./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor427920903 <...> Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. execve("./syz-executor427920903", ["./syz-executor427920903"], 0x7ffc30ad0af0 /* 10 vars */) = 0 brk(NULL) = 0x555589669000 brk(0x555589669d00) = 0x555589669d00 arch_prctl(ARCH_SET_FS, 0x555589669380) = 0 set_tid_address(0x555589669650) = 5231 set_robust_list(0x555589669660, 24) = 0 rseq(0x555589669ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor427920903", 4096) = 27 getrandom("\x27\x4f\x54\x59\xbe\x43\x73\x7d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555589669d00 brk(0x55558968ad00) = 0x55558968ad00 brk(0x55558968b000) = 0x55558968b000 mprotect(0x7fe9f6b80000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached , child_tidptr=0x555589669650) = 5232 [pid 5232] set_robust_list(0x555589669660, 24) = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3executing program ) = 0 [pid 5232] write(1, "executing program\n", 18) = 18 [pid 5232] openat(AT_FDCWD, "/dev/dri/card1", O_RDONLY) = 3 [ 57.350998][ T5232] ------------[ cut here ]------------ [ 57.356650][ T5232] WARNING: CPU: 0 PID: 5232 at mm/page_alloc.c:4671 __alloc_pages_noprof+0x36a/0x6c0 [ 57.366180][ T5232] Modules linked in: [ 57.370104][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz-executor427 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 57.381271][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.391634][ T5232] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 57.397686][ T5232] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 79 17 15 0e 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 57.417401][ T5232] RSP: 0018:ffffc9000343f860 EFLAGS: 00010246 [ 57.423492][ T5232] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 57.431532][ T5232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000343f8e8 [ 57.439548][ T5232] RBP: ffffc9000343f968 R08: ffffc9000343f8e7 R09: 0000000000000000 [ 57.447564][ T5232] R10: ffffc9000343f8c0 R11: fffff52000687f1d R12: 1ffff92000687f14 [ 57.455618][ T5232] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000687f10 [ 57.463627][ T5232] FS: 0000555589669380(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 57.472599][ T5232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.479234][ T5232] CR2: 00000000203d0000 CR3: 0000000029bb0000 CR4: 00000000003506f0 [ 57.487272][ T5232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.495275][ T5232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.503243][ T5232] Call Trace: [ 57.506579][ T5232] [ 57.509526][ T5232] ? __warn+0x163/0x4e0 [ 57.513678][ T5232] ? __alloc_pages_noprof+0x36a/0x6c0 [ 57.519094][ T5232] ? report_bug+0x2b3/0x500 [ 57.523648][ T5232] ? __alloc_pages_noprof+0x36a/0x6c0 [ 57.529096][ T5232] ? handle_bug+0x3e/0x70 [ 57.533441][ T5232] ? exc_invalid_op+0x1a/0x50 [ 57.538162][ T5232] ? asm_exc_invalid_op+0x1a/0x20 [ 57.543210][ T5232] ? __alloc_pages_noprof+0x36a/0x6c0 [ 57.548639][ T5232] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 57.554398][ T5232] ? lockdep_hardirqs_on+0x99/0x150 [ 57.559600][ T5232] ___kmalloc_large_node+0x8b/0x1d0 [ 57.564855][ T5232] __kmalloc_large_node_noprof+0x1a/0x80 [ 57.570512][ T5232] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 57.576648][ T5232] __kmalloc_noprof+0x2ae/0x400 [ 57.581510][ T5232] ? _copy_from_user+0xa6/0xe0 [ 57.586921][ T5232] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 57.592835][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 57.599216][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.604453][ T5232] ? _raw_spin_unlock+0x28/0x50 [ 57.609307][ T5232] drm_ioctl_kernel+0x33a/0x440 [ 57.614207][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 57.620548][ T5232] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 57.625957][ T5232] ? __might_fault+0xc6/0x120 [ 57.630654][ T5232] drm_ioctl+0x611/0xad0 [ 57.634945][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 57.641295][ T5232] ? __pfx_drm_ioctl+0x10/0x10 [ 57.646113][ T5232] ? bpf_lsm_file_ioctl+0x9/0x10 [ 57.651065][ T5232] ? security_file_ioctl+0x87/0xb0 [ 57.656212][ T5232] ? __pfx_drm_ioctl+0x10/0x10 [ 57.660998][ T5232] __se_sys_ioctl+0xfc/0x170 [ 57.665644][ T5232] do_syscall_64+0xf3/0x230 [ 57.670156][ T5232] ? clear_bhb_loop+0x35/0x90 [ 57.674867][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.680772][ T5232] RIP: 0033:0x7fe9f6b0d879 [ 57.685253][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.704918][ T5232] RSP: 002b:00007ffeb08bf0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.713361][ T5232] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9f6b0d879 [ 57.721393][ T5232] RDX: 0000000020000180 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 57.729420][ T5232] RBP: 00007fe9f6b805f0 R08: 0023647261632f69 R09: 0000000000000006 [ 57.737435][ T5232] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 57.745495][ T5232] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 57.753489][ T5232] [ 57.756555][ T5232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.763847][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz-executor427 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 57.774983][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.785050][ T5232] Call Trace: [ 57.788321][ T5232] [ 57.791237][ T5232] dump_stack_lvl+0x241/0x360 [ 57.795907][ T5232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.801115][ T5232] ? __pfx__printk+0x10/0x10 [ 57.805696][ T5232] ? vscnprintf+0x5d/0x90 [ 57.810036][ T5232] panic+0x349/0x860 [ 57.813930][ T5232] ? __warn+0x172/0x4e0 [ 57.818090][ T5232] ? __pfx_panic+0x10/0x10 [ 57.822510][ T5232] __warn+0x346/0x4e0 [ 57.826486][ T5232] ? __alloc_pages_noprof+0x36a/0x6c0 [ 57.831861][ T5232] report_bug+0x2b3/0x500 [ 57.836186][ T5232] ? __alloc_pages_noprof+0x36a/0x6c0 [ 57.841559][ T5232] handle_bug+0x3e/0x70 [ 57.845729][ T5232] exc_invalid_op+0x1a/0x50 [ 57.850254][ T5232] asm_exc_invalid_op+0x1a/0x20 [ 57.855112][ T5232] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 57.861099][ T5232] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 79 17 15 0e 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 57.880724][ T5232] RSP: 0018:ffffc9000343f860 EFLAGS: 00010246 [ 57.886791][ T5232] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 57.894755][ T5232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000343f8e8 [ 57.902721][ T5232] RBP: ffffc9000343f968 R08: ffffc9000343f8e7 R09: 0000000000000000 [ 57.910702][ T5232] R10: ffffc9000343f8c0 R11: fffff52000687f1d R12: 1ffff92000687f14 [ 57.918686][ T5232] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000687f10 [ 57.926681][ T5232] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 57.932405][ T5232] ? lockdep_hardirqs_on+0x99/0x150 [ 57.937635][ T5232] ___kmalloc_large_node+0x8b/0x1d0 [ 57.942861][ T5232] __kmalloc_large_node_noprof+0x1a/0x80 [ 57.948501][ T5232] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 57.954632][ T5232] __kmalloc_noprof+0x2ae/0x400 [ 57.959506][ T5232] ? _copy_from_user+0xa6/0xe0 [ 57.964306][ T5232] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 57.970209][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 57.976547][ T5232] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.981745][ T5232] ? _raw_spin_unlock+0x28/0x50 [ 57.986596][ T5232] drm_ioctl_kernel+0x33a/0x440 [ 57.991447][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 57.997773][ T5232] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.003139][ T5232] ? __might_fault+0xc6/0x120 [ 58.007816][ T5232] drm_ioctl+0x611/0xad0 [ 58.012058][ T5232] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 58.018389][ T5232] ? __pfx_drm_ioctl+0x10/0x10 [ 58.023163][ T5232] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.028096][ T5232] ? security_file_ioctl+0x87/0xb0 [ 58.033205][ T5232] ? __pfx_drm_ioctl+0x10/0x10 [ 58.037992][ T5232] __se_sys_ioctl+0xfc/0x170 [ 58.042603][ T5232] do_syscall_64+0xf3/0x230 [ 58.047115][ T5232] ? clear_bhb_loop+0x35/0x90 [ 58.051819][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.057707][ T5232] RIP: 0033:0x7fe9f6b0d879 [ 58.062119][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.081718][ T5232] RSP: 002b:00007ffeb08bf0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.090155][ T5232] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9f6b0d879 [ 58.098127][ T5232] RDX: 0000000020000180 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 58.106108][ T5232] RBP: 00007fe9f6b805f0 R08: 0023647261632f69 R09: 0000000000000006 [ 58.114081][ T5232] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 58.122052][ T5232] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 58.130039][ T5232] [ 58.133360][ T5232] Kernel Offset: disabled [ 58.137715][ T5232] Rebooting in 86400 seconds..