./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3016162300 <...> Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. execve("./syz-executor3016162300", ["./syz-executor3016162300"], 0x7fff4c413310 /* 10 vars */) = 0 brk(NULL) = 0x555579768000 brk(0x555579768d00) = 0x555579768d00 arch_prctl(ARCH_SET_FS, 0x555579768380) = 0 set_tid_address(0x555579768650) = 5239 set_robust_list(0x555579768660, 24) = 0 rseq(0x555579768ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3016162300", 4096) = 28 getrandom("\xec\xbb\x43\x73\x51\xbc\x46\xb7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555579768d00 brk(0x555579789d00) = 0x555579789d00 brk(0x55557978a000) = 0x55557978a000 mprotect(0x7f9b67ef7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555579768650) = 5240 ./strace-static-x86_64: Process 5240 attached [pid 5240] set_robust_list(0x555579768660, 24) = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [pid 5240] close(3) = 0 [pid 5240] write(1, "executing program\n", 18executing program ) = 18 [pid 5240] openat(AT_FDCWD, "/dev/dri/card1", O_RDONLY) = 3 [ 58.604539][ T5240] ------------[ cut here ]------------ [ 58.610029][ T5240] WARNING: CPU: 0 PID: 5240 at mm/page_alloc.c:4671 __alloc_pages_noprof+0x36a/0x6c0 [ 58.619637][ T5240] Modules linked in: [ 58.623553][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz-executor301 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 58.634701][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.644806][ T5240] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 58.650822][ T5240] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 f8 ff 14 0e 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 58.670840][ T5240] RSP: 0018:ffffc900034f7860 EFLAGS: 00010246 [ 58.676980][ T5240] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 58.684979][ T5240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900034f78e8 [ 58.692943][ T5240] RBP: ffffc900034f7968 R08: ffffc900034f78e7 R09: 0000000000000000 [ 58.700944][ T5240] R10: ffffc900034f78c0 R11: fffff5200069ef1d R12: 1ffff9200069ef14 [ 58.709290][ T5240] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff9200069ef10 [ 58.717285][ T5240] FS: 0000555579768380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 58.726263][ T5240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.732847][ T5240] CR2: 00000000203d0000 CR3: 000000002349c000 CR4: 00000000003506f0 [ 58.740854][ T5240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.748854][ T5240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.756956][ T5240] Call Trace: [ 58.760239][ T5240] [ 58.763173][ T5240] ? __warn+0x163/0x4e0 [ 58.767390][ T5240] ? __alloc_pages_noprof+0x36a/0x6c0 [ 58.772784][ T5240] ? report_bug+0x2b3/0x500 [ 58.777437][ T5240] ? __alloc_pages_noprof+0x36a/0x6c0 [ 58.782828][ T5240] ? handle_bug+0x3e/0x70 [ 58.787194][ T5240] ? exc_invalid_op+0x1a/0x50 [ 58.791874][ T5240] ? asm_exc_invalid_op+0x1a/0x20 [ 58.796961][ T5240] ? __alloc_pages_noprof+0x36a/0x6c0 [ 58.802357][ T5240] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 58.808138][ T5240] ? lockdep_hardirqs_on+0x99/0x150 [ 58.813371][ T5240] ___kmalloc_large_node+0x8b/0x1d0 [ 58.818635][ T5240] __kmalloc_large_node_noprof+0x1a/0x80 [ 58.824344][ T5240] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 58.830436][ T5240] __kmalloc_noprof+0x2ae/0x400 [ 58.836057][ T5240] ? _copy_from_user+0xa6/0xe0 [ 58.841381][ T5240] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 58.847353][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 58.853706][ T5240] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.858947][ T5240] ? _raw_spin_unlock+0x28/0x50 [ 58.863810][ T5240] drm_ioctl_kernel+0x33a/0x440 [ 58.868723][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 58.875125][ T5240] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.880540][ T5240] ? __might_fault+0xc6/0x120 [ 58.885268][ T5240] drm_ioctl+0x611/0xad0 [ 58.889522][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 58.895896][ T5240] ? __pfx_drm_ioctl+0x10/0x10 [ 58.900691][ T5240] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.905661][ T5240] ? security_file_ioctl+0x87/0xb0 [ 58.910814][ T5240] ? __pfx_drm_ioctl+0x10/0x10 [ 58.915619][ T5240] __se_sys_ioctl+0xfc/0x170 [ 58.920305][ T5240] do_syscall_64+0xf3/0x230 [ 58.924861][ T5240] ? clear_bhb_loop+0x35/0x90 [ 58.929559][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.935513][ T5240] RIP: 0033:0x7f9b67e84879 [ 58.939942][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.959575][ T5240] RSP: 002b:00007ffddb3d27e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.968035][ T5240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b67e84879 [ 58.976039][ T5240] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 58.984019][ T5240] RBP: 00007f9b67ef75f0 R08: 0023647261632f69 R09: 0000000000000006 [ 58.992022][ T5240] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 59.000118][ T5240] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 59.008135][ T5240] [ 59.011156][ T5240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.018418][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz-executor301 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 59.029503][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.039539][ T5240] Call Trace: [ 59.042798][ T5240] [ 59.045710][ T5240] dump_stack_lvl+0x241/0x360 [ 59.050376][ T5240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.055560][ T5240] ? __pfx__printk+0x10/0x10 [ 59.060138][ T5240] ? vscnprintf+0x5d/0x90 [ 59.064461][ T5240] panic+0x349/0x860 [ 59.068366][ T5240] ? __warn+0x172/0x4e0 [ 59.072515][ T5240] ? __pfx_panic+0x10/0x10 [ 59.076933][ T5240] __warn+0x346/0x4e0 [ 59.080902][ T5240] ? __alloc_pages_noprof+0x36a/0x6c0 [ 59.086268][ T5240] report_bug+0x2b3/0x500 [ 59.090586][ T5240] ? __alloc_pages_noprof+0x36a/0x6c0 [ 59.095952][ T5240] handle_bug+0x3e/0x70 [ 59.100097][ T5240] exc_invalid_op+0x1a/0x50 [ 59.104632][ T5240] asm_exc_invalid_op+0x1a/0x20 [ 59.109478][ T5240] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 59.115461][ T5240] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 f8 ff 14 0e 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 59.135319][ T5240] RSP: 0018:ffffc900034f7860 EFLAGS: 00010246 [ 59.141375][ T5240] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 59.149419][ T5240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900034f78e8 [ 59.157398][ T5240] RBP: ffffc900034f7968 R08: ffffc900034f78e7 R09: 0000000000000000 [ 59.165357][ T5240] R10: ffffc900034f78c0 R11: fffff5200069ef1d R12: 1ffff9200069ef14 [ 59.173316][ T5240] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff9200069ef10 [ 59.181312][ T5240] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 59.187031][ T5240] ? lockdep_hardirqs_on+0x99/0x150 [ 59.192228][ T5240] ___kmalloc_large_node+0x8b/0x1d0 [ 59.197503][ T5240] __kmalloc_large_node_noprof+0x1a/0x80 [ 59.203124][ T5240] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 59.209188][ T5240] __kmalloc_noprof+0x2ae/0x400 [ 59.214214][ T5240] ? _copy_from_user+0xa6/0xe0 [ 59.218984][ T5240] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 59.224880][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 59.231217][ T5240] ? do_raw_spin_unlock+0x13c/0x8b0 [ 59.236422][ T5240] ? _raw_spin_unlock+0x28/0x50 [ 59.241280][ T5240] drm_ioctl_kernel+0x33a/0x440 [ 59.246131][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 59.252453][ T5240] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 59.257815][ T5240] ? __might_fault+0xc6/0x120 [ 59.262492][ T5240] drm_ioctl+0x611/0xad0 [ 59.266727][ T5240] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 59.273049][ T5240] ? __pfx_drm_ioctl+0x10/0x10 [ 59.277811][ T5240] ? bpf_lsm_file_ioctl+0x9/0x10 [ 59.282739][ T5240] ? security_file_ioctl+0x87/0xb0 [ 59.287842][ T5240] ? __pfx_drm_ioctl+0x10/0x10 [ 59.292598][ T5240] __se_sys_ioctl+0xfc/0x170 [ 59.297178][ T5240] do_syscall_64+0xf3/0x230 [ 59.301669][ T5240] ? clear_bhb_loop+0x35/0x90 [ 59.306344][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.312227][ T5240] RIP: 0033:0x7f9b67e84879 [ 59.316635][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.336315][ T5240] RSP: 002b:00007ffddb3d27e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.344718][ T5240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b67e84879 [ 59.352674][ T5240] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 59.360638][ T5240] RBP: 00007f9b67ef75f0 R08: 0023647261632f69 R09: 0000000000000006 [ 59.368597][ T5240] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 59.376640][ T5240] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 59.384610][ T5240] [ 59.387933][ T5240] Kernel Offset: disabled [ 59.392450][ T5240] Rebooting in 86400 seconds..