./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3706041092
<...>
forked to background, child pid 3183
[ 27.707563][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.711738][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 28.194538][ T3280] sshd (3280) used greatest stack depth: 22432 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts.
execve("./syz-executor3706041092", ["./syz-executor3706041092"], 0x7ffc08e3f9f0 /* 10 vars */) = 0
brk(NULL) = 0x555555b92000
brk(0x555555b92c40) = 0x555555b92c40
arch_prctl(ARCH_SET_FS, 0x555555b92300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3706041092", 4096) = 28
brk(0x555555bb3c40) = 0x555555bb3c40
brk(0x555555bb4000) = 0x555555bb4000
mprotect(0x7f2ee115c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3605 attached
, child_tidptr=0x555555b925d0) = 3605
[pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3605] setpgid(0, 0) = 0
[pid 3605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3605] write(3, "1000", 4) = 4
[pid 3605] close(3) = 0
[pid 3605] openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
[pid 3605] ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
[pid 3605] write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
[pid 3605] ioctl(3, UI_SET_EVBIT, 0x3) = 0
syzkaller login: [ 50.103683][ T3605] ------------[ cut here ]------------
[ 50.103692][ T3605] WARNING: CPU: 0 PID: 3605 at mm/page_alloc.c:5472 __alloc_pages+0x39e/0x510
[ 50.118891][ T3605] Modules linked in:
[ 50.123146][ T3605] CPU: 1 PID: 3605 Comm: syz-executor370 Not tainted 5.19.0-rc3-next-20220621-syzkaller #0
[ 50.133482][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.143663][ T3605] RIP: 0010:__alloc_pages+0x39e/0x510
[ 50.149067][ T3605] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 1f 1a ec 0b 00 75 09 c6 05 16 1a ec 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 61 30 46 7e 48 c7 c0 20 e5
[ 50.168814][ T3605] RSP: 0018:ffffc90002f0fb90 EFLAGS: 00010246
[ 50.174952][ T3605] RAX: 0000000000000000 RBX: 1ffff920005e1f73 RCX: 0000000000000000
[ 50.183010][ T3605] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000
[ 50.191012][ T3605] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 50.199028][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001a
[ 50.207081][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814aa90168
[ 50.215131][ T3605] FS: 0000555555b92300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.224133][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.230762][ T3605] CR2: 00007ffe84bdc080 CR3: 0000000070d93000 CR4: 00000000003506f0
[ 50.238798][ T3605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.246860][ T3605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.254977][ T3605] Call Trace:
[ 50.258272][ T3605]
[ 50.261217][ T3605] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120
[ 50.268045][ T3605] ? rcu_read_lock_sched_held+0x3a/0x70
[ 50.273641][ T3605] ? __mutex_lock+0x231/0x1350
[ 50.278425][ T3605] alloc_pages+0x1aa/0x310
[ 50.282905][ T3605] kmalloc_order+0x34/0xf0
[ 50.287349][ T3605] kmalloc_order_trace+0x13/0x120
[ 50.292460][ T3605] input_mt_init_slots+0xd9/0x5f0
[ 50.297526][ T3605] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 50.303664][ T3605] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 50.309405][ T3605] ? find_held_lock+0x2d/0x110
[ 50.314267][ T3605] ? ptrace_notify+0xfa/0x140
[ 50.318970][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 50.323908][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.329144][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10
[ 50.334172][ T3605] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 50.340370][ T3605] __x64_sys_ioctl+0x193/0x200
[ 50.345237][ T3605] do_syscall_64+0x35/0xb0
[ 50.349680][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.355630][ T3605] RIP: 0033:0x7f2ee10ef8f9
[ 50.360057][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.379736][ T3605] RSP: 002b:00007ffe84a6e2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.388256][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ee10ef8f9
[ 50.396333][ T3605] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 50.404444][ T3605] RBP: 0000000000000000 R08: 00007ffe84a6e498 R09: 00007ffe84a6e498
[ 50.412515][ T3605] R10: 00007ffe84a6e498 R11: 0000000000000246 R12: 00007f2ee10b3180
[ 50.420512][ T3605] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.428637][ T3605]
[ 50.431672][ T3605] Kernel panic - not syncing: panic_on_warn set ...
[ 50.438266][ T3605] CPU: 0 PID: 3605 Comm: syz-executor370 Not tainted 5.19.0-rc3-next-20220621-syzkaller #0
[ 50.448265][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.458340][ T3605] Call Trace:
[ 50.461624][ T3605]
[ 50.464569][ T3605] dump_stack_lvl+0xcd/0x134
[ 50.469188][ T3605] panic+0x2d7/0x64a
[ 50.473082][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.479090][ T3605] ? __warn.cold+0x1d9/0x2cd
[ 50.483704][ T3605] ? __alloc_pages+0x39e/0x510
[ 50.488467][ T3605] __warn.cold+0x1ea/0x2cd
[ 50.492890][ T3605] ? __alloc_pages+0x39e/0x510
[ 50.497656][ T3605] report_bug+0x1bc/0x210
[ 50.502032][ T3605] handle_bug+0x3c/0x60
[ 50.506210][ T3605] exc_invalid_op+0x14/0x40
[ 50.510727][ T3605] asm_exc_invalid_op+0x1b/0x20
[ 50.515584][ T3605] RIP: 0010:__alloc_pages+0x39e/0x510
[ 50.520984][ T3605] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 1f 1a ec 0b 00 75 09 c6 05 16 1a ec 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 61 30 46 7e 48 c7 c0 20 e5
[ 50.540871][ T3605] RSP: 0018:ffffc90002f0fb90 EFLAGS: 00010246
[ 50.546939][ T3605] RAX: 0000000000000000 RBX: 1ffff920005e1f73 RCX: 0000000000000000
[ 50.554908][ T3605] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000
[ 50.562876][ T3605] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 50.570850][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001a
[ 50.578818][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814aa90168
[ 50.586803][ T3605] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120
[ 50.593576][ T3605] ? rcu_read_lock_sched_held+0x3a/0x70
[ 50.599137][ T3605] ? __mutex_lock+0x231/0x1350
[ 50.603920][ T3605] alloc_pages+0x1aa/0x310
[ 50.608348][ T3605] kmalloc_order+0x34/0xf0
[ 50.612774][ T3605] kmalloc_order_trace+0x13/0x120
[ 50.617893][ T3605] input_mt_init_slots+0xd9/0x5f0
[ 50.622927][ T3605] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 50.628829][ T3605] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 50.634557][ T3605] ? find_held_lock+0x2d/0x110
[ 50.639334][ T3605] ? ptrace_notify+0xfa/0x140
[ 50.644013][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 50.648867][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.654075][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10
[ 50.659023][ T3605] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 50.665178][ T3605] __x64_sys_ioctl+0x193/0x200
[ 50.669953][ T3605] do_syscall_64+0x35/0xb0
[ 50.674372][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.680440][ T3605] RIP: 0033:0x7f2ee10ef8f9
[ 50.684859][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.704551][ T3605] RSP: 002b:00007ffe84a6e2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.712961][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ee10ef8f9
[ 50.720933][ T3605] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 50.728900][ T3605] RBP: 0000000000000000 R08: 00007ffe84a6e498 R09: 00007ffe84a6e498
[ 50.736867][ T3605] R10: 00007ffe84a6e498 R11: 0000000000000246 R12: 00007f2ee10b3180
[ 50.744835][ T3605] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.753164][ T3605]
[ 50.756505][ T3605] Kernel Offset: disabled
[ 50.760858][ T3605] Rebooting in 86400 seconds..