./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4269903599
<...>
DUID 00:04:ac:03:58:10:d0:76:5c:28:30:a7:8a:8b:4a:a3:06:e2
forked to background, child pid 3181
[ 28.493497][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.497712][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts.
execve("./syz-executor4269903599", ["./syz-executor4269903599"], 0x7fffd7139e60 /* 10 vars */) = 0
brk(NULL) = 0x5555565eb000
brk(0x5555565ebc40) = 0x5555565ebc40
arch_prctl(ARCH_SET_FS, 0x5555565eb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4269903599", 4096) = 28
brk(0x55555660cc40) = 0x55555660cc40
brk(0x55555660d000) = 0x55555660d000
mprotect(0x7f9b9f474000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3603 attached
, child_tidptr=0x5555565eb5d0) = 3603
[pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3603] setpgid(0, 0) = 0
[pid 3603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3603] write(3, "1000", 4) = 4
[pid 3603] close(3) = 0
[pid 3603] openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
[pid 3603] fcntl(3, F_DUPFD, 3) = 4
[pid 3603] ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
[pid 3603] ioctl(3, UI_SET_EVBIT, 0x3) = 0
[pid 3603] write(4, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
[pid 3603] write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x06\x00\x07\x00\x04\x00\x11\x00\x00\x00\x00\x40\x00\x00\x07\x00\x00\x00"..., 1116) = -1 EINVAL (Invalid argument)
syzkaller login: [ 50.295718][ T3603] ------------[ cut here ]------------
[ 50.295726][ T3603] WARNING: CPU: 1 PID: 3603 at mm/page_alloc.c:5498 __alloc_pages+0x39e/0x510
[ 50.310998][ T3603] Modules linked in:
[ 50.314941][ T3603] CPU: 1 PID: 3603 Comm: syz-executor426 Not tainted 5.19.0-rc3-next-20220623-syzkaller #0
[ 50.325097][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.335353][ T3603] RIP: 0010:__alloc_pages+0x39e/0x510
[ 50.341126][ T3603] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 5d b9 eb 0b 00 75 09 c6 05 54 b9 eb 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 91 ed 45 7e 48 c7 c0 20 c7
[ 50.361122][ T3603] RSP: 0018:ffffc90002edfb90 EFLAGS: 00010246
[ 50.367313][ T3603] RAX: 0000000000000000 RBX: 1ffff920005dbf73 RCX: 0000000000000000
[ 50.375308][ T3603] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000
[ 50.383573][ T3603] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 50.391669][ T3603] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001a
[ 50.400021][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807f279168
[ 50.408401][ T3603] FS: 00005555565eb300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.418010][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.424718][ T3603] CR2: 00007f5b325b4a70 CR3: 0000000021574000 CR4: 00000000003506f0
[ 50.432805][ T3603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.441164][ T3603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.449239][ T3603] Call Trace:
[ 50.452743][ T3603]
[ 50.455799][ T3603] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120
[ 50.462866][ T3603] ? rcu_read_lock_sched_held+0x3a/0x70
[ 50.468559][ T3603] ? __mutex_lock+0x231/0x1350
[ 50.473393][ T3603] alloc_pages+0x1aa/0x310
[ 50.477985][ T3603] kmalloc_order+0x34/0xf0
[ 50.482440][ T3603] kmalloc_order_trace+0x13/0x120
[ 50.487583][ T3603] input_mt_init_slots+0xd9/0x5f0
[ 50.492645][ T3603] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 50.498685][ T3603] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 50.504437][ T3603] ? find_held_lock+0x2d/0x110
[ 50.509352][ T3603] ? ptrace_notify+0xfa/0x140
[ 50.514055][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 50.519036][ T3603] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.524267][ T3603] ? bpf_lsm_file_ioctl+0x5/0x10
[ 50.529314][ T3603] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 50.535528][ T3603] __x64_sys_ioctl+0x193/0x200
[ 50.540456][ T3603] do_syscall_64+0x35/0xb0
[ 50.544902][ T3603] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.550961][ T3603] RIP: 0033:0x7f9b9f407479
[ 50.555404][ T3603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.575372][ T3603] RSP: 002b:00007ffc3fce7c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.583945][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b9f407479
[ 50.592150][ T3603] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 50.600357][ T3603] RBP: 0000000000000000 R08: 00007ffc3fce7df8 R09: 00007ffc3fce7df8
[ 50.608463][ T3603] R10: 00007ffc3fce7df8 R11: 0000000000000246 R12: 00007f9b9f3cad00
[ 50.616552][ T3603] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.624559][ T3603]
[ 50.627686][ T3603] Kernel panic - not syncing: panic_on_warn set ...
[ 50.634339][ T3603] CPU: 0 PID: 3603 Comm: syz-executor426 Not tainted 5.19.0-rc3-next-20220623-syzkaller #0
[ 50.644334][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.654386][ T3603] Call Trace:
[ 50.657670][ T3603]
[ 50.660721][ T3603] dump_stack_lvl+0xcd/0x134
[ 50.665313][ T3603] panic+0x2d7/0x64a
[ 50.669224][ T3603] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.675213][ T3603] ? __warn.cold+0x1d9/0x2cd
[ 50.679813][ T3603] ? __alloc_pages+0x39e/0x510
[ 50.684581][ T3603] __warn.cold+0x1ea/0x2cd
[ 50.689003][ T3603] ? __alloc_pages+0x39e/0x510
[ 50.693871][ T3603] report_bug+0x1bc/0x210
[ 50.698222][ T3603] handle_bug+0x3c/0x60
[ 50.702500][ T3603] exc_invalid_op+0x14/0x40
[ 50.707028][ T3603] asm_exc_invalid_op+0x1b/0x20
[ 50.711878][ T3603] RIP: 0010:__alloc_pages+0x39e/0x510
[ 50.717265][ T3603] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 5d b9 eb 0b 00 75 09 c6 05 54 b9 eb 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 91 ed 45 7e 48 c7 c0 20 c7
[ 50.736892][ T3603] RSP: 0018:ffffc90002edfb90 EFLAGS: 00010246
[ 50.742973][ T3603] RAX: 0000000000000000 RBX: 1ffff920005dbf73 RCX: 0000000000000000
[ 50.750961][ T3603] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000000000
[ 50.758938][ T3603] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000
[ 50.766930][ T3603] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001a
[ 50.774904][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807f279168
[ 50.782902][ T3603] ? __alloc_pages_slowpath.constprop.0+0x2120/0x2120
[ 50.789690][ T3603] ? rcu_read_lock_sched_held+0x3a/0x70
[ 50.795264][ T3603] ? __mutex_lock+0x231/0x1350
[ 50.800073][ T3603] alloc_pages+0x1aa/0x310
[ 50.804508][ T3603] kmalloc_order+0x34/0xf0
[ 50.808948][ T3603] kmalloc_order_trace+0x13/0x120
[ 50.813996][ T3603] input_mt_init_slots+0xd9/0x5f0
[ 50.819048][ T3603] uinput_ioctl_handler.isra.0+0x81d/0x1dc0
[ 50.825005][ T3603] ? uinput_ff_upload_to_user+0x2b0/0x2b0
[ 50.830821][ T3603] ? find_held_lock+0x2d/0x110
[ 50.835650][ T3603] ? ptrace_notify+0xfa/0x140
[ 50.840351][ T3603] ? lock_downgrade+0x6e0/0x6e0
[ 50.845230][ T3603] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.850516][ T3603] ? bpf_lsm_file_ioctl+0x5/0x10
[ 50.855493][ T3603] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0
[ 50.861700][ T3603] __x64_sys_ioctl+0x193/0x200
[ 50.866507][ T3603] do_syscall_64+0x35/0xb0
[ 50.870953][ T3603] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.876860][ T3603] RIP: 0033:0x7f9b9f407479
[ 50.881282][ T3603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.900903][ T3603] RSP: 002b:00007ffc3fce7c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 50.909435][ T3603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b9f407479
[ 50.917501][ T3603] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 50.925492][ T3603] RBP: 0000000000000000 R08: 00007ffc3fce7df8 R09: 00007ffc3fce7df8
[ 50.933471][ T3603] R10: 00007ffc3fce7df8 R11: 0000000000000246 R12: 00007f9b9f3cad00
[ 50.941448][ T3603] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.949439][ T3603]
[ 50.952743][ T3603] Kernel Offset: disabled
[ 50.957176][ T3603] Rebooting in 86400 seconds..