./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3171985904 <...> forked to background, child pid 3184 no interfaces have a carrier [ 21.207932][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.217140][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.64' (ECDSA) to the list of known hosts. execve("./syz-executor3171985904", ["./syz-executor3171985904"], 0x7ffc16796030 /* 10 vars */) = 0 brk(NULL) = 0x555556c6a000 brk(0x555556c6ac40) = 0x555556c6ac40 arch_prctl(ARCH_SET_FS, 0x555556c6a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3171985904", 4096) = 28 brk(0x555556c8bc40) = 0x555556c8bc40 brk(0x555556c8c000) = 0x555556c8c000 mprotect(0x7ff3e09f6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 ioctl(3, UI_SET_EVBIT, 0x3) = 0 write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116 syzkaller login: [ 39.390446][ T3605] ------------[ cut here ]------------ [ 39.396018][ T3605] WARNING: CPU: 1 PID: 3605 at mm/page_alloc.c:5402 __alloc_pages+0x39e/0x510 [ 39.404948][ T3605] Modules linked in: [ 39.408872][ T3605] CPU: 1 PID: 3605 Comm: syz-executor317 Not tainted 5.19.0-rc6-syzkaller-00364-g9b59ec8d50a1 #0 [ 39.419417][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 39.429603][ T3605] RIP: 0010:__alloc_pages+0x39e/0x510 [ 39.435243][ T3605] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 77 5d ea 0b 00 75 09 c6 05 6e 5d ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 51 f3 45 7e 48 c7 c0 20 65 [ 39.455061][ T3605] RSP: 0018:ffffc900031ffb90 EFLAGS: 00010246 [ 39.461189][ T3605] RAX: 0000000000000000 RBX: 1ffff9200063ff73 RCX: 0000000000000000 [ 39.469175][ T3605] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000 [ 39.477256][ T3605] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 39.485270][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018 [ 39.493272][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880739b7168 [ 39.501273][ T3605] FS: 0000555556c6a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 39.510197][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.516951][ T3605] CR2: 00007ff3e099aac0 CR3: 0000000023514000 CR4: 0000000000350ef0 [ 39.525017][ T3605] Call Trace: [ 39.528385][ T3605] [ 39.531354][ T3605] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 39.538132][ T3605] ? rcu_read_lock_sched_held+0x3a/0x70 [ 39.543736][ T3605] ? __mutex_lock+0x231/0x1350 [ 39.548537][ T3605] alloc_pages+0x1aa/0x310 [ 39.553009][ T3605] kmalloc_order+0x34/0xf0 [ 39.557441][ T3605] kmalloc_order_trace+0x14/0x120 [ 39.562525][ T3605] input_mt_init_slots+0xd9/0x5f0 [ 39.567565][ T3605] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 39.573574][ T3605] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 39.579319][ T3605] ? find_held_lock+0x2d/0x110 [ 39.584153][ T3605] ? ptrace_notify+0xfa/0x140 [ 39.588852][ T3605] ? lock_downgrade+0x6e0/0x6e0 [ 39.593775][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 39.599000][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 39.603991][ T3605] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 39.610163][ T3605] __x64_sys_ioctl+0x193/0x200 [ 39.614967][ T3605] do_syscall_64+0x35/0xb0 [ 39.619396][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.625320][ T3605] RIP: 0033:0x7ff3e0989719 [ 39.629754][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.649396][ T3605] RSP: 002b:00007fff33687298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.657846][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff3e0989719 [ 39.665843][ T3605] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 39.673835][ T3605] RBP: 00007ff3e094d8c0 R08: 0000000000000000 R09: 0000000000000000 [ 39.681829][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3e094d950 [ 39.689801][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.697890][ T3605] [ 39.700934][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 39.707585][ T3605] CPU: 0 PID: 3605 Comm: syz-executor317 Not tainted 5.19.0-rc6-syzkaller-00364-g9b59ec8d50a1 #0 [ 39.718082][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 39.728155][ T3605] Call Trace: [ 39.731429][ T3605] [ 39.734348][ T3605] dump_stack_lvl+0xcd/0x134 [ 39.738934][ T3605] panic+0x2d7/0x636 [ 39.742816][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b [ 39.748791][ T3605] ? __warn.cold+0x1d1/0x2c5 [ 39.753369][ T3605] ? __alloc_pages+0x39e/0x510 [ 39.758123][ T3605] __warn.cold+0x1e2/0x2c5 [ 39.762529][ T3605] ? __alloc_pages+0x39e/0x510 [ 39.767277][ T3605] report_bug+0x1bc/0x210 [ 39.771635][ T3605] handle_bug+0x3c/0x60 [ 39.775805][ T3605] exc_invalid_op+0x14/0x40 [ 39.780303][ T3605] asm_exc_invalid_op+0x16/0x20 [ 39.785228][ T3605] RIP: 0010:__alloc_pages+0x39e/0x510 [ 39.790593][ T3605] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 77 5d ea 0b 00 75 09 c6 05 6e 5d ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 51 f3 45 7e 48 c7 c0 20 65 [ 39.810189][ T3605] RSP: 0018:ffffc900031ffb90 EFLAGS: 00010246 [ 39.816242][ T3605] RAX: 0000000000000000 RBX: 1ffff9200063ff73 RCX: 0000000000000000 [ 39.824201][ T3605] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000 [ 39.832156][ T3605] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 39.840111][ T3605] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018 [ 39.848064][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880739b7168 [ 39.856036][ T3605] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 39.862801][ T3605] ? rcu_read_lock_sched_held+0x3a/0x70 [ 39.868339][ T3605] ? __mutex_lock+0x231/0x1350 [ 39.873843][ T3605] alloc_pages+0x1aa/0x310 [ 39.879744][ T3605] kmalloc_order+0x34/0xf0 [ 39.884157][ T3605] kmalloc_order_trace+0x14/0x120 [ 39.889185][ T3605] input_mt_init_slots+0xd9/0x5f0 [ 39.894212][ T3605] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 39.900099][ T3605] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 39.905811][ T3605] ? find_held_lock+0x2d/0x110 [ 39.910569][ T3605] ? ptrace_notify+0xfa/0x140 [ 39.915233][ T3605] ? lock_downgrade+0x6e0/0x6e0 [ 39.920079][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 39.925269][ T3605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 39.930198][ T3605] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 39.936348][ T3605] __x64_sys_ioctl+0x193/0x200 [ 39.941104][ T3605] do_syscall_64+0x35/0xb0 [ 39.945513][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.952090][ T3605] RIP: 0033:0x7ff3e0989719 [ 39.956495][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.976092][ T3605] RSP: 002b:00007fff33687298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.984491][ T3605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff3e0989719 [ 39.992449][ T3605] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 40.000404][ T3605] RBP: 00007ff3e094d8c0 R08: 0000000000000000 R09: 0000000000000000 [ 40.008363][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3e094d950 [ 40.016322][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.024289][ T3605] [ 40.028125][ T3605] Kernel Offset: disabled [ 40.032483][ T3605] Rebooting in 86400 seconds..