170][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.398386][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.398913][ T9] hfsplus: b-tree write err: -5, ino 4 [ 121.412412][ T11] hfsplus: b-tree write err: -5, ino 4 [ 121.412533][ T52] hfsplus: b-tree write err: -5, ino 4 [pid 7859] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7860], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7860 [pid 7859] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7859] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7860 attached [pid 7860] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7860] memfd_create("syzkaller", 0) = 3 [pid 7860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./152/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./152/bus") = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./152") = 0 [pid 5074] mkdir("./153", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7845] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... openat resumed>) = 3 [pid 7845] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5081] lstat("./154/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... close resumed>) = 0 [pid 5081] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7861 [pid 5081] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7860] <... write resumed>) = 524288 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./154/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7845] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] close(3) = 0 [pid 7845] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] rmdir("./154" [pid 7845] <... mprotect resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7857] <... creat resumed>) = 5 [pid 7854] <... write resumed>) = 57344 [pid 7845] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] mkdir("./155", 0777 [pid 7857] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7854] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 7854] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7860] munmap(0x7fee02dd3000, 524288 [pid 7857] <... futex resumed>) = 0 [pid 7854] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7845] <... clone resumed>, parent_tid=[7862], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7862 [pid 5081] <... openat resumed>) = 3 [pid 7860] <... munmap resumed>) = 0 [pid 7857] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7845] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7861 attached [pid 7860] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7845] <... futex resumed>) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7861] set_robust_list(0x555556b055e0, 24 [pid 7860] <... openat resumed>) = 4 [pid 7845] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 7861] <... set_robust_list resumed>) = 0 [pid 7860] ioctl(4, LOOP_SET_FD, 3 [pid 7853] exit_group(0 [pid 5081] <... close resumed>) = 0 [pid 7861] chdir("./153" [pid 7857] <... futex resumed>) = ? [pid 7854] <... futex resumed>) = ? [pid 7853] <... exit_group resumed>) = ? [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7861] <... chdir resumed>) = 0 [pid 7857] +++ exited with 0 +++ [pid 7854] +++ exited with 0 +++ [pid 7861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7853] +++ exited with 0 +++ [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7863 ./strace-static-x86_64: Process 7862 attached [pid 7861] <... prctl resumed>) = 0 [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7862] set_robust_list(0x7fee02e529e0, 24 [pid 7861] setpgid(0, 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7853, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7861] <... setpgid resumed>) = 0 [pid 5080] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7862] <... set_robust_list resumed>) = 0 [pid 7861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7862] creat("./file1", 000 [pid 7861] <... openat resumed>) = 3 [pid 5080] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] lstat("./154/bus", ./strace-static-x86_64: Process 7863 attached [pid 7861] write(3, "1000", 4 [pid 5080] <... openat resumed>) = 3 [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7863] set_robust_list(0x555556b055e0, 24 [pid 7861] <... write resumed>) = 4 [pid 5080] fstat(3, [pid 5076] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7863] <... set_robust_list resumed>) = 0 [pid 7861] close(3 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7863] chdir("./155" [pid 7861] <... close resumed>) = 0 [pid 5080] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7863] <... chdir resumed>) = 0 [pid 7861] symlink("/dev/binderfs", "./binderfs" [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7861] <... symlink resumed>) = 0 [pid 5080] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 7863] <... prctl resumed>) = 0 [pid 7861] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] fstat(4, [pid 7863] setpgid(0, 0 [pid 7861] <... futex resumed>) = 0 [pid 5080] lstat("./153/binderfs", [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7863] <... setpgid resumed>) = 0 [pid 7861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] getdents64(4, [pid 7863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7861] <... mmap resumed>) = 0x7fee0b1d3000 [pid 5080] unlink("./153/binderfs" [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7863] <... openat resumed>) = 3 [ 121.425916][ T7854] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.433497][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.443177][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.468708][ T7860] loop3: detected capacity change from 0 to 1024 [pid 7861] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 7863] write(3, "1000", 4 [pid 7861] <... mprotect resumed>) = 0 [pid 7860] <... ioctl resumed>) = 0 [pid 5080] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7863] <... write resumed>) = 4 [pid 7861] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7860] close(3 [pid 7863] close(3 [pid 7860] <... close resumed>) = 0 [pid 7863] <... close resumed>) = 0 [pid 7861] <... clone resumed>, parent_tid=[7864], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7864 [pid 7860] mkdir("./bus", 0777 [pid 7863] symlink("/dev/binderfs", "./binderfs" [pid 7861] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... mkdir resumed>) = 0 [pid 7863] <... symlink resumed>) = 0 [pid 7861] <... futex resumed>) = 0 [pid 7863] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7861] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7860] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7863] <... futex resumed>) = 0 [pid 7863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7860] <... mount resumed>) = 0 [pid 5076] close(4 [pid 7863] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7860] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7863] <... mprotect resumed>) = 0 [pid 7860] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 7863] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] rmdir("./154/bus" [pid 7860] chdir("./bus" [pid 7863] <... clone resumed>, parent_tid=[7865], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7865 [pid 7860] <... chdir resumed>) = 0 [pid 7863] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] ioctl(4, LOOP_CLR_FD [pid 7863] <... futex resumed>) = 0 [pid 7860] <... ioctl resumed>) = 0 [pid 7863] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7860] close(4) = 0 [pid 7860] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7859] <... futex resumed>) = 0 [pid 7860] creat("./bus", 000 [pid 7859] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... creat resumed>) = 4 [pid 7859] <... futex resumed>) = 0 [pid 7860] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7859] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7860] <... futex resumed>) = 0 [pid 7859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7860] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7859] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7864 attached [pid 7859] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 7864] set_robust_list(0x7fee0b1f39e0, 24 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5080] lstat("./153/bus", [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7865 attached [pid 7864] <... set_robust_list resumed>) = 0 [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] close(3 [pid 7865] set_robust_list(0x7fee0b1f39e0, 24 [pid 7864] memfd_create("syzkaller", 0 [pid 7845] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 7865] <... set_robust_list resumed>) = 0 [pid 7864] <... memfd_create resumed>) = 3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./154" [pid 7865] memfd_create("syzkaller", 0 [pid 7864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7865] <... memfd_create resumed>) = 3 [pid 7864] <... mmap resumed>) = 0x7fee02dd3000 [pid 7865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7865] <... mmap resumed>) = 0x7fee02dd3000 [pid 7865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7865] <... write resumed>) = 524288 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5080] fstat(4, [pid 5076] mkdir("./155", 0777 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5080] getdents64(4, [pid 5076] <... mkdir resumed>) = 0 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5080] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5080] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] rmdir("./153/bus" [pid 5076] close(3 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7865] munmap(0x7fee02dd3000, 524288 [pid 7864] <... write resumed>) = 524288 [pid 5080] getdents64(3, [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7865] <... munmap resumed>) = 0 [pid 7864] munmap(0x7fee02dd3000, 524288 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7865] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7864] <... munmap resumed>) = 0 [pid 5080] close(3 [pid 7865] <... openat resumed>) = 4 [pid 7864] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7866 [pid 7865] ioctl(4, LOOP_SET_FD, 3 [pid 7864] <... openat resumed>) = 4 [ 121.489213][ T9] hfsplus: b-tree write err: -5, ino 4 [ 121.504469][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.511771][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.520791][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] rmdir("./153"./strace-static-x86_64: Process 7866 attached [pid 7864] ioctl(4, LOOP_SET_FD, 3 [pid 7862] <... creat resumed>) = 5 [pid 7866] set_robust_list(0x555556b055e0, 24 [pid 7862] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7859] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5080] <... rmdir resumed>) = 0 [pid 7859] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7859] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7859] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7867], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7867 [pid 7859] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7859] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7867 attached [pid 7867] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7867] creat("./file1", 000 [pid 7865] <... ioctl resumed>) = 0 [pid 7865] close(3) = 0 [pid 7865] mkdir("./bus", 0777) = 0 [pid 7864] <... ioctl resumed>) = 0 [pid 7864] close(3) = 0 [pid 7864] mkdir("./bus", 0777) = 0 [pid 7865] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7864] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7862] <... futex resumed>) = 0 [pid 5080] mkdir("./154", 0777 [pid 7862] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] <... mkdir resumed>) = 0 [pid 7866] <... set_robust_list resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7866] chdir("./155") = 0 [pid 5080] ioctl(3, LOOP_CLR_FD [pid 7866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5080] close(3) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b055d0) = 7868 [pid 7866] <... prctl resumed>) = 0 [pid 7866] setpgid(0, 0) = 0 [pid 7865] <... mount resumed>) = 0 [ 121.540456][ T7865] loop5: detected capacity change from 0 to 1024 [ 121.545459][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.547529][ T7864] loop0: detected capacity change from 0 to 1024 [ 121.560753][ T5085] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.579837][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7868 attached [pid 7867] <... creat resumed>) = 5 [pid 7865] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7868] set_robust_list(0x555556b055e0, 24 [pid 7867] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7866] <... openat resumed>) = 3 [pid 7865] <... openat resumed>) = 3 [pid 7864] <... mount resumed>) = 0 [pid 7868] <... set_robust_list resumed>) = 0 [pid 7867] <... futex resumed>) = 1 [pid 7866] write(3, "1000", 4 [pid 7865] chdir("./bus" [pid 7864] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7859] <... futex resumed>) = 0 [pid 7868] chdir("./154" [pid 7867] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7866] <... write resumed>) = 4 [pid 7865] <... chdir resumed>) = 0 [pid 7864] <... openat resumed>) = 3 [pid 7865] ioctl(4, LOOP_CLR_FD [pid 7864] chdir("./bus" [pid 7865] <... ioctl resumed>) = 0 [pid 7864] <... chdir resumed>) = 0 [pid 7865] close(4 [pid 7864] ioctl(4, LOOP_CLR_FD [pid 7865] <... close resumed>) = 0 [pid 7864] <... ioctl resumed>) = 0 [pid 7865] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7864] close(4 [pid 7865] <... futex resumed>) = 1 [pid 7863] <... futex resumed>) = 0 [pid 7865] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7864] <... close resumed>) = 0 [pid 7863] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7864] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = 0 [pid 7865] creat("./bus", 000 [pid 7864] <... futex resumed>) = 1 [pid 7863] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... futex resumed>) = 0 [pid 7865] <... creat resumed>) = 4 [pid 7864] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7861] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7865] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7861] <... futex resumed>) = 0 [pid 7865] <... futex resumed>) = 1 [pid 7864] creat("./bus", 000 [pid 7863] <... futex resumed>) = 0 [pid 7861] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7865] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7864] <... creat resumed>) = 4 [pid 7863] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... chdir resumed>) = 0 [pid 7866] close(3 [pid 7865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7864] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = 0 [pid 7868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7866] <... close resumed>) = 0 [pid 7865] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7864] <... futex resumed>) = 1 [pid 7863] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7861] <... futex resumed>) = 0 [pid 7868] <... prctl resumed>) = 0 [pid 7866] symlink("/dev/binderfs", "./binderfs" [pid 7864] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7861] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] setpgid(0, 0 [pid 7864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7861] <... futex resumed>) = 0 [pid 7866] <... symlink resumed>) = 0 [pid 7868] <... setpgid resumed>) = 0 [pid 7866] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7864] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7861] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7866] <... futex resumed>) = 0 [pid 7868] <... openat resumed>) = 3 [pid 7866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7868] write(3, "1000", 4 [pid 7866] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7852] <... write resumed>) = 57344 [pid 7868] <... write resumed>) = 4 [pid 7866] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [ 121.587706][ T7852] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.606551][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.625146][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.632447][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7852] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] close(3 [pid 7866] <... mprotect resumed>) = 0 [pid 7852] <... futex resumed>) = 0 [pid 7845] exit_group(0 [pid 7868] <... close resumed>) = 0 [pid 7866] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7862] <... futex resumed>) = ? [pid 7845] <... exit_group resumed>) = ? [pid 7868] symlink("/dev/binderfs", "./binderfs" [pid 7862] +++ exited with 0 +++ ./strace-static-x86_64: Process 7869 attached [pid 7868] <... symlink resumed>) = 0 [pid 7866] <... clone resumed>, parent_tid=[7869], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7869 [pid 7852] +++ exited with 0 +++ [pid 7845] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7845, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./153/binderfs") = 0 [ 121.642717][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.652377][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.657850][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.667343][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.667641][ T52] hfsplus: b-tree write err: -5, ino 4 [ 121.676098][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7869] set_robust_list(0x7fee0b1f39e0, 24 [pid 7868] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7866] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7863] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7863] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7863] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7870], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7870 [pid 7863] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7863] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7870 attached [pid 7869] <... set_robust_list resumed>) = 0 [pid 7868] <... futex resumed>) = 0 [pid 7866] <... futex resumed>) = 0 [pid 7861] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7870] set_robust_list(0x7fee02e529e0, 24 [pid 7869] memfd_create("syzkaller", 0 [pid 7868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7866] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7861] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./153/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7870] <... set_robust_list resumed>) = 0 [pid 7869] <... memfd_create resumed>) = 3 [pid 7868] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7861] <... futex resumed>) = 0 [pid 5075] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./153/bus") = 0 [pid 5075] getdents64(3, [pid 7870] creat("./file1", 000 [pid 7869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7868] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7869] <... mmap resumed>) = 0x7fee02dd3000 [pid 7868] <... mprotect resumed>) = 0 [pid 7861] <... mmap resumed>) = 0x7fee02e32000 [pid 5075] close(3) = 0 [pid 5075] rmdir("./153") = 0 [pid 5075] mkdir("./154", 0777 [pid 7869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7868] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7861] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... mkdir resumed>) = 0 [pid 7861] <... mprotect resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7868] <... clone resumed>, parent_tid=[7871], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7871 [pid 7861] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5075] <... openat resumed>) = 3 [pid 7868] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7868] <... futex resumed>) = 0 [pid 7861] <... clone resumed>, parent_tid=[7872], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7872 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7869] <... write resumed>) = 524288 [pid 7868] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7861] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(3./strace-static-x86_64: Process 7871 attached ) = 0 [pid 7871] set_robust_list(0x7fee0b1f39e0, 24 [pid 7869] munmap(0x7fee02dd3000, 524288 [pid 7861] <... futex resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7871] <... set_robust_list resumed>) = 0 [pid 7869] <... munmap resumed>) = 0 [ 121.681097][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.687548][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.699295][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.705111][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.717289][ T7865] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7861] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7873 attached ./strace-static-x86_64: Process 7872 attached [pid 7871] memfd_create("syzkaller", 0 [pid 7870] <... creat resumed>) = 5 [pid 7869] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7865] <... write resumed>) = 57344 [pid 7863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7873] set_robust_list(0x555556b055e0, 24 [pid 7872] set_robust_list(0x7fee02e529e0, 24 [pid 7870] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... openat resumed>) = 4 [pid 7865] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] <... write resumed>) = 57344 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7873 [pid 7873] <... set_robust_list resumed>) = 0 [pid 7872] <... set_robust_list resumed>) = 0 [pid 7870] <... futex resumed>) = 0 [pid 7869] ioctl(4, LOOP_SET_FD, 3 [pid 7865] <... futex resumed>) = 0 [pid 7863] exit_group(0 [pid 7860] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7873] chdir("./154" [pid 7872] creat("./file1", 000 [pid 7871] <... memfd_create resumed>) = 3 [pid 7864] <... write resumed>) = 57344 [pid 7863] <... exit_group resumed>) = ? [pid 7860] <... futex resumed>) = 0 [pid 7871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7864] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7860] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7871] <... mmap resumed>) = 0x7fee02dd3000 [pid 7864] <... futex resumed>) = 0 [pid 7859] exit_group(0 [pid 7873] <... chdir resumed>) = 0 [pid 7872] <... creat resumed>) = 5 [pid 7869] <... ioctl resumed>) = 0 [pid 7873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7872] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] +++ exited with 0 +++ [pid 7869] close(3 [pid 7867] <... futex resumed>) = ? [pid 7865] +++ exited with 0 +++ [pid 7863] +++ exited with 0 +++ [pid 7860] <... futex resumed>) = ? [pid 7859] <... exit_group resumed>) = ? [pid 7873] <... prctl resumed>) = 0 [pid 7872] <... futex resumed>) = 1 [pid 7869] <... close resumed>) = 0 [pid 7867] +++ exited with 0 +++ [pid 7861] <... futex resumed>) = 0 [pid 7873] setpgid(0, 0 [pid 7872] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7869] mkdir("./bus", 0777 [pid 7861] exit_group(0 [pid 7873] <... setpgid resumed>) = 0 [pid 7872] <... futex resumed>) = ? [pid 7869] <... mkdir resumed>) = 0 [pid 7861] <... exit_group resumed>) = ? [pid 7860] +++ exited with 0 +++ [pid 7859] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7863, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7872] +++ exited with 0 +++ [pid 7871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7869] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 7873] <... openat resumed>) = 3 [pid 5081] <... restart_syscall resumed>) = 0 [pid 7873] write(3, "1000", 4 [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7859, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7869] <... mount resumed>) = 0 [pid 7873] <... write resumed>) = 4 [pid 7869] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7873] close(3 [pid 7869] <... openat resumed>) = 3 [pid 5081] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7873] <... close resumed>) = 0 [pid 7869] chdir("./bus" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7873] symlink("/dev/binderfs", "./binderfs" [pid 7869] <... chdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7873] <... symlink resumed>) = 0 [pid 7869] ioctl(4, LOOP_CLR_FD [pid 5077] <... openat resumed>) = 3 [pid 7873] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] fstat(3, [pid 7873] <... futex resumed>) = 0 [pid 7869] close(4 [pid 5081] fstat(3, [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7871] <... write resumed>) = 524288 [pid 7869] <... close resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(3, [pid 7871] munmap(0x7fee02dd3000, 524288 [pid 7864] +++ exited with 0 +++ [pid 7861] +++ exited with 0 +++ [pid 5081] getdents64(3, [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7871] <... munmap resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7861, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7871] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7871] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] lstat("./154/binderfs", [pid 5074] <... restart_syscall resumed>) = 0 [ 121.748499][ T7864] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.749310][ T7860] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.765705][ T7869] loop2: detected capacity change from 0 to 1024 [pid 7873] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7871] ioctl(4, LOOP_SET_FD, 3 [pid 7869] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./155/binderfs", [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7873] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7869] <... futex resumed>) = 1 [pid 7866] <... futex resumed>) = 0 [pid 7873] <... mprotect resumed>) = 0 [pid 7869] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7866] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7873] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7866] <... futex resumed>) = 0 [pid 7869] creat("./bus", 000 [pid 7866] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7873] <... clone resumed>, parent_tid=[7874], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7874 [pid 7869] <... creat resumed>) = 4 [pid 7873] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7873] <... futex resumed>) = 0 [pid 7869] <... futex resumed>) = 1 [pid 7866] <... futex resumed>) = 0 [pid 7873] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7869] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7866] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7866] <... futex resumed>) = 0 [pid 7869] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7866] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7874 attached [pid 7871] <... ioctl resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] unlink("./154/binderfs" [pid 7874] set_robust_list(0x7fee0b1f39e0, 24 [pid 7871] close(3 [pid 5081] unlink("./155/binderfs" [pid 5077] <... unlink resumed>) = 0 [pid 5074] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7874] <... set_robust_list resumed>) = 0 [pid 7871] <... close resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7874] memfd_create("syzkaller", 0 [pid 7871] mkdir("./bus", 0777 [pid 5081] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7874] <... memfd_create resumed>) = 3 [pid 7871] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7871] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5074] fstat(3, [pid 7874] <... mmap resumed>) = 0x7fee02dd3000 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7871] <... mount resumed>) = 0 [pid 5074] unlink("./153/binderfs" [pid 7871] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 7871] <... openat resumed>) = 3 [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7871] chdir("./bus" [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7871] <... chdir resumed>) = 0 [ 121.791697][ T7871] loop4: detected capacity change from 0 to 1024 [ 121.797605][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.805842][ T52] hfsplus: b-tree write err: -5, ino 4 [ 121.805948][ T33] hfsplus: b-tree write err: -5, ino 4 [ 121.830450][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] lstat("./154/bus", [pid 7871] ioctl(4, LOOP_CLR_FD [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7871] <... ioctl resumed>) = 0 [pid 7871] close(4) = 0 [pid 7871] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7871] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7874] <... write resumed>) = 524288 [pid 7874] munmap(0x7fee02dd3000, 524288) = 0 [pid 7874] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7874] close(3) = 0 [pid 7874] mkdir("./bus", 0777) = 0 [pid 7874] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7868] <... futex resumed>) = 0 [pid 7868] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5077] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7866] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5077] <... openat resumed>) = 4 [pid 7871] <... futex resumed>) = 0 [pid 7868] <... futex resumed>) = 1 [pid 7866] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] close(4) = 0 [pid 5077] rmdir("./154/bus") = 0 [pid 5077] getdents64(3, [pid 7874] <... mount resumed>) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7871] creat("./bus", 000 [pid 7868] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7866] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] close(3 [pid 7874] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7871] <... creat resumed>) = 4 [pid 7866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... close resumed>) = 0 [pid 7874] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] rmdir("./154" [pid 7874] chdir("./bus" [pid 5081] lstat("./155/bus", [pid 5077] <... rmdir resumed>) = 0 [pid 7874] <... chdir resumed>) = 0 [pid 7871] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] mkdir("./155", 0777 [pid 5074] <... umount2 resumed>) = 0 [pid 7874] ioctl(4, LOOP_CLR_FD [pid 7871] <... futex resumed>) = 1 [pid 7868] <... futex resumed>) = 0 [pid 7866] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mkdir resumed>) = 0 [pid 7874] <... ioctl resumed>) = 0 [pid 7871] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7868] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7866] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 121.838489][ T7874] loop1: detected capacity change from 0 to 1024 [ 121.845886][ T9] hfsplus: b-tree write err: -5, ino 4 [ 121.865605][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.872923][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.883843][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7874] close(4 [pid 5081] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 7874] <... close resumed>) = 0 [pid 7871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7869] <... write resumed>) = 57344 [pid 7868] <... futex resumed>) = 0 [pid 7866] <... mprotect resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7874] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7869] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7866] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] fstat(4, [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] lstat("./153/bus", [pid 7874] <... futex resumed>) = 1 [pid 7873] <... futex resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] close(3 [pid 7874] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] getdents64(4, [pid 5077] <... close resumed>) = 0 [pid 7869] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7873] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7869] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7866] <... clone resumed>, parent_tid=[7875], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7875 [pid 5081] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7876 [pid 5081] close(4) = 0 [pid 5081] rmdir("./155/bus") = 0 [pid 5081] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./155") = 0 ./strace-static-x86_64: Process 7875 attached [pid 5081] mkdir("./156", 0777 [pid 7875] set_robust_list(0x7fee02e529e0, 24 [pid 5081] <... mkdir resumed>) = 0 [pid 7875] <... set_robust_list resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7875] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7876 attached [pid 5081] ioctl(3, LOOP_CLR_FD [pid 7876] set_robust_list(0x555556b055e0, 24 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7876] <... set_robust_list resumed>) = 0 [pid 5081] close(3 [pid 7876] chdir("./155" [pid 5081] <... close resumed>) = 0 [pid 7876] <... chdir resumed>) = 0 [pid 7874] <... futex resumed>) = 0 [pid 7873] <... futex resumed>) = 1 [pid 7866] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7876] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7875] <... futex resumed>) = 0 [pid 7874] creat("./bus", 000 [pid 7873] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7866] <... futex resumed>) = 1 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7876] <... prctl resumed>) = 0 [pid 7875] creat("./file1", 000 [pid 7874] <... creat resumed>) = 4 [pid 7866] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7877 [pid 5074] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7876] setpgid(0, 0 [pid 7875] <... creat resumed>) = 5 [pid 7874] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] <... setpgid resumed>) = 0 [pid 7875] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7874] <... futex resumed>) = 1 [pid 7873] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7877 attached [pid 7876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7875] <... futex resumed>) = 1 [pid 7874] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7873] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7866] <... futex resumed>) = 0 [pid 5074] fstat(4, [pid 7877] set_robust_list(0x555556b055e0, 24 [pid 7876] <... openat resumed>) = 3 [pid 7875] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7873] <... futex resumed>) = 0 [pid 7866] exit_group(0 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7877] <... set_robust_list resumed>) = 0 [pid 7876] write(3, "1000", 4 [pid 7875] <... futex resumed>) = ? [ 121.891132][ T7869] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.910137][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.929357][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7874] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7873] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7869] <... futex resumed>) = ? [pid 7866] <... exit_group resumed>) = ? [pid 5074] getdents64(4, [pid 7877] chdir("./156" [pid 7876] <... write resumed>) = 4 [pid 7875] +++ exited with 0 +++ [pid 7869] +++ exited with 0 +++ [pid 7877] <... chdir resumed>) = 0 [pid 7876] close(3 [pid 7866] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7876] <... close resumed>) = 0 [pid 7877] <... prctl resumed>) = 0 [pid 7876] symlink("/dev/binderfs", "./binderfs" [pid 7877] setpgid(0, 0 [pid 7876] <... symlink resumed>) = 0 [pid 7877] <... setpgid resumed>) = 0 [pid 7876] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7876] <... futex resumed>) = 0 [pid 7877] <... openat resumed>) = 3 [pid 7876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7877] write(3, "1000", 4 [pid 7876] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7877] <... write resumed>) = 4 [pid 7876] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7877] close(3 [pid 7876] <... mprotect resumed>) = 0 [pid 7877] <... close resumed>) = 0 [pid 7876] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7876] <... clone resumed>, parent_tid=[7878], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7878 [pid 7877] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7878 attached [pid 7877] <... futex resumed>) = 0 [pid 7876] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7866, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7868] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] getdents64(4, [pid 7877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7876] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7877] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7877] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7877] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7879], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7879 [pid 7877] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7877] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7879 attached [pid 7879] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7879] memfd_create("syzkaller", 0) = 3 [pid 7879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7868] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7879] <... mmap resumed>) = 0x7fee02dd3000 [pid 7868] <... futex resumed>) = 0 [pid 7878] set_robust_list(0x7fee0b1f39e0, 24 [pid 7868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] close(4 [pid 7878] <... set_robust_list resumed>) = 0 [pid 7868] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... close resumed>) = 0 [pid 7879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7878] memfd_create("syzkaller", 0 [pid 7868] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7878] <... memfd_create resumed>) = 3 [pid 7868] <... mprotect resumed>) = 0 [pid 5074] rmdir("./153/bus" [pid 7879] <... write resumed>) = 524288 [pid 7879] munmap(0x7fee02dd3000, 524288) = 0 [pid 7879] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7879] ioctl(4, LOOP_SET_FD, 3 [pid 7868] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5076] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 7878] <... mmap resumed>) = 0x7fee02dd3000 [ 121.931527][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.949867][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.958085][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.969737][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.977885][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7873] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7880 attached [pid 7880] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7880] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7878] <... write resumed>) = 524288 [pid 7873] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7868] <... clone resumed>, parent_tid=[7880], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7880 [pid 7871] <... write resumed>) = 57344 [pid 7879] <... ioctl resumed>) = 0 [pid 7879] close(3) = 0 [pid 7879] mkdir("./bus", 0777) = 0 [pid 7879] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7878] munmap(0x7fee02dd3000, 524288) = 0 [pid 7878] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7878] ioctl(4, LOOP_SET_FD, 3 [pid 7873] <... futex resumed>) = 0 [pid 7871] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7878] <... ioctl resumed>) = 0 [pid 7878] close(3) = 0 [pid 7878] mkdir("./bus", 0777) = 0 [pid 7878] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7873] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7873] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7881], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7881 [pid 7873] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] <... futex resumed>) = 0 [pid 7868] <... futex resumed>) = 1 [pid 5076] fstat(3, [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 7881 attached [pid 7880] <... futex resumed>) = 0 [pid 7873] <... futex resumed>) = 0 [pid 7871] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7868] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] rmdir("./153" [pid 7880] creat("./file1", 000 [pid 7873] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7880] <... creat resumed>) = 5 [pid 7880] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7880] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7879] <... mount resumed>) = 0 [pid 7868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] getdents64(3, [pid 7868] exit_group(0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5074] <... rmdir resumed>) = 0 [pid 7881] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7880] <... futex resumed>) = ? [pid 7879] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7874] <... write resumed>) = 57344 [pid 7871] <... futex resumed>) = ? [pid 7868] <... exit_group resumed>) = ? [pid 5076] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./154", 0777 [pid 7881] creat("./file1", 000 [pid 7880] +++ exited with 0 +++ [pid 7874] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] +++ exited with 0 +++ [pid 7868] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 7881] <... creat resumed>) = 5 [pid 7879] <... openat resumed>) = 3 [pid 7874] <... futex resumed>) = 0 [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7868, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] lstat("./155/binderfs", [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7881] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7879] chdir("./bus" [pid 7874] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7881] <... futex resumed>) = 1 [pid 7879] <... chdir resumed>) = 0 [pid 7873] <... futex resumed>) = 0 [pid 5076] unlink("./155/binderfs" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7881] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7879] ioctl(4, LOOP_CLR_FD [pid 7873] exit_group(0 [pid 5080] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7881] <... futex resumed>) = ? [pid 7879] <... ioctl resumed>) = 0 [pid 7874] <... futex resumed>) = ? [pid 7873] <... exit_group resumed>) = ? [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 7881] +++ exited with 0 +++ [pid 7879] close(4 [pid 7878] <... mount resumed>) = 0 [pid 7874] +++ exited with 0 +++ [pid 7873] +++ exited with 0 +++ [pid 5080] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 7878] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7873, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7878] <... openat resumed>) = 3 [ 121.985957][ T7871] hfsplus: request for non-existent node 16715520 in B*Tree [ 121.988233][ T7879] loop5: detected capacity change from 0 to 1024 [ 121.995768][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.010083][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.016412][ T7878] loop3: detected capacity change from 0 to 1024 [ 122.019573][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.031715][ T7874] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] <... openat resumed>) = 3 [pid 7878] chdir("./bus") = 0 [pid 5075] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7878] ioctl(4, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7878] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7878] close(4 [pid 5075] <... openat resumed>) = 3 [pid 7878] <... close resumed>) = 0 [pid 5075] fstat(3, [pid 7878] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7878] <... futex resumed>) = 1 [pid 7876] <... futex resumed>) = 0 [pid 5075] getdents64(3, [pid 7878] creat("./bus", 000 [pid 7876] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] fstat(3, [pid 5075] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7878] <... creat resumed>) = 4 [pid 7876] <... futex resumed>) = 0 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7878] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7882 [pid 7879] <... close resumed>) = 0 [pid 7878] <... futex resumed>) = 0 [pid 7876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] lstat("./154/binderfs", [pid 7879] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7878] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7876] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7879] <... futex resumed>) = 1 [pid 7878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7877] <... futex resumed>) = 0 [pid 7876] <... futex resumed>) = 0 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./154/binderfs" [pid 7878] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7877] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7882 attached [pid 7879] creat("./bus", 000 [pid 7877] <... futex resumed>) = 0 [pid 5080] lstat("./154/binderfs", [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7882] set_robust_list(0x555556b055e0, 24 [pid 7879] <... creat resumed>) = 4 [pid 7877] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7882] <... set_robust_list resumed>) = 0 [pid 7879] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./154/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7882] chdir("./154" [pid 7879] <... futex resumed>) = 1 [pid 5080] <... unlink resumed>) = 0 [pid 5076] lstat("./155/bus", [pid 7882] <... chdir resumed>) = 0 [pid 7879] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5080] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7882] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7882] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7882] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] fstat(4, [pid 7882] <... openat resumed>) = 3 [pid 5076] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7882] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 7882] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7882] close(3 [pid 5076] getdents64(4, [pid 7882] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7882] symlink("/dev/binderfs", "./binderfs" [pid 5076] close(4 [pid 7882] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7882] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./155/bus" [pid 7882] <... futex resumed>) = 0 [pid 7877] <... futex resumed>) = 0 [ 122.049806][ T9] hfsplus: b-tree write err: -5, ino 4 [ 122.068545][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.084673][ T9] hfsplus: b-tree write err: -5, ino 4 [ 122.088919][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5076] <... rmdir resumed>) = 0 [pid 7877] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7877] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7879] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 7882] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7879] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5080] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7882] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5080] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7882] <... mprotect resumed>) = 0 [pid 5080] lstat("./154/bus", [pid 5076] <... close resumed>) = 0 [pid 7876] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7876] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7876] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7876] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7883], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7883 [pid 7876] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7876] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7882] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] rmdir("./155" [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./154/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./154/bus") = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./154") = 0 [pid 5075] mkdir("./155", 0777) = 0 [ 122.098264][ T33] hfsplus: b-tree write err: -5, ino 4 [ 122.102843][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.115144][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.125030][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.132321][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.140640][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7877] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7877] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7877] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7877] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7884], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7884 [pid 7877] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7877] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5075] close(3 [pid 5080] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7885 attached [pid 7882] <... clone resumed>, parent_tid=[7885], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7885 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./156", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7886 ./strace-static-x86_64: Process 7884 attached [pid 7884] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7884] creat("./file1", 000 [pid 7885] set_robust_list(0x7fee0b1f39e0, 24 [pid 7882] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7885] <... set_robust_list resumed>) = 0 [pid 7882] <... futex resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 7885] memfd_create("syzkaller", 0 [pid 7882] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5080] fstat(4, [pid 5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7885] <... memfd_create resumed>) = 3 [pid 7878] <... write resumed>) = 57344 [pid 5080] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7878] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] getdents64(4, [pid 5076] <... openat resumed>) = 3 [pid 7885] <... mmap resumed>) = 0x7fee02dd3000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5076] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 7886 attached ./strace-static-x86_64: Process 7883 attached [pid 7883] set_robust_list(0x7fee02e529e0, 24 [pid 7886] set_robust_list(0x555556b055e0, 24 [pid 7883] <... set_robust_list resumed>) = 0 [pid 7883] creat("./file1", 000) = 5 [pid 7885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] getdents64(4, [pid 5076] close(3 [pid 5080] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5080] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] <... close resumed>) = 0 [pid 7886] <... set_robust_list resumed>) = 0 [pid 7885] <... write resumed>) = 524288 [pid 7883] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7878] <... futex resumed>) = 0 [pid 5080] rmdir("./154/bus" [pid 7886] chdir("./155" [pid 7883] <... futex resumed>) = 1 [pid 7876] <... futex resumed>) = 0 [pid 7876] exit_group(0) = ? [pid 7886] <... chdir resumed>) = 0 [pid 7886] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7883] +++ exited with 0 +++ [pid 7886] <... prctl resumed>) = 0 [pid 7886] setpgid(0, 0 [pid 5080] <... rmdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555556b055d0) = 7887 [pid 5080] getdents64(3, [pid 7885] munmap(0x7fee02dd3000, 524288 [pid 5080] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7886] <... setpgid resumed>) = 0 [pid 5080] close(3 [pid 7886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5080] <... close resumed>) = 0 [pid 5080] rmdir("./154" [pid 7886] <... openat resumed>) = 3 [pid 5080] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7887 attached [pid 7886] write(3, "1000", 4 [pid 7878] +++ exited with 0 +++ [pid 7876] +++ exited with 0 +++ [pid 7885] <... munmap resumed>) = 0 [pid 5080] mkdir("./155", 0777 [pid 7886] <... write resumed>) = 4 [pid 7886] close(3) = 0 [pid 7886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7886] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7886] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7886] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7885] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7887] set_robust_list(0x555556b055e0, 24 [pid 5080] <... mkdir resumed>) = 0 [pid 7887] <... set_robust_list resumed>) = 0 [pid 7886] <... clone resumed>, parent_tid=[7888], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7888 [pid 7885] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7888 attached [pid 7887] chdir("./156" [pid 7886] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] ioctl(4, LOOP_SET_FD, 3 [pid 7884] <... creat resumed>) = 5 [pid 7879] <... write resumed>) = 57344 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7876, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 122.148085][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.156338][ T7878] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.163863][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.181405][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.191975][ T7879] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7888] set_robust_list(0x7fee0b1f39e0, 24 [pid 7887] <... chdir resumed>) = 0 [pid 7886] <... futex resumed>) = 0 [pid 7884] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7888] <... set_robust_list resumed>) = 0 [pid 7886] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7884] <... futex resumed>) = 0 [pid 7877] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7888] memfd_create("syzkaller", 0 [pid 7884] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7888] <... memfd_create resumed>) = 3 [pid 7888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7885] <... ioctl resumed>) = 0 [pid 7879] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... openat resumed>) = 3 [pid 5077] restart_syscall(<... resuming interrupted clone ...> [pid 7877] exit_group(0 [pid 7887] <... prctl resumed>) = 0 [pid 7885] close(3 [pid 7884] <... futex resumed>) = ? [pid 7879] <... futex resumed>) = ? [pid 7877] <... exit_group resumed>) = ? [pid 5080] ioctl(3, LOOP_CLR_FD [pid 5077] <... restart_syscall resumed>) = 0 [pid 7888] <... write resumed>) = 524288 [pid 7887] setpgid(0, 0 [pid 7885] <... close resumed>) = 0 [pid 7884] +++ exited with 0 +++ [pid 7879] +++ exited with 0 +++ [pid 5080] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7888] munmap(0x7fee02dd3000, 524288 [pid 7887] <... setpgid resumed>) = 0 [pid 7885] mkdir("./bus", 0777 [pid 7877] +++ exited with 0 +++ [pid 5080] close(3 [pid 7888] <... munmap resumed>) = 0 [pid 7887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7885] <... mkdir resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7877, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5080] <... close resumed>) = 0 [pid 7887] <... openat resumed>) = 3 [pid 7885] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7887] write(3, "1000", 4 [pid 7885] <... mount resumed>) = 0 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7888] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7889 attached [pid 7887] <... write resumed>) = 4 [pid 7885] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5080] <... clone resumed>, child_tidptr=0x555556b055d0) = 7889 [pid 5077] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7887] close(3 [pid 7885] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... openat resumed>) = 3 [pid 7887] <... close resumed>) = 0 [pid 7885] chdir("./bus" [pid 5081] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] fstat(3, [pid 7887] symlink("/dev/binderfs", "./binderfs" [pid 7885] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7889] set_robust_list(0x555556b055e0, 24 [pid 7888] <... openat resumed>) = 4 [pid 7887] <... symlink resumed>) = 0 [pid 7885] ioctl(4, LOOP_CLR_FD [pid 5081] fstat(3, [pid 5077] getdents64(3, [pid 7887] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... ioctl resumed>) = 0 [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7888] ioctl(4, LOOP_SET_FD, 3 [pid 7889] <... set_robust_list resumed>) = 0 [pid 7887] <... futex resumed>) = 0 [pid 7885] close(4 [pid 5081] getdents64(3, [pid 5077] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7885] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7887] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7885] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] lstat("./155/binderfs", [pid 7887] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7885] <... futex resumed>) = 1 [pid 7882] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7887] <... mprotect resumed>) = 0 [pid 7885] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7882] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] lstat("./156/binderfs", [pid 5077] unlink("./155/binderfs" [pid 7887] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7882] <... futex resumed>) = 0 [pid 5081] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5077] <... unlink resumed>) = 0 [pid 7885] creat("./bus", 000 [pid 7882] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] unlink("./156/binderfs" [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7887] <... clone resumed>, parent_tid=[7890], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7890 [pid 7885] <... creat resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 7887] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7887] <... futex resumed>) = 0 [pid 7885] <... futex resumed>) = 1 [pid 7882] <... futex resumed>) = 0 [pid 7887] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7885] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7882] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7882] <... futex resumed>) = 0 [pid 7885] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7882] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7890 attached [pid 7889] chdir("./155" [pid 7888] <... ioctl resumed>) = 0 [pid 7890] set_robust_list(0x7fee0b1f39e0, 24 [pid 7889] <... chdir resumed>) = 0 [pid 7888] close(3 [pid 7890] <... set_robust_list resumed>) = 0 [pid 7889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7888] <... close resumed>) = 0 [pid 7890] memfd_create("syzkaller", 0 [pid 7889] <... prctl resumed>) = 0 [pid 7888] mkdir("./bus", 0777 [pid 7890] <... memfd_create resumed>) = 3 [pid 7889] setpgid(0, 0 [pid 7888] <... mkdir resumed>) = 0 [pid 7890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7889] <... setpgid resumed>) = 0 [ 122.201990][ T7885] loop0: detected capacity change from 0 to 1024 [ 122.226672][ T7888] loop1: detected capacity change from 0 to 1024 [ 122.233651][ T33] hfsplus: b-tree write err: -5, ino 4 [ 122.239701][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7888] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7890] <... mmap resumed>) = 0x7fee02dd3000 [pid 7889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7889] <... openat resumed>) = 3 [pid 7889] write(3, "1000", 4) = 4 [pid 7889] close(3 [pid 7888] <... mount resumed>) = 0 [pid 7889] <... close resumed>) = 0 [pid 7889] symlink("/dev/binderfs", "./binderfs" [pid 7888] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7889] <... symlink resumed>) = 0 [pid 7888] <... openat resumed>) = 3 [pid 7889] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7888] chdir("./bus" [pid 7889] <... futex resumed>) = 0 [pid 7889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7889] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7888] <... chdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5077] <... umount2 resumed>) = 0 [pid 7889] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 7891 attached [pid 7888] ioctl(4, LOOP_CLR_FD [pid 5081] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7889] <... clone resumed>, parent_tid=[7891], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7891 [pid 7889] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7888] <... ioctl resumed>) = 0 [pid 7891] set_robust_list(0x7fee0b1f39e0, 24 [pid 7889] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7888] close(4 [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7890] <... write resumed>) = 524288 [pid 7890] munmap(0x7fee02dd3000, 524288) = 0 [pid 7890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 122.248596][ T9] hfsplus: b-tree write err: -5, ino 4 [ 122.272091][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.279938][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.287669][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.294016][ T7890] loop2: detected capacity change from 0 to 1024 [pid 7890] ioctl(4, LOOP_SET_FD, 3 [pid 7891] <... set_robust_list resumed>) = 0 [pid 7888] <... close resumed>) = 0 [pid 7882] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] lstat("./156/bus", [pid 5077] lstat("./155/bus", [pid 7891] memfd_create("syzkaller", 0 [pid 7888] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7882] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7890] <... ioctl resumed>) = 0 [pid 7890] close(3) = 0 [pid 7890] mkdir("./bus", 0777) = 0 [pid 7890] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7891] <... memfd_create resumed>) = 3 [pid 7888] <... futex resumed>) = 1 [pid 7882] <... futex resumed>) = 0 [pid 5081] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7888] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7886] <... futex resumed>) = 0 [pid 7882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5077] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7891] <... mmap resumed>) = 0x7fee02dd3000 [pid 7886] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7886] <... futex resumed>) = 1 [pid 7882] <... mmap resumed>) = 0x7fee02e32000 [pid 7888] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7891] <... write resumed>) = 524288 [pid 7888] creat("./bus", 000 [pid 7886] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7882] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... openat resumed>) = 4 [pid 5077] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7891] munmap(0x7fee02dd3000, 524288 [pid 7888] <... creat resumed>) = 4 [pid 5077] <... openat resumed>) = 4 [pid 7891] <... munmap resumed>) = 0 [pid 7888] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... write resumed>) = 57344 [pid 7882] <... mprotect resumed>) = 0 [pid 5081] fstat(4, [pid 5077] fstat(4, [pid 7891] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7888] <... futex resumed>) = 1 [pid 7886] <... futex resumed>) = 0 [pid 7885] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7882] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5081] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5077] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7891] <... openat resumed>) = 4 [pid 7888] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7886] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... futex resumed>) = 0 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 7888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7886] <... futex resumed>) = 0 [pid 7885] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7882] <... clone resumed>, parent_tid=[7892], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7892 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7891] ioctl(4, LOOP_SET_FD, 3 [pid 7888] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7886] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7882] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5077] getdents64(4, [pid 7882] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7882] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(4 [pid 5077] close(4 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5081] rmdir("./156/bus" [pid 5077] rmdir("./155/bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5077] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5077] getdents64(3, [pid 5081] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5077] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5077] close(3 [pid 5081] <... close resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 5081] rmdir("./156" [pid 5077] rmdir("./155"./strace-static-x86_64: Process 7892 attached [pid 7891] <... ioctl resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 7892] set_robust_list(0x7fee02e529e0, 24 [pid 7891] close(3 [pid 7892] <... set_robust_list resumed>) = 0 [pid 7891] <... close resumed>) = 0 [pid 7892] creat("./file1", 000 [pid 7891] mkdir("./bus", 0777 [pid 7892] <... creat resumed>) = 5 [pid 7892] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7891] <... mkdir resumed>) = 0 [pid 7892] <... futex resumed>) = 1 [pid 7891] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7892] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7890] <... mount resumed>) = 0 [pid 7882] <... futex resumed>) = 0 [pid 5081] mkdir("./157", 0777 [pid 5077] <... rmdir resumed>) = 0 [pid 7891] <... mount resumed>) = 0 [pid 7890] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7891] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7890] <... openat resumed>) = 3 [pid 7891] <... openat resumed>) = 3 [pid 7890] chdir("./bus" [pid 7891] chdir("./bus" [pid 7890] <... chdir resumed>) = 0 [pid 7891] <... chdir resumed>) = 0 [pid 7890] ioctl(4, LOOP_CLR_FD [ 122.297289][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.309921][ T7885] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.329610][ T7891] loop4: detected capacity change from 0 to 1024 [ 122.337718][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7891] ioctl(4, LOOP_CLR_FD [pid 7890] <... ioctl resumed>) = 0 [pid 7891] <... ioctl resumed>) = 0 [pid 7890] close(4 [pid 7882] exit_group(0 [pid 5081] <... mkdir resumed>) = 0 [pid 5077] mkdir("./156", 0777 [pid 7891] close(4 [pid 7890] <... close resumed>) = 0 [pid 7890] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7890] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7892] <... futex resumed>) = ? [pid 7882] <... exit_group resumed>) = ? [pid 5081] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7892] +++ exited with 0 +++ [pid 7891] <... close resumed>) = 0 [pid 7887] <... futex resumed>) = 0 [pid 7886] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7885] <... futex resumed>) = ? [pid 5081] <... openat resumed>) = 3 [pid 5077] <... mkdir resumed>) = 0 [pid 7891] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7887] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7886] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] +++ exited with 0 +++ [pid 7882] +++ exited with 0 +++ [pid 7891] <... futex resumed>) = 1 [pid 7890] <... futex resumed>) = 0 [pid 7889] <... futex resumed>) = 0 [pid 7887] <... futex resumed>) = 1 [pid 7886] <... futex resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7891] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7890] creat("./bus", 000 [pid 7889] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7888] <... write resumed>) = 57344 [pid 7887] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5077] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7882, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7890] <... creat resumed>) = 4 [pid 7889] <... futex resumed>) = 0 [pid 7888] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7886] <... mmap resumed>) = 0x7fee02e32000 [pid 5081] close(3 [pid 5077] ioctl(3, LOOP_CLR_FD [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7891] creat("./bus", 000 [pid 7890] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7888] <... futex resumed>) = 0 [pid 7886] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... close resumed>) = 0 [pid 5077] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5074] <... restart_syscall resumed>) = 0 [pid 7891] <... creat resumed>) = 4 [pid 7890] <... futex resumed>) = 1 [pid 7888] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7887] <... futex resumed>) = 0 [pid 7886] <... mprotect resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] close(3 [pid 7891] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7887] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7886] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7887] <... futex resumed>) = 0 [pid 5077] <... close resumed>) = 0 [pid 7891] <... futex resumed>) = 1 [pid 7890] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7889] <... futex resumed>) = 0 [pid 7887] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x555556b055d0) = 7893 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7891] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7889] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7893 attached [pid 7893] set_robust_list(0x555556b055e0, 24) = 0 [pid 7893] chdir("./157") = 0 [pid 7893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7893] setpgid(0, 0) = 0 [ 122.346000][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.354172][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.361464][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.371897][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.380587][ T7888] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 7894 attached ) = 3 [pid 7894] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7894] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7893] write(3, "1000", 4) = 4 [pid 7893] close(3) = 0 [pid 7893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7893] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7889] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7886] <... clone resumed>, parent_tid=[7894], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7894 [pid 5074] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... clone resumed>, child_tidptr=0x555556b055d0) = 7895 [pid 7891] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7886] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7894] <... futex resumed>) = 0 [pid 7893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7886] <... futex resumed>) = 1 [pid 5074] <... openat resumed>) = 3 [pid 7894] creat("./file1", 000 [pid 7893] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7886] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7894] <... creat resumed>) = 5 [pid 7893] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7894] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7893] <... mprotect resumed>) = 0 [pid 7894] <... futex resumed>) = 0 [pid 7893] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7894] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7893] <... clone resumed>, parent_tid=[7896], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7896 [pid 7893] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7895 attached [pid 7893] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7895] set_robust_list(0x555556b055e0, 24) = 0 [pid 7895] chdir("./156") = 0 [pid 7895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7895] setpgid(0, 0) = 0 [pid 7895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7895] write(3, "1000", 4) = 4 [pid 7895] close(3) = 0 [pid 7886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] fstat(3, [pid 7895] symlink("/dev/binderfs", "./binderfs" [pid 7886] exit_group(0 [pid 7895] <... symlink resumed>) = 0 [pid 7894] <... futex resumed>) = ? [pid 7888] <... futex resumed>) = ? [pid 7886] <... exit_group resumed>) = ? [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7895] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7894] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 7895] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./154/binderfs", ./strace-static-x86_64: Process 7896 attached [pid 7895] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7888] +++ exited with 0 +++ [pid 7886] +++ exited with 0 +++ [pid 5074] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7896] set_robust_list(0x7fee0b1f39e0, 24 [pid 7895] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7886, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] unlink("./154/binderfs" [pid 7896] <... set_robust_list resumed>) = 0 [pid 7895] <... mprotect resumed>) = 0 [pid 7896] memfd_create("syzkaller", 0 [pid 7895] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... unlink resumed>) = 0 [pid 7896] <... memfd_create resumed>) = 3 [pid 5075] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7895] <... clone resumed>, parent_tid=[7897], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7897 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7896] <... mmap resumed>) = 0x7fee02dd3000 [pid 7895] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7895] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7895] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5075] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./155/binderfs", [pid 7896] <... write resumed>) = 524288 [pid 5075] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] unlink("./155/binderfs") = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] lstat("./154/bus", ./strace-static-x86_64: Process 7897 attached [pid 7897] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7897] memfd_create("syzkaller", 0) = 3 [pid 7897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee02dd3000 [pid 7897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7896] munmap(0x7fee02dd3000, 524288) = 0 [pid 7896] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7896] <... openat resumed>) = 4 [ 122.400528][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.411331][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.427833][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 122.439350][ T6820] hfsplus: b-tree write err: -5, ino 4 [ 122.445990][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7896] ioctl(4, LOOP_SET_FD, 3 [pid 7889] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7887] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7889] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7887] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] <... futex resumed>) = 0 [pid 7887] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7897] <... write resumed>) = 524288 [pid 7887] <... mmap resumed>) = 0x7fee02e32000 [pid 7887] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7887] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7898], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7898 [pid 7887] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7887] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7898 attached [pid 7898] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7898] creat("./file1", 000 [pid 7897] munmap(0x7fee02dd3000, 524288 [pid 7889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] fstat(4, [pid 7889] <... mmap resumed>) = 0x7fee02e32000 [pid 5074] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 7889] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 5074] getdents64(4, [pid 7889] <... mprotect resumed>) = 0 [pid 7897] <... munmap resumed>) = 0 [pid 7897] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7889] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 7889] <... clone resumed>, parent_tid=[7899], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7899 [pid 5074] getdents64(4, [pid 7889] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 7889] <... futex resumed>) = 0 [pid 5074] close(4 [pid 7889] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./154/bus" [pid 7897] <... openat resumed>) = 4 [pid 7897] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x555556b06620 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./154"./strace-static-x86_64: Process 7899 attached ) = 0 [pid 5074] mkdir("./155", 0777 [pid 7899] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7899] creat("./file1", 000 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7897] <... ioctl resumed>) = 0 [pid 7897] close(3) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555556b055d0) = 7900 [pid 7897] mkdir("./bus", 0777) = 0 [pid 7897] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 7900 attached [pid 7900] set_robust_list(0x555556b055e0, 24) = 0 [pid 7898] <... creat resumed>) = 5 [pid 7900] chdir("./155" [pid 7898] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7887] <... futex resumed>) = 0 [pid 7898] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7897] <... mount resumed>) = 0 [pid 7897] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7897] chdir("./bus") = 0 [pid 7897] ioctl(4, LOOP_CLR_FD) = 0 [pid 7897] close(4) = 0 [pid 7897] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... chdir resumed>) = 0 [pid 7899] <... creat resumed>) = 5 [pid 7899] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7889] <... futex resumed>) = 0 [pid 7899] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7895] <... futex resumed>) = 0 [pid 7895] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7895] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7897] <... futex resumed>) = 1 [pid 7897] creat("./bus", 000) = 4 [ 122.447038][ T7896] loop5: detected capacity change from 0 to 1024 [ 122.461267][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.473126][ T7897] loop3: detected capacity change from 0 to 1024 [ 122.492308][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7896] <... ioctl resumed>) = 0 [pid 7896] close(3) = 0 [pid 7896] mkdir("./bus", 0777) = 0 [pid 7897] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7895] <... futex resumed>) = 0 [pid 7895] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7895] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7897] <... futex resumed>) = 1 [pid 7900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7897] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7896] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7900] <... prctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] lstat("./155/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5075] getdents64(4, 0x555556b0e660 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555556b0e660 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 7900] setpgid(0, 0 [pid 5075] rmdir("./155/bus" [pid 7900] <... setpgid resumed>) = 0 [pid 7896] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7896] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(3, [pid 7900] <... openat resumed>) = 3 [pid 7896] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555556b06620 /* 0 entries */, 32768) = 0 [pid 7900] write(3, "1000", 4 [pid 7896] chdir("./bus" [pid 5075] close(3 [pid 7900] <... write resumed>) = 4 [pid 7896] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7900] close(3 [pid 7896] ioctl(4, LOOP_CLR_FD [pid 5075] rmdir("./155" [pid 7900] <... close resumed>) = 0 [pid 7896] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7900] symlink("/dev/binderfs", "./binderfs" [pid 7896] close(4 [pid 5075] mkdir("./156", 0777 [pid 7900] <... symlink resumed>) = 0 [pid 7896] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7896] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7896] <... futex resumed>) = 1 [pid 7893] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7896] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7893] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7893] <... futex resumed>) = 0 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 7900] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7896] creat("./bus", 000 [pid 7893] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] close(3 [pid 7900] <... futex resumed>) = 0 [pid 7896] <... creat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 7900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7896] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7895] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7900] <... mmap resumed>) = 0x7fee0b1d3000 [pid 7896] <... futex resumed>) = 1 [ 122.500364][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.508574][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.515053][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.531997][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7895] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7893] <... futex resumed>) = 0 [pid 7896] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7895] <... futex resumed>) = 0 [pid 7893] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... clone resumed>, child_tidptr=0x555556b055d0) = 7901 [pid 7896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7893] <... futex resumed>) = 0 [pid 7896] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7895] <... mmap resumed>) = 0x7fee02e32000 [pid 7893] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7900] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE [pid 7895] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7900] <... mprotect resumed>) = 0 [pid 7895] <... mprotect resumed>) = 0 [pid 7895] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7902], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7902 [pid 7895] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7895] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7901 attached [pid 7900] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7903], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7903 [pid 7900] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7903 attached [pid 7901] set_robust_list(0x555556b055e0, 24 [pid 7900] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7902 attached [pid 7901] <... set_robust_list resumed>) = 0 [pid 7902] set_robust_list(0x7fee02e529e0, 24 [pid 7901] chdir("./156" [pid 7902] <... set_robust_list resumed>) = 0 [pid 7901] <... chdir resumed>) = 0 [pid 7902] creat("./file1", 000 [pid 7901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7901] setpgid(0, 0) = 0 [pid 7901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7901] write(3, "1000", 4) = 4 [pid 7901] close(3) = 0 [ 122.564070][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.568668][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.571506][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.599927][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.600073][ T7890] hfsplus: request for non-existent node 16715520 in B*Tree [pid 7901] symlink("/dev/binderfs", "./binderfs" [pid 7903] set_robust_list(0x7fee0b1f39e0, 24 [pid 7901] <... symlink resumed>) = 0 [pid 7901] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee0b1d3000 [pid 7901] mprotect(0x7fee0b1d4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7901] clone(child_stack=0x7fee0b1f33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7904], tls=0x7fee0b1f3700, child_tidptr=0x7fee0b1f39d0) = 7904 [pid 7901] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7901] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7903] <... set_robust_list resumed>) = 0 [pid 7891] <... write resumed>) = 57344 [pid 7890] <... write resumed>) = 57344 ./strace-static-x86_64: Process 7904 attached [pid 7904] set_robust_list(0x7fee0b1f39e0, 24) = 0 [pid 7893] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7893] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] memfd_create("syzkaller", 0 [pid 7893] <... futex resumed>) = 0 [pid 7891] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7890] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] <... memfd_create resumed>) = 3 [pid 7893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7904] memfd_create("syzkaller", 0 [pid 7895] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7893] <... mmap resumed>) = 0x7fee02e32000 [pid 7889] exit_group(0 [pid 7887] exit_group(0 [pid 7904] <... memfd_create resumed>) = 3 [pid 7899] <... futex resumed>) = ? [pid 7898] <... futex resumed>) = ? [pid 7893] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE [pid 7889] <... exit_group resumed>) = ? [pid 7887] <... exit_group resumed>) = ? [pid 7904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7899] +++ exited with 0 +++ [pid 7898] +++ exited with 0 +++ [pid 7893] <... mprotect resumed>) = 0 [pid 7891] <... futex resumed>) = ? [pid 7890] <... futex resumed>) = ? [pid 7904] <... mmap resumed>) = 0x7fee02dd3000 [pid 7893] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 7904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7893] <... clone resumed>, parent_tid=[7905], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7905 [pid 7893] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7893] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7903] <... mmap resumed>) = 0x7fee02dd3000 [pid 7891] +++ exited with 0 +++ [pid 7889] +++ exited with 0 +++ [pid 5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7889, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5080] restart_syscall(<... resuming interrupted clone ...> [pid 7890] +++ exited with 0 +++ [pid 7887] +++ exited with 0 +++ [pid 5080] <... restart_syscall resumed>) = 0 [pid 7904] <... write resumed>) = 524288 [pid 7903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5080] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5080] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 122.614832][ T7891] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.620423][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.622941][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.638200][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.646487][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5080] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 7905 attached [pid 7904] munmap(0x7fee02dd3000, 524288 [pid 7903] <... write resumed>) = 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7887, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7904] <... munmap resumed>) = 0 [pid 7903] munmap(0x7fee02dd3000, 524288 [pid 7904] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7903] <... munmap resumed>) = 0 [pid 7904] <... openat resumed>) = 4 [pid 7903] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7904] ioctl(4, LOOP_SET_FD, 3 [pid 7903] <... openat resumed>) = 4 [ 122.658486][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.661504][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.671445][ T7904] loop1: detected capacity change from 0 to 1024 [ 122.674290][ T7902] ------------[ cut here ]------------ [ 122.679844][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.685041][ T7902] WARNING: CPU: 1 PID: 7902 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x3d6/0x510 [ 122.692718][ T7903] loop0: detected capacity change from 0 to 1024 [ 122.702153][ T7902] Modules linked in: [ 122.712456][ T7902] CPU: 1 PID: 7902 Comm: syz-executor192 Not tainted 6.3.0-rc2-syzkaller-00405-ga3671bd86a97 #0 [ 122.715005][ T7896] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.723030][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 122.731452][ T7897] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.740251][ T7902] RIP: 0010:hfsplus_free_extents+0x3d6/0x510 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7905] set_robust_list(0x7fee02e529e0, 24 [pid 7903] ioctl(4, LOOP_SET_FD, 3 [pid 5080] getdents64(3, [pid 5076] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5076] getdents64(3, 0x555556b06620 /* 4 entries */, 32768) = 104 [pid 5076] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5076] unlink("./156/binderfs") = 0 [pid 5076] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7904] <... ioctl resumed>) = 0 [pid 7904] close(3) = 0 [pid 7904] mkdir("./bus", 0777) = 0 [pid 7904] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7903] <... ioctl resumed>) = 0 [pid 7903] close(3) = 0 [pid 7903] mkdir("./bus", 0777) = 0 [pid 7903] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 7893] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7896] <... write resumed>) = 57344 [pid 7896] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7896] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7904] <... mount resumed>) = 0 [pid 7903] <... mount resumed>) = 0 [pid 7904] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 7903] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 7904] chdir("./bus" [pid 7903] <... openat resumed>) = 3 [pid 7904] <... chdir resumed>) = 0 [pid 7903] chdir("./bus" [pid 7904] ioctl(4, LOOP_CLR_FD [pid 7903] <... chdir resumed>) = 0 [pid 7904] <... ioctl resumed>) = 0 [pid 7903] ioctl(4, LOOP_CLR_FD [pid 7904] close(4 [pid 7903] <... ioctl resumed>) = 0 [pid 7904] <... close resumed>) = 0 [pid 7903] close(4 [pid 7904] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] <... close resumed>) = 0 [pid 7904] <... futex resumed>) = 1 [pid 7903] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 7904] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] <... futex resumed>) = 1 [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7903] creat("./bus", 000) = 4 [pid 7903] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7900] <... futex resumed>) = 0 [pid 7903] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 7900] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.740284][ T7902] Code: db 36 ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 c0 de 36 ff 48 c7 c7 e0 7e 66 8a e8 c4 ea 1a ff e9 1e fe ff ff e8 aa de 36 ff <0f> 0b e9 b7 fc ff ff e8 9e de 36 ff 8b 14 24 8b 74 24 04 48 8b 7c [ 122.740302][ T7902] RSP: 0018:ffffc9000d597748 EFLAGS: 00010293 [ 122.740319][ T7902] RAX: 0000000000000000 RBX: ffff88807cc2de98 RCX: 0000000000000000 [ 122.740333][ T7902] RDX: ffff88807ed957c0 RSI: ffffffff824c0656 RDI: 0000000000000001 [ 122.769250][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.773450][ T7902] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [pid 7900] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7900] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fee02e32000 [pid 7900] mprotect(0x7fee02e33000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7900] clone(child_stack=0x7fee02e523f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7906], tls=0x7fee02e52700, child_tidptr=0x7fee02e529d0) = 7906 [pid 7900] futex(0x7fee0b2cc7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 122.810609][ T7902] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000024b8ba01 [ 122.818645][ T7902] R13: 000000000000000a R14: ffff88801ce32000 R15: ffff88807cc2dfc0 [ 122.826682][ T7902] FS: 00007fee02e52700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 122.827445][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.835650][ T7902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.835673][ T7902] CR2: 0000555556b0e628 CR3: 00000000253d9000 CR4: 0000000000350ee0 [ 122.835688][ T7902] Call Trace: [ 122.835695][ T7902] [pid 7900] futex(0x7fee0b2cc7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7897] <... write resumed>) = 57344 [pid 7897] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7897] futex(0x7fee0b2cc7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7906 attached [pid 7906] set_robust_list(0x7fee02e529e0, 24) = 0 [pid 7906] creat("./file1", 000 [pid 7905] <... set_robust_list resumed>) = 0 [pid 7905] creat("./file1", 000) = 5 [pid 7905] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7893] exit_group(0 [pid 7896] <... futex resumed>) = ? [pid 7893] <... exit_group resumed>) = ? [pid 7896] +++ exited with 0 +++ [pid 7905] +++ exited with 0 +++ [pid 7893] +++ exited with 0 +++ [pid 7906] <... creat resumed>) = 5 [pid 7906] futex(0x7fee0b2cc7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7900] <... futex resumed>) = 0 [ 122.835707][ T7902] hfsplus_file_truncate+0xe42/0x10e0 [ 122.869330][ T7902] ? hfsplus_get_block+0x9b0/0x9b0 [ 122.874533][ T7902] ? unmap_mapping_pages+0x270/0x270 [ 122.879850][ T7902] ? setattr_prepare+0x140/0x9b0 [ 122.884892][ T7902] hfsplus_setattr+0x1f2/0x320 [ 122.889725][ T7902] ? hfsplus_file_fsync+0x5d0/0x5d0 [ 122.894986][ T7902] notify_change+0xb2c/0x1180 [ 122.897882][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.899679][ T7902] ? down_write+0x14f/0x200 [ 122.899712][ T7902] ? do_truncate+0x143/0x200 [pid 7906] futex(0x7fee0b2cc7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7901] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7893, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5080] <... getdents64 resumed>0x555556b06620 /* 4 entries */, 32768) = 104 [pid 7901] futex(0x7fee0b2cc7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 7904] <... futex resumed>) = 0 [pid 7901] <... futex resumed>) = 1 [pid 5080] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7904] creat("./bus", 000 [pid 7901] futex(0x7fee0b2cc7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] lstat("./155/binderfs", [pid 7904] <... creat resumed>) = 4 [pid 5080] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 7904] futex(0x7fee0b2cc7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] unlink("./155/binderfs" [pid 7904] <... futex resumed>) = 1 [pid 7901] <... futex resumed>) = 0 [pid 5080] <... unlink resumed>) = 0 [ 122.899737][ T7902] do_truncate+0x143/0x200 [ 122.908063][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.911526][ T7902] ? file_open_root+0x430/0x430 [ 122.911553][ T7902] ? common_perm_cond+0x230/0x830 [ 122.923457][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.927882][ T7902] ? hfsplus_getattr+0x2e0/0x2e0 [ 122.932686][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.937729][ T7902] path_openat+0x2083/0x2750 [ 122.961909][ T7902] ? path_lookupat+0x840/0x840 [ 122.966738][ T7902] do_filp_open+0x1ba/0x410 [ 122.971270][ T7902] ? may_open_dev+0xf0/0xf0 [ 122.972145][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.975829][ T7902] ? find_held_lock+0x2d/0x110 [ 122.975867][ T7902] ? do_raw_spin_lock+0x124/0x2b0 [ 122.984167][ T7903] hfsplus: request for non-existent node 16715520 in B*Tree [ 122.987909][ T7902] ? spin_bug+0x1c0/0x1c0 [ 123.004722][ T7902] ? _raw_spin_unlock+0x28/0x40 [ 123.008397][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 123.009585][ T7902] ? alloc_fd+0x2e4/0x750 [ 123.009624][ T7902] do_sys_openat2+0x16d/0x4c0 [ 123.017650][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 123.021213][ T7902] ? find_held_lock+0x2d/0x110 [ 123.021245][ T7902] ? build_open_flags+0x6f0/0x6f0 [ 123.029668][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 123.033220][ T7902] ? ptrace_notify+0xfe/0x140 [ 123.033243][ T7902] ? lock_downgrade+0x690/0x690 [ 123.038730][ T7904] hfsplus: request for non-existent node 16715520 in B*Tree [ 123.043067][ T7902] __x64_sys_creat+0xcd/0x120 [ 123.043100][ T7902] ? __x64_compat_sys_openat+0x1f0/0x1f0 [ 123.077614][ T7902] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.082850][ T7902] ? ptrace_notify+0xfe/0x140 [ 123.087575][ T7902] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 123.093860][ T7902] do_syscall_64+0x39/0xb0 [ 123.098286][ T7902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.104209][ T7902] RIP: 0033:0x7fee0b247609 [ 123.108650][ T7902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.128282][ T7902] RSP: 002b:00007fee02e522f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 123.136717][ T7902] RAX: ffffffffffffffda RBX: 00007fee0b2cc7b0 RCX: 00007fee0b247609 [ 123.144709][ T7902] RDX: 00007fee02e52700 RSI: 0000000000000000 RDI: 00000000200000c0 [ 123.152685][ T7902] RBP: 00007fee0b2990c0 R08: 00007fee02e52700 R09: 0000000000000000 [ 123.160699][ T7902] R10: 00007fee02e52700 R11: 0000000000000246 R12: 0073756c70736668 [ 123.168703][ T7902] R13: 0031656c69662f2e R14: 6465646165726874 R15: 00007fee0b2cc7b8 [ 123.176725][ T7902] [ 123.179767][ T7902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.187029][ T7902] CPU: 1 PID: 7902 Comm: syz-executor192 Not tainted 6.3.0-rc2-syzkaller-00405-ga3671bd86a97 #0 [ 123.197419][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 123.207461][ T7902] Call Trace: [ 123.210733][ T7902] [ 123.213655][ T7902] dump_stack_lvl+0xd9/0x150 [ 123.218246][ T7902] panic+0x688/0x730 [ 123.222183][ T7902] ? panic_smp_self_stop+0x90/0x90 [ 123.227313][ T7902] ? show_trace_log_lvl+0x285/0x390 [ 123.232526][ T7902] ? hfsplus_free_extents+0x3d6/0x510 [ 123.237897][ T7902] check_panic_on_warn+0xb1/0xc0 [ 123.242838][ T7902] __warn+0xf2/0x390 [ 123.246735][ T7902] ? hfsplus_free_extents+0x3d6/0x510 [ 123.252103][ T7902] report_bug+0x2da/0x500 [ 123.256428][ T7902] handle_bug+0x3c/0x70 [ 123.260574][ T7902] exc_invalid_op+0x18/0x50 [ 123.265093][ T7902] asm_exc_invalid_op+0x1a/0x20 [ 123.269939][ T7902] RIP: 0010:hfsplus_free_extents+0x3d6/0x510 [ 123.275914][ T7902] Code: db 36 ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 c0 de 36 ff 48 c7 c7 e0 7e 66 8a e8 c4 ea 1a ff e9 1e fe ff ff e8 aa de 36 ff <0f> 0b e9 b7 fc ff ff e8 9e de 36 ff 8b 14 24 8b 74 24 04 48 8b 7c [ 123.295513][ T7902] RSP: 0018:ffffc9000d597748 EFLAGS: 00010293 [ 123.301570][ T7902] RAX: 0000000000000000 RBX: ffff88807cc2de98 RCX: 0000000000000000 [ 123.309703][ T7902] RDX: ffff88807ed957c0 RSI: ffffffff824c0656 RDI: 0000000000000001 [ 123.317665][ T7902] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 123.325626][ T7902] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000024b8ba01 [ 123.333587][ T7902] R13: 000000000000000a R14: ffff88801ce32000 R15: ffff88807cc2dfc0 [ 123.341554][ T7902] ? hfsplus_free_extents+0x3d6/0x510 [ 123.346931][ T7902] ? hfsplus_free_extents+0x3d6/0x510 [ 123.352305][ T7902] hfsplus_file_truncate+0xe42/0x10e0 [ 123.357682][ T7902] ? hfsplus_get_block+0x9b0/0x9b0 [ 123.362794][ T7902] ? unmap_mapping_pages+0x270/0x270 [ 123.368073][ T7902] ? setattr_prepare+0x140/0x9b0 [ 123.373040][ T7902] hfsplus_setattr+0x1f2/0x320 [ 123.377801][ T7902] ? hfsplus_file_fsync+0x5d0/0x5d0 [ 123.383004][ T7902] notify_change+0xb2c/0x1180 [ 123.387684][ T7902] ? down_write+0x14f/0x200 [ 123.392214][ T7902] ? do_truncate+0x143/0x200 [ 123.396802][ T7902] do_truncate+0x143/0x200 [ 123.401217][ T7902] ? file_open_root+0x430/0x430 [ 123.406060][ T7902] ? common_perm_cond+0x230/0x830 [ 123.411083][ T7902] ? hfsplus_getattr+0x2e0/0x2e0 [ 123.416026][ T7902] path_openat+0x2083/0x2750 [ 123.420619][ T7902] ? path_lookupat+0x840/0x840 [ 123.425385][ T7902] do_filp_open+0x1ba/0x410 [ 123.429886][ T7902] ? may_open_dev+0xf0/0xf0 [ 123.434385][ T7902] ? find_held_lock+0x2d/0x110 [ 123.439151][ T7902] ? do_raw_spin_lock+0x124/0x2b0 [ 123.444169][ T7902] ? spin_bug+0x1c0/0x1c0 [ 123.448497][ T7902] ? _raw_spin_unlock+0x28/0x40 [ 123.453342][ T7902] ? alloc_fd+0x2e4/0x750 [ 123.457679][ T7902] do_sys_openat2+0x16d/0x4c0 [ 123.462352][ T7902] ? find_held_lock+0x2d/0x110 [ 123.467116][ T7902] ? build_open_flags+0x6f0/0x6f0 [ 123.472137][ T7902] ? ptrace_notify+0xfe/0x140 [ 123.476803][ T7902] ? lock_downgrade+0x690/0x690 [ 123.481649][ T7902] __x64_sys_creat+0xcd/0x120 [ 123.486329][ T7902] ? __x64_compat_sys_openat+0x1f0/0x1f0 [ 123.491963][ T7902] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.497161][ T7902] ? ptrace_notify+0xfe/0x140 [ 123.501829][ T7902] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 123.508071][ T7902] do_syscall_64+0x39/0xb0 [ 123.512510][ T7902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.518400][ T7902] RIP: 0033:0x7fee0b247609 [ 123.522808][ T7902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.542411][ T7902] RSP: 002b:00007fee02e522f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 123.550828][ T7902] RAX: ffffffffffffffda RBX: 00007fee0b2cc7b0 RCX: 00007fee0b247609 [ 123.558796][ T7902] RDX: 00007fee02e52700 RSI: 0000000000000000 RDI: 00000000200000c0 [ 123.566761][ T7902] RBP: 00007fee0b2990c0 R08: 00007fee02e52700 R09: 0000000000000000 [ 123.574727][ T7902] R10: 00007fee02e52700 R11: 0000000000000246 R12: 0073756c70736668 [ 123.582689][ T7902] R13: 0031656c69662f2e R14: 6465646165726874 R15: 00007fee0b2cc7b8 [ 123.590678][ T7902] [ 123.594527][ T7902] Kernel Offset: disabled [ 123.598924][ T7902] Rebooting in 86400 seconds..