ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor1330066151 <...> Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. execve("ci2-android-6-1/syz-executor1330066151", ["ci2-android-6-1/syz-executor1330066151"], 0x7ffcd3be78b0 /* 10 vars */) = 0 brk(NULL) = 0x55555a62f000 brk(0x55555a62fd40) = 0x55555a62fd40 arch_prctl(ARCH_SET_FS, 0x55555a62f3c0) = 0 set_tid_address(0x55555a62f690) = 305 set_robust_list(0x55555a62f6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor1330066151", 4096) = 44 getrandom("\xfb\x48\xb2\x6a\x64\x53\x52\xaa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555a62fd40 brk(0x55555a650d40) = 0x55555a650d40 brk(0x55555a651000) = 0x55555a651000 mprotect(0x7f80097a0000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 306 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 307 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 308 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 309 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 310 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 311 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 312 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] write(1, "executing program\n", 18) = 18 executing program [pid 312] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 313 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 314 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 315 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] write(1, "executing program\n", 18) = 18 [pid 311] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] openat(AT_FDCWD, "/dev/char/4:24", O_RDWRci2-android-6-1/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 executing program executing program [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 executing program [pid 315] write(1, "executing program\n", 18) = 18 [pid 314] <... openat resumed>) = 3 [pid 313] <... openat resumed>) = 3 [pid 312] <... openat resumed>) = 3 [pid 311] <... openat resumed>) = 3 [pid 314] ioctl(3, VT_ACTIVATE, 0x14 [pid 313] ioctl(3, VT_ACTIVATE, 0x14 [pid 312] ioctl(3, VT_ACTIVATE, 0x14 [pid 311] ioctl(3, VT_ACTIVATE, 0x14 [pid 314] <... ioctl resumed>) = 0 [pid 315] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 313] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 314] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 313] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 312] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 311] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 314] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 314] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 311] <... ioctl resumed>) = 0 [pid 313] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 314] <... openat resumed>) = 4 [pid 312] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 311] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 313] <... openat resumed>) = 4 [pid 314] ioctl(4, UI_SET_EVBIT, 0x1 [pid 313] ioctl(4, UI_SET_EVBIT, 0x1 [pid 312] <... openat resumed>) = 4 [pid 311] <... openat resumed>) = 4 [ 24.619915][ T28] audit: type=1400 audit(1790769711.126:64): avc: denied { execmem } for pid=305 comm="syz-executor133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 312] ioctl(4, UI_SET_EVBIT, 0x1 [pid 311] ioctl(4, UI_SET_EVBIT, 0x1 [pid 314] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 313] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 312] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 311] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 314] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 313] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 312] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 314] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 313] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 311] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 312] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 311] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 314] <... ioctl resumed>) = 0 [pid 313] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 313] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 311] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 314] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 313] <... write resumed>) = 24 [pid 312] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 311] <... write resumed>) = 24 [pid 313] exit_group(0 [pid 311] exit_group(0 [pid 314] <... write resumed>) = 24 [pid 313] <... exit_group resumed>) = ? [pid 312] <... write resumed>) = 24 [pid 311] <... exit_group resumed>) = ? [pid 314] exit_group(0) = ? [pid 312] exit_group(0) = ? [ 24.655784][ T28] audit: type=1400 audit(1790769711.156:65): avc: denied { read write } for pid=314 comm="syz-executor133" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.655863][ T28] audit: type=1400 audit(1790769711.156:66): avc: denied { open } for pid=314 comm="syz-executor133" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [pid 315] <... openat resumed>) = 3 [pid 314] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ [pid 315] ioctl(3, VT_ACTIVATE, 0x14 [pid 311] +++ exited with 0 +++ [pid 315] <... ioctl resumed>) = 0 [pid 315] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 315] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 315] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 315] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 315] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 24.656663][ T28] audit: type=1400 audit(1790769711.156:67): avc: denied { ioctl } for pid=314 comm="syz-executor133" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 24.683100][ T314] input: syz0 as /devices/virtual/input/input4 [ 24.683562][ T313] input: syz0 as /devices/virtual/input/input5 [ 24.684296][ T312] input: syz0 as /devices/virtual/input/input6 [pid 315] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 315] <... ioctl resumed>) = 0 [pid 315] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 315] exit_group(0) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 330 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 329 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 332 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 331 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-android-6-1/strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x55555a62f6a0, 24 [pid 331] <... openat resumed>) = 3 [pid 329] <... set_robust_list resumed>) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3 [pid 329] <... prctl resumed>) = 0 [pid 331] <... close resumed>) = 0 [pid 329] setpgid(0, 0) = 0 executing program [pid 331] write(1, "executing program\n", 18 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 331] <... write resumed>) = 18 [pid 331] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 329] <... openat resumed>) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 331] ioctl(3, VT_ACTIVATE, 0x14 [pid 329] close(3 [pid 331] <... ioctl resumed>) = 0 [pid 329] <... close resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 332 attached ci2-android-6-1/strace-static-x86_64: Process 330 attached [pid 315] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 332] set_robust_list(0x55555a62f6a0, 24 [pid 331] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 330] set_robust_list(0x55555a62f6a0, 24 [pid 329] write(1, "executing program\n", 18ci2-android-6-1/strace-static-x86_64: Process 333 attached [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 333 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] <... set_robust_list resumed>) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 executing program [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 332] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 332] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 332] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 332] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 332] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 332] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 332] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 331] <... ioctl resumed>) = 0 [pid 330] <... set_robust_list resumed>) = 0 [pid 329] <... write resumed>) = 18 [pid 331] openat(AT_FDCWD, "/dev/uinput", O_RDWR executing program [pid 329] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 333] set_robust_list(0x55555a62f6a0, 24 [pid 331] <... openat resumed>) = 4 [pid 330] rt_sigprocmask(SIG_SETMASK, [] [pid 331] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 331] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 331] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 330] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 333] <... set_robust_list resumed>) = 0 [pid 332] <... ioctl resumed>) = 0 [pid 332] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 333] rt_sigprocmask(SIG_SETMASK, [] [pid 332] exit_group(0 [pid 333] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 332] <... exit_group resumed>) = ? [pid 333] <... prctl resumed>) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] write(1, "executing program\n", 18) = 18 executing program [pid 333] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18) = 18 executing program [pid 330] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 329] <... openat resumed>) = 3 [ 24.684592][ T311] input: syz0 as /devices/virtual/input/input7 [ 24.790697][ T315] input: syz0 as /devices/virtual/input/input8 [ 24.819113][ T332] input: syz0 as /devices/virtual/input/input9 [ 24.822792][ T331] input: syz0 as /devices/virtual/input/input10 [pid 333] <... openat resumed>) = 3 [pid 330] <... openat resumed>) = 3 [pid 329] +++ killed by SIGKILL +++ [pid 333] ioctl(3, VT_ACTIVATE, 0x14 [pid 330] ioctl(3, VT_ACTIVATE, 0x14 [pid 333] <... ioctl resumed>) = 0 [pid 330] <... ioctl resumed>) = 0 [pid 333] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 330] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 333] <... ioctl resumed>) = 0 [pid 330] <... ioctl resumed>) = 0 [pid 333] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 330] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 333] <... openat resumed>) = 4 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=329, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 333] ioctl(4, UI_SET_EVBIT, 0x1 [pid 330] <... openat resumed>) = 4 [pid 333] <... ioctl resumed>) = 0 [pid 330] ioctl(4, UI_SET_EVBIT, 0x1 [pid 333] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 330] <... ioctl resumed>) = 0 [pid 333] <... ioctl resumed>) = 0 [pid 330] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 333] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 330] <... ioctl resumed>) = 0 [pid 333] <... ioctl resumed>) = 0 [pid 330] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 333] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 330] <... ioctl resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 335 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 332] +++ exited with 0 +++ ci2-android-6-1/strace-static-x86_64: Process 335 attached [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 331] <... ioctl resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 335] set_robust_list(0x55555a62f6a0, 24 [pid 331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... restart_syscall resumed>) = 0 [pid 331] <... write resumed>) = 24 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 331] exit_group(0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 331] <... exit_group resumed>) = ? [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 333] <... ioctl resumed>) = 0 [pid 333] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 336 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] <... write resumed>) = 24 [pid 333] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] <... set_robust_list resumed>) = 0 [pid 331] +++ exited with 0 +++ [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 335] <... prctl resumed>) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] <... restart_syscall resumed>) = 0 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] write(1, "executing program\n", 18) = 18 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 335] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 335] <... openat resumed>) = 3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 335] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 337 [pid 335] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 335] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 335] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 335] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 335] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 335] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 330] <... ioctl resumed>) = 0 [pid 330] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 330] exit_group(0) = ? [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3ci2-android-6-1/strace-static-x86_64: Process 337 attached ) = 0 [pid 335] <... ioctl resumed>) = ? [pid 337] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18) = 18 executing program [pid 337] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 336] write(1, "executing program\n", 18) = 18 executing program [pid 336] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 337] <... openat resumed>) = 3 [pid 337] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 337] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 337] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 337] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 337] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 337] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 337] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 335] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=335, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 336] <... openat resumed>) = 3 [pid 336] ioctl(3, VT_ACTIVATE, 0x14) = 0 [ 24.834876][ T19] tty tty20: SAK: killed process 329 (syz-executor133): by fd#3 [ 24.844657][ T333] input: syz0 as /devices/virtual/input/input11 [ 24.851653][ T330] input: syz0 as /devices/virtual/input/input12 [ 24.870970][ T335] input: syz0 as /devices/virtual/input/input13 [ 24.877652][ T60] tty tty20: SAK: killed process 335 (syz-executor133): by fd#3 [pid 336] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 336] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 336] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 336] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 336] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 336] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 338 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3 [pid 333] +++ exited with 0 +++ [pid 338] <... close resumed>) = 0 [pid 338] write(1, "executing program\n", 18) = 18 executing program [pid 338] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 330] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 338] ioctl(3, VT_ACTIVATE, 0x14 [pid 337] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 338] <... ioctl resumed>) = 0 [pid 337] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 338] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 337] <... write resumed>) = 24 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 338] <... ioctl resumed>) = 0 [pid 337] exit_group(0 [pid 338] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 337] <... exit_group resumed>) = ? [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 339 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 340 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 338] <... openat resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55555a62f6a0, 24ci2-android-6-1/strace-static-x86_64: Process 340 attached ) = 0 [pid 338] +++ killed by SIGKILL +++ [pid 336] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=338, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 340] set_robust_list(0x55555a62f6a0, 24 [pid 339] rt_sigprocmask(SIG_SETMASK, [] [pid 337] +++ exited with 0 +++ [pid 336] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 336] <... write resumed>) = 24 [pid 336] exit_group(0) = ? [pid 340] <... set_robust_list resumed>) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [] [pid 339] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] <... prctl resumed>) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 336] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 339] write(3, "1000", 4 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 339] <... write resumed>) = 4 [pid 339] close(3 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 341 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 339] <... close resumed>) = 0 [pid 339] write(1, "executing program\n", 18) = 18 executing program [pid 339] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 339] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 339] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 342 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 343 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] <... ioctl resumed>) = 0 [pid 339] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 339] ioctl(4, UI_SET_EVBIT, 0x1) = 0 ci2-android-6-1/strace-static-x86_64: Process 343 attached ci2-android-6-1/strace-static-x86_64: Process 342 attached ci2-android-6-1/strace-static-x86_64: Process 341 attached [pid 340] <... prctl resumed>) = 0 [pid 339] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 343] set_robust_list(0x55555a62f6a0, 24 [pid 342] set_robust_list(0x55555a62f6a0, 24 [pid 341] set_robust_list(0x55555a62f6a0, 24 [pid 340] setpgid(0, 0 [pid 339] <... ioctl resumed>) = 0 [pid 340] <... setpgid resumed>) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 343] <... set_robust_list resumed>) = 0 [pid 342] <... set_robust_list resumed>) = 0 [pid 341] <... set_robust_list resumed>) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [] [pid 342] rt_sigprocmask(SIG_SETMASK, [] [pid 341] rt_sigprocmask(SIG_SETMASK, [] [pid 339] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 340] <... openat resumed>) = 3 [pid 343] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 340] write(3, "1000", 4 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] <... write resumed>) = 4 [pid 343] <... prctl resumed>) = 0 [pid 340] close(3 [pid 343] setpgid(0, 0 [pid 340] <... close resumed>) = 0 [pid 343] <... setpgid resumed>) = 0 [pid 340] write(1, "executing program\n", 18 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 340] <... write resumed>) = 18 executing program [pid 343] <... openat resumed>) = 3 [pid 340] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 [pid 343] write(1, "executing program\n", 18 [pid 340] <... openat resumed>) = 3 [pid 343] <... write resumed>) = 18 executing program [pid 340] ioctl(3, VT_ACTIVATE, 0x14 [pid 343] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 340] <... ioctl resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 343] <... openat resumed>) = 3 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 343] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 340] <... ioctl resumed>) = 0 [pid 342] <... prctl resumed>) = 0 [pid 340] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 341] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 343] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 343] <... ioctl resumed>) = 0 [pid 340] <... openat resumed>) = 4 [pid 342] setpgid(0, 0 [pid 340] ioctl(4, UI_SET_EVBIT, 0x1 [pid 343] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 342] <... setpgid resumed>) = 0 [pid 340] <... ioctl resumed>) = 0 [pid 341] <... prctl resumed>) = 0 [pid 340] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 343] <... openat resumed>) = 4 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 340] <... ioctl resumed>) = 0 [pid 341] setpgid(0, 0 [pid 340] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 341] <... setpgid resumed>) = 0 [pid 340] <... ioctl resumed>) = 0 [pid 342] <... openat resumed>) = 3 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 340] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 343] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 343] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 341] <... openat resumed>) = 3 [pid 343] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 343] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] write(1, "executing program\n", 18) = 18 executing program [pid 341] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 342] write(3, "1000", 4 [pid 340] <... ioctl resumed>) = 0 [pid 339] <... ioctl resumed>) = 0 [pid 342] <... write resumed>) = 4 [pid 342] close(3) = 0 executing program [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 340] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 339] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [ 24.889422][ T337] input: syz0 as /devices/virtual/input/input14 [ 24.895919][ T336] input: syz0 as /devices/virtual/input/input15 [ 24.905711][ T6] tty tty20: SAK: killed process 338 (syz-executor133): by fd#3 [ 24.929065][ T340] input: syz0 as /devices/virtual/input/input17 [pid 340] exit_group(0) = ? [pid 343] <... ioctl resumed>) = 0 [pid 342] <... openat resumed>) = 3 [pid 341] <... openat resumed>) = 3 [pid 342] ioctl(3, VT_ACTIVATE, 0x14 [pid 341] ioctl(3, VT_ACTIVATE, 0x14 [pid 342] <... ioctl resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 342] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 341] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 342] <... ioctl resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 342] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 341] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 342] <... openat resumed>) = 4 [pid 341] <... openat resumed>) = 4 [pid 340] +++ exited with 0 +++ [pid 342] ioctl(4, UI_SET_EVBIT, 0x1 [pid 341] ioctl(4, UI_SET_EVBIT, 0x1 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 342] <... ioctl resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 342] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 341] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 342] <... ioctl resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 342] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 341] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 342] <... ioctl resumed>) = 0 [pid 341] <... ioctl resumed>) = 0 [pid 342] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 341] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 343] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 343] exit_group(0) = ? [pid 308] <... restart_syscall resumed>) = 0 [pid 342] <... ioctl resumed>) = ? [pid 339] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 339] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 343] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 344 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] write(1, "executing program\n", 18) = 18 executing program [pid 344] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 344] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 344] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 344] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 344] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 344] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 344] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 344] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 339] exit_group(0) = ? [ 24.934757][ T343] input: syz0 as /devices/virtual/input/input18 [ 24.940748][ T339] input: syz0 as /devices/virtual/input/input16 [ 24.954115][ T342] input: syz0 as /devices/virtual/input/input20 [ 24.960785][ T39] tty tty20: SAK: killed process 342 (syz-executor133): by fd#3 [ 24.961325][ T341] input: syz0 as /devices/virtual/input/input19 [ 24.982452][ T60] tty tty20: SAK: killed process 342 (syz-executor133): by fd#3 [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 345 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 342] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=342, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 341] <... ioctl resumed>) = 0 [pid 341] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 341] <... write resumed>) = 24 [pid 341] exit_group(0) = ? [pid 345] close(3 [pid 339] +++ exited with 0 +++ [pid 345] <... close resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> executing program [pid 345] write(1, "executing program\n", 18 [pid 344] <... ioctl resumed>) = 0 [pid 344] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 345] <... write resumed>) = 18 [pid 344] <... write resumed>) = 24 [pid 345] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 344] exit_group(0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 346 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 347 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 executing program [pid 347] write(1, "executing program\n", 18) = 18 [pid 347] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 347] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 347] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}ci2-android-6-1/strace-static-x86_64: Process 346 attached ) = 0 [pid 345] <... openat resumed>) = 3 [pid 344] <... exit_group resumed>) = ? [pid 346] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 345] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 346] <... openat resumed>) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18) = 18 executing program [pid 346] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 347] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 345] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 346] <... openat resumed>) = 3 [pid 346] ioctl(3, VT_ACTIVATE, 0x14 [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 348 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 348] write(1, "executing program\n", 18) = 18 executing program [pid 348] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 347] <... openat resumed>) = ? [pid 345] <... ioctl resumed>) = 0 [pid 345] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 345] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 345] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 346] <... ioctl resumed>) = 0 [pid 348] <... openat resumed>) = 3 [pid 346] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 344] +++ exited with 0 +++ [pid 348] ioctl(3, VT_ACTIVATE, 0x14 [pid 345] <... ioctl resumed>) = 0 [pid 348] <... ioctl resumed>) = 0 [pid 347] +++ killed by SIGKILL +++ [pid 346] <... ioctl resumed>) = 0 [pid 345] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 346] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 348] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 348] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=347, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 346] <... openat resumed>) = 4 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 348] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 348] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 348] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 348] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 346] ioctl(4, UI_SET_EVBIT, 0x1 [pid 345] <... ioctl resumed>) = 0 [pid 346] <... ioctl resumed>) = 0 [pid 346] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 346] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 346] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 349 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 350 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 349 attached ci2-android-6-1/strace-static-x86_64: Process 350 attached [pid 349] set_robust_list(0x55555a62f6a0, 24 [pid 350] set_robust_list(0x55555a62f6a0, 24 [pid 349] <... set_robust_list resumed>) = 0 [pid 348] <... ioctl resumed>) = 0 [pid 350] <... set_robust_list resumed>) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [] [pid 349] rt_sigprocmask(SIG_SETMASK, [] [pid 348] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 350] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 349] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] <... prctl resumed>) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 350] setpgid(0, 0 [pid 349] <... prctl resumed>) = 0 [pid 350] <... setpgid resumed>) = 0 [pid 349] setpgid(0, 0 [pid 348] <... write resumed>) = 24 [pid 349] <... setpgid resumed>) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 346] <... ioctl resumed>) = 0 [pid 350] <... openat resumed>) = 3 [pid 350] write(3, "1000", 4 [pid 349] <... openat resumed>) = 3 [ 24.983607][ T344] input: syz0 as /devices/virtual/input/input21 [ 25.012688][ T6] tty tty20: SAK: killed process 347 (syz-executor133): by fd#3 [ 25.023812][ T348] input: syz0 as /devices/virtual/input/input23 [ 25.024637][ T346] input: syz0 as /devices/virtual/input/input24 [pid 350] <... write resumed>) = 4 [pid 349] write(3, "1000", 4 [pid 348] exit_group(0 [pid 346] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 350] close(3 [pid 349] <... write resumed>) = 4 [pid 350] <... close resumed>) = 0 [pid 349] close(3 [pid 350] write(1, "executing program\n", 18 executing program [pid 349] <... close resumed>) = 0 [pid 350] <... write resumed>) = 18 [pid 349] write(1, "executing program\n", 18 executing program [pid 350] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 349] <... write resumed>) = 18 [pid 350] <... openat resumed>) = 3 [pid 349] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 350] ioctl(3, VT_ACTIVATE, 0x14 [pid 349] <... openat resumed>) = 3 [pid 350] <... ioctl resumed>) = 0 [pid 349] ioctl(3, VT_ACTIVATE, 0x14 [pid 350] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 349] <... ioctl resumed>) = 0 [pid 350] <... ioctl resumed>) = 0 [pid 349] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 350] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 349] <... ioctl resumed>) = 0 [pid 348] <... exit_group resumed>) = ? [pid 346] <... write resumed>) = 24 [pid 350] <... openat resumed>) = 4 [pid 349] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 350] ioctl(4, UI_SET_EVBIT, 0x1 [pid 349] <... openat resumed>) = 4 [pid 350] <... ioctl resumed>) = 0 [pid 349] ioctl(4, UI_SET_EVBIT, 0x1 [pid 350] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 349] <... ioctl resumed>) = 0 [pid 350] <... ioctl resumed>) = 0 [pid 349] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 350] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 349] <... ioctl resumed>) = 0 [pid 350] <... ioctl resumed>) = 0 [pid 346] exit_group(0 [pid 349] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 345] <... ioctl resumed>) = 0 [pid 350] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 349] <... ioctl resumed>) = 0 [pid 346] <... exit_group resumed>) = ? [pid 345] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 349] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 345] <... write resumed>) = 24 [pid 345] exit_group(0) = ? [pid 350] <... ioctl resumed>) = ? [pid 350] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=350, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 348] +++ exited with 0 +++ [pid 346] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 349] <... ioctl resumed>) = 0 [pid 345] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 349] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 349] exit_group(0) = ? [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 351 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 352 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 353 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 354 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 352 attached ci2-android-6-1/strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x55555a62f6a0, 24 [pid 352] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 354] <... set_robust_list resumed>) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [] [pid 354] rt_sigprocmask(SIG_SETMASK, [] [pid 352] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 354] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 352] <... prctl resumed>) = 0 [pid 352] setpgid(0, 0 [pid 354] <... prctl resumed>) = 0 [pid 352] <... setpgid resumed>) = 0 [pid 354] setpgid(0, 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 354] <... setpgid resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 353 attached ci2-android-6-1/strace-static-x86_64: Process 351 attached [pid 352] <... openat resumed>) = 3 [pid 353] set_robust_list(0x55555a62f6a0, 24 [pid 351] set_robust_list(0x55555a62f6a0, 24 [pid 353] <... set_robust_list resumed>) = 0 [pid 352] write(3, "1000", 4 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3 [pid 349] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=349, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 354] <... close resumed>) = 0 [pid 354] write(1, "executing program\n", 18) = 18 executing program [pid 354] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 354] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [] [pid 351] <... set_robust_list resumed>) = 0 [pid 352] <... write resumed>) = 4 [pid 354] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 353] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] close(3 [pid 351] rt_sigprocmask(SIG_SETMASK, [] [pid 354] <... ioctl resumed>) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 351] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 353] <... prctl resumed>) = 0 [pid 352] <... close resumed>) = 0 [pid 353] setpgid(0, 0 [pid 352] write(1, "executing program\n", 18 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 354] <... openat resumed>) = 4 [pid 353] <... setpgid resumed>) = 0 [pid 352] <... write resumed>) = 18 [pid 351] <... prctl resumed>) = 0 [pid 351] setpgid(0, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 354] ioctl(4, UI_SET_EVBIT, 0x1 [pid 353] <... openat resumed>) = 3 [pid 352] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 351] <... setpgid resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 355 attached [pid 353] write(3, "1000", 4 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 355 [pid 353] <... write resumed>) = 4 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 353] close(3 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 353] <... close resumed>) = 0 [pid 355] set_robust_list(0x55555a62f6a0, 24 [pid 353] write(1, "executing program\n", 18 [pid 355] <... set_robust_list resumed>) = 0 [pid 354] <... ioctl resumed>) = 0 [pid 353] <... write resumed>) = 18 executing program [pid 353] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 352] <... openat resumed>) = 3 [pid 353] <... openat resumed>) = 3 [pid 353] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 353] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 354] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 355] rt_sigprocmask(SIG_SETMASK, [] [pid 352] ioctl(3, VT_ACTIVATE, 0x14 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 353] <... ioctl resumed>) = 0 [pid 353] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 351] <... openat resumed>) = 3 [pid 353] <... openat resumed>) = 4 [pid 353] ioctl(4, UI_SET_EVBIT, 0x1 [pid 355] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] <... ioctl resumed>) = 0 [pid 353] <... ioctl resumed>) = 0 [pid 352] <... ioctl resumed>) = 0 [pid 351] write(3, "1000", 4 [pid 353] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 353] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 353] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 354] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 352] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 354] <... ioctl resumed>) = 0 [pid 352] <... ioctl resumed>) = 0 [pid 351] <... write resumed>) = 4 [pid 355] <... prctl resumed>) = 0 [ 25.043043][ T345] input: syz0 as /devices/virtual/input/input22 [ 25.056605][ T350] input: syz0 as /devices/virtual/input/input25 [ 25.057904][ T349] input: syz0 as /devices/virtual/input/input26 [ 25.070146][ T60] tty tty20: SAK: killed process 350 (syz-executor133): by fd#3 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] write(1, "executing program\n", 18) = 18 executing program [pid 355] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 354] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 355] <... openat resumed>) = 3 [pid 355] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 355] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 355] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 351] close(3 [pid 352] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 351] <... close resumed>) = 0 [pid 355] <... openat resumed>) = 4 [pid 351] write(1, "executing program\n", 18 [pid 352] <... openat resumed>) = 4 [pid 351] <... write resumed>) = 18 [pid 352] ioctl(4, UI_SET_EVBIT, 0x1 [pid 351] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 352] <... ioctl resumed>) = 0 [pid 355] ioctl(4, UI_SET_EVBIT, 0x1 [pid 351] <... openat resumed>) = 3 [pid 352] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 351] ioctl(3, VT_ACTIVATE, 0x14 [pid 352] <... ioctl resumed>) = 0 [pid 351] <... ioctl resumed>) = 0 [pid 352] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 355] <... ioctl resumed>) = 0 [pid 351] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 352] <... ioctl resumed>) = 0 [pid 355] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 352] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 351] <... ioctl resumed>) = 0 [pid 355] <... ioctl resumed>) = 0 executing program [pid 351] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 355] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 351] <... openat resumed>) = 4 [pid 351] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 351] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 351] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 355] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 351] <... ioctl resumed>) = 0 [pid 351] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 353] <... ioctl resumed>) = 0 [pid 353] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 353] exit_group(0) = ? [pid 354] <... ioctl resumed>) = 0 [pid 354] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 354] exit_group(0) = ? [pid 352] <... ioctl resumed>) = 0 [pid 352] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 351] <... ioctl resumed>) = 0 [pid 353] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 352] <... write resumed>) = 24 [pid 352] exit_group(0) = ? [pid 355] <... ioctl resumed>) = 0 [pid 355] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 355] exit_group(0 [pid 351] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 355] <... exit_group resumed>) = ? [pid 351] <... write resumed>) = 24 [pid 351] exit_group(0) = ? [pid 307] <... restart_syscall resumed>) = 0 [pid 354] +++ exited with 0 +++ [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 356 ci2-android-6-1/strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x55555a62f6a0, 24 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 351] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 356] write(1, "executing program\n", 18) = 18 executing program [pid 356] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 356] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 356] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 356] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 356] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 356] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 356] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 356] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 25.098726][ T353] input: syz0 as /devices/virtual/input/input28 [ 25.107557][ T354] input: syz0 as /devices/virtual/input/input27 [ 25.107726][ T352] input: syz0 as /devices/virtual/input/input29 [ 25.120728][ T351] input: syz0 as /devices/virtual/input/input31 [ 25.127264][ T355] input: syz0 as /devices/virtual/input/input30 [ 25.134400][ T60] tty tty20: SAK: killed process 354 (syz-executor133): by fd#3 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-1/strace-static-x86_64: Process 357 attached , [], 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 357 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 358 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 359 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 357] write(3, "1000", 4) = 4 [pid 357] close(3) = 0 [pid 357] write(1, "executing program\n", 18 [pid 355] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=355, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 357] <... write resumed>) = 18 executing program [pid 357] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 357] ioctl(3, VT_ACTIVATE, 0x14ci2-android-6-1/strace-static-x86_64: Process 358 attached ) = 0 [pid 358] set_robust_list(0x55555a62f6a0, 24 [pid 357] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 357] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 358] <... set_robust_list resumed>) = 0 [pid 357] <... openat resumed>) = 4 [pid 357] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 357] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 357] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 357] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 358] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 359 attached [pid 356] <... ioctl resumed>) = 0 [pid 359] set_robust_list(0x55555a62f6a0, 24 [pid 358] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 356] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 360 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] <... set_robust_list resumed>) = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 356] <... write resumed>) = 24 ci2-android-6-1/strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [] [pid 358] <... prctl resumed>) = 0 [pid 357] <... ioctl resumed>) = 0 [pid 356] exit_group(0 [pid 360] rt_sigprocmask(SIG_SETMASK, [] [pid 359] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 358] setpgid(0, 0 [pid 357] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 356] <... exit_group resumed>) = ? [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 358] <... setpgid resumed>) = 0 [pid 359] <... prctl resumed>) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 359] setpgid(0, 0 [pid 358] <... openat resumed>) = 3 [pid 359] <... setpgid resumed>) = 0 [pid 358] write(3, "1000", 4 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 358] <... write resumed>) = 4 [pid 359] <... openat resumed>) = 3 [pid 358] close(3 [pid 356] +++ exited with 0 +++ [pid 359] write(3, "1000", 4 [pid 358] <... close resumed>) = 0 [pid 359] <... write resumed>) = 4 executing program [pid 358] write(1, "executing program\n", 18 [pid 359] close(3 [pid 358] <... write resumed>) = 18 [pid 359] <... close resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 359] write(1, "executing program\n", 18 [pid 358] <... openat resumed>) = 3 executing program [pid 359] <... write resumed>) = 18 [pid 358] ioctl(3, VT_ACTIVATE, 0x14 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 359] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 358] <... ioctl resumed>) = 0 [pid 359] <... openat resumed>) = 3 [pid 358] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 359] ioctl(3, VT_ACTIVATE, 0x14 [pid 358] <... ioctl resumed>) = 0 [pid 359] <... ioctl resumed>) = 0 [pid 358] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 359] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 358] <... openat resumed>) = 4 [pid 359] <... ioctl resumed>) = 0 [pid 358] ioctl(4, UI_SET_EVBIT, 0x1 [pid 359] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 358] <... ioctl resumed>) = 0 [pid 359] <... openat resumed>) = 4 [pid 358] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 359] ioctl(4, UI_SET_EVBIT, 0x1 [pid 358] <... ioctl resumed>) = 0 [pid 359] <... ioctl resumed>) = 0 [pid 358] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 359] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 358] <... ioctl resumed>) = 0 [pid 359] <... ioctl resumed>) = 0 [pid 358] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 360] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 359] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 359] <... ioctl resumed>) = 0 [pid 357] <... write resumed>) = 24 [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 361 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] exit_group(0 [pid 360] <... prctl resumed>) = 0 [pid 357] <... exit_group resumed>) = ? [pid 359] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 executing program [pid 360] write(1, "executing program\n", 18) = 18 [pid 360] openat(AT_FDCWD, "/dev/char/4:24", O_RDWRci2-android-6-1/strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] <... ioctl resumed>) = ? [pid 358] <... ioctl resumed>) = 0 [pid 358] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 358] exit_group(0) = ? [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] write(1, "executing program\n", 18) = 18 executing program [pid 361] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 360] <... openat resumed>) = 3 [pid 361] <... openat resumed>) = 3 [pid 360] ioctl(3, VT_ACTIVATE, 0x14 [pid 359] +++ killed by SIGKILL +++ [pid 360] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=359, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 360] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 361] ioctl(3, VT_ACTIVATE, 0x14 [pid 360] <... ioctl resumed>) = 0 [pid 357] +++ exited with 0 +++ [pid 360] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 360] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 360] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=357, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 360] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 360] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 360] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 361] <... ioctl resumed>) = 0 [ 25.165088][ T356] input: syz0 as /devices/virtual/input/input32 [ 25.174387][ T357] input: syz0 as /devices/virtual/input/input33 [ 25.190206][ T358] input: syz0 as /devices/virtual/input/input34 [ 25.197084][ T359] input: syz0 as /devices/virtual/input/input35 [ 25.203639][ T60] tty tty20: SAK: killed process 359 (syz-executor133): by fd#3 [pid 361] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 361] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 361] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 361] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 361] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 361] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 360] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 362 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 363 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 360] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 360] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 ci2-android-6-1/strace-static-x86_64: Process 363 attached [pid 361] <... ioctl resumed>) = 0 [pid 360] +++ exited with 0 +++ [pid 358] +++ exited with 0 +++ [pid 362] close(3 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=358, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 362] <... close resumed>) = 0 [pid 363] set_robust_list(0x55555a62f6a0, 24 [pid 361] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 363] <... set_robust_list resumed>) = 0 [pid 362] write(1, "executing program\n", 18 [pid 361] <... write resumed>) = 24 [pid 362] <... write resumed>) = 18 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] executing program [pid 362] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 361] exit_group(0) = ? [pid 362] <... openat resumed>) = 3 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 362] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 364 [pid 362] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 362] <... ioctl resumed>) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 362] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 362] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 362] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 362] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] write(1, "executing program\n", 18) = 18 executing program [pid 363] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] write(1, "executing program\n", 18 [pid 361] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... restart_syscall resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 365 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 363] <... openat resumed>) = 3 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 363] ioctl(3, VT_ACTIVATE, 0x14 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 363] <... ioctl resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 365 attached [pid 364] <... write resumed>) = 18 [pid 362] <... ioctl resumed>) = 0 [pid 363] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 363] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 366 [pid 362] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 366 attached [pid 362] <... write resumed>) = 24 [pid 363] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 363] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 363] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 363] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 366] set_robust_list(0x55555a62f6a0, 24 [pid 365] set_robust_list(0x55555a62f6a0, 24 [pid 364] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 362] exit_group(0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] <... exit_group resumed>) = ? [ 25.215587][ T360] input: syz0 as /devices/virtual/input/input36 [ 25.220948][ T361] input: syz0 as /devices/virtual/input/input37 [ 25.242055][ T362] input: syz0 as /devices/virtual/input/input38 [pid 366] <... set_robust_list resumed>) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [] [pid 365] <... set_robust_list resumed>) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [] [pid 366] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 365] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 366] <... prctl resumed>) = 0 [pid 366] setpgid(0, 0) = 0 [pid 365] <... prctl resumed>) = 0 [pid 363] <... ioctl resumed>) = ? [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 366] <... openat resumed>) = 3 [pid 365] write(1, "executing program\n", 18) = 18 executing program [pid 365] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] write(1, "executing program\n", 18) = 18 executing program [pid 366] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 364] <... openat resumed>) = 3 [pid 364] ioctl(3, VT_ACTIVATE, 0x14 [pid 365] <... openat resumed>) = 3 [pid 364] <... ioctl resumed>) = 0 [pid 363] +++ killed by SIGKILL +++ [pid 366] <... openat resumed>) = 3 [pid 365] ioctl(3, VT_ACTIVATE, 0x14 [pid 364] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 362] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=363, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 364] <... ioctl resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 364] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 364] <... openat resumed>) = 4 [pid 364] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 364] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 364] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 364] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 366] ioctl(3, VT_ACTIVATE, 0x14 [pid 365] <... ioctl resumed>) = 0 [pid 365] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 365] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 365] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 365] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 365] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 365] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 364] <... ioctl resumed>) = 0 [pid 364] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 364] exit_group(0) = ? [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 366] <... ioctl resumed>) = 0 [pid 365] <... ioctl resumed>) = 0 [pid 366] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 365] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 366] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 366] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 365] <... write resumed>) = 24 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 366] <... openat resumed>) = 4 [pid 365] exit_group(0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 367 [pid 366] ioctl(4, UI_SET_EVBIT, 0x1 [pid 365] <... exit_group resumed>) = ? [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 368 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] <... ioctl resumed>) = 0 [pid 365] +++ exited with 0 +++ [pid 366] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 366] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [] [pid 366] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 366] <... ioctl resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 369 [pid 366] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] <... openat resumed>) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] write(1, "executing program\n", 18) = 18 executing program executing program executing program [pid 367] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 368] <... openat resumed>) = 3 [pid 369] <... openat resumed>) = 3 [pid 369] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 369] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 369] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 369] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 369] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 369] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 369] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 368] ioctl(3, VT_ACTIVATE, 0x14 [pid 367] <... openat resumed>) = 3 [pid 368] <... ioctl resumed>) = 0 [pid 367] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 367] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 367] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 367] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 367] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 367] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 367] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 368] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 368] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 368] ioctl(4, UI_SET_EVBIT, 0x1 [pid 366] <... ioctl resumed>) = 0 [pid 368] <... ioctl resumed>) = 0 [pid 368] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 368] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 368] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 366] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 366] exit_group(0) = ? [ 25.262271][ T363] input: syz0 as /devices/virtual/input/input39 [ 25.268826][ T39] tty tty20: SAK: killed process 363 (syz-executor133): by fd#3 [ 25.279772][ T364] input: syz0 as /devices/virtual/input/input40 [ 25.286656][ T365] input: syz0 as /devices/virtual/input/input41 [ 25.303263][ T366] input: syz0 as /devices/virtual/input/input42 [pid 364] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 370 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] write(1, "executing program\n", 18) = 18 executing program [pid 370] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 368] <... ioctl resumed>) = ? [pid 370] <... openat resumed>) = 3 [pid 370] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 369] <... ioctl resumed>) = 0 [pid 370] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 369] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 370] <... ioctl resumed>) = 0 [pid 369] <... write resumed>) = 24 [pid 370] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 369] exit_group(0 [pid 370] ioctl(4, UI_SET_EVBIT, 0x1 [pid 369] <... exit_group resumed>) = ? [pid 370] <... ioctl resumed>) = 0 [pid 368] +++ killed by SIGKILL +++ [pid 367] <... ioctl resumed>) = 0 [pid 366] +++ exited with 0 +++ [pid 370] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=368, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 370] <... ioctl resumed>) = 0 [pid 370] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 367] <... write resumed>) = 24 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 367] exit_group(0 [pid 370] <... ioctl resumed>) = 0 [pid 367] <... exit_group resumed>) = ? [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 370] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 369] +++ exited with 0 +++ [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 371 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 372 [pid 367] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=367, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] <... restart_syscall resumed>) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 executing program [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 executing program [pid 372] write(1, "executing program\n", 18) = 18 [pid 372] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 371] <... openat resumed>) = 3 [pid 371] ioctl(3, VT_ACTIVATE, 0x14 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 373 [pid 371] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 374 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 371] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 371] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 371] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 371] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 371] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 25.314102][ T369] input: syz0 as /devices/virtual/input/input43 [ 25.320570][ T368] input: syz0 as /devices/virtual/input/input45 [ 25.324138][ T367] input: syz0 as /devices/virtual/input/input44 [ 25.333832][ T323] tty tty20: SAK: killed process 368 (syz-executor133): by fd#3 [ 25.353933][ T370] input: syz0 as /devices/virtual/input/input46 [pid 371] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 374 attached ci2-android-6-1/strace-static-x86_64: Process 373 attached [pid 370] <... ioctl resumed>) = 0 [pid 370] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 370] exit_group(0) = ? [pid 374] set_robust_list(0x55555a62f6a0, 24 [pid 373] set_robust_list(0x55555a62f6a0, 24 [pid 371] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = ? [pid 374] <... set_robust_list resumed>) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] write(1, "executing program\n", 18) = 18 executing program [pid 374] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 373] <... set_robust_list resumed>) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] write(1, "executing program\n", 18) = 18 executing program [pid 373] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 371] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 372] +++ killed by SIGKILL +++ [pid 371] exit_group(0 [pid 374] <... openat resumed>) = 3 [pid 371] <... exit_group resumed>) = ? [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=372, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 373] <... openat resumed>) = 3 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] ioctl(3, VT_ACTIVATE, 0x14 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 375 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 375 attached [pid 374] ioctl(3, VT_ACTIVATE, 0x14 [pid 373] <... ioctl resumed>) = 0 [pid 370] +++ exited with 0 +++ [pid 375] set_robust_list(0x55555a62f6a0, 24 [pid 374] <... ioctl resumed>) = 0 [pid 373] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 375] <... set_robust_list resumed>) = 0 [pid 374] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 375] rt_sigprocmask(SIG_SETMASK, [] [pid 374] <... ioctl resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 374] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 373] <... openat resumed>) = 4 [pid 371] +++ exited with 0 +++ [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... openat resumed>) = 4 [pid 373] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 373] <... ioctl resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 373] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 373] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 375] <... prctl resumed>) = 0 [pid 374] ioctl(4, UI_SET_EVBIT, 0x1 [pid 373] <... ioctl resumed>) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 374] <... ioctl resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] write(1, "executing program\n", 18) = 18 executing program [pid 375] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 374] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 374] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 374] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 373] <... ioctl resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 376 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 377 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 373] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 executing program [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] write(1, "executing program\n", 18) = 18 executing program [pid 376] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 374] <... ioctl resumed>) = 0 [pid 374] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 374] exit_group(0) = ? [pid 375] <... openat resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 377] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 377] ioctl(3, VT_ACTIVATE, 0x14 [pid 376] ioctl(3, VT_ACTIVATE, 0x14 [pid 377] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 377] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 376] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 377] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 376] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 377] ioctl(4, UI_SET_EVBIT, 0x1 [pid 376] ioctl(4, UI_SET_EVBIT, 0x1 [pid 377] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 377] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 376] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 377] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 377] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 376] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 377] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = 0 [pid 377] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [ 25.365760][ T371] input: syz0 as /devices/virtual/input/input47 [ 25.374510][ T39] tty tty20: SAK: killed process 372 (syz-executor133): by fd#3 [ 25.391423][ T373] input: syz0 as /devices/virtual/input/input48 [ 25.395973][ T374] input: syz0 as /devices/virtual/input/input49 [ 25.407718][ T19] tty tty20: SAK: killed process 375 (syz-executor133): by fd#3 [pid 376] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 378 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] write(1, "executing program\n", 18) = 18 executing program [pid 378] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 375] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=375, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 374] +++ exited with 0 +++ [pid 378] <... openat resumed>) = 3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 376] <... ioctl resumed>) = 0 [pid 378] ioctl(3, VT_ACTIVATE, 0x14 [pid 377] <... ioctl resumed>) = 0 [pid 376] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 376] exit_group(0) = ? [pid 378] <... ioctl resumed>) = 0 [pid 377] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 378] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 378] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 378] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] +++ exited with 0 +++ [pid 378] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 379 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 380 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 378] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 378] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 378] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program executing program ci2-android-6-1/strace-static-x86_64: Process 380 attached ci2-android-6-1/strace-static-x86_64: Process 379 attached [pid 377] exit_group(0) = ? [pid 379] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] write(1, "executing program\n", 18) = 18 [pid 379] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 380] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] write(1, "executing program\n", 18) = 18 [pid 380] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 379] <... openat resumed>) = 3 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 380] ioctl(3, VT_ACTIVATE, 0x14 [pid 379] ioctl(3, VT_ACTIVATE, 0x14ci2-android-6-1/strace-static-x86_64: Process 381 attached [pid 380] <... ioctl resumed>) = 0 [pid 379] <... ioctl resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 381 [pid 377] +++ exited with 0 +++ [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 379] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 381] set_robust_list(0x55555a62f6a0, 24 [pid 380] <... ioctl resumed>) = 0 [pid 379] <... ioctl resumed>) = 0 [pid 379] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 379] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 379] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 379] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 379] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 381] <... set_robust_list resumed>) = 0 [pid 380] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 378] <... ioctl resumed>) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3 [pid 307] <... restart_syscall resumed>) = 0 [pid 380] <... openat resumed>) = 4 [pid 378] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 380] ioctl(4, UI_SET_EVBIT, 0x1 [pid 378] <... write resumed>) = 24 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 380] <... ioctl resumed>) = 0 [pid 378] exit_group(0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 381] <... close resumed>) = 0 [pid 380] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 379] <... ioctl resumed>) = 0 [pid 378] <... exit_group resumed>) = ? [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 380] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 382 attached [pid 381] write(1, "executing program\n", 18 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 382 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 381] <... write resumed>) = 18 executing program [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 381] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 382] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR executing program [pid 379] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 379] exit_group(0) = ? [ 25.418242][ T376] input: syz0 as /devices/virtual/input/input50 [ 25.422325][ T377] input: syz0 as /devices/virtual/input/input51 [ 25.440406][ T378] input: syz0 as /devices/virtual/input/input52 [ 25.452050][ T379] input: syz0 as /devices/virtual/input/input53 [pid 381] <... openat resumed>) = 3 [pid 381] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 380] +++ killed by SIGKILL +++ [pid 378] +++ exited with 0 +++ [pid 381] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=380, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 381] <... ioctl resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 381] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 309] <... restart_syscall resumed>) = 0 [pid 381] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 381] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 381] <... ioctl resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 381] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-1/strace-static-x86_64: Process 383 attached [pid 382] <... openat resumed>) = 3 [pid 381] <... ioctl resumed>) = 0 [pid 379] +++ exited with 0 +++ [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 383] set_robust_list(0x55555a62f6a0, 24 [pid 382] ioctl(3, VT_ACTIVATE, 0x14 [pid 381] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 383 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 382] <... ioctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 382] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 382] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 384 [pid 382] ioctl(4, UI_SET_EVBIT, 0x1 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 382] <... ioctl resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 383] <... set_robust_list resumed>) = 0 [pid 382] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 383] rt_sigprocmask(SIG_SETMASK, [] [pid 382] <... ioctl resumed>) = 0 [pid 383] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] write(1, "executing program\n", 18) = 18 executing program [pid 383] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 384 attached [pid 381] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 384] set_robust_list(0x55555a62f6a0, 24 [pid 381] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 384] <... set_robust_list resumed>) = 0 [pid 381] <... write resumed>) = 24 [pid 384] rt_sigprocmask(SIG_SETMASK, [] [pid 381] exit_group(0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 384] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 381] <... exit_group resumed>) = ? [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 384] <... prctl resumed>) = 0 [pid 384] setpgid(0, 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 385 [pid 384] <... setpgid resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 384] <... openat resumed>) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 383] <... openat resumed>) = 3 [pid 384] close(3 [pid 381] +++ exited with 0 +++ [pid 383] ioctl(3, VT_ACTIVATE, 0x14 [pid 384] <... close resumed>) = 0 [pid 383] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=381, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 384] write(1, "executing program\n", 18 executing program [pid 383] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 384] <... write resumed>) = 18 [pid 383] <... ioctl resumed>) = 0 [pid 384] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 383] openat(AT_FDCWD, "/dev/uinput", O_RDWRci2-android-6-1/strace-static-x86_64: Process 385 attached [pid 384] ioctl(3, VT_ACTIVATE, 0x14 [pid 383] <... openat resumed>) = 4 [pid 385] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [] [pid 384] <... ioctl resumed>) = 0 [pid 383] ioctl(4, UI_SET_EVBIT, 0x1 [pid 382] <... ioctl resumed>) = 0 [pid 384] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 383] <... ioctl resumed>) = 0 [pid 384] <... ioctl resumed>) = 0 [pid 382] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 384] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 383] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 308] <... restart_syscall resumed>) = 0 [pid 384] <... openat resumed>) = 4 [pid 383] <... ioctl resumed>) = 0 [pid 382] <... write resumed>) = 24 [pid 384] ioctl(4, UI_SET_EVBIT, 0x1 [pid 383] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 382] exit_group(0 [pid 384] <... ioctl resumed>) = 0 [pid 383] <... ioctl resumed>) = 0 [pid 382] <... exit_group resumed>) = ? [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 385] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 384] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 383] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 385] <... prctl resumed>) = 0 [pid 385] setpgid(0, 0) = 0 [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 385] write(3, "1000", 4) = 4 [pid 385] close(3) = 0 [pid 385] write(1, "executing program\n", 18) = 18 executing program [pid 385] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 384] <... ioctl resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x55555a62f6a0, 24 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 386 [pid 386] <... set_robust_list resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 386] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 [pid 386] write(1, "executing program\n", 18) = 18 executing program [pid 386] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 385] <... openat resumed>) = 3 [pid 384] +++ killed by SIGKILL +++ [pid 386] <... openat resumed>) = 3 [pid 385] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=384, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 385] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 386] ioctl(3, VT_ACTIVATE, 0x14 [pid 385] <... ioctl resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 386] <... ioctl resumed>) = 0 [pid 385] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 383] <... ioctl resumed>) = 0 [pid 382] +++ exited with 0 +++ [pid 385] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 383] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 385] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 383] <... write resumed>) = 24 [pid 385] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 25.461809][ T39] tty tty20: SAK: killed process 380 (syz-executor133): by fd#3 [ 25.478993][ T381] input: syz0 as /devices/virtual/input/input55 [ 25.484182][ T382] input: syz0 as /devices/virtual/input/input56 [ 25.501386][ T19] tty tty20: SAK: killed process 384 (syz-executor133): by fd#3 [ 25.507057][ T383] input: syz0 as /devices/virtual/input/input57 [pid 383] exit_group(0 [pid 385] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 386] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 383] <... exit_group resumed>) = ? [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] <... restart_syscall resumed>) = 0 [pid 386] <... ioctl resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 386] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 307] <... restart_syscall resumed>) = 0 [pid 386] <... openat resumed>) = 4 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 386] ioctl(4, UI_SET_EVBIT, 0x1 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 386] <... ioctl resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 386] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 386] <... ioctl resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 387 [pid 386] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 386] <... ioctl resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 388 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 388 attached [pid 388] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] write(1, "executing program\n", 18) = 18 executing program [pid 388] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 387 attached ) = 3 [pid 385] <... ioctl resumed>) = 0 [pid 388] ioctl(3, VT_ACTIVATE, 0x14 [pid 387] set_robust_list(0x55555a62f6a0, 24 [pid 385] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 387] <... set_robust_list resumed>) = 0 [pid 383] +++ exited with 0 +++ [pid 387] rt_sigprocmask(SIG_SETMASK, [] [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=383, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 387] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 388] <... ioctl resumed>) = 0 [pid 388] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 388] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 388] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 385] <... write resumed>) = 24 [pid 388] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 388] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 387] <... prctl resumed>) = 0 [pid 385] exit_group(0 [pid 388] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 386] <... ioctl resumed>) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 387] write(3, "1000", 4) = 4 [pid 387] close(3) = 0 [pid 387] write(1, "executing program\n", 18) = 18 [pid 387] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 387] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 387] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 387] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 387] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 387] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 387] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 executing program [pid 387] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 385] <... exit_group resumed>) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 386] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 387] <... ioctl resumed>) = ? [pid 386] exit_group(0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 389 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] <... exit_group resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 387] +++ killed by SIGKILL +++ [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] write(1, "executing program\n", 18 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=387, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 389] <... write resumed>) = 18 [pid 389] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR executing program [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 389] <... openat resumed>) = 3 [pid 388] <... ioctl resumed>) = 0 [pid 385] +++ exited with 0 +++ [pid 388] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 389] ioctl(3, VT_ACTIVATE, 0x14 [pid 388] <... write resumed>) = 24 [pid 389] <... ioctl resumed>) = 0 [pid 388] exit_group(0 [pid 389] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 388] <... exit_group resumed>) = ? [pid 389] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 386] +++ exited with 0 +++ [pid 389] ioctl(4, UI_SET_EVBIT, 0x1 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 389] <... ioctl resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 389] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 389] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 25.520396][ T385] input: syz0 as /devices/virtual/input/input59 [ 25.526993][ T386] input: syz0 as /devices/virtual/input/input60 [ 25.540818][ T387] input: syz0 as /devices/virtual/input/input62 [ 25.548235][ T19] tty tty20: SAK: killed process 387 (syz-executor133): by fd#3 [ 25.548731][ T388] input: syz0 as /devices/virtual/input/input61 [pid 389] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 388] +++ exited with 0 +++ [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-1/strace-static-x86_64: Process 390 attached [pid 389] <... ioctl resumed>) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 390] set_robust_list(0x55555a62f6a0, 24 [pid 389] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 390 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=388, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 390] <... set_robust_list resumed>) = 0 [pid 389] <... write resumed>) = 24 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 390] rt_sigprocmask(SIG_SETMASK, [] [pid 389] exit_group(0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 391 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 392 [pid 390] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 389] <... exit_group resumed>) = ? [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] +++ exited with 0 +++ [pid 390] write(3, "1000", 4 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 390] <... write resumed>) = 4 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 390] close(3) = 0 [pid 390] write(1, "executing program\n", 18) = 18 executing program [pid 390] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 390] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 390] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 390] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 390] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 390] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 390] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 390] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 392 attached ci2-android-6-1/strace-static-x86_64: Process 391 attached [pid 392] set_robust_list(0x55555a62f6a0, 24 [pid 391] set_robust_list(0x55555a62f6a0, 24 [pid 392] <... set_robust_list resumed>) = 0 [pid 391] <... set_robust_list resumed>) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [] [pid 391] rt_sigprocmask(SIG_SETMASK, [] [pid 392] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 391] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 392] <... prctl resumed>) = 0 [pid 391] <... prctl resumed>) = 0 [pid 392] setpgid(0, 0 [pid 391] setpgid(0, 0 [pid 392] <... setpgid resumed>) = 0 [pid 391] <... setpgid resumed>) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 392] <... openat resumed>) = 3 [pid 391] <... openat resumed>) = 3 [pid 392] write(3, "1000", 4 [pid 391] write(3, "1000", 4 [pid 392] <... write resumed>) = 4 [pid 391] <... write resumed>) = 4 [pid 392] close(3 [pid 391] close(3 [pid 392] <... close resumed>) = 0 [pid 391] <... close resumed>) = 0 [pid 392] write(1, "executing program\n", 18 [pid 391] write(1, "executing program\n", 18 [pid 392] <... write resumed>) = 18 [pid 391] <... write resumed>) = 18 [pid 392] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR executing program executing program [pid 391] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 392] <... openat resumed>) = 3 [pid 391] <... openat resumed>) = 3 [pid 309] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 392] ioctl(3, VT_ACTIVATE, 0x14 [pid 391] ioctl(3, VT_ACTIVATE, 0x14 [pid 392] <... ioctl resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 392] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 391] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 392] <... ioctl resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 392] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 391] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 392] <... openat resumed>) = 4 [pid 391] <... openat resumed>) = 4 [pid 392] ioctl(4, UI_SET_EVBIT, 0x1 [pid 391] ioctl(4, UI_SET_EVBIT, 0x1 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 392] <... ioctl resumed>) = 0 [pid 390] <... ioctl resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 392] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 390] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 392] <... ioctl resumed>) = 0 [pid 390] <... write resumed>) = 24 [pid 392] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 390] exit_group(0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 393 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 394 [pid 392] <... ioctl resumed>) = 0 [pid 390] <... exit_group resumed>) = ? [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 394 attached ci2-android-6-1/strace-static-x86_64: Process 393 attached [pid 391] <... ioctl resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 394] set_robust_list(0x55555a62f6a0, 24 [pid 393] set_robust_list(0x55555a62f6a0, 24 [pid 391] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 394] <... set_robust_list resumed>) = 0 [pid 393] <... set_robust_list resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [] [pid 393] rt_sigprocmask(SIG_SETMASK, [] [pid 391] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 394] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 391] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 394] <... prctl resumed>) = 0 [pid 393] <... prctl resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] write(1, "executing program\n", 18) = 18 executing program [pid 394] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 executing program [pid 393] write(1, "executing program\n", 18) = 18 [pid 394] <... openat resumed>) = 3 [pid 393] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 392] +++ killed by SIGKILL +++ [pid 394] ioctl(3, VT_ACTIVATE, 0x14 [pid 393] <... openat resumed>) = 3 [pid 390] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=392, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 394] <... ioctl resumed>) = 0 [pid 393] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=390, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 394] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 393] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 394] <... ioctl resumed>) = 0 [pid 393] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 394] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 393] <... ioctl resumed>) = 0 [pid 394] <... openat resumed>) = 4 [pid 393] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 394] ioctl(4, UI_SET_EVBIT, 0x1 [pid 393] <... openat resumed>) = 4 [pid 394] <... ioctl resumed>) = 0 [pid 393] ioctl(4, UI_SET_EVBIT, 0x1 [pid 394] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 393] <... ioctl resumed>) = 0 [pid 394] <... ioctl resumed>) = 0 [pid 393] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 394] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 393] <... ioctl resumed>) = 0 [pid 394] <... ioctl resumed>) = 0 [pid 393] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 394] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 393] <... ioctl resumed>) = 0 [ 25.567950][ T389] input: syz0 as /devices/virtual/input/input63 [ 25.585980][ T390] input: syz0 as /devices/virtual/input/input64 [ 25.598812][ T19] tty tty20: SAK: killed process 392 (syz-executor133): by fd#3 [ 25.601905][ T391] input: syz0 as /devices/virtual/input/input66 [pid 391] <... ioctl resumed>) = 0 [pid 393] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 391] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 391] exit_group(0) = ? [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 395 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 396 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] write(1, "executing program\n", 18) = 18 executing program [pid 395] openat(AT_FDCWD, "/dev/char/4:28", O_RDWRci2-android-6-1/strace-static-x86_64: Process 396 attached ) = 3 [pid 396] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 395] ioctl(3, VT_ACTIVATE, 0x14 [pid 396] rt_sigprocmask(SIG_SETMASK, [] [pid 395] <... ioctl resumed>) = 0 [pid 396] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 394] <... ioctl resumed>) = 0 [pid 396] <... prctl resumed>) = 0 [pid 394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 394] exit_group(0 [pid 393] <... ioctl resumed>) = 0 [pid 393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 393] exit_group(0 [pid 396] setpgid(0, 0 [pid 393] <... exit_group resumed>) = ? [pid 396] <... setpgid resumed>) = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 394] <... exit_group resumed>) = ? [pid 394] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=394, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 395] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 391] +++ exited with 0 +++ [pid 395] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=391, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 396] <... openat resumed>) = 3 [pid 395] <... openat resumed>) = 4 [pid 393] +++ exited with 0 +++ [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=393, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 395] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 395] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 395] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 395] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 [pid 396] write(1, "executing program\n", 18) = 18 executing program [pid 396] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 396] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 396] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 396] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 396] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 396] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 396] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 396] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 395] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 398 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 399 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 397 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 395] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 395] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 397 attached ci2-android-6-1/strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x55555a62f6a0, 24 [pid 397] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 399] <... set_robust_list resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 398 attached [pid 399] rt_sigprocmask(SIG_SETMASK, [] [pid 397] rt_sigprocmask(SIG_SETMASK, [] [pid 399] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 397] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 399] <... prctl resumed>) = 0 [pid 397] <... prctl resumed>) = 0 [pid 399] setpgid(0, 0 [pid 397] setpgid(0, 0 [pid 399] <... setpgid resumed>) = 0 [pid 397] <... setpgid resumed>) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 399] <... openat resumed>) = 3 [pid 397] <... openat resumed>) = 3 [pid 399] write(3, "1000", 4 [pid 397] write(3, "1000", 4 [pid 399] <... write resumed>) = 4 [pid 397] <... write resumed>) = 4 [pid 399] close(3 [pid 397] close(3 [pid 399] <... close resumed>) = 0 [pid 397] <... close resumed>) = 0 [pid 399] write(1, "executing program\n", 18 executing program executing program [pid 397] write(1, "executing program\n", 18 [pid 399] <... write resumed>) = 18 [pid 397] <... write resumed>) = 18 [pid 399] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 397] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 398] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setpgid(0, 0) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 398] write(3, "1000", 4) = 4 [pid 398] close(3) = 0 [pid 398] write(1, "executing program\n", 18) = 18 executing program [pid 398] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 396] <... ioctl resumed>) = ? [pid 397] <... openat resumed>) = 3 [pid 397] ioctl(3, VT_ACTIVATE, 0x14 [pid 399] <... openat resumed>) = 3 [pid 397] <... ioctl resumed>) = 0 [pid 399] ioctl(3, VT_ACTIVATE, 0x14 [pid 397] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 399] <... ioctl resumed>) = 0 [pid 397] <... ioctl resumed>) = 0 [pid 399] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 397] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 399] <... ioctl resumed>) = 0 [pid 397] <... openat resumed>) = 4 [pid 399] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 397] ioctl(4, UI_SET_EVBIT, 0x1 [pid 399] <... openat resumed>) = 4 [pid 399] ioctl(4, UI_SET_EVBIT, 0x1 [pid 397] <... ioctl resumed>) = 0 [pid 399] <... ioctl resumed>) = 0 [pid 397] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 399] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 397] <... ioctl resumed>) = 0 [pid 399] <... ioctl resumed>) = 0 [pid 397] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 399] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 397] <... ioctl resumed>) = 0 [ 25.616946][ T394] input: syz0 as /devices/virtual/input/input67 [ 25.623548][ T393] input: syz0 as /devices/virtual/input/input68 [ 25.645246][ T395] input: syz0 as /devices/virtual/input/input69 [ 25.646587][ T396] input: syz0 as /devices/virtual/input/input70 [ 25.661568][ T323] tty tty20: SAK: killed process 396 (syz-executor133): by fd#3 [pid 399] <... ioctl resumed>) = 0 [pid 397] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 399] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 397] <... ioctl resumed>) = 0 [pid 397] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 397] exit_group(0) = ? [pid 395] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 398] <... openat resumed>) = 3 [pid 396] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=396, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 398] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 397] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=397, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 399] <... ioctl resumed>) = 0 [pid 399] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 399] exit_group(0) = ? [pid 398] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 398] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 398] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 398] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 399] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 398] <... ioctl resumed>) = 0 [pid 398] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 398] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 402 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 400 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 401 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 403 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 402 attached ci2-android-6-1/strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x55555a62f6a0, 24 [pid 402] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 403] <... set_robust_list resumed>) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [] [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 403] <... prctl resumed>) = 0 [pid 402] <... prctl resumed>) = 0 [pid 402] setpgid(0, 0 [pid 403] setpgid(0, 0 [pid 402] <... setpgid resumed>) = 0 [pid 403] <... setpgid resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 401 attached ci2-android-6-1/strace-static-x86_64: Process 400 attached [pid 401] set_robust_list(0x55555a62f6a0, 24 [pid 400] set_robust_list(0x55555a62f6a0, 24 [pid 401] <... set_robust_list resumed>) = 0 [pid 400] <... set_robust_list resumed>) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [] [pid 400] rt_sigprocmask(SIG_SETMASK, [] [pid 401] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 400] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 401] <... prctl resumed>) = 0 [pid 400] <... prctl resumed>) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 400] setpgid(0, 0 [pid 401] setpgid(0, 0) = 0 [pid 400] <... setpgid resumed>) = 0 [pid 398] <... ioctl resumed>) = 0 [pid 402] <... openat resumed>) = 3 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 401] <... openat resumed>) = 3 [pid 402] write(3, "1000", 4 [pid 401] write(3, "1000", 4 [pid 400] <... openat resumed>) = 3 [pid 398] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 403] <... openat resumed>) = 3 [pid 401] <... write resumed>) = 4 [pid 400] write(3, "1000", 4 [pid 403] write(3, "1000", 4 [pid 402] <... write resumed>) = 4 [pid 401] close(3 [pid 398] <... write resumed>) = 24 [pid 400] <... write resumed>) = 4 [pid 400] close(3) = 0 [pid 400] write(1, "executing program\n", 18) = 18 executing program [pid 400] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 400] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 400] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 401] <... close resumed>) = 0 [pid 398] exit_group(0 executing program [pid 401] write(1, "executing program\n", 18 [pid 402] close(3 [pid 401] <... write resumed>) = 18 [pid 398] <... exit_group resumed>) = ? [pid 401] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 402] <... close resumed>) = 0 [pid 401] <... openat resumed>) = 3 [pid 402] write(1, "executing program\n", 18 [pid 401] ioctl(3, VT_ACTIVATE, 0x14 [pid 402] <... write resumed>) = 18 [pid 401] <... ioctl resumed>) = 0 executing program [pid 400] <... ioctl resumed>) = 0 [pid 402] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 401] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 402] <... openat resumed>) = 3 [pid 401] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 402] ioctl(3, VT_ACTIVATE, 0x14 [pid 401] <... openat resumed>) = 4 [pid 401] ioctl(4, UI_SET_EVBIT, 0x1 [pid 400] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 401] <... ioctl resumed>) = 0 [pid 402] <... ioctl resumed>) = 0 [pid 401] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 402] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 401] <... ioctl resumed>) = 0 [pid 401] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 400] ioctl(4, UI_SET_EVBIT, 0x1 [pid 402] <... ioctl resumed>) = 0 [pid 401] <... ioctl resumed>) = 0 [pid 402] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 401] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 400] <... ioctl resumed>) = 0 [pid 400] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 400] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 400] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 403] <... write resumed>) = 4 [pid 403] close(3) = 0 [pid 403] write(1, "executing program\n", 18) = 18 executing program [pid 403] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 403] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 403] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 403] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 403] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 403] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 403] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 25.674879][ T397] input: syz0 as /devices/virtual/input/input71 [ 25.679404][ T399] input: syz0 as /devices/virtual/input/input72 [ 25.693826][ T398] input: syz0 as /devices/virtual/input/input73 [ 25.714384][ T401] input: syz0 as /devices/virtual/input/input74 [pid 403] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 402] <... openat resumed>) = 4 [pid 402] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 402] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 402] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 402] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 401] <... ioctl resumed>) = 0 [pid 401] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 398] +++ exited with 0 +++ [pid 401] <... write resumed>) = 24 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 401] exit_group(0) = ? [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 404 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] <... ioctl resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 executing program [pid 404] write(1, "executing program\n", 18) = 18 [pid 404] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 403] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=403, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 401] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 404] ioctl(3, VT_ACTIVATE, 0x14 [pid 400] <... ioctl resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 400] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 400] exit_group(0) = ? [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 406 attached [pid 404] <... ioctl resumed>) = 0 [pid 402] <... ioctl resumed>) = 0 [pid 400] +++ exited with 0 +++ [pid 402] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 402] exit_group(0) = ? [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 406 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 405 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 404] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 404] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 404] ioctl(4, UI_SET_EVBIT, 0x1ci2-android-6-1/strace-static-x86_64: Process 405 attached [pid 402] +++ exited with 0 +++ [pid 404] <... ioctl resumed>) = 0 [pid 404] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 406] set_robust_list(0x55555a62f6a0, 24 [pid 405] set_robust_list(0x55555a62f6a0, 24 [pid 404] <... ioctl resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 404] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 404] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 406] <... set_robust_list resumed>) = 0 [pid 405] <... set_robust_list resumed>) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [] [pid 405] rt_sigprocmask(SIG_SETMASK, [] [pid 406] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 405] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 406] <... prctl resumed>) = 0 [pid 405] <... prctl resumed>) = 0 [pid 406] setpgid(0, 0 [pid 405] setpgid(0, 0 [pid 406] <... setpgid resumed>) = 0 [pid 405] <... setpgid resumed>) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] <... openat resumed>) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 406] close(3 [pid 405] write(3, "1000", 4 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 407 [pid 406] <... close resumed>) = 0 [pid 405] <... write resumed>) = 4 [pid 405] close(3 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 408 ci2-android-6-1/strace-static-x86_64: Process 408 attached ci2-android-6-1/strace-static-x86_64: Process 407 attached [pid 406] write(1, "executing program\n", 18 [pid 405] <... close resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 408] set_robust_list(0x55555a62f6a0, 24 [pid 407] set_robust_list(0x55555a62f6a0, 24 [pid 406] <... write resumed>) = 18 [pid 404] <... ioctl resumed>) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 404] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 404] exit_group(0) = ? [pid 407] <... set_robust_list resumed>) = 0 [pid 408] <... set_robust_list resumed>) = 0 [pid 405] write(1, "executing program\n", 18) = 18 executing program [pid 408] rt_sigprocmask(SIG_SETMASK, [] [pid 405] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 406] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 405] <... openat resumed>) = 3 [pid 404] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] write(1, "executing program\n", 18) = 18 executing program [pid 407] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 407] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 407] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 407] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 408] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 407] <... openat resumed>) = 4 [pid 406] <... openat resumed>) = 3 [pid 405] ioctl(3, VT_ACTIVATE, 0x14 [pid 407] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 407] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 407] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 25.714420][ T400] input: syz0 as /devices/virtual/input/input75 [ 25.725216][ T403] input: syz0 as /devices/virtual/input/input76 [ 25.731706][ T402] input: syz0 as /devices/virtual/input/input77 [ 25.740653][ T323] tty tty20: SAK: killed process 403 (syz-executor133): by fd#3 [ 25.758967][ T404] input: syz0 as /devices/virtual/input/input78 [pid 407] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 406] ioctl(3, VT_ACTIVATE, 0x14 [pid 405] <... ioctl resumed>) = 0 [pid 408] <... prctl resumed>) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 405] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 408] <... openat resumed>) = 3 [pid 405] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 405] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 405] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 408] write(3, "1000", 4 [pid 405] <... ioctl resumed>) = 0 [pid 408] <... write resumed>) = 4 [pid 405] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 408] close(3 [pid 405] <... ioctl resumed>) = 0 [pid 408] <... close resumed>) = 0 [pid 405] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 408] write(1, "executing program\n", 18) = 18 executing program [pid 408] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 409 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 409] setpgid(0, 0) = 0 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 409] write(3, "1000", 4) = 4 [pid 409] close(3) = 0 [pid 409] write(1, "executing program\n", 18) = 18 [pid 409] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 407] <... ioctl resumed>) = 0 executing program [pid 408] <... openat resumed>) = 3 [pid 406] <... ioctl resumed>) = 0 [pid 407] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 407] exit_group(0) = ? [pid 409] <... openat resumed>) = 3 [pid 408] ioctl(3, VT_ACTIVATE, 0x14 [pid 406] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 409] ioctl(3, VT_ACTIVATE, 0x14 [pid 406] <... ioctl resumed>) = 0 [pid 406] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 406] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 406] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 406] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 406] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 405] <... ioctl resumed>) = ? [pid 409] <... ioctl resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 409] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 408] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 409] <... ioctl resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 409] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 408] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 409] <... openat resumed>) = 4 [pid 408] <... openat resumed>) = 4 [pid 409] ioctl(4, UI_SET_EVBIT, 0x1 [pid 408] ioctl(4, UI_SET_EVBIT, 0x1 [pid 409] <... ioctl resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 409] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 408] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 409] <... ioctl resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 409] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 408] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 409] <... ioctl resumed>) = 0 [pid 408] <... ioctl resumed>) = 0 [pid 409] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 408] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 409] <... ioctl resumed>) = 0 [pid 409] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 409] exit_group(0) = ? [pid 408] <... ioctl resumed>) = 0 [pid 408] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 408] exit_group(0) = ? [ 25.774403][ T407] input: syz0 as /devices/virtual/input/input79 [ 25.779014][ T405] input: syz0 as /devices/virtual/input/input80 [ 25.789074][ T323] tty tty20: SAK: killed process 405 (syz-executor133): by fd#3 [ 25.791622][ T406] input: syz0 as /devices/virtual/input/input81 [ 25.805223][ T409] input: syz0 as /devices/virtual/input/input82 [pid 407] +++ exited with 0 +++ [pid 409] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=409, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 406] <... ioctl resumed>) = 0 [pid 406] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 406] exit_group(0) = ? [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 411 [pid 408] +++ exited with 0 +++ [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 410 ci2-android-6-1/strace-static-x86_64: Process 411 attached [pid 410] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 411] set_robust_list(0x55555a62f6a0, 24 [pid 410] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 411] <... set_robust_list resumed>) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 411] setpgid(0, 0) = 0 [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 411] write(3, "1000", 4 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 411] <... write resumed>) = 4 [pid 411] close(3) = 0 [pid 411] write(1, "executing program\n", 18) = 18 executing program [pid 411] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 411] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 410] <... prctl resumed>) = 0 [pid 410] setpgid(0, 0 [pid 405] +++ killed by SIGKILL +++ [pid 410] <... setpgid resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=405, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 411] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 411] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 411] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 411] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 410] <... openat resumed>) = 3 [pid 411] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 411] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 410] write(3, "1000", 4 [pid 406] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=406, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 412 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] write(1, "executing program\n", 18) = 18 executing program [pid 412] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 410] <... write resumed>) = 4 [pid 410] close(3) = 0 [pid 410] write(1, "executing program\n", 18) = 18 executing program [pid 410] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 412] <... openat resumed>) = 3 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 410] <... openat resumed>) = 3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 413 [pid 410] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 414 [pid 410] <... ioctl resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 414 attached ci2-android-6-1/strace-static-x86_64: Process 413 attached [pid 412] ioctl(3, VT_ACTIVATE, 0x14 [pid 411] <... ioctl resumed>) = 0 [pid 410] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 411] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 411] exit_group(0) = ? [pid 410] <... ioctl resumed>) = 0 [pid 410] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 411] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=411, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 410] <... openat resumed>) = 4 [pid 410] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 410] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 410] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 410] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 414] set_robust_list(0x55555a62f6a0, 24 [pid 413] set_robust_list(0x55555a62f6a0, 24 [pid 414] <... set_robust_list resumed>) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4 [pid 310] <... restart_syscall resumed>) = 0 [pid 414] <... write resumed>) = 4 [pid 414] close(3 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 414] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 414] write(1, "executing program\n", 18 [pid 413] <... set_robust_list resumed>) = 0 [pid 412] <... ioctl resumed>) = 0 executing program ci2-android-6-1/strace-static-x86_64: Process 415 attached [pid 413] rt_sigprocmask(SIG_SETMASK, [] [pid 412] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 415 [pid 415] set_robust_list(0x55555a62f6a0, 24 [pid 413] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 415] <... set_robust_list resumed>) = 0 [pid 412] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 412] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 415] rt_sigprocmask(SIG_SETMASK, [] [pid 413] <... prctl resumed>) = 0 [pid 415] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 412] <... openat resumed>) = 4 [pid 410] <... ioctl resumed>) = 0 [pid 415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 414] <... write resumed>) = 18 [pid 413] setpgid(0, 0 [pid 412] ioctl(4, UI_SET_EVBIT, 0x1 [pid 410] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 414] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 414] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 414] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 412] <... ioctl resumed>) = 0 [pid 414] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 412] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 412] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 414] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 412] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 415] <... prctl resumed>) = 0 [pid 414] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 413] <... setpgid resumed>) = 0 [pid 410] <... write resumed>) = 24 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 415] setpgid(0, 0) = 0 [pid 415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 410] exit_group(0 [pid 414] <... ioctl resumed>) = 0 [pid 414] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 414] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 415] <... openat resumed>) = 3 [pid 410] <... exit_group resumed>) = ? [pid 413] <... openat resumed>) = 3 [pid 415] write(3, "1000", 4) = 4 [pid 415] close(3) = 0 [pid 413] write(3, "1000", 4) = 4 [pid 415] write(1, "executing program\n", 18 [pid 413] close(3 [pid 415] <... write resumed>) = 18 [pid 413] <... close resumed>) = 0 [pid 415] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR executing program [pid 413] write(1, "executing program\n", 18) = 18 executing program [pid 413] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 412] <... ioctl resumed>) = 0 [pid 412] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 412] exit_group(0 [pid 415] <... openat resumed>) = 3 [pid 413] <... openat resumed>) = 3 [pid 415] ioctl(3, VT_ACTIVATE, 0x14 [pid 413] ioctl(3, VT_ACTIVATE, 0x14 [pid 415] <... ioctl resumed>) = 0 [pid 413] <... ioctl resumed>) = 0 [ 25.805868][ T408] input: syz0 as /devices/virtual/input/input83 [ 25.840750][ T411] input: syz0 as /devices/virtual/input/input84 [ 25.853211][ T410] input: syz0 as /devices/virtual/input/input85 [ 25.863170][ T412] input: syz0 as /devices/virtual/input/input86 [ 25.869682][ T414] input: syz0 as /devices/virtual/input/input87 [pid 415] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 413] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 412] <... exit_group resumed>) = ? [pid 414] <... ioctl resumed>) = ? [pid 415] <... ioctl resumed>) = 0 [pid 415] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 415] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 415] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 415] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 415] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 413] <... ioctl resumed>) = 0 [pid 413] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 413] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 413] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 413] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 413] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 413] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 413] exit_group(0) = ? [pid 410] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 412] +++ exited with 0 +++ [pid 414] +++ killed by SIGKILL +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=414, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 415] <... ioctl resumed>) = 0 [pid 415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 415] exit_group(0) = ? [pid 413] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=413, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 417 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 416 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 418 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 416] setpgid(0, 0) = 0 [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 416] write(3, "1000", 4) = 4 [pid 416] close(3) = 0 [pid 416] write(1, "executing program\n", 18) = 18 executing program [pid 416] openat(AT_FDCWD, "/dev/char/4:24", O_RDWRci2-android-6-1/strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 [pid 417] write(1, "executing program\n", 18) = 18 executing program [pid 417] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x55555a62f6a0, 24 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 419 ci2-android-6-1/strace-static-x86_64: Process 419 attached [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 419] set_robust_list(0x55555a62f6a0, 24 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 419] <... set_robust_list resumed>) = 0 [pid 419] rt_sigprocmask(SIG_SETMASK, [] [pid 418] <... set_robust_list resumed>) = 0 [pid 416] <... openat resumed>) = 3 [pid 419] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [] [pid 416] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 416] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 419] <... prctl resumed>) = 0 [pid 418] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 419] setpgid(0, 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 416] <... ioctl resumed>) = 0 [pid 419] <... setpgid resumed>) = 0 [pid 418] <... prctl resumed>) = 0 [pid 417] <... openat resumed>) = 3 [pid 416] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 416] <... openat resumed>) = 4 [pid 419] <... openat resumed>) = 3 [pid 416] ioctl(4, UI_SET_EVBIT, 0x1 [pid 418] setpgid(0, 0 [pid 417] ioctl(3, VT_ACTIVATE, 0x14 [pid 416] <... ioctl resumed>) = 0 [pid 418] <... setpgid resumed>) = 0 [pid 419] write(3, "1000", 4 [pid 417] <... ioctl resumed>) = 0 [pid 416] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 419] <... write resumed>) = 4 [pid 416] <... ioctl resumed>) = 0 [pid 417] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 419] close(3 [pid 416] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 418] <... openat resumed>) = 3 [pid 415] +++ exited with 0 +++ [pid 416] <... ioctl resumed>) = 0 [pid 419] <... close resumed>) = 0 [pid 417] <... ioctl resumed>) = 0 [pid 416] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 419] write(1, "executing program\n", 18 [pid 418] write(3, "1000", 4 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=415, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 25.877510][ T6] tty tty20: SAK: killed process 414 (syz-executor133): by fd#3 [ 25.884368][ T415] input: syz0 as /devices/virtual/input/input88 [ 25.886596][ T413] input: syz0 as /devices/virtual/input/input89 [ 25.906583][ T327] udevd[327]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 417] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 417] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 417] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 417] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 417] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 executing program [pid 419] <... write resumed>) = 18 [pid 418] <... write resumed>) = 4 [pid 419] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 418] close(3 [pid 419] <... openat resumed>) = 3 [pid 418] <... close resumed>) = 0 [pid 418] write(1, "executing program\n", 18 executing program [pid 419] ioctl(3, VT_ACTIVATE, 0x14 [pid 418] <... write resumed>) = 18 [pid 419] <... ioctl resumed>) = 0 [pid 418] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 419] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 418] <... openat resumed>) = 3 [pid 419] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 418] ioctl(3, VT_ACTIVATE, 0x14 [pid 419] <... openat resumed>) = 4 [pid 419] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 419] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 419] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 419] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 420 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] write(1, "executing program\n", 18) = 18 executing program [pid 420] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 417] <... ioctl resumed>) = 0 [pid 417] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 420] <... openat resumed>) = 3 [pid 418] <... ioctl resumed>) = 0 [pid 420] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 418] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 419] <... ioctl resumed>) = 0 [pid 418] <... ioctl resumed>) = 0 [pid 420] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 419] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 418] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 416] <... ioctl resumed>) = 0 [pid 420] <... ioctl resumed>) = 0 [pid 419] <... write resumed>) = 24 [pid 418] <... openat resumed>) = 4 [pid 417] exit_group(0 [pid 416] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 418] ioctl(4, UI_SET_EVBIT, 0x1 [pid 417] <... exit_group resumed>) = ? [pid 420] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 418] <... ioctl resumed>) = 0 [pid 416] <... write resumed>) = 24 [pid 418] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 418] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 418] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 420] <... openat resumed>) = 4 [pid 416] exit_group(0 [pid 420] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 420] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 420] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 420] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 416] <... exit_group resumed>) = ? [pid 417] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 419] +++ killed by SIGKILL +++ [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=419, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 418] <... ioctl resumed>) = 0 [pid 420] <... ioctl resumed>) = 0 [pid 420] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 418] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 420] <... write resumed>) = 24 [pid 418] <... write resumed>) = 24 [pid 420] exit_group(0 [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 422 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] exit_group(0) = ? [pid 420] <... exit_group resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 executing program [pid 422] write(1, "executing program\n", 18) = 18 [pid 422] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 422] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 422] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 416] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=416, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 422] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 423 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=418, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 423 attached [pid 423] set_robust_list(0x55555a62f6a0, 24 [pid 422] <... openat resumed>) = 4 [pid 423] <... set_robust_list resumed>) = 0 [pid 422] ioctl(4, UI_SET_EVBIT, 0x1 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 425 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 424 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 424 attached ci2-android-6-1/strace-static-x86_64: Process 425 attached [pid 425] set_robust_list(0x55555a62f6a0, 24 [pid 424] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 425] <... set_robust_list resumed>) = 0 [pid 420] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=420, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 425] rt_sigprocmask(SIG_SETMASK, [] [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [] [pid 422] <... ioctl resumed>) = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] <... prctl resumed>) = 0 [pid 423] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 422] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 422] <... ioctl resumed>) = 0 [pid 422] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 423] <... prctl resumed>) = 0 [pid 423] setpgid(0, 0 [pid 422] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 423] <... setpgid resumed>) = 0 [pid 425] <... prctl resumed>) = 0 [pid 424] setpgid(0, 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 425] setpgid(0, 0 [pid 424] <... setpgid resumed>) = 0 [ 25.922339][ T416] input: syz0 as /devices/virtual/input/input90 [ 25.930108][ T417] input: syz0 as /devices/virtual/input/input91 [ 25.932278][ T419] input: syz0 as /devices/virtual/input/input92 [ 25.947688][ T19] tty tty20: SAK: killed process 419 (syz-executor133): by fd#3 [ 25.952095][ T418] input: syz0 as /devices/virtual/input/input93 [ 25.960163][ T420] input: syz0 as /devices/virtual/input/input94 [pid 425] <... setpgid resumed>) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 423] <... openat resumed>) = 3 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 425] write(3, "1000", 4) = 4 [pid 425] close(3) = 0 [pid 425] write(1, "executing program\n", 18) = 18 [pid 425] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 424] <... openat resumed>) = 3 executing program [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 [pid 424] write(1, "executing program\n", 18) = 18 [pid 424] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 423] write(3, "1000", 4) = 4 executing program [pid 423] close(3) = 0 [pid 423] write(1, "executing program\n", 18) = 18 executing program [pid 423] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 425] <... openat resumed>) = 3 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 426 ci2-android-6-1/strace-static-x86_64: Process 426 attached [pid 425] ioctl(3, VT_ACTIVATE, 0x14 [pid 424] <... openat resumed>) = 3 [pid 422] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 426] set_robust_list(0x55555a62f6a0, 24 [pid 425] <... ioctl resumed>) = 0 [pid 424] ioctl(3, VT_ACTIVATE, 0x14 [pid 423] <... openat resumed>) = 3 [pid 422] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 422] <... write resumed>) = 24 [pid 422] exit_group(0 [pid 425] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 422] <... exit_group resumed>) = ? [pid 425] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 426] <... set_robust_list resumed>) = 0 [pid 425] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 425] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 425] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 425] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 426] setpgid(0, 0) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 426] write(3, "1000", 4) = 4 [pid 426] close(3) = 0 [pid 426] write(1, "executing program\n", 18) = 18 executing program [pid 426] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 424] <... ioctl resumed>) = 0 [pid 424] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 424] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 424] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 424] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 424] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 424] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 423] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=423, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 425] <... ioctl resumed>) = 0 [pid 424] <... ioctl resumed>) = 0 [pid 424] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... restart_syscall resumed>) = 0 [pid 424] <... write resumed>) = 24 [pid 424] exit_group(0) = ? [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 427 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 425] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 425] exit_group(0) = ? [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 427] setpgid(0, 0) = 0 [pid 427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 426] <... openat resumed>) = 3 [pid 427] <... openat resumed>) = 3 [pid 427] write(3, "1000", 4) = 4 [pid 427] close(3) = 0 executing program [pid 427] write(1, "executing program\n", 18) = 18 [pid 427] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 427] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 427] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 427] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 427] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 427] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 427] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 427] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 422] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ [pid 426] ioctl(3, VT_ACTIVATE, 0x14 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=422, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 425] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=424, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 426] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 426] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 309] <... restart_syscall resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] <... restart_syscall resumed>) = 0 [pid 426] <... ioctl resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 426] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 426] ioctl(4, UI_SET_EVBIT, 0x1 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 426] <... ioctl resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 426] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 426] <... ioctl resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 429 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 428 [pid 426] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 430 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 426] <... ioctl resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 426] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 430 attached ci2-android-6-1/strace-static-x86_64: Process 429 attached ci2-android-6-1/strace-static-x86_64: Process 428 attached [pid 427] <... ioctl resumed>) = 0 [pid 426] <... ioctl resumed>) = 0 [pid 426] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 426] exit_group(0) = ? [pid 427] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 428] set_robust_list(0x55555a62f6a0, 24 [pid 427] exit_group(0 [pid 428] <... set_robust_list resumed>) = 0 [pid 428] rt_sigprocmask(SIG_SETMASK, [] [pid 427] <... exit_group resumed>) = ? [ 25.990722][ T422] input: syz0 as /devices/virtual/input/input95 [ 26.001527][ T323] tty tty20: SAK: killed process 423 (syz-executor133): by fd#3 [ 26.003995][ T425] input: syz0 as /devices/virtual/input/input96 [ 26.017197][ T424] input: syz0 as /devices/virtual/input/input97 [ 26.033439][ T427] input: syz0 as /devices/virtual/input/input98 [pid 428] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 428] close(3) = 0 [pid 428] write(1, "executing program\n", 18) = 18 [pid 428] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR executing program [pid 429] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 429] setpgid(0, 0) = 0 [pid 429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 429] write(3, "1000", 4) = 4 [pid 429] close(3) = 0 [pid 429] write(1, "executing program\n", 18) = 18 [pid 429] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 430] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 430] write(3, "1000", 4) = 4 [pid 430] close(3) = 0 [pid 428] <... openat resumed>) = 3 [pid 428] ioctl(3, VT_ACTIVATE, 0x14 [pid 430] write(1, "executing program\n", 18 [pid 428] <... ioctl resumed>) = 0 [pid 426] +++ exited with 0 +++ [pid 427] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=426, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 428] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 430] <... write resumed>) = 18 [pid 429] <... openat resumed>) = 3 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 429] ioctl(3, VT_ACTIVATE, 0x14 [pid 428] <... ioctl resumed>) = 0 [pid 430] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 429] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=427, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 428] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> executing program [pid 429] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 428] <... openat resumed>) = 4 [pid 430] <... openat resumed>) = 3 [pid 429] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 428] ioctl(4, UI_SET_EVBIT, 0x1 [pid 430] ioctl(3, VT_ACTIVATE, 0x14 [pid 429] <... openat resumed>) = 4 [pid 428] <... ioctl resumed>) = 0 [pid 430] <... ioctl resumed>) = 0 [pid 429] ioctl(4, UI_SET_EVBIT, 0x1 [pid 428] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 429] <... ioctl resumed>) = 0 [pid 428] <... ioctl resumed>) = 0 [pid 429] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 428] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 429] <... ioctl resumed>) = 0 [pid 430] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 429] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 428] <... ioctl resumed>) = 0 [pid 429] <... ioctl resumed>) = 0 [pid 428] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 430] <... ioctl resumed>) = 0 [pid 429] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 430] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 430] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 430] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 430] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 430] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 431 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 431 attached [pid 430] <... ioctl resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 431] set_robust_list(0x55555a62f6a0, 24 [pid 430] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 432 [pid 431] <... set_robust_list resumed>) = 0 [pid 430] <... write resumed>) = 24 [pid 431] rt_sigprocmask(SIG_SETMASK, [] [pid 430] exit_group(0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 431] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 430] <... exit_group resumed>) = ? [pid 428] <... ioctl resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 428] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 431] <... prctl resumed>) = 0 [pid 428] <... write resumed>) = 24 [pid 429] <... ioctl resumed>) = 0 [pid 431] setpgid(0, 0 [pid 428] exit_group(0 [pid 431] <... setpgid resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 432 attached [pid 429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 428] <... exit_group resumed>) = ? [pid 432] set_robust_list(0x55555a62f6a0, 24 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 430] +++ exited with 0 +++ [pid 429] <... write resumed>) = 24 [pid 431] close(3 [pid 429] exit_group(0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 431] <... close resumed>) = 0 [pid 429] <... exit_group resumed>) = ? [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 431] write(1, "executing program\n", 18) = 18 [pid 308] <... restart_syscall resumed>) = 0 [pid 431] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 431] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 431] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 433 attached [pid 432] <... set_robust_list resumed>) = 0 [pid 429] +++ exited with 0 +++ [pid 428] +++ exited with 0 +++ [pid 431] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=429, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 433 [pid 433] set_robust_list(0x55555a62f6a0, 24 [pid 432] rt_sigprocmask(SIG_SETMASK, [] [pid 431] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 431] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 431] <... openat resumed>) = 4 [pid 433] <... set_robust_list resumed>) = 0 [pid 431] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 431] <... ioctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 431] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 434 attached [pid 433] rt_sigprocmask(SIG_SETMASK, [] [pid 432] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 431] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 434 [pid 431] <... ioctl resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 431] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 26.040731][ T426] input: syz0 as /devices/virtual/input/input99 [ 26.056371][ T428] input: syz0 as /devices/virtual/input/input100 [ 26.058123][ T430] input: syz0 as /devices/virtual/input/input102 [ 26.065875][ T429] input: syz0 as /devices/virtual/input/input101 [pid 434] set_robust_list(0x55555a62f6a0, 24 [pid 433] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 435 [pid 432] setpgid(0, 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 432] <... setpgid resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 432] <... openat resumed>) = 3 [pid 433] <... prctl resumed>) = 0 [pid 432] write(3, "1000", 4 [pid 433] setpgid(0, 0 [pid 432] <... write resumed>) = 4 [pid 433] <... setpgid resumed>) = 0 [pid 432] close(3 [pid 433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 432] <... close resumed>) = 0 [pid 433] <... openat resumed>) = 3 [pid 432] write(1, "executing program\n", 18 [pid 433] write(3, "1000", 4 [pid 432] <... write resumed>) = 18 executing program [pid 433] <... write resumed>) = 4 [pid 432] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 433] close(3) = 0 executing program [pid 433] write(1, "executing program\n", 18) = 18 [pid 433] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 434] <... set_robust_list resumed>) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 434] setpgid(0, 0) = 0 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 433] <... openat resumed>) = 3 [pid 432] <... openat resumed>) = 3 [pid 433] ioctl(3, VT_ACTIVATE, 0x14 [pid 432] ioctl(3, VT_ACTIVATE, 0x14 [pid 433] <... ioctl resumed>) = 0 [pid 432] <... ioctl resumed>) = 0 [pid 433] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 431] <... ioctl resumed>) = 0 [pid 433] <... ioctl resumed>) = 0 [pid 432] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 431] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 433] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 432] <... ioctl resumed>) = 0 [pid 433] <... openat resumed>) = 4 [pid 432] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 431] <... write resumed>) = 24 [pid 433] ioctl(4, UI_SET_EVBIT, 0x1 [pid 432] <... openat resumed>) = 4 [pid 433] <... ioctl resumed>) = 0 [pid 432] ioctl(4, UI_SET_EVBIT, 0x1 [pid 431] exit_group(0 [pid 433] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 432] <... ioctl resumed>) = 0 [pid 431] <... exit_group resumed>) = ? [pid 433] <... ioctl resumed>) = 0 [pid 432] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 433] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 432] <... ioctl resumed>) = 0 [pid 433] <... ioctl resumed>) = 0 [pid 432] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 433] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 432] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 435 attached [pid 434] <... openat resumed>) = 3 [pid 435] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 435] setpgid(0, 0) = 0 [pid 435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 435] write(3, "1000", 4) = 4 [pid 435] close(3) = 0 [pid 435] write(1, "executing program\n", 18) = 18 [pid 435] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 434] write(3, "1000", 4) = 4 [pid 434] close(3) = 0 [pid 434] write(1, "executing program\n", 18) = 18 [pid 434] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 435] <... openat resumed>) = 3 [pid 435] ioctl(3, VT_ACTIVATE, 0x14 [pid 432] +++ killed by SIGKILL +++ executing program executing program [pid 435] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=432, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 435] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 434] <... openat resumed>) = 3 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 435] <... ioctl resumed>) = 0 [pid 434] ioctl(3, VT_ACTIVATE, 0x14 [pid 435] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 434] <... ioctl resumed>) = 0 [pid 435] <... openat resumed>) = 4 [pid 434] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 435] ioctl(4, UI_SET_EVBIT, 0x1 [pid 434] <... ioctl resumed>) = 0 [pid 435] <... ioctl resumed>) = 0 [pid 434] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 431] +++ exited with 0 +++ [pid 435] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=431, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 435] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 435] <... ioctl resumed>) = 0 [pid 435] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 434] <... openat resumed>) = 4 [pid 306] <... restart_syscall resumed>) = 0 [pid 434] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 434] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 434] <... ioctl resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 434] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 434] <... ioctl resumed>) = 0 [pid 433] <... ioctl resumed>) = 0 [pid 434] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 433] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24ci2-android-6-1/strace-static-x86_64: Process 436 attached ) = 24 [pid 310] <... restart_syscall resumed>) = 0 [pid 436] set_robust_list(0x55555a62f6a0, 24 [pid 433] exit_group(0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 436 [pid 436] <... set_robust_list resumed>) = 0 [pid 433] <... exit_group resumed>) = ? [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 436] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 436] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 435] <... ioctl resumed>) = 0 [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 435] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 436] <... prctl resumed>) = 0 [pid 435] <... write resumed>) = 24 [pid 434] <... ioctl resumed>) = 0 [pid 436] setpgid(0, 0 [pid 435] exit_group(0 [pid 434] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 437 [pid 436] <... setpgid resumed>) = 0 [pid 435] <... exit_group resumed>) = ? [pid 434] <... write resumed>) = 24 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 434] exit_group(0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 436] <... openat resumed>) = 3 [pid 434] <... exit_group resumed>) = ? [pid 436] write(3, "1000", 4) = 4 [pid 436] close(3) = 0 [pid 436] write(1, "executing program\n", 18) = 18 executing program [pid 436] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 436] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 436] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 436] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 436] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 436] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 436] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 26.099707][ T431] input: syz0 as /devices/virtual/input/input103 [ 26.109779][ T421] tty tty20: SAK: killed process 432 (syz-executor133): by fd#3 [ 26.110612][ T433] input: syz0 as /devices/virtual/input/input104 [ 26.130637][ T435] input: syz0 as /devices/virtual/input/input106 [ 26.131963][ T434] input: syz0 as /devices/virtual/input/input107 [pid 436] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 437] setpgid(0, 0) = 0 [pid 433] +++ exited with 0 +++ [pid 437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 435] +++ exited with 0 +++ [pid 434] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=433, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 436] <... ioctl resumed>) = 0 [pid 436] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=435, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=434, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 436] <... write resumed>) = 24 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 436] exit_group(0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 436] <... exit_group resumed>) = ? [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 438 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 439 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 440 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 440] setpgid(0, 0) = 0 [pid 440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 440] write(3, "1000", 4) = 4 [pid 440] close(3) = 0 [pid 440] write(1, "executing program\n", 18) = 18 executing program [pid 440] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 440] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 440] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 440] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 440] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 440] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 440] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 440] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 438 attached [pid 436] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=436, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 438] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] write(1, "executing program\n", 18) = 18 executing program [pid 438] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 438] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 438] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 438] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 438] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 438] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 438] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 438] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 437] <... openat resumed>) = 3 [pid 437] write(3, "1000", 4) = 4 [pid 437] close(3) = 0 [pid 437] write(1, "executing program\n", 18) = 18 executing program [pid 437] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 ci2-android-6-1/strace-static-x86_64: Process 439 attached [pid 437] ioctl(3, VT_ACTIVATE, 0x14 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 441 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 441 attached [pid 441] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 441] setpgid(0, 0) = 0 [pid 441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 441] write(3, "1000", 4) = 4 [pid 441] close(3) = 0 [pid 441] write(1, "executing program\n", 18) = 18 [pid 441] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 438] <... ioctl resumed>) = 0 [pid 438] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 438] exit_group(0) = ? executing program [pid 439] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 439] setpgid(0, 0) = 0 [pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 439] write(3, "1000", 4) = 4 [pid 439] close(3) = 0 [pid 439] write(1, "executing program\n", 18) = 18 executing program [pid 439] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 441] <... openat resumed>) = ? [pid 441] +++ killed by SIGKILL +++ [pid 439] <... openat resumed>) = 3 [pid 437] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=441, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 439] ioctl(3, VT_ACTIVATE, 0x14 [pid 437] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 439] <... ioctl resumed>) = 0 [pid 437] <... ioctl resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 439] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 437] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 438] +++ exited with 0 +++ [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 442 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] <... openat resumed>) = 4 ci2-android-6-1/strace-static-x86_64: Process 442 attached [pid 439] <... ioctl resumed>) = 0 [pid 437] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 442] set_robust_list(0x55555a62f6a0, 24 [pid 440] <... ioctl resumed>) = 0 [pid 439] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 437] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 442] <... set_robust_list resumed>) = 0 [pid 440] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 439] <... openat resumed>) = 4 [pid 437] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 439] ioctl(4, UI_SET_EVBIT, 0x1 [pid 442] rt_sigprocmask(SIG_SETMASK, [] [pid 440] <... write resumed>) = 24 [pid 439] <... ioctl resumed>) = 0 [pid 437] <... ioctl resumed>) = 0 [ 26.155517][ T436] input: syz0 as /devices/virtual/input/input108 [ 26.174491][ T438] input: syz0 as /devices/virtual/input/input110 [ 26.180018][ T440] input: syz0 as /devices/virtual/input/input109 [ 26.188205][ T421] tty tty20: SAK: killed process 441 (syz-executor133): by fd#3 [pid 437] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 440] exit_group(0 [pid 439] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 439] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 439] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 440] <... exit_group resumed>) = ? [pid 437] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 442] <... prctl resumed>) = 0 [pid 442] setpgid(0, 0 [pid 437] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 442] <... setpgid resumed>) = 0 [pid 440] +++ exited with 0 +++ [pid 437] <... write resumed>) = 24 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=440, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 439] <... ioctl resumed>) = 0 [pid 437] exit_group(0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 443 attached [pid 442] <... openat resumed>) = 3 [pid 439] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 437] <... exit_group resumed>) = ? [pid 442] write(3, "1000", 4 [pid 439] <... write resumed>) = 24 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 443 [pid 443] set_robust_list(0x55555a62f6a0, 24 [pid 442] <... write resumed>) = 4 [pid 439] exit_group(0 [pid 437] +++ exited with 0 +++ [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 442] close(3 [pid 439] <... exit_group resumed>) = ? [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=437, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 442] <... close resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 442] write(1, "executing program\n", 18) = 18 executing program [pid 442] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 443] <... set_robust_list resumed>) = 0 [pid 442] <... openat resumed>) = 3 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 443] setpgid(0, 0) = 0 [pid 443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 442] ioctl(3, VT_ACTIVATE, 0x14 [pid 439] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=439, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 442] <... ioctl resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 443] <... openat resumed>) = 3 [pid 442] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 443] write(3, "1000", 4) = 4 [pid 443] close(3) = 0 [pid 442] <... ioctl resumed>) = 0 executing program [pid 443] write(1, "executing program\n", 18) = 18 [pid 443] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 442] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 443] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 443] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 442] <... openat resumed>) = 4 [pid 443] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 442] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... restart_syscall resumed>) = 0 [pid 443] ioctl(4, UI_SET_EVBIT, 0x1 [pid 308] <... restart_syscall resumed>) = 0 [pid 443] <... ioctl resumed>) = 0 [pid 442] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 442] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 442] <... ioctl resumed>) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 443] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 443] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 443] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 442] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 442] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 444 ci2-android-6-1/strace-static-x86_64: Process 445 attached [pid 442] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 444] setpgid(0, 0) = 0 [pid 444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 444] write(3, "1000", 4) = 4 [pid 444] close(3) = 0 [pid 444] write(1, "executing program\n", 18) = 18 executing program [pid 444] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 445] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 445] setpgid(0, 0) = 0 [pid 445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 445] write(3, "1000", 4) = 4 [pid 445] close(3) = 0 [pid 442] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 445 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] executing program [pid 445] write(1, "executing program\n", 18) = 18 [pid 445] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 442] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 442] <... write resumed>) = 24 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 445] <... openat resumed>) = 3 [pid 442] exit_group(0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 446 [pid 442] <... exit_group resumed>) = ? [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 445] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 445] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 445] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 445] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 445] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 445] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 446 attached [pid 446] set_robust_list(0x55555a62f6a0, 24 [pid 444] <... openat resumed>) = 3 [pid 443] <... ioctl resumed>) = 0 [pid 443] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 443] exit_group(0) = ? [pid 446] <... set_robust_list resumed>) = 0 [ 26.201549][ T437] input: syz0 as /devices/virtual/input/input111 [ 26.209085][ T439] input: syz0 as /devices/virtual/input/input112 [ 26.230889][ T443] input: syz0 as /devices/virtual/input/input114 [ 26.237769][ T442] input: syz0 as /devices/virtual/input/input113 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 444] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 444] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 444] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 444] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 444] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 444] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 444] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 446] <... prctl resumed>) = 0 [pid 446] setpgid(0, 0) = 0 [pid 446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 446] write(3, "1000", 4) = 4 [pid 442] +++ exited with 0 +++ [pid 446] close(3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=442, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 445] <... ioctl resumed>) = 0 [pid 446] <... close resumed>) = 0 [pid 445] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 446] write(1, "executing program\n", 18 [pid 445] <... write resumed>) = 24 executing program [pid 443] +++ exited with 0 +++ [pid 306] <... restart_syscall resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=443, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 446] <... write resumed>) = 18 [pid 445] exit_group(0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 446] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 445] <... exit_group resumed>) = ? [pid 444] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 447 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 448 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 executing program [pid 448] write(1, "executing program\n", 18) = 18 [pid 448] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 448] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 448] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 448] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 448] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 448] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 448] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 448] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 447 attached [pid 447] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 444] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 444] exit_group(0) = ? [pid 447] setpgid(0, 0) = 0 [pid 447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 447] write(3, "1000", 4) = 4 [pid 447] close(3) = 0 executing program [pid 447] write(1, "executing program\n", 18) = 18 [pid 447] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 446] <... openat resumed>) = 3 [pid 445] +++ exited with 0 +++ [pid 444] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=445, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 447] <... openat resumed>) = 3 [pid 447] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 447] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=444, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 447] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 447] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 447] <... ioctl resumed>) = 0 [pid 447] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 447] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 446] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 447] <... ioctl resumed>) = 0 [pid 447] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 446] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 448] <... ioctl resumed>) = 0 [pid 448] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 448] exit_group(0) = ? [pid 446] <... ioctl resumed>) = 0 [pid 446] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 446] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 446] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 446] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 446] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 447] <... ioctl resumed>) = ? [ 26.250452][ T445] input: syz0 as /devices/virtual/input/input115 [ 26.258562][ T444] input: syz0 as /devices/virtual/input/input116 [ 26.276538][ T448] input: syz0 as /devices/virtual/input/input117 [ 26.288707][ T447] input: syz0 as /devices/virtual/input/input118 [ 26.289860][ T446] input: syz0 as /devices/virtual/input/input119 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 450 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 449 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 449 attached [pid 447] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=447, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 448] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 449] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 446] <... ioctl resumed>) = 0 [pid 446] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 446] exit_group(0) = ? [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 449] setpgid(0, 0) = 0 [pid 449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 449] write(3, "1000", 4) = 4 ci2-android-6-1/strace-static-x86_64: Process 450 attached [pid 449] close(3) = 0 [pid 449] write(1, "executing program\n", 18) = 18 executing program [pid 449] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 449] ioctl(3, VT_ACTIVATE, 0x14 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 446] +++ exited with 0 +++ [pid 449] <... ioctl resumed>) = 0 [pid 449] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 449] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 449] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 449] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 449] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 449] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=446, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 451 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 452 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 452 attached ci2-android-6-1/strace-static-x86_64: Process 451 attached [pid 450] set_robust_list(0x55555a62f6a0, 24 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 452] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 452] setpgid(0, 0) = 0 [pid 452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 452] write(3, "1000", 4) = 4 [pid 452] close(3) = 0 [pid 452] write(1, "executing program\n", 18) = 18 [pid 452] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 451] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 451] setpgid(0, 0) = 0 [pid 451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 450] <... set_robust_list resumed>) = 0 [pid 452] <... openat resumed>) = 3 [pid 450] rt_sigprocmask(SIG_SETMASK, [] [pid 452] ioctl(3, VT_ACTIVATE, 0x14 [pid 450] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 452] <... ioctl resumed>) = 0 [pid 450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 452] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 450] <... prctl resumed>) = 0 [pid 452] <... ioctl resumed>) = 0 [pid 450] setpgid(0, 0 [pid 452] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 450] <... setpgid resumed>) = 0 [pid 452] ioctl(4, UI_SET_EVBIT, 0x1 [pid 451] write(3, "1000", 4 [pid 450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 452] <... ioctl resumed>) = 0 [pid 450] <... openat resumed>) = 3 [pid 307] <... restart_syscall resumed>) = 0 [pid 452] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 450] write(3, "1000", 4 [pid 452] <... ioctl resumed>) = 0 [pid 450] <... write resumed>) = 4 [pid 452] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 450] close(3 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 452] <... ioctl resumed>) = 0 [pid 450] <... close resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 452] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 450] write(1, "executing program\n", 18 executing program [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 450] <... write resumed>) = 18 [pid 450] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 453 [pid 450] <... openat resumed>) = 3 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 450] ioctl(3, VT_ACTIVATE, 0x14 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 450] <... ioctl resumed>) = 0 [pid 450] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 450] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 451] <... write resumed>) = 4 [pid 450] <... openat resumed>) = 4 [pid 451] close(3 [pid 450] ioctl(4, UI_SET_EVBIT, 0x1 [pid 451] <... close resumed>) = 0 [pid 450] <... ioctl resumed>) = 0 [pid 451] write(1, "executing program\n", 18 [pid 450] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 451] <... write resumed>) = 18 [pid 450] <... ioctl resumed>) = 0 [pid 451] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 450] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 451] <... openat resumed>) = 3 [pid 450] <... ioctl resumed>) = 0 [pid 451] ioctl(3, VT_ACTIVATE, 0x14 executing program [pid 450] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 451] <... ioctl resumed>) = 0 [pid 451] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 451] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 451] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 451] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 451] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 451] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 453 attached [pid 453] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 453] setpgid(0, 0) = 0 [pid 453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 453] write(3, "1000", 4) = 4 [pid 453] close(3) = 0 [pid 453] write(1, "executing program\n", 18) = 18 executing program [pid 453] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 453] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 453] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 453] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 453] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 453] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 453] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 453] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 449] <... ioctl resumed>) = 0 [pid 449] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 449] exit_group(0) = ? [ 26.302539][ T421] tty tty20: SAK: killed process 447 (syz-executor133): by fd#3 [ 26.319766][ T449] input: syz0 as /devices/virtual/input/input120 [ 26.335279][ T452] input: syz0 as /devices/virtual/input/input121 [ 26.338698][ T450] input: syz0 as /devices/virtual/input/input122 [ 26.341975][ T451] input: syz0 as /devices/virtual/input/input123 [pid 449] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=449, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 451] <... ioctl resumed>) = ? [pid 451] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=451, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 450] <... ioctl resumed>) = 0 [pid 450] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 452] <... ioctl resumed>) = 0 [pid 452] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 453] <... ioctl resumed>) = 0 [pid 452] <... write resumed>) = 24 [pid 450] <... write resumed>) = 24 [pid 453] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 452] exit_group(0 [pid 450] exit_group(0 [pid 453] <... write resumed>) = 24 [pid 452] <... exit_group resumed>) = ? [pid 450] <... exit_group resumed>) = ? [pid 452] +++ exited with 0 +++ [pid 453] exit_group(0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=452, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 453] <... exit_group resumed>) = ? [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 455 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 454 ci2-android-6-1/strace-static-x86_64: Process 454 attached [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 456 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 455 attached [pid 455] set_robust_list(0x55555a62f6a0, 24 [pid 454] set_robust_list(0x55555a62f6a0, 24 [pid 455] <... set_robust_list resumed>) = 0 [pid 454] <... set_robust_list resumed>) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [] [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 455] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 453] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=453, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 455] setpgid(0, 0) = 0 [pid 455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 454] <... prctl resumed>) = 0 [pid 454] setpgid(0, 0) = 0 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 455] <... openat resumed>) = 3 [pid 454] <... openat resumed>) = 3 [pid 455] write(3, "1000", 4) = 4 [pid 454] write(3, "1000", 4 [pid 455] close(3 [pid 454] <... write resumed>) = 4 [pid 450] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=450, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 454] close(3 [pid 455] <... close resumed>) = 0 [pid 454] <... close resumed>) = 0 executing program [pid 455] write(1, "executing program\n", 18 [pid 454] write(1, "executing program\n", 18 [pid 455] <... write resumed>) = 18 executing program [pid 455] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 454] <... write resumed>) = 18 [pid 454] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 455] <... openat resumed>) = 3 [pid 454] <... openat resumed>) = 3 [pid 454] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 455] ioctl(3, VT_ACTIVATE, 0x14ci2-android-6-1/strace-static-x86_64: Process 456 attached [pid 454] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 456] set_robust_list(0x55555a62f6a0, 24 [pid 455] <... ioctl resumed>) = 0 [pid 454] <... ioctl resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 456] <... set_robust_list resumed>) = 0 [pid 454] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 456] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 454] <... openat resumed>) = 4 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 456] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 455] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 454] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 454] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 455] <... ioctl resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 457 [pid 454] <... ioctl resumed>) = 0 [pid 454] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 458 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 455] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 456] <... prctl resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 455] <... openat resumed>) = 4 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 457 attached [pid 456] setpgid(0, 0 [pid 455] ioctl(4, UI_SET_EVBIT, 0x1 [pid 456] <... setpgid resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 458 attached [pid 457] set_robust_list(0x55555a62f6a0, 24 [pid 455] <... ioctl resumed>) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 455] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 454] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 457] <... set_robust_list resumed>) = 0 [pid 456] <... openat resumed>) = 3 [pid 456] write(3, "1000", 4 [pid 455] <... ioctl resumed>) = 0 [pid 456] <... write resumed>) = 4 [pid 456] close(3 [pid 455] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 457] rt_sigprocmask(SIG_SETMASK, [] [pid 456] <... close resumed>) = 0 [pid 455] <... ioctl resumed>) = 0 [pid 457] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 456] write(1, "executing program\n", 18 [pid 455] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 456] <... write resumed>) = 18 [pid 457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 457] setpgid(0, 0) = 0 [pid 457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 457] write(3, "1000", 4) = 4 [pid 457] close(3) = 0 [pid 457] write(1, "executing program\n", 18) = 18 [pid 457] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 458] set_robust_list(0x55555a62f6a0, 24) = 0 executing program executing program [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 458] setpgid(0, 0) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 454] <... ioctl resumed>) = 0 [pid 458] <... openat resumed>) = 3 [pid 454] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 458] write(3, "1000", 4 [pid 454] exit_group(0 [pid 458] <... write resumed>) = 4 [pid 458] close(3) = 0 [pid 458] write(1, "executing program\n", 18) = 18 [pid 454] <... exit_group resumed>) = ? [pid 458] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR executing program [pid 456] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 457] <... openat resumed>) = 3 [ 26.354686][ T421] tty tty20: SAK: killed process 451 (syz-executor133): by fd#3 [ 26.354808][ T453] input: syz0 as /devices/virtual/input/input124 [ 26.393292][ T454] input: syz0 as /devices/virtual/input/input125 [ 26.393361][ T455] input: syz0 as /devices/virtual/input/input126 [pid 456] <... openat resumed>) = 3 [pid 456] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 456] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 456] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 456] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 456] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 456] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 456] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 458] <... openat resumed>) = 3 [pid 457] ioctl(3, VT_ACTIVATE, 0x14 [pid 458] ioctl(3, VT_ACTIVATE, 0x14 [pid 457] <... ioctl resumed>) = 0 [pid 458] <... ioctl resumed>) = 0 [pid 456] <... ioctl resumed>) = 0 [pid 455] <... ioctl resumed>) = 0 [pid 454] +++ exited with 0 +++ [pid 457] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 456] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 457] <... ioctl resumed>) = 0 [pid 457] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 457] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=454, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 457] <... ioctl resumed>) = 0 [pid 457] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 457] <... ioctl resumed>) = 0 [pid 457] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 457] <... ioctl resumed>) = 0 [pid 457] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 459 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 458] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 458] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 455] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 455] exit_group(0 [pid 458] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 458] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 458] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 455] <... exit_group resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 459 attached [pid 457] <... ioctl resumed>) = 0 [pid 456] <... write resumed>) = 24 [pid 456] exit_group(0) = ? [pid 459] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 457] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 459] <... prctl resumed>) = 0 [pid 457] <... write resumed>) = 24 [pid 459] setpgid(0, 0) = 0 [pid 457] exit_group(0 [pid 459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 457] <... exit_group resumed>) = ? [pid 459] <... openat resumed>) = 3 [pid 459] write(3, "1000", 4) = 4 [pid 459] close(3 [pid 455] +++ exited with 0 +++ [pid 459] <... close resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=455, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 459] write(1, "executing program\n", 18) = 18 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 459] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 459] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 458] <... ioctl resumed>) = 0 [pid 459] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 459] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 456] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 459] <... openat resumed>) = 4 [pid 458] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 457] +++ exited with 0 +++ [pid 459] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=457, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 459] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 459] <... ioctl resumed>) = 0 [pid 459] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 459] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 458] <... write resumed>) = 24 [pid 458] exit_group(0) = ? [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 460 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 461 attached ci2-android-6-1/strace-static-x86_64: Process 460 attached [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 461 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 462 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 460] setpgid(0, 0) = 0 [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 [pid 460] write(1, "executing program\n", 18) = 18 executing program [pid 460] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 ci2-android-6-1/strace-static-x86_64: Process 462 attached [pid 460] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 460] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 462] set_robust_list(0x55555a62f6a0, 24 [pid 460] <... ioctl resumed>) = 0 [pid 460] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 460] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 460] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 460] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 26.410452][ T456] input: syz0 as /devices/virtual/input/input127 [ 26.428717][ T457] input: syz0 as /devices/virtual/input/input128 [ 26.431573][ T458] input: syz0 as /devices/virtual/input/input129 [ 26.449092][ T459] input: syz0 as /devices/virtual/input/input130 [pid 460] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 462] <... set_robust_list resumed>) = 0 [pid 461] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 461] setpgid(0, 0) = 0 [pid 461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 461] write(3, "1000", 4) = 4 [pid 461] close(3) = 0 [pid 462] <... prctl resumed>) = 0 [pid 462] setpgid(0, 0 [pid 461] write(1, "executing program\n", 18 [pid 462] <... setpgid resumed>) = 0 [pid 461] <... write resumed>) = 18 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 461] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 462] <... openat resumed>) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 executing program [pid 462] write(1, "executing program\n", 18) = 18 [pid 462] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 459] <... ioctl resumed>) = 0 [pid 458] +++ exited with 0 +++ [pid 460] <... ioctl resumed>) = 0 [pid 459] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 460] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 459] <... write resumed>) = 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=458, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 460] <... write resumed>) = 24 [pid 459] exit_group(0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 460] exit_group(0 [pid 459] <... exit_group resumed>) = ? [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 460] <... exit_group resumed>) = ? [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 463 [pid 307] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 463 attached [pid 462] <... openat resumed>) = 3 [pid 461] <... openat resumed>) = 3 [pid 459] +++ exited with 0 +++ [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 463] set_robust_list(0x55555a62f6a0, 24 [pid 462] ioctl(3, VT_ACTIVATE, 0x14 [pid 461] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=459, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 463] <... set_robust_list resumed>) = 0 [pid 462] <... ioctl resumed>) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 463] rt_sigprocmask(SIG_SETMASK, [] [pid 462] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 461] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] <... restart_syscall resumed>) = 0 [pid 463] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 462] <... ioctl resumed>) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 462] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 461] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 463] <... prctl resumed>) = 0 [pid 462] <... openat resumed>) = 4 [pid 461] <... openat resumed>) = 4 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 463] setpgid(0, 0 [pid 462] ioctl(4, UI_SET_EVBIT, 0x1 [pid 461] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 463] <... setpgid resumed>) = 0 [pid 462] <... ioctl resumed>) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 462] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 461] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 463] <... openat resumed>) = 3 [pid 462] <... ioctl resumed>) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 464 [pid 463] write(3, "1000", 4 [pid 462] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 461] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 463] <... write resumed>) = 4 [pid 462] <... ioctl resumed>) = 0 [pid 461] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 463] close(3 [pid 462] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 461] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 464] setpgid(0, 0) = 0 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 464] write(3, "1000", 4 [pid 460] +++ killed by SIGKILL +++ [pid 464] <... write resumed>) = 4 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=460, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 464] close(3 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 464] <... close resumed>) = 0 executing program [pid 464] write(1, "executing program\n", 18) = 18 [pid 464] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 463] <... close resumed>) = 0 [pid 463] write(1, "executing program\n", 18) = 18 executing program [pid 463] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 464] <... openat resumed>) = 3 [pid 462] <... ioctl resumed>) = 0 [pid 464] ioctl(3, VT_ACTIVATE, 0x14 [pid 463] <... openat resumed>) = 3 [pid 464] <... ioctl resumed>) = 0 [pid 464] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 463] ioctl(3, VT_ACTIVATE, 0x14 [pid 464] <... ioctl resumed>) = 0 [pid 464] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 463] <... ioctl resumed>) = 0 [pid 464] <... openat resumed>) = 4 [pid 464] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 464] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 464] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 464] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 463] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 462] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 461] <... ioctl resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 463] <... ioctl resumed>) = 0 [pid 462] <... write resumed>) = 24 [pid 463] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 462] exit_group(0 [pid 461] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 463] <... openat resumed>) = 4 [pid 462] <... exit_group resumed>) = ? [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 463] ioctl(4, UI_SET_EVBIT, 0x1 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 463] <... ioctl resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 464] <... ioctl resumed>) = 0 [pid 463] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 461] <... write resumed>) = 24 [pid 461] exit_group(0 [pid 464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 464] exit_group(0 [pid 463] <... ioctl resumed>) = 0 [pid 461] <... exit_group resumed>) = ? [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 465 [pid 463] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 464] <... exit_group resumed>) = ? [pid 463] <... ioctl resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 463] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 462] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 26.461144][ T460] input: syz0 as /devices/virtual/input/input131 [ 26.470669][ T323] tty tty20: SAK: killed process 460 (syz-executor133): by fd#3 [ 26.483668][ T462] input: syz0 as /devices/virtual/input/input132 [ 26.490624][ T461] input: syz0 as /devices/virtual/input/input133 [ 26.499963][ T464] input: syz0 as /devices/virtual/input/input134 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-6-1/strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 465] setpgid(0, 0) = 0 [pid 465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 465] write(3, "1000", 4) = 4 [pid 465] close(3) = 0 [pid 465] write(1, "executing program\n", 18) = 18 [pid 465] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 308] <... restart_syscall resumed>) = 0 executing program [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 465] <... openat resumed>) = 3 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 466 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 465] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 465] openat(AT_FDCWD, "/dev/uinput", O_RDWRci2-android-6-1/strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 465] <... openat resumed>) = 4 [pid 463] <... ioctl resumed>) = 0 [pid 461] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=461, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 465] ioctl(4, UI_SET_EVBIT, 0x1 [pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 465] <... ioctl resumed>) = 0 [pid 463] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 465] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 463] <... write resumed>) = 24 [pid 465] <... ioctl resumed>) = 0 [pid 465] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 464] +++ exited with 0 +++ [pid 463] exit_group(0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 466] <... prctl resumed>) = 0 [pid 465] <... ioctl resumed>) = 0 [pid 466] setpgid(0, 0) = 0 [pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 465] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 463] <... exit_group resumed>) = ? [pid 466] <... openat resumed>) = 3 [pid 466] write(3, "1000", 4) = 4 [pid 466] close(3) = 0 [pid 466] write(1, "executing program\n", 18) = 18 [pid 466] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... restart_syscall resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 467 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 468 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 466] <... openat resumed>) = 3 [pid 466] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 466] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 466] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 466] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 466] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 466] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 466] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 467 attached [pid 465] <... ioctl resumed>) = ? [pid 467] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 467] setpgid(0, 0) = 0 [pid 467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 467] write(3, "1000", 4) = 4 [pid 467] close(3) = 0 [pid 467] write(1, "executing program\n", 18) = 18 [pid 467] openat(AT_FDCWD, "/dev/char/4:28", O_RDWRci2-android-6-1/strace-static-x86_64: Process 468 attached executing program [pid 468] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 468] setpgid(0, 0) = 0 [pid 468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 468] write(3, "1000", 4) = 4 [pid 468] close(3) = 0 [pid 465] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=465, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 467] <... openat resumed>) = 3 [pid 467] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 467] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 467] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 463] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=463, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 467] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 467] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 467] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 467] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 468] write(1, "executing program\n", 18 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 469 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 470 [pid 307] rt_sigprocmask(SIG_SETMASK, [] executing program [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 468] <... write resumed>) = 18 [pid 466] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 469 attached [pid 466] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 468] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 469] set_robust_list(0x55555a62f6a0, 24 [pid 466] exit_group(0) = ? [pid 468] <... openat resumed>) = 3 [pid 468] ioctl(3, VT_ACTIVATE, 0x14 [pid 469] <... set_robust_list resumed>) = 0 [pid 468] <... ioctl resumed>) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [] [pid 468] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}ci2-android-6-1/strace-static-x86_64: Process 470 attached [pid 470] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 470] rt_sigprocmask(SIG_SETMASK, [] [pid 469] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 468] <... ioctl resumed>) = 0 [pid 470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 468] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 468] <... openat resumed>) = 4 [pid 469] <... prctl resumed>) = 0 [pid 470] <... openat resumed>) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] write(1, "executing program\n", 18) = 18 executing program [pid 470] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 469] setpgid(0, 0 [ 26.515593][ T463] input: syz0 as /devices/virtual/input/input135 [ 26.528786][ T465] input: syz0 as /devices/virtual/input/input136 [ 26.536077][ T421] tty tty20: SAK: killed process 465 (syz-executor133): by fd#3 [ 26.540468][ T466] input: syz0 as /devices/virtual/input/input137 [ 26.554464][ T467] input: syz0 as /devices/virtual/input/input138 [pid 468] ioctl(4, UI_SET_EVBIT, 0x1 [pid 470] <... openat resumed>) = 3 [pid 470] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 470] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 470] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 470] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 470] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 470] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 470] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 467] <... ioctl resumed>) = 0 [pid 467] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 467] exit_group(0) = ? [pid 469] <... setpgid resumed>) = 0 [pid 468] <... ioctl resumed>) = 0 [pid 469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 469] write(3, "1000", 4) = 4 [pid 469] close(3) = 0 [pid 469] write(1, "executing program\n", 18) = 18 executing program [pid 469] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 468] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 468] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 468] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 470] <... ioctl resumed>) = ? [pid 469] <... openat resumed>) = 3 [pid 468] <... ioctl resumed>) = 0 [pid 467] +++ exited with 0 +++ [pid 466] +++ exited with 0 +++ [pid 469] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=467, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 469] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 469] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 469] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 469] <... openat resumed>) = 4 [pid 469] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 472 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 471 [pid 469] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 469] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 469] <... ioctl resumed>) = 0 [pid 469] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 469] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 472 attached ci2-android-6-1/strace-static-x86_64: Process 471 attached [pid 470] +++ killed by SIGKILL +++ [pid 469] <... ioctl resumed>) = 0 [pid 468] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=470, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 469] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 469] exit_group(0) = ? [pid 472] set_robust_list(0x55555a62f6a0, 24 [pid 471] set_robust_list(0x55555a62f6a0, 24 [pid 468] <... write resumed>) = 24 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 473 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 473] setpgid(0, 0) = 0 [pid 473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 473] write(3, "1000", 4) = 4 [pid 473] close(3) = 0 [pid 473] write(1, "executing program\n", 18) = 18 [pid 473] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 executing program [pid 473] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 473] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 473] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 473] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 473] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 473] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 473] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 468] exit_group(0 [pid 472] <... set_robust_list resumed>) = 0 [pid 471] <... set_robust_list resumed>) = 0 [pid 472] rt_sigprocmask(SIG_SETMASK, [] [pid 471] rt_sigprocmask(SIG_SETMASK, [] [pid 468] <... exit_group resumed>) = ? [pid 472] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 471] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 471] setpgid(0, 0) = 0 [pid 471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 471] write(3, "1000", 4) = 4 [pid 471] close(3) = 0 [pid 471] write(1, "executing program\n", 18) = 18 executing program [pid 471] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 471] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 471] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 471] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 471] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 472] <... openat resumed>) = 3 [pid 471] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 471] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 471] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] write(1, "executing program\n", 18) = 18 executing program [ 26.569468][ T421] tty tty20: SAK: killed process 470 (syz-executor133): by fd#3 [ 26.574240][ T470] input: syz0 as /devices/virtual/input/input139 [ 26.580356][ T468] input: syz0 as /devices/virtual/input/input140 [ 26.594421][ T469] input: syz0 as /devices/virtual/input/input141 [ 26.611733][ T473] input: syz0 as /devices/virtual/input/input142 [pid 472] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 473] <... ioctl resumed>) = ? [pid 472] <... openat resumed>) = 3 [pid 472] ioctl(3, VT_ACTIVATE, 0x14 [pid 469] +++ exited with 0 +++ [pid 472] <... ioctl resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=469, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 472] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 472] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 473] +++ killed by SIGKILL +++ [pid 472] <... openat resumed>) = 4 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=473, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 472] ioctl(4, UI_SET_EVBIT, 0x1 [pid 468] +++ exited with 0 +++ [pid 472] <... ioctl resumed>) = 0 [pid 472] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 472] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 472] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 471] <... ioctl resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=468, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 471] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 471] exit_group(0) = ? [pid 472] <... ioctl resumed>) = 0 [pid 472] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 472] exit_group(0 [pid 471] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=471, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 472] <... exit_group resumed>) = ? [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x55555a62f6a0, 24 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 476 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 475 ci2-android-6-1/strace-static-x86_64: Process 476 attached ci2-android-6-1/strace-static-x86_64: Process 474 attached [pid 475] <... set_robust_list resumed>) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 474 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 476] set_robust_list(0x55555a62f6a0, 24 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 475] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 476] <... set_robust_list resumed>) = 0 [pid 475] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 474] set_robust_list(0x55555a62f6a0, 24 [pid 472] +++ exited with 0 +++ [pid 474] <... set_robust_list resumed>) = 0 [pid 474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 476] rt_sigprocmask(SIG_SETMASK, [] [pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 474] <... prctl resumed>) = 0 [pid 476] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 476] setpgid(0, 0) = 0 [pid 476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 475] <... prctl resumed>) = 0 [pid 474] setpgid(0, 0) = 0 [pid 474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 474] write(3, "1000", 4) = 4 [pid 474] close(3) = 0 executing program [pid 474] write(1, "executing program\n", 18) = 18 [pid 474] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 476] <... openat resumed>) = 3 [pid 475] setpgid(0, 0 [pid 474] <... openat resumed>) = 3 [pid 474] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 476] write(3, "1000", 4 [pid 474] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 474] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 476] <... write resumed>) = 4 [pid 475] <... setpgid resumed>) = 0 [pid 474] <... openat resumed>) = 4 [pid 474] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 474] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 474] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 474] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 476] close(3 [pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 476] <... close resumed>) = 0 [ 26.616442][ T471] input: syz0 as /devices/virtual/input/input143 [ 26.625471][ T323] tty tty20: SAK: killed process 473 (syz-executor133): by fd#3 [ 26.635647][ T472] input: syz0 as /devices/virtual/input/input144 executing program [pid 476] write(1, "executing program\n", 18) = 18 [pid 475] <... openat resumed>) = 3 [pid 476] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 477 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 478 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 478 attached [pid 478] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 476] <... openat resumed>) = 3 ci2-android-6-1/strace-static-x86_64: Process 477 attached [pid 475] write(3, "1000", 4 [pid 477] set_robust_list(0x55555a62f6a0, 24 [pid 475] <... write resumed>) = 4 [pid 478] setpgid(0, 0 [pid 477] <... set_robust_list resumed>) = 0 [pid 476] ioctl(3, VT_ACTIVATE, 0x14 [pid 475] close(3 [pid 478] <... setpgid resumed>) = 0 [pid 477] rt_sigprocmask(SIG_SETMASK, [] [pid 476] <... ioctl resumed>) = 0 [pid 475] <... close resumed>) = 0 [pid 474] <... ioctl resumed>) = 0 [pid 478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 477] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 476] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 475] write(1, "executing program\n", 18 executing program [pid 474] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 475] <... write resumed>) = 18 [pid 475] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 475] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 475] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 475] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 475] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 475] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 475] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 475] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 478] <... openat resumed>) = 3 [pid 477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 476] <... ioctl resumed>) = 0 [pid 474] <... write resumed>) = 24 [pid 476] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 476] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 476] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 476] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 476] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 476] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 476] exit_group(0) = ? [pid 477] <... prctl resumed>) = 0 [pid 477] setpgid(0, 0) = 0 [pid 477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 477] write(3, "1000", 4) = 4 [pid 477] close(3) = 0 [pid 477] write(1, "executing program\n", 18) = 18 executing program [pid 477] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 474] exit_group(0) = ? [pid 478] write(3, "1000", 4 [pid 475] <... ioctl resumed>) = ? [pid 478] <... write resumed>) = 4 [pid 478] close(3) = 0 [pid 478] write(1, "executing program\n", 18) = 18 executing program [pid 478] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 477] <... openat resumed>) = 3 [pid 476] +++ exited with 0 +++ [pid 475] +++ killed by SIGKILL +++ [pid 474] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=475, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 478] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 478] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 477] ioctl(3, VT_ACTIVATE, 0x14 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=476, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=474, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 477] <... ioctl resumed>) = 0 [pid 478] <... ioctl resumed>) = 0 [pid 477] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 478] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 477] <... ioctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 477] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 477] <... openat resumed>) = 4 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 477] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 478] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 478] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 478] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 478] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 477] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 480 attached ci2-android-6-1/strace-static-x86_64: Process 479 attached [pid 477] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 479 [pid 477] <... ioctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 480 [pid 477] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 477] <... ioctl resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 26.662545][ T474] input: syz0 as /devices/virtual/input/input145 [ 26.673512][ T475] input: syz0 as /devices/virtual/input/input146 [ 26.680146][ T476] input: syz0 as /devices/virtual/input/input147 [ 26.687123][ T421] tty tty20: SAK: killed process 475 (syz-executor133): by fd#3 [pid 477] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 480] set_robust_list(0x55555a62f6a0, 24 [pid 306] <... restart_syscall resumed>) = 0 [pid 480] <... set_robust_list resumed>) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 480] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 479] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 479] rt_sigprocmask(SIG_SETMASK, [] [pid 480] <... prctl resumed>) = 0 [pid 480] setpgid(0, 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 481 [pid 480] <... setpgid resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 479] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 480] <... openat resumed>) = 3 [pid 479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 479] setpgid(0, 0) = 0 [pid 479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 480] write(3, "1000", 4) = 4 [pid 480] close(3) = 0 [pid 479] <... openat resumed>) = 3 executing program [pid 480] write(1, "executing program\n", 18) = 18 [pid 480] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 479] write(3, "1000", 4 [pid 480] <... openat resumed>) = 3 [pid 480] ioctl(3, VT_ACTIVATE, 0x14 [pid 479] <... write resumed>) = 4 [pid 480] <... ioctl resumed>) = 0 [pid 479] close(3 [pid 480] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 479] <... close resumed>) = 0 [pid 480] <... ioctl resumed>) = 0 [pid 480] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 478] <... ioctl resumed>) = 0 [pid 480] <... openat resumed>) = 4 [pid 478] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24ci2-android-6-1/strace-static-x86_64: Process 481 attached [pid 480] ioctl(4, UI_SET_EVBIT, 0x1 [pid 478] <... write resumed>) = 24 [pid 480] <... ioctl resumed>) = 0 [pid 481] set_robust_list(0x55555a62f6a0, 24 [pid 478] exit_group(0 [pid 480] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 481] <... set_robust_list resumed>) = 0 [pid 478] <... exit_group resumed>) = ? [pid 480] <... ioctl resumed>) = 0 executing program [pid 479] write(1, "executing program\n", 18) = 18 [pid 479] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 480] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 481] rt_sigprocmask(SIG_SETMASK, [] [pid 480] <... ioctl resumed>) = 0 [pid 481] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 480] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 477] <... ioctl resumed>) = 0 [pid 477] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 477] exit_group(0) = ? [pid 481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 481] setpgid(0, 0) = 0 [pid 481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 481] write(3, "1000", 4) = 4 [pid 481] close(3) = 0 [pid 481] write(1, "executing program\n", 18) = 18 executing program [pid 481] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 481] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 481] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 481] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 481] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 481] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 481] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 481] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 479] <... openat resumed>) = 3 [pid 478] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=478, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 479] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] <... restart_syscall resumed>) = 0 [pid 479] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 482 attached [pid 479] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 482 [pid 479] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 479] <... openat resumed>) = 4 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 479] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 479] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 479] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 479] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 481] <... ioctl resumed>) = 0 [pid 480] <... ioctl resumed>) = 0 [pid 481] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 480] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 481] <... write resumed>) = 24 [pid 480] <... write resumed>) = 24 [pid 477] +++ exited with 0 +++ [pid 481] exit_group(0 [pid 480] exit_group(0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=477, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 481] <... exit_group resumed>) = ? [pid 480] <... exit_group resumed>) = ? [pid 482] set_robust_list(0x55555a62f6a0, 24 [pid 480] +++ exited with 0 +++ [pid 482] <... set_robust_list resumed>) = 0 [pid 481] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=481, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=480, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 479] <... ioctl resumed>) = 0 [pid 479] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 479] exit_group(0 [pid 482] rt_sigprocmask(SIG_SETMASK, [] [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 482] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 479] <... exit_group resumed>) = ? [pid 482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 482] setpgid(0, 0) = 0 [pid 482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 479] +++ exited with 0 +++ [pid 482] write(3, "1000", 4) = 4 [pid 482] close(3) = 0 [pid 482] write(1, "executing program\n", 18) = 18 executing program [pid 482] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 482] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 482] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=479, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 482] <... ioctl resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 482] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 482] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 482] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 482] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 26.707132][ T478] input: syz0 as /devices/virtual/input/input148 [ 26.710124][ T477] input: syz0 as /devices/virtual/input/input149 [ 26.728866][ T480] input: syz0 as /devices/virtual/input/input150 [ 26.738983][ T481] input: syz0 as /devices/virtual/input/input151 [ 26.749271][ T479] input: syz0 as /devices/virtual/input/input152 [pid 482] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 483 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 484 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 485 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... restart_syscall resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 485 attached ci2-android-6-1/strace-static-x86_64: Process 484 attached ci2-android-6-1/strace-static-x86_64: Process 483 attached [pid 482] <... ioctl resumed>) = 0 [pid 485] set_robust_list(0x55555a62f6a0, 24 [pid 484] set_robust_list(0x55555a62f6a0, 24 [pid 483] set_robust_list(0x55555a62f6a0, 24 [pid 482] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 485] <... set_robust_list resumed>) = 0 [pid 484] <... set_robust_list resumed>) = 0 [pid 483] <... set_robust_list resumed>) = 0 [pid 482] <... write resumed>) = 24 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 485] rt_sigprocmask(SIG_SETMASK, [] [pid 484] rt_sigprocmask(SIG_SETMASK, [] [pid 483] rt_sigprocmask(SIG_SETMASK, [] [pid 482] exit_group(0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 485] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 484] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 483] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 482] <... exit_group resumed>) = ? [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 486 [pid 485] <... prctl resumed>) = 0 [pid 484] <... prctl resumed>) = 0 [pid 483] <... prctl resumed>) = 0 [pid 485] setpgid(0, 0 [pid 484] setpgid(0, 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 483] setpgid(0, 0ci2-android-6-1/strace-static-x86_64: Process 486 attached [pid 485] <... setpgid resumed>) = 0 [pid 484] <... setpgid resumed>) = 0 [pid 482] +++ exited with 0 +++ [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 483] <... setpgid resumed>) = 0 [pid 483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=482, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 483] <... openat resumed>) = 3 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 484] <... openat resumed>) = 3 [pid 483] write(3, "1000", 4 [pid 484] write(3, "1000", 4 [pid 483] <... write resumed>) = 4 [pid 484] <... write resumed>) = 4 [pid 485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 484] close(3 [pid 483] close(3 [pid 484] <... close resumed>) = 0 [pid 483] <... close resumed>) = 0 [pid 484] write(1, "executing program\n", 18 [pid 483] write(1, "executing program\n", 18 [pid 484] <... write resumed>) = 18 [pid 483] <... write resumed>) = 18 [pid 484] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 485] <... openat resumed>) = 3 executing program executing program [pid 483] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 484] <... openat resumed>) = 3 [pid 485] write(3, "1000", 4 [pid 483] <... openat resumed>) = 3 [pid 484] ioctl(3, VT_ACTIVATE, 0x14 [pid 485] <... write resumed>) = 4 [pid 483] ioctl(3, VT_ACTIVATE, 0x14 [pid 485] close(3 [pid 484] <... ioctl resumed>) = 0 [pid 485] <... close resumed>) = 0 [pid 483] <... ioctl resumed>) = 0 [pid 485] write(1, "executing program\n", 18 [pid 484] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 483] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 485] <... write resumed>) = 18 [pid 484] <... ioctl resumed>) = 0 [pid 485] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 483] <... ioctl resumed>) = 0 [pid 484] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 486] set_robust_list(0x55555a62f6a0, 24 [pid 483] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 484] <... openat resumed>) = 4 executing program [pid 486] <... set_robust_list resumed>) = 0 [pid 485] <... openat resumed>) = 3 [pid 484] ioctl(4, UI_SET_EVBIT, 0x1 [pid 483] <... openat resumed>) = 4 [pid 486] rt_sigprocmask(SIG_SETMASK, [] [pid 485] ioctl(3, VT_ACTIVATE, 0x14 [pid 484] <... ioctl resumed>) = 0 [pid 483] ioctl(4, UI_SET_EVBIT, 0x1 [pid 484] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 485] <... ioctl resumed>) = 0 [pid 483] <... ioctl resumed>) = 0 [pid 486] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 484] <... ioctl resumed>) = 0 [pid 484] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 483] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 485] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 484] <... ioctl resumed>) = 0 [pid 483] <... ioctl resumed>) = 0 [pid 484] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 486] <... prctl resumed>) = 0 [pid 485] <... ioctl resumed>) = 0 [pid 483] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 486] setpgid(0, 0) = 0 [pid 486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 486] write(3, "1000", 4) = 4 [pid 486] close(3) = 0 [pid 486] write(1, "executing program\n", 18) = 18 executing program [pid 486] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 485] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 485] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 485] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 485] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 483] <... ioctl resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 486] <... openat resumed>) = 3 [pid 485] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 483] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 486] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 484] <... ioctl resumed>) = 0 [pid 486] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 486] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 486] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 486] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 486] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 486] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 487 [pid 485] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 485] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 485] exit_group(0) = ? [pid 484] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 484] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 487 attached [pid 487] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 487] setpgid(0, 0) = 0 [pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 487] write(3, "1000", 4) = 4 [pid 487] close(3) = 0 executing program [pid 487] write(1, "executing program\n", 18) = 18 [pid 487] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 26.768017][ T482] input: syz0 as /devices/virtual/input/input153 [ 26.782736][ T484] input: syz0 as /devices/virtual/input/input154 [ 26.790464][ T485] input: syz0 as /devices/virtual/input/input156 [ 26.790571][ T483] input: syz0 as /devices/virtual/input/input155 [ 26.809879][ T486] input: syz0 as /devices/virtual/input/input157 [pid 486] <... ioctl resumed>) = ? [pid 487] <... openat resumed>) = 3 [pid 485] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=485, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 487] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 483] <... ioctl resumed>) = 0 [pid 487] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 484] +++ exited with 0 +++ [pid 483] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=484, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 483] <... write resumed>) = 24 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 487] <... ioctl resumed>) = 0 [pid 483] exit_group(0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 487] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 483] <... exit_group resumed>) = ? [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 488 ci2-android-6-1/strace-static-x86_64: Process 488 attached [pid 487] <... openat resumed>) = 4 [pid 486] +++ killed by SIGKILL +++ [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=486, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 488] set_robust_list(0x55555a62f6a0, 24 [pid 487] ioctl(4, UI_SET_EVBIT, 0x1 [pid 483] +++ exited with 0 +++ [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 487] <... ioctl resumed>) = 0 [pid 488] <... set_robust_list resumed>) = 0 [pid 487] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=483, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 487] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 488] rt_sigprocmask(SIG_SETMASK, [] [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 487] <... ioctl resumed>) = 0 [pid 488] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 487] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... restart_syscall resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 488] <... openat resumed>) = 3 [pid 487] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... restart_syscall resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 490 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 489 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 491 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] <... close resumed>) = 0 [pid 488] write(1, "executing program\n", 18) = 18 executing program [pid 488] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 488] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 488] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 487] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 488] openat(AT_FDCWD, "/dev/uinput", O_RDWRci2-android-6-1/strace-static-x86_64: Process 489 attached ci2-android-6-1/strace-static-x86_64: Process 490 attached [pid 490] set_robust_list(0x55555a62f6a0, 24 [pid 489] set_robust_list(0x55555a62f6a0, 24 [pid 487] exit_group(0 [pid 489] <... set_robust_list resumed>) = 0 [pid 490] <... set_robust_list resumed>) = 0 [pid 489] rt_sigprocmask(SIG_SETMASK, [] [pid 490] rt_sigprocmask(SIG_SETMASK, [] [pid 488] <... openat resumed>) = 4 [pid 488] ioctl(4, UI_SET_EVBIT, 0x1 [pid 490] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 489] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 488] <... ioctl resumed>) = 0 [pid 487] <... exit_group resumed>) = ? [pid 489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 489] <... prctl resumed>) = 0 [pid 490] <... prctl resumed>) = 0 [pid 489] setpgid(0, 0 [pid 488] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 488] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 488] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 489] <... setpgid resumed>) = 0 [pid 490] setpgid(0, 0 [pid 489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 490] <... setpgid resumed>) = 0 [pid 489] <... openat resumed>) = 3 [pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-android-6-1/strace-static-x86_64: Process 491 attached [pid 489] write(3, "1000", 4 [pid 490] <... openat resumed>) = 3 [pid 489] <... write resumed>) = 4 [pid 491] set_robust_list(0x55555a62f6a0, 24 [pid 490] write(3, "1000", 4 [pid 489] close(3 [pid 491] <... set_robust_list resumed>) = 0 [pid 490] <... write resumed>) = 4 [pid 489] <... close resumed>) = 0 [pid 490] close(3 [pid 489] write(1, "executing program\n", 18 [pid 491] rt_sigprocmask(SIG_SETMASK, [] [pid 490] <... close resumed>) = 0 [pid 489] <... write resumed>) = 18 executing program [pid 491] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 490] write(1, "executing program\n", 18 [pid 489] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 490] <... write resumed>) = 18 [pid 490] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 491] <... prctl resumed>) = 0 executing program [pid 491] setpgid(0, 0) = 0 [pid 491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 491] write(3, "1000", 4) = 4 [pid 491] close(3) = 0 [pid 491] write(1, "executing program\n", 18) = 18 executing program [pid 491] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 490] <... openat resumed>) = 3 [pid 489] <... openat resumed>) = 3 [pid 490] ioctl(3, VT_ACTIVATE, 0x14 [pid 489] ioctl(3, VT_ACTIVATE, 0x14 [pid 490] <... ioctl resumed>) = 0 [pid 489] <... ioctl resumed>) = 0 [pid 491] <... openat resumed>) = 3 [pid 490] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 489] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 488] <... ioctl resumed>) = 0 [pid 487] +++ exited with 0 +++ [pid 488] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 488] exit_group(0) = ? [pid 491] ioctl(3, VT_ACTIVATE, 0x14) = ? [pid 490] <... ioctl resumed>) = 0 [pid 489] <... ioctl resumed>) = 0 [pid 490] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 489] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=487, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 490] <... openat resumed>) = 4 [pid 489] <... openat resumed>) = 4 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 490] ioctl(4, UI_SET_EVBIT, 0x1 [pid 489] ioctl(4, UI_SET_EVBIT, 0x1 [pid 490] <... ioctl resumed>) = 0 [pid 489] <... ioctl resumed>) = 0 [pid 490] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 489] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 490] <... ioctl resumed>) = 0 [pid 489] <... ioctl resumed>) = 0 [pid 490] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 489] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 490] <... ioctl resumed>) = 0 [pid 489] <... ioctl resumed>) = 0 [pid 490] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [ 26.816959][ T19] tty tty20: SAK: killed process 486 (syz-executor133): by fd#3 [ 26.830849][ T487] input: syz0 as /devices/virtual/input/input158 [ 26.847127][ T488] input: syz0 as /devices/virtual/input/input159 [ 26.856330][ T19] tty tty20: SAK: killed process 491 (syz-executor133): by fd#3 [pid 489] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 492 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 492 attached [pid 492] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 491] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=491, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 488] +++ exited with 0 +++ [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 493 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 492] <... write resumed>) = 4 [pid 492] close(3) = 0 [pid 492] write(1, "executing program\n", 18) = 18 executing program [pid 492] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 492] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 492] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 492] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 492] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 492] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 492] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 492] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 490] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 493 attached [pid 490] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 489] <... ioctl resumed>) = 0 [pid 489] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 489] exit_group(0) = ? [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 494 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 490] <... write resumed>) = 24 [pid 494] rt_sigprocmask(SIG_SETMASK, [] [pid 490] exit_group(0) = ? [pid 494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 494] setpgid(0, 0) = 0 [pid 494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 494] write(3, "1000", 4) = 4 [pid 494] close(3) = 0 [pid 492] <... ioctl resumed>) = 0 [pid 492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 492] exit_group(0) = ? [pid 489] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=489, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 494] write(1, "executing program\n", 18) = 18 executing program [pid 494] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 494] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 492] +++ exited with 0 +++ [pid 494] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 494] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 494] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 494] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 494] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 490] +++ exited with 0 +++ [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=490, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 493] set_robust_list(0x55555a62f6a0, 24 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 496 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 495 ci2-android-6-1/strace-static-x86_64: Process 495 attached [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 493] <... set_robust_list resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 495] set_robust_list(0x55555a62f6a0, 24 [pid 494] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 497 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] <... prctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 496] setpgid(0, 0) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4) = 4 [pid 496] close(3) = 0 [pid 496] write(1, "executing program\n", 18) = 18 executing program [pid 496] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 493] setpgid(0, 0 [pid 496] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 493] <... setpgid resumed>) = 0 [pid 496] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 496] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 496] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 496] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 496] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 496] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 495] <... set_robust_list resumed>) = 0 [pid 493] <... openat resumed>) = 3 [pid 493] write(3, "1000", 4 [pid 495] rt_sigprocmask(SIG_SETMASK, [] [pid 493] <... write resumed>) = 4 [pid 495] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 493] close(3) = 0 [pid 493] write(1, "executing program\n", 18ci2-android-6-1/strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 497] close(3) = 0 executing program [pid 497] write(1, "executing program\n", 18) = 18 [pid 497] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 497] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 497] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 497] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 497] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 497] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 497] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 497] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 493] <... write resumed>) = 18 executing program [pid 493] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 496] <... ioctl resumed>) = 0 [pid 496] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 496] exit_group(0) = ? [ 26.860084][ T490] input: syz0 as /devices/virtual/input/input160 [ 26.868359][ T489] input: syz0 as /devices/virtual/input/input161 [ 26.880243][ T492] input: syz0 as /devices/virtual/input/input162 [ 26.903483][ T496] input: syz0 as /devices/virtual/input/input164 [pid 495] <... prctl resumed>) = 0 [pid 493] <... openat resumed>) = ? [pid 495] setpgid(0, 0) = 0 [pid 495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 493] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=493, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 495] <... openat resumed>) = 3 [pid 496] +++ exited with 0 +++ [pid 495] write(3, "1000", 4) = 4 [pid 495] close(3) = 0 [pid 495] write(1, "executing program\n", 18) = 18 [pid 495] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 495] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 495] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 495] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 495] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 495] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 495] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 495] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 498 attached [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 498 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 498] setpgid(0, 0) = 0 [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 498] write(3, "1000", 4) = 4 [pid 498] close(3) = 0 [pid 498] write(1, "executing program\n", 18) = 18 executing program [pid 498] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 497] <... ioctl resumed>) = 0 [pid 495] <... ioctl resumed>) = 0 [pid 494] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 497] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 494] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 497] <... write resumed>) = 24 [pid 494] <... write resumed>) = 24 [pid 497] exit_group(0 [pid 494] exit_group(0 [pid 497] <... exit_group resumed>) = ? [pid 494] <... exit_group resumed>) = ? [pid 495] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 499 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] <... write resumed>) = 24 [pid 495] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 499 attached [pid 499] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 499] setpgid(0, 0) = 0 [pid 499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 499] write(3, "1000", 4) = 4 [pid 499] close(3) = 0 [pid 499] write(1, "executing program\n", 18) = 18 executing program [pid 499] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 498] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=498, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 497] +++ exited with 0 +++ [pid 494] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=497, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=494, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 499] <... openat resumed>) = 3 [pid 499] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 499] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 495] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=495, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 499] <... ioctl resumed>) = 0 [pid 499] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 499] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 499] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 499] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 26.914173][ T19] tty tty20: SAK: killed process 493 (syz-executor133): by fd#3 [ 26.916390][ T494] input: syz0 as /devices/virtual/input/input163 [ 26.922720][ T497] input: syz0 as /devices/virtual/input/input165 [ 26.938055][ T495] input: syz0 as /devices/virtual/input/input166 [ 26.947695][ T39] tty tty20: SAK: killed process 498 (syz-executor133): by fd#3 [ 26.955659][ T39] tty tty20: SAK: killed process 498 (syz-executor133): by fd#3 [pid 499] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 500 attached [pid 499] <... ioctl resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 500 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 502 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 501 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 503 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 503 attached ci2-android-6-1/strace-static-x86_64: Process 502 attached ci2-android-6-1/strace-static-x86_64: Process 501 attached [pid 500] set_robust_list(0x55555a62f6a0, 24 [pid 499] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 502] set_robust_list(0x55555a62f6a0, 24 [pid 500] <... set_robust_list resumed>) = 0 [pid 499] <... write resumed>) = 24 [pid 502] <... set_robust_list resumed>) = 0 [pid 500] rt_sigprocmask(SIG_SETMASK, [] [pid 499] exit_group(0 [pid 502] rt_sigprocmask(SIG_SETMASK, [] [pid 500] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 499] <... exit_group resumed>) = ? [pid 503] set_robust_list(0x55555a62f6a0, 24 [pid 502] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 503] <... set_robust_list resumed>) = 0 [pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 501] set_robust_list(0x55555a62f6a0, 24 [pid 500] <... prctl resumed>) = 0 [pid 501] <... set_robust_list resumed>) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [] [pid 500] setpgid(0, 0 [pid 501] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 502] <... prctl resumed>) = 0 [pid 501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 500] <... setpgid resumed>) = 0 [pid 501] <... prctl resumed>) = 0 [pid 501] setpgid(0, 0) = 0 [pid 501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 499] +++ exited with 0 +++ [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 501] <... openat resumed>) = 3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=499, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 501] write(3, "1000", 4 [pid 500] <... openat resumed>) = 3 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 501] <... write resumed>) = 4 [pid 501] close(3) = 0 [pid 501] write(1, "executing program\n", 18 executing program [pid 502] setpgid(0, 0 [pid 500] write(3, "1000", 4 [pid 501] <... write resumed>) = 18 [pid 501] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 500] <... write resumed>) = 4 [pid 502] <... setpgid resumed>) = 0 [pid 501] <... openat resumed>) = 3 [pid 500] close(3 [pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 501] ioctl(3, VT_ACTIVATE, 0x14 [pid 500] <... close resumed>) = 0 [pid 501] <... ioctl resumed>) = 0 [pid 501] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 500] write(1, "executing program\n", 18 [pid 501] <... ioctl resumed>) = 0 executing program [pid 502] <... openat resumed>) = 3 [pid 500] <... write resumed>) = 18 [pid 501] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 502] write(3, "1000", 4 [pid 500] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 501] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 501] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 501] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 501] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 502] <... write resumed>) = 4 [pid 500] <... openat resumed>) = 3 [pid 310] <... restart_syscall resumed>) = 0 [pid 502] close(3 [pid 500] ioctl(3, VT_ACTIVATE, 0x14 [pid 503] rt_sigprocmask(SIG_SETMASK, [] [pid 502] <... close resumed>) = 0 [pid 502] write(1, "executing program\n", 18) = 18 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] executing program [pid 502] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 504 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 503] setpgid(0, 0) = 0 [pid 503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 503] write(3, "1000", 4) = 4 [pid 503] close(3) = 0 executing program [pid 503] write(1, "executing program\n", 18) = 18 [pid 503] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 504] setpgid(0, 0) = 0 [pid 504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 504] write(3, "1000", 4) = 4 [pid 504] close(3) = 0 [pid 504] write(1, "executing program\n", 18) = 18 executing program [pid 504] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 502] <... openat resumed>) = 3 [pid 500] <... ioctl resumed>) = 0 [pid 504] <... openat resumed>) = 3 [pid 503] <... openat resumed>) = 3 [pid 502] ioctl(3, VT_ACTIVATE, 0x14 [pid 500] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 502] <... ioctl resumed>) = 0 [pid 500] <... ioctl resumed>) = 0 [pid 502] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 504] ioctl(3, VT_ACTIVATE, 0x14 [pid 503] ioctl(3, VT_ACTIVATE, 0x14 [pid 501] <... ioctl resumed>) = 0 [pid 500] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 503] <... ioctl resumed>) = 0 [pid 503] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 503] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 502] <... ioctl resumed>) = 0 [pid 500] <... openat resumed>) = 4 [pid 502] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 500] ioctl(4, UI_SET_EVBIT, 0x1 [pid 503] <... openat resumed>) = 4 [pid 502] <... openat resumed>) = 4 [pid 500] <... ioctl resumed>) = 0 [pid 502] ioctl(4, UI_SET_EVBIT, 0x1 [pid 500] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 503] ioctl(4, UI_SET_EVBIT, 0x1 [pid 502] <... ioctl resumed>) = 0 [pid 500] <... ioctl resumed>) = 0 [pid 502] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 500] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 502] <... ioctl resumed>) = 0 [pid 500] <... ioctl resumed>) = 0 [pid 502] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 500] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 502] <... ioctl resumed>) = 0 [pid 503] <... ioctl resumed>) = 0 [pid 503] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 503] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 503] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 502] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [ 26.971981][ T499] input: syz0 as /devices/virtual/input/input167 [ 26.990443][ T501] input: syz0 as /devices/virtual/input/input168 [ 27.000055][ T500] input: syz0 as /devices/virtual/input/input169 [ 27.000250][ T503] input: syz0 as /devices/virtual/input/input171 [ 27.015542][ T502] input: syz0 as /devices/virtual/input/input170 [pid 501] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 504] <... ioctl resumed>) = 0 [pid 501] <... write resumed>) = 24 [pid 503] <... ioctl resumed>) = 0 [pid 504] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 501] exit_group(0 [pid 504] <... ioctl resumed>) = 0 [pid 501] <... exit_group resumed>) = ? [pid 504] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 502] <... ioctl resumed>) = 0 [pid 500] <... ioctl resumed>) = 0 [pid 504] <... openat resumed>) = 4 [pid 504] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 504] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 502] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 500] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 504] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 503] +++ killed by SIGKILL +++ [pid 501] +++ exited with 0 +++ [pid 500] <... write resumed>) = 24 [pid 502] <... write resumed>) = 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=503, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 504] <... ioctl resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=501, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 504] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 500] exit_group(0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 505 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 506 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 506] setpgid(0, 0) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] write(1, "executing program\n", 18) = 18 [pid 506] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 505] setpgid(0, 0) = 0 [pid 505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 505] write(3, "1000", 4) = 4 [pid 505] close(3) = 0 [pid 505] write(1, "executing program\n", 18) = 18 [pid 505] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 502] exit_group(0) = ? [pid 500] <... exit_group resumed>) = ? executing program executing program [pid 506] <... openat resumed>) = ? [pid 504] <... ioctl resumed>) = 0 [pid 504] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 504] exit_group(0) = ? [pid 502] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=502, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 505] <... openat resumed>) = 3 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 505] ioctl(3, VT_ACTIVATE, 0x14 [pid 500] +++ exited with 0 +++ [pid 505] <... ioctl resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 505] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 506] +++ killed by SIGKILL +++ [pid 505] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=506, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 505] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 505] <... openat resumed>) = 4 [pid 505] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 505] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 505] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 505] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 507 attached [pid 505] <... ioctl resumed>) = 0 [pid 504] +++ exited with 0 +++ [pid 505] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=504, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 507 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 509 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 508 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 505] exit_group(0) = ? [pid 507] set_robust_list(0x55555a62f6a0, 24ci2-android-6-1/strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x55555a62f6a0, 24 [pid 507] <... set_robust_list resumed>) = 0 [pid 507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 507] setpgid(0, 0 [pid 505] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=505, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 507] <... setpgid resumed>) = 0 [pid 507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ci2-android-6-1/strace-static-x86_64: Process 508 attached [pid 509] <... set_robust_list resumed>) = 0 [pid 507] write(3, "1000", 4) = 4 [pid 509] rt_sigprocmask(SIG_SETMASK, [] [pid 507] close(3 [pid 508] set_robust_list(0x55555a62f6a0, 24 [pid 507] <... close resumed>) = 0 [pid 509] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 508] <... set_robust_list resumed>) = 0 [pid 507] write(1, "executing program\n", 18 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 508] rt_sigprocmask(SIG_SETMASK, [] executing program [pid 507] <... write resumed>) = 18 [pid 509] <... prctl resumed>) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 508] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 507] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 509] write(3, "1000", 4) = 4 [pid 509] close(3) = 0 [pid 509] write(1, "executing program\n", 18) = 18 executing program [pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 509] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 508] <... prctl resumed>) = 0 [pid 508] setpgid(0, 0 [pid 507] <... openat resumed>) = 3 [pid 509] <... openat resumed>) = 3 [pid 509] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 508] <... setpgid resumed>) = 0 [pid 507] ioctl(3, VT_ACTIVATE, 0x14 [pid 509] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 509] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 509] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 509] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 507] <... ioctl resumed>) = 0 [pid 509] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 509] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [ 27.026525][ T39] tty tty20: SAK: killed process 503 (syz-executor133): by fd#3 [ 27.046979][ T504] input: syz0 as /devices/virtual/input/input172 [ 27.054576][ T19] tty tty20: SAK: killed process 506 (syz-executor133): by fd#3 [ 27.067788][ T505] input: syz0 as /devices/virtual/input/input173 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 510 attached [pid 508] <... openat resumed>) = 3 [pid 507] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 508] write(3, "1000", 4 [pid 507] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 510 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 511 [pid 508] <... write resumed>) = 4 [pid 507] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 508] close(3 [pid 507] <... openat resumed>) = 4 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 508] <... close resumed>) = 0 [pid 507] ioctl(4, UI_SET_EVBIT, 0x1 [pid 508] write(1, "executing program\n", 18 [pid 507] <... ioctl resumed>) = 0 [pid 508] <... write resumed>) = 18 executing program [pid 507] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 508] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 507] <... ioctl resumed>) = 0 [pid 507] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 507] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 511 attached [pid 510] set_robust_list(0x55555a62f6a0, 24 [pid 509] <... ioctl resumed>) = 0 [pid 508] <... openat resumed>) = 3 [pid 511] set_robust_list(0x55555a62f6a0, 24 [pid 508] ioctl(3, VT_ACTIVATE, 0x14 [pid 511] <... set_robust_list resumed>) = 0 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 511] setpgid(0, 0) = 0 [pid 511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 511] write(3, "1000", 4) = 4 [pid 511] close(3) = 0 [pid 511] write(1, "executing program\n", 18) = 18 [pid 511] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 509] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 509] exit_group(0 [pid 510] <... set_robust_list resumed>) = 0 [pid 510] rt_sigprocmask(SIG_SETMASK, [] [pid 509] <... exit_group resumed>) = ? [pid 510] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 510] setpgid(0, 0) = 0 [pid 510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 510] write(3, "1000", 4) = 4 [pid 510] close(3) = 0 [pid 510] write(1, "executing program\n", 18) = 18 executing program executing program [pid 510] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 511] <... openat resumed>) = 3 [pid 508] <... ioctl resumed>) = ? [pid 511] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 508] +++ killed by SIGKILL +++ [pid 511] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=508, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 511] <... ioctl resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 511] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 510] <... openat resumed>) = 3 [pid 510] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 510] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 511] <... openat resumed>) = 4 [pid 510] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 510] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 510] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 510] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 510] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 511] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 511] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 507] <... ioctl resumed>) = 0 [pid 507] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 507] exit_group(0) = ? [pid 511] <... ioctl resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 511] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 509] +++ exited with 0 +++ [pid 511] <... ioctl resumed>) = 0 [pid 511] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=509, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 512 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 512 attached [pid 511] <... ioctl resumed>) = 0 [pid 507] +++ exited with 0 +++ [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=507, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 513 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] <... ioctl resumed>) = 0 [pid 510] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 510] exit_group(0) = ? [pid 511] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 514 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] exit_group(0) = ? [pid 512] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 512] setpgid(0, 0) = 0 [pid 512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 512] write(3, "1000", 4) = 4 [pid 512] close(3) = 0 [pid 512] write(1, "executing program\n", 18) = 18 executing program [pid 512] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 512] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 512] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 512] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 512] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 512] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 512] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 512] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 510] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=510, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 511] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=511, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 27.084876][ T509] input: syz0 as /devices/virtual/input/input174 [ 27.091845][ T507] input: syz0 as /devices/virtual/input/input175 [ 27.098619][ T39] tty tty20: SAK: killed process 508 (syz-executor133): by fd#3 [ 27.110950][ T510] input: syz0 as /devices/virtual/input/input176 [ 27.118840][ T511] input: syz0 as /devices/virtual/input/input177 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-6-1/strace-static-x86_64: Process 514 attached ci2-android-6-1/strace-static-x86_64: Process 513 attached [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 514] set_robust_list(0x55555a62f6a0, 24 [pid 513] set_robust_list(0x55555a62f6a0, 24 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 515 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 516 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] <... set_robust_list resumed>) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 513] setpgid(0, 0) = 0 [pid 513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 513] write(3, "1000", 4) = 4 [pid 513] close(3) = 0 [pid 513] write(1, "executing program\n", 18) = 18 executing program [pid 513] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 513] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 513] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 513] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 513] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 513] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 513] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 513] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 514] <... set_robust_list resumed>) = 0 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 executing program [pid 514] write(1, "executing program\n", 18) = 18 [pid 514] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 514] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 514] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 514] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 514] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 514] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 514] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 514] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 516] setpgid(0, 0) = 0 [pid 516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 516] write(3, "1000", 4) = 4 [pid 516] close(3) = 0 [pid 516] write(1, "executing program\n", 18) = 18 [pid 516] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 515 attached executing program ) = 3 [pid 515] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 516] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 516] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 515] <... prctl resumed>) = 0 [pid 515] setpgid(0, 0) = 0 [pid 515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 516] <... ioctl resumed>) = 0 [pid 516] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 515] <... openat resumed>) = 3 [pid 516] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 516] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 516] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 516] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 515] write(3, "1000", 4) = 4 [pid 515] close(3) = 0 [pid 515] write(1, "executing program\n", 18) = 18 executing program [pid 515] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 512] <... ioctl resumed>) = 0 [pid 515] ioctl(3, VT_ACTIVATE, 0x14 [pid 512] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 512] exit_group(0) = ? [pid 515] <... ioctl resumed>) = 0 [pid 513] <... ioctl resumed>) = ? [pid 516] <... ioctl resumed>) = 0 [pid 514] <... ioctl resumed>) = 0 [pid 512] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=512, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 516] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 514] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 515] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 514] <... write resumed>) = 24 [pid 515] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 514] exit_group(0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 516] <... write resumed>) = 24 [pid 515] <... openat resumed>) = 4 [pid 514] <... exit_group resumed>) = ? [pid 513] +++ killed by SIGKILL +++ [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 517 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=513, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 515] ioctl(4, UI_SET_EVBIT, 0x1) = 0 ci2-android-6-1/strace-static-x86_64: Process 517 attached [pid 515] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 515] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 516] exit_group(0 [pid 515] <... ioctl resumed>) = 0 [pid 517] set_robust_list(0x55555a62f6a0, 24 [pid 516] <... exit_group resumed>) = ? [pid 515] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 514] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 27.133964][ T512] input: syz0 as /devices/virtual/input/input178 [ 27.149605][ T513] input: syz0 as /devices/virtual/input/input179 [ 27.150653][ T514] input: syz0 as /devices/virtual/input/input180 [ 27.159449][ T516] input: syz0 as /devices/virtual/input/input181 [ 27.169838][ T19] tty tty20: SAK: killed process 513 (syz-executor133): by fd#3 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 517] <... set_robust_list resumed>) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 517] setpgid(0, 0) = 0 [pid 517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 517] write(3, "1000", 4) = 4 [pid 517] close(3) = 0 [pid 517] write(1, "executing program\n", 18) = 18 executing program [pid 517] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 518 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 519 [pid 517] <... openat resumed>) = 3 [pid 517] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 517] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 517] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 517] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 517] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 517] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 517] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 519 attached ci2-android-6-1/strace-static-x86_64: Process 518 attached [pid 519] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 519] setpgid(0, 0) = 0 [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] write(3, "1000", 4) = 4 [pid 519] close(3) = 0 [pid 519] write(1, "executing program\n", 18) = 18 [pid 519] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR executing program [pid 518] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 518] setpgid(0, 0) = 0 [pid 518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] <... openat resumed>) = 3 [pid 518] write(3, "1000", 4 [pid 519] ioctl(3, VT_ACTIVATE, 0x14 [pid 518] <... write resumed>) = 4 [pid 518] close(3) = 0 [pid 518] write(1, "executing program\n", 18 [pid 519] <... ioctl resumed>) = 0 [pid 515] <... ioctl resumed>) = 0 [pid 519] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 518] <... write resumed>) = 18 [pid 517] <... ioctl resumed>) = 0 [pid 516] +++ exited with 0 +++ [pid 515] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 519] <... ioctl resumed>) = 0 [pid 515] <... write resumed>) = 24 [pid 519] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 515] exit_group(0 [pid 519] <... openat resumed>) = 4 [pid 515] <... exit_group resumed>) = ? executing program [pid 519] ioctl(4, UI_SET_EVBIT, 0x1 [pid 515] +++ exited with 0 +++ [pid 519] <... ioctl resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=515, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=516, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 519] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 519] <... ioctl resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 519] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 519] <... ioctl resumed>) = 0 [pid 519] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 520 attached [pid 518] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 517] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 520 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] <... write resumed>) = 24 [pid 520] set_robust_list(0x55555a62f6a0, 24 [pid 517] exit_group(0 [pid 520] <... set_robust_list resumed>) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [] [pid 517] <... exit_group resumed>) = ? [pid 520] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 520] setpgid(0, 0) = 0 [pid 519] <... ioctl resumed>) = 0 [pid 518] <... openat resumed>) = ? [pid 519] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 519] exit_group(0) = ? [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 520] write(3, "1000", 4) = 4 [pid 520] close(3) = 0 [pid 520] write(1, "executing program\n", 18) = 18 executing program [pid 520] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 521 [pid 518] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=518, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- ci2-android-6-1/strace-static-x86_64: Process 521 attached [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 521] set_robust_list(0x55555a62f6a0, 24 [pid 520] <... openat resumed>) = 3 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 522 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 520] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 520] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 517] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=517, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 520] <... ioctl resumed>) = 0 [pid 520] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 520] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 520] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 520] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 520] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 522 attached [pid 521] <... set_robust_list resumed>) = 0 [pid 522] set_robust_list(0x55555a62f6a0, 24 [pid 521] rt_sigprocmask(SIG_SETMASK, [] [pid 522] <... set_robust_list resumed>) = 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [] [pid 521] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 521] <... prctl resumed>) = 0 [pid 521] setpgid(0, 0) = 0 [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 521] write(3, "1000", 4) = 4 [pid 521] close(3) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 523 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=519, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 520] <... ioctl resumed>) = 0 [pid 520] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 520] exit_group(0) = ? [pid 521] write(1, "executing program\n", 18) = 18 [pid 521] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 executing program [pid 521] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 521] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 521] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 521] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 521] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [ 27.193893][ T515] input: syz0 as /devices/virtual/input/input182 [ 27.202465][ T517] input: syz0 as /devices/virtual/input/input183 [ 27.218161][ T519] input: syz0 as /devices/virtual/input/input184 [ 27.225084][ T421] tty tty20: SAK: killed process 518 (syz-executor133): by fd#3 [ 27.237185][ T520] input: syz0 as /devices/virtual/input/input185 [pid 521] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 521] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] <... restart_syscall resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x55555a62f6a0, 24 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 523] <... set_robust_list resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 523] rt_sigprocmask(SIG_SETMASK, [] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 523] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 523] setpgid(0, 0) = 0 [pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 523] write(3, "1000", 4) = 4 [pid 523] close(3) = 0 [pid 523] write(1, "executing program\n", 18) = 18 [pid 523] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 523] ioctl(3, VT_ACTIVATE, 0x14) = 0 executing program [pid 523] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 523] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 523] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 523] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 523] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 523] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 524 attached [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 521] <... ioctl resumed>) = 0 [pid 520] +++ exited with 0 +++ [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 524 [pid 524] set_robust_list(0x55555a62f6a0, 24 [pid 522] <... prctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 524] <... set_robust_list resumed>) = 0 [pid 522] setpgid(0, 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 524] rt_sigprocmask(SIG_SETMASK, [] [pid 522] <... setpgid resumed>) = 0 [pid 524] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 521] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 523] <... ioctl resumed>) = 0 [pid 522] <... openat resumed>) = 3 [pid 521] <... write resumed>) = 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=520, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 524] <... prctl resumed>) = 0 [pid 523] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 522] write(3, "1000", 4 [pid 521] exit_group(0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 524] setpgid(0, 0 [pid 523] <... write resumed>) = 24 [pid 522] <... write resumed>) = 4 [pid 521] <... exit_group resumed>) = ? [pid 307] <... restart_syscall resumed>) = 0 [pid 524] <... setpgid resumed>) = 0 [pid 523] exit_group(0 [pid 522] close(3 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 523] <... exit_group resumed>) = ? [pid 522] <... close resumed>) = 0 [pid 524] <... openat resumed>) = 3 [pid 521] +++ exited with 0 +++ executing program [pid 522] write(1, "executing program\n", 18 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 522] <... write resumed>) = 18 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=521, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 522] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 524] write(3, "1000", 4 [pid 522] <... openat resumed>) = 3 [pid 524] <... write resumed>) = 4 [pid 522] ioctl(3, VT_ACTIVATE, 0x14 [pid 524] close(3 [pid 522] <... ioctl resumed>) = 0 [pid 524] <... close resumed>) = 0 [pid 523] +++ exited with 0 +++ [pid 522] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 525 [pid 524] write(1, "executing program\n", 18 [pid 522] <... ioctl resumed>) = 0 [pid 524] <... write resumed>) = 18 [pid 522] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=523, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 307] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 525 attached [pid 522] <... openat resumed>) = 4 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 525] set_robust_list(0x55555a62f6a0, 24 [pid 522] ioctl(4, UI_SET_EVBIT, 0x1 [pid 525] <... set_robust_list resumed>) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 525] rt_sigprocmask(SIG_SETMASK, [] [pid 522] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 525] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 524] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR executing program [pid 522] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] <... ioctl resumed>) = 0 [pid 525] <... prctl resumed>) = 0 [pid 522] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 525] setpgid(0, 0) = 0 [pid 525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 525] write(3, "1000", 4) = 4 [pid 525] close(3) = 0 [pid 525] write(1, "executing program\n", 18) = 18 [pid 525] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 524] <... openat resumed>) = 3 [pid 524] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 526 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 526] setpgid(0, 0) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 526] write(3, "1000", 4) = 4 [pid 526] close(3 [pid 525] <... openat resumed>) = 3 [pid 522] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 525] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 527 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 525] <... ioctl resumed>) = 0 [pid 524] <... ioctl resumed>) = 0 [pid 525] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 524] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 525] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 524] <... ioctl resumed>) = 0 [pid 525] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 525] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 525] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 525] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 527 attached [pid 526] <... close resumed>) = 0 [pid 524] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 522] <... write resumed>) = 24 [pid 524] <... openat resumed>) = 4 [pid 524] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 524] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 524] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 27.247955][ T521] input: syz0 as /devices/virtual/input/input186 [ 27.258074][ T523] input: syz0 as /devices/virtual/input/input187 [ 27.278091][ T522] input: syz0 as /devices/virtual/input/input188 [ 27.289307][ T525] input: syz0 as /devices/virtual/input/input189 [pid 524] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 527] set_robust_list(0x55555a62f6a0, 24 [pid 526] write(1, "executing program\n", 18 [pid 525] <... ioctl resumed>) = 0 [pid 522] exit_group(0 [pid 525] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 525] exit_group(0) = ? [pid 526] <... write resumed>) = 18 [pid 527] <... set_robust_list resumed>) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [] [pid 526] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 527] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 522] <... exit_group resumed>) = ? [pid 527] <... prctl resumed>) = 0 [pid 527] setpgid(0, 0) = 0 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 527] write(3, "1000", 4) = 4 [pid 527] close(3) = 0 [pid 527] write(1, "executing program\n", 18) = 18 executing program executing program [pid 527] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 526] <... openat resumed>) = 3 [pid 526] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 525] +++ exited with 0 +++ [pid 526] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=525, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 526] <... ioctl resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 526] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 526] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 526] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 526] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 526] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 527] <... openat resumed>) = 3 [pid 527] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 527] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 524] <... ioctl resumed>) = 0 [pid 522] +++ exited with 0 +++ [pid 307] <... restart_syscall resumed>) = 0 [pid 527] <... ioctl resumed>) = 0 [pid 526] <... ioctl resumed>) = 0 [pid 524] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=522, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 527] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 526] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 524] <... write resumed>) = 24 [pid 527] <... openat resumed>) = 4 [pid 526] <... write resumed>) = 24 [pid 524] exit_group(0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 527] ioctl(4, UI_SET_EVBIT, 0x1 [pid 526] exit_group(0 [pid 524] <... exit_group resumed>) = ? [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 527] <... ioctl resumed>) = 0 [pid 526] <... exit_group resumed>) = ? [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 527] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 524] +++ exited with 0 +++ [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 527] <... ioctl resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 528 [pid 527] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 529 [pid 527] <... ioctl resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 527] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 529 attached ci2-android-6-1/strace-static-x86_64: Process 528 attached [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=524, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 529] set_robust_list(0x55555a62f6a0, 24 [pid 528] set_robust_list(0x55555a62f6a0, 24 [pid 529] <... set_robust_list resumed>) = 0 [pid 528] <... set_robust_list resumed>) = 0 [pid 529] rt_sigprocmask(SIG_SETMASK, [] [pid 528] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 529] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 528] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 529] <... prctl resumed>) = 0 [pid 528] <... prctl resumed>) = 0 [pid 529] setpgid(0, 0 [pid 528] setpgid(0, 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 530 ci2-android-6-1/strace-static-x86_64: Process 530 attached [pid 526] +++ exited with 0 +++ [pid 530] set_robust_list(0x55555a62f6a0, 24 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=526, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 530] <... set_robust_list resumed>) = 0 [pid 527] <... ioctl resumed>) = 0 [pid 530] rt_sigprocmask(SIG_SETMASK, [] [pid 527] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 530] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 529] <... setpgid resumed>) = 0 [pid 528] <... setpgid resumed>) = 0 [pid 527] <... write resumed>) = 24 [pid 530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 527] exit_group(0 [pid 530] <... prctl resumed>) = 0 [pid 527] <... exit_group resumed>) = ? [pid 530] setpgid(0, 0 [pid 529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 530] <... setpgid resumed>) = 0 [pid 530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 529] <... openat resumed>) = 3 [pid 528] <... openat resumed>) = 3 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 529] write(3, "1000", 4 [pid 530] write(3, "1000", 4) = 4 [pid 530] close(3) = 0 [pid 530] write(1, "executing program\n", 18 [pid 528] write(3, "1000", 4 [pid 529] <... write resumed>) = 4 [pid 530] <... write resumed>) = 18 [pid 528] <... write resumed>) = 4 executing program [pid 530] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 530] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 529] close(3 [pid 528] close(3 [pid 530] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 529] <... close resumed>) = 0 [pid 528] <... close resumed>) = 0 [pid 530] <... ioctl resumed>) = 0 [pid 528] write(1, "executing program\n", 18 [pid 530] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 529] write(1, "executing program\n", 18 [pid 530] <... openat resumed>) = 4 [pid 528] <... write resumed>) = 18 [pid 529] <... write resumed>) = 18 [pid 530] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 530] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 529] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 528] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 530] <... ioctl resumed>) = 0 [pid 530] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 530] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 529] <... openat resumed>) = 3 executing program executing program [pid 529] ioctl(3, VT_ACTIVATE, 0x14 [pid 528] <... openat resumed>) = 3 [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(3, VT_ACTIVATE, 0x14 [ 27.290735][ T524] input: syz0 as /devices/virtual/input/input190 [ 27.309814][ T526] input: syz0 as /devices/virtual/input/input191 [ 27.324024][ T327] udevd[327]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 27.326288][ T527] input: syz0 as /devices/virtual/input/input192 [pid 529] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 528] <... ioctl resumed>) = 0 [pid 527] +++ exited with 0 +++ [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=527, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 529] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 528] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 529] <... openat resumed>) = 4 [pid 528] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 529] ioctl(4, UI_SET_EVBIT, 0x1 [pid 528] <... openat resumed>) = 4 [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(4, UI_SET_EVBIT, 0x1 [pid 529] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 528] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 529] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 528] <... ioctl resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 529] <... ioctl resumed>) = 0 [pid 528] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 529] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 528] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 531 ci2-android-6-1/strace-static-x86_64: Process 531 attached [pid 531] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 531] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 531] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 531] <... prctl resumed>) = 0 [pid 531] setpgid(0, 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 532 [pid 531] <... setpgid resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 531] <... openat resumed>) = 3 [pid 531] write(3, "1000", 4) = 4 [pid 531] close(3) = 0 [pid 531] write(1, "executing program\n", 18) = 18 executing program [pid 531] openat(AT_FDCWD, "/dev/char/4:28", O_RDWRci2-android-6-1/strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 531] <... openat resumed>) = 3 [pid 530] <... ioctl resumed>) = 0 [pid 528] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 531] ioctl(3, VT_ACTIVATE, 0x14 [pid 530] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 531] <... ioctl resumed>) = 0 [pid 530] <... write resumed>) = 24 [pid 532] write(3, "1000", 4 [pid 531] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 530] exit_group(0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 531] <... ioctl resumed>) = 0 [pid 530] <... exit_group resumed>) = ? [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 532] <... write resumed>) = 4 [pid 531] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 529] <... ioctl resumed>) = ? [pid 531] <... openat resumed>) = 4 [pid 531] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 531] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 531] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 531] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 532] close(3) = 0 [pid 532] write(1, "executing program\n", 18) = 18 executing program [pid 532] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 528] <... ioctl resumed>) = 0 [pid 528] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 528] exit_group(0) = ? [pid 532] <... openat resumed>) = 3 [pid 532] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 532] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 532] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 532] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 532] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 532] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 532] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 530] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=530, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 533 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 27.349113][ T530] input: syz0 as /devices/virtual/input/input193 [ 27.354881][ T529] input: syz0 as /devices/virtual/input/input194 [ 27.363482][ T528] input: syz0 as /devices/virtual/input/input195 [ 27.375037][ T421] tty tty20: SAK: killed process 529 (syz-executor133): by fd#3 [ 27.378358][ T531] input: syz0 as /devices/virtual/input/input196 ci2-android-6-1/strace-static-x86_64: Process 533 attached [pid 529] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=529, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 533] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 534 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 533] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 533] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 533] setpgid(0, 0) = 0 [pid 533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 528] +++ exited with 0 +++ [pid 533] <... openat resumed>) = 3 [pid 533] write(3, "1000", 4) = 4 [pid 533] close(3) = 0 [pid 533] write(1, "executing program\n", 18) = 18 executing program [pid 533] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 533] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 533] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 533] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 533] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 533] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=528, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 533] <... ioctl resumed>) = 0 [pid 533] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 533] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 531] <... ioctl resumed>) = 0 [pid 531] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 531] exit_group(0ci2-android-6-1/strace-static-x86_64: Process 534 attached [pid 532] <... ioctl resumed>) = 0 [pid 531] <... exit_group resumed>) = ? [pid 532] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 531] +++ exited with 0 +++ [pid 307] <... restart_syscall resumed>) = 0 [pid 532] exit_group(0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=531, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 532] <... exit_group resumed>) = ? [pid 532] +++ exited with 0 +++ [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 534] set_robust_list(0x55555a62f6a0, 24 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 535 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 536 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 535] setpgid(0, 0) = 0 [pid 535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 535] write(3, "1000", 4) = 4 [pid 535] close(3) = 0 [pid 535] write(1, "executing program\n", 18) = 18 [pid 535] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 535] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 535] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 ci2-android-6-1/strace-static-x86_64: Process 536 attached [pid 535] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 536] set_robust_list(0x55555a62f6a0, 24 [pid 535] ioctl(4, UI_SET_EVBIT, 0x1 [pid 536] <... set_robust_list resumed>) = 0 [pid 535] <... ioctl resumed>) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [] [pid 535] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 534] <... set_robust_list resumed>) = 0 executing program [pid 535] <... ioctl resumed>) = 0 [pid 536] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 535] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... restart_syscall resumed>) = 0 [pid 535] <... ioctl resumed>) = 0 [pid 535] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 27.393432][ T532] input: syz0 as /devices/virtual/input/input197 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 536] <... prctl resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 537 ci2-android-6-1/strace-static-x86_64: Process 537 attached [pid 534] rt_sigprocmask(SIG_SETMASK, [] [pid 533] <... ioctl resumed>) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 executing program [pid 536] write(1, "executing program\n", 18) = 18 [pid 536] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 533] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 537] set_robust_list(0x55555a62f6a0, 24 [pid 536] <... openat resumed>) = 3 [pid 534] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 537] <... set_robust_list resumed>) = 0 [pid 537] rt_sigprocmask(SIG_SETMASK, [] [pid 536] ioctl(3, VT_ACTIVATE, 0x14 [pid 534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 533] <... write resumed>) = 24 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 537] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 534] <... prctl resumed>) = 0 [pid 537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 536] <... ioctl resumed>) = 0 [pid 534] setpgid(0, 0 [pid 537] <... prctl resumed>) = 0 [pid 534] <... setpgid resumed>) = 0 [pid 537] setpgid(0, 0 [pid 534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 536] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 537] <... setpgid resumed>) = 0 [pid 536] <... ioctl resumed>) = 0 [pid 534] <... openat resumed>) = 3 [pid 537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 534] write(3, "1000", 4 [pid 537] <... openat resumed>) = 3 [pid 536] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 534] <... write resumed>) = 4 [pid 537] write(3, "1000", 4 [pid 534] close(3 [pid 537] <... write resumed>) = 4 [pid 534] <... close resumed>) = 0 [pid 537] close(3 [pid 534] write(1, "executing program\n", 18 [pid 537] <... close resumed>) = 0 [pid 534] <... write resumed>) = 18 executing program [pid 537] write(1, "executing program\n", 18 [pid 534] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 537] <... write resumed>) = 18 [pid 536] <... openat resumed>) = 4 [pid 534] <... openat resumed>) = 3 executing program [pid 537] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 534] ioctl(3, VT_ACTIVATE, 0x14 [pid 537] <... openat resumed>) = 3 [pid 536] ioctl(4, UI_SET_EVBIT, 0x1 [pid 534] <... ioctl resumed>) = 0 [pid 537] ioctl(3, VT_ACTIVATE, 0x14 [pid 534] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 537] <... ioctl resumed>) = 0 [pid 534] <... ioctl resumed>) = 0 [pid 537] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 534] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 537] <... ioctl resumed>) = 0 [pid 534] <... openat resumed>) = 4 [pid 537] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 534] ioctl(4, UI_SET_EVBIT, 0x1 [pid 537] <... openat resumed>) = 4 [pid 534] <... ioctl resumed>) = 0 [pid 537] ioctl(4, UI_SET_EVBIT, 0x1 [pid 534] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 537] <... ioctl resumed>) = 0 [pid 534] <... ioctl resumed>) = 0 [pid 537] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 534] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 537] <... ioctl resumed>) = 0 [pid 534] <... ioctl resumed>) = 0 [pid 537] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 534] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 537] <... ioctl resumed>) = 0 [pid 536] <... ioctl resumed>) = 0 [pid 535] <... ioctl resumed>) = 0 [pid 533] exit_group(0 [pid 537] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 536] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 534] <... ioctl resumed>) = 0 [pid 534] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 534] exit_group(0) = ? [pid 536] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 535] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 536] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 535] exit_group(0) = ? [pid 533] <... exit_group resumed>) = ? [pid 535] +++ exited with 0 +++ [pid 534] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=535, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=534, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 533] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=533, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 536] <... ioctl resumed>) = 0 [pid 536] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 536] exit_group(0) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 538 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 538] setpgid(0, 0) = 0 [pid 538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 538] write(3, "1000", 4) = 4 executing program [pid 538] close(3) = 0 [pid 538] write(1, "executing program\n", 18) = 18 [pid 538] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 538] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 538] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 538] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 538] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 538] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 538] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 538] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 536] +++ exited with 0 +++ [ 27.419691][ T533] input: syz0 as /devices/virtual/input/input198 [ 27.423398][ T535] input: syz0 as /devices/virtual/input/input199 [ 27.436407][ T534] input: syz0 as /devices/virtual/input/input200 [ 27.449835][ T536] input: syz0 as /devices/virtual/input/input202 [ 27.450855][ T537] input: syz0 as /devices/virtual/input/input201 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 538] <... ioctl resumed>) = 0 [pid 537] <... ioctl resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 540 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 539 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 541 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 538] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 541] setpgid(0, 0) = 0 [pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ci2-android-6-1/strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x55555a62f6a0, 24 [pid 541] write(3, "1000", 4 [pid 539] <... set_robust_list resumed>) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [] [pid 541] <... write resumed>) = 4 [pid 541] close(3) = 0 [pid 539] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 541] write(1, "executing program\n", 18 [pid 539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 538] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=538, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 541] <... write resumed>) = 18 [pid 541] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 539] <... prctl resumed>) = 0 [pid 539] setpgid(0, 0) = 0 executing program [pid 539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 541] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 541] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 539] write(3, "1000", 4) = 4 [pid 539] close(3 [pid 541] <... ioctl resumed>) = 0 [pid 539] <... close resumed>) = 0 [pid 541] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 539] write(1, "executing program\n", 18 [pid 541] <... openat resumed>) = 4 [pid 539] <... write resumed>) = 18 executing program [pid 539] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 541] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 541] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 541] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 541] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 537] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 539] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 539] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}ci2-android-6-1/strace-static-x86_64: Process 540 attached [pid 537] <... write resumed>) = 24 [pid 539] <... ioctl resumed>) = 0 [pid 539] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 539] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 539] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 539] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 539] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 537] exit_group(0 [pid 540] set_robust_list(0x55555a62f6a0, 24 [pid 537] <... exit_group resumed>) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 542 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 542] setpgid(0, 0) = 0 [pid 542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 542] write(3, "1000", 4) = 4 [pid 542] close(3) = 0 [pid 542] write(1, "executing program\n", 18) = 18 [pid 542] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 541] <... ioctl resumed>) = 0 [pid 541] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 541] exit_group(0) = ? executing program [pid 540] <... set_robust_list resumed>) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] write(1, "executing program\n", 18) = 18 executing program [pid 540] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 542] <... openat resumed>) = 3 [pid 539] <... ioctl resumed>) = ? [pid 542] ioctl(3, VT_ACTIVATE, 0x14 [pid 540] <... openat resumed>) = 3 [pid 542] <... ioctl resumed>) = 0 [pid 542] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 542] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 542] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 542] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 537] +++ exited with 0 +++ [pid 542] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=537, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 542] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 542] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 541] +++ exited with 0 +++ [pid 540] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=541, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 540] <... ioctl resumed>) = 0 [pid 539] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=539, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 308] <... restart_syscall resumed>) = 0 [pid 540] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 542] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] <... ioctl resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 542] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 540] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 540] <... openat resumed>) = 4 [pid 542] <... write resumed>) = 24 [pid 540] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... restart_syscall resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 540] <... ioctl resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 543 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 540] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 542] exit_group(0 [pid 540] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 544 [pid 542] <... exit_group resumed>) = ? [pid 540] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 540] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 540] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 27.473758][ T538] input: syz0 as /devices/virtual/input/input203 [ 27.491490][ T541] input: syz0 as /devices/virtual/input/input204 [ 27.497064][ T539] input: syz0 as /devices/virtual/input/input205 [ 27.504828][ T421] tty tty20: SAK: killed process 539 (syz-executor133): by fd#3 [ 27.515211][ T542] input: syz0 as /devices/virtual/input/input206 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 544] write(3, "1000", 4) = 4 [pid 544] close(3) = 0 [pid 544] write(1, "executing program\n", 18) = 18 [pid 544] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 543 attached executing program [pid 543] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 543] setpgid(0, 0) = 0 [pid 543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 543] write(3, "1000", 4) = 4 [pid 543] close(3) = 0 [pid 543] write(1, "executing program\n", 18) = 18 executing program [pid 543] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 544] <... openat resumed>) = 3 [pid 544] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 544] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 544] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 544] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 544] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 544] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 544] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 543] <... openat resumed>) = 3 executing program ci2-android-6-1/strace-static-x86_64: Process 545 attached [pid 543] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 545 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] setpgid(0, 0) = 0 [pid 545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 545] write(3, "1000", 4) = 4 [pid 545] close(3) = 0 [pid 545] write(1, "executing program\n", 18) = 18 [pid 545] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 544] <... ioctl resumed>) = ? [pid 543] <... ioctl resumed>) = 0 [pid 545] <... openat resumed>) = 3 [pid 543] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 545] ioctl(3, VT_ACTIVATE, 0x14 [pid 543] <... ioctl resumed>) = 0 [pid 545] <... ioctl resumed>) = 0 [pid 544] +++ killed by SIGKILL +++ [pid 543] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 542] +++ exited with 0 +++ [pid 540] <... ioctl resumed>) = 0 [pid 545] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=542, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 543] <... openat resumed>) = 4 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=544, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 540] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 545] <... ioctl resumed>) = 0 [pid 543] ioctl(4, UI_SET_EVBIT, 0x1 [pid 540] <... write resumed>) = 24 ci2-android-6-1/strace-static-x86_64: Process 546 attached [pid 543] <... ioctl resumed>) = 0 [pid 540] exit_group(0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 546 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 543] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 540] <... exit_group resumed>) = ? [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 546] set_robust_list(0x55555a62f6a0, 24 [pid 545] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 543] <... ioctl resumed>) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 545] <... openat resumed>) = 4 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 545] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 545] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 545] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 545] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 543] ioctl(4, UI_DEV_SETUP, 0x200000000080ci2-android-6-1/strace-static-x86_64: Process 547 attached [pid 546] <... set_robust_list resumed>) = 0 [pid 543] <... ioctl resumed>) = 0 [pid 540] +++ exited with 0 +++ [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 547 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 547] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 547] setpgid(0, 0) = 0 [pid 547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 547] write(3, "1000", 4 [pid 543] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 548 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 547] <... write resumed>) = 4 [pid 547] close(3) = 0 [ 27.526586][ T540] input: syz0 as /devices/virtual/input/input207 [ 27.536562][ T544] input: syz0 as /devices/virtual/input/input208 [ 27.543237][ T39] tty tty20: SAK: killed process 544 (syz-executor133): by fd#3 [ 27.565964][ T545] input: syz0 as /devices/virtual/input/input210 [pid 547] write(1, "executing program\n", 18) = 18 executing program [pid 547] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 546] setpgid(0, 0) = 0 [pid 546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 546] write(3, "1000", 4 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 546] <... write resumed>) = 4 [pid 546] close(3) = 0 [pid 546] write(1, "executing program\n", 18) = 18 executing program ci2-android-6-1/strace-static-x86_64: Process 548 attached [pid 546] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 547] <... openat resumed>) = 3 [pid 546] <... openat resumed>) = 3 [pid 547] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 547] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 546] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 546] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 547] <... ioctl resumed>) = 0 [pid 548] set_robust_list(0x55555a62f6a0, 24 [pid 547] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 546] <... ioctl resumed>) = 0 [pid 543] <... ioctl resumed>) = 0 [pid 548] <... set_robust_list resumed>) = 0 [pid 543] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] <... write resumed>) = 24 [pid 548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 543] exit_group(0 [pid 548] <... prctl resumed>) = 0 [pid 543] <... exit_group resumed>) = ? [pid 548] setpgid(0, 0 [pid 547] <... openat resumed>) = ? [pid 546] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 545] <... ioctl resumed>) = 0 [pid 548] <... setpgid resumed>) = 0 [pid 548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 548] write(3, "1000", 4) = 4 [pid 548] close(3) = 0 [pid 548] write(1, "executing program\n", 18) = 18 [pid 548] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 546] <... openat resumed>) = 4 [pid 546] ioctl(4, UI_SET_EVBIT, 0x1) = 0 executing program [pid 545] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 546] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 545] <... write resumed>) = 24 [pid 546] <... ioctl resumed>) = 0 [pid 545] exit_group(0 [pid 546] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 545] <... exit_group resumed>) = ? [pid 546] <... ioctl resumed>) = 0 [pid 546] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 548] <... openat resumed>) = 3 [pid 548] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 547] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=547, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 548] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 545] +++ exited with 0 +++ [pid 543] +++ exited with 0 +++ [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=543, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=545, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 546] <... ioctl resumed>) = 0 [pid 546] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 546] exit_group(0) = ? [pid 548] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 548] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 548] <... openat resumed>) = 4 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 548] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 549 ci2-android-6-1/strace-static-x86_64: Process 550 attached ci2-android-6-1/strace-static-x86_64: Process 549 attached [pid 548] <... ioctl resumed>) = 0 [pid 546] +++ exited with 0 +++ [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 550 [pid 549] set_robust_list(0x55555a62f6a0, 24 [pid 548] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=546, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 549] <... set_robust_list resumed>) = 0 [pid 548] <... ioctl resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 550] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 548] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 306] <... restart_syscall resumed>) = 0 [pid 549] rt_sigprocmask(SIG_SETMASK, [] [pid 550] <... prctl resumed>) = 0 [pid 550] setpgid(0, 0) = 0 [pid 549] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 548] <... ioctl resumed>) = 0 [pid 550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 548] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 550] write(3, "1000", 4) = 4 [pid 550] close(3) = 0 [pid 550] write(1, "executing program\n", 18) = 18 executing program [pid 550] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 550] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 550] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 550] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 550] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 550] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 550] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 550] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 548] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 549] <... prctl resumed>) = 0 [pid 548] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 549] setpgid(0, 0 [pid 548] <... write resumed>) = 24 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 549] <... setpgid resumed>) = 0 [pid 548] exit_group(0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 548] <... exit_group resumed>) = ? [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 551 ci2-android-6-1/strace-static-x86_64: Process 551 attached [pid 550] <... ioctl resumed>) = 0 [pid 549] <... openat resumed>) = 3 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 550] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 549] write(3, "1000", 4 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 550] <... write resumed>) = 24 [pid 549] <... write resumed>) = 4 [pid 548] +++ exited with 0 +++ [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 552 [pid 550] exit_group(0 [pid 549] close(3 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=548, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 550] <... exit_group resumed>) = ? [pid 549] <... close resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 551] set_robust_list(0x55555a62f6a0, 24 executing program [pid 549] write(1, "executing program\n", 18ci2-android-6-1/strace-static-x86_64: Process 552 attached [pid 551] <... set_robust_list resumed>) = 0 [pid 550] +++ exited with 0 +++ [pid 549] <... write resumed>) = 18 [pid 307] <... restart_syscall resumed>) = 0 [pid 551] rt_sigprocmask(SIG_SETMASK, [] [pid 549] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=550, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 552] set_robust_list(0x55555a62f6a0, 24 [pid 551] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 549] <... openat resumed>) = 3 [pid 549] ioctl(3, VT_ACTIVATE, 0x14 [pid 552] <... set_robust_list resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 549] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 549] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 549] <... ioctl resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 552] setpgid(0, 0) = 0 [pid 552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 552] write(3, "1000", 4) = 4 [pid 552] close(3 [pid 549] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 553 [pid 552] <... close resumed>) = 0 [pid 549] <... openat resumed>) = 4 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 554 [pid 549] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 549] <... ioctl resumed>) = 0 [ 27.573263][ T543] input: syz0 as /devices/virtual/input/input209 [ 27.583901][ T323] tty tty20: SAK: killed process 547 (syz-executor133): by fd#3 [ 27.592737][ T546] input: syz0 as /devices/virtual/input/input211 [ 27.609704][ T548] input: syz0 as /devices/virtual/input/input212 [ 27.613204][ T550] input: syz0 as /devices/virtual/input/input213 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 549] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 552] write(1, "executing program\n", 18 [pid 549] ioctl(4, UI_DEV_SETUP, 0x200000000080 executing program [pid 552] <... write resumed>) = 18 [pid 549] <... ioctl resumed>) = 0 [pid 552] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 549] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 552] <... openat resumed>) = 3 [pid 552] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 552] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 552] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 552] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 552] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 552] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 552] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 554 attached ci2-android-6-1/strace-static-x86_64: Process 553 attached [pid 551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 549] <... ioctl resumed>) = 0 [pid 554] set_robust_list(0x55555a62f6a0, 24 [pid 553] set_robust_list(0x55555a62f6a0, 24 [pid 551] <... prctl resumed>) = 0 [pid 549] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 554] <... set_robust_list resumed>) = 0 [pid 553] <... set_robust_list resumed>) = 0 [pid 551] setpgid(0, 0 [pid 549] <... write resumed>) = 24 [pid 554] rt_sigprocmask(SIG_SETMASK, [] [pid 553] rt_sigprocmask(SIG_SETMASK, [] [pid 551] <... setpgid resumed>) = 0 [pid 549] exit_group(0 [pid 554] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 553] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 549] <... exit_group resumed>) = ? [pid 554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 551] <... openat resumed>) = 3 [pid 554] <... prctl resumed>) = 0 [pid 553] <... prctl resumed>) = 0 [pid 551] write(3, "1000", 4 [pid 554] setpgid(0, 0 [pid 553] setpgid(0, 0 [pid 551] <... write resumed>) = 4 [pid 554] <... setpgid resumed>) = 0 [pid 553] <... setpgid resumed>) = 0 [pid 551] close(3 [pid 554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 551] <... close resumed>) = 0 [pid 554] <... openat resumed>) = 3 [pid 554] write(3, "1000", 4 [pid 553] <... openat resumed>) = 3 [pid 551] write(1, "executing program\n", 18 [pid 549] +++ exited with 0 +++ executing program [pid 554] <... write resumed>) = 4 [pid 553] write(3, "1000", 4 [pid 552] <... ioctl resumed>) = 0 [pid 551] <... write resumed>) = 18 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=549, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 554] close(3 [pid 553] <... write resumed>) = 4 [pid 552] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 551] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 554] <... close resumed>) = 0 [pid 553] close(3 [pid 552] <... write resumed>) = 24 [pid 551] <... openat resumed>) = 3 executing program [pid 554] write(1, "executing program\n", 18 [pid 553] <... close resumed>) = 0 [pid 552] exit_group(0 [pid 551] ioctl(3, VT_ACTIVATE, 0x14 [pid 554] <... write resumed>) = 18 [pid 553] write(1, "executing program\n", 18 executing program [pid 552] <... exit_group resumed>) = ? [pid 551] <... ioctl resumed>) = 0 [pid 554] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 553] <... write resumed>) = 18 [pid 553] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 310] <... restart_syscall resumed>) = 0 [pid 554] <... openat resumed>) = 3 [pid 551] +++ killed by SIGKILL +++ [pid 554] ioctl(3, VT_ACTIVATE, 0x14 [pid 553] <... openat resumed>) = 3 [pid 552] +++ exited with 0 +++ [pid 554] <... ioctl resumed>) = 0 [pid 553] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 553] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=552, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=551, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 554] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 553] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 554] <... ioctl resumed>) = 0 [pid 553] <... ioctl resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 554] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 553] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 555 [pid 554] <... openat resumed>) = 4 [pid 553] <... openat resumed>) = 4 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 554] ioctl(4, UI_SET_EVBIT, 0x1 [pid 553] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 554] <... ioctl resumed>) = 0 [pid 553] <... ioctl resumed>) = 0 [pid 554] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 553] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 554] <... ioctl resumed>) = 0 [pid 553] <... ioctl resumed>) = 0 [pid 554] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 553] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 554] <... ioctl resumed>) = 0 [pid 553] <... ioctl resumed>) = 0 [pid 554] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 553] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 555 attached [pid 555] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 555] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 555] setpgid(0, 0) = 0 [pid 555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 555] write(3, "1000", 4) = 4 [pid 555] close(3) = 0 [pid 555] write(1, "executing program\n", 18) = 18 executing program [pid 555] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 555] <... openat resumed>) = 3 [pid 554] <... ioctl resumed>) = 0 [pid 553] <... ioctl resumed>) = 0 [pid 555] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 555] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 556 [pid 555] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 555] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 555] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 555] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 27.635429][ T549] input: syz0 as /devices/virtual/input/input214 [ 27.642538][ T552] input: syz0 as /devices/virtual/input/input215 [ 27.656806][ T421] tty tty20: SAK: killed process 551 (syz-executor133): by fd#3 [ 27.668015][ T554] input: syz0 as /devices/virtual/input/input216 [ 27.669766][ T553] input: syz0 as /devices/virtual/input/input217 [pid 555] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 557 attached [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 554] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 553] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 557 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] <... write resumed>) = 24 [pid 554] exit_group(0) = ? [pid 557] set_robust_list(0x55555a62f6a0, 24 [pid 553] <... write resumed>) = 24 [pid 553] exit_group(0 [pid 557] <... set_robust_list resumed>) = 0 [pid 557] rt_sigprocmask(SIG_SETMASK, [] [pid 553] <... exit_group resumed>) = ? [pid 557] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 557] setpgid(0, 0) = 0 [pid 557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 557] write(3, "1000", 4) = 4 [pid 557] close(3) = 0 [pid 557] write(1, "executing program\n", 18) = 18 executing program [pid 557] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 557] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 557] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 557] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 557] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 557] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 557] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 557] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 556 attached [pid 555] <... ioctl resumed>) = 0 [pid 556] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 556] setpgid(0, 0) = 0 [pid 556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 556] write(3, "1000", 4) = 4 [pid 556] close(3) = 0 [pid 556] write(1, "executing program\n", 18) = 18 [pid 556] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 556] ioctl(3, VT_ACTIVATE, 0x14) = 0 executing program [pid 556] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 556] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 556] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 556] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 556] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 556] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 554] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=554, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 553] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=553, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 555] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 557] <... ioctl resumed>) = 0 [pid 557] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 557] exit_group(0) = ? [pid 557] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=557, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 555] <... write resumed>) = 24 [pid 555] exit_group(0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 558 attached [pid 555] <... exit_group resumed>) = ? [pid 306] <... restart_syscall resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 559 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 558 ci2-android-6-1/strace-static-x86_64: Process 559 attached [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 559] set_robust_list(0x55555a62f6a0, 24 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 559] <... set_robust_list resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 559] rt_sigprocmask(SIG_SETMASK, [] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 559] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 560 [pid 559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 560 attached [pid 559] <... prctl resumed>) = 0 [pid 558] set_robust_list(0x55555a62f6a0, 24 [pid 556] <... ioctl resumed>) = 0 [pid 556] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 559] setpgid(0, 0 [pid 556] <... write resumed>) = 24 [pid 559] <... setpgid resumed>) = 0 [pid 559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 556] exit_group(0 [pid 559] <... openat resumed>) = 3 [pid 560] set_robust_list(0x55555a62f6a0, 24 [pid 559] write(3, "1000", 4 [pid 558] <... set_robust_list resumed>) = 0 [pid 560] <... set_robust_list resumed>) = 0 [pid 559] <... write resumed>) = 4 [pid 560] rt_sigprocmask(SIG_SETMASK, [] [pid 559] close(3 [pid 558] rt_sigprocmask(SIG_SETMASK, [] [pid 560] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 559] <... close resumed>) = 0 [pid 558] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 559] write(1, "executing program\n", 18 [pid 560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 559] <... write resumed>) = 18 [pid 558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 559] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 560] <... prctl resumed>) = 0 [pid 558] <... prctl resumed>) = 0 [pid 556] <... exit_group resumed>) = ? [pid 559] <... openat resumed>) = 3 [pid 558] setpgid(0, 0 [pid 560] setpgid(0, 0 executing program [pid 559] ioctl(3, VT_ACTIVATE, 0x14 [pid 560] <... setpgid resumed>) = 0 [pid 559] <... ioctl resumed>) = 0 [pid 558] <... setpgid resumed>) = 0 [pid 560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 559] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 555] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=555, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 559] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 558] <... openat resumed>) = 3 [pid 559] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 560] <... openat resumed>) = 3 [pid 559] <... openat resumed>) = 4 [pid 558] write(3, "1000", 4 [pid 559] ioctl(4, UI_SET_EVBIT, 0x1 [pid 560] write(3, "1000", 4 [pid 558] <... write resumed>) = 4 [pid 310] <... restart_syscall resumed>) = 0 [pid 559] <... ioctl resumed>) = 0 [pid 558] close(3 [pid 559] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 560] <... write resumed>) = 4 [pid 559] <... ioctl resumed>) = 0 [pid 560] close(3 [pid 559] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 558] <... close resumed>) = 0 [pid 559] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 560] <... close resumed>) = 0 [pid 559] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 558] write(1, "executing program\n", 18 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 560] write(1, "executing program\n", 18 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 558] <... write resumed>) = 18 [pid 558] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 561 executing program [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] ioctl(3, VT_ACTIVATE, 0x14ci2-android-6-1/strace-static-x86_64: Process 561 attached [pid 561] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 561] setpgid(0, 0) = 0 [pid 561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 561] write(3, "1000", 4) = 4 [pid 561] close(3) = 0 executing program [pid 561] write(1, "executing program\n", 18) = 18 [pid 561] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 560] <... write resumed>) = 18 executing program [pid 560] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 561] <... openat resumed>) = 3 [pid 558] <... ioctl resumed>) = 0 [pid 558] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 558] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 558] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 558] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 558] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 27.685392][ T555] input: syz0 as /devices/virtual/input/input218 [ 27.696476][ T557] input: syz0 as /devices/virtual/input/input219 [ 27.709845][ T556] input: syz0 as /devices/virtual/input/input220 [ 27.727240][ T559] input: syz0 as /devices/virtual/input/input221 [pid 558] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 561] ioctl(3, VT_ACTIVATE, 0x14 [pid 560] <... openat resumed>) = 3 [pid 560] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 560] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 560] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 561] <... ioctl resumed>) = 0 [pid 559] <... ioctl resumed>) = 0 [pid 558] <... ioctl resumed>) = 0 [pid 559] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 559] exit_group(0) = ? [pid 556] +++ exited with 0 +++ [pid 558] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=556, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 562 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] <... write resumed>) = 24 [pid 558] exit_group(0) = ? [pid 561] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 561] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 561] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 561] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 561] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 561] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0 [pid 561] <... ioctl resumed>) = 0 [pid 562] <... setpgid resumed>) = 0 [pid 561] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 561] exit_group(0) = ? [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] write(1, "executing program\n", 18) = 18 executing program [pid 562] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 560] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=560, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 561] +++ exited with 0 +++ [pid 559] +++ exited with 0 +++ [pid 558] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=561, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=558, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=559, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 562] <... openat resumed>) = 3 [pid 562] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 562] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 562] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 562] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 562] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 562] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 27.734899][ T558] input: syz0 as /devices/virtual/input/input222 [ 27.745462][ T421] tty tty20: SAK: killed process 560 (syz-executor133): by fd#3 [ 27.756243][ T561] input: syz0 as /devices/virtual/input/input223 [ 27.761603][ T327] udevd[327]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [pid 562] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 562] <... ioctl resumed>) = 0 [pid 562] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 562] <... write resumed>) = 24 [pid 562] exit_group(0) = ? [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 563 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 565 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 564 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 566 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 563 attached ci2-android-6-1/strace-static-x86_64: Process 565 attached ci2-android-6-1/strace-static-x86_64: Process 566 attached [pid 565] set_robust_list(0x55555a62f6a0, 24 [pid 563] set_robust_list(0x55555a62f6a0, 24 [pid 565] <... set_robust_list resumed>) = 0 [pid 566] set_robust_list(0x55555a62f6a0, 24 [pid 563] <... set_robust_list resumed>) = 0 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] +++ exited with 0 +++ [pid 565] prctl(PR_SET_PDEATHSIG, SIGKILLci2-android-6-1/strace-static-x86_64: Process 564 attached ) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 563] rt_sigprocmask(SIG_SETMASK, [] [pid 566] <... set_robust_list resumed>) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [] [pid 563] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 565] setpgid(0, 0 [pid 564] set_robust_list(0x55555a62f6a0, 24 [pid 563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 563] <... prctl resumed>) = 0 [pid 566] <... prctl resumed>) = 0 [pid 563] setpgid(0, 0 [pid 566] setpgid(0, 0 [pid 563] <... setpgid resumed>) = 0 [pid 566] <... setpgid resumed>) = 0 [pid 565] <... setpgid resumed>) = 0 [pid 564] <... set_robust_list resumed>) = 0 [pid 563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 564] rt_sigprocmask(SIG_SETMASK, [] [pid 566] <... openat resumed>) = 3 [pid 564] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 565] <... openat resumed>) = 3 [pid 563] <... openat resumed>) = 3 [pid 309] <... restart_syscall resumed>) = 0 [pid 565] write(3, "1000", 4 [pid 566] write(3, "1000", 4 [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 566] <... write resumed>) = 4 [pid 565] <... write resumed>) = 4 [pid 564] <... prctl resumed>) = 0 [pid 563] write(3, "1000", 4 [pid 565] close(3 [pid 564] setpgid(0, 0ci2-android-6-1/strace-static-x86_64: Process 567 attached [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 567 [pid 566] close(3 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 566] <... close resumed>) = 0 [pid 567] set_robust_list(0x55555a62f6a0, 24 [pid 565] <... close resumed>) = 0 [pid 563] <... write resumed>) = 4 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 567] <... set_robust_list resumed>) = 0 [pid 566] write(1, "executing program\n", 18 [pid 564] <... setpgid resumed>) = 0 [pid 565] write(1, "executing program\n", 18) = 18 [pid 565] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR) = 3 [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC executing program [pid 565] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 565] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 565] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 565] ioctl(4, UI_SET_EVBIT, 0x1 [pid 564] <... openat resumed>) = 3 [pid 565] <... ioctl resumed>) = 0 [pid 565] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 565] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 565] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 564] write(3, "1000", 4) = 4 executing program [pid 564] close(3 [pid 566] <... write resumed>) = 18 [ 27.784322][ T562] input: syz0 as /devices/virtual/input/input224 [pid 563] close(3 [pid 564] <... close resumed>) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [] [pid 566] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 564] write(1, "executing program\n", 18 [pid 563] <... close resumed>) = 0 [pid 567] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 567] setpgid(0, 0) = 0 [pid 567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 567] write(3, "1000", 4) = 4 [pid 567] close(3) = 0 [pid 567] write(1, "executing program\n", 18) = 18 [pid 567] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 564] <... write resumed>) = 18 executing program executing program [pid 564] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 563] write(1, "executing program\n", 18) = 18 executing program [pid 563] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 567] <... openat resumed>) = 3 [pid 564] <... openat resumed>) = 3 [pid 566] <... openat resumed>) = 3 [pid 567] ioctl(3, VT_ACTIVATE, 0x14 [pid 565] <... ioctl resumed>) = 0 [pid 564] ioctl(3, VT_ACTIVATE, 0x14 [pid 566] ioctl(3, VT_ACTIVATE, 0x14 [pid 567] <... ioctl resumed>) = 0 [pid 566] <... ioctl resumed>) = 0 [pid 565] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 564] <... ioctl resumed>) = 0 [pid 563] <... openat resumed>) = 3 [pid 564] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 564] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 564] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 564] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 564] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 564] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 567] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 567] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 566] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 567] <... openat resumed>) = 4 [pid 566] <... ioctl resumed>) = 0 [pid 567] ioctl(4, UI_SET_EVBIT, 0x1 [pid 565] <... write resumed>) = 24 [pid 563] ioctl(3, VT_ACTIVATE, 0x14 [pid 566] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 567] <... ioctl resumed>) = 0 [pid 566] <... openat resumed>) = 4 [pid 565] exit_group(0 [pid 567] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 567] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 567] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 566] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 566] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 566] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 566] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 565] <... exit_group resumed>) = ? [pid 564] <... ioctl resumed>) = 0 [pid 564] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 564] exit_group(0) = ? [pid 563] <... ioctl resumed>) = 0 [pid 563] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 563] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 563] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 563] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 563] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 563] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 566] <... ioctl resumed>) = ? [pid 566] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=566, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 564] +++ exited with 0 +++ [pid 567] <... ioctl resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=564, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 567] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 565] +++ exited with 0 +++ [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 567] <... write resumed>) = 24 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=565, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 567] exit_group(0 [pid 563] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 567] <... exit_group resumed>) = ? [pid 563] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 563] exit_group(0) = ? [pid 306] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 568 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 569 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 570 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=567, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 563] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=563, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-6-1/strace-static-x86_64: Process 568 attached [pid 568] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 568] setpgid(0, 0) = 0 ci2-android-6-1/strace-static-x86_64: Process 570 attached ci2-android-6-1/strace-static-x86_64: Process 569 attached [pid 569] set_robust_list(0x55555a62f6a0, 24 [pid 568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 570] set_robust_list(0x55555a62f6a0, 24 [pid 569] <... set_robust_list resumed>) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] <... set_robust_list resumed>) = 0 [pid 569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 568] <... openat resumed>) = 3 [pid 569] <... prctl resumed>) = 0 [pid 569] setpgid(0, 0) = 0 [pid 569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 568] write(3, "1000", 4 [pid 569] <... openat resumed>) = 3 [pid 569] write(3, "1000", 4) = 4 [pid 569] close(3) = 0 [pid 569] write(1, "executing program\n", 18) = 18 executing program [pid 569] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 569] <... openat resumed>) = 3 [pid 568] <... write resumed>) = 4 [pid 569] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 570] <... prctl resumed>) = 0 [pid 569] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 568] close(3 [pid 570] setpgid(0, 0) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 568] <... close resumed>) = 0 [pid 568] write(1, "executing program\n", 18) = 18 executing program [pid 568] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 570] <... openat resumed>) = 3 [pid 569] <... ioctl resumed>) = 0 [pid 570] write(3, "1000", 4 [pid 568] <... openat resumed>) = 3 [pid 568] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 569] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 568] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 568] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 568] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 568] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 568] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 568] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 569] <... openat resumed>) = 4 [pid 570] <... write resumed>) = 4 [ 27.813809][ T565] input: syz0 as /devices/virtual/input/input225 [ 27.825291][ T564] input: syz0 as /devices/virtual/input/input226 [ 27.831021][ T567] input: syz0 as /devices/virtual/input/input227 [ 27.835437][ T566] input: syz0 as /devices/virtual/input/input228 [ 27.845201][ T421] tty tty20: SAK: killed process 566 (syz-executor133): by fd#3 [ 27.846861][ T563] input: syz0 as /devices/virtual/input/input229 [pid 569] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 569] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 569] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 569] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 570] close(3 [pid 568] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 570] <... close resumed>) = 0 [pid 570] write(1, "executing program\n", 18) = 18 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 570] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 571 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 572 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 568] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 568] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 572] setpgid(0, 0) = 0 [pid 572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 572] write(3, "1000", 4) = 4 [pid 572] close(3) = 0 [pid 572] write(1, "executing program\n", 18) = 18 executing program executing program [pid 572] openat(AT_FDCWD, "/dev/char/4:24", O_RDWRci2-android-6-1/strace-static-x86_64: Process 571 attached [pid 570] <... openat resumed>) = 3 [pid 569] <... ioctl resumed>) = ? [pid 570] ioctl(3, VT_ACTIVATE, 0x14 [pid 571] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 571] setpgid(0, 0) = 0 [pid 571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 571] write(3, "1000", 4) = 4 [pid 571] close(3) = 0 [pid 571] write(1, "executing program\n", 18) = 18 executing program [pid 571] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 570] <... ioctl resumed>) = 0 [pid 571] <... openat resumed>) = 3 [pid 570] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 572] <... openat resumed>) = 3 [pid 571] ioctl(3, VT_ACTIVATE, 0x14 [pid 570] <... ioctl resumed>) = 0 [pid 571] <... ioctl resumed>) = 0 [pid 570] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 571] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 570] <... openat resumed>) = 4 [pid 572] ioctl(3, VT_ACTIVATE, 0x14 [pid 571] <... ioctl resumed>) = 0 [pid 571] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 571] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 571] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 571] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 571] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 570] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 570] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 570] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 570] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 572] <... ioctl resumed>) = 0 [pid 569] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=569, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 568] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=568, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 572] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 572] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 572] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 572] <... ioctl resumed>) = 0 [pid 571] <... ioctl resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 574 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 573 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 572] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 571] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 572] <... ioctl resumed>) = 0 [pid 572] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 ci2-android-6-1/strace-static-x86_64: Process 573 attached [pid 573] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [] [pid 572] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 571] <... write resumed>) = 24 [pid 573] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 27.879756][ T568] input: syz0 as /devices/virtual/input/input230 [ 27.885824][ T569] input: syz0 as /devices/virtual/input/input231 [ 27.893028][ T39] tty tty20: SAK: killed process 569 (syz-executor133): by fd#3 [ 27.902354][ T321] udevd[321]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 27.904311][ T571] input: syz0 as /devices/virtual/input/input232 [ 27.917353][ T570] input: syz0 as /devices/virtual/input/input233 [pid 573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 573] setpgid(0, 0) = 0 [pid 573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 573] write(3, "1000", 4) = 4 [pid 573] close(3) = 0 [pid 573] write(1, "executing program\n", 18) = 18 [pid 573] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 574] setpgid(0, 0) = 0 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 574] write(3, "1000", 4) = 4 [pid 574] close(3) = 0 [pid 574] write(1, "executing program\n", 18) = 18 [pid 574] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 570] <... ioctl resumed>) = 0 [pid 570] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 570] exit_group(0) = ? [pid 571] exit_group(0) = ? executing program executing program [pid 573] <... openat resumed>) = ? [pid 574] <... openat resumed>) = 3 [pid 574] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 574] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 574] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 574] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 574] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 574] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 574] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 572] <... ioctl resumed>) = 0 [pid 572] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 572] exit_group(0) = ? [pid 574] <... ioctl resumed>) = 0 [pid 574] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 574] exit_group(0) = ? [pid 573] +++ killed by SIGKILL +++ [pid 571] +++ exited with 0 +++ [pid 570] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=573, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=571, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 574] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=574, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 572] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=572, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-1/strace-static-x86_64: Process 575 attached [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 575 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 575] set_robust_list(0x55555a62f6a0, 24 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 575] <... set_robust_list resumed>) = 0 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 575] setpgid(0, 0) = 0 [pid 575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-android-6-1/strace-static-x86_64: Process 579 attached [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 576 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 577 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 578 ci2-android-6-1/strace-static-x86_64: Process 578 attached [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 579 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 579] set_robust_list(0x55555a62f6a0, 24 [pid 578] set_robust_list(0x55555a62f6a0, 24 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 577 attached ci2-android-6-1/strace-static-x86_64: Process 576 attached [pid 579] <... set_robust_list resumed>) = 0 [pid 578] <... set_robust_list resumed>) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 579] rt_sigprocmask(SIG_SETMASK, [] [pid 578] rt_sigprocmask(SIG_SETMASK, [] [pid 579] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 576] set_robust_list(0x55555a62f6a0, 24 [pid 578] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 577] set_robust_list(0x55555a62f6a0, 24 [pid 579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 577] <... set_robust_list resumed>) = 0 [pid 576] <... set_robust_list resumed>) = 0 [pid 575] <... openat resumed>) = 3 [pid 579] setpgid(0, 0) = 0 [pid 579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 578] <... prctl resumed>) = 0 [pid 577] rt_sigprocmask(SIG_SETMASK, [] [pid 576] rt_sigprocmask(SIG_SETMASK, [] [pid 575] write(3, "1000", 4 [pid 579] <... openat resumed>) = 3 [pid 578] setpgid(0, 0 [pid 577] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 579] write(3, "1000", 4) = 4 [pid 579] close(3) = 0 [pid 578] <... setpgid resumed>) = 0 [pid 579] write(1, "executing program\n", 18 [pid 578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 579] <... write resumed>) = 18 [pid 579] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 579] ioctl(3, VT_ACTIVATE, 0x14) = 0 executing program [pid 579] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 579] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 578] <... openat resumed>) = 3 [pid 576] <... prctl resumed>) = 0 [pid 579] <... openat resumed>) = 4 [pid 578] write(3, "1000", 4 [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 576] setpgid(0, 0 [pid 579] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 579] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 579] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 579] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 578] <... write resumed>) = 4 [pid 577] <... prctl resumed>) = 0 [pid 576] <... setpgid resumed>) = 0 [pid 575] <... write resumed>) = 4 [pid 578] close(3 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 578] <... close resumed>) = 0 [pid 576] <... openat resumed>) = 3 [pid 578] write(1, "executing program\n", 18 [pid 576] write(3, "1000", 4 [pid 578] <... write resumed>) = 18 [pid 576] <... write resumed>) = 4 [pid 578] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 576] close(3 [pid 578] <... openat resumed>) = 3 [pid 576] <... close resumed>) = 0 [pid 578] ioctl(3, VT_ACTIVATE, 0x14 [pid 576] write(1, "executing program\n", 18 [pid 578] <... ioctl resumed>) = 0 [pid 576] <... write resumed>) = 18 [pid 578] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} executing program executing program [pid 576] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 578] <... ioctl resumed>) = 0 [pid 576] <... openat resumed>) = 3 [pid 578] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 576] ioctl(3, VT_ACTIVATE, 0x14 [pid 578] <... openat resumed>) = 4 [pid 576] <... ioctl resumed>) = 0 [pid 578] ioctl(4, UI_SET_EVBIT, 0x1 [pid 576] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 578] <... ioctl resumed>) = 0 [pid 576] <... ioctl resumed>) = 0 [pid 578] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 576] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 578] <... ioctl resumed>) = 0 [pid 576] <... openat resumed>) = 4 [pid 578] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 576] ioctl(4, UI_SET_EVBIT, 0x1 [pid 578] <... ioctl resumed>) = 0 [pid 576] <... ioctl resumed>) = 0 [pid 578] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 576] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 575] close(3 [pid 577] setpgid(0, 0 [pid 576] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 575] <... close resumed>) = 0 [ 27.930627][ T572] input: syz0 as /devices/virtual/input/input234 [ 27.939314][ T323] tty tty20: SAK: killed process 573 (syz-executor133): by fd#3 [ 27.953600][ T574] input: syz0 as /devices/virtual/input/input235 [pid 577] <... setpgid resumed>) = 0 [pid 576] <... ioctl resumed>) = 0 [pid 575] write(1, "executing program\n", 18 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 576] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 575] <... write resumed>) = 18 executing program [pid 577] <... openat resumed>) = 3 [pid 575] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 577] write(3, "1000", 4) = 4 [pid 577] close(3) = 0 [pid 577] write(1, "executing program\n", 18) = 18 executing program [pid 577] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 576] <... ioctl resumed>) = 0 [pid 576] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 576] exit_group(0) = ? [pid 578] <... ioctl resumed>) = ? [pid 575] <... openat resumed>) = 3 [pid 575] ioctl(3, VT_ACTIVATE, 0x14 [pid 579] <... ioctl resumed>) = 0 [pid 579] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 579] exit_group(0) = ? [pid 577] <... openat resumed>) = 3 [pid 575] <... ioctl resumed>) = 0 [pid 577] ioctl(3, VT_ACTIVATE, 0x14 [pid 575] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 577] <... ioctl resumed>) = 0 [pid 577] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 575] <... ioctl resumed>) = 0 [pid 579] +++ exited with 0 +++ [pid 577] <... ioctl resumed>) = 0 [pid 575] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 578] +++ killed by SIGKILL +++ [pid 577] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 576] +++ exited with 0 +++ [pid 575] <... openat resumed>) = 4 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=579, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=576, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=578, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 577] <... openat resumed>) = 4 [pid 575] ioctl(4, UI_SET_EVBIT, 0x1 [pid 577] ioctl(4, UI_SET_EVBIT, 0x1 [pid 575] <... ioctl resumed>) = 0 [pid 577] <... ioctl resumed>) = 0 [pid 575] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 577] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 575] <... ioctl resumed>) = 0 [pid 577] <... ioctl resumed>) = 0 [pid 575] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 577] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 575] <... ioctl resumed>) = 0 [pid 577] <... ioctl resumed>) = 0 [pid 575] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 577] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 575] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 580 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 582 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 581 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 582 attached [pid 575] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 575] <... write resumed>) = 24 ci2-android-6-1/strace-static-x86_64: Process 581 attached ci2-android-6-1/strace-static-x86_64: Process 580 attached [pid 582] set_robust_list(0x55555a62f6a0, 24 [pid 577] <... ioctl resumed>) = 0 [pid 575] exit_group(0 [pid 582] <... set_robust_list resumed>) = 0 [pid 581] set_robust_list(0x55555a62f6a0, 24 [pid 580] set_robust_list(0x55555a62f6a0, 24 [pid 577] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 575] <... exit_group resumed>) = ? [pid 582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 582] setpgid(0, 0) = 0 [pid 575] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=575, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 580] <... set_robust_list resumed>) = 0 [pid 577] <... write resumed>) = 24 [pid 582] write(3, "1000", 4 [pid 577] exit_group(0 [pid 582] <... write resumed>) = 4 [pid 581] <... set_robust_list resumed>) = 0 [pid 581] rt_sigprocmask(SIG_SETMASK, [] [pid 582] close(3 [pid 308] <... restart_syscall resumed>) = 0 [pid 582] <... close resumed>) = 0 [pid 582] write(1, "executing program\n", 18 [pid 581] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 582] <... write resumed>) = 18 [pid 581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 582] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 580] rt_sigprocmask(SIG_SETMASK, [] [pid 577] <... exit_group resumed>) = ? [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 581] setpgid(0, 0) = 0 [pid 581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 582] <... openat resumed>) = 3 [pid 581] <... openat resumed>) = 3 [pid 581] write(3, "1000", 4) = 4 [ 27.982107][ T579] input: syz0 as /devices/virtual/input/input236 [ 27.982933][ T576] input: syz0 as /devices/virtual/input/input238 [ 27.993607][ T578] input: syz0 as /devices/virtual/input/input237 [ 28.001598][ T421] tty tty20: SAK: killed process 578 (syz-executor133): by fd#3 [ 28.015264][ T575] input: syz0 as /devices/virtual/input/input239 [ 28.019710][ T577] input: syz0 as /devices/virtual/input/input240 [pid 582] ioctl(3, VT_ACTIVATE, 0x14 [pid 581] close(3) = 0 [pid 581] write(1, "executing program\n", 18) = 18 [pid 581] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 583 [pid 582] <... ioctl resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 582] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 581] <... openat resumed>) = 3 [pid 581] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 581] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 581] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 581] ioctl(4, UI_SET_EVBIT, 0x1) = 0 ci2-android-6-1/strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 583] setpgid(0, 0) = 0 [pid 583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 583] write(3, "1000", 4) = 4 [pid 583] close(3) = 0 [pid 583] write(1, "executing program\n", 18) = 18 [pid 583] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 580] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 580] setpgid(0, 0) = 0 [pid 580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 580] write(3, "1000", 4) = 4 [pid 580] close(3) = 0 [pid 580] write(1, "executing program\n", 18) = 18 executing program executing program executing program [pid 580] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 582] <... ioctl resumed>) = 0 [pid 582] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 582] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 582] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 582] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 582] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 581] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=581, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 583] <... openat resumed>) = 3 [pid 580] <... openat resumed>) = 3 [pid 577] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=577, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 582] <... ioctl resumed>) = 0 [pid 582] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 582] exit_group(0) = ? [pid 580] ioctl(3, VT_ACTIVATE, 0x14 [pid 583] ioctl(3, VT_ACTIVATE, 0x14 [pid 580] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 583] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 580] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 583] <... ioctl resumed>) = 0 [pid 580] <... ioctl resumed>) = 0 [pid 583] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 580] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 583] <... openat resumed>) = 4 [pid 580] ioctl(4, UI_SET_EVBIT, 0x1 [pid 583] ioctl(4, UI_SET_EVBIT, 0x1 [pid 580] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 580] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 583] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 580] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 580] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 583] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 580] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 580] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 583] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 584 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 585 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 584 attached [pid 584] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 584] setpgid(0, 0) = 0 [pid 584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 584] write(3, "1000", 4) = 4 [pid 584] close(3) = 0 [pid 584] write(1, "executing program\n", 18) = 18 executing program [pid 584] openat(AT_FDCWD, "/dev/char/4:22", O_RDWRci2-android-6-1/strace-static-x86_64: Process 585 attached [pid 585] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 585] setpgid(0, 0) = 0 [pid 585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 585] write(3, "1000", 4) = 4 [pid 585] close(3) = 0 [pid 585] write(1, "executing program\n", 18) = 18 executing program [pid 585] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 584] <... openat resumed>) = 3 [pid 583] <... ioctl resumed>) = 0 [pid 585] ioctl(3, VT_ACTIVATE, 0x14 [pid 584] ioctl(3, VT_ACTIVATE, 0x14 [pid 583] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 582] +++ exited with 0 +++ [pid 580] <... ioctl resumed>) = 0 [pid 583] <... write resumed>) = 24 [pid 580] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=582, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 583] exit_group(0 [pid 580] <... write resumed>) = 24 [pid 583] <... exit_group resumed>) = ? [pid 580] exit_group(0 [pid 585] <... ioctl resumed>) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 586 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 586] setpgid(0, 0) = 0 [pid 586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 586] write(3, "1000", 4) = 4 [pid 586] close(3) = 0 [pid 586] write(1, "executing program\n", 18) = 18 executing program [pid 586] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 580] <... exit_group resumed>) = ? [pid 585] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=585, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 584] <... ioctl resumed>) = 0 [pid 584] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 583] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=583, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 580] +++ exited with 0 +++ [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 586] <... openat resumed>) = 3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=580, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 584] <... ioctl resumed>) = 0 [pid 584] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 586] ioctl(3, VT_ACTIVATE, 0x14 [pid 584] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 584] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 584] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 586] <... ioctl resumed>) = 0 [pid 584] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 586] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 586] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 586] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 586] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 586] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.038831][ T421] tty tty20: SAK: killed process 581 (syz-executor133): by fd#3 [ 28.043646][ T582] input: syz0 as /devices/virtual/input/input242 [ 28.060314][ T580] input: syz0 as /devices/virtual/input/input243 [ 28.067589][ T583] input: syz0 as /devices/virtual/input/input244 [ 28.078856][ T323] tty tty20: SAK: killed process 585 (syz-executor133): by fd#3 [pid 586] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 587 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program executing program [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 588 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 589 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 589 attached [pid 589] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 589] setpgid(0, 0) = 0 [pid 589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 589] write(3, "1000", 4) = 4 [pid 589] close(3) = 0 [pid 589] write(1, "executing program\n", 18) = 18 ci2-android-6-1/strace-static-x86_64: Process 588 attached [pid 589] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 588] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 588] setpgid(0, 0) = 0 [pid 588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 588] write(3, "1000", 4) = 4 [pid 588] close(3) = 0 [pid 588] write(1, "executing program\n", 18) = 18 [pid 588] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 589] <... openat resumed>) = 3 [pid 589] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 589] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 589] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 589] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 589] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 589] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 589] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 587 attached [pid 586] <... ioctl resumed>) = 0 [pid 587] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] <... openat resumed>) = 3 [pid 587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 586] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 588] ioctl(3, VT_ACTIVATE, 0x14 [pid 587] <... prctl resumed>) = 0 [pid 588] <... ioctl resumed>) = 0 [pid 587] setpgid(0, 0 [pid 588] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 587] <... setpgid resumed>) = 0 [pid 588] <... ioctl resumed>) = 0 [pid 588] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 588] <... openat resumed>) = 4 [pid 588] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 588] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 588] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 588] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 587] <... openat resumed>) = 3 [pid 586] <... write resumed>) = 24 [pid 587] write(3, "1000", 4 [pid 586] exit_group(0) = ? [pid 587] <... write resumed>) = 4 [pid 587] close(3) = 0 [pid 587] write(1, "executing program\n", 18 [pid 584] <... ioctl resumed>) = 0 executing program [pid 587] <... write resumed>) = 18 [pid 587] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 584] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 584] exit_group(0) = ? [pid 589] <... ioctl resumed>) = ? [pid 588] <... ioctl resumed>) = 0 [pid 588] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 588] exit_group(0) = ? [pid 587] <... openat resumed>) = 3 [pid 587] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 587] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 587] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 587] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 587] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 587] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 589] +++ killed by SIGKILL +++ [pid 587] <... ioctl resumed>) = 0 [pid 587] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=589, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 586] +++ exited with 0 +++ [pid 584] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=586, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] <... restart_syscall resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=584, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 590 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 591 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 588] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=588, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 592 [pid 587] <... ioctl resumed>) = 0 [pid 587] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 587] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 591 attached [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 591] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 592 attached ci2-android-6-1/strace-static-x86_64: Process 590 attached , NULL, 8) = 0 [pid 592] set_robust_list(0x55555a62f6a0, 24 [pid 591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 590] set_robust_list(0x55555a62f6a0, 24 [pid 587] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=587, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 592] <... set_robust_list resumed>) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] <... prctl resumed>) = 0 [pid 590] <... set_robust_list resumed>) = 0 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 592] setpgid(0, 0) = 0 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 591] setpgid(0, 0) = 0 [pid 592] <... openat resumed>) = 3 [pid 590] rt_sigprocmask(SIG_SETMASK, [] [pid 591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 592] write(3, "1000", 4 [pid 591] <... openat resumed>) = 3 [pid 591] write(3, "1000", 4) = 4 [pid 591] close(3) = 0 [pid 591] write(1, "executing program\n", 18) = 18 executing program [pid 591] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 592] <... write resumed>) = 4 [pid 590] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 591] <... openat resumed>) = 3 [pid 591] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 592] close(3 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 592] <... close resumed>) = 0 [pid 591] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 590] prctl(PR_SET_PDEATHSIG, SIGKILLci2-android-6-1/strace-static-x86_64: Process 593 attached [pid 592] write(1, "executing program\n", 18 [pid 591] <... ioctl resumed>) = 0 [pid 590] <... prctl resumed>) = 0 [pid 593] set_robust_list(0x55555a62f6a0, 24 [pid 592] <... write resumed>) = 18 [pid 591] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 590] setpgid(0, 0 executing program [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 593 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 593] <... set_robust_list resumed>) = 0 [pid 592] <... openat resumed>) = 3 [pid 591] <... openat resumed>) = 4 [pid 593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] ioctl(4, UI_SET_EVBIT, 0x1 [pid 590] <... setpgid resumed>) = 0 [pid 592] ioctl(3, VT_ACTIVATE, 0x14 [pid 593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 593] setpgid(0, 0) = 0 [pid 593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 593] write(3, "1000", 4) = 4 [pid 593] close(3) = 0 [pid 593] write(1, "executing program\n", 18) = 18 executing program [pid 593] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 593] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 593] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 592] <... ioctl resumed>) = 0 [pid 593] <... ioctl resumed>) = 0 [pid 593] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 593] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 593] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 593] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.093307][ T586] input: syz0 as /devices/virtual/input/input246 [ 28.096228][ T584] input: syz0 as /devices/virtual/input/input245 [ 28.107332][ T589] input: syz0 as /devices/virtual/input/input247 [ 28.115627][ T588] input: syz0 as /devices/virtual/input/input248 [ 28.123173][ T421] tty tty20: SAK: killed process 589 (syz-executor133): by fd#3 [ 28.135049][ T587] input: syz0 as /devices/virtual/input/input249 [pid 593] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 594 attached [pid 592] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 591] <... ioctl resumed>) = 0 [pid 590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 592] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 594 [pid 592] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 592] <... openat resumed>) = 4 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 592] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 591] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 592] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 591] <... ioctl resumed>) = 0 [pid 590] <... openat resumed>) = 3 [pid 592] <... ioctl resumed>) = 0 [pid 591] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 590] write(3, "1000", 4 [pid 592] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 591] <... ioctl resumed>) = 0 [pid 590] <... write resumed>) = 4 [pid 592] <... ioctl resumed>) = 0 [pid 591] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 590] close(3 [pid 592] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 590] <... close resumed>) = 0 [pid 594] set_robust_list(0x55555a62f6a0, 24 [pid 591] <... ioctl resumed>) = 0 [pid 590] write(1, "executing program\n", 18 [pid 591] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 591] exit_group(0) = ? [pid 594] <... set_robust_list resumed>) = 0 executing program [pid 594] rt_sigprocmask(SIG_SETMASK, [] [pid 592] <... ioctl resumed>) = ? [pid 590] <... write resumed>) = 18 [pid 590] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 594] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 594] setpgid(0, 0) = 0 [pid 594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 594] write(3, "1000", 4) = 4 [pid 594] close(3) = 0 [pid 594] write(1, "executing program\n", 18) = 18 executing program [pid 594] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 593] <... ioctl resumed>) = 0 [pid 593] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 593] exit_group(0) = ? [pid 590] <... openat resumed>) = 3 [pid 590] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 590] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 594] <... openat resumed>) = 3 [pid 594] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 594] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 594] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 594] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 594] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 594] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 594] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 593] +++ exited with 0 +++ [pid 590] <... ioctl resumed>) = 0 [pid 590] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 590] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 590] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 590] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 590] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=593, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 595 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 595 attached [pid 595] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 595] setpgid(0, 0) = 0 [pid 595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 594] <... ioctl resumed>) = 0 [pid 594] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 594] exit_group(0) = ? [pid 594] +++ exited with 0 +++ [pid 592] +++ killed by SIGKILL +++ [pid 591] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=591, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=592, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=594, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 595] <... openat resumed>) = 3 [pid 595] write(3, "1000", 4) = 4 [pid 595] close(3) = 0 [pid 595] write(1, "executing program\n", 18) = 18 executing program [pid 595] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 595] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 595] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 595] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 595] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 595] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 595] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 595] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 590] <... ioctl resumed>) = 0 [ 28.157243][ T593] input: syz0 as /devices/virtual/input/input250 [ 28.163612][ T591] input: syz0 as /devices/virtual/input/input251 [ 28.166845][ T592] input: syz0 as /devices/virtual/input/input252 [ 28.176664][ T421] tty tty20: SAK: killed process 592 (syz-executor133): by fd#3 [ 28.189793][ T594] input: syz0 as /devices/virtual/input/input253 [ 28.193200][ T590] input: syz0 as /devices/virtual/input/input254 [pid 590] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 596 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 597 [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 596 attached [pid 596] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 596] setpgid(0, 0) = 0 [pid 596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 596] write(3, "1000", 4) = 4 [pid 596] close(3) = 0 [pid 596] write(1, "executing program\n", 18) = 18 executing program [pid 596] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 597 attached ) = 3 [pid 595] <... ioctl resumed>) = 0 [pid 590] <... write resumed>) = 24 [pid 310] <... restart_syscall resumed>) = 0 [pid 590] exit_group(0) = ? [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 597] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 596] ioctl(3, VT_ACTIVATE, 0x14 [pid 595] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 598 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 590] +++ exited with 0 +++ [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 598 attached [pid 597] <... prctl resumed>) = 0 [pid 596] <... ioctl resumed>) = 0 [pid 595] <... write resumed>) = 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=590, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 598] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] setpgid(0, 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... restart_syscall resumed>) = 0 [pid 597] <... setpgid resumed>) = 0 [pid 597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 597] write(3, "1000", 4) = 4 [pid 595] exit_group(0 [pid 597] close(3 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 597] <... close resumed>) = 0 [pid 596] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 595] <... exit_group resumed>) = ? [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 598] <... prctl resumed>) = 0 [pid 597] write(1, "executing program\n", 18) = 18 executing program [pid 597] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 597] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 597] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 597] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 597] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 597] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 597] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 597] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 596] <... ioctl resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 599 [pid 597] <... ioctl resumed>) = ? [pid 596] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 307] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 599] setpgid(0, 0) = 0 [pid 599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 599] write(3, "1000", 4) = 4 [pid 599] close(3) = 0 [pid 599] write(1, "executing program\n", 18) = 18 [pid 599] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 598] setpgid(0, 0) = 0 [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 598] write(3, "1000", 4) = 4 [pid 598] close(3) = 0 [pid 598] write(1, "executing program\n", 18) = 18 executing program executing program [pid 598] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 596] <... openat resumed>) = 4 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 596] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 596] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 596] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 596] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 599] <... openat resumed>) = 3 [pid 599] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 599] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 599] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 599] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 599] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 599] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 599] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 598] <... openat resumed>) = 3 [pid 597] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=597, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 598] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 595] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=595, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 600 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 601 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 601 attached [pid 601] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 601] setpgid(0, 0) = 0 [pid 601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 601] write(3, "1000", 4) = 4 [pid 601] close(3) = 0 [pid 601] write(1, "executing program\n", 18) = 18 executing program [pid 601] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 598] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [ 28.208878][ T595] input: syz0 as /devices/virtual/input/input255 [ 28.225506][ T597] input: syz0 as /devices/virtual/input/input256 [ 28.225673][ T421] tty tty20: SAK: killed process 597 (syz-executor133): by fd#3 [ 28.236851][ T596] input: syz0 as /devices/virtual/input/input257 [ 28.249856][ T599] input: syz0 as /devices/virtual/input/input258 [pid 598] openat(AT_FDCWD, "/dev/uinput", O_RDWRci2-android-6-1/strace-static-x86_64: Process 600 attached [pid 601] <... openat resumed>) = 3 [pid 599] <... ioctl resumed>) = 0 [pid 598] <... openat resumed>) = 4 [pid 596] <... ioctl resumed>) = 0 [pid 601] ioctl(3, VT_ACTIVATE, 0x14 [pid 596] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 601] <... ioctl resumed>) = 0 [pid 596] <... write resumed>) = 24 [pid 601] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 596] exit_group(0 [pid 601] <... ioctl resumed>) = 0 [pid 596] <... exit_group resumed>) = ? [pid 600] set_robust_list(0x55555a62f6a0, 24 [pid 599] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 598] ioctl(4, UI_SET_EVBIT, 0x1 [pid 600] <... set_robust_list resumed>) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 600] setpgid(0, 0) = 0 [pid 600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 600] write(3, "1000", 4) = 4 [pid 600] close(3) = 0 [pid 600] write(1, "executing program\n", 18) = 18 executing program [pid 600] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 598] <... ioctl resumed>) = 0 [pid 598] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 598] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 598] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 601] +++ killed by SIGKILL +++ [pid 600] <... openat resumed>) = 3 [pid 599] <... write resumed>) = 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=601, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 600] ioctl(3, VT_ACTIVATE, 0x14 [pid 599] exit_group(0) = ? [pid 600] <... ioctl resumed>) = 0 [pid 596] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=596, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 600] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 598] <... ioctl resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 600] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 600] <... openat resumed>) = 4 [pid 598] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 600] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 600] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 600] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 600] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 598] <... write resumed>) = 24 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 602 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 603 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x55555a62f6a0, 24ci2-android-6-1/strace-static-x86_64: Process 603 attached ) = 0 [pid 599] +++ exited with 0 +++ [pid 603] set_robust_list(0x55555a62f6a0, 24 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=599, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 602] rt_sigprocmask(SIG_SETMASK, [] [pid 603] <... set_robust_list resumed>) = 0 [pid 603] rt_sigprocmask(SIG_SETMASK, [] [pid 602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 602] <... prctl resumed>) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 603] <... prctl resumed>) = 0 [pid 598] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=598, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 603] setpgid(0, 0 [pid 602] <... openat resumed>) = 3 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 600] <... ioctl resumed>) = 0 [pid 600] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 600] exit_group(0) = ? [pid 603] <... setpgid resumed>) = 0 [pid 602] write(3, "1000", 4 [pid 603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 602] <... write resumed>) = 4 [pid 603] <... openat resumed>) = 3 [pid 603] write(3, "1000", 4) = 4 [pid 603] close(3) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 602] close(3 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 602] <... close resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 603] write(1, "executing program\n", 18 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 604 [pid 603] <... write resumed>) = 18 executing program [pid 603] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 605 [pid 602] write(1, "executing program\n", 18 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 602] <... write resumed>) = 18 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 602] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 603] <... openat resumed>) = 3 [pid 602] ioctl(3, VT_ACTIVATE, 0x14 [pid 603] ioctl(3, VT_ACTIVATE, 0x14 [pid 602] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 605 attached [pid 600] +++ exited with 0 +++ ci2-android-6-1/strace-static-x86_64: Process 604 attached [pid 605] set_robust_list(0x55555a62f6a0, 24 [pid 602] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=600, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 602] <... ioctl resumed>) = 0 [pid 605] <... set_robust_list resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 602] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 604] set_robust_list(0x55555a62f6a0, 24 [pid 605] rt_sigprocmask(SIG_SETMASK, [] [pid 602] <... openat resumed>) = 4 [pid 605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 604] <... set_robust_list resumed>) = 0 [pid 602] ioctl(4, UI_SET_EVBIT, 0x1 [pid 605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 604] rt_sigprocmask(SIG_SETMASK, [] [pid 602] <... ioctl resumed>) = 0 [pid 605] <... prctl resumed>) = 0 [pid 604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 602] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 605] setpgid(0, 0 [pid 602] <... ioctl resumed>) = 0 [pid 604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 605] <... setpgid resumed>) = 0 [pid 602] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 604] <... prctl resumed>) = 0 [pid 602] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 603] <... ioctl resumed>) = 0 [pid 603] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 603] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 603] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [ 28.258781][ T323] tty tty20: SAK: killed process 601 (syz-executor133): by fd#3 [ 28.267304][ T598] input: syz0 as /devices/virtual/input/input259 [ 28.278486][ T600] input: syz0 as /devices/virtual/input/input260 [ 28.298211][ T602] input: syz0 as /devices/virtual/input/input261 [pid 603] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 603] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 603] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 605] <... openat resumed>) = 3 [pid 604] setpgid(0, 0 [pid 602] <... ioctl resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 605] write(3, "1000", 4) = 4 [pid 604] <... setpgid resumed>) = 0 [pid 605] close(3 [pid 604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 605] <... close resumed>) = 0 [pid 604] <... openat resumed>) = 3 [pid 605] write(1, "executing program\n", 18 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 604] write(3, "1000", 4 [pid 605] <... write resumed>) = 18 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 605] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 604] <... write resumed>) = 4 [pid 605] <... openat resumed>) = 3 [pid 604] close(3 [pid 605] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 606 [pid 605] <... ioctl resumed>) = 0 [pid 604] <... close resumed>) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 605] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 605] <... ioctl resumed>) = 0 [pid 604] write(1, "executing program\n", 18 [pid 605] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 604] <... write resumed>) = 18 [pid 605] <... openat resumed>) = 4 [pid 604] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 605] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 605] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 604] <... openat resumed>) = 3 [pid 605] <... ioctl resumed>) = 0 [pid 604] ioctl(3, VT_ACTIVATE, 0x14 [pid 605] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 604] <... ioctl resumed>) = 0 [pid 605] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 604] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}ci2-android-6-1/strace-static-x86_64: Process 606 attached ) = 0 [pid 606] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 606] setpgid(0, 0) = 0 [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 606] write(3, "1000", 4) = 4 [pid 606] close(3) = 0 [pid 606] write(1, "executing program\n", 18) = 18 [pid 606] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 606] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 606] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 606] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 606] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 606] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 606] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 606] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 604] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 602] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 604] <... openat resumed>) = 4 [pid 604] ioctl(4, UI_SET_EVBIT, 0x1 [pid 602] <... write resumed>) = 24 [pid 604] <... ioctl resumed>) = 0 executing program executing program executing program [pid 605] <... ioctl resumed>) = 0 [pid 604] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 603] <... ioctl resumed>) = 0 [pid 602] exit_group(0 [pid 604] <... ioctl resumed>) = 0 [pid 604] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 604] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 606] <... ioctl resumed>) = 0 [pid 605] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 603] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 602] <... exit_group resumed>) = ? [pid 606] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 605] <... write resumed>) = 24 [pid 603] <... write resumed>) = ? [pid 605] exit_group(0 [pid 606] <... write resumed>) = 24 [pid 605] <... exit_group resumed>) = ? [pid 606] exit_group(0) = ? [pid 604] <... ioctl resumed>) = 0 [pid 604] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 602] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 604] exit_group(0) = ? [pid 309] <... restart_syscall resumed>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 607 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 607 attached [pid 605] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=605, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 607] set_robust_list(0x55555a62f6a0, 24 [pid 606] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 607] <... set_robust_list resumed>) = 0 [pid 603] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=603, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 607] setpgid(0, 0) = 0 [pid 607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 607] write(3, "1000", 4) = 4 [pid 607] close(3) = 0 [pid 607] write(1, "executing program\n", 18) = 18 [pid 604] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=604, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- executing program [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 607] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 607] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 607] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 607] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 607] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 607] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 607] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.301572][ T603] input: syz0 as /devices/virtual/input/input262 [ 28.317507][ T605] input: syz0 as /devices/virtual/input/input263 [ 28.317641][ T606] input: syz0 as /devices/virtual/input/input264 [ 28.329625][ T604] input: syz0 as /devices/virtual/input/input265 [ 28.336990][ T323] tty tty20: SAK: killed process 603 (syz-executor133): by fd#3 [pid 607] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 607] <... ioctl resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 607] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 611 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 610 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 609 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 608 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 608 attached [pid 608] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 608] setpgid(0, 0) = 0 [pid 608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 608] write(3, "1000", 4) = 4 [pid 608] close(3) = 0 [pid 608] write(1, "executing program\n", 18) = 18 ci2-android-6-1/strace-static-x86_64: Process 610 attached [pid 607] <... write resumed>) = 24 [pid 608] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 611 attached executing program [pid 611] set_robust_list(0x55555a62f6a0, 24 [pid 607] exit_group(0 [pid 610] set_robust_list(0x55555a62f6a0, 24 [pid 611] <... set_robust_list resumed>) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [] [pid 607] <... exit_group resumed>) = ? [pid 610] <... set_robust_list resumed>) = 0 [pid 610] rt_sigprocmask(SIG_SETMASK, [] [pid 611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 608] <... openat resumed>) = 3 [pid 608] ioctl(3, VT_ACTIVATE, 0x14 [pid 611] <... prctl resumed>) = 0 [pid 608] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 609 attached [pid 611] setpgid(0, 0 [pid 610] <... prctl resumed>) = 0 [pid 607] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=607, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 608] +++ killed by SIGKILL +++ [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=608, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 611] <... setpgid resumed>) = 0 [pid 610] setpgid(0, 0 [pid 609] set_robust_list(0x55555a62f6a0, 24 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 610] <... setpgid resumed>) = 0 [pid 611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 612 ci2-android-6-1/strace-static-x86_64: Process 612 attached [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 612] set_robust_list(0x55555a62f6a0, 24 [pid 610] <... openat resumed>) = 3 [pid 609] <... set_robust_list resumed>) = 0 [pid 611] <... openat resumed>) = 3 [pid 611] write(3, "1000", 4 [pid 610] write(3, "1000", 4 [pid 611] <... write resumed>) = 4 [pid 609] rt_sigprocmask(SIG_SETMASK, [] [pid 611] close(3 [pid 610] <... write resumed>) = 4 [pid 611] <... close resumed>) = 0 [pid 609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 611] write(1, "executing program\n", 18) = 18 [pid 610] close(3) = 0 [pid 610] write(1, "executing program\n", 18) = 18 [pid 609] prctl(PR_SET_PDEATHSIG, SIGKILL executing program executing program [pid 611] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 610] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 611] <... openat resumed>) = 3 [pid 610] <... openat resumed>) = 3 [pid 609] <... prctl resumed>) = 0 [pid 611] ioctl(3, VT_ACTIVATE, 0x14 [pid 610] ioctl(3, VT_ACTIVATE, 0x14 [pid 611] <... ioctl resumed>) = 0 [pid 609] setpgid(0, 0 [pid 611] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 610] <... ioctl resumed>) = 0 [pid 609] <... setpgid resumed>) = 0 [pid 611] <... ioctl resumed>) = 0 [pid 611] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 610] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 610] <... ioctl resumed>) = 0 [pid 610] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 611] <... openat resumed>) = 4 [pid 610] <... openat resumed>) = 4 [pid 610] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 610] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 610] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 610] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 612] <... set_robust_list resumed>) = 0 [pid 611] ioctl(4, UI_SET_EVBIT, 0x1 [pid 609] <... openat resumed>) = 3 [pid 611] <... ioctl resumed>) = 0 [pid 611] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 611] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 611] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 612] rt_sigprocmask(SIG_SETMASK, [] [pid 610] <... ioctl resumed>) = 0 [pid 609] write(3, "1000", 4 [pid 306] <... restart_syscall resumed>) = 0 [pid 612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 610] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 609] <... write resumed>) = 4 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 610] <... write resumed>) = 24 [pid 609] close(3 [pid 612] <... prctl resumed>) = 0 [pid 610] exit_group(0 [pid 609] <... close resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 612] setpgid(0, 0 [pid 610] <... exit_group resumed>) = ? [pid 609] write(1, "executing program\n", 18 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 612] <... setpgid resumed>) = 0 [pid 609] <... write resumed>) = 18 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 609] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 612] <... openat resumed>) = 3 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 613 [pid 612] write(3, "1000", 4 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 612] <... write resumed>) = 4 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 612] close(3) = 0 executing program [pid 612] write(1, "executing program\n", 18) = 18 [pid 612] openat(AT_FDCWD, "/dev/char/4:26", O_RDWRci2-android-6-1/strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 611] <... ioctl resumed>) = 0 [pid 612] <... openat resumed>) = 3 [pid 610] +++ exited with 0 +++ [pid 609] <... openat resumed>) = 3 [pid 612] ioctl(3, VT_ACTIVATE, 0x14 [pid 609] ioctl(3, VT_ACTIVATE, 0x14 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 612] <... ioctl resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 612] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 609] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 612] <... ioctl resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 612] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 609] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 612] <... openat resumed>) = 4 [pid 609] <... openat resumed>) = 4 [pid 612] ioctl(4, UI_SET_EVBIT, 0x1 [pid 609] ioctl(4, UI_SET_EVBIT, 0x1 [pid 612] <... ioctl resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 612] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 609] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 612] <... ioctl resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 612] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 609] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 612] <... ioctl resumed>) = 0 [pid 609] <... ioctl resumed>) = 0 [pid 612] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 609] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [] [pid 611] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 613] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 28.361493][ T607] input: syz0 as /devices/virtual/input/input266 [ 28.374091][ T19] tty tty20: SAK: killed process 608 (syz-executor133): by fd#3 [ 28.388890][ T610] input: syz0 as /devices/virtual/input/input267 [ 28.392423][ T611] input: syz0 as /devices/virtual/input/input268 [pid 613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 613] setpgid(0, 0) = 0 [pid 613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 613] write(3, "1000", 4) = 4 [pid 613] close(3) = 0 [pid 613] write(1, "executing program\n", 18) = 18 executing program [pid 613] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 611] <... write resumed>) = 24 [pid 611] exit_group(0) = ? [pid 308] <... restart_syscall resumed>) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 614 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 613] <... openat resumed>) = 3 [pid 612] <... ioctl resumed>) = 0 [pid 611] +++ exited with 0 +++ [pid 613] ioctl(3, VT_ACTIVATE, 0x14 [pid 614] close(3 [pid 612] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=611, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 612] exit_group(0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 612] <... exit_group resumed>) = ? [pid 614] <... close resumed>) = 0 [pid 613] <... ioctl resumed>) = ? executing program [pid 614] write(1, "executing program\n", 18) = 18 [pid 614] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 613] +++ killed by SIGKILL +++ [pid 612] +++ exited with 0 +++ [pid 310] <... restart_syscall resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=613, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 615 [pid 609] <... ioctl resumed>) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 616 [pid 609] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 609] exit_group(0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 617 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 609] <... exit_group resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 617 attached ci2-android-6-1/strace-static-x86_64: Process 616 attached ci2-android-6-1/strace-static-x86_64: Process 615 attached [pid 614] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 614] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 614] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 614] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 614] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 614] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 614] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 617] set_robust_list(0x55555a62f6a0, 24 [pid 616] set_robust_list(0x55555a62f6a0, 24 [pid 615] set_robust_list(0x55555a62f6a0, 24 [pid 617] <... set_robust_list resumed>) = 0 [pid 616] <... set_robust_list resumed>) = 0 [pid 615] <... set_robust_list resumed>) = 0 [pid 609] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=609, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 615] setpgid(0, 0) = 0 [pid 615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 615] write(3, "1000", 4) = 4 [pid 615] close(3) = 0 [pid 615] write(1, "executing program\n", 18) = 18 executing program [pid 615] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 617] rt_sigprocmask(SIG_SETMASK, [] [pid 615] <... openat resumed>) = 3 [pid 615] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 615] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 615] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 615] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 615] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 615] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 615] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 617] <... prctl resumed>) = 0 [pid 616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 617] setpgid(0, 0 [pid 616] setpgid(0, 0) = 0 [pid 616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 617] <... setpgid resumed>) = 0 [pid 616] <... openat resumed>) = 3 [pid 616] write(3, "1000", 4) = 4 [pid 616] close(3) = 0 [pid 616] write(1, "executing program\n", 18) = 18 [pid 616] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 616] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 616] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 616] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 616] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 616] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 616] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 executing program [pid 616] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 614] <... ioctl resumed>) = 0 [pid 617] <... openat resumed>) = 3 [pid 617] write(3, "1000", 4 [pid 614] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 617] <... write resumed>) = 4 [pid 617] close(3 [pid 614] <... write resumed>) = 24 [pid 617] <... close resumed>) = 0 executing program [pid 617] write(1, "executing program\n", 18 [pid 614] exit_group(0 [pid 617] <... write resumed>) = 18 [pid 617] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 614] <... exit_group resumed>) = ? [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 618 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 618 attached [pid 618] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 618] setpgid(0, 0) = 0 [pid 618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 618] write(3, "1000", 4) = 4 [pid 618] close(3) = 0 [pid 618] write(1, "executing program\n", 18) = 18 executing program [ 28.409152][ T609] input: syz0 as /devices/virtual/input/input269 [ 28.415583][ T612] input: syz0 as /devices/virtual/input/input270 [ 28.424625][ T39] tty tty20: SAK: killed process 613 (syz-executor133): by fd#3 [ 28.438157][ T614] input: syz0 as /devices/virtual/input/input271 [ 28.450976][ T616] input: syz0 as /devices/virtual/input/input273 [pid 618] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 617] <... openat resumed>) = 3 [pid 617] ioctl(3, VT_ACTIVATE, 0x14 [pid 618] <... openat resumed>) = 3 [pid 617] <... ioctl resumed>) = ? [pid 616] <... ioctl resumed>) = 0 [pid 618] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 617] +++ killed by SIGKILL +++ [pid 616] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 614] +++ exited with 0 +++ [pid 616] <... write resumed>) = 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=617, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=614, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 616] exit_group(0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 616] <... exit_group resumed>) = ? [pid 618] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 615] <... ioctl resumed>) = 0 [pid 618] <... ioctl resumed>) = 0 [pid 618] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 615] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 618] <... openat resumed>) = 4 [pid 615] <... write resumed>) = 24 [pid 618] ioctl(4, UI_SET_EVBIT, 0x1 [pid 615] exit_group(0) = ? [pid 616] +++ exited with 0 +++ [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=616, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 619 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 620 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 621 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 620 attached [pid 618] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 621 attached ci2-android-6-1/strace-static-x86_64: Process 619 attached [pid 620] set_robust_list(0x55555a62f6a0, 24 [pid 615] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=615, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 620] <... set_robust_list resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 620] setpgid(0, 0) = 0 [pid 620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 620] write(3, "1000", 4 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 622 [pid 620] <... write resumed>) = 4 [pid 620] close(3 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] <... close resumed>) = 0 [pid 620] write(1, "executing program\n", 18) = 18 executing program [pid 620] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 620] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 620] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 620] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 ci2-android-6-1/strace-static-x86_64: Process 622 attached [pid 620] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 620] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 620] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 620] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 622] set_robust_list(0x55555a62f6a0, 24 [pid 618] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 622] <... set_robust_list resumed>) = 0 [pid 622] rt_sigprocmask(SIG_SETMASK, [] [pid 621] set_robust_list(0x55555a62f6a0, 24 [pid 619] set_robust_list(0x55555a62f6a0, 24 [pid 618] <... ioctl resumed>) = 0 [pid 619] <... set_robust_list resumed>) = 0 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 619] setpgid(0, 0) = 0 [pid 619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] write(3, "1000", 4) = 4 [pid 619] close(3) = 0 [pid 619] write(1, "executing program\n", 18) = 18 executing program [pid 619] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 618] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 621] <... set_robust_list resumed>) = 0 [pid 618] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 619] <... openat resumed>) = 3 [pid 622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 621] rt_sigprocmask(SIG_SETMASK, [] [pid 619] ioctl(3, VT_ACTIVATE, 0x14 [pid 622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 622] setpgid(0, 0) = 0 [pid 622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 622] write(3, "1000", 4) = 4 [pid 622] close(3) = 0 [pid 622] write(1, "executing program\n", 18) = 18 executing program [pid 622] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 621] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 620] <... ioctl resumed>) = 0 [pid 621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 621] setpgid(0, 0) = 0 [pid 620] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 619] <... ioctl resumed>) = 0 [pid 619] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 619] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 619] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 619] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 619] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 619] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 621] <... openat resumed>) = 3 [pid 622] <... openat resumed>) = 3 [pid 622] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 622] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 622] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 622] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 621] write(3, "1000", 4 [pid 620] <... write resumed>) = 24 [pid 621] <... write resumed>) = 4 [pid 621] close(3) = 0 [pid 621] write(1, "executing program\n", 18) = 18 executing program [pid 621] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 622] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 621] <... openat resumed>) = 3 [pid 621] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 622] <... ioctl resumed>) = 0 [ 28.457172][ T615] input: syz0 as /devices/virtual/input/input272 [ 28.464450][ T19] tty tty20: SAK: killed process 617 (syz-executor133): by fd#3 [ 28.497303][ T620] input: syz0 as /devices/virtual/input/input275 [ 28.504583][ T618] input: syz0 as /devices/virtual/input/input274 [pid 621] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 620] exit_group(0 [pid 621] <... ioctl resumed>) = 0 [pid 620] <... exit_group resumed>) = ? [pid 621] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 622] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 621] ioctl(4, UI_SET_EVBIT, 0x1 [pid 622] <... ioctl resumed>) = 0 [pid 622] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 621] <... ioctl resumed>) = 0 [pid 621] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 618] <... ioctl resumed>) = 0 [pid 621] <... ioctl resumed>) = 0 [pid 621] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 621] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 618] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 621] <... ioctl resumed>) = ? [pid 618] <... write resumed>) = 24 [pid 618] exit_group(0) = ? [pid 621] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=621, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 620] +++ exited with 0 +++ [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 619] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=620, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 619] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 619] <... write resumed>) = 24 [pid 619] exit_group(0) = ? [pid 622] <... ioctl resumed>) = 0 [pid 619] +++ exited with 0 +++ [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 622] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=619, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 622] <... write resumed>) = 24 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 622] exit_group(0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 622] <... exit_group resumed>) = ? [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 623 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 625 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 624 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 624 attached [pid 618] +++ exited with 0 +++ [pid 624] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=618, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 624] setpgid(0, 0) = 0 [pid 624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 622] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=622, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 624] <... openat resumed>) = 3 [pid 624] write(3, "1000", 4) = 4 [pid 624] close(3) = 0 [pid 624] write(1, "executing program\n", 18) = 18 [pid 624] openat(AT_FDCWD, "/dev/char/4:24", O_RDWRci2-android-6-1/strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 623] setpgid(0, 0) = 0 [pid 623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 623] write(3, "1000", 4) = 4 [pid 623] close(3) = 0 [pid 623] write(1, "executing program\n", 18) = 18 executing program executing program [pid 623] openat(AT_FDCWD, "/dev/char/4:20", O_RDWRci2-android-6-1/strace-static-x86_64: Process 625 attached [pid 625] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 625] setpgid(0, 0) = 0 [pid 625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 625] write(3, "1000", 4) = 4 [pid 625] close(3) = 0 [pid 625] write(1, "executing program\n", 18) = 18 executing program [pid 625] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 624] <... openat resumed>) = 3 [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 624] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 625] <... openat resumed>) = 3 [pid 623] <... openat resumed>) = 3 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 624] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [ 28.518690][ T619] input: syz0 as /devices/virtual/input/input276 [ 28.523444][ T621] input: syz0 as /devices/virtual/input/input278 [ 28.525101][ T622] input: syz0 as /devices/virtual/input/input277 [ 28.538014][ T19] tty tty20: SAK: killed process 621 (syz-executor133): by fd#3 [ 28.554057][ T327] udevd[327]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [pid 624] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 624] ioctl(4, UI_SET_EVBIT, 0x1 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 626 [pid 624] <... ioctl resumed>) = 0 [pid 624] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 624] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 624] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 627 attached ci2-android-6-1/strace-static-x86_64: Process 626 attached [pid 625] ioctl(3, VT_ACTIVATE, 0x14 [pid 623] ioctl(3, VT_ACTIVATE, 0x14 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 627 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 627] setpgid(0, 0) = 0 [pid 623] <... ioctl resumed>) = 0 [pid 626] set_robust_list(0x55555a62f6a0, 24 [pid 623] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 626] <... set_robust_list resumed>) = 0 [pid 625] <... ioctl resumed>) = 0 [pid 623] <... ioctl resumed>) = 0 [pid 627] <... openat resumed>) = 3 [pid 626] rt_sigprocmask(SIG_SETMASK, [] [pid 625] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 624] <... ioctl resumed>) = 0 [pid 623] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 623] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 623] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 623] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 623] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 627] write(3, "1000", 4 [pid 626] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 627] <... write resumed>) = 4 [pid 626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 625] <... ioctl resumed>) = 0 [pid 624] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 625] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 625] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 625] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 625] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 625] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 627] close(3) = 0 [pid 627] write(1, "executing program\n", 18) = 18 [pid 627] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 626] <... prctl resumed>) = 0 executing program [pid 626] setpgid(0, 0 [pid 624] <... write resumed>) = 24 [pid 626] <... setpgid resumed>) = 0 [pid 626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 624] exit_group(0) = ? [pid 626] <... openat resumed>) = 3 [pid 627] <... openat resumed>) = 3 [pid 626] write(3, "1000", 4 [pid 623] <... ioctl resumed>) = 0 [pid 627] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 627] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 627] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 627] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 627] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 627] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 627] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 626] <... write resumed>) = 4 [pid 623] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 626] close(3) = 0 [pid 626] write(1, "executing program\n", 18) = 18 executing program [pid 626] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 623] <... write resumed>) = 24 [pid 625] <... ioctl resumed>) = 0 [pid 625] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 625] exit_group(0) = ? [pid 626] <... openat resumed>) = 3 [pid 626] ioctl(3, VT_ACTIVATE, 0x14 [pid 624] +++ exited with 0 +++ [pid 626] <... ioctl resumed>) = 0 [pid 626] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 626] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 626] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 626] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 626] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 626] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 627] <... ioctl resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=624, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 627] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 308] <... restart_syscall resumed>) = 0 [pid 627] <... write resumed>) = 24 [pid 627] exit_group(0) = ? [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 628 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 628 attached [pid 628] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 628] setpgid(0, 0) = 0 [pid 628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 628] write(3, "1000", 4) = 4 [pid 628] close(3) = 0 [pid 628] write(1, "executing program\n", 18) = 18 executing program [pid 628] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR) = 3 [pid 628] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 628] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 628] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 628] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 628] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 628] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.576973][ T624] input: syz0 as /devices/virtual/input/input279 [ 28.586104][ T623] input: syz0 as /devices/virtual/input/input280 [ 28.589929][ T625] input: syz0 as /devices/virtual/input/input281 [ 28.601305][ T627] input: syz0 as /devices/virtual/input/input282 [ 28.607938][ T19] tty tty20: SAK: killed process 623 (syz-executor133): by fd#3 [ 28.619893][ T626] input: syz0 as /devices/virtual/input/input283 [pid 628] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 623] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=623, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 627] +++ exited with 0 +++ [pid 625] +++ exited with 0 +++ [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 626] <... ioctl resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=625, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=627, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 626] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 628] <... ioctl resumed>) = 0 [pid 628] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 629 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] <... write resumed>) = 24 [pid 628] exit_group(0) = ? ci2-android-6-1/strace-static-x86_64: Process 629 attached [pid 629] set_robust_list(0x55555a62f6a0, 24 [pid 626] <... write resumed>) = 24 [pid 629] <... set_robust_list resumed>) = 0 [pid 629] rt_sigprocmask(SIG_SETMASK, [] [pid 626] exit_group(0) = ? [pid 629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 629] setpgid(0, 0) = 0 [pid 629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 629] write(3, "1000", 4) = 4 [pid 629] close(3 [pid 628] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=628, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 629] <... close resumed>) = 0 [pid 629] write(1, "executing program\n", 18 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 626] +++ exited with 0 +++ [pid 307] <... restart_syscall resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=626, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 629] <... write resumed>) = 18 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 629] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 630 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 629] <... openat resumed>) = 3 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 631 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 630] setpgid(0, 0) = 0 [pid 630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 630] write(3, "1000", 4) = 4 [pid 630] close(3) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 629] ioctl(3, VT_ACTIVATE, 0x14 [pid 630] write(1, "executing program\n", 18) = 18 [pid 630] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 629] <... ioctl resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 632 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 633 [pid 629] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 629] <... ioctl resumed>) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 629] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 630] <... openat resumed>) = 3 [pid 629] <... openat resumed>) = 4 [pid 629] ioctl(4, UI_SET_EVBIT, 0x1 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 630] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 629] <... ioctl resumed>) = 0 [pid 629] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 630] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 630] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 629] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 631 attached [pid 630] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 629] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 630] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 630] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 630] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 629] <... ioctl resumed>) = 0 [pid 629] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0ci2-android-6-1/strace-static-x86_64: Process 633 attached executing program [pid 631] set_robust_list(0x55555a62f6a0, 24ci2-android-6-1/strace-static-x86_64: Process 632 attached [pid 633] set_robust_list(0x55555a62f6a0, 24 [pid 631] <... set_robust_list resumed>) = 0 [pid 633] <... set_robust_list resumed>) = 0 [pid 632] set_robust_list(0x55555a62f6a0, 24 [pid 631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 631] setpgid(0, 0) = 0 [pid 631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 631] write(3, "1000", 4) = 4 [pid 631] close(3) = 0 [pid 631] write(1, "executing program\n", 18) = 18 executing program [pid 631] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 633] setpgid(0, 0) = 0 [pid 633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 633] write(3, "1000", 4) = 4 [pid 633] close(3) = 0 executing program [pid 633] write(1, "executing program\n", 18) = 18 [pid 633] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 632] <... set_robust_list resumed>) = 0 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 executing program [pid 632] write(1, "executing program\n", 18) = 18 [pid 632] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 629] <... ioctl resumed>) = 0 [pid 629] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 629] exit_group(0) = ? [pid 633] <... openat resumed>) = 3 [pid 632] <... openat resumed>) = 3 [pid 632] ioctl(3, VT_ACTIVATE, 0x14 [pid 633] ioctl(3, VT_ACTIVATE, 0x14 [pid 632] <... ioctl resumed>) = 0 [pid 633] <... ioctl resumed>) = 0 [pid 632] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 633] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 632] <... ioctl resumed>) = 0 [pid 633] <... ioctl resumed>) = 0 [pid 632] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 633] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 632] <... openat resumed>) = 4 [pid 633] <... openat resumed>) = 4 [pid 632] ioctl(4, UI_SET_EVBIT, 0x1 [pid 633] ioctl(4, UI_SET_EVBIT, 0x1 [pid 632] <... ioctl resumed>) = 0 [pid 633] <... ioctl resumed>) = 0 [pid 632] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 633] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 632] <... ioctl resumed>) = 0 [pid 633] <... ioctl resumed>) = 0 [pid 632] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 633] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 632] <... ioctl resumed>) = 0 [pid 631] <... openat resumed>) = 3 [pid 633] <... ioctl resumed>) = 0 [pid 632] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [ 28.632745][ T628] input: syz0 as /devices/virtual/input/input284 [ 28.664609][ T629] input: syz0 as /devices/virtual/input/input285 [ 28.669571][ T630] input: syz0 as /devices/virtual/input/input286 [pid 633] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 631] ioctl(3, VT_ACTIVATE, 0x14 [pid 630] <... ioctl resumed>) = 0 [pid 630] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 630] exit_group(0) = ? [pid 631] <... ioctl resumed>) = 0 [pid 631] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 631] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 631] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 631] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 631] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 631] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 629] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=629, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 632] <... ioctl resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 634 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 634 attached [pid 634] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 634] write(3, "1000", 4) = 4 [pid 634] close(3) = 0 [pid 634] write(1, "executing program\n", 18 [pid 633] <... ioctl resumed>) = 0 [pid 632] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 633] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 632] <... write resumed>) = 24 [pid 634] <... write resumed>) = 18 executing program [pid 634] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 [pid 634] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 634] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 634] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 634] ioctl(4, UI_SET_EVBIT, 0x1 [pid 633] <... write resumed>) = 24 [pid 633] exit_group(0 [pid 632] exit_group(0 [pid 633] <... exit_group resumed>) = ? [pid 634] <... ioctl resumed>) = 0 [pid 634] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 630] +++ exited with 0 +++ [pid 632] <... exit_group resumed>) = ? [pid 631] <... ioctl resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=630, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 635 attached [pid 633] +++ exited with 0 +++ [pid 634] <... ioctl resumed>) = ? [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 635 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=633, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 631] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 631] exit_group(0) = ? [pid 634] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=634, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 635] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 635] setpgid(0, 0) = 0 [pid 635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 631] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=631, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 635] write(3, "1000", 4) = 4 [pid 635] close(3) = 0 [pid 635] write(1, "executing program\n", 18) = 18 executing program [pid 635] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 635] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 635] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 635] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 635] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 635] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 635] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.683418][ T633] input: syz0 as /devices/virtual/input/input288 [ 28.689212][ T632] input: syz0 as /devices/virtual/input/input287 [ 28.699702][ T631] input: syz0 as /devices/virtual/input/input289 [ 28.713709][ T39] tty tty20: SAK: killed process 634 (syz-executor133): by fd#3 [pid 635] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 639 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 638 [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 636 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 637 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 637 attached ci2-android-6-1/strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x55555a62f6a0, 24 [pid 637] set_robust_list(0x55555a62f6a0, 24 [pid 638] <... set_robust_list resumed>) = 0 [pid 637] <... set_robust_list resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 636 attached [pid 638] rt_sigprocmask(SIG_SETMASK, [] [pid 637] rt_sigprocmask(SIG_SETMASK, [] [pid 636] set_robust_list(0x55555a62f6a0, 24ci2-android-6-1/strace-static-x86_64: Process 639 attached [pid 638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 636] <... set_robust_list resumed>) = 0 [pid 635] <... ioctl resumed>) = 0 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 636] setpgid(0, 0) = 0 [pid 636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 636] write(3, "1000", 4) = 4 [pid 636] close(3) = 0 executing program [pid 636] write(1, "executing program\n", 18) = 18 [pid 636] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR) = 3 [pid 636] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 636] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 636] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 636] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 636] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 639] set_robust_list(0x55555a62f6a0, 24 [pid 638] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 639] <... set_robust_list resumed>) = 0 [pid 638] <... prctl resumed>) = 0 [pid 637] <... prctl resumed>) = 0 [pid 636] <... ioctl resumed>) = 0 [pid 635] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 639] rt_sigprocmask(SIG_SETMASK, [] [pid 638] setpgid(0, 0 [pid 637] setpgid(0, 0 [pid 636] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 635] <... write resumed>) = 24 [pid 639] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 638] <... setpgid resumed>) = 0 [pid 637] <... setpgid resumed>) = 0 [pid 636] <... ioctl resumed>) = 0 [pid 635] exit_group(0 [pid 639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 635] <... exit_group resumed>) = ? [pid 638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 636] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 639] <... prctl resumed>) = 0 [pid 638] <... openat resumed>) = 3 [pid 639] setpgid(0, 0) = 0 [pid 638] write(3, "1000", 4 [pid 637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 638] <... write resumed>) = 4 [pid 639] <... openat resumed>) = 3 [pid 638] close(3 [pid 637] <... openat resumed>) = 3 [pid 639] write(3, "1000", 4 [pid 638] <... close resumed>) = 0 [pid 637] write(3, "1000", 4 [pid 635] +++ exited with 0 +++ [pid 639] <... write resumed>) = 4 [pid 639] close(3 [pid 638] write(1, "executing program\n", 18 [pid 637] <... write resumed>) = 4 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=635, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 638] <... write resumed>) = 18 [pid 309] <... restart_syscall resumed>) = 0 [pid 639] <... close resumed>) = 0 [pid 637] close(3 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 639] write(1, "executing program\n", 18 [pid 638] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 637] <... close resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 640 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program ci2-android-6-1/strace-static-x86_64: Process 640 attached [pid 640] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 640] setpgid(0, 0) = 0 [pid 640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 640] write(3, "1000", 4) = 4 [pid 640] close(3) = 0 [pid 640] write(1, "executing program\n", 18) = 18 executing program executing program [pid 640] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 639] <... write resumed>) = 18 [pid 639] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 637] write(1, "executing program\n", 18) = 18 executing program [pid 637] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 640] <... openat resumed>) = 3 [pid 640] ioctl(3, VT_ACTIVATE, 0x14 [pid 639] <... openat resumed>) = 3 [pid 636] <... ioctl resumed>) = 0 [pid 640] <... ioctl resumed>) = 0 [pid 639] ioctl(3, VT_ACTIVATE, 0x14 [pid 638] <... openat resumed>) = 3 [pid 636] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 637] <... openat resumed>) = 3 [pid 640] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 637] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 637] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 637] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 637] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 637] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 640] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 639] <... ioctl resumed>) = 0 [pid 638] ioctl(3, VT_ACTIVATE, 0x14 [pid 636] <... write resumed>) = 24 [pid 637] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 637] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 640] <... openat resumed>) = 4 [pid 640] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 640] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 640] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 640] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 639] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 637] <... ioctl resumed>) = 0 [pid 636] exit_group(0 [pid 639] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 639] ioctl(4, UI_SET_EVBIT, 0x1 [pid 638] <... ioctl resumed>) = 0 [pid 638] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 638] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 637] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 636] <... exit_group resumed>) = ? [pid 638] <... openat resumed>) = 4 [pid 638] ioctl(4, UI_SET_EVBIT, 0x1 [pid 639] <... ioctl resumed>) = 0 [pid 639] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 638] <... ioctl resumed>) = 0 [pid 638] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 638] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 638] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 639] <... ioctl resumed>) = 0 [pid 639] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [ 28.732316][ T635] input: syz0 as /devices/virtual/input/input291 [ 28.749339][ T636] input: syz0 as /devices/virtual/input/input292 [ 28.770223][ T637] input: syz0 as /devices/virtual/input/input293 [ 28.773693][ T640] input: syz0 as /devices/virtual/input/input294 [pid 639] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 640] <... ioctl resumed>) = 0 [pid 637] <... write resumed>) = 24 [pid 640] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 640] exit_group(0) = ? [pid 636] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=636, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 638] <... ioctl resumed>) = 0 [pid 638] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 638] exit_group(0) = ? [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 641 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 641 attached [pid 638] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=638, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 641] set_robust_list(0x55555a62f6a0, 24 [pid 639] <... ioctl resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 640] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=640, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 641] <... set_robust_list resumed>) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [] [pid 639] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 639] <... write resumed>) = 24 [pid 641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 639] exit_group(0 [pid 641] setpgid(0, 0 [pid 639] <... exit_group resumed>) = ? [pid 641] <... setpgid resumed>) = 0 [pid 641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 641] write(3, "1000", 4) = 4 [pid 641] close(3) = 0 [pid 641] write(1, "executing program\n", 18) = 18 executing program [pid 641] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 637] +++ killed by SIGKILL +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=637, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 641] <... openat resumed>) = 3 [pid 641] ioctl(3, VT_ACTIVATE, 0x14 [pid 306] <... restart_syscall resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 642 [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 643 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 641] <... ioctl resumed>) = 0 ci2-android-6-1/strace-static-x86_64: Process 643 attached ci2-android-6-1/strace-static-x86_64: Process 642 attached [pid 641] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 641] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 643] set_robust_list(0x55555a62f6a0, 24 [pid 642] set_robust_list(0x55555a62f6a0, 24 [pid 641] <... openat resumed>) = 4 [pid 643] <... set_robust_list resumed>) = 0 [pid 642] <... set_robust_list resumed>) = 0 [pid 641] ioctl(4, UI_SET_EVBIT, 0x1 [pid 643] rt_sigprocmask(SIG_SETMASK, [] [pid 642] rt_sigprocmask(SIG_SETMASK, [] [pid 641] <... ioctl resumed>) = 0 [pid 642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 641] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 642] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 641] <... ioctl resumed>) = 0 [pid 639] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=639, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 309] <... restart_syscall resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 644 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 644 attached [pid 644] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 644] setpgid(0, 0) = 0 [pid 644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 644] write(3, "1000", 4) = 4 [pid 644] close(3) = 0 [pid 644] write(1, "executing program\n", 18) = 18 executing program [pid 644] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 644] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 644] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 644] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 644] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 644] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 644] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 643] <... prctl resumed>) = 0 [pid 643] setpgid(0, 0) = 0 [pid 643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 643] write(3, "1000", 4) = 4 [pid 643] close(3) = 0 [pid 643] write(1, "executing program\n", 18) = 18 executing program [pid 643] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 641] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 642] <... prctl resumed>) = 0 [pid 643] <... openat resumed>) = 3 [pid 643] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 643] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 642] setpgid(0, 0 [pid 641] <... ioctl resumed>) = 0 [pid 643] <... ioctl resumed>) = 0 [pid 643] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 643] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 643] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 643] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 643] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 642] <... setpgid resumed>) = 0 [pid 641] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 644] <... ioctl resumed>) = 0 [ 28.785708][ T638] input: syz0 as /devices/virtual/input/input296 [ 28.787025][ T639] input: syz0 as /devices/virtual/input/input295 [ 28.798676][ T39] tty tty20: SAK: killed process 637 (syz-executor133): by fd#3 [pid 644] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... restart_syscall resumed>) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 645 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 645] setpgid(0, 0) = 0 [pid 645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 645] write(3, "1000", 4) = 4 [pid 645] close(3) = 0 [pid 645] write(1, "executing program\n", 18) = 18 executing program [pid 645] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 642] <... openat resumed>) = 3 [pid 642] write(3, "1000", 4 [pid 644] <... ioctl resumed>) = 0 [pid 642] <... write resumed>) = 4 [pid 642] close(3 [pid 644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 642] <... close resumed>) = 0 [pid 644] <... write resumed>) = 24 [pid 642] write(1, "executing program\n", 18 [pid 644] exit_group(0 [pid 642] <... write resumed>) = 18 executing program [pid 642] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 644] <... exit_group resumed>) = ? [pid 643] <... ioctl resumed>) = 0 [pid 643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 645] <... openat resumed>) = 3 [pid 643] exit_group(0) = ? [pid 645] ioctl(3, VT_ACTIVATE, 0x14 [pid 642] <... openat resumed>) = 3 [pid 645] <... ioctl resumed>) = 0 [pid 644] +++ exited with 0 +++ [pid 643] +++ exited with 0 +++ [pid 641] <... ioctl resumed>) = 0 [pid 642] +++ killed by SIGKILL +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=644, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=643, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 308] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=642, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 309] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555a62f690) = 646 [pid 308] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 647 [pid 308] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 641] exit_group(0) = ? [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 648 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 647 attached [pid 645] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 647] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 647] setpgid(0, 0) = 0 [pid 647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 647] write(3, "1000", 4) = 4 [pid 647] close(3) = 0 [pid 647] write(1, "executing program\n", 18) = 18 executing program [pid 647] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR) = 3 ci2-android-6-1/strace-static-x86_64: Process 648 attached ci2-android-6-1/strace-static-x86_64: Process 646 attached [pid 645] <... ioctl resumed>) = 0 [pid 645] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 648] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 647] ioctl(3, VT_ACTIVATE, 0x14 [pid 646] set_robust_list(0x55555a62f6a0, 24 [pid 645] <... openat resumed>) = 4 [pid 645] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 648] rt_sigprocmask(SIG_SETMASK, [] [pid 645] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 647] <... ioctl resumed>) = 0 [pid 646] <... set_robust_list resumed>) = 0 [pid 645] <... ioctl resumed>) = 0 [pid 648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 647] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 646] rt_sigprocmask(SIG_SETMASK, [] [pid 645] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 641] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=641, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 648] setpgid(0, 0 [pid 647] <... ioctl resumed>) = 0 [pid 646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 645] <... ioctl resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 648] <... setpgid resumed>) = 0 [pid 648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 645] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 648] <... openat resumed>) = 3 [pid 648] write(3, "1000", 4) = 4 executing program [pid 648] close(3) = 0 [pid 648] write(1, "executing program\n", 18) = 18 [ 28.829973][ T643] input: syz0 as /devices/virtual/input/input299 [ 28.837039][ T644] input: syz0 as /devices/virtual/input/input298 [ 28.845681][ T641] input: syz0 as /devices/virtual/input/input297 [ 28.855523][ T39] tty tty20: SAK: killed process 642 (syz-executor133): by fd#3 [pid 648] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR) = 3 [pid 648] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 648] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 648] openat(AT_FDCWD, "/dev/uinput", O_RDWR) = 4 [pid 648] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 648] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 648] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 648] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 649 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 649 attached [pid 647] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 647] <... openat resumed>) = 4 [pid 646] <... prctl resumed>) = 0 [pid 647] ioctl(4, UI_SET_EVBIT, 0x1 [pid 646] setpgid(0, 0 [pid 647] <... ioctl resumed>) = 0 [pid 646] <... setpgid resumed>) = 0 [pid 647] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 647] <... ioctl resumed>) = 0 [pid 646] <... openat resumed>) = 3 [pid 647] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 646] write(3, "1000", 4 [pid 647] <... ioctl resumed>) = 0 [pid 646] <... write resumed>) = 4 [pid 647] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 646] close(3 [pid 649] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 649] setpgid(0, 0) = 0 [pid 649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] write(3, "1000", 4) = 4 [pid 649] close(3) = 0 [pid 649] write(1, "executing program\n", 18) = 18 executing program [pid 649] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 645] <... ioctl resumed>) = 0 [pid 645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 645] exit_group(0) = ? [pid 649] <... openat resumed>) = 3 [pid 647] <... ioctl resumed>) = ? [pid 646] <... close resumed>) = 0 [pid 649] ioctl(3, VT_ACTIVATE, 0x14 [pid 646] write(1, "executing program\n", 18) = 18 executing program [pid 646] openat(AT_FDCWD, "/dev/char/4:24", O_RDWR [pid 649] <... ioctl resumed>) = 0 [pid 646] <... openat resumed>) = 3 [pid 649] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 646] ioctl(3, VT_ACTIVATE, 0x14 [pid 649] <... ioctl resumed>) = 0 [pid 646] <... ioctl resumed>) = 0 [pid 649] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 646] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 649] <... openat resumed>) = 4 [pid 646] <... ioctl resumed>) = 0 [pid 649] ioctl(4, UI_SET_EVBIT, 0x1 [pid 646] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 645] +++ exited with 0 +++ [pid 649] <... ioctl resumed>) = 0 [pid 648] <... ioctl resumed>) = 0 [pid 646] <... openat resumed>) = 4 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=645, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 648] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 310] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 648] <... write resumed>) = 24 [pid 649] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 648] exit_group(0 [pid 646] ioctl(4, UI_SET_EVBIT, 0x1 [pid 648] <... exit_group resumed>) = ? [pid 649] <... ioctl resumed>) = 0 [pid 646] <... ioctl resumed>) = 0 [pid 649] ioctl(4, UI_DEV_SETUP, 0x200000000080 [pid 646] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 649] <... ioctl resumed>) = 0 [pid 646] <... ioctl resumed>) = 0 [pid 649] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 646] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 646] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 647] +++ killed by SIGKILL +++ [pid 310] rt_sigprocmask(SIG_BLOCK, ~[] [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=647, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 310] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 651 attached ci2-android-6-1/strace-static-x86_64: Process 650 attached [pid 310] <... clone resumed>, child_tidptr=0x55555a62f690) = 650 [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 651 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 650] setpgid(0, 0) = 0 [pid 650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 650] write(3, "1000", 4) = 4 [pid 648] +++ exited with 0 +++ [pid 650] close(3) = 0 executing program [pid 650] write(1, "executing program\n", 18 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=648, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 650] <... write resumed>) = 18 [pid 650] openat(AT_FDCWD, "/dev/char/4:28", O_RDWR [pid 309] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 650] <... openat resumed>) = 3 [pid 650] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 650] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 651] set_robust_list(0x55555a62f6a0, 24 [pid 650] <... ioctl resumed>) = 0 [pid 650] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 651] <... set_robust_list resumed>) = 0 [pid 650] <... openat resumed>) = 4 [pid 651] rt_sigprocmask(SIG_SETMASK, [] [pid 650] ioctl(4, UI_SET_EVBIT, 0x1 [pid 651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 650] <... ioctl resumed>) = 0 [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 650] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 650] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 650] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 651] <... prctl resumed>) = 0 [ 28.876738][ T645] input: syz0 as /devices/virtual/input/input300 [ 28.882895][ T648] input: syz0 as /devices/virtual/input/input301 [ 28.886374][ T647] input: syz0 as /devices/virtual/input/input302 [ 28.896524][ T421] tty tty20: SAK: killed process 647 (syz-executor133): by fd#3 [ 28.908070][ T649] input: syz0 as /devices/virtual/input/input303 [ 28.913886][ T646] input: syz0 as /devices/virtual/input/input304 [pid 649] <... ioctl resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 651] setpgid(0, 0 [pid 649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 651] <... setpgid resumed>) = 0 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 651] write(3, "1000", 4) = 4 [pid 651] close(3) = 0 [pid 651] write(1, "executing program\n", 18) = 18 executing program [pid 651] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 649] <... write resumed>) = 24 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 651] <... openat resumed>) = 3 [pid 651] ioctl(3, VT_ACTIVATE, 0x14) = 0 [pid 651] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */}) = 0 [pid 651] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 309] <... clone resumed>, child_tidptr=0x55555a62f690) = 652 [pid 649] exit_group(0 [pid 651] <... openat resumed>) = 4 [pid 651] ioctl(4, UI_SET_EVBIT, 0x1) = 0 [pid 651] ioctl(4, UI_SET_KEYBIT, 0x1c) = 0 [pid 651] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 651] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 649] <... exit_group resumed>) = ? [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 652 attached [pid 646] <... ioctl resumed>) = 0 [pid 651] <... ioctl resumed>) = ? [pid 652] set_robust_list(0x55555a62f6a0, 24) = 0 [pid 652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 652] setpgid(0, 0) = 0 [pid 652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 652] write(3, "1000", 4) = 4 [pid 652] close(3) = 0 [pid 652] write(1, "executing program\n", 18) = 18 executing program [pid 652] openat(AT_FDCWD, "/dev/char/4:26", O_RDWR [pid 646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 646] exit_group(0) = ? [pid 650] <... ioctl resumed>) = 0 [pid 652] <... openat resumed>) = 3 [pid 650] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24 [pid 651] +++ killed by SIGKILL +++ [pid 649] +++ exited with 0 +++ [pid 650] <... write resumed>) = 24 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=651, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=649, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 652] ioctl(3, VT_ACTIVATE, 0x14 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[] [pid 652] <... ioctl resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 652] ioctl(3, KDSKBENT, {kb_table=K_NORMTAB, kb_index=28, kb_value=0x20f /* K_SAK */} [pid 650] exit_group(0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 650] <... exit_group resumed>) = ? ci2-android-6-1/strace-static-x86_64: Process 653 attached [pid 652] <... ioctl resumed>) = 0 [pid 652] openat(AT_FDCWD, "/dev/uinput", O_RDWR [pid 307] <... clone resumed>, child_tidptr=0x55555a62f690) = 653 [pid 652] <... openat resumed>) = 4 [pid 646] +++ exited with 0 +++ [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... restart_syscall resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=646, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 652] ioctl(4, UI_SET_EVBIT, 0x1 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 652] <... ioctl resumed>) = 0 [pid 653] set_robust_list(0x55555a62f6a0, 24 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 652] ioctl(4, UI_SET_KEYBIT, 0x1c [pid 653] <... set_robust_list resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 652] <... ioctl resumed>) = 0 [pid 652] ioctl(4, UI_DEV_SETUP, 0x200000000080) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555a62f690) = 654 [pid 653] rt_sigprocmask(SIG_SETMASK, [] [pid 652] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 654 attached [pid 653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] set_robust_list(0x55555a62f6a0, 24 [pid 653] setpgid(0, 0 [pid 654] <... set_robust_list resumed>) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 654] write(3, "1000", 4) = 4 [pid 654] close(3) = 0 executing program [pid 654] write(1, "executing program\n", 18) = 18 [pid 654] openat(AT_FDCWD, "/dev/char/4:20", O_RDWR [pid 653] <... setpgid resumed>) = 0 [pid 653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 653] write(3, "1000", 4 [pid 308] <... restart_syscall resumed>) = 0 [pid 653] <... write resumed>) = 4 [pid 653] close(3) = 0 [pid 653] write(1, "executing program\n", 18) = 18 executing program [pid 653] openat(AT_FDCWD, "/dev/char/4:22", O_RDWR [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555a62f690) = 655 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 652] <... ioctl resumed>) = 0 [pid 652] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x1c\x00\x01\x00\x00\x00", 24) = 24 [pid 652] exit_group(0) = ? [ 28.926099][ T650] input: syz0 as /devices/virtual/input/input305 [ 28.935569][ T651] input: syz0 as /devices/virtual/input/input306 [ 28.942311][ T39] tty tty20: SAK: killed process 651 (syz-executor133): by fd#3 [ 28.957722][ T652] input: syz0 as /devices/virtual/input/input307 [ 28.969806][ T39] ================================================================== [ 28.969826][ T39] BUG: KASAN: null-ptr-deref in n_tty_flush_buffer+0x6c/0x220 [ 28.969865][ T39] Write of size 24 at addr 0000000000000000 by task kworker/1:1/39 [ 28.969879][ T39] [ 28.969884][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted syzkaller #0 [ 28.969902][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.969911][ T39] Workqueue: events vc_SAK [ 28.969936][ T39] Call Trace: [ 28.969941][ T39] [ 28.969948][ T39] __dump_stack+0x21/0x24 [ 28.969975][ T39] dump_stack_lvl+0x110/0x170 [ 28.969996][ T39] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.970018][ T39] ? preempt_count_add+0x90/0x1b0 [ 28.970035][ T39] ? n_tty_flush_buffer+0x6c/0x220 [ 28.970053][ T39] ? n_tty_flush_buffer+0x6c/0x220 [ 28.970070][ T39] print_report+0x3d/0x60 [ 28.970089][ T39] kasan_report+0x122/0x150 [ 28.970110][ T39] ? n_tty_flush_buffer+0x6c/0x220 [ 28.970129][ T39] kasan_check_range+0x249/0x2a0 [ 28.970150][ T39] memset+0x23/0x40 [ 28.970164][ T39] n_tty_flush_buffer+0x6c/0x220 [ 28.970180][ T39] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 28.970198][ T39] tty_buffer_flush+0x320/0x3e0 [ 28.970218][ T39] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 28.970240][ T39] ? _raw_spin_unlock+0x4c/0x70 [ 28.970262][ T39] tty_ldisc_flush+0x6c/0xc0 [ 28.970282][ T39] __do_SAK+0x257/0x630 [ 28.970305][ T39] vc_SAK+0x78/0x220 [ 28.970323][ T39] process_one_work+0x717/0xc30 [ 28.970342][ T39] worker_thread+0xa4d/0x11d0 [ 28.970362][ T39] kthread+0x281/0x320 [ 28.970378][ T39] ? __cfi_worker_thread+0x10/0x10 [ 28.970394][ T39] ? __cfi_kthread+0x10/0x10 [ 28.970412][ T39] ret_from_fork+0x1f/0x30 [ 28.970433][ T39] [ 28.970439][ T39] ================================================================== [ 28.970446][ T39] Disabling lock debugging due to kernel taint [ 28.970463][ T39] BUG: unable to handle page fault for address: 0000000000002260 [ 28.970472][ T39] #PF: supervisor write access in kernel mode [ 28.970480][ T39] #PF: error_code(0x0002) - not-present page [ 28.970489][ T39] PGD 0 P4D 0 [ 28.970502][ T39] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.970516][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G B syzkaller #0 [ 28.970530][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.970538][ T39] Workqueue: events vc_SAK [ 28.970557][ T39] RIP: 0010:memset_erms+0x9/0x10 [ 28.970573][ T39] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 28.970587][ T39] RSP: 0018:ffffc9000028fb50 EFLAGS: 00010202 [ 28.970602][ T39] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 28.970613][ T39] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 28.970621][ T39] RBP: ffffc9000028fb70 R08: 0000000000000000 R09: 0000000000002260 [ 28.970632][ T39] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: 000000000000005d [ 28.970644][ T39] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 28.970655][ T39] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.970670][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.970683][ T39] CR2: 0000000000002260 CR3: 0000000114dec000 CR4: 00000000003506a0 [ 28.970698][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.970708][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.970719][ T39] Call Trace: [ 28.970724][ T39] [ 28.970729][ T39] ? memset+0x35/0x40 [ 28.970745][ T39] n_tty_flush_buffer+0x7b/0x220 [ 28.970762][ T39] ? __cfi_n_tty_flush_buffer+0x10/0x10 [ 28.970780][ T39] tty_buffer_flush+0x320/0x3e0 [ 28.970800][ T39] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 28.970831][ T39] ? _raw_spin_unlock+0x4c/0x70 [ 28.970853][ T39] tty_ldisc_flush+0x6c/0xc0 [ 28.970871][ T39] __do_SAK+0x257/0x630 [ 28.970892][ T39] vc_SAK+0x78/0x220 [ 28.970911][ T39] process_one_work+0x717/0xc30 [ 28.970929][ T39] worker_thread+0xa4d/0x11d0 [ 28.970950][ T39] kthread+0x281/0x320 [ 28.970966][ T39] ? __cfi_worker_thread+0x10/0x10 [ 28.970982][ T39] ? __cfi_kthread+0x10/0x10 [ 28.970999][ T39] ret_from_fork+0x1f/0x30 [ 28.971019][ T39] [ 28.971025][ T39] Modules linked in: [ 28.971043][ T39] CR2: 0000000000002260 [ 28.971053][ T39] ---[ end trace 0000000000000000 ]--- [ 28.971060][ T39] RIP: 0010:memset_erms+0x9/0x10 [ 28.971076][ T39] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 28.971089][ T39] RSP: 0018:ffffc9000028fb50 EFLAGS: 00010202 [ 28.971103][ T39] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000000010 [ 28.971113][ T39] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000002260 [ 28.971124][ T39] RBP: ffffc9000028fb70 R08: 0000000000000000 R09: 0000000000002260 [ 28.971135][ T39] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: 000000000000005d [ 28.971146][ T39] R13: 0000000000002260 R14: 0000000000000000 R15: 0000000000002260 [ 28.971155][ T39] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.971169][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.971182][ T39] CR2: 0000000000002260 CR3: 0000000114dec000 CR4: 00000000003506a0 [ 28.971196][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.971207][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.971219][ T39] Kernel panic - not syncing: Fatal exception [ 28.971438][ T39] Kernel Offset: disabled