./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1685522943 <...> Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. execve("./syz-executor1685522943", ["./syz-executor1685522943"], 0x7fffbaf59c50 /* 10 vars */) = 0 brk(NULL) = 0x5555560c5000 brk(0x5555560c5c40) = 0x5555560c5c40 arch_prctl(ARCH_SET_FS, 0x5555560c5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1685522943", 4096) = 28 brk(0x5555560e6c40) = 0x5555560e6c40 brk(0x5555560e7000) = 0x5555560e7000 mprotect(0x7fbfe6b71000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 ioctl(3, UI_SET_EVBIT, 0x3) = 0 write(3, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116 syzkaller login: [ 39.297581][ T3606] ------------[ cut here ]------------ [ 39.303175][ T3606] WARNING: CPU: 0 PID: 3606 at mm/page_alloc.c:5402 __alloc_pages+0x39e/0x510 [ 39.312162][ T3606] Modules linked in: [ 39.316324][ T3606] CPU: 0 PID: 3606 Comm: syz-executor168 Not tainted 5.19.0-rc5-syzkaller-00187-ge8a4e1c1bb69 #0 [ 39.327069][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 39.337151][ T3606] RIP: 0010:__alloc_pages+0x39e/0x510 [ 39.342580][ T3606] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 45 56 ea 0b 00 75 09 c6 05 3c 56 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 61 fc 45 7e 48 c7 c0 e0 54 [ 39.362557][ T3606] RSP: 0018:ffffc900032dfb90 EFLAGS: 00010246 [ 39.368636][ T3606] RAX: 0000000000000000 RBX: 1ffff9200065bf73 RCX: 0000000000000000 [ 39.376656][ T3606] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 39.384710][ T3606] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 39.393898][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000b [ 39.401996][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880785de168 [ 39.409955][ T3606] FS: 00005555560c5300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 39.419057][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.425802][ T3606] CR2: 00007fa6bedf5a70 CR3: 000000007d6ba000 CR4: 0000000000350ef0 [ 39.433921][ T3606] Call Trace: [ 39.437211][ T3606] [ 39.440130][ T3606] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 39.447050][ T3606] ? rcu_read_lock_sched_held+0x3a/0x70 [ 39.452638][ T3606] ? __mutex_lock+0x231/0x1350 [ 39.457427][ T3606] alloc_pages+0x1aa/0x310 [ 39.461913][ T3606] kmalloc_order+0x34/0xf0 [ 39.466352][ T3606] kmalloc_order_trace+0x14/0x120 [ 39.471366][ T3606] input_mt_init_slots+0xd9/0x5f0 [ 39.476463][ T3606] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 39.482417][ T3606] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 39.488230][ T3606] ? find_held_lock+0x2d/0x110 [ 39.493052][ T3606] ? ptrace_notify+0xfa/0x140 [ 39.497763][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 39.502725][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 39.507961][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 39.512962][ T3606] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 39.519151][ T3606] __x64_sys_ioctl+0x193/0x200 [ 39.524116][ T3606] do_syscall_64+0x35/0xb0 [ 39.528587][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 39.534525][ T3606] RIP: 0033:0x7fbfe6b04719 [ 39.539235][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.558927][ T3606] RSP: 002b:00007ffcafd69878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.567441][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfe6b04719 [ 39.575506][ T3606] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 39.583795][ T3606] RBP: 00007fbfe6ac88c0 R08: 0000000000000000 R09: 0000000000000000 [ 39.592009][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfe6ac8950 [ 39.599994][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.608220][ T3606] [ 39.611268][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 39.617868][ T3606] CPU: 0 PID: 3606 Comm: syz-executor168 Not tainted 5.19.0-rc5-syzkaller-00187-ge8a4e1c1bb69 #0 [ 39.628614][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 39.638941][ T3606] Call Trace: [ 39.642495][ T3606] [ 39.645415][ T3606] dump_stack_lvl+0xcd/0x134 [ 39.649999][ T3606] panic+0x2d7/0x636 [ 39.654317][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b [ 39.660291][ T3606] ? __warn.cold+0x1d1/0x2c5 [ 39.664876][ T3606] ? __alloc_pages+0x39e/0x510 [ 39.669657][ T3606] __warn.cold+0x1e2/0x2c5 [ 39.674080][ T3606] ? __alloc_pages+0x39e/0x510 [ 39.678842][ T3606] report_bug+0x1bc/0x210 [ 39.683188][ T3606] handle_bug+0x3c/0x60 [ 39.687608][ T3606] exc_invalid_op+0x14/0x40 [ 39.692202][ T3606] asm_exc_invalid_op+0x1b/0x20 [ 39.697060][ T3606] RIP: 0010:__alloc_pages+0x39e/0x510 [ 39.702435][ T3606] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 45 56 ea 0b 00 75 09 c6 05 3c 56 ea 0b 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 61 fc 45 7e 48 c7 c0 e0 54 [ 39.722054][ T3606] RSP: 0018:ffffc900032dfb90 EFLAGS: 00010246 [ 39.728120][ T3606] RAX: 0000000000000000 RBX: 1ffff9200065bf73 RCX: 0000000000000000 [ 39.736186][ T3606] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 39.744160][ T3606] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 39.752125][ T3606] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000b [ 39.760283][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880785de168 [ 39.768281][ T3606] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 39.775052][ T3606] ? rcu_read_lock_sched_held+0x3a/0x70 [ 39.780598][ T3606] ? __mutex_lock+0x231/0x1350 [ 39.785371][ T3606] alloc_pages+0x1aa/0x310 [ 39.789789][ T3606] kmalloc_order+0x34/0xf0 [ 39.794206][ T3606] kmalloc_order_trace+0x14/0x120 [ 39.799321][ T3606] input_mt_init_slots+0xd9/0x5f0 [ 39.804345][ T3606] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 39.810241][ T3606] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 39.815971][ T3606] ? find_held_lock+0x2d/0x110 [ 39.821179][ T3606] ? ptrace_notify+0xfa/0x140 [ 39.825941][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 39.830801][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 39.836008][ T3606] ? bpf_lsm_file_ioctl+0x5/0x10 [ 39.841052][ T3606] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 39.847382][ T3606] __x64_sys_ioctl+0x193/0x200 [ 39.852148][ T3606] do_syscall_64+0x35/0xb0 [ 39.856652][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 39.862548][ T3606] RIP: 0033:0x7fbfe6b04719 [ 39.866962][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.886577][ T3606] RSP: 002b:00007ffcafd69878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.894993][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfe6b04719 [ 39.902968][ T3606] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 39.911025][ T3606] RBP: 00007fbfe6ac88c0 R08: 0000000000000000 R09: 0000000000000000 [ 39.918991][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfe6ac8950 [ 39.926959][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.934943][ T3606] [ 39.938715][ T3606] Kernel Offset: disabled [ 39.943092][ T3606] Rebooting in 86400 seconds..