./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor626261167
<...>
Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts.
execve("./syz-executor626261167", ["./syz-executor626261167"], 0x7ffe16de38b0 /* 10 vars */) = 0
brk(NULL) = 0x555555f93000
brk(0x555555f93c40) = 0x555555f93c40
arch_prctl(ARCH_SET_FS, 0x555555f93300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor626261167", 4096) = 27
brk(0x555555fb4c40) = 0x555555fb4c40
brk(0x555555fb5000) = 0x555555fb5000
mprotect(0x7f8fa9e40000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
ioctl(3, UI_SET_EVBIT, 0x3) = 0
write(3, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
syzkaller login: [ 49.156644][ T3613] ------------[ cut here ]------------
[ 49.162312][ T3613] WARNING: CPU: 1 PID: 3613 at mm/page_alloc.c:5483 __alloc_pages+0x39e/0x510
[ 49.171237][ T3613] Modules linked in:
[ 49.175161][ T3613] CPU: 1 PID: 3613 Comm: syz-executor626 Not tainted 5.19.0-next-20220809-syzkaller #0
[ 49.184839][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.194998][ T3613] RIP: 0010:__alloc_pages+0x39e/0x510
[ 49.200438][ T3613] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d b3 a9 0b 0c 00 75 09 c6 05 aa a9 0b 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 71 82 44 7e 48 c7 c0 60 23
[ 49.220109][ T3613] RSP: 0018:ffffc9000385fb98 EFLAGS: 00010246
[ 49.226183][ T3613] RAX: 0000000000000000 RBX: 1ffff9200070bf74 RCX: 0000000000000000
[ 49.234541][ T3613] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000
[ 49.242583][ T3613] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 49.250619][ T3613] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000b
[ 49.258584][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888012635168
[ 49.266618][ T3613] FS: 0000555555f93300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.275582][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.282230][ T3613] CR2: 00000000005f6b40 CR3: 0000000073ab5000 CR4: 00000000003506e0
[ 49.290256][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.298216][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.306220][ T3613] Call Trace:
[ 49.309537][ T3613]
[ 49.312470][ T3613] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200
[ 49.319231][ T3613] ? rcu_read_lock_sched_held+0x3a/0x70
[ 49.324857][ T3613] ? uinput_ioctl_handler.isra.0+0xa7/0x1dc0
[ 49.330915][ T3613] alloc_pages+0x1a6/0x270
[ 49.335331][ T3613] kmalloc_order+0x34/0xf0
[ 49.340166][ T3613] kmalloc_order_trace+0x13/0x120
[ 49.345211][ T3613] input_mt_init_slots+0xd9/0x530
[ 49.350283][ T3613] uinput_ioctl_handler.isra.0+0x18e9/0x1dc0
[ 49.356289][ T3613] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 49.362059][ T3613] ? find_held_lock+0x2d/0x110
[ 49.366834][ T3613] ? ptrace_notify+0xfa/0x140
[ 49.371574][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.376446][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.381701][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10
[ 49.386649][ T3613] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 49.392849][ T3613] __x64_sys_ioctl+0x193/0x200
[ 49.397629][ T3613] do_syscall_64+0x35/0xb0
[ 49.402086][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.407990][ T3613] RIP: 0033:0x7f8fa9dd3719
[ 49.412443][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.432118][ T3613] RSP: 002b:00007ffe8996a828 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.440582][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fa9dd3719
[ 49.448564][ T3613] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.456805][ T3613] RBP: 00007f8fa9d978c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.464892][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fa9d97950
[ 49.472929][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.480992][ T3613]
[ 49.484037][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[ 49.490605][ T3613] CPU: 0 PID: 3613 Comm: syz-executor626 Not tainted 5.19.0-next-20220809-syzkaller #0
[ 49.500233][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.510272][ T3613] Call Trace:
[ 49.513554][ T3613]
[ 49.516476][ T3613] dump_stack_lvl+0xcd/0x134
[ 49.521065][ T3613] panic+0x2c8/0x627
[ 49.524975][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.530953][ T3613] ? __warn.cold+0x248/0x2c4
[ 49.535539][ T3613] ? __alloc_pages+0x39e/0x510
[ 49.540295][ T3613] __warn.cold+0x259/0x2c4
[ 49.544702][ T3613] ? __alloc_pages+0x39e/0x510
[ 49.549461][ T3613] report_bug+0x1bc/0x210
[ 49.553801][ T3613] handle_bug+0x3c/0x60
[ 49.557950][ T3613] exc_invalid_op+0x14/0x40
[ 49.562442][ T3613] asm_exc_invalid_op+0x16/0x20
[ 49.567277][ T3613] RIP: 0010:__alloc_pages+0x39e/0x510
[ 49.572642][ T3613] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d b3 a9 0b 0c 00 75 09 c6 05 aa a9 0b 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 71 82 44 7e 48 c7 c0 60 23
[ 49.592257][ T3613] RSP: 0018:ffffc9000385fb98 EFLAGS: 00010246
[ 49.598329][ T3613] RAX: 0000000000000000 RBX: 1ffff9200070bf74 RCX: 0000000000000000
[ 49.606297][ T3613] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000
[ 49.614266][ T3613] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 49.622245][ T3613] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000b
[ 49.630229][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888012635168
[ 49.638221][ T3613] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200
[ 49.645021][ T3613] ? rcu_read_lock_sched_held+0x3a/0x70
[ 49.650582][ T3613] ? uinput_ioctl_handler.isra.0+0xa7/0x1dc0
[ 49.656581][ T3613] alloc_pages+0x1a6/0x270
[ 49.661007][ T3613] kmalloc_order+0x34/0xf0
[ 49.665429][ T3613] kmalloc_order_trace+0x13/0x120
[ 49.670458][ T3613] input_mt_init_slots+0xd9/0x530
[ 49.675493][ T3613] uinput_ioctl_handler.isra.0+0x18e9/0x1dc0
[ 49.681500][ T3613] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 49.687244][ T3613] ? find_held_lock+0x2d/0x110
[ 49.692018][ T3613] ? ptrace_notify+0xfa/0x140
[ 49.696703][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.701564][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.706778][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10
[ 49.711732][ T3613] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 49.717917][ T3613] __x64_sys_ioctl+0x193/0x200
[ 49.722687][ T3613] do_syscall_64+0x35/0xb0
[ 49.727109][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.733010][ T3613] RIP: 0033:0x7f8fa9dd3719
[ 49.737440][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.757054][ T3613] RSP: 002b:00007ffe8996a828 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.765469][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fa9dd3719
[ 49.773443][ T3613] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.781412][ T3613] RBP: 00007f8fa9d978c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.789398][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fa9d97950
[ 49.797368][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.805350][ T3613]
[ 49.808642][ T3613] Kernel Offset: disabled
[ 49.813017][ T3613] Rebooting in 86400 seconds..