./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2824345480
<...>
Warning: Permanently added '10.128.1.91' (ECDSA) to the list of known hosts.
execve("./syz-executor2824345480", ["./syz-executor2824345480"], 0x7fffa3c625b0 /* 10 vars */) = 0
brk(NULL) = 0x555556ebb000
brk(0x555556ebbc40) = 0x555556ebbc40
arch_prctl(ARCH_SET_FS, 0x555556ebb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2824345480", 4096) = 28
brk(0x555556edcc40) = 0x555556edcc40
brk(0x555556edd000) = 0x555556edd000
mprotect(0x7f91f5c61000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
ioctl(3, UI_SET_EVBIT, 0x3) = 0
write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
syzkaller login: [ 48.715835][ T3607] ------------[ cut here ]------------
[ 48.721558][ T3607] WARNING: CPU: 0 PID: 3607 at mm/page_alloc.c:5491 __alloc_pages+0x30a/0x560
[ 48.730783][ T3607] Modules linked in:
[ 48.734675][ T3607] CPU: 0 PID: 3607 Comm: syz-executor282 Not tainted 6.0.0-rc4-syzkaller-00284-gce888220d5c7 #0
[ 48.745298][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 48.755500][ T3607] RIP: 0010:__alloc_pages+0x30a/0x560
[ 48.760999][ T3607] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 c6 de 40 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45
[ 48.780661][ T3607] RSP: 0018:ffffc900038afaa0 EFLAGS: 00010246
[ 48.786735][ T3607] RAX: ffffc900038afb00 RBX: 0000000000000018 RCX: 0000000000000000
[ 48.794936][ T3607] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900038afb28
[ 48.802967][ T3607] RBP: ffffc900038afbc0 R08: dffffc0000000000 R09: ffffc900038afb00
[ 48.811024][ T3607] R10: fffff52000715f65 R11: 1ffff92000715f60 R12: 0000000000040dc0
[ 48.819054][ T3607] R13: 1ffff92000715f5c R14: dffffc0000000000 R15: 1ffff92000715f58
[ 48.827037][ T3607] FS: 0000555556ebb300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 48.836018][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.842633][ T3607] CR2: 000000000061ba0c CR3: 0000000078707000 CR4: 00000000003506e0
[ 48.850646][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.858751][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.866717][ T3607] Call Trace:
[ 48.870063][ T3607]
[ 48.873021][ T3607] ? zone_statistics+0x160/0x160
[ 48.878022][ T3607] ? rcu_read_lock_sched_held+0x89/0x130
[ 48.883671][ T3607] kmalloc_order+0x41/0x150
[ 48.888222][ T3607] kmalloc_order_trace+0x15/0x70
[ 48.893171][ T3607] __kmalloc+0x26e/0x370
[ 48.897423][ T3607] input_mt_init_slots+0xbd/0x980
[ 48.902535][ T3607] uinput_create_device+0x50e/0x620
[ 48.907772][ T3607] uinput_ioctl_handler+0xa04/0x1660
[ 48.913048][ T3607] ? smack_file_ioctl+0x298/0x3a0
[ 48.918098][ T3607] ? uinput_release+0x50/0x50
[ 48.922810][ T3607] ? __ct_user_exit+0x81/0xe0
[ 48.927571][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10
[ 48.933334][ T3607] ? security_file_ioctl+0x9d/0xb0
[ 48.938513][ T3607] ? uinput_poll+0x110/0x110
[ 48.943114][ T3607] __se_sys_ioctl+0xfb/0x170
[ 48.947767][ T3607] do_syscall_64+0x2b/0x70
[ 48.952277][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 48.958202][ T3607] RIP: 0033:0x7f91f5bf4719
[ 48.962626][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 48.982317][ T3607] RSP: 002b:00007ffe1ab23138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 48.990791][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91f5bf4719
[ 48.998822][ T3607] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.006815][ T3607] RBP: 00007f91f5bb88c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.014839][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91f5bb8950
[ 49.022847][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.030885][ T3607]
[ 49.033910][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 49.040479][ T3607] CPU: 1 PID: 3607 Comm: syz-executor282 Not tainted 6.0.0-rc4-syzkaller-00284-gce888220d5c7 #0
[ 49.050876][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 49.060924][ T3607] Call Trace:
[ 49.064201][ T3607]
[ 49.067126][ T3607] dump_stack_lvl+0x1e3/0x2cb
[ 49.071805][ T3607] ? io_alloc_page_table+0x110/0x110
[ 49.077083][ T3607] ? panic+0x76b/0x76b
[ 49.081172][ T3607] ? vscnprintf+0x59/0x80
[ 49.085497][ T3607] ? __alloc_pages+0x2f0/0x560
[ 49.090254][ T3607] panic+0x316/0x76b
[ 49.094146][ T3607] ? __warn+0x131/0x220
[ 49.098297][ T3607] ? fb_is_primary_device+0xcc/0xcc
[ 49.103500][ T3607] ? __alloc_pages+0x30a/0x560
[ 49.108270][ T3607] __warn+0x1fa/0x220
[ 49.112259][ T3607] ? __alloc_pages+0x30a/0x560
[ 49.117031][ T3607] report_bug+0x1b3/0x2d0
[ 49.121374][ T3607] handle_bug+0x3d/0x70
[ 49.125531][ T3607] exc_invalid_op+0x16/0x40
[ 49.130031][ T3607] asm_exc_invalid_op+0x16/0x20
[ 49.134883][ T3607] RIP: 0010:__alloc_pages+0x30a/0x560
[ 49.140246][ T3607] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 c6 de 40 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45
[ 49.159860][ T3607] RSP: 0018:ffffc900038afaa0 EFLAGS: 00010246
[ 49.165928][ T3607] RAX: ffffc900038afb00 RBX: 0000000000000018 RCX: 0000000000000000
[ 49.173983][ T3607] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900038afb28
[ 49.181950][ T3607] RBP: ffffc900038afbc0 R08: dffffc0000000000 R09: ffffc900038afb00
[ 49.189918][ T3607] R10: fffff52000715f65 R11: 1ffff92000715f60 R12: 0000000000040dc0
[ 49.197901][ T3607] R13: 1ffff92000715f5c R14: dffffc0000000000 R15: 1ffff92000715f58
[ 49.205888][ T3607] ? zone_statistics+0x160/0x160
[ 49.210829][ T3607] ? rcu_read_lock_sched_held+0x89/0x130
[ 49.216558][ T3607] kmalloc_order+0x41/0x150
[ 49.221076][ T3607] kmalloc_order_trace+0x15/0x70
[ 49.226009][ T3607] __kmalloc+0x26e/0x370
[ 49.230254][ T3607] input_mt_init_slots+0xbd/0x980
[ 49.235280][ T3607] uinput_create_device+0x50e/0x620
[ 49.240479][ T3607] uinput_ioctl_handler+0xa04/0x1660
[ 49.245843][ T3607] ? smack_file_ioctl+0x298/0x3a0
[ 49.250864][ T3607] ? uinput_release+0x50/0x50
[ 49.255551][ T3607] ? __ct_user_exit+0x81/0xe0
[ 49.260224][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10
[ 49.265153][ T3607] ? security_file_ioctl+0x9d/0xb0
[ 49.270278][ T3607] ? uinput_poll+0x110/0x110
[ 49.274866][ T3607] __se_sys_ioctl+0xfb/0x170
[ 49.279458][ T3607] do_syscall_64+0x2b/0x70
[ 49.283961][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.289848][ T3607] RIP: 0033:0x7f91f5bf4719
[ 49.294279][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.313883][ T3607] RSP: 002b:00007ffe1ab23138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.322292][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91f5bf4719
[ 49.330256][ T3607] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.338218][ T3607] RBP: 00007f91f5bb88c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.346366][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91f5bb8950
[ 49.354329][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.362323][ T3607]
[ 49.365755][ T3607] Kernel Offset: disabled
[ 49.370140][ T3607] Rebooting in 86400 seconds..