ci2-android-5-10/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-10/syz-executor2039094931 <...> syzkaller syzkaller login: [ 12.165453][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 12.165463][ T24] audit: type=1400 audit(1794087878.280:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.170226][ T24] audit: type=1400 audit(1794087878.280:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.173340][ T24] audit: type=1400 audit(1794087878.280:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[13934]" dev="pipefs" ino=13934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.176571][ T24] audit: type=1400 audit(1794087878.280:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.179588][ T24] audit: type=1400 audit(1794087878.280:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. execve("ci2-android-5-10/syz-executor2039094931", ["ci2-android-5-10/syz-executor2039094931"], 0x7fffea1e0de0 /* 10 vars */) = 0 brk(NULL) = 0x55556a4ec000 brk(0x55556a4ecd40) = 0x55556a4ecd40 arch_prctl(ARCH_SET_FS, 0x55556a4ec3c0) = 0 set_tid_address(0x55556a4ec690) = 297 set_robust_list(0x55556a4ec6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-10/syz-executor2039094931", 4096) = 45 getrandom("\x71\xf4\x12\x4b\xe9\x4e\x49\x8b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556a4ecd40 brk(0x55556a50dd40) = 0x55556a50dd40 brk(0x55556a50e000) = 0x55556a50e000 mprotect(0x7fb3534c3000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 298 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 299 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 300 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 301 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 302 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] getrandom("\x05\x7c\x14\x02\x08\x41\xb9\x0c", 8, GRND_NONBLOCK) = 8 [pid 299] mkdir("./syzkaller.JTvHHj", 0700) = 0 [pid 299] chmod("./syzkaller.JTvHHj", 0777) = 0 [pid 299] chdir("./syzkaller.JTvHHj") = 0 [pid 299] mkdir("./0", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10/strace-static-x86_64: Process 298 attached , child_tidptr=0x55556a4ec690) = 303 [pid 299] rt_sigprocmask(SIG_SETMASK, [] [pid 298] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] getrandom("\xec\x2e\xb5\xcf\x25\x93\x6d\x3d", 8, GRND_NONBLOCK) = 8 [pid 298] mkdir("./syzkaller.sbDNoe", 0700) = 0 [pid 298] chmod("./syzkaller.sbDNoe", 0777) = 0 [pid 298] chdir("./syzkaller.sbDNoe") = 0 [pid 298] mkdir("./0", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 304 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] chdir("./0") = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 303] write(1, "executing program\n", 18) = 18 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 303] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 executing program [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[305]}, 88) = 305 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 ci2-android-5-10/strace-static-x86_64: Process 300 attached ci2-android-5-10/strace-static-x86_64: Process 301 attached ci2-android-5-10/strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x55556a4ec6a0, 24 [pid 300] set_robust_list(0x55556a4ec6a0, 24 [pid 302] <... set_robust_list resumed>) = 0 [pid 300] <... set_robust_list resumed>) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 302] getrandom( [pid 300] rt_sigprocmask(SIG_SETMASK, [] [pid 301] set_robust_list(0x55556a4ec6a0, 24 [pid 300] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 300] getrandom( [pid 302] <... getrandom resumed>"\x9a\xa4\xd5\x05\x49\x20\x0e\xc0", 8, GRND_NONBLOCK) = 8 [pid 301] <... set_robust_list resumed>) = 0 [pid 301] rt_sigprocmask(SIG_SETMASK, [] [pid 302] mkdir("./syzkaller.cKwnbZ", 0700ci2-android-5-10/strace-static-x86_64: Process 304 attached [pid 300] <... getrandom resumed>"\x90\x4a\xe0\x7e\xfa\xa5\xa4\x62", 8, GRND_NONBLOCK) = 8 [pid 301] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 304] set_robust_list(0x55556a4ec6a0, 24 [pid 300] mkdir("./syzkaller.oJ6AJC", 0700 [pid 301] getrandom( [pid 300] <... mkdir resumed>) = 0 [pid 304] <... set_robust_list resumed>) = 0 [pid 301] <... getrandom resumed>"\x2c\x1c\x5a\x0d\xc5\x8e\x41\x5e", 8, GRND_NONBLOCK) = 8 [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 301] mkdir("./syzkaller.aQQNRZ", 0700 [pid 302] chmod("./syzkaller.cKwnbZ", 0777 [pid 300] chmod("./syzkaller.oJ6AJC", 0777 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 304] chdir("./0" [pid 300] <... chmod resumed>) = 0 [pid 304] <... chdir resumed>) = 0 [pid 302] <... chmod resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] chdir("./syzkaller.oJ6AJC" [pid 304] <... prctl resumed>) = 0 [pid 302] chdir("./syzkaller.cKwnbZ" [pid 301] chmod("./syzkaller.aQQNRZ", 0777 [pid 304] setpgid(0, 0 [pid 300] <... chdir resumed>) = 0 [pid 304] <... setpgid resumed>) = 0 [pid 302] <... chdir resumed>) = 0 [pid 300] mkdir("./0", 0777 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] mkdir("./0", 0777 [pid 304] <... openat resumed>) = 3 [pid 302] <... mkdir resumed>) = 0 [pid 304] write(3, "1000", 4 [pid 300] <... mkdir resumed>) = 0 [pid 304] <... write resumed>) = 4 [pid 301] <... chmod resumed>) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 304] close(3) = 0 [pid 301] chdir("./syzkaller.aQQNRZ" [pid 300] <... openat resumed>) = 3 [pid 304] symlink("/dev/binderfs", "./binderfs" [pid 301] <... chdir resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 304] <... symlink resumed>) = 0 [pid 301] mkdir("./0", 0777 [pid 304] write(1, "executing program\n", 18 [pid 302] ioctl(3, LOOP_CLR_FD [pid 300] ioctl(3, LOOP_CLR_FD [pid 301] <... mkdir resumed>) = 0 [pid 304] <... write resumed>) = 18 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) executing program [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] close(3 [pid 302] close(3 [pid 301] <... openat resumed>) = 3 [pid 304] <... futex resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 301] ioctl(3, LOOP_CLR_FD [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0} [pid 302] rt_sigprocmask(SIG_BLOCK, ~[] [pid 301] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] rt_sigprocmask(SIG_BLOCK, ~[] [pid 304] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 302] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 301] close(3 [pid 300] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[] [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 302] <... clone resumed>, child_tidptr=0x55556a4ec690) = 306 [pid 300] <... clone resumed>, child_tidptr=0x55556a4ec690) = 307 [pid 304] <... mmap resumed>) = 0x7fb3533d1000 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] rt_sigprocmask(SIG_SETMASK, [] [pid 304] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 304] rt_sigprocmask(SIG_BLOCK, ~[] [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 301] <... clone resumed>, child_tidptr=0x55556a4ec690) = 308 [pid 300] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 23.985464][ T24] audit: type=1400 audit(1794087890.100:64): avc: denied { execmem } for pid=297 comm="syz-executor203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.007802][ T24] audit: type=1400 audit(1794087890.100:65): avc: denied { read } for pid=299 comm="syz-executor203" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 304] <... clone3 resumed> => {parent_tid=[309]}, 88) = 309 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program executing program executing program [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] chdir("./0") = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] symlink("/dev/binderfs", "./binderfs") = 0 ci2-android-5-10/strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] chdir("./0" [pid 306] write(1, "executing program\n", 18) = 18 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... chdir resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 306] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 307] <... prctl resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] setpgid(0, 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] <... setpgid resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... mmap resumed>) = 0x7fb3533d1000 [pid 306] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... openat resumed>) = 3 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 306] <... clone3 resumed> => {parent_tid=[310]}, 88) = 310 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 308 attached ) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] write(1, "executing program\n", 18 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... write resumed>) = 18 [pid 308] chdir("./0" [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 308] <... chdir resumed>) = 0 [pid 307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... prctl resumed>) = 0 [pid 307] <... mmap resumed>) = 0x7fb3533d1000 [pid 308] setpgid(0, 0) = 0 [pid 307] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... mprotect resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... openat resumed>) = 3 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] symlink("/dev/binderfs", "./binderfs" [pid 307] <... clone3 resumed> => {parent_tid=[311]}, 88) = 311 [pid 308] <... symlink resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 308] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[312]}, 88) = 312 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] memfd_create("syzkaller", 0) = 3 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 ci2-android-5-10/strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] memfd_create("syzkaller", 0) = 3 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 ci2-android-5-10/strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] memfd_create("syzkaller", 0) = 3 [pid 312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 304] <... futex resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 309 attached [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] set_robust_list(0x7fb3533f19a0, 24) = 0 [ 24.041286][ T24] audit: type=1400 audit(1794087890.100:66): avc: denied { open } for pid=299 comm="syz-executor203" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 24.066339][ T24] audit: type=1400 audit(1794087890.100:67): avc: denied { ioctl } for pid=299 comm="syz-executor203" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 305] <... write resumed>) = 20699119 [pid 305] munmap(0x7fb34afd1000, 138412032) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 305] close(3) = 0 [pid 305] close(4 [pid 309] <... write resumed>) = 20699119 [pid 309] munmap(0x7fb34afd1000, 138412032) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 311] <... write resumed>) = 20699119 [pid 311] munmap(0x7fb34afd1000, 138412032) = 0 [ 24.287963][ T24] audit: type=1400 audit(1794087890.400:68): avc: denied { write } for pid=303 comm="syz-executor203" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 311] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 312] <... write resumed>) = 20699119 [pid 312] munmap(0x7fb34afd1000, 138412032) = 0 [pid 312] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] <... close resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3 [pid 305] mkdir("./bus", 0777) = 0 [pid 305] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 310] <... write resumed>) = 20699119 [pid 310] munmap(0x7fb34afd1000, 138412032) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 312] <... openat resumed>) = 4 [pid 311] <... openat resumed>) = 4 [pid 312] ioctl(4, LOOP_SET_FD, 3 [pid 311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 311] close(3) = 0 [pid 311] close(4 [pid 310] <... openat resumed>) = 4 [pid 309] <... ioctl resumed>) = 0 [pid 310] ioctl(4, LOOP_SET_FD, 3 [pid 309] close(3) = 0 [pid 309] close(4 [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [ 24.361424][ T24] audit: type=1400 audit(1794087890.470:69): avc: denied { mounton } for pid=303 comm="syz-executor203" path="/root/syzkaller.JTvHHj/0/bus" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 312] close(4 [pid 311] <... close resumed>) = 0 [pid 311] mkdir("./bus", 0777) = 0 [pid 311] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 310] <... ioctl resumed>) = 0 [pid 310] close(3) = 0 [ 24.415215][ T305] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 24.423565][ T305] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.432464][ T305] F2FS-fs (loop1): invalid crc value [ 24.438770][ T305] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 310] close(4 [pid 309] <... close resumed>) = 0 [pid 309] mkdir("./bus", 0777) = 0 [pid 309] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 305] <... mount resumed>) = 0 [pid 305] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 305] chdir("./bus") = 0 [pid 305] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 312] <... close resumed>) = 0 [pid 312] mkdir("./bus", 0777) = 0 [ 24.459762][ T305] F2FS-fs (loop1): Start checkpoint disabled! [ 24.466592][ T305] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.473684][ T305] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 24.481337][ T24] audit: type=1400 audit(1794087890.600:70): avc: denied { mount } for pid=303 comm="syz-executor203" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.522529][ T312] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 24.530514][ T312] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 24.539371][ T312] F2FS-fs (loop3): invalid crc value [ 24.545723][ T312] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 24.566923][ T312] F2FS-fs (loop3): Start checkpoint disabled! [pid 312] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 310] <... close resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 312] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] mkdir("./bus", 0777 [pid 305] <... openat resumed>) = 4 [pid 312] <... openat resumed>) = 3 [pid 312] chdir("./bus") = 0 [pid 312] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 312] ioctl(4, LOOP_CLR_FD) = 0 [pid 312] close(4) = 0 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] pwrite64(5, "\f", 1, 134220897) = 1 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [pid 312] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... futex resumed>) = 1 [ 24.573630][ T312] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 24.580667][ T312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 24.591446][ T311] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 24.592450][ T24] audit: type=1400 audit(1794087890.700:71): avc: denied { write } for pid=308 comm="syz-executor203" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 312] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 310] <... mkdir resumed>) = 0 [pid 305] ioctl(4, LOOP_CLR_FD [ 24.610286][ T311] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 24.622170][ T309] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 24.640469][ T24] audit: type=1400 audit(1794087890.700:72): avc: denied { add_name } for pid=308 comm="syz-executor203" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.661255][ T309] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 310] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 308] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[324]}, 88) = 324 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] read(6 [pid 312] <... mmap resumed>) = 0x200000000000 [ 24.669769][ T311] F2FS-fs (loop2): invalid crc value [ 24.670324][ T24] audit: type=1400 audit(1794087890.700:73): avc: denied { create } for pid=308 comm="syz-executor203" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.691567][ T309] F2FS-fs (loop0): invalid crc value [ 24.702870][ T311] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] <... ioctl resumed>) = 0 [pid 308] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 305] close(4 [pid 312] <... unshare resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 312] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 4 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] pwrite64(5, "\f", 1, 134220897) = 1 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 24.719456][ T310] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 24.737012][ T310] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.758584][ T309] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 305] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 303] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[332]}, 88) = 332 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 24.770615][ T310] F2FS-fs (loop4): invalid crc value [pid 332] read(6 [pid 303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] exit_group(0) = ? [pid 312] <... futex resumed>) = ? [pid 305] <... mmap resumed>) = 0x200000000000 [pid 303] <... mmap resumed>) = 0x7fb35338f000 [pid 303] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [ 24.831811][ T310] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 24.862880][ T311] F2FS-fs (loop2): Start checkpoint disabled! [pid 324] <... read resumed> ) = ? [pid 303] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} [pid 312] +++ exited with 0 +++ [pid 303] <... clone3 resumed> => {parent_tid=[335]}, 88) = 335 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... mount resumed>) = 0 [pid 311] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 311] chdir("./bus") = 0 [pid 311] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 311] ioctl(4, LOOP_CLR_FD) = 0 [pid 311] close(4) = 0 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] pwrite64(5, "\f", 1, 134220897) = 1 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 335] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 303] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] <... futex resumed>) = 0 [pid 335] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 307] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 324] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [ 24.882495][ T309] F2FS-fs (loop0): Start checkpoint disabled! [ 24.888758][ T311] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 24.896373][ T311] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 24.904979][ T309] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 24.912102][ T310] F2FS-fs (loop4): Start checkpoint disabled! [ 24.915480][ T309] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [pid 301] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 301] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... mount resumed>) = 0 [pid 301] getdents64(3 [pid 309] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./bus") = 0 [pid 301] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 301] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] close(4) = 0 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] newfstatat(AT_FDCWD, "./0/binderfs" [pid 304] <... futex resumed>) = 1 [pid 301] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 309] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] unlink("./0/binderfs" [pid 309] <... openat resumed>) = 4 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... unlink resumed>) = 0 [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 309] <... futex resumed>) = 0 [pid 309] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... ioctl resumed>) = 0 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... umount2 resumed>) = 0 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... futex resumed>) = 1 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... futex resumed>) = 1 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... futex resumed>) = 0 [pid 309] pwrite64(5, "\f", 1, 134220897) = 1 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... openat resumed>) = 4 [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] fstat(4 [pid 304] <... futex resumed>) = 1 [pid 301] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 301] getdents64(4 [pid 309] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 301] <... getdents64 resumed>, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 301] getdents64(4 [pid 304] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... getdents64 resumed>, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 304] <... futex resumed>) = 1 [pid 301] close(4 [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 309] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 301] rmdir("./0/bus" [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 307] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[336]}, 88) = 336 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 310] chdir("./bus") = 0 [pid 310] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 310] ioctl(4, LOOP_CLR_FD) = 0 [pid 310] close(4) = 0 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000ci2-android-5-10/strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x7fb3533d09a0, 24 [pid 310] <... openat resumed>) = 5 [pid 336] <... set_robust_list resumed>) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] read(6 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] pwrite64(5, "\f", 1, 134220897) = 1 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 304] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[337]}, 88) = 337 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 24.931592][ T310] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.955441][ T49] attempt to access beyond end of device [ 24.955441][ T49] loop3: rw=1, want=81920, limit=40427 [ 24.961292][ T310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [pid 337] read(6 [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 307] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[338]}, 88) = 338 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 306] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[339]}, 88) = 339 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] read(6 [pid 304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 304] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 304] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITEci2-android-5-10/strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 304] <... mprotect resumed>) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[340]}, 88) = 340 [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 338] <... unshare resumed>) = 0 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = 1 [pid 338] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 311] <... mmap resumed>) = 0x200000000000 [pid 311] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... unshare resumed>) = 0 [pid 340] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 340] <... futex resumed>) = 1 [pid 340] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] exit_group(0 [pid 335] <... futex resumed>) = ? [pid 305] <... futex resumed>) = ? [pid 303] <... exit_group resumed>) = ? [ 25.032900][ T49] attempt to access beyond end of device [ 25.032900][ T49] loop3: rw=1, want=53248, limit=40427 [pid 305] +++ exited with 0 +++ [pid 335] +++ exited with 0 +++ [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 332] <... read resumed> ) = ? [pid 306] <... mmap resumed>) = 0x7fb35338f000 [pid 306] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[341]}, 88) = 341 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 341] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 341] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... mmap resumed>) = 0x200000000000 [pid 309] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... mmap resumed>) = 0x200000000000 [pid 310] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 299] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 299] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] exit_group(0 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 338] <... futex resumed>) = ? [pid 311] <... futex resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 299] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 338] +++ exited with 0 +++ [pid 311] +++ exited with 0 +++ [pid 299] <... openat resumed>) = 3 [pid 336] <... read resumed> ) = ? [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./0/binderfs") = 0 [pid 299] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 299] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [ 25.159329][ T49] attempt to access beyond end of device [ 25.159329][ T49] loop3: rw=1, want=72072, limit=40427 [ 25.189451][ T7] attempt to access beyond end of device [ 25.189451][ T7] loop1: rw=2049, want=40984, limit=40427 [ 25.201618][ T49] attempt to access beyond end of device [pid 299] rmdir("./0/bus" [pid 336] +++ exited with 0 +++ [pid 307] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 304] exit_group(0 [pid 309] <... futex resumed>) = ? [pid 304] <... exit_group resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 337] <... read resumed> ) = ? [pid 337] +++ exited with 0 +++ [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./0/binderfs") = 0 [pid 300] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 300] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./0/bus" [pid 340] <... futex resumed>) = ? [pid 306] exit_group(0 [pid 341] <... futex resumed>) = ? [pid 306] <... exit_group resumed>) = ? [pid 341] +++ exited with 0 +++ [pid 310] <... futex resumed>) = ? [pid 339] <... read resumed> ) = ? [pid 310] +++ exited with 0 +++ [pid 340] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 298] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./0/binderfs") = 0 [ 25.201618][ T49] loop3: rw=2049, want=40984, limit=40427 [ 25.226327][ T49] attempt to access beyond end of device [ 25.226327][ T49] loop2: rw=2049, want=40984, limit=40427 [pid 298] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 339] +++ exited with 0 +++ [pid 306] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 302] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 302] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./0/binderfs") = 0 [ 25.280654][ T49] attempt to access beyond end of device [ 25.280654][ T49] loop0: rw=2049, want=40984, limit=40427 [ 25.311938][ T7] attempt to access beyond end of device [ 25.311938][ T7] loop4: rw=2049, want=40984, limit=40427 [pid 302] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./0/bus") = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./0") = 0 [pid 298] mkdir("./1", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 342 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] chdir("./1") = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 342] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[343]}, 88) = 343 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./0/bus") = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./0") = 0 [pid 302] mkdir("./1", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 344 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] chdir("./1") = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] symlink("/dev/binderfs", "./binderfs") = 0 [pid 344] write(1, "executing program\n", 18) = 18 executing program [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 344] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[345]}, 88) = 345 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] memfd_create("syzkaller", 0) = 3 [pid 345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./0") = 0 [pid 299] mkdir("./1", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 346 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] <... rmdir resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] chdir("./1") = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 346] write(1, "executing program\n", 18) = 18 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 346] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0}ci2-android-5-10/strace-static-x86_64: Process 347 attached => {parent_tid=[347]}, 88) = 347 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] set_robust_list(0x7fb3533f19a0, 24 [pid 346] <... futex resumed>) = 0 [pid 347] <... set_robust_list resumed>) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] memfd_create("syzkaller", 0 [pid 301] <... rmdir resumed>) = 0 [pid 347] <... memfd_create resumed>) = 3 [pid 301] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] close(3) = 0 [pid 301] rmdir("./0" [pid 347] <... mmap resumed>) = 0x7fb34afd1000 [pid 301] <... rmdir resumed>) = 0 [pid 301] mkdir("./1", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 348 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 348] chdir("./1") = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 300] close(3 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 348] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 300] <... close resumed>) = 0 [pid 348] write(1, "executing program\n", 18) = 18 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 348] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[349]}, 88) = 349 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 300] rmdir("./0") = 0 [pid 300] mkdir("./1", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10/strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 349] memfd_create("syzkaller", 0 [pid 300] <... clone resumed>, child_tidptr=0x55556a4ec690) = 350 [pid 349] <... memfd_create resumed>) = 3 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] chdir("./1") = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 [pid 350] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 350] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[351]}, 88) = 351 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] memfd_create("syzkaller", 0 [pid 345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 351] <... memfd_create resumed>) = 3 [pid 351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 343] <... write resumed>) = 20699119 [pid 343] munmap(0x7fb34afd1000, 138412032) = 0 [pid 351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3 [pid 345] <... write resumed>) = 20699119 [pid 343] <... ioctl resumed>) = 0 [pid 343] close(3) = 0 [pid 343] close(4) = 0 [pid 343] mkdir("./bus", 0777) = 0 [pid 343] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 345] munmap(0x7fb34afd1000, 138412032) = 0 [ 25.874328][ T343] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 25.902887][ T343] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 351] <... write resumed>) = 20699119 [pid 345] <... openat resumed>) = 4 [pid 351] munmap(0x7fb34afd1000, 138412032 [pid 345] ioctl(4, LOOP_SET_FD, 3 [pid 351] <... munmap resumed>) = 0 [pid 351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 347] <... write resumed>) = 20699119 [pid 347] munmap(0x7fb34afd1000, 138412032 [pid 351] <... openat resumed>) = 4 [pid 345] <... ioctl resumed>) = 0 [pid 351] ioctl(4, LOOP_SET_FD, 3 [pid 345] close(3) = 0 [pid 345] close(4 [pid 347] <... munmap resumed>) = 0 [pid 347] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 351] <... ioctl resumed>) = 0 [pid 351] close(3) = 0 [pid 351] close(4 [pid 349] <... write resumed>) = 20699119 [pid 349] munmap(0x7fb34afd1000, 138412032) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 351] <... close resumed>) = 0 [ 25.921181][ T343] F2FS-fs (loop0): invalid crc value [ 25.933962][ T343] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 25.961298][ T343] F2FS-fs (loop0): Start checkpoint disabled! [pid 347] <... openat resumed>) = 4 [pid 349] <... openat resumed>) = 4 [pid 345] <... close resumed>) = 0 [pid 351] mkdir("./bus", 0777 [pid 349] ioctl(4, LOOP_SET_FD, 3 [pid 347] ioctl(4, LOOP_SET_FD, 3 [pid 345] mkdir("./bus", 0777 [pid 351] <... mkdir resumed>) = 0 [pid 345] <... mkdir resumed>) = 0 [pid 351] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 349] <... ioctl resumed>) = 0 [pid 345] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 349] close(3) = 0 [pid 349] close(4 [pid 347] <... ioctl resumed>) = 0 [pid 343] <... mount resumed>) = 0 [pid 343] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 343] chdir("./bus") = 0 [pid 347] close(3) = 0 [pid 347] close(4 [ 25.968026][ T343] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 25.975218][ T343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 25.987749][ T351] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 25.990464][ T345] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 26.000749][ T351] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.013923][ T345] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 349] <... close resumed>) = 0 [pid 349] mkdir("./bus", 0777) = 0 [ 26.014283][ T351] F2FS-fs (loop2): invalid crc value [ 26.022871][ T345] F2FS-fs (loop4): invalid crc value [ 26.031977][ T351] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.034267][ T345] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.059662][ T351] F2FS-fs (loop2): Start checkpoint disabled! [ 26.066574][ T351] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 349] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 351] <... mount resumed>) = 0 [pid 351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 351] chdir("./bus") = 0 [pid 351] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 345] <... mount resumed>) = 0 [pid 345] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 345] chdir("./bus") = 0 [pid 345] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 347] <... close resumed>) = 0 [pid 343] <... openat resumed>) = 4 [pid 343] ioctl(4, LOOP_CLR_FD [pid 347] mkdir("./bus", 0777) = 0 [ 26.070838][ T345] F2FS-fs (loop4): Start checkpoint disabled! [ 26.075854][ T351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 26.080514][ T345] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.094230][ T345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [pid 347] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 343] <... ioctl resumed>) = 0 [pid 343] close(4 [pid 351] <... openat resumed>) = 4 [pid 345] <... openat resumed>) = 4 [pid 343] <... close resumed>) = 0 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 343] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... openat resumed>) = 4 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 343] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... ioctl resumed>) = 0 [pid 342] <... futex resumed>) = 0 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... openat resumed>) = 5 [pid 342] <... futex resumed>) = 0 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] pwrite64(5, "\f", 1, 134220897 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... pwrite64 resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... openat resumed>) = 6 [pid 342] <... futex resumed>) = 0 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] ioctl(4, LOOP_CLR_FD [pid 345] ioctl(4, LOOP_CLR_FD [pid 342] <... futex resumed>) = 0 [pid 345] <... ioctl resumed>) = 0 [pid 351] <... ioctl resumed>) = 0 [pid 345] close(4 [pid 351] close(4 [pid 345] <... close resumed>) = 0 [pid 351] <... close resumed>) = 0 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 351] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... openat resumed>) = 4 [pid 345] <... openat resumed>) = 4 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 345] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 345] <... ioctl resumed>) = 0 [pid 351] <... ioctl resumed>) = 0 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... futex resumed>) = 1 [pid 344] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 350] <... futex resumed>) = 0 [pid 345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... openat resumed>) = 5 [pid 345] <... openat resumed>) = 5 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 1 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] pwrite64(5, "\f", 1, 134220897 [pid 350] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... pwrite64 resumed>) = 1 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] pwrite64(5, "\f", 1, 134220897 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] <... pwrite64 resumed>) = 1 [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 350] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 1 [pid 344] <... futex resumed>) = 0 [pid 351] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... openat resumed>) = 6 [pid 345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... futex resumed>) = 1 [pid 350] <... futex resumed>) = 0 [pid 345] <... openat resumed>) = 6 [pid 351] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 350] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 26.142475][ T349] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 26.143999][ T347] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 26.158582][ T347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.167166][ T349] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 26.182055][ T347] F2FS-fs (loop1): invalid crc value [ 26.198232][ T349] F2FS-fs (loop3): invalid crc value [pid 345] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 343] <... mmap resumed>) = 0x200000000000 [pid 343] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 343] read(6 [pid 350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 344] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 350] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE [pid 344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] <... mprotect resumed>) = 0 [pid 344] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[] [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 344] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[367]}, 88) = 367 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[368]}, 88) = 368 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7fb3533d09a0, 24ci2-android-5-10/strace-static-x86_64: Process 367 attached ) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [] [pid 367] set_robust_list(0x7fb3533d09a0, 24 [pid 368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 367] <... set_robust_list resumed>) = 0 [pid 368] read(6 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] read(6 [pid 342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 342] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 342] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[369]}, 88) = 369 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 344] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0ci2-android-5-10/strace-static-x86_64: Process 369 attached ) = 0x7fb35338f000 [pid 344] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE [pid 369] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 344] <... mprotect resumed>) = 0 [pid 344] rt_sigprocmask(SIG_BLOCK, ~[] [pid 369] <... unshare resumed>) = 0 [pid 344] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 369] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} [pid 342] <... futex resumed>) = 0 [pid 344] <... clone3 resumed> => {parent_tid=[370]}, 88) = 370 [pid 344] rt_sigprocmask(SIG_SETMASK, [] [pid 369] <... futex resumed>) = 1 [pid 369] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 344] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 26.222896][ T347] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.246827][ T349] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 344] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 350] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 350] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 370] <... unshare resumed>) = 0 [pid 350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 370] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] <... futex resumed>) = 1 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 344] <... futex resumed>) = 0 [pid 370] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 350] <... mmap resumed>) = 0x7fb35338f000 [pid 350] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[371]}, 88) = 371 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... mmap resumed>) = 0x200000000000 [pid 345] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 345] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-10/strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 371] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = 1 [pid 371] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] <... mount resumed>) = 0 [pid 349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 349] chdir("./bus") = 0 [pid 349] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 349] ioctl(4, LOOP_CLR_FD) = 0 [pid 349] close(4) = 0 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 351] <... mmap resumed>) = 0x200000000000 [pid 349] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... openat resumed>) = 4 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 349] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... ioctl resumed>) = 0 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] <... futex resumed>) = 0 [pid 349] pwrite64(5, "\f", 1, 134220897 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... pwrite64 resumed>) = 1 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 348] <... futex resumed>) = 0 [pid 349] <... openat resumed>) = 6 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 26.330545][ T347] F2FS-fs (loop1): Start checkpoint disabled! [ 26.333692][ T349] F2FS-fs (loop3): Start checkpoint disabled! [ 26.354933][ T349] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.363773][ T347] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 26.370424][ T349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 347] <... mount resumed>) = 0 [pid 347] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 347] chdir("./bus") = 0 [pid 347] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 347] ioctl(4, LOOP_CLR_FD) = 0 [pid 347] close(4) = 0 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] pwrite64(5, "\f", 1, 134220897) = 1 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 348] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 348] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[372]}, 88) = 372 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 26.399660][ T347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [pid 372] read(6 [pid 342] exit_group(0 [pid 369] <... futex resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 343] <... read resumed> ) = ? [pid 344] exit_group(0 [pid 370] <... futex resumed>) = ? [pid 344] <... exit_group resumed>) = ? [pid 345] <... futex resumed>) = ? [pid 345] +++ exited with 0 +++ [pid 367] <... read resumed> ) = ? [pid 370] +++ exited with 0 +++ [pid 350] exit_group(0) = ? [pid 371] <... futex resumed>) = ? [pid 351] <... futex resumed>) = ? [pid 351] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ [pid 346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 368] <... read resumed> ) = ? [pid 346] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 346] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 346] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[373]}, 88) = 373 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... mmap resumed>) = 0x200000000000 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] read(6 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 348] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 349] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 348] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... unshare resumed>) = 0 [pid 349] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 368] +++ exited with 0 +++ [pid 350] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 300] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./1/binderfs") = 0 [pid 300] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 300] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./1/bus" [pid 346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 346] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 346] <... mmap resumed>) = 0x7fb35338f000 [pid 346] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[] [pid 367] +++ exited with 0 +++ [pid 346] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 344] +++ exited with 0 +++ [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 346] <... clone3 resumed> => {parent_tid=[374]}, 88) = 374 [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... restart_syscall resumed>) = 0 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... restart_syscall resumed>) = 0 [pid 302] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... openat resumed>) = 3 [pid 302] fstat(3 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] getdents64(3 [pid 298] <... openat resumed>) = 3 [pid 302] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] getdents64(3 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 302] newfstatat(AT_FDCWD, "./1/binderfs" [pid 298] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] unlink("./1/binderfs" [pid 298] newfstatat(AT_FDCWD, "./1/binderfs" [pid 302] <... unlink resumed>) = 0 [pid 298] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] unlink("./1/binderfs") = 0 [pid 302] <... umount2 resumed>) = 0 [pid 298] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] <... umount2 resumed>) = 0 [pid 302] newfstatat(AT_FDCWD, "./1/bus" [pid 298] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] newfstatat(AT_FDCWD, "./1/bus" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... openat resumed>) = 4 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] fstat(4 [pid 298] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] <... openat resumed>) = 4 [pid 302] getdents64(4 [pid 298] fstat(4 [pid 302] <... getdents64 resumed>, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4 [pid 298] getdents64(4 [pid 302] <... getdents64 resumed>, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4 [pid 298] <... getdents64 resumed>, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] <... close resumed>) = 0 [pid 298] getdents64(4 [pid 302] rmdir("./1/bus" [pid 298] <... getdents64 resumed>, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./1/bus"ci2-android-5-10/strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 374] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [ 26.528927][ T49] attempt to access beyond end of device [ 26.528927][ T49] loop2: rw=2049, want=40984, limit=40427 [ 26.557329][ T7] attempt to access beyond end of device [ 26.557329][ T7] loop4: rw=2049, want=40984, limit=40427 [pid 374] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 347] <... mmap resumed>) = 0x200000000000 [pid 347] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 347] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 348] exit_group(0 [pid 349] <... futex resumed>) = ? [pid 348] <... exit_group resumed>) = ? [pid 372] <... read resumed> ) = ? [ 26.645152][ T372] BUG: scheduling while atomic: syz-executor203/372/0x00000002 [ 26.652750][ T372] Modules linked in: [ 26.656635][ T372] Preemption disabled at: [ 26.656676][ T372] [] unmap_page_range+0xa54/0x2190 [ 26.667725][ T372] CPU: 0 PID: 372 Comm: syz-executor203 Not tainted syzkaller #0 [ 26.675427][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 26.685482][ T372] Call Trace: [ 26.688770][ T372] __dump_stack+0x21/0x24 [ 26.693094][ T372] dump_stack_lvl+0x1a7/0x208 [ 26.697761][ T372] ? unmap_page_range+0xa54/0x2190 [ 26.702861][ T372] ? show_regs_print_info+0x18/0x18 [ 26.708057][ T372] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 26.713530][ T372] ? unmap_page_range+0xa54/0x2190 [ 26.718631][ T372] dump_stack+0x15/0x1c [ 26.722778][ T372] __schedule_bug+0x183/0x240 [ 26.727445][ T372] ? __migrate_task+0x190/0x190 [ 26.732284][ T372] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 26.738089][ T372] ? __stack_depot_save+0x480/0x4c0 [pid 346] exit_group(0 [pid 374] <... futex resumed>) = ? [pid 347] <... futex resumed>) = ? [pid 346] <... exit_group resumed>) = ? [pid 347] +++ exited with 0 +++ [pid 373] <... read resumed> ) = ? [pid 373] +++ exited with 0 +++ [ 26.743282][ T372] __schedule+0xcee/0x13e0 [ 26.747688][ T372] ? __kasan_slab_alloc+0xb7/0xe0 [ 26.752699][ T372] ? kmem_cache_alloc+0x15a/0x2d0 [ 26.757707][ T372] ? f2fs_register_inmem_page+0x130/0x470 [ 26.763400][ T372] ? f2fs_set_data_page_dirty+0x557/0x6e0 [ 26.769091][ T372] ? __sched_text_start+0x8/0x8 [ 26.773912][ T372] ? __mutex_add_waiter+0x184/0x280 [ 26.779099][ T372] ? __kasan_check_write+0x14/0x20 [ 26.784181][ T372] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 26.789957][ T372] schedule+0x13c/0x1d0 [ 26.794084][ T372] schedule_preempt_disabled+0x13/0x20 [ 26.799510][ T372] __mutex_lock+0x5d4/0xc40 [ 26.803984][ T372] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 26.810729][ T372] __mutex_lock_slowpath+0xe/0x10 [ 26.815723][ T372] mutex_lock+0xdb/0xf0 [ 26.819846][ T372] ? mutex_trylock+0xb0/0xb0 [ 26.824412][ T372] ? f2fs_register_inmem_page+0x130/0x470 [ 26.830102][ T372] ? kmem_cache_alloc+0x15a/0x2d0 [ 26.835096][ T372] ? f2fs_register_inmem_page+0x130/0x470 [ 26.840790][ T372] f2fs_register_inmem_page+0x211/0x470 [ 26.846316][ T372] f2fs_set_data_page_dirty+0x557/0x6e0 [ 26.851839][ T372] ? f2fs_write_data_pages+0x28f0/0x28f0 [ 26.857461][ T372] set_page_dirty+0x1a2/0x300 [ 26.862113][ T372] unmap_page_range+0x104c/0x2190 [ 26.867110][ T372] ? lru_cache_disable+0xa0/0xa0 [ 26.872020][ T372] ? copy_page_range+0x27a0/0x27a0 [ 26.877102][ T372] unmap_vmas+0x25f/0x360 [ 26.881402][ T372] ? unmap_page_range+0x2190/0x2190 [ 26.886589][ T372] ? __kasan_check_write+0x14/0x20 [ 26.891669][ T372] ? tlb_gather_mmu+0x269/0x330 [ 26.896487][ T372] exit_mmap+0x309/0x590 [ 26.900701][ T372] ? vm_brk+0x30/0x30 [ 26.904660][ T372] ? mutex_lock+0x92/0xf0 [ 26.908964][ T372] ? mutex_unlock+0x1c/0x40 [ 26.913443][ T372] __mmput+0x92/0x2d0 [ 26.917399][ T372] mmput+0x4e/0x150 [ 26.921179][ T372] do_exit+0x9d8/0x24e0 [ 26.925312][ T372] ? __kasan_check_write+0x14/0x20 [ 26.930397][ T372] ? put_task_struct+0x90/0x90 [ 26.935542][ T372] ? compat_start_thread+0x80/0x80 [ 26.940632][ T372] ? __kasan_check_write+0x14/0x20 [ 26.945725][ T372] ? _raw_spin_lock_irq+0x95/0xf0 [ 26.950729][ T372] do_group_exit+0x149/0x310 [ 26.955303][ T372] ? __kasan_check_write+0x14/0x20 [ 26.960413][ T372] ? recalc_sigpending+0x1ac/0x230 [ 26.965500][ T372] get_signal+0xfb1/0x1300 [ 26.969907][ T372] arch_do_signal_or_restart+0xe7/0x11b0 [ 26.975527][ T372] ? __kasan_check_write+0x14/0x20 [ 26.980610][ T372] ? ptrace_stop+0x69f/0x9c0 [ 26.985173][ T372] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 26.990779][ T372] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.995963][ T372] ? ptrace_notify+0x1ea/0x270 [ 27.000702][ T372] ? vfs_write+0xd70/0xd70 [ 27.005095][ T372] exit_to_user_mode_loop+0xa2/0xe0 [ 27.010269][ T372] exit_to_user_mode_prepare+0x76/0xa0 [ 27.015709][ T372] syscall_exit_to_user_mode+0x1d/0x40 [ 27.021146][ T372] do_syscall_64+0x3d/0x40 [ 27.025553][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.031422][ T372] RIP: 0033:0x7fb35341cb89 [ 27.035809][ T372] Code: Unable to access opcode bytes at RIP 0x7fb35341cb5f. [pid 349] +++ exited with 0 +++ [ 27.043152][ T372] RSP: 002b:00007fb3533d0218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 27.051537][ T372] RAX: 0000000000c21000 RBX: 00007fb3534c9e58 RCX: 00007fb35341cb89 [ 27.059485][ T372] RDX: 00000000fffffeb1 RSI: 0000200000005d80 RDI: 0000000000000006 [ 27.067432][ T372] RBP: 00007fb3534c9e50 R08: 00007fb3533d06c0 R09: 33203a6b63617473 [ 27.075382][ T372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb35349aabc [ 27.083326][ T372] R13: 0000200000000000 R14: 0000200000005d80 R15: 00000000fffffeb1 [pid 374] +++ exited with 0 +++ [pid 346] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 299] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./1/binderfs") = 0 [ 27.092121][ T372] ------------[ cut here ]------------ [ 27.097637][ T372] DEBUG_LOCKS_WARN_ON(val > preempt_count()) [ 27.097716][ T372] WARNING: CPU: 0 PID: 372 at kernel/sched/core.c:4488 preempt_count_sub+0xa7/0x170 [ 27.113118][ T372] Modules linked in: [ 27.117018][ T372] CPU: 0 PID: 372 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 27.126152][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 27.136283][ T372] RIP: 0010:preempt_count_sub+0xa7/0x170 [pid 299] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./1") = 0 [pid 300] mkdir("./2", 0777) = 0 [ 27.141929][ T372] Code: e8 03 0f b6 04 18 84 c0 0f 85 8b 00 00 00 83 3d b6 e1 7e 05 00 75 d2 48 c7 c7 80 14 e8 84 48 c7 c6 20 15 e8 84 e8 19 68 35 03 <0f> 0b eb bb e8 50 9d f6 00 85 c0 74 b2 48 c7 c0 c8 b3 c3 86 48 c1 [ 27.161547][ T372] RSP: 0018:ffffc90000fe7588 EFLAGS: 00010246 [ 27.167604][ T372] RAX: 32e1e7670dcf3f00 RBX: dffffc0000000000 RCX: ffff88810c5b5000 [ 27.177659][ T372] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 27.187087][ T372] RBP: ffffc90000fe7598 R08: ffff8881f7127493 R09: 1ffff1103ee24e92 [ 27.195222][ T372] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: 1ffff920001fcee0 [ 27.203319][ T372] R13: dffffc0000000000 R14: ffff88811df135f0 R15: 1ffff920001fcf24 [ 27.211326][ T372] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.220264][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.226851][ T372] CR2: 0000200000852000 CR3: 0000000105f96000 CR4: 00000000003506b0 [ 27.234844][ T372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 376 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 27.242831][ T372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.250785][ T372] Call Trace: [ 27.254096][ T372] _raw_spin_unlock+0x4d/0x70 [ 27.258754][ T372] unmap_page_range+0x1d78/0x2190 [ 27.263780][ T372] ? lru_cache_disable+0xa0/0xa0 [ 27.268707][ T372] ? copy_page_range+0x27a0/0x27a0 [ 27.273829][ T372] unmap_vmas+0x25f/0x360 [ 27.278154][ T372] ? unmap_page_range+0x2190/0x2190 [ 27.283366][ T372] ? __kasan_check_write+0x14/0x20 [ 27.288470][ T372] ? tlb_gather_mmu+0x269/0x330 [ 27.293529][ T372] exit_mmap+0x309/0x590 ci2-android-5-10/strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] chdir("./2") = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 376] write(1, "executing program\n", 18) = 18 executing program [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 376] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[377]}, 88) = 377 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] memfd_create("syzkaller", 0) = 3 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 302] <... rmdir resumed>) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./1") = 0 [pid 302] mkdir("./2", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./1") = 0 [pid 302] <... clone resumed>, child_tidptr=0x55556a4ec690) = 378 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] mkdir("./2", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 379 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] chdir("./2") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] write(1, "executing program\n", 18) = 18 executing program [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 378] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[380]}, 88) = 380 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] chdir("./2") = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 379] write(1, "executing program\n", 18) = 18 executing program [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 379] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[381]}, 88) = 381 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 27.297767][ T372] ? vm_brk+0x30/0x30 [ 27.311296][ T372] ? mutex_lock+0x92/0xf0 [ 27.315784][ T372] ? mutex_unlock+0x1c/0x40 [ 27.320491][ T372] __mmput+0x92/0x2d0 [ 27.331265][ T372] mmput+0x4e/0x150 [ 27.335078][ T372] do_exit+0x9d8/0x24e0 [ 27.339224][ T372] ? __kasan_check_write+0x14/0x20 [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 381 attached ci2-android-5-10/strace-static-x86_64: Process 380 attached [pid 299] <... umount2 resumed>) = 0 [pid 381] set_robust_list(0x7fb3533f19a0, 24 [pid 380] set_robust_list(0x7fb3533f19a0, 24 [pid 379] <... futex resumed>) = 0 [pid 299] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 380] <... set_robust_list resumed>) = 0 [pid 381] <... set_robust_list resumed>) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [] [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [] [pid 380] memfd_create("syzkaller", 0 [pid 299] newfstatat(AT_FDCWD, "./1/bus" [pid 380] <... memfd_create resumed>) = 3 [pid 381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 380] <... mmap resumed>) = 0x7fb34afd1000 [pid 381] memfd_create("syzkaller", 0) = 3 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 299] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [ 27.374211][ T372] ? put_task_struct+0x90/0x90 [ 27.379167][ T372] ? compat_start_thread+0x80/0x80 [ 27.391291][ T372] ? __kasan_check_write+0x14/0x20 [ 27.396413][ T372] ? _raw_spin_lock_irq+0x95/0xf0 [pid 299] close(4) = 0 [pid 299] rmdir("./1/bus") = 0 [pid 381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./1") = 0 [pid 299] mkdir("./2", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 382 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] chdir("./2") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 382] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[383]}, 88) = 383 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.422091][ T372] do_group_exit+0x149/0x310 [ 27.431267][ T372] ? __kasan_check_write+0x14/0x20 [ 27.436379][ T372] ? recalc_sigpending+0x1ac/0x230 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 381] <... write resumed>) = 20699119 [pid 381] munmap(0x7fb34afd1000, 138412032 [pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 381] <... munmap resumed>) = 0 [ 27.469765][ T372] get_signal+0xfb1/0x1300 [ 27.481299][ T372] arch_do_signal_or_restart+0xe7/0x11b0 [ 27.486950][ T372] ? __kasan_check_write+0x14/0x20 [pid 381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 381] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 381] close(3) = 0 [pid 381] close(4) = 0 [pid 381] mkdir("./bus", 0777) = 0 [pid 381] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [ 27.516687][ T372] ? ptrace_stop+0x69f/0x9c0 [ 27.522366][ T372] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 27.531714][ T381] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 27.550346][ T381] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.558561][ T372] ? _raw_spin_unlock_irq+0x4e/0x70 [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [ 27.563783][ T372] ? ptrace_notify+0x1ea/0x270 [ 27.568540][ T372] ? vfs_write+0xd70/0xd70 [ 27.591890][ T381] F2FS-fs (loop0): invalid crc value [ 27.601526][ T372] exit_to_user_mode_loop+0xa2/0xe0 [ 27.606729][ T372] exit_to_user_mode_prepare+0x76/0xa0 [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 377] <... write resumed>) = 20699119 [pid 377] munmap(0x7fb34afd1000, 138412032 [pid 383] <... write resumed>) = 20699119 [pid 383] munmap(0x7fb34afd1000, 138412032) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... munmap resumed>) = 0 [pid 383] <... openat resumed>) = 4 [pid 383] ioctl(4, LOOP_SET_FD, 3 [pid 377] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 383] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 377] ioctl(4, LOOP_SET_FD, 3 [pid 383] close(3) = 0 [ 27.621891][ T381] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.642047][ T372] syscall_exit_to_user_mode+0x1d/0x40 [ 27.647511][ T372] do_syscall_64+0x3d/0x40 [ 27.662492][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [pid 383] close(4) = 0 [pid 377] <... ioctl resumed>) = 0 [pid 383] mkdir("./bus", 0777) = 0 [pid 383] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 377] close(3) = 0 [pid 377] close(4 [pid 380] <... write resumed>) = 20699119 [ 27.678288][ T372] RIP: 0033:0x7fb35341cb89 [ 27.682159][ T381] F2FS-fs (loop0): Start checkpoint disabled! [ 27.687712][ T372] Code: Unable to access opcode bytes at RIP 0x7fb35341cb5f. [ 27.691852][ T381] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.696660][ T372] RSP: 002b:00007fb3533d0218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 27.713162][ T372] RAX: 0000000000c21000 RBX: 00007fb3534c9e58 RCX: 00007fb35341cb89 [ 27.719693][ T381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [pid 377] <... close resumed>) = 0 [pid 377] mkdir("./bus", 0777 [pid 381] <... mount resumed>) = 0 [pid 380] munmap(0x7fb34afd1000, 138412032 [pid 377] <... mkdir resumed>) = 0 [pid 377] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 381] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 380] <... munmap resumed>) = 0 [pid 381] <... openat resumed>) = 3 [ 27.722939][ T383] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 27.728844][ T372] RDX: 00000000fffffeb1 RSI: 0000200000005d80 RDI: 0000000000000006 [ 27.737590][ T377] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 27.745339][ T372] RBP: 00007fb3534c9e50 R08: 00007fb3533d06c0 R09: 33203a6b63617473 [ 27.753367][ T383] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.760380][ T372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb35349aabc [pid 380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 381] chdir("./bus" [pid 380] <... openat resumed>) = 4 [pid 381] <... chdir resumed>) = 0 [pid 380] ioctl(4, LOOP_SET_FD, 3 [pid 381] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 372] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 381] <... openat resumed>) = 4 [pid 380] <... ioctl resumed>) = 0 [pid 381] ioctl(4, LOOP_CLR_FD) = 0 [pid 381] close(4) = 0 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] close(3 [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... close resumed>) = 0 [pid 380] close(4 [pid 379] <... futex resumed>) = 0 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=75 /* 0.75 s */} --- [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] <... futex resumed>) = 0 [pid 381] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... openat resumed>) = 4 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./1/binderfs") = 0 [pid 301] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 381] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... ioctl resumed>) = 0 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... openat resumed>) = 5 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 381] pwrite64(5, "\f", 1, 134220897 [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... pwrite64 resumed>) = 1 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [pid 381] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... openat resumed>) = 6 [pid 379] <... futex resumed>) = 0 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 381] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.769407][ T377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.776560][ T372] R13: 0000200000000000 R14: 0000200000005d80 R15: 00000000fffffeb1 [ 27.786252][ T383] F2FS-fs (loop1): invalid crc value [ 27.792657][ T372] ---[ end trace e5df8cc5846ff082 ]--- [ 27.800185][ T383] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.816140][ T377] F2FS-fs (loop2): invalid crc value [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... close resumed>) = 0 [pid 380] mkdir("./bus", 0777) = 0 [pid 380] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 379] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 379] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[394]}, 88) = 394 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.841877][ T377] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.871298][ T383] F2FS-fs (loop1): Start checkpoint disabled! [ 27.878139][ T383] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.886068][ T377] F2FS-fs (loop2): Start checkpoint disabled! [pid 379] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... mmap resumed>) = 0x200000000000 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-10/strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] read(6 [pid 383] <... mount resumed>) = 0 [pid 383] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 383] chdir("./bus") = 0 [pid 383] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 383] ioctl(4, LOOP_CLR_FD) = 0 [pid 383] close(4) = 0 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... openat resumed>) = 4 [pid 382] <... futex resumed>) = 0 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] <... futex resumed>) = 0 [pid 383] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... ioctl resumed>) = 0 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... openat resumed>) = 5 [pid 382] <... futex resumed>) = 0 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] pwrite64(5, "\f", 1, 134220897 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... pwrite64 resumed>) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... openat resumed>) = 6 [pid 382] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 383] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 383] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 382] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 381] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 379] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... unshare resumed>) = 0 [pid 381] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] <... futex resumed>) = 0 [ 27.892512][ T383] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 27.900729][ T377] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.909090][ T380] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 27.918567][ T380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 381] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] <... mount resumed>) = 0 [pid 377] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 377] chdir("./bus") = 0 [pid 377] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 377] ioctl(4, LOOP_CLR_FD) = 0 [pid 377] close(4) = 0 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... futex resumed>) = 0 [pid 377] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... ioctl resumed>) = 0 [pid 382] <... mmap resumed>) = 0x7fb3533b0000 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... mprotect resumed>) = 0 [pid 377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 376] <... futex resumed>) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[] [pid 377] <... openat resumed>) = 5 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 377] pwrite64(5, "\f", 1, 134220897 [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] <... clone3 resumed> => {parent_tid=[397]}, 88) = 397 [pid 377] <... pwrite64 resumed>) = 1 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 382] rt_sigprocmask(SIG_SETMASK, [] [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 377] <... futex resumed>) = 1 [pid 382] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 397 attached [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] set_robust_list(0x7fb3533d09a0, 24 [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 397] <... set_robust_list resumed>) = 0 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 397] read(6 [pid 377] <... openat resumed>) = 6 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... futex resumed>) = 0 [ 27.953120][ T380] F2FS-fs (loop4): invalid crc value [ 27.958497][ T377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 27.969281][ T380] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.996307][ T380] F2FS-fs (loop4): Start checkpoint disabled! [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 377] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... mount resumed>) = 0 [pid 380] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 380] chdir("./bus") = 0 [pid 380] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 382] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 382] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[398]}, 88) = 398 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 398 attached [pid 380] <... openat resumed>) = 4 [pid 398] set_robust_list(0x7fb3533af9a0, 24 [pid 380] ioctl(4, LOOP_CLR_FD [pid 398] <... set_robust_list resumed>) = 0 [pid 380] <... ioctl resumed>) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [] [pid 380] close(4 [pid 398] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] <... close resumed>) = 0 [pid 398] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... unshare resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 398] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] <... futex resumed>) = 1 [pid 382] <... futex resumed>) = 0 [pid 398] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 380] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... openat resumed>) = 4 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... ioctl resumed>) = 0 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... openat resumed>) = 5 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] pwrite64(5, "\f", 1, 134220897 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... pwrite64 resumed>) = 1 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... openat resumed>) = 6 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = 0 [pid 380] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [ 28.011274][ T380] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.018345][ T380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 376] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[399]}, 88) = 399 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] read(6 [pid 377] <... mmap resumed>) = 0x200000000000 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] <... mmap resumed>) = 0x200000000000 [pid 383] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 378] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[400]}, 88) = 400 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 376] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 376] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}ci2-android-5-10/strace-static-x86_64: Process 400 attached ) = -1 ETIMEDOUT (Connection timed out) [pid 376] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] set_robust_list(0x7fb3533d09a0, 24 [pid 377] <... futex resumed>) = 0 [pid 376] <... futex resumed>) = 1 [pid 400] <... set_robust_list resumed>) = 0 [pid 377] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 376] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] rt_sigprocmask(SIG_SETMASK, [] [pid 377] <... unshare resumed>) = 0 [pid 400] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 377] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] read(6 [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 377] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] exit_group(0) = ? [pid 381] <... futex resumed>) = ? [pid 394] <... read resumed> ) = ? [pid 380] <... mmap resumed>) = 0x200000000000 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] +++ exited with 0 +++ [pid 394] +++ exited with 0 +++ [pid 379] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 378] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 378] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 380] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 378] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... unshare resumed>) = 0 [pid 380] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 380] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./2/binderfs") = 0 [pid 298] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 298] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./2/bus" [pid 301] <... umount2 resumed>) = 0 [pid 301] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./1/bus") = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./1") = 0 [pid 382] exit_group(0) = ? [pid 398] <... futex resumed>) = ? [pid 383] <... futex resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 398] +++ exited with 0 +++ [pid 301] mkdir("./2", 0777 [pid 397] <... read resumed> ) = ? [pid 301] <... mkdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 401 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 401 attached [pid 401] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] chdir("./2") = 0 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 401] setpgid(0, 0) = 0 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 401] write(3, "1000", 4) = 4 [pid 401] close(3) = 0 [pid 401] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 401] write(1, "executing program\n", 18) = 18 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 401] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[402]}, 88) = 402 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] memfd_create("syzkaller", 0) = 3 [pid 402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 397] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 299] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 299] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./2/binderfs") = 0 [pid 299] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 299] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./2/bus" [pid 376] exit_group(0 [pid 377] <... futex resumed>) = ? [pid 376] <... exit_group resumed>) = ? [pid 399] <... read resumed> ) = ? [pid 378] exit_group(0) = ? [ 28.297107][ T399] BUG: scheduling while atomic: syz-executor203/399/0x00000002 [ 28.304697][ T399] Modules linked in: [ 28.308591][ T399] Preemption disabled at: [ 28.308611][ T399] [] unmap_page_range+0xa54/0x2190 [ 28.319653][ T399] CPU: 0 PID: 399 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 28.328739][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 28.338781][ T399] Call Trace: [ 28.342060][ T399] __dump_stack+0x21/0x24 [ 28.346375][ T399] dump_stack_lvl+0x1a7/0x208 [ 28.351040][ T399] ? unmap_page_range+0xa54/0x2190 [ 28.356139][ T399] ? show_regs_print_info+0x18/0x18 [ 28.361329][ T399] ? unmap_page_range+0xa54/0x2190 [ 28.366511][ T399] dump_stack+0x15/0x1c [ 28.370660][ T399] __schedule_bug+0x183/0x240 [ 28.375323][ T399] ? __migrate_task+0x190/0x190 [ 28.380157][ T399] __schedule+0xcee/0x13e0 [ 28.384655][ T399] ? __kasan_slab_alloc+0xb7/0xe0 [ 28.389661][ T399] ? kmem_cache_alloc+0x15a/0x2d0 [pid 402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 402] munmap(0x7fb34afd1000, 138412032) = 0 [pid 402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 400] <... read resumed> ) = ? [pid 400] +++ exited with 0 +++ [ 28.394684][ T399] ? f2fs_register_inmem_page+0x130/0x470 [ 28.400394][ T399] ? f2fs_set_data_page_dirty+0x557/0x6e0 [ 28.406105][ T399] ? __sched_text_start+0x8/0x8 [ 28.410945][ T399] ? __mutex_add_waiter+0x184/0x280 [ 28.416133][ T399] ? __kasan_check_write+0x14/0x20 [ 28.421234][ T399] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 28.427029][ T399] schedule+0x13c/0x1d0 [ 28.431175][ T399] schedule_preempt_disabled+0x13/0x20 [ 28.436626][ T399] __mutex_lock+0x5d4/0xc40 [ 28.441122][ T399] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [pid 380] <... futex resumed>) = ? [ 28.447883][ T399] __mutex_lock_slowpath+0xe/0x10 [ 28.452907][ T399] mutex_lock+0xdb/0xf0 [ 28.457048][ T399] ? mutex_trylock+0xb0/0xb0 [ 28.461623][ T399] ? f2fs_register_inmem_page+0x130/0x470 [ 28.467323][ T399] ? kmem_cache_alloc+0x15a/0x2d0 [ 28.472331][ T399] ? f2fs_register_inmem_page+0x130/0x470 [ 28.478031][ T399] f2fs_register_inmem_page+0x211/0x470 [ 28.483564][ T399] f2fs_set_data_page_dirty+0x557/0x6e0 [ 28.489112][ T399] ? f2fs_write_data_pages+0x28f0/0x28f0 [ 28.494733][ T399] set_page_dirty+0x1a2/0x300 [ 28.499395][ T399] unmap_page_range+0x104c/0x2190 [ 28.504395][ T399] ? lru_cache_disable+0xa0/0xa0 [ 28.509308][ T399] ? copy_page_range+0x27a0/0x27a0 [ 28.514399][ T399] unmap_vmas+0x25f/0x360 [ 28.518709][ T399] ? unmap_page_range+0x2190/0x2190 [ 28.523876][ T399] ? __kasan_check_write+0x14/0x20 [ 28.528959][ T399] ? tlb_gather_mmu+0x269/0x330 [ 28.533795][ T399] exit_mmap+0x309/0x590 [ 28.538015][ T399] ? vm_brk+0x30/0x30 [ 28.541971][ T399] ? mutex_lock+0x92/0xf0 [ 28.546276][ T399] ? mutex_unlock+0x1c/0x40 [ 28.550752][ T399] __mmput+0x92/0x2d0 [ 28.554707][ T399] mmput+0x4e/0x150 [ 28.558509][ T399] do_exit+0x9d8/0x24e0 [ 28.562642][ T399] ? put_task_struct+0x90/0x90 [ 28.567384][ T399] ? __kasan_check_write+0x14/0x20 [ 28.572466][ T399] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.577461][ T399] do_group_exit+0x149/0x310 [ 28.582025][ T399] ? __kasan_check_write+0x14/0x20 [ 28.587106][ T399] ? recalc_sigpending+0x1ac/0x230 [ 28.592188][ T399] get_signal+0xfb1/0x1300 [ 28.596594][ T399] arch_do_signal_or_restart+0xe7/0x11b0 [ 28.602212][ T399] ? __kasan_check_write+0x14/0x20 [ 28.607291][ T399] ? ptrace_stop+0x69f/0x9c0 [ 28.611854][ T399] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 28.617454][ T399] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.622620][ T399] ? ptrace_notify+0x1ea/0x270 [ 28.627351][ T399] ? vfs_write+0xd70/0xd70 [ 28.631739][ T399] exit_to_user_mode_loop+0xa2/0xe0 [ 28.636908][ T399] exit_to_user_mode_prepare+0x76/0xa0 [ 28.642340][ T399] syscall_exit_to_user_mode+0x1d/0x40 [ 28.647769][ T399] do_syscall_64+0x3d/0x40 [ 28.652158][ T399] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.658022][ T399] RIP: 0033:0x7fb35341cb89 [ 28.662427][ T399] Code: Unable to access opcode bytes at RIP 0x7fb35341cb5f. [ 28.669763][ T399] RSP: 002b:00007fb3533d0218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 28.678159][ T399] RAX: 0000000000cc0000 RBX: 00007fb3534c9e58 RCX: 00007fb35341cb89 [ 28.686102][ T399] RDX: 00000000fffffeb1 RSI: 0000200000005d80 RDI: 0000000000000006 [pid 377] +++ exited with 0 +++ [pid 380] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 399] +++ exited with 0 +++ [pid 376] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 302] <... restart_syscall resumed>) = 0 [pid 300] <... restart_syscall resumed>) = 0 [pid 302] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./2/binderfs" [pid 300] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] <... unlink resumed>) = 0 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./2/binderfs" [pid 302] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 300] <... unlink resumed>) = 0 [pid 300] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 402] <... openat resumed>) = 4 [ 28.694046][ T399] RBP: 00007fb3534c9e50 R08: 00007fb3533d06c0 R09: 33203a6b63617473 [ 28.701994][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb35349aabc [ 28.709935][ T399] R13: 0000200000000000 R14: 0000200000005d80 R15: 00000000fffffeb1 [pid 402] ioctl(4, LOOP_SET_FD, 3 [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./2") = 0 [pid 299] mkdir("./3", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 403 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] chdir("./3") = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 403] write(1, "executing program\n", 18) = 18 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 403] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[405]}, 88) = 405 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 402] <... ioctl resumed>) = 0 [pid 402] close(3) = 0 [pid 402] close(4ci2-android-5-10/strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] memfd_create("syzkaller", 0) = 3 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 298] <... rmdir resumed>) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./2") = 0 [pid 298] mkdir("./3", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 405] munmap(0x7fb34afd1000, 138412032) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 402] <... close resumed>) = 0 [pid 402] mkdir("./bus", 0777) = 0 [pid 402] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 405] <... openat resumed>) = 4 [pid 298] <... openat resumed>) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[] [pid 405] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 407 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] <... ioctl resumed>) = 0 [pid 405] close(3) = 0 [pid 405] close(4ci2-android-5-10/strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] chdir("./3") = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 28.954708][ T402] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 28.971443][ T402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 28.982769][ T402] F2FS-fs (loop3): invalid crc value [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./2/bus" [pid 407] <... close resumed>) = 0 [pid 407] symlink("/dev/binderfs", "./binderfs" [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./2") = 0 [pid 300] mkdir("./3", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 407] <... symlink resumed>) = 0 [pid 407] write(1, "executing program\n", 18 [pid 405] <... close resumed>) = 0 [pid 405] mkdir("./bus", 0777) = 0 executing program [pid 405] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 407] <... write resumed>) = 18 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4 [pid 407] <... mmap resumed>) = 0x7fb3533d1000 [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./2/bus") = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./2") = 0 [pid 302] mkdir("./3", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 407] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[410]}, 88) = 410 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] memfd_create("syzkaller", 0) = 3 [pid 410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 300] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [ 29.003892][ T402] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.040072][ T402] F2FS-fs (loop3): Start checkpoint disabled! [ 29.046810][ T402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 302] ioctl(3, LOOP_CLR_FD [pid 300] ioctl(3, LOOP_CLR_FD [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] close(3 [pid 300] close(3 [pid 302] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[] [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x55556a4ec690) = 411 [pid 300] <... clone resumed>, child_tidptr=0x55556a4ec690) = 412 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 300] rt_sigprocmask(SIG_SETMASK, [] [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 300] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] chdir("./3") = 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 411] setpgid(0, 0) = 0 [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 411] <... openat resumed>) = 3 [pid 411] write(3, "1000", 4) = 4 [pid 411] close(3) = 0 [pid 411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 411] write(1, "executing program\n", 18) = 18 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 411] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 411] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[413]}, 88) = 413 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 413 attached ci2-android-5-10/strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [] [pid 413] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 412] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 412] chdir("./3") = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] close(3) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 413] memfd_create("syzkaller", 0 executing program [pid 412] write(1, "executing program\n", 18) = 18 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... memfd_create resumed>) = 3 [pid 412] <... futex resumed>) = 0 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0} [pid 413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 412] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 413] <... mmap resumed>) = 0x7fb34afd1000 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 412] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[414]}, 88) = 414 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 402] <... mount resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 414] memfd_create("syzkaller", 0) = 3 [pid 414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 402] <... openat resumed>) = 3 [pid 402] chdir("./bus") = 0 [pid 402] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 402] ioctl(4, LOOP_CLR_FD) = 0 [pid 402] close(4) = 0 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] pwrite64(5, "\f", 1, 134220897) = 1 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 401] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.062536][ T405] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 29.070515][ T405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.082359][ T402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 29.141275][ T405] F2FS-fs (loop1): invalid crc value [pid 402] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 401] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 401] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 401] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[417]}, 88) = 417 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x7fb3533d09a0, 24 [pid 410] <... write resumed>) = 20699119 [pid 417] <... set_robust_list resumed>) = 0 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] read(6 [pid 410] munmap(0x7fb34afd1000, 138412032) = 0 [pid 410] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 410] close(3) = 0 [pid 410] close(4) = 0 [pid 410] mkdir("./bus", 0777) = 0 [ 29.169302][ T405] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 410] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 401] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 401] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[419]}, 88) = 419 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... mmap resumed>) = 0x200000000000 ci2-android-5-10/strace-static-x86_64: Process 419 attached [pid 419] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 419] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 419] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 419] <... futex resumed>) = 1 [pid 419] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [ 29.211392][ T410] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 29.231269][ T410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 29.240847][ T405] F2FS-fs (loop1): Start checkpoint disabled! [ 29.250720][ T410] F2FS-fs (loop0): invalid crc value [pid 413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 405] <... mount resumed>) = 0 [pid 405] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 405] chdir("./bus") = 0 [pid 405] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 405] ioctl(4, LOOP_CLR_FD) = 0 [pid 405] close(4) = 0 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] pwrite64(5, "\f", 1, 134220897) = 1 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 403] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [ 29.258183][ T405] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 29.273559][ T405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 29.284349][ T410] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 405] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 410] <... mount resumed>) = 0 [pid 410] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 410] chdir("./bus") = 0 [pid 410] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 410] ioctl(4, LOOP_CLR_FD) = 0 [pid 410] close(4) = 0 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... futex resumed>) = 1 [pid 410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] pwrite64(5, "\f", 1, 134220897) = 1 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 403] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[422]}, 88) = 422 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] read(6 [pid 401] exit_group(0 [pid 419] <... futex resumed>) = ? [pid 401] <... exit_group resumed>) = ? [pid 419] +++ exited with 0 +++ [pid 402] <... futex resumed>) = ? [pid 402] +++ exited with 0 +++ [ 29.327570][ T410] F2FS-fs (loop0): Start checkpoint disabled! [ 29.334285][ T410] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 29.341363][ T410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [pid 417] <... read resumed> ) = ? [pid 413] <... write resumed>) = 20699119 [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 413] munmap(0x7fb34afd1000, 138412032 [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 407] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 407] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 407] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[423]}, 88) = 423 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... munmap resumed>) = 0 [pid 413] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 413] ioctl(4, LOOP_SET_FD, 3 [pid 403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 403] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 403] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[425]}, 88) = 425 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 403] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... ioctl resumed>) = 0 [pid 413] close(3) = 0 [pid 413] close(4) = 0 [pid 413] mkdir("./bus", 0777ci2-android-5-10/strace-static-x86_64: Process 423 attached [pid 423] set_robust_list(0x7fb3533d09a0, 24 [pid 413] <... mkdir resumed>) = 0 [pid 413] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 423] <... set_robust_list resumed>) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] read(6ci2-android-5-10/strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 425] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] <... futex resumed>) = 0 [pid 425] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 405] <... mmap resumed>) = 0x200000000000 [pid 405] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] +++ exited with 0 +++ [pid 401] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 301] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... restart_syscall resumed>) = 0 [pid 407] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./2/binderfs") = 0 [pid 301] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 301] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./2/bus" [pid 407] <... mmap resumed>) = 0x7fb35338f000 [pid 407] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[427]}, 88) = 427 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 427] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 427] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] <... mmap resumed>) = 0x200000000000 [pid 410] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... write resumed>) = 20699119 [pid 414] munmap(0x7fb34afd1000, 138412032) = 0 [pid 414] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 414] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 414] close(3) = 0 [ 29.418299][ T413] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 29.448258][ T413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 29.457419][ T413] F2FS-fs (loop4): invalid crc value [pid 414] close(4) = 0 [pid 414] mkdir("./bus", 0777) = 0 [ 29.493590][ T413] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.506336][ T414] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 29.514490][ T414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 29.523664][ T414] F2FS-fs (loop2): invalid crc value [pid 414] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 403] exit_group(0 [pid 425] <... futex resumed>) = ? [pid 403] <... exit_group resumed>) = ? [pid 425] +++ exited with 0 +++ [pid 405] <... futex resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 422] <... read resumed> ) = ? [ 29.541893][ T414] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 422] +++ exited with 0 +++ [pid 403] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 299] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./3/binderfs") = 0 [pid 299] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 299] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./3/bus" [pid 407] exit_group(0 [pid 427] <... futex resumed>) = ? [pid 407] <... exit_group resumed>) = ? [pid 423] <... read resumed> ) = ? [pid 423] +++ exited with 0 +++ [pid 413] <... mount resumed>) = 0 [pid 410] <... futex resumed>) = ? [pid 413] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 413] chdir("./bus") = 0 [pid 413] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 427] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ [pid 407] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [ 29.590091][ T413] F2FS-fs (loop4): Start checkpoint disabled! [ 29.605980][ T414] F2FS-fs (loop2): Start checkpoint disabled! [ 29.612816][ T413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.620545][ T413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 29.626562][ T414] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 414] <... mount resumed>) = 0 [pid 414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 414] chdir("./bus") = 0 [pid 414] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 298] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./3/binderfs") = 0 [pid 298] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 414] <... openat resumed>) = 4 [pid 413] <... openat resumed>) = 4 [pid 414] ioctl(4, LOOP_CLR_FD [pid 413] ioctl(4, LOOP_CLR_FD [pid 414] <... ioctl resumed>) = 0 [pid 413] <... ioctl resumed>) = 0 [pid 414] close(4 [pid 413] close(4 [pid 414] <... close resumed>) = 0 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... close resumed>) = 0 [pid 414] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... openat resumed>) = 4 [pid 411] <... futex resumed>) = 0 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... ioctl resumed>) = 0 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = 0 [pid 411] <... futex resumed>) = 1 [pid 414] <... futex resumed>) = 1 [pid 413] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 412] <... futex resumed>) = 0 [pid 414] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... openat resumed>) = 4 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 413] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] <... openat resumed>) = 5 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 0 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] <... futex resumed>) = 0 [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] pwrite64(5, "\f", 1, 134220897 [pid 412] <... futex resumed>) = 0 [pid 414] <... pwrite64 resumed>) = 1 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] <... futex resumed>) = 0 [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 412] <... futex resumed>) = 0 [pid 414] <... openat resumed>) = 6 [pid 413] <... futex resumed>) = 0 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 414] <... futex resumed>) = 0 [pid 413] <... ioctl resumed>) = 0 [pid 412] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 411] <... futex resumed>) = 0 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] pwrite64(5, "\f", 1, 134220897 [pid 411] <... futex resumed>) = 0 [pid 413] <... pwrite64 resumed>) = 1 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] <... futex resumed>) = 0 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 29.642814][ T414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [pid 413] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 301] <... rmdir resumed>) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./2") = 0 [pid 301] mkdir("./3", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 412] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[433]}, 88) = 433 [pid 411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... mmap resumed>) = 0x7fb3533b0000 [pid 411] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 411] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[434]}, 88) = 434 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 411] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 433 attached ci2-android-5-10/strace-static-x86_64: Process 434 attached [pid 433] set_robust_list(0x7fb3533d09a0, 24 [pid 434] set_robust_list(0x7fb3533d09a0, 24 [pid 433] <... set_robust_list resumed>) = 0 [pid 434] <... set_robust_list resumed>) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [] [pid 434] rt_sigprocmask(SIG_SETMASK, [] [pid 433] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 434] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 433] read(6 [pid 434] read(6 [pid 413] <... mmap resumed>) = 0x200000000000 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... openat resumed>) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 435 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] chdir("./3") = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3) = 0 [pid 435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 435] write(1, "executing program\n", 18) = 18 executing program [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 435] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 435] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[436]}, 88) = 436 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 414] <... mmap resumed>) = 0x200000000000 ci2-android-5-10/strace-static-x86_64: Process 436 attached [pid 436] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] memfd_create("syzkaller", 0) = 3 [pid 436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 412] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 414] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... mmap resumed>) = 0x7fb35338f000 [pid 411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 412] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE [pid 414] <... futex resumed>) = 0 [pid 411] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] <... futex resumed>) = 0 [pid 411] <... futex resumed>) = 1 [pid 413] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 411] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... unshare resumed>) = 0 [pid 413] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] <... futex resumed>) = 0 [pid 413] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... mprotect resumed>) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[437]}, 88) = 437 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 437] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 437] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./3") = 0 [pid 299] mkdir("./4", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 438 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] chdir("./4") = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 438] write(1, "executing program\n", 18) = 18 executing program [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 438] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[439]}, 88) = 439 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./3/bus") = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./3") = 0 [pid 298] mkdir("./4", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 440 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x55556a4ec6a0, 24 [pid 411] exit_group(0 [pid 413] <... futex resumed>) = ? [pid 411] <... exit_group resumed>) = ? [pid 440] <... set_robust_list resumed>) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] chdir("./4") = 0 [pid 440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 440] setpgid(0, 0) = 0 [pid 440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 440] write(3, "1000", 4) = 4 [pid 440] close(3) = 0 [pid 440] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 440] write(1, "executing program\n", 18) = 18 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 440] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[441]}, 88) = 441 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 441 attached [pid 434] <... read resumed> ) = ? [pid 413] +++ exited with 0 +++ [pid 412] exit_group(0 [pid 437] <... futex resumed>) = ? [pid 414] <... futex resumed>) = ? [pid 412] <... exit_group resumed>) = ? [pid 437] +++ exited with 0 +++ [pid 414] +++ exited with 0 +++ [pid 434] +++ exited with 0 +++ [pid 411] +++ exited with 0 +++ [pid 441] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 433] <... read resumed> ) = ? [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=411, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 441] rt_sigprocmask(SIG_SETMASK, [] [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 441] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 441] memfd_create("syzkaller", 0 [pid 302] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 441] <... memfd_create resumed>) = 3 [pid 302] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 302] <... openat resumed>) = 3 [pid 302] fstat(3 [pid 441] <... mmap resumed>) = 0x7fb34afd1000 [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 302] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./3/binderfs") = 0 [pid 302] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 436] <... write resumed>) = 20699119 [pid 436] munmap(0x7fb34afd1000, 138412032) = 0 [pid 436] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 436] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 436] close(3) = 0 [pid 436] close(4) = 0 [pid 436] mkdir("./bus", 0777) = 0 [pid 436] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 433] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 300] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./3/binderfs") = 0 [ 29.985076][ T436] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 29.995439][ T49] handle_bad_sector: 21 callbacks suppressed [ 29.995449][ T49] attempt to access beyond end of device [ 29.995449][ T49] loop4: rw=1, want=53248, limit=40427 [ 30.002298][ T436] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.021433][ T436] F2FS-fs (loop3): invalid crc value [pid 300] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 30.033957][ T7] attempt to access beyond end of device [ 30.033957][ T7] loop2: rw=2049, want=40984, limit=40427 [ 30.042252][ T49] attempt to access beyond end of device [ 30.042252][ T49] loop4: rw=1, want=64608, limit=40427 [ 30.056807][ T436] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.061738][ T49] attempt to access beyond end of device [ 30.061738][ T49] loop4: rw=1, want=66704, limit=40427 [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 436] <... mount resumed>) = 0 [pid 436] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 436] chdir("./bus") = 0 [pid 436] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 436] ioctl(4, LOOP_CLR_FD) = 0 [pid 436] close(4) = 0 [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... futex resumed>) = 1 [pid 436] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... ioctl resumed>) = 0 [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... openat resumed>) = 5 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] pwrite64(5, "\f", 1, 134220897 [pid 435] <... futex resumed>) = 0 [pid 436] <... pwrite64 resumed>) = 1 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... openat resumed>) = 6 [pid 435] <... futex resumed>) = 0 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] <... futex resumed>) = 0 [pid 436] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [ 30.089611][ T49] attempt to access beyond end of device [ 30.089611][ T49] loop4: rw=2049, want=40984, limit=40427 [ 30.107218][ T436] F2FS-fs (loop3): Start checkpoint disabled! [ 30.114061][ T436] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.121293][ T436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... write resumed>) = 20699119 [pid 439] munmap(0x7fb34afd1000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 439] ioctl(4, LOOP_SET_FD, 3 [pid 441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 439] <... ioctl resumed>) = 0 [pid 439] close(3) = 0 [pid 439] close(4 [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 435] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 435] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 435] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[446]}, 88) = 446 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... mmap resumed>) = 0x200000000000 ci2-android-5-10/strace-static-x86_64: Process 446 attached [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] set_robust_list(0x7fb3533d09a0, 24 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] <... set_robust_list resumed>) = 0 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] read(6 [pid 441] <... write resumed>) = 20699119 [pid 441] munmap(0x7fb34afd1000, 138412032) = 0 [pid 441] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 435] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 435] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 435] <... futex resumed>) = 1 [pid 436] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 435] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 436] <... unshare resumed>) = 0 [pid 436] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 435] <... futex resumed>) = 0 [pid 436] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./3/bus") = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./3") = 0 [pid 300] mkdir("./4", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 441] <... openat resumed>) = 4 [pid 439] <... close resumed>) = 0 [pid 441] ioctl(4, LOOP_SET_FD, 3 [pid 439] mkdir("./bus", 0777) = 0 [pid 439] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 446] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 446] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4 [pid 435] exit_group(0 [pid 436] <... futex resumed>) = ? [pid 435] <... exit_group resumed>) = ? [pid 446] <... futex resumed>) = ? [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 436] +++ exited with 0 +++ [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./3/bus") = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./3") = 0 [pid 302] mkdir("./4", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 446] +++ exited with 0 +++ [pid 441] <... ioctl resumed>) = 0 [pid 435] +++ exited with 0 +++ [pid 302] <... openat resumed>) = 3 [pid 302] ioctl(3, LOOP_CLR_FD [pid 300] <... openat resumed>) = 3 [pid 302] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 300] ioctl(3, LOOP_CLR_FD [pid 302] close(3 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 302] <... close resumed>) = 0 [pid 300] close(3 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[] [pid 300] <... close resumed>) = 0 [pid 302] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[] [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x55556a4ec690) = 448 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 300] <... clone resumed>, child_tidptr=0x55556a4ec690) = 449 [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] chdir("./4") = 0 [pid 449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 449] setpgid(0, 0) = 0 [pid 449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 449] write(3, "1000", 4) = 4 [pid 449] close(3) = 0 [pid 449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 449] write(1, "executing program\n", 18) = 18 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 449] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[450]}, 88) = 450 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 450 attached [pid 450] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] memfd_create("syzkaller", 0) = 3 [pid 450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 executing program [pid 441] close(3 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 441] <... close resumed>) = 0 [pid 441] close(4 [pid 301] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 441] <... close resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 441] mkdir("./bus", 0777 [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 441] <... mkdir resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 301] fstat(3 [pid 441] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 301] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./3/binderfs") = 0 [ 30.352534][ T439] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 30.360445][ T439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.372330][ T441] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 30.387815][ T49] attempt to access beyond end of device [ 30.387815][ T49] loop3: rw=1, want=81920, limit=40427 [pid 301] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-10/strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] chdir("./4") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 448] write(1, "executing program\n", 18) = 18 executing program [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 448] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[451]}, 88) = 451 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 451 attached [pid 451] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] memfd_create("syzkaller", 0) = 3 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 30.390190][ T441] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.417600][ T439] F2FS-fs (loop1): invalid crc value [ 30.420079][ T49] attempt to access beyond end of device [ 30.420079][ T49] loop3: rw=1, want=53248, limit=40427 [ 30.432541][ T439] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.445983][ T441] F2FS-fs (loop0): invalid crc value [ 30.460601][ T441] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.474835][ T49] attempt to access beyond end of device [ 30.474835][ T49] loop3: rw=1, want=72072, limit=40427 [pid 450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 439] <... mount resumed>) = 0 [pid 439] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 439] chdir("./bus") = 0 [ 30.514035][ T439] F2FS-fs (loop1): Start checkpoint disabled! [ 30.523848][ T49] attempt to access beyond end of device [ 30.523848][ T49] loop3: rw=2049, want=40984, limit=40427 [ 30.535940][ T439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.547483][ T439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.556218][ T441] F2FS-fs (loop0): Start checkpoint disabled! [pid 439] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 439] ioctl(4, LOOP_CLR_FD) = 0 [pid 439] close(4) = 0 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] pwrite64(5, "\f", 1, 134220897) = 1 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 450] <... write resumed>) = 20699119 [pid 450] munmap(0x7fb34afd1000, 138412032) = 0 [pid 450] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 450] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 450] close(3) = 0 [pid 450] close(4) = 0 [pid 450] mkdir("./bus", 0777) = 0 [ 30.576332][ T441] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.597031][ T441] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [pid 450] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 451] <... write resumed>) = 20699119 [pid 441] <... mount resumed>) = 0 [pid 441] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 441] chdir("./bus") = 0 [pid 441] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 441] ioctl(4, LOOP_CLR_FD) = 0 [pid 441] close(4) = 0 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] pwrite64(5, "\f", 1, 134220897) = 1 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 438] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 438] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[457]}, 88) = 457 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0ci2-android-5-10/strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] read(6 [pid 451] munmap(0x7fb34afd1000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 451] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 451] close(3) = 0 [pid 451] close(4) = 0 [pid 451] mkdir("./bus", 0777) = 0 [ 30.620438][ T450] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 30.628568][ T450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.638100][ T450] F2FS-fs (loop2): invalid crc value [pid 451] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 441] <... mmap resumed>) = 0x200000000000 [pid 438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 438] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 438] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 440] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 440] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[461]}, 88) = 461 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 438] <... mmap resumed>) = 0x7fb35338f000 [pid 438] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[462]}, 88) = 462 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-10/strace-static-x86_64: Process 462 attached ci2-android-5-10/strace-static-x86_64: Process 461 attached [pid 462] set_robust_list(0x7fb3533af9a0, 24 [pid 461] set_robust_list(0x7fb3533d09a0, 24 [pid 462] <... set_robust_list resumed>) = 0 [pid 461] <... set_robust_list resumed>) = 0 [pid 462] rt_sigprocmask(SIG_SETMASK, [] [pid 461] rt_sigprocmask(SIG_SETMASK, [] [pid 462] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 461] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 462] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 461] read(6 [pid 462] <... unshare resumed>) = 0 [pid 462] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 462] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 440] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 440] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = 1 [pid 441] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 440] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... unshare resumed>) = 0 [pid 441] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] <... futex resumed>) = 0 [ 30.680467][ T451] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 30.683817][ T450] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.705809][ T451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [pid 441] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 439] <... mmap resumed>) = 0x200000000000 [pid 439] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 30.745302][ T451] F2FS-fs (loop4): invalid crc value [ 30.763194][ T450] F2FS-fs (loop2): Start checkpoint disabled! [ 30.770072][ T451] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 439] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] <... mount resumed>) = 0 [pid 450] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 450] chdir("./bus") = 0 [pid 450] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 4 [pid 450] ioctl(4, LOOP_CLR_FD) = 0 [pid 450] close(4) = 0 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [pid 450] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [pid 450] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [pid 450] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [pid 450] pwrite64(5, "\f", 1, 134220897) = 1 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [pid 450] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 449] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] <... futex resumed>) = 1 [ 30.794212][ T450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.803802][ T450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [pid 450] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 457] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 457] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] exit_group(0 [pid 462] <... futex resumed>) = ? [pid 439] <... futex resumed>) = ? [pid 438] <... exit_group resumed>) = ? [pid 439] +++ exited with 0 +++ [pid 462] +++ exited with 0 +++ [pid 449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 449] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[465]}, 88) = 465 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 440] exit_group(0 [pid 461] <... read resumed> ) = ? [pid 441] <... futex resumed>) = ? [pid 440] <... exit_group resumed>) = ? [pid 301] <... umount2 resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 30.863980][ T451] F2FS-fs (loop4): Start checkpoint disabled! [ 30.901971][ T451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [pid 465] read(6 [pid 461] +++ exited with 0 +++ [pid 457] +++ exited with 0 +++ [pid 441] +++ exited with 0 +++ [pid 440] +++ exited with 0 +++ [pid 438] +++ exited with 0 +++ [pid 301] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=440, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 301] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... openat resumed>) = 4 [pid 298] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] fstat(4 [pid 299] <... openat resumed>) = 3 [pid 301] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] fstat(3 [pid 298] <... openat resumed>) = 3 [pid 301] getdents64(4 [pid 299] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] fstat(3 [pid 301] <... getdents64 resumed>, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(3 [pid 298] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4 [pid 299] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] getdents64(3 [pid 301] <... getdents64 resumed>, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] close(4 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] <... close resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./4/binderfs" [pid 298] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] rmdir("./3/bus" [pid 299] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... rmdir resumed>) = 0 [pid 298] newfstatat(AT_FDCWD, "./4/binderfs" [pid 301] getdents64(3 [pid 299] unlink("./4/binderfs" [pid 301] <... getdents64 resumed>, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... unlink resumed>) = 0 [pid 298] unlink("./4/binderfs" [pid 301] close(3 [pid 299] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... unlink resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 298] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 451] <... mount resumed>) = 0 [pid 451] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 451] chdir("./bus") = 0 [pid 451] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 451] ioctl(4, LOOP_CLR_FD [pid 449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 449] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 451] <... ioctl resumed>) = 0 [pid 451] close(4) = 0 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] pwrite64(5, "\f", 1, 134220897) = 1 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 449] <... mmap resumed>) = 0x7fb35338f000 [pid 449] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 449] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[466]}, 88) = 466 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 449] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] rmdir("./3") = 0 [pid 301] mkdir("./4", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 467 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 466] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 466] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-10/strace-static-x86_64: Process 467 attached [pid 467] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] chdir("./4") = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 30.909006][ T451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 30.920020][ T49] attempt to access beyond end of device [ 30.920020][ T49] loop1: rw=2049, want=40984, limit=40427 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 467] write(1, "executing program\n", 18) = 18 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 467] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 467] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[468]}, 88) = 468 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 448] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[469]}, 88) = 469 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] read(6ci2-android-5-10/strace-static-x86_64: Process 468 attached [pid 468] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] memfd_create("syzkaller", 0) = 3 [pid 468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 450] <... mmap resumed>) = 0x200000000000 [pid 450] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 448] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 448] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[470]}, 88) = 470 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 470] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 470] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 451] <... mmap resumed>) = 0x200000000000 [pid 451] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 451] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] exit_group(0 [pid 466] <... futex resumed>) = ? [pid 450] <... futex resumed>) = ? [pid 449] <... exit_group resumed>) = ? [pid 466] +++ exited with 0 +++ [pid 450] +++ exited with 0 +++ [pid 465] <... read resumed> ) = ? [pid 465] +++ exited with 0 +++ [pid 449] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=449, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 300] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./4/binderfs") = 0 [pid 300] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 300] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./4/bus" [pid 448] exit_group(0 [pid 470] <... futex resumed>) = ? [pid 451] <... futex resumed>) = ? [pid 448] <... exit_group resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ [pid 468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 469] <... read resumed> ) = ? [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./4/bus") = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./4") = 0 [pid 299] mkdir("./5", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 471 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 471 attached [pid 469] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 471] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] chdir("./5") = 0 [pid 471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 471] setpgid(0, 0) = 0 [pid 471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 471] write(3, "1000", 4) = 4 [pid 471] close(3) = 0 [pid 471] symlink("/dev/binderfs", "./binderfs" [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 471] <... symlink resumed>) = 0 [pid 471] write(1, "executing program\n", 18 [pid 302] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 471] <... write resumed>) = 18 [pid 302] <... openat resumed>) = 3 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] fstat(3 [pid 471] <... futex resumed>) = 0 [pid 471] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0} [pid 302] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 471] <... rt_sigaction resumed>, NULL, 8) = 0 executing program [pid 471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 302] getdents64(3 [pid 471] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 302] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 302] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 471] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 471] rt_sigprocmask(SIG_BLOCK, ~[] [pid 302] newfstatat(AT_FDCWD, "./4/binderfs" [pid 471] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} [pid 302] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./4/binderfs" [pid 471] <... clone3 resumed> => {parent_tid=[472]}, 88) = 472 [pid 471] rt_sigprocmask(SIG_SETMASK, [] [pid 302] <... unlink resumed>) = 0 [pid 471] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] memfd_create("syzkaller", 0) = 3 [pid 472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 468] <... write resumed>) = 20699119 [pid 468] munmap(0x7fb34afd1000, 138412032) = 0 [pid 468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 468] <... openat resumed>) = 4 [pid 468] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./4/bus") = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./4") = 0 [pid 298] mkdir("./5", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY [pid 472] <... write resumed>) = 20699119 [pid 472] munmap(0x7fb34afd1000, 138412032) = 0 [pid 472] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 468] <... ioctl resumed>) = 0 [pid 472] ioctl(4, LOOP_SET_FD, 3 [pid 298] <... openat resumed>) = 3 [pid 468] close(3 [pid 298] ioctl(3, LOOP_CLR_FD [pid 468] <... close resumed>) = 0 [pid 468] close(4 [pid 472] <... ioctl resumed>) = 0 [pid 468] <... close resumed>) = 0 [pid 298] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 472] close(3 [pid 468] mkdir("./bus", 0777 [pid 298] close(3 [pid 472] <... close resumed>) = 0 [pid 472] close(4 [pid 468] <... mkdir resumed>) = 0 [pid 298] <... close resumed>) = 0 [pid 472] <... close resumed>) = 0 [pid 468] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 298] rt_sigprocmask(SIG_BLOCK, ~[] [pid 472] mkdir("./bus", 0777 [pid 298] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 472] <... mkdir resumed>) = 0 [pid 472] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 298] <... clone resumed>, child_tidptr=0x55556a4ec690) = 475 ci2-android-5-10/strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [] [pid 475] chdir("./5") = 0 [pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 475] setpgid(0, 0) = 0 [pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 298] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 475] <... openat resumed>) = 3 [pid 475] write(3, "1000", 4) = 4 [pid 475] close(3) = 0 [pid 475] symlink("/dev/binderfs", "./binderfs") = 0 [pid 475] write(1, "executing program\n", 18) = 18 executing program [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 475] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[476]}, 88) = 476 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./4/bus") = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./4") = 0 [pid 302] mkdir("./5", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 477 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 477 attached [pid 477] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] chdir("./5") = 0 [pid 477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 477] setpgid(0, 0) = 0 [pid 477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 477] write(3, "1000", 4) = 4 [pid 477] close(3) = 0 [pid 477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 477] write(1, "executing program\n", 18) = 18 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 477] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[478]}, 88) = 478 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 478 attached [pid 478] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] memfd_create("syzkaller", 0) = 3 [pid 478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 executing program [ 31.364290][ T468] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 31.373350][ T472] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 31.399051][ T468] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock ci2-android-5-10/strace-static-x86_64: Process 476 attached [pid 476] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] memfd_create("syzkaller", 0) = 3 [pid 476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 300] <... rmdir resumed>) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./4") = 0 [pid 300] mkdir("./5", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 481 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 481 attached [pid 481] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] chdir("./5") = 0 [pid 481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 481] setpgid(0, 0) = 0 [pid 481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 481] write(3, "1000", 4) = 4 [pid 481] close(3) = 0 [pid 481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 481] write(1, "executing program\n", 18) = 18 executing program [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 481] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[483]}, 88) = 483 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 483] memfd_create("syzkaller", 0) = 3 [pid 483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 31.407492][ T472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.417621][ T472] F2FS-fs (loop1): invalid crc value [ 31.423878][ T468] F2FS-fs (loop3): invalid crc value [ 31.442080][ T472] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 31.448302][ T468] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 468] <... mount resumed>) = 0 [pid 468] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 468] chdir("./bus") = 0 [pid 468] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 468] ioctl(4, LOOP_CLR_FD) = 0 [pid 468] close(4) = 0 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 467] <... futex resumed>) = 0 [pid 468] <... openat resumed>) = 4 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] <... futex resumed>) = 0 [pid 468] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... ioctl resumed>) = 0 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 468] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... openat resumed>) = 5 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 468] pwrite64(5, "\f", 1, 134220897 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... pwrite64 resumed>) = 1 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 468] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... openat resumed>) = 6 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 467] <... futex resumed>) = 0 [pid 468] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [ 31.480278][ T468] F2FS-fs (loop3): Start checkpoint disabled! [ 31.487146][ T468] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.494310][ T468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 467] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 467] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 467] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[485]}, 88) = 485 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 467] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 485] rt_sigprocmask(SIG_SETMASK, [] [pid 468] <... mmap resumed>) = 0x200000000000 [pid 485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 485] read(6 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... mount resumed>) = 0 [pid 472] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 472] chdir("./bus") = 0 [pid 472] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 4 [pid 472] ioctl(4, LOOP_CLR_FD) = 0 [pid 472] close(4) = 0 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] pwrite64(5, "\f", 1, 134220897) = 1 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] <... futex resumed>) = 0 [pid 471] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 31.523034][ T472] F2FS-fs (loop1): Start checkpoint disabled! [ 31.547743][ T472] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.565243][ T472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [pid 471] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 472] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 467] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 467] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 467] <... futex resumed>) = 1 [pid 468] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 467] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 468] <... unshare resumed>) = 0 [pid 468] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 467] <... futex resumed>) = 0 [pid 468] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 471] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 471] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[486]}, 88) = 486 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] read(6 [pid 478] <... write resumed>) = 20699119 [pid 478] munmap(0x7fb34afd1000, 138412032) = 0 [pid 478] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 478] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 478] close(3) = 0 [pid 478] close(4) = 0 [pid 478] mkdir("./bus", 0777) = 0 [pid 478] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 471] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 471] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 471] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 471] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 471] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[488]}, 88) = 488 [pid 471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 471] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 471] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 488] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... futex resumed>) = 0 [pid 488] <... futex resumed>) = 1 [pid 488] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... mmap resumed>) = 0x200000000000 [pid 472] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 467] exit_group(0) = ? [pid 468] <... futex resumed>) = ? [pid 468] +++ exited with 0 +++ [pid 485] <... read resumed> ) = ? [ 31.693256][ T478] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 31.724705][ T478] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.733881][ T478] F2FS-fs (loop4): invalid crc value [pid 476] <... write resumed>) = 20699119 [pid 476] munmap(0x7fb34afd1000, 138412032) = 0 [pid 476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 476] close(3) = 0 [pid 476] close(4) = 0 [pid 476] mkdir("./bus", 0777) = 0 [pid 476] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 485] +++ exited with 0 +++ [pid 467] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [ 31.766432][ T478] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 31.793881][ T476] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 31.800405][ T478] F2FS-fs (loop4): Start checkpoint disabled! [pid 301] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 301] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/binderfs") = 0 [pid 301] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 301] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./4/bus" [pid 478] <... mount resumed>) = 0 [pid 478] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 478] chdir("./bus") = 0 [pid 478] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 478] ioctl(4, LOOP_CLR_FD) = 0 [pid 478] close(4) = 0 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... openat resumed>) = 4 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... ioctl resumed>) = 0 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... openat resumed>) = 5 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] pwrite64(5, "\f", 1, 134220897 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... pwrite64 resumed>) = 1 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] <... openat resumed>) = 6 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] <... futex resumed>) = 0 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 477] <... futex resumed>) = 0 [pid 478] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [ 31.811521][ T478] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.819015][ T478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 31.829342][ T476] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] exit_group(0 [pid 488] <... futex resumed>) = ? [pid 472] <... futex resumed>) = ? [pid 471] <... exit_group resumed>) = ? [pid 488] +++ exited with 0 +++ [pid 472] +++ exited with 0 +++ [pid 483] <... write resumed>) = 20699119 [pid 486] <... read resumed> ) = ? [pid 483] munmap(0x7fb34afd1000, 138412032) = 0 [pid 483] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 483] close(3) = 0 [pid 483] close(4) = 0 [pid 483] mkdir("./bus", 0777) = 0 [ 31.861666][ T476] F2FS-fs (loop0): invalid crc value [pid 483] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 478] <... mmap resumed>) = 0x200000000000 [pid 478] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 478] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 477] <... futex resumed>) = 0 [pid 477] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 477] <... futex resumed>) = 1 [pid 478] read(6 [pid 477] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 486] +++ exited with 0 +++ [pid 471] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=471, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [ 31.891837][ T483] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 31.898453][ T476] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 31.910982][ T483] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 299] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 299] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./5/binderfs") = 0 [pid 299] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 477] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 477] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 476] <... mount resumed>) = 0 [pid 477] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 476] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 476] chdir("./bus" [pid 477] <... clone3 resumed> => {parent_tid=[497]}, 88) = 497 [pid 477] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 477] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 477] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] <... chdir resumed>) = 0 [pid 476] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 476] ioctl(4, LOOP_CLR_FD) = 0 [pid 476] close(4) = 0 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 497 attached ) = 0 [pid 497] set_robust_list(0x7fb3533d09a0, 24 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... set_robust_list resumed>) = 0 [pid 476] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 497] rt_sigprocmask(SIG_SETMASK, [] [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 475] <... futex resumed>) = 0 [pid 497] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 497] <... unshare resumed>) = 0 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 475] <... futex resumed>) = 0 [pid 497] <... futex resumed>) = 1 [pid 477] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] pwrite64(5, "\f", 1, 134220897) = 1 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 476] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 31.941012][ T483] F2FS-fs (loop2): invalid crc value [ 31.946849][ T476] F2FS-fs (loop0): Start checkpoint disabled! [ 31.961892][ T476] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.969209][ T476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [pid 476] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 475] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 31.989009][ T483] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 476] read(6 [pid 475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 475] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 475] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[498]}, 88) = 498 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 475] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 498] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] <... futex resumed>) = 0 [pid 498] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 476] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 483] <... mount resumed>) = 0 [pid 483] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 483] chdir("./bus") = 0 [pid 483] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 475] exit_group(0 [pid 498] <... futex resumed>) = ? [pid 475] <... exit_group resumed>) = ? [pid 498] +++ exited with 0 +++ [pid 476] <... futex resumed>) = ? [pid 477] exit_group(0 [pid 497] <... futex resumed>) = ? [pid 477] <... exit_group resumed>) = ? [pid 497] +++ exited with 0 +++ [pid 476] +++ exited with 0 +++ [pid 475] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=475, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 478] <... read resumed> ) = ? [pid 483] <... openat resumed>) = 4 [pid 483] ioctl(4, LOOP_CLR_FD) = 0 [pid 483] close(4) = 0 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] <... restart_syscall resumed>) = 0 [pid 298] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 32.084226][ T483] F2FS-fs (loop2): Start checkpoint disabled! [ 32.104085][ T483] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 32.111182][ T483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [pid 298] unlink("./5/binderfs") = 0 [pid 298] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] <... futex resumed>) = 0 [pid 483] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 483] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = 0 [pid 481] <... futex resumed>) = 1 [pid 483] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... ioctl resumed>) = 0 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] <... futex resumed>) = 0 [pid 483] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... openat resumed>) = 5 [pid 481] <... futex resumed>) = 0 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 0 [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 483] pwrite64(5, "\f", 1, 134220897 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... pwrite64 resumed>) = 1 [pid 481] <... futex resumed>) = 0 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 0 [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 483] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... openat resumed>) = 6 [pid 481] <... futex resumed>) = 0 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 0 [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 483] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 481] <... futex resumed>) = 0 [pid 483] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 478] +++ exited with 0 +++ [pid 477] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=477, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 302] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 302] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./5/binderfs") = 0 [pid 302] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 483] <... mmap resumed>) = 0x200000000000 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] <... futex resumed>) = 0 [pid 481] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] read(6 [pid 299] <... umount2 resumed>) = 0 [pid 299] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./5/bus") = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./5") = 0 [pid 299] mkdir("./6", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 499 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 499 attached [pid 499] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] chdir("./6") = 0 [pid 499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 499] setpgid(0, 0) = 0 [pid 499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 499] write(3, "1000", 4) = 4 [pid 499] close(3) = 0 [pid 499] symlink("/dev/binderfs", "./binderfs" [pid 481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 481] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 481] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 481] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 499] <... symlink resumed>) = 0 [pid 481] <... clone3 resumed> => {parent_tid=[500]}, 88) = 500 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 481] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} executing program [pid 499] write(1, "executing program\n", 18) = 18 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 499] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 499] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[501]}, 88) = 501 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 ci2-android-5-10/strace-static-x86_64: Process 500 attached [pid 301] <... rmdir resumed>) = 0 [pid 500] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 301] getdents64(3 [pid 500] <... unshare resumed>) = 0 [pid 500] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 481] <... futex resumed>) = 0 [pid 500] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... getdents64 resumed>, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 301] mkdir("./5", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 502 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 502 attached [pid 502] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] chdir("./5") = 0 [pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 502] setpgid(0, 0) = 0 [pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 502] write(3, "1000", 4) = 4 [pid 502] close(3) = 0 [pid 502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 502] write(1, "executing program\n", 18) = 18 executing program [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 502] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[503]}, 88) = 503 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] memfd_create("syzkaller", 0) = 3 [pid 503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 302] <... umount2 resumed>) = 0 [pid 302] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./5/bus") = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./5") = 0 [pid 302] mkdir("./6", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 3 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 504 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] chdir("./6") = 0 [pid 504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 504] setpgid(0, 0) = 0 [pid 504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 504] write(3, "1000", 4) = 4 [pid 504] close(3) = 0 [pid 504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 504] write(1, "executing program\n", 18) = 18 executing program [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 504] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[505]}, 88) = 505 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 483] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 483] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] exit_group(0 [pid 483] <... futex resumed>) = 0 [pid 481] <... exit_group resumed>) = ? [pid 500] <... futex resumed>) = ? [pid 500] +++ exited with 0 +++ ci2-android-5-10/strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] memfd_create("syzkaller", 0) = 3 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 483] +++ exited with 0 +++ [pid 481] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=481, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 300] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./5/binderfs") = 0 [pid 300] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./5/bus") = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./5") = 0 [pid 298] mkdir("./6", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 506 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] chdir("./6") = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 506] setpgid(0, 0) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] symlink("/dev/binderfs", "./binderfs") = 0 [pid 506] write(1, "executing program\n", 18) = 18 executing program [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 506] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[507]}, 88) = 507 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 501] <... write resumed>) = 20699119 [pid 501] munmap(0x7fb34afd1000, 138412032) = 0 ci2-android-5-10/strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 507] memfd_create("syzkaller", 0 [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 501] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 501] close(3) = 0 [pid 501] close(4) = 0 [pid 501] mkdir("./bus", 0777) = 0 [pid 501] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 507] <... memfd_create resumed>) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 503] <... write resumed>) = 20699119 [pid 503] munmap(0x7fb34afd1000, 138412032) = 0 [ 32.545818][ T501] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 32.561255][ T501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.580170][ T501] F2FS-fs (loop1): invalid crc value [pid 503] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 503] ioctl(4, LOOP_SET_FD, 3 [pid 505] <... write resumed>) = 20699119 [pid 505] munmap(0x7fb34afd1000, 138412032) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 503] <... ioctl resumed>) = 0 [pid 505] ioctl(4, LOOP_SET_FD, 3 [pid 503] close(3) = 0 [pid 503] close(4 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 505] <... ioctl resumed>) = 0 [pid 505] close(3) = 0 [ 32.606828][ T501] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 505] close(4 [pid 300] <... umount2 resumed>) = 0 [pid 501] <... mount resumed>) = 0 [pid 300] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 501] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 501] chdir("./bus") = 0 [pid 501] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4 [pid 505] <... close resumed>) = 0 [pid 505] mkdir("./bus", 0777) = 0 [pid 505] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 503] <... close resumed>) = 0 [ 32.671506][ T501] F2FS-fs (loop1): Start checkpoint disabled! [ 32.681886][ T501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 32.699215][ T501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 32.712087][ T505] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [pid 503] mkdir("./bus", 0777) = 0 [pid 503] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 300] <... getdents64 resumed>, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 501] <... openat resumed>) = 4 [pid 300] getdents64(4 [pid 501] ioctl(4, LOOP_CLR_FD [pid 300] <... getdents64 resumed>, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 501] <... ioctl resumed>) = 0 [pid 300] rmdir("./5/bus" [pid 501] close(4 [pid 300] <... rmdir resumed>) = 0 [pid 501] <... close resumed>) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 300] close(3 [pid 501] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... close resumed>) = 0 [pid 499] <... futex resumed>) = 0 [pid 300] rmdir("./5" [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... openat resumed>) = 4 [pid 300] <... rmdir resumed>) = 0 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] mkdir("./6", 0777) = 0 [pid 501] <... futex resumed>) = 1 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY [pid 501] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] <... futex resumed>) = 0 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... write resumed>) = 20699119 [pid 507] munmap(0x7fb34afd1000, 138412032) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 507] ioctl(4, LOOP_SET_FD, 3 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 501] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 499] <... futex resumed>) = 1 [pid 501] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 300] <... openat resumed>) = 3 [pid 501] <... openat resumed>) = 5 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] ioctl(3, LOOP_CLR_FD [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 501] <... futex resumed>) = 0 [pid 300] close(3 [pid 501] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 300] <... close resumed>) = 0 [pid 507] <... ioctl resumed>) = 0 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 516 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 507] close(3) = 0 [pid 507] close(4 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = 0 [pid 499] <... futex resumed>) = 1 [pid 501] pwrite64(5, "\f", 1, 134220897 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... pwrite64 resumed>) = 1 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 501] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... openat resumed>) = 6 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 0 [pid 499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 501] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 499] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 516 attached ) = 0 [pid 516] set_robust_list(0x55556a4ec6a0, 24 [pid 499] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... set_robust_list resumed>) = 0 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] chdir("./6") = 0 [pid 516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 516] setpgid(0, 0) = 0 [pid 516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 516] write(3, "1000", 4) = 4 [pid 516] close(3) = 0 [pid 516] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 516] write(1, "executing program\n", 18) = 18 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 516] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[517]}, 88) = 517 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 517 attached [pid 517] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] memfd_create("syzkaller", 0) = 3 [pid 517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 32.720579][ T505] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.731151][ T505] F2FS-fs (loop4): invalid crc value [ 32.746818][ T505] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 507] <... close resumed>) = 0 [pid 507] mkdir("./bus", 0777) = 0 [pid 507] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 499] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 499] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 499] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[518]}, 88) = 518 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 518 attached [pid 518] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [] [pid 505] <... mount resumed>) = 0 [pid 505] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 505] chdir("./bus") = 0 [pid 505] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 505] ioctl(4, LOOP_CLR_FD) = 0 [pid 518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 505] close(4 [pid 518] read(6 [pid 505] <... close resumed>) = 0 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... openat resumed>) = 4 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 504] <... futex resumed>) = 0 [pid 505] <... ioctl resumed>) = 0 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 0 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... openat resumed>) = 5 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] pwrite64(5, "\f", 1, 134220897 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... pwrite64 resumed>) = 1 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 505] <... futex resumed>) = 1 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... openat resumed>) = 6 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 504] <... futex resumed>) = 0 [ 32.781407][ T505] F2FS-fs (loop4): Start checkpoint disabled! [ 32.797079][ T503] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 32.798331][ T505] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.806937][ T507] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [ 32.820258][ T505] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 499] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 499] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 499] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 499] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[519]}, 88) = 519 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... mmap resumed>) = 0x200000000000 [ 32.851376][ T503] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [pid 505] <... mmap resumed>) = 0x200000000000 [pid 501] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 501] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-5-10/strace-static-x86_64: Process 519 attached [pid 519] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 505] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 505] <... futex resumed>) = 0 [pid 504] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] read(6 [pid 519] <... unshare resumed>) = 0 [pid 504] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 1 [pid 519] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [ 32.892870][ T507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.903299][ T503] F2FS-fs (loop3): invalid crc value [ 32.911723][ T507] F2FS-fs (loop0): invalid crc value [ 32.928515][ T503] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 504] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 504] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[524]}, 88) = 524 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 524] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [ 32.950942][ T507] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.990969][ T507] F2FS-fs (loop0): Start checkpoint disabled! [pid 524] futex(0x7fb3534c9e58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] <... mount resumed>) = 0 [pid 507] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 507] chdir("./bus") = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 507] ioctl(4, LOOP_CLR_FD) = 0 [pid 507] close(4) = 0 [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... openat resumed>) = 4 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 507] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] <... ioctl resumed>) = 0 [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 506] <... futex resumed>) = 0 [pid 507] <... openat resumed>) = 5 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] pwrite64(5, "\f", 1, 134220897 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] <... pwrite64 resumed>) = 1 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] <... openat resumed>) = 6 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] exit_group(0 [pid 519] <... futex resumed>) = ? [pid 501] <... futex resumed>) = ? [pid 499] <... exit_group resumed>) = ? [pid 519] +++ exited with 0 +++ [pid 501] +++ exited with 0 +++ [pid 518] <... read resumed> ) = ? [ 32.997882][ T507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.004955][ T507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 33.014453][ T503] F2FS-fs (loop3): Start checkpoint disabled! [ 33.041271][ T503] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 518] +++ exited with 0 +++ [pid 499] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=499, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 299] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 299] <... restart_syscall resumed>) = 0 [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 299] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 506] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] <... futex resumed>) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 299] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 506] <... mmap resumed>) = 0x7fb3533b0000 [pid 299] <... openat resumed>) = 3 [pid 506] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] fstat(3 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[] [pid 299] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 299] getdents64(3 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 299] <... getdents64 resumed>, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 506] <... clone3 resumed> => {parent_tid=[525]}, 88) = 525 [pid 506] rt_sigprocmask(SIG_SETMASK, [] [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 299] newfstatat(AT_FDCWD, "./6/binderfs" [pid 506] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 506] <... futex resumed>) = 0 [pid 299] unlink("./6/binderfs" [pid 506] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] <... unlink resumed>) = 0 [pid 299] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 299] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./6/bus"ci2-android-5-10/strace-static-x86_64: Process 525 attached [pid 525] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] read(6 [pid 507] <... mmap resumed>) = 0x200000000000 [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] <... mount resumed>) = 0 [pid 503] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 503] chdir("./bus") = 0 [pid 503] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 4 [pid 503] ioctl(4, LOOP_CLR_FD) = 0 [pid 503] close(4) = 0 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] pwrite64(5, "\f", 1, 134220897) = 1 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025) = 6 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 504] exit_group(0 [pid 524] <... futex resumed>) = ? [pid 504] <... exit_group resumed>) = ? [pid 524] +++ exited with 0 +++ [pid 517] <... write resumed>) = 20699119 [ 33.062116][ T503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [pid 505] <... read resumed> ) = ? [pid 517] munmap(0x7fb34afd1000, 138412032) = 0 [pid 517] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 517] ioctl(4, LOOP_SET_FD, 3 [pid 506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 506] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 1 [pid 507] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 506] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... unshare resumed>) = 0 [pid 507] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] <... ioctl resumed>) = 0 [pid 517] close(3) = 0 [pid 517] close(4) = 0 [pid 517] mkdir("./bus", 0777) = 0 [pid 517] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 502] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[527]}, 88) = 527 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] read(6 [pid 502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 502] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb35338f000 [pid 502] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[528]}, 88) = 528 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 528] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 528] <... futex resumed>) = 1 [pid 528] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] +++ exited with 0 +++ [pid 504] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=504, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [ 33.145160][ T517] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 33.175684][ T517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [pid 302] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 302] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 302] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./6/binderfs") = 0 [pid 302] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 302] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 302] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 302] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 302] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 302] close(4) = 0 [pid 302] rmdir("./6/bus" [pid 525] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 525] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.222626][ T517] F2FS-fs (loop2): invalid crc value [pid 506] exit_group(0 [pid 507] <... futex resumed>) = ? [pid 506] <... exit_group resumed>) = ? [pid 525] +++ exited with 0 +++ [pid 503] <... mmap resumed>) = 0x200000000000 [pid 503] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 33.261353][ T506] BUG: scheduling while atomic: syz-executor203/506/0x00000002 [ 33.268919][ T506] Modules linked in: [ 33.272846][ T506] Preemption disabled at: [ 33.272863][ T506] [] unmap_page_range+0xa54/0x2190 [ 33.283947][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 33.293038][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.303080][ T506] Call Trace: [ 33.306365][ T506] __dump_stack+0x21/0x24 [pid 503] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... rmdir resumed>) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./6") = 0 [pid 299] mkdir("./7", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 530 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] exit_group(0 [pid 528] <... futex resumed>) = ? [pid 503] <... futex resumed>) = ? [pid 502] <... exit_group resumed>) = ? [pid 503] +++ exited with 0 +++ [pid 527] <... read resumed> ) = ? [ 33.310690][ T506] dump_stack_lvl+0x1a7/0x208 [ 33.315358][ T506] ? unmap_page_range+0xa54/0x2190 [ 33.320461][ T506] ? show_regs_print_info+0x18/0x18 [ 33.325647][ T506] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 33.331096][ T506] ? unmap_page_range+0xa54/0x2190 [ 33.336200][ T506] dump_stack+0x15/0x1c [ 33.340348][ T506] __schedule_bug+0x183/0x240 [ 33.345026][ T506] ? __migrate_task+0x190/0x190 [ 33.349867][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 33.355666][ T506] ? __stack_depot_save+0x480/0x4c0 [ 33.360853][ T506] __schedule+0xcee/0x13e0 [ 33.365258][ T506] ? __kasan_slab_alloc+0xb7/0xe0 [ 33.370272][ T506] ? kmem_cache_alloc+0x15a/0x2d0 [ 33.375289][ T506] ? f2fs_register_inmem_page+0x130/0x470 [ 33.381001][ T506] ? f2fs_set_data_page_dirty+0x557/0x6e0 [ 33.386710][ T506] ? __sched_text_start+0x8/0x8 [ 33.391548][ T506] ? __mutex_add_waiter+0x184/0x280 [ 33.396737][ T506] ? __kasan_check_write+0x14/0x20 [ 33.401836][ T506] ? atomic_dec_and_mutex_lock+0x1a0/0x1a0 [ 33.407626][ T506] schedule+0x13c/0x1d0 [ 33.411767][ T506] schedule_preempt_disabled+0x13/0x20 [ 33.417209][ T506] __mutex_lock+0x5d4/0xc40 [ 33.421700][ T506] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 33.428452][ T506] __mutex_lock_slowpath+0xe/0x10 [ 33.433466][ T506] mutex_lock+0xdb/0xf0 [ 33.437613][ T506] ? mutex_trylock+0xb0/0xb0 [ 33.442195][ T506] ? f2fs_register_inmem_page+0x130/0x470 [ 33.447908][ T506] ? kmem_cache_alloc+0x15a/0x2d0 [ 33.452925][ T506] ? f2fs_register_inmem_page+0x130/0x470 [ 33.458633][ T506] f2fs_register_inmem_page+0x211/0x470 [ 33.464168][ T506] f2fs_set_data_page_dirty+0x557/0x6e0 [ 33.469703][ T506] ? f2fs_write_data_pages+0x28f0/0x28f0 [ 33.475324][ T506] set_page_dirty+0x1a2/0x300 [ 33.479993][ T506] unmap_page_range+0x104c/0x2190 [ 33.485012][ T506] ? lru_cache_disable+0xa0/0xa0 [ 33.485244][ T517] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 33.489937][ T506] ? copy_page_range+0x27a0/0x27a0 [ 33.506305][ T506] unmap_vmas+0x25f/0x360 [ 33.510626][ T506] ? unmap_page_range+0x2190/0x2190 [ 33.515816][ T506] ? __kasan_check_write+0x14/0x20 [ 33.518110][ T517] F2FS-fs (loop2): Start checkpoint disabled! [ 33.520920][ T506] ? tlb_gather_mmu+0x269/0x330 [ 33.527922][ T517] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.531778][ T506] exit_mmap+0x309/0x590 [ 33.531786][ T506] ? vm_brk+0x30/0x30 [ 33.531803][ T506] ? mutex_lock+0x92/0xf0 [ 33.539413][ T517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 33.543005][ T506] ? mutex_unlock+0x1c/0x40 [ 33.543014][ T506] __mmput+0x92/0x2d0 [ 33.543022][ T506] mmput+0x4e/0x150 [ 33.543038][ T506] do_exit+0x9d8/0x24e0 [ 33.575011][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 33.580797][ T506] ? put_task_struct+0x90/0x90 [ 33.585550][ T506] ? zap_other_threads+0x29b/0x310 [ 33.590632][ T506] do_group_exit+0x149/0x310 [ 33.595200][ T506] __x64_sys_exit_group+0x3f/0x40 [ 33.600229][ T506] do_syscall_64+0x31/0x40 [ 33.604640][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.610508][ T506] RIP: 0033:0x7fb35341af45 [ 33.614893][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 33.622240][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 33.630648][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 33.638595][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 33.646538][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 33.654482][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [pid 527] +++ exited with 0 +++ ci2-android-5-10/strace-static-x86_64: Process 530 attached [pid 530] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] chdir("./7") = 0 [pid 530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 530] setpgid(0, 0) = 0 [pid 530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 530] write(3, "1000", 4) = 4 [pid 530] close(3) = 0 [pid 530] symlink("/dev/binderfs", "./binderfs") = 0 [pid 530] write(1, "executing program\n", 18) = 18 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 530] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[532]}, 88) = 532 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] memfd_create("syzkaller", 0) = 3 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 532] munmap(0x7fb34afd1000, 138412032) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 517] <... mount resumed>) = 0 [pid 517] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 517] chdir("./bus") = 0 [pid 517] openat(AT_FDCWD, "/dev/loop2", O_RDONLY executing program [pid 507] +++ exited with 0 +++ [pid 528] +++ exited with 0 +++ [pid 502] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=502, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 301] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 301] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 301] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/binderfs") = 0 [ 33.662513][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 33.671207][ T506] check_preemption_disabled: 4950 callbacks suppressed [ 33.678445][ T506] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor203/506 [ 33.687770][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 33.693925][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 33.703005][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.713034][ T506] Call Trace: [ 33.716297][ T506] __dump_stack+0x21/0x24 [ 33.720595][ T506] dump_stack_lvl+0x1a7/0x208 [ 33.725241][ T506] ? thaw_kernel_threads+0x220/0x220 [ 33.730501][ T506] ? show_regs_print_info+0x18/0x18 [ 33.735671][ T506] ? __mutex_lock_slowpath+0xe/0x10 [ 33.740847][ T506] ? mutex_lock+0xdb/0xf0 [ 33.745145][ T506] ? mutex_trylock+0xb0/0xb0 [ 33.749720][ T506] dump_stack+0x15/0x1c [ 33.753847][ T506] check_preemption_disabled+0xf7/0x100 [ 33.759366][ T506] __this_cpu_preempt_check+0x13/0x20 [ 33.764708][ T506] __mod_node_page_state+0x61/0xd0 [ 33.769800][ T506] __mod_lruvec_state+0x48/0x70 [ 33.774631][ T506] page_remove_rmap+0x654/0xe90 [ 33.779460][ T506] unmap_page_range+0x11f1/0x2190 [ 33.784471][ T506] ? lru_cache_disable+0xa0/0xa0 [ 33.789388][ T506] ? copy_page_range+0x27a0/0x27a0 [ 33.794473][ T506] unmap_vmas+0x25f/0x360 [ 33.798781][ T506] ? unmap_page_range+0x2190/0x2190 [ 33.804218][ T506] ? __kasan_check_write+0x14/0x20 [ 33.809320][ T506] ? tlb_gather_mmu+0x269/0x330 [ 33.814147][ T506] exit_mmap+0x309/0x590 [ 33.818360][ T506] ? vm_brk+0x30/0x30 [ 33.822317][ T506] ? mutex_lock+0x92/0xf0 [ 33.826617][ T506] ? mutex_unlock+0x1c/0x40 [ 33.831092][ T506] __mmput+0x92/0x2d0 [ 33.835063][ T506] mmput+0x4e/0x150 [ 33.838843][ T506] do_exit+0x9d8/0x24e0 [ 33.842970][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 33.848747][ T506] ? put_task_struct+0x90/0x90 [ 33.853483][ T506] ? zap_other_threads+0x29b/0x310 [ 33.858564][ T506] do_group_exit+0x149/0x310 [ 33.863129][ T506] __x64_sys_exit_group+0x3f/0x40 [ 33.868123][ T506] do_syscall_64+0x31/0x40 [ 33.872511][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.878373][ T506] RIP: 0033:0x7fb35341af45 [ 33.882774][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 33.890124][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 33.898527][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 33.906472][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 33.914419][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 33.922369][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 33.930336][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 33.938347][ T506] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor203/506 [ 33.947654][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 33.953855][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 33.962970][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.973006][ T506] Call Trace: [ 33.976278][ T506] __dump_stack+0x21/0x24 [ 33.980578][ T506] dump_stack_lvl+0x1a7/0x208 [ 33.985236][ T506] ? thaw_kernel_threads+0x220/0x220 [ 33.990494][ T506] ? show_regs_print_info+0x18/0x18 [ 33.995672][ T506] ? __mutex_lock_slowpath+0xe/0x10 [ 34.000844][ T506] ? mutex_lock+0xdb/0xf0 [ 34.005147][ T506] ? mutex_trylock+0xb0/0xb0 [ 34.009717][ T506] dump_stack+0x15/0x1c [ 34.013864][ T506] check_preemption_disabled+0xf7/0x100 [ 34.019418][ T506] __this_cpu_preempt_check+0x13/0x20 [ 34.024765][ T506] __mod_node_page_state+0x7a/0xd0 [ 34.029859][ T506] __mod_lruvec_state+0x48/0x70 [ 34.034701][ T506] page_remove_rmap+0x654/0xe90 [ 34.039534][ T506] unmap_page_range+0x11f1/0x2190 [ 34.044532][ T506] ? lru_cache_disable+0xa0/0xa0 [ 34.049446][ T506] ? copy_page_range+0x27a0/0x27a0 [ 34.054529][ T506] unmap_vmas+0x25f/0x360 [ 34.058850][ T506] ? unmap_page_range+0x2190/0x2190 [ 34.064042][ T506] ? __kasan_check_write+0x14/0x20 [ 34.069121][ T506] ? tlb_gather_mmu+0x269/0x330 [ 34.073943][ T506] exit_mmap+0x309/0x590 [ 34.078158][ T506] ? vm_brk+0x30/0x30 [ 34.082115][ T506] ? mutex_lock+0x92/0xf0 [ 34.086415][ T506] ? mutex_unlock+0x1c/0x40 [ 34.090887][ T506] __mmput+0x92/0x2d0 [ 34.094842][ T506] mmput+0x4e/0x150 [ 34.098641][ T506] do_exit+0x9d8/0x24e0 [ 34.102768][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 34.108544][ T506] ? put_task_struct+0x90/0x90 [ 34.113278][ T506] ? zap_other_threads+0x29b/0x310 [ 34.118360][ T506] do_group_exit+0x149/0x310 [ 34.122922][ T506] __x64_sys_exit_group+0x3f/0x40 [ 34.127918][ T506] do_syscall_64+0x31/0x40 [ 34.132305][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.138182][ T506] RIP: 0033:0x7fb35341af45 [ 34.142563][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 34.149898][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 34.158286][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 34.166239][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 34.174188][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.182133][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 34.190083][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 34.198948][ T506] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor203/506 [ 34.208328][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 34.214492][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 34.223580][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.233610][ T506] Call Trace: [ 34.236877][ T506] __dump_stack+0x21/0x24 [ 34.241177][ T506] dump_stack_lvl+0x1a7/0x208 [ 34.245826][ T506] ? thaw_kernel_threads+0x220/0x220 [ 34.251086][ T506] ? show_regs_print_info+0x18/0x18 [ 34.256257][ T506] ? __mutex_lock_slowpath+0xe/0x10 [ 34.261426][ T506] ? mutex_lock+0xdb/0xf0 [ 34.265726][ T506] ? mutex_trylock+0xb0/0xb0 [ 34.270290][ T506] dump_stack+0x15/0x1c [ 34.274420][ T506] check_preemption_disabled+0xf7/0x100 [ 34.279937][ T506] __this_cpu_preempt_check+0x13/0x20 [ 34.285284][ T506] __mod_node_page_state+0x9e/0xd0 [ 34.290372][ T506] __mod_lruvec_state+0x48/0x70 [ 34.295196][ T506] page_remove_rmap+0x654/0xe90 [ 34.300018][ T506] unmap_page_range+0x11f1/0x2190 [ 34.305019][ T506] ? lru_cache_disable+0xa0/0xa0 [ 34.309927][ T506] ? copy_page_range+0x27a0/0x27a0 [ 34.315009][ T506] unmap_vmas+0x25f/0x360 [ 34.319311][ T506] ? unmap_page_range+0x2190/0x2190 [ 34.324483][ T506] ? __kasan_check_write+0x14/0x20 [ 34.329565][ T506] ? tlb_gather_mmu+0x269/0x330 [ 34.334389][ T506] exit_mmap+0x309/0x590 [ 34.338604][ T506] ? vm_brk+0x30/0x30 [ 34.342557][ T506] ? mutex_lock+0x92/0xf0 [ 34.346861][ T506] ? mutex_unlock+0x1c/0x40 [ 34.351336][ T506] __mmput+0x92/0x2d0 [ 34.355292][ T506] mmput+0x4e/0x150 [ 34.359076][ T506] do_exit+0x9d8/0x24e0 [ 34.363206][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 34.368982][ T506] ? put_task_struct+0x90/0x90 [ 34.373725][ T506] ? zap_other_threads+0x29b/0x310 [ 34.378807][ T506] do_group_exit+0x149/0x310 [ 34.383370][ T506] __x64_sys_exit_group+0x3f/0x40 [ 34.388368][ T506] do_syscall_64+0x31/0x40 [ 34.392756][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.398619][ T506] RIP: 0033:0x7fb35341af45 [ 34.403009][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 34.410347][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 34.418730][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 34.426674][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 34.434620][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.442582][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 34.450529][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 34.458544][ T506] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor203/506 [ 34.467989][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 34.474182][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 34.483278][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.493303][ T506] Call Trace: [ 34.496566][ T506] __dump_stack+0x21/0x24 [ 34.500863][ T506] dump_stack_lvl+0x1a7/0x208 [ 34.505515][ T506] ? show_regs_print_info+0x18/0x18 [ 34.510697][ T506] ? dump_stack_lvl+0x1cc/0x208 [ 34.515520][ T506] dump_stack+0x15/0x1c [ 34.519646][ T506] check_preemption_disabled+0xf7/0x100 [ 34.525180][ T506] __this_cpu_preempt_check+0x13/0x20 [ 34.530524][ T506] __mod_memcg_state+0x51/0x210 [ 34.535344][ T506] ? dump_stack+0x15/0x1c [ 34.539643][ T506] __mod_memcg_lruvec_state+0x50/0x2c0 [ 34.545070][ T506] ? __this_cpu_preempt_check+0x13/0x20 [ 34.550597][ T506] ? __mod_node_page_state+0x9e/0xd0 [ 34.555853][ T506] __mod_lruvec_state+0x5a/0x70 [ 34.560671][ T506] page_remove_rmap+0x654/0xe90 [ 34.565491][ T506] unmap_page_range+0x11f1/0x2190 [ 34.570488][ T506] ? lru_cache_disable+0xa0/0xa0 [ 34.575396][ T506] ? copy_page_range+0x27a0/0x27a0 [ 34.580476][ T506] unmap_vmas+0x25f/0x360 [ 34.584776][ T506] ? unmap_page_range+0x2190/0x2190 [ 34.589956][ T506] ? __kasan_check_write+0x14/0x20 [ 34.595037][ T506] ? tlb_gather_mmu+0x269/0x330 [ 34.599869][ T506] exit_mmap+0x309/0x590 [ 34.604094][ T506] ? vm_brk+0x30/0x30 [ 34.608057][ T506] ? mutex_lock+0x92/0xf0 [ 34.612356][ T506] ? mutex_unlock+0x1c/0x40 [ 34.616846][ T506] __mmput+0x92/0x2d0 [ 34.620795][ T506] mmput+0x4e/0x150 [ 34.624577][ T506] do_exit+0x9d8/0x24e0 [ 34.628715][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 34.634503][ T506] ? put_task_struct+0x90/0x90 [ 34.639250][ T506] ? zap_other_threads+0x29b/0x310 [ 34.644336][ T506] do_group_exit+0x149/0x310 [ 34.648902][ T506] __x64_sys_exit_group+0x3f/0x40 [ 34.653911][ T506] do_syscall_64+0x31/0x40 [ 34.658329][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.664308][ T506] RIP: 0033:0x7fb35341af45 [ 34.668703][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 34.676182][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 34.684584][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 34.692534][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 34.700477][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.708442][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 34.716388][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 34.724374][ T506] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor203/506 [ 34.733819][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 34.739951][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 34.749025][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.759102][ T506] Call Trace: [ 34.762375][ T506] __dump_stack+0x21/0x24 [ 34.766674][ T506] dump_stack_lvl+0x1a7/0x208 [ 34.771326][ T506] ? show_regs_print_info+0x18/0x18 [ 34.776491][ T506] ? dump_stack_lvl+0x1cc/0x208 [ 34.781331][ T506] dump_stack+0x15/0x1c [ 34.785461][ T506] check_preemption_disabled+0xf7/0x100 [ 34.790990][ T506] __this_cpu_preempt_check+0x13/0x20 [ 34.796340][ T506] __mod_memcg_state+0xc0/0x210 [ 34.801178][ T506] __mod_memcg_lruvec_state+0x50/0x2c0 [ 34.806619][ T506] ? __this_cpu_preempt_check+0x13/0x20 [ 34.812162][ T506] ? __mod_node_page_state+0x9e/0xd0 [ 34.817423][ T506] __mod_lruvec_state+0x5a/0x70 [ 34.822250][ T506] page_remove_rmap+0x654/0xe90 [ 34.827094][ T506] unmap_page_range+0x11f1/0x2190 [ 34.832105][ T506] ? lru_cache_disable+0xa0/0xa0 [ 34.837026][ T506] ? copy_page_range+0x27a0/0x27a0 [ 34.842117][ T506] unmap_vmas+0x25f/0x360 [ 34.846425][ T506] ? unmap_page_range+0x2190/0x2190 [ 34.851599][ T506] ? __kasan_check_write+0x14/0x20 [ 34.856682][ T506] ? tlb_gather_mmu+0x269/0x330 [ 34.861506][ T506] exit_mmap+0x309/0x590 [ 34.865741][ T506] ? vm_brk+0x30/0x30 [ 34.869708][ T506] ? mutex_lock+0x92/0xf0 [ 34.874028][ T506] ? mutex_unlock+0x1c/0x40 [ 34.878518][ T506] __mmput+0x92/0x2d0 [ 34.882479][ T506] mmput+0x4e/0x150 [ 34.886266][ T506] do_exit+0x9d8/0x24e0 [ 34.890395][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 34.896175][ T506] ? put_task_struct+0x90/0x90 [ 34.900917][ T506] ? zap_other_threads+0x29b/0x310 [ 34.906004][ T506] do_group_exit+0x149/0x310 [ 34.910565][ T506] __x64_sys_exit_group+0x3f/0x40 [ 34.915587][ T506] do_syscall_64+0x31/0x40 [ 34.919977][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.925844][ T506] RIP: 0033:0x7fb35341af45 [ 34.930230][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 34.937744][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 34.946144][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 34.954107][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 34.962057][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 34.970009][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 34.977961][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 34.985963][ T506] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor203/506 [ 34.995172][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 35.001335][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 35.010418][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.020450][ T506] Call Trace: [ 35.023727][ T506] __dump_stack+0x21/0x24 [ 35.028030][ T506] dump_stack_lvl+0x1a7/0x208 [ 35.032681][ T506] ? thaw_kernel_threads+0x220/0x220 [ 35.037940][ T506] ? show_regs_print_info+0x18/0x18 [ 35.043111][ T506] ? check_preemption_disabled+0xf7/0x100 [ 35.048805][ T506] dump_stack+0x15/0x1c [ 35.052937][ T506] check_preemption_disabled+0xf7/0x100 [ 35.058453][ T506] __this_cpu_preempt_check+0x13/0x20 [ 35.063800][ T506] __mod_memcg_lruvec_state+0x5c/0x2c0 [ 35.069231][ T506] ? __this_cpu_preempt_check+0x13/0x20 [ 35.074748][ T506] ? __mod_node_page_state+0x9e/0xd0 [ 35.080005][ T506] __mod_lruvec_state+0x5a/0x70 [ 35.084829][ T506] page_remove_rmap+0x654/0xe90 [ 35.089656][ T506] unmap_page_range+0x11f1/0x2190 [ 35.094656][ T506] ? lru_cache_disable+0xa0/0xa0 [ 35.099566][ T506] ? copy_page_range+0x27a0/0x27a0 [ 35.104650][ T506] unmap_vmas+0x25f/0x360 [ 35.108953][ T506] ? unmap_page_range+0x2190/0x2190 [ 35.114123][ T506] ? __kasan_check_write+0x14/0x20 [ 35.119205][ T506] ? tlb_gather_mmu+0x269/0x330 [ 35.124029][ T506] exit_mmap+0x309/0x590 [ 35.128247][ T506] ? vm_brk+0x30/0x30 [ 35.132203][ T506] ? mutex_lock+0x92/0xf0 [ 35.136514][ T506] ? mutex_unlock+0x1c/0x40 [ 35.140989][ T506] __mmput+0x92/0x2d0 [ 35.144946][ T506] mmput+0x4e/0x150 [ 35.148732][ T506] do_exit+0x9d8/0x24e0 [ 35.152864][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 35.158644][ T506] ? put_task_struct+0x90/0x90 [ 35.163385][ T506] ? zap_other_threads+0x29b/0x310 [ 35.168471][ T506] do_group_exit+0x149/0x310 [ 35.173033][ T506] __x64_sys_exit_group+0x3f/0x40 [ 35.178032][ T506] do_syscall_64+0x31/0x40 [ 35.182420][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.188309][ T506] RIP: 0033:0x7fb35341af45 [ 35.192697][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 35.200044][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 35.208431][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 35.216384][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 35.224329][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.232274][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 35.240221][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 35.248213][ T506] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor203/506 [ 35.257507][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 35.263663][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 35.272745][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.282777][ T506] Call Trace: [ 35.286042][ T506] __dump_stack+0x21/0x24 [ 35.290343][ T506] dump_stack_lvl+0x1a7/0x208 [ 35.294994][ T506] ? thaw_kernel_threads+0x220/0x220 [ 35.300247][ T506] ? show_regs_print_info+0x18/0x18 [ 35.305420][ T506] ? check_preemption_disabled+0xf7/0x100 [ 35.311118][ T506] dump_stack+0x15/0x1c [ 35.315264][ T506] check_preemption_disabled+0xf7/0x100 [ 35.320784][ T506] __this_cpu_preempt_check+0x13/0x20 [ 35.326126][ T506] __mod_memcg_lruvec_state+0xb3/0x2c0 [ 35.331566][ T506] ? __this_cpu_preempt_check+0x13/0x20 [ 35.337088][ T506] ? __mod_node_page_state+0x9e/0xd0 [ 35.342345][ T506] __mod_lruvec_state+0x5a/0x70 [ 35.347170][ T506] page_remove_rmap+0x654/0xe90 [ 35.352004][ T506] unmap_page_range+0x11f1/0x2190 [ 35.357011][ T506] ? lru_cache_disable+0xa0/0xa0 [ 35.361922][ T506] ? copy_page_range+0x27a0/0x27a0 [ 35.367006][ T506] unmap_vmas+0x25f/0x360 [ 35.371313][ T506] ? unmap_page_range+0x2190/0x2190 [ 35.376485][ T506] ? __kasan_check_write+0x14/0x20 [ 35.381588][ T506] ? tlb_gather_mmu+0x269/0x330 [ 35.386414][ T506] exit_mmap+0x309/0x590 [ 35.390628][ T506] ? vm_brk+0x30/0x30 [ 35.394583][ T506] ? mutex_lock+0x92/0xf0 [ 35.398881][ T506] ? mutex_unlock+0x1c/0x40 [ 35.403356][ T506] __mmput+0x92/0x2d0 [ 35.407309][ T506] mmput+0x4e/0x150 [ 35.411110][ T506] do_exit+0x9d8/0x24e0 [ 35.415255][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 35.421033][ T506] ? put_task_struct+0x90/0x90 [ 35.425770][ T506] ? zap_other_threads+0x29b/0x310 [ 35.430851][ T506] do_group_exit+0x149/0x310 [ 35.435416][ T506] __x64_sys_exit_group+0x3f/0x40 [ 35.440415][ T506] do_syscall_64+0x31/0x40 [ 35.444813][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.450688][ T506] RIP: 0033:0x7fb35341af45 [ 35.455081][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 35.462429][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 35.470812][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 35.478767][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 35.486732][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.494683][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 35.502630][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 35.510618][ T506] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor203/506 [ 35.519985][ T506] caller is __this_cpu_preempt_check+0x13/0x20 [ 35.526222][ T506] CPU: 1 PID: 506 Comm: syz-executor203 Tainted: G W syzkaller #0 [ 35.535316][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.545354][ T506] Call Trace: [ 35.548625][ T506] __dump_stack+0x21/0x24 [ 35.552930][ T506] dump_stack_lvl+0x1a7/0x208 [ 35.557577][ T506] ? thaw_kernel_threads+0x220/0x220 [ 35.562835][ T506] ? show_regs_print_info+0x18/0x18 [ 35.568010][ T506] ? check_preemption_disabled+0xf7/0x100 [ 35.573703][ T506] dump_stack+0x15/0x1c [ 35.577832][ T506] check_preemption_disabled+0xf7/0x100 [ 35.583377][ T506] __this_cpu_preempt_check+0x13/0x20 [ 35.588722][ T506] __mod_memcg_lruvec_state+0x105/0x2c0 [ 35.594242][ T506] ? __this_cpu_preempt_check+0x13/0x20 [ 35.599762][ T506] ? __mod_node_page_state+0x9e/0xd0 [ 35.605021][ T506] __mod_lruvec_state+0x5a/0x70 [ 35.609859][ T506] page_remove_rmap+0x654/0xe90 [ 35.614693][ T506] unmap_page_range+0x11f1/0x2190 [ 35.619687][ T506] ? lru_cache_disable+0xa0/0xa0 [ 35.624600][ T506] ? copy_page_range+0x27a0/0x27a0 [ 35.629698][ T506] unmap_vmas+0x25f/0x360 [ 35.634007][ T506] ? unmap_page_range+0x2190/0x2190 [ 35.639175][ T506] ? __kasan_check_write+0x14/0x20 [ 35.644261][ T506] ? tlb_gather_mmu+0x269/0x330 [ 35.649100][ T506] exit_mmap+0x309/0x590 [ 35.653317][ T506] ? vm_brk+0x30/0x30 [ 35.657271][ T506] ? mutex_lock+0x92/0xf0 [ 35.661575][ T506] ? mutex_unlock+0x1c/0x40 [ 35.666049][ T506] __mmput+0x92/0x2d0 [ 35.670000][ T506] mmput+0x4e/0x150 [ 35.673781][ T506] do_exit+0x9d8/0x24e0 [ 35.677910][ T506] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 35.683707][ T506] ? put_task_struct+0x90/0x90 [ 35.688443][ T506] ? zap_other_threads+0x29b/0x310 [ 35.693527][ T506] do_group_exit+0x149/0x310 [ 35.698087][ T506] __x64_sys_exit_group+0x3f/0x40 [ 35.703109][ T506] do_syscall_64+0x31/0x40 [ 35.707499][ T506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.713361][ T506] RIP: 0033:0x7fb35341af45 [ 35.717763][ T506] Code: Unable to access opcode bytes at RIP 0x7fb35341af1b. [ 35.725102][ T506] RSP: 002b:00007ffcd0be0c08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 35.733494][ T506] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb35341af45 [ 35.741468][ T506] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 35.749414][ T506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.757359][ T506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [pid 301] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 506] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=506, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=55 /* 0.55 s */} --- [pid 298] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 298] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 298] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./6/binderfs") = 0 [pid 298] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 532] <... openat resumed>) = 4 [pid 517] <... openat resumed>) = 4 [pid 517] ioctl(4, LOOP_CLR_FD [pid 532] ioctl(4, LOOP_SET_FD, 3 [pid 517] <... ioctl resumed>) = 0 [pid 517] close(4 [pid 532] <... ioctl resumed>) = 0 [pid 517] <... close resumed>) = 0 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] close(3 [pid 517] <... futex resumed>) = 1 [pid 532] <... close resumed>) = 0 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] close(4 [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 532] <... close resumed>) = 0 [pid 517] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... openat resumed>) = 4 [pid 532] mkdir("./bus", 0777 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... mkdir resumed>) = 0 [pid 517] <... futex resumed>) = 1 [pid 516] <... futex resumed>) = 0 [pid 532] mount("/dev/loop1", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 517] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [ 35.765311][ T506] R13: 00007fb3534c8148 R14: 00007fb3534ca808 R15: 00007fb3534ca820 [ 35.774581][ T7] handle_bad_sector: 17 callbacks suppressed [ 35.774590][ T7] attempt to access beyond end of device [ 35.774590][ T7] loop3: rw=2049, want=40984, limit=40427 [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... ioctl resumed>) = 0 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=45000000} [pid 517] <... openat resumed>) = 5 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] <... futex resumed>) = 0 [pid 517] pwrite64(5, "\f", 1, 134220897 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... pwrite64 resumed>) = 1 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] <... futex resumed>) = 0 [pid 517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... openat resumed>) = 6 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] <... futex resumed>) = 0 [pid 517] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [ 35.814124][ T532] F2FS-fs (loop1): Invalid segment/section count (28696 != 24 * 1) [ 35.815618][ T7] attempt to access beyond end of device [ 35.815618][ T7] loop0: rw=1, want=81920, limit=40427 [ 35.830595][ T532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.841848][ T532] F2FS-fs (loop1): invalid crc value [pid 516] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... rmdir resumed>) = 0 [pid 302] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./6") = 0 [pid 302] mkdir("./7", 0777) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop4", O_RDONLY [pid 516] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 35.862287][ T532] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.876721][ T7] attempt to access beyond end of device [ 35.876721][ T7] loop0: rw=1, want=53248, limit=40427 [ 35.896315][ T532] F2FS-fs (loop1): Start checkpoint disabled! [ 35.903019][ T532] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [pid 516] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... openat resumed>) = 3 [pid 516] <... futex resumed>) = 0 [pid 302] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 302] close(3) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 536 [pid 302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 532] <... mount resumed>) = 0 [pid 516] <... mmap resumed>) = 0x7fb3533b0000 [pid 532] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 516] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE [pid 532] <... openat resumed>) = 3 [pid 516] <... mprotect resumed>) = 0 [pid 532] chdir("./bus" [pid 516] rt_sigprocmask(SIG_BLOCK, ~[] [pid 532] <... chdir resumed>) = 0 [pid 516] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop1", O_RDONLY [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 532] <... openat resumed>) = 4 [pid 532] ioctl(4, LOOP_CLR_FD [pid 516] <... clone3 resumed> => {parent_tid=[537]}, 88) = 537 [pid 532] <... ioctl resumed>) = 0 [pid 516] rt_sigprocmask(SIG_SETMASK, [] [pid 532] close(4 [pid 516] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 532] <... close resumed>) = 0 [pid 516] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 530] <... futex resumed>) = 0 [pid 516] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... openat resumed>) = 4 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... ioctl resumed>) = 0 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... openat resumed>) = 5 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] pwrite64(5, "\f", 1, 134220897 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... pwrite64 resumed>) = 1 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... openat resumed>) = 6 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 530] <... futex resumed>) = 0 [pid 532] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] chdir("./7") = 0 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 [pid 536] symlink("/dev/binderfs", "./binderfs") = 0 ci2-android-5-10/strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [] [pid 536] write(1, "executing program\n", 18 [pid 537] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 537] read(6 [pid 536] <... write resumed>) = 18 [ 35.910080][ T532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 536] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[538]}, 88) = 538 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] memfd_create("syzkaller", 0) = 3 [pid 538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 516] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 516] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 516] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 516] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 516] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 530] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533b0000 [pid 530] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} => {parent_tid=[539]}, 88) = 539 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... mmap resumed>) = 0x7fb35338f000 [pid 516] mprotect(0x7fb353390000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533af990, parent_tid=0x7fb3533af990, exit_signal=0, stack=0x7fb35338f000, stack_size=0x20300, tls=0x7fb3533af6c0} => {parent_tid=[540]}, 88) = 540 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7fb3534c9e68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7fb3534c9e6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... mmap resumed>) = 0x200000000000 ci2-android-5-10/strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] read(6 [pid 517] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 ci2-android-5-10/strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x7fb3533af9a0, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID) = 0 [pid 540] futex(0x7fb3534c9e6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 540] <... futex resumed>) = 1 [pid 540] futex(0x7fb3534c9e68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] <... mmap resumed>) = 0x200000000000 [pid 517] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 35.960506][ T7] attempt to access beyond end of device [ 35.960506][ T7] loop0: rw=1, want=72064, limit=40427 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 530] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 530] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 530] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 530] <... futex resumed>) = 1 [pid 532] unshare(CLONE_FS|CLONE_FILES|CLONE_NEWNS|CLONE_NEWCGROUP|CLONE_NEWPID [pid 530] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... unshare resumed>) = 0 [pid 532] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 532] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... umount2 resumed>) = 0 [ 36.011819][ T7] attempt to access beyond end of device [ 36.011819][ T7] loop0: rw=2049, want=40984, limit=40427 [pid 301] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 301] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 301] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 301] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 301] close(4) = 0 [pid 301] rmdir("./5/bus") = 0 [pid 301] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5") = 0 [pid 301] mkdir("./6", 0777) = 0 [pid 301] openat(AT_FDCWD, "/dev/loop3", O_RDONLY) = 3 [pid 301] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 301] close(3) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 541 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] chdir("./6") = 0 [pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 541] setpgid(0, 0) = 0 [pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 541] write(3, "1000", 4) = 4 [pid 541] close(3) = 0 [pid 541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 541] write(1, "executing program\n", 18) = 18 executing program [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 541] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[542]}, 88) = 542 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] memfd_create("syzkaller", 0) = 3 [pid 542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [pid 539] <... read resumed>, 0x200000005d80, 4294966961) = 16753280 [pid 539] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] exit_group(0 [pid 532] <... futex resumed>) = ? [pid 530] <... exit_group resumed>) = ? [pid 516] exit_group(0 [pid 540] <... futex resumed>) = ? [pid 517] <... futex resumed>) = ? [pid 516] <... exit_group resumed>) = ? [pid 532] +++ exited with 0 +++ [pid 517] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ [pid 538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 537] <... read resumed> ) = ? [pid 537] +++ exited with 0 +++ [pid 516] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=516, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 300] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 300] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 300] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./6/binderfs" [pid 539] +++ exited with 0 +++ [pid 530] +++ exited with 0 +++ [pid 300] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./6/binderfs" [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=530, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 300] <... unlink resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 300] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 4 entries */, 32768) = 104 [pid 299] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./7/binderfs") = 0 [ 36.188673][ T7] attempt to access beyond end of device [ 36.188673][ T7] loop2: rw=2049, want=40984, limit=40427 [ 36.206781][ T49] attempt to access beyond end of device [ 36.206781][ T49] loop1: rw=1, want=81920, limit=40427 [pid 299] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 538] <... write resumed>) = 20699119 [pid 538] munmap(0x7fb34afd1000, 138412032) = 0 [pid 538] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 538] ioctl(4, LOOP_SET_FD, 3 [pid 542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 538] <... ioctl resumed>) = 0 [pid 538] close(3) = 0 [pid 538] close(4) = 0 [pid 538] mkdir("./bus", 0777) = 0 [ 36.248793][ T49] attempt to access beyond end of device [ 36.248793][ T49] loop1: rw=1, want=53248, limit=40427 [ 36.278964][ T49] attempt to access beyond end of device [ 36.278964][ T49] loop1: rw=1, want=61440, limit=40427 [pid 538] mount("/dev/loop4", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 298] <... umount2 resumed>) = 0 [pid 298] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 298] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 298] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 298] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 298] close(4) = 0 [pid 298] rmdir("./6/bus") = 0 [pid 298] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./6") = 0 [pid 298] mkdir("./7", 0777) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 [pid 298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 544 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] chdir("./7") = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 544] write(1, "executing program\n", 18) = 18 executing program [pid 544] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 544] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[545]}, 88) = 545 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 36.293520][ T538] F2FS-fs (loop4): Invalid segment/section count (28696 != 24 * 1) [ 36.312830][ T538] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.337148][ T538] F2FS-fs (loop4): invalid crc value [pid 542] <... write resumed>) = 20699119 [pid 542] munmap(0x7fb34afd1000, 138412032) = 0 [pid 542] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 542] close(3) = 0 [pid 542] close(4) = 0 [pid 542] mkdir("./bus", 0777) = 0 [ 36.348405][ T49] attempt to access beyond end of device [ 36.348405][ T49] loop1: rw=1, want=70520, limit=40427 [ 36.375630][ T538] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [pid 542] mount("/dev/loop3", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 300] <... umount2 resumed>) = 0 [pid 300] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 300] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 300] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 300] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 300] close(4) = 0 [pid 300] rmdir("./6/bus") = 0 [pid 300] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [ 36.413737][ T542] F2FS-fs (loop3): Invalid segment/section count (28696 != 24 * 1) [ 36.422129][ T542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.451516][ T542] F2FS-fs (loop3): invalid crc value [pid 300] rmdir("./6") = 0 [pid 300] mkdir("./7", 0777) = 0 [pid 300] openat(AT_FDCWD, "/dev/loop2", O_RDONLY) = 3 [pid 300] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 300] close(3) = 0 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 551 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 551 attached [pid 551] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 551] chdir("./7") = 0 [pid 551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 551] setpgid(0, 0) = 0 [pid 551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 551] write(3, "1000", 4) = 4 [pid 551] close(3) = 0 [pid 551] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 551] write(1, "executing program\n", 18) = 18 [pid 551] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 551] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 551] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 551] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 551] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[552]}, 88) = 552 [pid 551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 551] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 551] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 552 attached [pid 552] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] memfd_create("syzkaller", 0) = 3 [pid 552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000 [ 36.472900][ T538] F2FS-fs (loop4): Start checkpoint disabled! [ 36.479634][ T542] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 36.501776][ T538] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.508813][ T538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [pid 552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119 [pid 538] <... mount resumed>) = 0 [pid 538] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 538] chdir("./bus") = 0 [pid 538] openat(AT_FDCWD, "/dev/loop4", O_RDONLY) = 4 [pid 538] ioctl(4, LOOP_CLR_FD) = 0 [pid 538] close(4) = 0 [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 538] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... openat resumed>) = 4 [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0) = 0 [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 538] pwrite64(5, "\f", 1, 134220897 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... pwrite64 resumed>) = 1 [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 536] <... futex resumed>) = 0 [pid 538] <... openat resumed>) = 6 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 538] futex(0x7fb3534c9e48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 536] <... futex resumed>) = 1 [pid 538] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 536] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 552] <... write resumed>) = 20699119 [pid 552] munmap(0x7fb34afd1000, 138412032) = 0 [pid 552] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 36.568891][ T542] F2FS-fs (loop3): Start checkpoint disabled! [ 36.576043][ T542] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [pid 552] ioctl(4, LOOP_SET_FD, 3 [pid 545] <... write resumed>) = 20699119 [pid 545] munmap(0x7fb34afd1000, 138412032 [pid 552] <... ioctl resumed>) = 0 [pid 552] close(3) = 0 [pid 552] close(4 [pid 545] <... munmap resumed>) = 0 [pid 552] <... close resumed>) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 552] mkdir("./bus", 0777 [pid 545] <... openat resumed>) = 4 [pid 552] <... mkdir resumed>) = 0 [pid 545] ioctl(4, LOOP_SET_FD, 3 [pid 552] mount("/dev/loop2", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 542] <... mount resumed>) = 0 [pid 542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 542] chdir("./bus") = 0 [pid 542] openat(AT_FDCWD, "/dev/loop3", O_RDONLY [pid 545] <... ioctl resumed>) = 0 [pid 536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 545] close(3) = 0 [pid 542] <... openat resumed>) = 4 [pid 536] futex(0x7fb3534c9e5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] close(4) = 0 [pid 542] ioctl(4, LOOP_CLR_FD [pid 536] <... futex resumed>) = 0 [pid 545] mkdir("./bus", 0777 [pid 542] <... ioctl resumed>) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 545] <... mkdir resumed>) = 0 [pid 542] close(4 [pid 536] <... mmap resumed>) = 0x7fb3533b0000 [pid 545] mount("/dev/loop0", "./bus", "f2fs", MS_NOSUID|MS_NOEXEC, "disable_roll_forward,lazytime,compress_cache,noinline_xattr,disable_ext_identify,noextent_cache,noex"... [pid 542] <... close resumed>) = 0 [pid 536] mprotect(0x7fb3533b1000, 131072, PROT_READ|PROT_WRITE [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... mprotect resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 541] <... futex resumed>) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[] [pid 542] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 542] <... openat resumed>) = 4 [pid 541] <... futex resumed>) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533d0990, parent_tid=0x7fb3533d0990, exit_signal=0, stack=0x7fb3533b0000, stack_size=0x20300, tls=0x7fb3533d06c0} [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... clone3 resumed> => {parent_tid=[555]}, 88) = 555 [pid 542] ioctl(4, F2FS_IOC_START_ATOMIC_WRITE, 0 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] rt_sigprocmask(SIG_SETMASK, [] [pid 542] <... ioctl resumed>) = 0 [pid 541] <... futex resumed>) = 0 [pid 536] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] futex(0x7fb3534c9e58, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 536] <... futex resumed>) = 0 [pid 542] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] futex(0x7fb3534c9e5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... openat resumed>) = 5 [pid 541] <... futex resumed>) = 0 [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] pwrite64(5, "\f", 1, 134220897 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... pwrite64 resumed>) = 1 [pid 541] <... futex resumed>) = 0 [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC, 025 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... openat resumed>) = 6 [pid 541] <... futex resumed>) = 0 [pid 542] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 0 [pid 541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 [pid 541] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000ci2-android-5-10/strace-static-x86_64: Process 555 attached ) = 0 [pid 299] <... umount2 resumed>) = 0 [ 36.612399][ T542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 36.632635][ T552] F2FS-fs (loop2): Invalid segment/section count (28696 != 24 * 1) [ 36.645372][ T545] F2FS-fs (loop0): Invalid segment/section count (28696 != 24 * 1) [pid 541] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] set_robust_list(0x7fb3533d09a0, 24) = 0 [pid 555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 555] read(6 [pid 299] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 299] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 299] getdents64(4, 0x55556a4f5790 /* 2 entries */, 32768) = 48 [pid 299] getdents64(4, 0x55556a4f5790 /* 0 entries */, 32768) = 0 [pid 299] close(4) = 0 [pid 299] rmdir("./7/bus") = 0 [pid 299] getdents64(3, 0x55556a4ed750 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./7") = 0 [pid 299] mkdir("./8", 0777) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop1", O_RDONLY) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556a4ec690) = 557 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x55556a4ec6a0, 24) = 0 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] chdir("./8") = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 557] close(3) = 0 [pid 557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 557] write(1, "executing program\n", 18) = 18 [pid 557] futex(0x7fb3534c9e4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 557] rt_sigaction(SIGRT_1, {sa_handler=0x7fb35342fdd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb353421da0}, NULL, 8) = 0 [pid 557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb3533d1000 [pid 557] mprotect(0x7fb3533d2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb3533f1990, parent_tid=0x7fb3533f1990, exit_signal=0, stack=0x7fb3533d1000, stack_size=0x20300, tls=0x7fb3533f16c0} => {parent_tid=[558]}, 88) = 558 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] futex(0x7fb3534c9e48, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 557] futex(0x7fb3534c9e4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-5-10/strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x7fb3533f19a0, 24) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] memfd_create("syzkaller", 0) = 3 [pid 558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb34afd1000