./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1406985870 <...> Warning: Permanently added '10.128.1.100' (ECDSA) to the list of known hosts. execve("./syz-executor1406985870", ["./syz-executor1406985870"], 0x7fff02c701a0 /* 10 vars */) = 0 brk(NULL) = 0x555555846000 brk(0x555555846c40) = 0x555555846c40 arch_prctl(ARCH_SET_FS, 0x555555846300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1406985870", 4096) = 28 brk(0x555555867c40) = 0x555555867c40 brk(0x555555868000) = 0x555555868000 mprotect(0x7fd7865c6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558465d0) = 3610 ./strace-static-x86_64: Process 3610 attached [pid 3610] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3610] setsid() = 1 [pid 3610] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3610] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3610] unshare(CLONE_NEWNS) = 0 [pid 3610] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3610] unshare(CLONE_NEWIPC) = 0 [pid 3610] unshare(CLONE_NEWCGROUP) = 0 [pid 3610] unshare(CLONE_NEWUTS) = 0 [pid 3610] unshare(CLONE_SYSVSEM) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "16777216", 8) = 8 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "536870912", 9) = 9 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "8192", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3610] close(3) = 0 [pid 3610] getpid() = 1 [pid 3610] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3627 attached [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3610] <... clone resumed>, child_tidptr=0x5555558465d0) = 3 [pid 3627] <... prctl resumed>) = 0 [pid 3627] setpgid(0, 0) = 0 [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3627] write(3, "1000", 4) = 4 [pid 3627] close(3) = 0 [pid 3627] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_LARGEFILE) = 3 [pid 3627] ioctl(3, TUNSETIFF, 0x20000280) = 0 [pid 3627] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3627] write(4, "2", 1) = 1 [pid 3627] write(3, "\xaa\xaa\xaa\xaa\xaa\x00\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\xf2\xd1\x00\x10\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x01\xcd\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 536872070) = -1 ENOMEM (Cannot allocate memory) [pid 3627] close(3) = 0 [pid 3627] close(4) = 0 [pid 3627] close(5) = -1 EBADF (Bad file descriptor) [pid 3627] close(6) = -1 EBADF (Bad file descriptor) [pid 3627] close(7) = -1 EBADF (Bad file descriptor) [pid 3627] close(8) = -1 EBADF (Bad file descriptor) [pid 3627] close(9) = -1 EBADF (Bad file descriptor) [pid 3627] close(10) = -1 EBADF (Bad file descriptor) [pid 3627] close(11) = -1 EBADF (Bad file descriptor) [pid 3627] close(12) = -1 EBADF (Bad file descriptor) [pid 3627] close(13) = -1 EBADF (Bad file descriptor) [pid 3627] close(14) = -1 EBADF (Bad file descriptor) [pid 3627] close(15) = -1 EBADF (Bad file descriptor) [pid 3627] close(16) = -1 EBADF (Bad file descriptor) [pid 3627] close(17) = -1 EBADF (Bad file descriptor) [pid 3627] close(18) = -1 EBADF (Bad file descriptor) [pid 3627] close(19) = -1 EBADF (Bad file descriptor) [pid 3627] close(20) = -1 EBADF (Bad file descriptor) [pid 3627] close(21) = -1 EBADF (Bad file descriptor) [pid 3627] close(22) = -1 EBADF (Bad file descriptor) [pid 3627] close(23) = -1 EBADF (Bad file descriptor) [pid 3627] close(24) = -1 EBADF (Bad file descriptor) [pid 3627] close(25) = -1 EBADF (Bad file descriptor) [pid 3627] close(26) = -1 EBADF (Bad file descriptor) [pid 3627] close(27) = -1 EBADF (Bad file descriptor) [pid 3627] close(28) = -1 EBADF (Bad file descriptor) [pid 3627] close(29) = -1 EBADF (Bad file descriptor) [pid 3627] exit_group(0) = ? [pid 3627] +++ exited with 0 +++ [pid 3610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558465d0) = 4 ./strace-static-x86_64: Process 3628 attached [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3628] setpgid(0, 0) = 0 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3628] write(3, "1000", 4) = 4 [pid 3628] close(3) = 0 [pid 3628] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_LARGEFILE) = 3 [pid 3628] ioctl(3, TUNSETIFF, 0x20000280) = 0 [pid 3628] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3628] write(4, "2", 1) = 1 [pid 3628] write(3, "\xaa\xaa\xaa\xaa\xaa\x00\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\xf2\xd1\x00\x10\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x01\xcd\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 536872070) = -1 ENOMEM (Cannot allocate memory) [pid 3628] close(3) = 0 [pid 3628] close(4) = 0 [pid 3628] close(5) = -1 EBADF (Bad file descriptor) [pid 3628] close(6) = -1 EBADF (Bad file descriptor) [pid 3628] close(7) = -1 EBADF (Bad file descriptor) [pid 3628] close(8) = -1 EBADF (Bad file descriptor) [pid 3628] close(9) = -1 EBADF (Bad file descriptor) [pid 3628] close(10) = -1 EBADF (Bad file descriptor) [pid 3628] close(11) = -1 EBADF (Bad file descriptor) [pid 3628] close(12) = -1 EBADF (Bad file descriptor) [pid 3628] close(13) = -1 EBADF (Bad file descriptor) [pid 3628] close(14) = -1 EBADF (Bad file descriptor) [pid 3628] close(15) = -1 EBADF (Bad file descriptor) [pid 3628] close(16) = -1 EBADF (Bad file descriptor) [pid 3628] close(17) = -1 EBADF (Bad file descriptor) [pid 3628] close(18) = -1 EBADF (Bad file descriptor) [pid 3628] close(19) = -1 EBADF (Bad file descriptor) [pid 3628] close(20) = -1 EBADF (Bad file descriptor) [pid 3628] close(21) = -1 EBADF (Bad file descriptor) [pid 3628] close(22) = -1 EBADF (Bad file descriptor) [pid 3628] close(23) = -1 EBADF (Bad file descriptor) [pid 3628] close(24) = -1 EBADF (Bad file descriptor) [pid 3628] close(25) = -1 EBADF (Bad file descriptor) [pid 3628] close(26) = -1 EBADF (Bad file descriptor) [pid 3628] close(27) = -1 EBADF (Bad file descriptor) [pid 3628] close(28) = -1 EBADF (Bad file descriptor) [pid 3628] close(29) = -1 EBADF (Bad file descriptor) [pid 3628] exit_group(0) = ? [pid 3628] +++ exited with 0 +++ [pid 3610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3610] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3629 attached , child_tidptr=0x5555558465d0) = 5 [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3629] setpgid(0, 0) = 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_LARGEFILE) = 3 [pid 3629] ioctl(3, TUNSETIFF, 0x20000280) = 0 [pid 3629] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3629] write(4, "2", 1) = 1 [pid 3629] write(3, "\xaa\xaa\xaa\xaa\xaa\x00\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\xf2\xd1\x00\x10\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x01\xcd\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 536872070) = -1 ENOMEM (Cannot allocate memory) [pid 3629] close(3) = 0 [pid 3629] close(4) = 0 [pid 3629] close(5) = -1 EBADF (Bad file descriptor) [pid 3629] close(6) = -1 EBADF (Bad file descriptor) [pid 3629] close(7) = -1 EBADF (Bad file descriptor) [pid 3629] close(8) = -1 EBADF (Bad file descriptor) [pid 3629] close(9) = -1 EBADF (Bad file descriptor) [pid 3629] close(10) = -1 EBADF (Bad file descriptor) [pid 3629] close(11) = -1 EBADF (Bad file descriptor) [pid 3629] close(12) = -1 EBADF (Bad file descriptor) [pid 3629] close(13) = -1 EBADF (Bad file descriptor) [pid 3629] close(14) = -1 EBADF (Bad file descriptor) [pid 3629] close(15) = -1 EBADF (Bad file descriptor) [pid 3629] close(16) = -1 EBADF (Bad file descriptor) [pid 3629] close(17) = -1 EBADF (Bad file descriptor) [pid 3629] close(18) = -1 EBADF (Bad file descriptor) [pid 3629] close(19) = -1 EBADF (Bad file descriptor) [pid 3629] close(20) = -1 EBADF (Bad file descriptor) [pid 3629] close(21) = -1 EBADF (Bad file descriptor) [pid 3629] close(22) = -1 EBADF (Bad file descriptor) [pid 3629] close(23) = -1 EBADF (Bad file descriptor) [pid 3629] close(24) = -1 EBADF (Bad file descriptor) [pid 3629] close(25) = -1 EBADF (Bad file descriptor) [pid 3629] close(26) = -1 EBADF (Bad file descriptor) [pid 3629] close(27) = -1 EBADF (Bad file descriptor) [pid 3629] close(28) = -1 EBADF (Bad file descriptor) [pid 3629] close(29) = -1 EBADF (Bad file descriptor) [pid 3629] exit_group(0) = ? [pid 3629] +++ exited with 0 +++ [pid 3610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3610] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3630 attached , child_tidptr=0x5555558465d0) = 6 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_LARGEFILE) = 3 [pid 3630] ioctl(3, TUNSETIFF, 0x20000280) = 0 [pid 3630] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3630] write(4, "2", 1) = 1 [pid 3630] write(3, "\xaa\xaa\xaa\xaa\xaa\x00\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\xf2\xd1\x00\x10\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x01\xcd\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 536872070) = -1 ENOMEM (Cannot allocate memory) [pid 3630] close(3) = 0 [pid 3630] close(4) = 0 [pid 3630] close(5) = -1 EBADF (Bad file descriptor) [pid 3630] close(6) = -1 EBADF (Bad file descriptor) [pid 3630] close(7) = -1 EBADF (Bad file descriptor) [pid 3630] close(8) = -1 EBADF (Bad file descriptor) [pid 3630] close(9) = -1 EBADF (Bad file descriptor) [pid 3630] close(10) = -1 EBADF (Bad file descriptor) [pid 3630] close(11) = -1 EBADF (Bad file descriptor) [pid 3630] close(12) = -1 EBADF (Bad file descriptor) [pid 3630] close(13) = -1 EBADF (Bad file descriptor) [pid 3630] close(14) = -1 EBADF (Bad file descriptor) [pid 3630] close(15) = -1 EBADF (Bad file descriptor) [pid 3630] close(16) = -1 EBADF (Bad file descriptor) [pid 3630] close(17) = -1 EBADF (Bad file descriptor) [pid 3630] close(18) = -1 EBADF (Bad file descriptor) [pid 3630] close(19) = -1 EBADF (Bad file descriptor) [pid 3630] close(20) = -1 EBADF (Bad file descriptor) [pid 3630] close(21) = -1 EBADF (Bad file descriptor) [pid 3630] close(22) = -1 EBADF (Bad file descriptor) [pid 3630] close(23) = -1 EBADF (Bad file descriptor) [pid 3630] close(24) = -1 EBADF (Bad file descriptor) [pid 3630] close(25) = -1 EBADF (Bad file descriptor) [pid 3630] close(26) = -1 EBADF (Bad file descriptor) [pid 3630] close(27) = -1 EBADF (Bad file descriptor) [pid 3630] close(28) = -1 EBADF (Bad file descriptor) [pid 3630] close(29) = -1 EBADF (Bad file descriptor) [pid 3630] exit_group(0) = ? [pid 3630] +++ exited with 0 +++ [pid 3610] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558465d0) = 7 ./strace-static-x86_64: Process 3631 attached [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3631] setpgid(0, 0) = 0 [pid 3631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1000", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_LARGEFILE) = 3 [pid 3631] ioctl(3, TUNSETIFF, 0x20000280) = 0 [pid 3631] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 3631] write(4, "2", 1) = 1 [ 50.746312][ T3631] ------------[ cut here ]------------ [ 50.746322][ T3631] WARNING: CPU: 1 PID: 3631 at mm/page_alloc.c:5402 __alloc_pages+0x39e/0x510 [ 50.761003][ T3631] Modules linked in: [ 50.765184][ T3631] CPU: 0 PID: 3631 Comm: syz-executor140 Not tainted 5.19.0-rc1-syzkaller-00263-gd7dd6eccfbc9 #0 [ 50.777306][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.787704][ T3631] RIP: 0010:__alloc_pages+0x39e/0x510 [ 50.793126][ T3631] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 73 16 ea 0b 00 75 09 c6 05 6a 16 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 31 e3 45 7e 48 c7 c0 40 2e [ 50.814750][ T3631] RSP: 0018:ffffc9000316f8e0 EFLAGS: 00010246 [ 50.821595][ T3631] RAX: 0000000000000000 RBX: 1ffff9200062df1d RCX: 0000000000000000 [ 50.830043][ T3631] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000000 [ 50.838844][ T3631] RBP: 0000000000060a20 R08: 0000000000000001 R09: 0000000000000000 [ 50.846837][ T3631] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000012 [ 50.854902][ T3631] R13: 0000000000000000 R14: 0000000000000012 R15: 0000000000000000 [ 50.863579][ T3631] FS: 0000555555846300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.873121][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.881036][ T3631] CR2: 00007ffe84eaec98 CR3: 00000000710d0000 CR4: 00000000003506f0 [ 50.889142][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.897198][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.905186][ T3631] Call Trace: [ 50.908533][ T3631] [ 50.911479][ T3631] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 50.918351][ T3631] kmalloc_large_node+0x62/0x130 [ 50.923332][ T3631] __kmalloc_node_track_caller+0x2ec/0x360 [ 50.929259][ T3631] ? tun_get_user+0x1ef8/0x3b00 [ 50.934164][ T3631] pskb_expand_head+0xf23/0x1070 [ 50.939254][ T3631] tun_get_user+0x1ef8/0x3b00 [ 50.943988][ T3631] ? tun_build_skb+0x1170/0x1170 [ 50.949293][ T3631] ? lock_downgrade+0x6e0/0x6e0 [ 50.954208][ T3631] tun_chr_write_iter+0xdb/0x200 [ 50.959252][ T3631] new_sync_write+0x38a/0x560 [ 50.963971][ T3631] ? new_sync_read+0x5f0/0x5f0 [ 50.968969][ T3631] ? rwlock_bug.part.0+0x90/0x90 [ 50.973947][ T3631] ? _raw_spin_lock_irq+0x41/0x50 [ 50.979065][ T3631] ? bpf_lsm_file_permission+0x5/0x10 [ 50.984462][ T3631] ? security_file_permission+0xab/0xd0 [ 50.990097][ T3631] vfs_write+0x7c0/0xac0 [ 50.994364][ T3631] ksys_write+0x127/0x250 [ 50.998781][ T3631] ? __ia32_sys_read+0xb0/0xb0 [ 51.003577][ T3631] ? lockdep_hardirqs_on+0x79/0x100 [ 51.008840][ T3631] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.014074][ T3631] ? ptrace_notify+0xfa/0x140 [ 51.018849][ T3631] do_syscall_64+0x35/0xb0 [ 51.023291][ T3631] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.030475][ T3631] RIP: 0033:0x7fd786552c69 [ 51.034928][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.054668][ T3631] RSP: 002b:00007ffe84eaecb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.063176][ T3631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd786552c69 [ 51.071273][ T3631] RDX: 0000000020000486 RSI: 0000000020000440 RDI: 0000000000000003 [ 51.079343][ T3631] RBP: 00007ffe84eaece0 R08: 0000000000000001 R09: 00007ffe84eaece8 [ 51.087425][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.095419][ T3631] R13: 00000000000f4240 R14: 000000000000c5d9 R15: 00007ffe84eaecc8 [ 51.103756][ T3631] [ 51.106811][ T3631] Kernel panic - not syncing: panic_on_warn set ... [ 51.113403][ T3631] CPU: 1 PID: 3631 Comm: syz-executor140 Not tainted 5.19.0-rc1-syzkaller-00263-gd7dd6eccfbc9 #0 [ 51.123901][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.133972][ T3631] Call Trace: [ 51.137254][ T3631] [ 51.140191][ T3631] dump_stack_lvl+0xcd/0x134 [ 51.144793][ T3631] panic+0x2d7/0x636 [ 51.148711][ T3631] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.154709][ T3631] ? __warn.cold+0x1d9/0x2cd [ 51.159318][ T3631] ? __alloc_pages+0x39e/0x510 [ 51.164091][ T3631] __warn.cold+0x1ea/0x2cd [ 51.168537][ T3631] ? __alloc_pages+0x39e/0x510 [ 51.173299][ T3631] report_bug+0x1bc/0x210 [ 51.177645][ T3631] handle_bug+0x3c/0x60 [ 51.181839][ T3631] exc_invalid_op+0x14/0x40 [ 51.186351][ T3631] asm_exc_invalid_op+0x1b/0x20 [ 51.191237][ T3631] RIP: 0010:__alloc_pages+0x39e/0x510 [ 51.196626][ T3631] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 73 16 ea 0b 00 75 09 c6 05 6a 16 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 31 e3 45 7e 48 c7 c0 40 2e [ 51.216269][ T3631] RSP: 0018:ffffc9000316f8e0 EFLAGS: 00010246 [ 51.222348][ T3631] RAX: 0000000000000000 RBX: 1ffff9200062df1d RCX: 0000000000000000 [ 51.230325][ T3631] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000000 [ 51.238321][ T3631] RBP: 0000000000060a20 R08: 0000000000000001 R09: 0000000000000000 [ 51.246299][ T3631] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000012 [ 51.254276][ T3631] R13: 0000000000000000 R14: 0000000000000012 R15: 0000000000000000 [ 51.262273][ T3631] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 51.269086][ T3631] kmalloc_large_node+0x62/0x130 [ 51.274044][ T3631] __kmalloc_node_track_caller+0x2ec/0x360 [ 51.279865][ T3631] ? tun_get_user+0x1ef8/0x3b00 [ 51.284744][ T3631] pskb_expand_head+0xf23/0x1070 [ 51.289705][ T3631] tun_get_user+0x1ef8/0x3b00 [ 51.294411][ T3631] ? tun_build_skb+0x1170/0x1170 [ 51.299364][ T3631] ? lock_downgrade+0x6e0/0x6e0 [ 51.304247][ T3631] tun_chr_write_iter+0xdb/0x200 [ 51.309199][ T3631] new_sync_write+0x38a/0x560 [ 51.313895][ T3631] ? new_sync_read+0x5f0/0x5f0 [ 51.318673][ T3631] ? rwlock_bug.part.0+0x90/0x90 [ 51.323621][ T3631] ? _raw_spin_lock_irq+0x41/0x50 [ 51.328684][ T3631] ? bpf_lsm_file_permission+0x5/0x10 [ 51.334078][ T3631] ? security_file_permission+0xab/0xd0 [ 51.339648][ T3631] vfs_write+0x7c0/0xac0 [ 51.343917][ T3631] ksys_write+0x127/0x250 [ 51.348263][ T3631] ? __ia32_sys_read+0xb0/0xb0 [ 51.353044][ T3631] ? lockdep_hardirqs_on+0x79/0x100 [ 51.358258][ T3631] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.363471][ T3631] ? ptrace_notify+0xfa/0x140 [ 51.368165][ T3631] do_syscall_64+0x35/0xb0 [ 51.372601][ T3631] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.378510][ T3631] RIP: 0033:0x7fd786552c69 [ 51.382957][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.402583][ T3631] RSP: 002b:00007ffe84eaecb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.411011][ T3631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd786552c69 [ 51.418991][ T3631] RDX: 0000000020000486 RSI: 0000000020000440 RDI: 0000000000000003 [ 51.426978][ T3631] RBP: 00007ffe84eaece0 R08: 0000000000000001 R09: 00007ffe84eaece8 [ 51.434964][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.442948][ T3631] R13: 00000000000f4240 R14: 000000000000c5d9 R15: 00007ffe84eaecc8 [ 51.450950][ T3631] [ 51.454273][ T3631] Kernel Offset: disabled [ 51.458630][ T3631] Rebooting in 86400 seconds..