./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3192169925 <...> Warning: Permanently added '10.128.1.88' (ECDSA) to the list of known hosts. execve("./syz-executor3192169925", ["./syz-executor3192169925"], 0x7ffd485d8180 /* 10 vars */) = 0 brk(NULL) = 0x5555572d6000 brk(0x5555572d6c40) = 0x5555572d6c40 arch_prctl(ARCH_SET_FS, 0x5555572d6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3192169925", 4096) = 28 brk(0x5555572f7c40) = 0x5555572f7c40 brk(0x5555572f8000) = 0x5555572f8000 mprotect(0x7efea3b9c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 ioctl(3, UI_SET_EVBIT, 0x3) = 0 write(3, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116 syzkaller login: [ 48.235656][ T3613] ------------[ cut here ]------------ [ 48.241383][ T3613] WARNING: CPU: 1 PID: 3613 at mm/page_alloc.c:5483 __alloc_pages+0x39e/0x510 [ 48.250569][ T3613] Modules linked in: [ 48.254478][ T3613] CPU: 1 PID: 3613 Comm: syz-executor319 Not tainted 5.19.0-next-20220809-syzkaller #0 [ 48.264162][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.274271][ T3613] RIP: 0010:__alloc_pages+0x39e/0x510 [ 48.279748][ T3613] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d b3 a9 0b 0c 00 75 09 c6 05 aa a9 0b 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 71 82 44 7e 48 c7 c0 60 23 [ 48.299402][ T3613] RSP: 0018:ffffc9000381fb98 EFLAGS: 00010246 [ 48.305502][ T3613] RAX: 0000000000000000 RBX: 1ffff92000703f74 RCX: 0000000000000000 [ 48.313504][ T3613] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 48.321517][ T3613] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 48.329492][ T3613] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000b [ 48.337498][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888017b36168 [ 48.345520][ T3613] FS: 00005555572d6300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 48.354479][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.361101][ T3613] CR2: 00000000005d84c8 CR3: 000000001ede7000 CR4: 00000000003506e0 [ 48.369098][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.377108][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.385131][ T3613] Call Trace: [ 48.388412][ T3613] [ 48.391438][ T3613] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 48.398230][ T3613] ? rcu_read_lock_sched_held+0x3a/0x70 [ 48.403848][ T3613] ? uinput_ioctl_handler.isra.0+0xa7/0x1dc0 [ 48.409908][ T3613] alloc_pages+0x1a6/0x270 [ 48.414356][ T3613] kmalloc_order+0x34/0xf0 [ 48.418805][ T3613] kmalloc_order_trace+0x13/0x120 [ 48.423883][ T3613] input_mt_init_slots+0xd9/0x530 [ 48.428928][ T3613] uinput_ioctl_handler.isra.0+0x18e9/0x1dc0 [ 48.434965][ T3613] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 48.440756][ T3613] ? find_held_lock+0x2d/0x110 [ 48.445515][ T3613] ? ptrace_notify+0xfa/0x140 [ 48.450406][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 48.455271][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.460519][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 48.465472][ T3613] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 48.471873][ T3613] __x64_sys_ioctl+0x193/0x200 [ 48.476739][ T3613] do_syscall_64+0x35/0xb0 [ 48.481191][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.487096][ T3613] RIP: 0033:0x7efea3b2f719 [ 48.491552][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.511381][ T3613] RSP: 002b:00007ffdef3e6cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.519876][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efea3b2f719 [ 48.527882][ T3613] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 48.535955][ T3613] RBP: 00007efea3af38c0 R08: 0000000000000000 R09: 0000000000000000 [ 48.544068][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efea3af3950 [ 48.552123][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.560134][ T3613] [ 48.563146][ T3613] Kernel panic - not syncing: panic_on_warn set ... [ 48.569714][ T3613] CPU: 1 PID: 3613 Comm: syz-executor319 Not tainted 5.19.0-next-20220809-syzkaller #0 [ 48.579329][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.589376][ T3613] Call Trace: [ 48.592658][ T3613] [ 48.595590][ T3613] dump_stack_lvl+0xcd/0x134 [ 48.600176][ T3613] panic+0x2c8/0x627 [ 48.604066][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b [ 48.610045][ T3613] ? __warn.cold+0x248/0x2c4 [ 48.614639][ T3613] ? __alloc_pages+0x39e/0x510 [ 48.619397][ T3613] __warn.cold+0x259/0x2c4 [ 48.623826][ T3613] ? __alloc_pages+0x39e/0x510 [ 48.628595][ T3613] report_bug+0x1bc/0x210 [ 48.632947][ T3613] handle_bug+0x3c/0x60 [ 48.637097][ T3613] exc_invalid_op+0x14/0x40 [ 48.641597][ T3613] asm_exc_invalid_op+0x16/0x20 [ 48.646440][ T3613] RIP: 0010:__alloc_pages+0x39e/0x510 [ 48.651818][ T3613] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d b3 a9 0b 0c 00 75 09 c6 05 aa a9 0b 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 71 82 44 7e 48 c7 c0 60 23 [ 48.671528][ T3613] RSP: 0018:ffffc9000381fb98 EFLAGS: 00010246 [ 48.677602][ T3613] RAX: 0000000000000000 RBX: 1ffff92000703f74 RCX: 0000000000000000 [ 48.685586][ T3613] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 48.693558][ T3613] RBP: 0000000000040dc0 R08: 0000000000000007 R09: 0000000000000000 [ 48.701589][ T3613] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000b [ 48.709590][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888017b36168 [ 48.717586][ T3613] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 48.724380][ T3613] ? rcu_read_lock_sched_held+0x3a/0x70 [ 48.729938][ T3613] ? uinput_ioctl_handler.isra.0+0xa7/0x1dc0 [ 48.735938][ T3613] alloc_pages+0x1a6/0x270 [ 48.740366][ T3613] kmalloc_order+0x34/0xf0 [ 48.744786][ T3613] kmalloc_order_trace+0x13/0x120 [ 48.749817][ T3613] input_mt_init_slots+0xd9/0x530 [ 48.754855][ T3613] uinput_ioctl_handler.isra.0+0x18e9/0x1dc0 [ 48.760852][ T3613] ? uinput_ff_upload_to_user+0x2b0/0x2b0 [ 48.766584][ T3613] ? find_held_lock+0x2d/0x110 [ 48.771371][ T3613] ? ptrace_notify+0xfa/0x140 [ 48.776051][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 48.780912][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40 [ 48.786124][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 48.791064][ T3613] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 48.797232][ T3613] __x64_sys_ioctl+0x193/0x200 [ 48.802006][ T3613] do_syscall_64+0x35/0xb0 [ 48.806441][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.812341][ T3613] RIP: 0033:0x7efea3b2f719 [ 48.816772][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.836386][ T3613] RSP: 002b:00007ffdef3e6cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.844799][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efea3b2f719 [ 48.852767][ T3613] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 48.860734][ T3613] RBP: 00007efea3af38c0 R08: 0000000000000000 R09: 0000000000000000 [ 48.868704][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efea3af3950 [ 48.876672][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.884674][ T3613] [ 48.887864][ T3613] Kernel Offset: disabled [ 48.892247][ T3613] Rebooting in 86400 seconds..