strace dumps a few calls to setxattr then detaches