./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1088338868
<...>
DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb
forked to background, child pid 4872
[ 34.403447][ T4873] 8021q: adding VLAN 0 to HW filter on device bond0
[ 34.437432][ T4873] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts.
execve("./syz-executor1088338868", ["./syz-executor1088338868"], 0x7fff55031ec0 /* 10 vars */) = 0
brk(NULL) = 0x555555ef2000
brk(0x555555ef2c40) = 0x555555ef2c40
arch_prctl(ARCH_SET_FS, 0x555555ef2300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1088338868", 4096) = 28
brk(0x555555f13c40) = 0x555555f13c40
brk(0x555555f14000) = 0x555555f14000
mprotect(0x7f81eff60000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3
ioctl(3, UI_ABS_SETUP, 0x20000340) = 0
ioctl(3, UI_SET_EVBIT, 0x3) = 0
dup(3) = 4
write(4, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116
syzkaller login: [ 57.027616][ T5296] ------------[ cut here ]------------
[ 57.033318][ T5296] WARNING: CPU: 0 PID: 5296 at mm/page_alloc.c:5545 __alloc_pages+0x412/0x5b0
[ 57.042484][ T5296] Modules linked in:
[ 57.046383][ T5296] CPU: 0 PID: 5296 Comm: syz-executor108 Not tainted 6.1.0-rc5-next-20221116-syzkaller #0
[ 57.056479][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 57.066654][ T5296] RIP: 0010:__alloc_pages+0x412/0x5b0
[ 57.072133][ T5296] Code: ff ff 00 0f 84 c3 fd ff ff 80 ce 01 e9 bb fd ff ff 83 fe 0a 0f 86 ce fc ff ff 80 3d 31 cd 9b 0c 00 75 09 c6 05 28 cd 9b 0c 01 <0f> 0b 45 31 f6 e9 52 fe ff ff 65 ff 05 d5 e5 3f 7e 48 c7 c0 e0 1f
[ 57.091810][ T5296] RSP: 0018:ffffc90003a9fbb0 EFLAGS: 00010246
[ 57.097877][ T5296] RAX: 0000000000000000 RBX: 1ffff92000753f77 RCX: 0000000000000000
[ 57.105894][ T5296] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000
[ 57.113945][ T5296] RBP: 0000000000040dc0 R08: 0000000000000005 R09: 0000000000000000
[ 57.121976][ T5296] R10: 0000000000010000 R11: 0000000000000000 R12: 000000000000000b
[ 57.130020][ T5296] R13: 0000000000000000 R14: 000000000000000b R15: ffff888020e23168
[ 57.138008][ T5296] FS: 0000555555ef2300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 57.146991][ T5296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.153633][ T5296] CR2: 00007ffde03f6ff8 CR3: 0000000078153000 CR4: 00000000003506e0
[ 57.161650][ T5296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.169667][ T5296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.177636][ T5296] Call Trace:
[ 57.180965][ T5296]
[ 57.183908][ T5296] ? __alloc_pages_slowpath.constprop.0+0x2380/0x2380
[ 57.190727][ T5296] ? rcu_read_lock_sched_held+0x3e/0x70
[ 57.196308][ T5296] ? uinput_ioctl_handler.isra.0+0xa8/0x1f80
[ 57.202504][ T5296] __kmalloc_large_node+0x84/0x160
[ 57.207645][ T5296] ? input_mt_init_slots+0xdd/0x540
[ 57.212904][ T5296] __kmalloc+0x91/0xd0
[ 57.216991][ T5296] input_mt_init_slots+0xdd/0x540
[ 57.222073][ T5296] uinput_ioctl_handler.isra.0+0x18cc/0x1f80
[ 57.228081][ T5296] ? uinput_ff_upload_from_user+0x2a0/0x2a0
[ 57.234029][ T5296] ? find_held_lock+0x2d/0x110
[ 57.238821][ T5296] ? ptrace_notify+0xfe/0x140
[ 57.243557][ T5296] ? lock_downgrade+0x6e0/0x6e0
[ 57.248477][ T5296] ? bpf_lsm_file_ioctl+0x9/0x10
[ 57.253500][ T5296] ? uinput_ioctl_handler.isra.0+0x1f80/0x1f80
[ 57.259737][ T5296] __x64_sys_ioctl+0x197/0x210
[ 57.264547][ T5296] do_syscall_64+0x39/0xb0
[ 57.268991][ T5296] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.275031][ T5296] RIP: 0033:0x7f81efef3739
[ 57.279491][ T5296] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.299177][ T5296] RSP: 002b:00007ffde03f7068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 57.307651][ T5296] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81efef3739
[ 57.315669][ T5296] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 57.323686][ T5296] RBP: 00007f81efeb78e0 R08: 0000000000000000 R09: 0000000000000000
[ 57.331703][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81efeb7970
[ 57.339718][ T5296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.347697][ T5296]
[ 57.350756][ T5296] Kernel panic - not syncing: panic_on_warn set ...
[ 57.357358][ T5296] CPU: 1 PID: 5296 Comm: syz-executor108 Not tainted 6.1.0-rc5-next-20221116-syzkaller #0
[ 57.367240][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 57.377287][ T5296] Call Trace:
[ 57.380568][ T5296]
[ 57.383494][ T5296] dump_stack_lvl+0xd1/0x138
[ 57.388086][ T5296] panic+0x2cc/0x626
[ 57.391982][ T5296] ? panic_print_sys_info.part.0+0x110/0x110
[ 57.397968][ T5296] ? __warn.cold+0x24b/0x350
[ 57.402577][ T5296] ? __alloc_pages+0x412/0x5b0
[ 57.407335][ T5296] __warn.cold+0x25c/0x350
[ 57.411761][ T5296] ? __alloc_pages+0x412/0x5b0
[ 57.416543][ T5296] report_bug+0x1c0/0x210
[ 57.420901][ T5296] handle_bug+0x3c/0x70
[ 57.425157][ T5296] exc_invalid_op+0x18/0x50
[ 57.429854][ T5296] asm_exc_invalid_op+0x1a/0x20
[ 57.434725][ T5296] RIP: 0010:__alloc_pages+0x412/0x5b0
[ 57.440113][ T5296] Code: ff ff 00 0f 84 c3 fd ff ff 80 ce 01 e9 bb fd ff ff 83 fe 0a 0f 86 ce fc ff ff 80 3d 31 cd 9b 0c 00 75 09 c6 05 28 cd 9b 0c 01 <0f> 0b 45 31 f6 e9 52 fe ff ff 65 ff 05 d5 e5 3f 7e 48 c7 c0 e0 1f
[ 57.459735][ T5296] RSP: 0018:ffffc90003a9fbb0 EFLAGS: 00010246
[ 57.465818][ T5296] RAX: 0000000000000000 RBX: 1ffff92000753f77 RCX: 0000000000000000
[ 57.473804][ T5296] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000
[ 57.481786][ T5296] RBP: 0000000000040dc0 R08: 0000000000000005 R09: 0000000000000000
[ 57.489771][ T5296] R10: 0000000000010000 R11: 0000000000000000 R12: 000000000000000b
[ 57.497930][ T5296] R13: 0000000000000000 R14: 000000000000000b R15: ffff888020e23168
[ 57.505936][ T5296] ? __alloc_pages_slowpath.constprop.0+0x2380/0x2380
[ 57.512719][ T5296] ? rcu_read_lock_sched_held+0x3e/0x70
[ 57.518309][ T5296] ? uinput_ioctl_handler.isra.0+0xa8/0x1f80
[ 57.524327][ T5296] __kmalloc_large_node+0x84/0x160
[ 57.529463][ T5296] ? input_mt_init_slots+0xdd/0x540
[ 57.534681][ T5296] __kmalloc+0x91/0xd0
[ 57.538775][ T5296] input_mt_init_slots+0xdd/0x540
[ 57.543824][ T5296] uinput_ioctl_handler.isra.0+0x18cc/0x1f80
[ 57.549839][ T5296] ? uinput_ff_upload_from_user+0x2a0/0x2a0
[ 57.555785][ T5296] ? find_held_lock+0x2d/0x110
[ 57.560581][ T5296] ? ptrace_notify+0xfe/0x140
[ 57.565286][ T5296] ? lock_downgrade+0x6e0/0x6e0
[ 57.570200][ T5296] ? bpf_lsm_file_ioctl+0x9/0x10
[ 57.575179][ T5296] ? uinput_ioctl_handler.isra.0+0x1f80/0x1f80
[ 57.581372][ T5296] __x64_sys_ioctl+0x197/0x210
[ 57.586168][ T5296] do_syscall_64+0x39/0xb0
[ 57.590616][ T5296] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.596559][ T5296] RIP: 0033:0x7f81efef3739
[ 57.600989][ T5296] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.620622][ T5296] RSP: 002b:00007ffde03f7068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 57.629058][ T5296] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81efef3739
[ 57.637045][ T5296] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 57.645116][ T5296] RBP: 00007f81efeb78e0 R08: 0000000000000000 R09: 0000000000000000
[ 57.653121][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81efeb7970
[ 57.661100][ T5296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.669108][ T5296]
[ 57.672188][ T5296] Kernel Offset: disabled
[ 57.676581][ T5296] Rebooting in 86400 seconds..