./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2612399905 <...> Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. execve("./syz-executor2612399905", ["./syz-executor2612399905"], 0x7ffed0a28db0 /* 10 vars */) = 0 brk(NULL) = 0x55555685f000 brk(0x55555685fd00) = 0x55555685fd00 arch_prctl(ARCH_SET_FS, 0x55555685f380) = 0 set_tid_address(0x55555685f650) = 5059 set_robust_list(0x55555685f660, 24) = 0 rseq(0x55555685fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2612399905", 4096) = 28 getrandom("\x4e\x7d\x70\x47\xff\xaa\x88\x7f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555685fd00 brk(0x555556880d00) = 0x555556880d00 brk(0x555556881000) = 0x555556881000 mprotect(0x7f6052559000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 [ 77.811103][ T28] audit: type=1400 audit(1706268543.314:86): avc: denied { execmem } for pid=5059 comm="syz-executor261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 ioctl(3, UI_SET_EVBIT, 0x3) = 0 write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xff\x00\x00\x04\x00\x08\x00\x14\x00\x00\x00\x01\x00\x00\x00\x00\x80\xff\xff"..., 1116) = 1116 [ 77.844185][ T28] audit: type=1400 audit(1706268543.344:87): avc: denied { read write } for pid=5059 comm="syz-executor261" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.868705][ T28] audit: type=1400 audit(1706268543.344:88): avc: denied { open } for pid=5059 comm="syz-executor261" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.883564][ T5059] ------------[ cut here ]------------ [ 77.898273][ T5059] WARNING: CPU: 0 PID: 5059 at mm/page_alloc.c:4543 __alloc_pages+0x42f/0x2440 [ 77.907345][ T5059] Modules linked in: [ 77.907668][ T28] audit: type=1400 audit(1706268543.354:89): avc: denied { ioctl } for pid=5059 comm="syz-executor261" path="/dev/uinput" dev="devtmpfs" ino=835 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.911243][ T5059] CPU: 0 PID: 5059 Comm: syz-executor261 Not tainted 6.8.0-rc1-syzkaller-00169-gecb1b8288dc7 #0 [ 77.947303][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 77.957443][ T5059] RIP: 0010:__alloc_pages+0x42f/0x2440 [ 77.962939][ T5059] Code: ff 00 0f 84 fb fd ff ff 80 ce 01 e9 f3 fd ff ff 83 fe 0a 0f 86 ec fc ff ff 80 3d da ea 50 0d 00 75 0b c6 05 d1 ea 50 0d 01 90 <0f> 0b 90 31 ed e9 84 fe ff ff e8 e2 ee 9b ff 84 c0 0f 85 77 fe ff [ 77.983172][ T5059] RSP: 0018:ffffc900033afa68 EFLAGS: 00010246 [ 77.989308][ T5059] RAX: 0000000000000000 RBX: 1ffff92000675f61 RCX: 0000000000000000 [ 77.997372][ T5059] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 78.005384][ T5059] RBP: 0000000000000019 R08: 0000000000000005 R09: 0000000000000000 [ 78.013460][ T5059] R10: 000000007acba417 R11: 0000000000000000 R12: 0000000000000000 [ 78.021637][ T5059] R13: 0000000000000dc0 R14: 0000001eb2e905e0 R15: 0000000000000019 [ 78.029680][ T5059] FS: 000055555685f380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.038759][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.045378][ T5059] CR2: 00007f5ff19f1b10 CR3: 00000000292fa000 CR4: 00000000003506f0 [ 78.053427][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.061466][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.069502][ T5059] Call Trace: [ 78.072797][ T5059] [ 78.075741][ T5059] ? show_regs+0x8f/0xa0 [ 78.080070][ T5059] ? __warn+0xe6/0x390 [ 78.084169][ T5059] ? __alloc_pages+0x42f/0x2440 [ 78.089086][ T5059] ? report_bug+0x3bc/0x580 [ 78.093620][ T5059] ? handle_bug+0x3d/0x70 [ 78.098031][ T5059] ? exc_invalid_op+0x17/0x40 [ 78.102736][ T5059] ? asm_exc_invalid_op+0x1a/0x20 [ 78.107815][ T5059] ? __alloc_pages+0x42f/0x2440 [ 78.112697][ T5059] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 78.118762][ T5059] ? lock_acquire+0x1ae/0x520 [ 78.123465][ T5059] ? warn_alloc+0x3a0/0x3a0 [ 78.128023][ T5059] ? __mutex_trylock_common+0xeb/0x250 [ 78.133511][ T5059] ? preempt_count_sub+0x160/0x160 [ 78.138729][ T5059] ? rcu_is_watching+0x12/0xb0 [ 78.143518][ T5059] ? trace_contention_end+0xd6/0x100 [ 78.148856][ T5059] ? __mutex_lock+0x1a6/0x9d0 [ 78.153561][ T5059] ? input_mt_init_slots+0xe3/0x520 [ 78.158842][ T5059] __kmalloc_large_node+0x7f/0x1a0 [ 78.163981][ T5059] ? mutex_trylock+0x130/0x130 [ 78.168795][ T5059] __kmalloc.cold+0xc/0x61 [ 78.173239][ T5059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.179204][ T5059] input_mt_init_slots+0xe3/0x520 [ 78.184257][ T5059] uinput_ioctl_handler.isra.0+0x1601/0x1d70 [ 78.190286][ T5059] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 78.196024][ T5059] ? find_held_lock+0x2d/0x110 [ 78.200886][ T5059] ? selinux_file_ioctl+0xb5/0x270 [ 78.206033][ T5059] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 78.212256][ T5059] __x64_sys_ioctl+0x18f/0x210 [ 78.217061][ T5059] do_syscall_64+0xd3/0x250 [ 78.221677][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 78.227628][ T5059] RIP: 0033:0x7f60524e5ee9 [ 78.232077][ T5059] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.251798][ T5059] RSP: 002b:00007fff8aebc7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.260289][ T5059] RAX: ffffffffffffffda RBX: 00007fff8aebc988 RCX: 00007f60524e5ee9 [ 78.268345][ T5059] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 78.276332][ T5059] RBP: 00007f6052559610 R08: 00007fff8aebc988 R09: 00007fff8aebc988 [ 78.284373][ T5059] R10: 00007fff8aebc988 R11: 0000000000000246 R12: 0000000000000001 [ 78.292445][ T5059] R13: 00007fff8aebc978 R14: 0000000000000001 R15: 0000000000000001 [ 78.300490][ T5059] [ 78.303521][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.310788][ T5059] CPU: 0 PID: 5059 Comm: syz-executor261 Not tainted 6.8.0-rc1-syzkaller-00169-gecb1b8288dc7 #0 [ 78.321185][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 78.331243][ T5059] Call Trace: [ 78.334520][ T5059] [ 78.337457][ T5059] dump_stack_lvl+0xd9/0x1b0 [ 78.342058][ T5059] panic+0x6dc/0x790 [ 78.345950][ T5059] ? panic_smp_self_stop+0xa0/0xa0 [ 78.351060][ T5059] ? show_trace_log_lvl+0x363/0x4f0 [ 78.356259][ T5059] ? check_panic_on_warn+0x1f/0xb0 [ 78.361377][ T5059] ? __alloc_pages+0x42f/0x2440 [ 78.366241][ T5059] check_panic_on_warn+0xab/0xb0 [ 78.371196][ T5059] __warn+0xf2/0x390 [ 78.375103][ T5059] ? __alloc_pages+0x42f/0x2440 [ 78.379967][ T5059] report_bug+0x3bc/0x580 [ 78.384316][ T5059] handle_bug+0x3d/0x70 [ 78.388489][ T5059] exc_invalid_op+0x17/0x40 [ 78.393012][ T5059] asm_exc_invalid_op+0x1a/0x20 [ 78.397878][ T5059] RIP: 0010:__alloc_pages+0x42f/0x2440 [ 78.403355][ T5059] Code: ff 00 0f 84 fb fd ff ff 80 ce 01 e9 f3 fd ff ff 83 fe 0a 0f 86 ec fc ff ff 80 3d da ea 50 0d 00 75 0b c6 05 d1 ea 50 0d 01 90 <0f> 0b 90 31 ed e9 84 fe ff ff e8 e2 ee 9b ff 84 c0 0f 85 77 fe ff [ 78.422981][ T5059] RSP: 0018:ffffc900033afa68 EFLAGS: 00010246 [ 78.429056][ T5059] RAX: 0000000000000000 RBX: 1ffff92000675f61 RCX: 0000000000000000 [ 78.437034][ T5059] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 78.445013][ T5059] RBP: 0000000000000019 R08: 0000000000000005 R09: 0000000000000000 [ 78.452991][ T5059] R10: 000000007acba417 R11: 0000000000000000 R12: 0000000000000000 [ 78.460984][ T5059] R13: 0000000000000dc0 R14: 0000001eb2e905e0 R15: 0000000000000019 [ 78.468976][ T5059] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 78.474978][ T5059] ? lock_acquire+0x1ae/0x520 [ 78.479668][ T5059] ? warn_alloc+0x3a0/0x3a0 [ 78.484178][ T5059] ? __mutex_trylock_common+0xeb/0x250 [ 78.489658][ T5059] ? preempt_count_sub+0x160/0x160 [ 78.494777][ T5059] ? rcu_is_watching+0x12/0xb0 [ 78.499553][ T5059] ? trace_contention_end+0xd6/0x100 [ 78.504854][ T5059] ? __mutex_lock+0x1a6/0x9d0 [ 78.509546][ T5059] ? input_mt_init_slots+0xe3/0x520 [ 78.514759][ T5059] __kmalloc_large_node+0x7f/0x1a0 [ 78.519893][ T5059] ? mutex_trylock+0x130/0x130 [ 78.524685][ T5059] __kmalloc.cold+0xc/0x61 [ 78.529138][ T5059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.535050][ T5059] input_mt_init_slots+0xe3/0x520 [ 78.540091][ T5059] uinput_ioctl_handler.isra.0+0x1601/0x1d70 [ 78.546082][ T5059] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 78.551814][ T5059] ? find_held_lock+0x2d/0x110 [ 78.556592][ T5059] ? selinux_file_ioctl+0xb5/0x270 [ 78.561720][ T5059] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 78.567973][ T5059] __x64_sys_ioctl+0x18f/0x210 [ 78.572753][ T5059] do_syscall_64+0xd3/0x250 [ 78.577274][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 78.583179][ T5059] RIP: 0033:0x7f60524e5ee9 [ 78.587597][ T5059] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.607212][ T5059] RSP: 002b:00007fff8aebc7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.615636][ T5059] RAX: ffffffffffffffda RBX: 00007fff8aebc988 RCX: 00007f60524e5ee9 [ 78.623611][ T5059] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 78.631586][ T5059] RBP: 00007f6052559610 R08: 00007fff8aebc988 R09: 00007fff8aebc988 [ 78.639561][ T5059] R10: 00007fff8aebc988 R11: 0000000000000246 R12: 0000000000000001 [ 78.647549][ T5059] R13: 00007fff8aebc978 R14: 0000000000000001 R15: 0000000000000001 [ 78.655548][ T5059] [ 78.658749][ T5059] Kernel Offset: disabled [ 78.663144][ T5059] Rebooting in 86400 seconds..