./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4196569030
<...>
Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts.
execve("./syz-executor4196569030", ["./syz-executor4196569030"], 0x7ffdf1e1a940 /* 10 vars */) = 0
brk(NULL) = 0x555556742000
brk(0x555556742c40) = 0x555556742c40
arch_prctl(ARCH_SET_FS, 0x555556742300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4196569030", 4096) = 28
brk(0x555556763c40) = 0x555556763c40
brk(0x555556764000) = 0x555556764000
mprotect(0x7f9b53ad3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
ioctl(3, UI_SET_EVBIT, 0x3) = 0
write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
syzkaller login: [ 49.351700][ T3602] ------------[ cut here ]------------
[ 49.351707][ T3602] WARNING: CPU: 0 PID: 3602 at mm/page_alloc.c:5402 __alloc_pages+0x39e/0x510
[ 49.366771][ T3602] Modules linked in:
[ 49.370973][ T3602] CPU: 1 PID: 3602 Comm: syz-executor419 Not tainted 5.18.0-syzkaller-12234-g50fd82b3a9a9 #0
[ 49.381274][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.391588][ T3602] RIP: 0010:__alloc_pages+0x39e/0x510
[ 49.397109][ T3602] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 01 68 ea 0b 00 75 09 c6 05 f8 67 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 81 d4 45 7e 48 c7 c0 80 8e
[ 49.416980][ T3602] RSP: 0018:ffffc90002edfb90 EFLAGS: 00010246
[ 49.423245][ T3602] RAX: 0000000000000000 RBX: 1ffff920005dbf73 RCX: 0000000000000000
[ 49.431345][ T3602] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000
[ 49.439333][ T3602] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 49.447523][ T3602] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018
[ 49.455623][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807d33e168
[ 49.463714][ T3602] FS: 0000555556742300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 49.472788][ T3602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.479387][ T3602] CR2: 0000562faf8556f8 CR3: 0000000074241000 CR4: 00000000003506f0
[ 49.487450][ T3602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.495534][ T3602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.503996][ T3602] Call Trace:
[ 49.507360][ T3602]
[ 49.510877][ T3602] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160
[ 49.517692][ T3602] ? rcu_read_lock_sched_held+0x3a/0x70
[ 49.523393][ T3602] ? __mutex_lock+0x231/0x1350
[ 49.528341][ T3602] alloc_pages+0x1aa/0x310
[ 49.532921][ T3602] kmalloc_order+0x34/0xf0
[ 49.537371][ T3602] kmalloc_order_trace+0x14/0x120
[ 49.542549][ T3602] input_mt_init_slots+0xd9/0x5f0
[ 49.547604][ T3602] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 49.553645][ T3602] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 49.559398][ T3602] ? find_held_lock+0x2d/0x110
[ 49.564347][ T3602] ? ptrace_notify+0xfa/0x140
[ 49.569119][ T3602] ? lock_downgrade+0x6e0/0x6e0
[ 49.574193][ T3602] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.579874][ T3602] ? bpf_lsm_file_ioctl+0x5/0x10
[ 49.584972][ T3602] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 49.591278][ T3602] __x64_sys_ioctl+0x193/0x200
[ 49.596059][ T3602] do_syscall_64+0x35/0xb0
[ 49.600476][ T3602] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.606489][ T3602] RIP: 0033:0x7f9b53a66719
[ 49.611009][ T3602] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.630753][ T3602] RSP: 002b:00007ffd256e4fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.639289][ T3602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b53a66719
[ 49.647375][ T3602] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.655450][ T3602] RBP: 00007f9b53a2a8c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.663522][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b53a2a950
[ 49.671590][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.679592][ T3602]
[ 49.682718][ T3602] Kernel panic - not syncing: panic_on_warn set ...
[ 49.689689][ T3602] CPU: 1 PID: 3602 Comm: syz-executor419 Not tainted 5.18.0-syzkaller-12234-g50fd82b3a9a9 #0
[ 49.699852][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.709902][ T3602] Call Trace:
[ 49.713173][ T3602]
[ 49.716098][ T3602] dump_stack_lvl+0xcd/0x134
[ 49.720691][ T3602] panic+0x2d7/0x636
[ 49.724584][ T3602] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.730692][ T3602] ? __warn.cold+0x1d9/0x2cd
[ 49.735279][ T3602] ? __alloc_pages+0x39e/0x510
[ 49.740128][ T3602] __warn.cold+0x1ea/0x2cd
[ 49.744545][ T3602] ? __alloc_pages+0x39e/0x510
[ 49.749305][ T3602] report_bug+0x1bc/0x210
[ 49.753638][ T3602] handle_bug+0x3c/0x60
[ 49.757788][ T3602] exc_invalid_op+0x14/0x40
[ 49.762288][ T3602] asm_exc_invalid_op+0x1b/0x20
[ 49.767137][ T3602] RIP: 0010:__alloc_pages+0x39e/0x510
[ 49.772505][ T3602] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 01 68 ea 0b 00 75 09 c6 05 f8 67 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 81 d4 45 7e 48 c7 c0 80 8e
[ 49.792140][ T3602] RSP: 0018:ffffc90002edfb90 EFLAGS: 00010246
[ 49.798217][ T3602] RAX: 0000000000000000 RBX: 1ffff920005dbf73 RCX: 0000000000000000
[ 49.806297][ T3602] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000000
[ 49.814511][ T3602] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 49.822512][ T3602] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000018
[ 49.830580][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807d33e168
[ 49.838586][ T3602] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160
[ 49.845375][ T3602] ? rcu_read_lock_sched_held+0x3a/0x70
[ 49.850941][ T3602] ? __mutex_lock+0x231/0x1350
[ 49.855731][ T3602] alloc_pages+0x1aa/0x310
[ 49.860190][ T3602] kmalloc_order+0x34/0xf0
[ 49.864651][ T3602] kmalloc_order_trace+0x14/0x120
[ 49.869692][ T3602] input_mt_init_slots+0xd9/0x5f0
[ 49.874731][ T3602] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 49.880645][ T3602] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 49.886380][ T3602] ? find_held_lock+0x2d/0x110
[ 49.891164][ T3602] ? ptrace_notify+0xfa/0x140
[ 49.895869][ T3602] ? lock_downgrade+0x6e0/0x6e0
[ 49.900759][ T3602] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.906005][ T3602] ? bpf_lsm_file_ioctl+0x5/0x10
[ 49.910973][ T3602] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 49.917153][ T3602] __x64_sys_ioctl+0x193/0x200
[ 49.921945][ T3602] do_syscall_64+0x35/0xb0
[ 49.926395][ T3602] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.932302][ T3602] RIP: 0033:0x7f9b53a66719
[ 49.936728][ T3602] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.956352][ T3602] RSP: 002b:00007ffd256e4fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 49.964781][ T3602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b53a66719
[ 49.972763][ T3602] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 49.980770][ T3602] RBP: 00007f9b53a2a8c0 R08: 0000000000000000 R09: 0000000000000000
[ 49.988775][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b53a2a950
[ 49.996762][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.004753][ T3602]
[ 50.008068][ T3602] Kernel Offset: disabled
[ 50.012432][ T3602] Rebooting in 86400 seconds..