./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1600754562 <...> Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. execve("./syz-executor1600754562", ["./syz-executor1600754562"], 0x7ffcfc2d3fa0 /* 10 vars */) = 0 brk(NULL) = 0x555556538000 brk(0x555556538c40) = 0x555556538c40 arch_prctl(ARCH_SET_FS, 0x555556538300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1600754562", 4096) = 28 brk(0x555556559c40) = 0x555556559c40 brk(0x55555655a000) = 0x55555655a000 mprotect(0x7fcdb7780000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 ioctl(3, UI_SET_EVBIT, 0x3) = 0 write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x09\x00\x04\x00\x09\x00\x44\x00\x00\x00\x08\x00\x00\x00\x05\x00\x00\x00"..., 1116) = 1116 [ 51.675668][ T3612] ------------[ cut here ]------------ [ 51.675678][ T3612] WARNING: CPU: 1 PID: 3612 at mm/page_alloc.c:5483 __alloc_pages+0x39e/0x510 [ 51.690722][ T3612] Modules linked in: [ 51.694614][ T3612] CPU: 1 PID: 3612 Comm: syz-executor160 Not tainted 5.18.0-next-20220527-syzkaller #0 [ 51.704514][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.714700][ T3612] RIP: 0010:__alloc_pages+0x39e/0x510 [ 51.720307][ T3612] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d a4 d1 e9 0b 00 75 09 c6 05 9b d1 e9 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 a1 bf 45 7e 48 c7 c0 00 0d [ 51.740035][ T3612] RSP: 0018:ffffc900030cfb90 EFLAGS: 00010246 [ 51.746287][ T3612] RAX: 0000000000000000 RBX: 1ffff92000619f73 RCX: 0000000000000000 [ 51.754320][ T3612] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000 [ 51.762394][ T3612] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 51.770493][ T3612] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018 [ 51.778588][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888016ebb168 [ 51.786561][ T3612] FS: 0000555556538300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 51.795624][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.802304][ T3612] CR2: 0000000020000048 CR3: 00000000711ac000 CR4: 00000000003506e0 [ 51.810337][ T3612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.818411][ T3612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.826373][ T3612] Call Trace: [ 51.829704][ T3612] [ 51.832729][ T3612] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120 [ 51.839598][ T3612] ? rcu_read_lock_sched_held+0x3a/0x70 [ 51.845178][ T3612] ? __mutex_lock+0x231/0x1350 [ 51.850085][ T3612] alloc_pages+0x1aa/0x310 [ 51.854546][ T3612] kmalloc_order+0x34/0xf0 [ 51.859076][ T3612] kmalloc_order_trace+0x14/0x120 [ 51.864122][ T3612] input_mt_init_slots+0xd9/0x5f0 [ 51.869307][ T3612] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 51.875222][ T3612] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 51.881052][ T3612] ? find_held_lock+0x2d/0x110 [ 51.885933][ T3612] ? ptrace_notify+0xfa/0x140 [ 51.890672][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 51.895554][ T3612] ? bpf_lsm_file_ioctl+0x5/0x10 [ 51.900594][ T3612] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 51.906772][ T3612] __x64_sys_ioctl+0x193/0x200 [ 51.911634][ T3612] do_syscall_64+0x35/0xb0 [ 51.916069][ T3612] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.922051][ T3612] RIP: 0033:0x7fcdb7713729 [ 51.922089][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.946218][ T3612] RSP: 002b:00007ffcb8ab3818 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.954703][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdb7713729 [ 51.962765][ T3612] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 51.970820][ T3612] RBP: 00007fcdb76d78d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.978866][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcdb76d7960 [ 51.986858][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.994936][ T3612] [ 51.998056][ T3612] Kernel panic - not syncing: panic_on_warn set ... [ 52.004636][ T3612] CPU: 1 PID: 3612 Comm: syz-executor160 Not tainted 5.18.0-next-20220527-syzkaller #0 [ 52.014247][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.024285][ T3612] Call Trace: [ 52.027551][ T3612] [ 52.030507][ T3612] dump_stack_lvl+0xcd/0x134 [ 52.035111][ T3612] panic+0x2d7/0x636 [ 52.039014][ T3612] ? panic_print_sys_info.part.0+0x10b/0x10b [ 52.045007][ T3612] ? __warn.cold+0x1d9/0x2cd [ 52.049596][ T3612] ? __alloc_pages+0x39e/0x510 [ 52.054354][ T3612] __warn.cold+0x1ea/0x2cd [ 52.058767][ T3612] ? __alloc_pages+0x39e/0x510 [ 52.063535][ T3612] report_bug+0x1bc/0x210 [ 52.067867][ T3612] handle_bug+0x3c/0x60 [ 52.072032][ T3612] exc_invalid_op+0x14/0x40 [ 52.076532][ T3612] asm_exc_invalid_op+0x1b/0x20 [ 52.081375][ T3612] RIP: 0010:__alloc_pages+0x39e/0x510 [ 52.086739][ T3612] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d a4 d1 e9 0b 00 75 09 c6 05 9b d1 e9 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 a1 bf 45 7e 48 c7 c0 00 0d [ 52.106344][ T3612] RSP: 0018:ffffc900030cfb90 EFLAGS: 00010246 [ 52.112420][ T3612] RAX: 0000000000000000 RBX: 1ffff92000619f73 RCX: 0000000000000000 [ 52.120483][ T3612] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000 [ 52.128459][ T3612] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 52.136434][ T3612] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018 [ 52.144407][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888016ebb168 [ 52.152397][ T3612] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120 [ 52.159173][ T3612] ? rcu_read_lock_sched_held+0x3a/0x70 [ 52.164737][ T3612] ? __mutex_lock+0x231/0x1350 [ 52.169536][ T3612] alloc_pages+0x1aa/0x310 [ 52.173966][ T3612] kmalloc_order+0x34/0xf0 [ 52.178396][ T3612] kmalloc_order_trace+0x14/0x120 [ 52.183433][ T3612] input_mt_init_slots+0xd9/0x5f0 [ 52.188470][ T3612] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 52.194384][ T3612] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 52.200123][ T3612] ? find_held_lock+0x2d/0x110 [ 52.204905][ T3612] ? ptrace_notify+0xfa/0x140 [ 52.209589][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 52.214464][ T3612] ? bpf_lsm_file_ioctl+0x5/0x10 [ 52.219430][ T3612] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 52.225601][ T3612] __x64_sys_ioctl+0x193/0x200 [ 52.230378][ T3612] do_syscall_64+0x35/0xb0 [ 52.236455][ T3612] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 52.242358][ T3612] RIP: 0033:0x7fcdb7713729 [ 52.246777][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.266388][ T3612] RSP: 002b:00007ffcb8ab3818 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.274812][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdb7713729 [ 52.282868][ T3612] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 52.290839][ T3612] RBP: 00007fcdb76d78d0 R08: 0000000000000000 R09: 0000000000000000 [ 52.298810][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcdb76d7960 [ 52.306784][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.314772][ T3612] [ 52.318067][ T3612] Kernel Offset: disabled [ 52.322421][ T3612] Rebooting in 86400 seconds..