./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor460006897 <...> Warning: Permanently added '10.128.1.113' (ECDSA) to the list of known hosts. execve("./syz-executor460006897", ["./syz-executor460006897"], 0x7ffd5ef466d0 /* 10 vars */) = 0 brk(NULL) = 0x555556fc0000 brk(0x555556fc0c40) = 0x555556fc0c40 arch_prctl(ARCH_SET_FS, 0x555556fc0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor460006897", 4096) = 27 brk(0x555556fe1c40) = 0x555556fe1c40 brk(0x555556fe2000) = 0x555556fe2000 mprotect(0x7f8e02a01000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116 ioctl(3, UI_SET_EVBIT, 0x3) = 0 dup(3) = 4 [ 75.801891][ T5071] ------------[ cut here ]------------ [ 75.807522][ T5071] WARNING: CPU: 0 PID: 5071 at mm/page_alloc.c:5525 __alloc_pages+0x412/0x5b0 [ 75.816705][ T5071] Modules linked in: [ 75.820669][ T5071] CPU: 1 PID: 5071 Comm: syz-executor460 Not tainted 6.2.0-rc4-syzkaller-00069-g081edded9b38 #0 [ 75.831343][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 75.841633][ T5071] RIP: 0010:__alloc_pages+0x412/0x5b0 [ 75.847045][ T5071] Code: ff ff 00 0f 84 c3 fd ff ff 80 ce 01 e9 bb fd ff ff 83 fe 0a 0f 86 ce fc ff ff 80 3d e3 db 98 0c 00 75 09 c6 05 da db 98 0c 01 <0f> 0b 45 31 f6 e9 52 fe ff ff 65 ff 05 15 b6 3e 7e 48 c7 c0 a0 60 [ 75.867000][ T5071] RSP: 0018:ffffc90003ddfbb0 EFLAGS: 00010246 [ 75.873233][ T5071] RAX: 0000000000000000 RBX: 1ffff920007bbf77 RCX: 0000000000000000 [ 75.881252][ T5071] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000 [ 75.889502][ T5071] RBP: 0000000000040dc0 R08: 0000000000000005 R09: 0000000000000000 [ 75.897552][ T5071] R10: 00000000fffffffe R11: 0000000000000000 R12: 000000000000001a [ 75.905609][ T5071] R13: 0000000000000000 R14: 0000000000040dc0 R15: ffff88814532f168 [ 75.913656][ T5071] FS: 0000555556fc0300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.922653][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.929245][ T5071] CR2: 0000555d092402b8 CR3: 000000007d517000 CR4: 00000000003506f0 [ 75.937275][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.945370][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.953420][ T5071] Call Trace: [ 75.956723][ T5071] [ 75.959662][ T5071] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 75.966519][ T5071] ? rcu_read_lock_sched_held+0x3e/0x70 [ 75.972160][ T5071] ? uinput_ioctl_handler.isra.0+0xa8/0x1e60 [ 75.978201][ T5071] __kmalloc_large_node+0x85/0x160 [ 75.983529][ T5071] ? input_mt_init_slots+0xdd/0x540 [ 75.988795][ T5071] __kmalloc+0x91/0xd0 [ 75.992948][ T5071] input_mt_init_slots+0xdd/0x540 [ 75.998038][ T5071] uinput_ioctl_handler.isra.0+0x1850/0x1e60 [ 76.004116][ T5071] ? uinput_ff_upload_from_user+0x2a0/0x2a0 [ 76.010080][ T5071] ? find_held_lock+0x2d/0x110 [ 76.014950][ T5071] ? ptrace_notify+0xfe/0x140 [ 76.019665][ T5071] ? lock_downgrade+0x6e0/0x6e0 [ 76.024652][ T5071] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.029660][ T5071] ? uinput_ioctl_handler.isra.0+0x1e60/0x1e60 [ 76.035947][ T5071] __x64_sys_ioctl+0x197/0x210 [ 76.040784][ T5071] do_syscall_64+0x39/0xb0 [ 76.045282][ T5071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.051233][ T5071] RIP: 0033:0x7f8e02994739 [ 76.055722][ T5071] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.075417][ T5071] RSP: 002b:00007ffdefbc5528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.083951][ T5071] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e02994739 [ 76.092030][ T5071] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 76.100011][ T5071] RBP: 00007f8e029588e0 R08: 0000000000000000 R09: 0000000000000000 [ 76.108036][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e02958970 [ 76.116087][ T5071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.124149][ T5071] [ 76.127202][ T5071] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.134482][ T5071] CPU: 0 PID: 5071 Comm: syz-executor460 Not tainted 6.2.0-rc4-syzkaller-00069-g081edded9b38 #0 [ 76.144900][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 76.154956][ T5071] Call Trace: [ 76.158238][ T5071] [ 76.161170][ T5071] dump_stack_lvl+0xd1/0x138 [ 76.165780][ T5071] panic+0x2cc/0x626 [ 76.169687][ T5071] ? panic_print_sys_info.part.0+0x110/0x110 [ 76.175695][ T5071] ? __alloc_pages+0x412/0x5b0 [ 76.180472][ T5071] check_panic_on_warn.cold+0x19/0x35 [ 76.185880][ T5071] __warn+0xf2/0x1a0 [ 76.189805][ T5071] ? __alloc_pages+0x412/0x5b0 [ 76.194601][ T5071] report_bug+0x1c0/0x210 [ 76.199052][ T5071] handle_bug+0x3c/0x70 [ 76.203250][ T5071] exc_invalid_op+0x18/0x50 [ 76.207796][ T5071] asm_exc_invalid_op+0x1a/0x20 [ 76.212670][ T5071] RIP: 0010:__alloc_pages+0x412/0x5b0 [ 76.218078][ T5071] Code: ff ff 00 0f 84 c3 fd ff ff 80 ce 01 e9 bb fd ff ff 83 fe 0a 0f 86 ce fc ff ff 80 3d e3 db 98 0c 00 75 09 c6 05 da db 98 0c 01 <0f> 0b 45 31 f6 e9 52 fe ff ff 65 ff 05 15 b6 3e 7e 48 c7 c0 a0 60 [ 76.237720][ T5071] RSP: 0018:ffffc90003ddfbb0 EFLAGS: 00010246 [ 76.243810][ T5071] RAX: 0000000000000000 RBX: 1ffff920007bbf77 RCX: 0000000000000000 [ 76.251802][ T5071] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000 [ 76.259796][ T5071] RBP: 0000000000040dc0 R08: 0000000000000005 R09: 0000000000000000 [ 76.267784][ T5071] R10: 00000000fffffffe R11: 0000000000000000 R12: 000000000000001a [ 76.275777][ T5071] R13: 0000000000000000 R14: 0000000000040dc0 R15: ffff88814532f168 [ 76.283800][ T5071] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 76.290605][ T5071] ? rcu_read_lock_sched_held+0x3e/0x70 [ 76.296204][ T5071] ? uinput_ioctl_handler.isra.0+0xa8/0x1e60 [ 76.302233][ T5071] __kmalloc_large_node+0x85/0x160 [ 76.307383][ T5071] ? input_mt_init_slots+0xdd/0x540 [ 76.312607][ T5071] __kmalloc+0x91/0xd0 [ 76.316711][ T5071] input_mt_init_slots+0xdd/0x540 [ 76.321764][ T5071] uinput_ioctl_handler.isra.0+0x1850/0x1e60 [ 76.327774][ T5071] ? uinput_ff_upload_from_user+0x2a0/0x2a0 [ 76.333704][ T5071] ? find_held_lock+0x2d/0x110 [ 76.338507][ T5071] ? ptrace_notify+0xfe/0x140 [ 76.343207][ T5071] ? lock_downgrade+0x6e0/0x6e0 [ 76.348100][ T5071] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.353073][ T5071] ? uinput_ioctl_handler.isra.0+0x1e60/0x1e60 [ 76.359263][ T5071] __x64_sys_ioctl+0x197/0x210 [ 76.364055][ T5071] do_syscall_64+0x39/0xb0 [ 76.368527][ T5071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.374455][ T5071] RIP: 0033:0x7f8e02994739 [ 76.378904][ T5071] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.398555][ T5071] RSP: 002b:00007ffdefbc5528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.406997][ T5071] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e02994739 [ 76.414985][ T5071] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 76.422984][ T5071] RBP: 00007f8e029588e0 R08: 0000000000000000 R09: 0000000000000000 [ 76.430974][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e02958970 [ 76.438987][ T5071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.446995][ T5071] [ 76.450350][ T5071] Kernel Offset: disabled [ 76.454769][ T5071] Rebooting in 86400 seconds..