./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1446160278 <...> forked to background, child pid 3189 [ 25.750464][ T3190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.759383][ T3190] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 25.967971][ T3274] ssh-keygen (3274) used greatest stack depth: 19488 bytes left OK syzkaller Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. execve("./syz-executor1446160278", ["./syz-executor1446160278"], 0x7ffe3c419720 /* 10 vars */) = 0 brk(NULL) = 0x555556991000 brk(0x555556991c40) = 0x555556991c40 arch_prctl(ARCH_SET_FS, 0x555556991300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1446160278", 4096) = 28 brk(0x5555569b2c40) = 0x5555569b2c40 brk(0x5555569b3000) = 0x5555569b3000 mprotect(0x7fc6141d1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/uinput", O_RDWR|O_NONBLOCK) = 3 ioctl(3, UI_ABS_SETUP, 0x20000340) = 0 write(3, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1116) = 1116 ioctl(3, UI_SET_EVBIT, 0x3) = 0 syzkaller login: [ 48.607909][ T3617] ------------[ cut here ]------------ [ 48.607919][ T3617] WARNING: CPU: 1 PID: 3617 at mm/page_alloc.c:5402 __alloc_pages+0x30a/0x560 [ 48.622802][ T3617] Modules linked in: [ 48.626946][ T3617] CPU: 0 PID: 3617 Comm: syz-executor144 Not tainted 5.19.0-rc3-syzkaller-00038-gca1fdab7fd27 #0 [ 48.637896][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.648111][ T3617] RIP: 0010:__alloc_pages+0x30a/0x560 [ 48.653517][ T3617] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 5f 78 21 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 48.674659][ T3617] RSP: 0018:ffffc90002fb7aa0 EFLAGS: 00010246 [ 48.680824][ T3617] RAX: ffffc90002fb7b00 RBX: 000000000000001a RCX: 0000000000000000 [ 48.688869][ T3617] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002fb7b28 [ 48.696979][ T3617] RBP: ffffc90002fb7bc0 R08: dffffc0000000000 R09: ffffc90002fb7b00 [ 48.705039][ T3617] R10: fffff520005f6f65 R11: 1ffff920005f6f60 R12: 0000000000040dc0 [ 48.713076][ T3617] R13: 1ffff920005f6f5c R14: dffffc0000000000 R15: 1ffff920005f6f58 [ 48.721158][ T3617] FS: 0000555556991300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.730176][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.736839][ T3617] CR2: 0000560520a7b6f8 CR3: 000000007ecbc000 CR4: 00000000003506f0 [ 48.744820][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.753225][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.761511][ T3617] Call Trace: [ 48.764811][ T3617] [ 48.767888][ T3617] ? __rmqueue_pcplist+0x1d20/0x1d20 [ 48.773195][ T3617] ? rcu_read_lock_sched_held+0x89/0x130 [ 48.778900][ T3617] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 48.784893][ T3617] ? alloc_pages+0x43d/0x690 [ 48.789564][ T3617] kmalloc_order+0x41/0x150 [ 48.794084][ T3617] kmalloc_order_trace+0x15/0x70 [ 48.799100][ T3617] __kmalloc+0x26b/0x370 [ 48.803377][ T3617] input_mt_init_slots+0xbd/0x980 [ 48.810400][ T3617] uinput_create_device+0x50e/0x620 [ 48.815644][ T3617] uinput_ioctl_handler+0xa04/0x1660 [ 48.821014][ T3617] ? smack_file_ioctl+0x298/0x3a0 [ 48.826051][ T3617] ? uinput_release+0x50/0x50 [ 48.831037][ T3617] ? vtime_user_exit+0x2b2/0x3e0 [ 48.836018][ T3617] ? bpf_lsm_file_ioctl+0x5/0x10 [ 48.841026][ T3617] ? security_file_ioctl+0x9d/0xb0 [ 48.846156][ T3617] ? uinput_poll+0x110/0x110 [ 48.850845][ T3617] __se_sys_ioctl+0xfb/0x170 [ 48.855722][ T3617] do_syscall_64+0x2b/0x70 [ 48.860467][ T3617] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 48.866371][ T3617] RIP: 0033:0x7fc614164719 [ 48.870897][ T3617] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 48.890803][ T3617] RSP: 002b:00007ffc706859d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.899303][ T3617] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc614164719 [ 48.907362][ T3617] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 48.915334][ T3617] RBP: 00007fc6141288c0 R08: 0000000000000000 R09: 0000000000000000 [ 48.923432][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc614128950 [ 48.931579][ T3617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.939671][ T3617] [ 48.942714][ T3617] Kernel panic - not syncing: panic_on_warn set ... [ 48.949284][ T3617] CPU: 0 PID: 3617 Comm: syz-executor144 Not tainted 5.19.0-rc3-syzkaller-00038-gca1fdab7fd27 #0 [ 48.959777][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.969832][ T3617] Call Trace: [ 48.973128][ T3617] [ 48.976058][ T3617] dump_stack_lvl+0x1e3/0x2cb [ 48.980758][ T3617] ? bfq_pos_tree_add_move+0x436/0x436 [ 48.986295][ T3617] ? panic+0x782/0x782 [ 48.990352][ T3617] ? vscnprintf+0x59/0x80 [ 48.994667][ T3617] ? __alloc_pages+0x240/0x560 [ 48.999442][ T3617] panic+0x312/0x782 [ 49.003341][ T3617] ? __warn+0x136/0x230 [ 49.007495][ T3617] ? fb_is_primary_device+0xcc/0xcc [ 49.012728][ T3617] ? __alloc_pages+0x30a/0x560 [ 49.017507][ T3617] __warn+0x203/0x230 [ 49.021513][ T3617] ? __alloc_pages+0x30a/0x560 [ 49.026302][ T3617] report_bug+0x1b3/0x2d0 [ 49.030670][ T3617] handle_bug+0x3d/0x70 [ 49.034831][ T3617] exc_invalid_op+0x16/0x40 [ 49.039333][ T3617] asm_exc_invalid_op+0x1b/0x20 [ 49.044206][ T3617] RIP: 0010:__alloc_pages+0x30a/0x560 [ 49.049593][ T3617] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 5f 78 21 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 49.069198][ T3617] RSP: 0018:ffffc90002fb7aa0 EFLAGS: 00010246 [ 49.075262][ T3617] RAX: ffffc90002fb7b00 RBX: 000000000000001a RCX: 0000000000000000 [ 49.083248][ T3617] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002fb7b28 [ 49.091217][ T3617] RBP: ffffc90002fb7bc0 R08: dffffc0000000000 R09: ffffc90002fb7b00 [ 49.099189][ T3617] R10: fffff520005f6f65 R11: 1ffff920005f6f60 R12: 0000000000040dc0 [ 49.107216][ T3617] R13: 1ffff920005f6f5c R14: dffffc0000000000 R15: 1ffff920005f6f58 [ 49.115295][ T3617] ? __rmqueue_pcplist+0x1d20/0x1d20 [ 49.120588][ T3617] ? rcu_read_lock_sched_held+0x89/0x130 [ 49.126222][ T3617] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 49.132204][ T3617] ? alloc_pages+0x43d/0x690 [ 49.136797][ T3617] kmalloc_order+0x41/0x150 [ 49.141303][ T3617] kmalloc_order_trace+0x15/0x70 [ 49.146238][ T3617] __kmalloc+0x26b/0x370 [ 49.150481][ T3617] input_mt_init_slots+0xbd/0x980 [ 49.155508][ T3617] uinput_create_device+0x50e/0x620 [ 49.160707][ T3617] uinput_ioctl_handler+0xa04/0x1660 [ 49.165987][ T3617] ? smack_file_ioctl+0x298/0x3a0 [ 49.171008][ T3617] ? uinput_release+0x50/0x50 [ 49.175694][ T3617] ? vtime_user_exit+0x2b2/0x3e0 [ 49.180642][ T3617] ? bpf_lsm_file_ioctl+0x5/0x10 [ 49.185575][ T3617] ? security_file_ioctl+0x9d/0xb0 [ 49.190686][ T3617] ? uinput_poll+0x110/0x110 [ 49.195269][ T3617] __se_sys_ioctl+0xfb/0x170 [ 49.199877][ T3617] do_syscall_64+0x2b/0x70 [ 49.204292][ T3617] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 49.210193][ T3617] RIP: 0033:0x7fc614164719 [ 49.214614][ T3617] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.234215][ T3617] RSP: 002b:00007ffc706859d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.242627][ T3617] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc614164719 [ 49.250681][ T3617] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 49.258647][ T3617] RBP: 00007fc6141288c0 R08: 0000000000000000 R09: 0000000000000000 [ 49.266623][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc614128950 [ 49.274591][ T3617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.282576][ T3617] [ 49.286002][ T3617] Kernel Offset: disabled [ 49.290425][ T3617] Rebooting in 86400 seconds..