./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3109113936
<...>
Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts.
execve("./syz-executor3109113936", ["./syz-executor3109113936"], 0x7ffc0d0f1470 /* 10 vars */) = 0
brk(NULL) = 0x555555594000
brk(0x555555594c40) = 0x555555594c40
arch_prctl(ARCH_SET_FS, 0x555555594300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3109113936", 4096) = 28
brk(0x5555555b5c40) = 0x5555555b5c40
brk(0x5555555b6000) = 0x5555555b6000
mprotect(0x7f0ea96fe000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555945d0) = 3612
./strace-static-x86_64: Process 3612 attached
[pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3612] setpgid(0, 0) = 0
[pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3612] write(3, "1000", 4) = 4
[pid 3612] close(3) = 0
[pid 3612] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3612] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3612] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3612] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3612] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3612] write(4, "9", 1) = 1
[pid 3612] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3612] exit_group(0) = ?
[pid 3612] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3612, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached
, child_tidptr=0x5555555945d0) = 3616
[pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3616] setpgid(0, 0) = 0
[pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3616] write(3, "1000", 4) = 4
[pid 3616] close(3) = 0
[pid 3616] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3616] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3616] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3616] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3616] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3616] write(4, "9", 1) = 1
[pid 3616] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3616] exit_group(0) = ?
syzkaller login: [ 39.174519][ T3616] ------------[ cut here ]------------
[ 39.180463][ T3616] WARNING: CPU: 0 PID: 3616 at kernel/workqueue.c:3066 __flush_work+0x926/0xb10
[ 39.190029][ T3616] Modules linked in:
[ 39.193941][ T3616] CPU: 0 PID: 3616 Comm: syz-executor310 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 39.204230][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 39.214359][ T3616] RIP: 0010:__flush_work+0x926/0xb10
[ 39.219881][ T3616] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 39.239581][ T3616] RSP: 0018:ffffc90003b5f948 EFLAGS: 00010293
[ 39.245661][ T3616] RAX: 0000000000000000 RBX: ffff8880773e48f0 RCX: 0000000000000000
[ 39.253970][ T3616] RDX: ffff888022c48000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 39.262018][ T3616] RBP: ffffc90003b5fae0 R08: 0000000000000001 R09: 0000000000000000
[ 39.270073][ T3616] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 39.278124][ T3616] R13: 1ffff9200076bf5f R14: 0000000000000001 R15: ffff8880773e4908
[ 39.286166][ T3616] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 39.295116][ T3616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.301771][ T3616] CR2: 00007f0ea9705290 CR3: 000000000bc8e000 CR4: 0000000000350ef0
[ 39.309790][ T3616] Call Trace:
[ 39.313065][ T3616]
[ 39.315992][ T3616] ? lock_chain_count+0x20/0x20
[ 39.321001][ T3616] ? queue_delayed_work_on+0x120/0x120
[ 39.326559][ T3616] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 39.332560][ T3616] ? mark_lock.part.0+0xee/0x1910
[ 39.337667][ T3616] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 39.343658][ T3616] ? mark_held_locks+0x9f/0xe0
[ 39.348484][ T3616] ? __cancel_work_timer+0x408/0x570
[ 39.353786][ T3616] __cancel_work_timer+0x3f9/0x570
[ 39.358931][ T3616] ? cancel_delayed_work+0x20/0x20
[ 39.364062][ T3616] ? tls_sk_proto_close+0x29b/0xaf0
[ 39.369354][ T3616] ? mark_held_locks+0x9f/0xe0
[ 39.374144][ T3616] ? __local_bh_enable_ip+0xa0/0x120
[ 39.379511][ T3616] tls_strp_done+0x66/0x230
[ 39.384040][ T3616] tls_sk_proto_close+0x40d/0xaf0
[ 39.389322][ T3616] ? wait_on_pending_writer+0x440/0x440
[ 39.394900][ T3616] ? ip_mc_drop_socket+0x16/0x260
[ 39.400001][ T3616] inet_release+0x12e/0x270
[ 39.404517][ T3616] inet6_release+0x4c/0x70
[ 39.408977][ T3616] __sock_release+0xcd/0x280
[ 39.413579][ T3616] sock_close+0x18/0x20
[ 39.417771][ T3616] __fput+0x277/0x9d0
[ 39.421758][ T3616] ? __sock_release+0x280/0x280
[ 39.426735][ T3616] task_work_run+0xdd/0x1a0
[ 39.431247][ T3616] do_exit+0xad5/0x29b0
[ 39.435397][ T3616] ? mm_update_next_owner+0x7a0/0x7a0
[ 39.440798][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 39.446151][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 39.451459][ T3616] do_group_exit+0xd2/0x2f0
[ 39.455953][ T3616] __x64_sys_exit_group+0x3a/0x50
[ 39.461017][ T3616] do_syscall_64+0x35/0xb0
[ 39.465442][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 39.471377][ T3616] RIP: 0033:0x7f0ea968fdf9
[ 39.475802][ T3616] Code: Unable to access opcode bytes at RIP 0x7f0ea968fdcf.
[ 39.483204][ T3616] RSP: 002b:00007ffc37754748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 39.491725][ T3616] RAX: ffffffffffffffda RBX: 00007f0ea97043f0 RCX: 00007f0ea968fdf9
[ 39.499751][ T3616] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 39.507782][ T3616] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 39.515763][ T3616] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f0ea97043f0
[ 39.523783][ T3616] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 39.531853][ T3616]
[ 39.534878][ T3616] Kernel panic - not syncing: panic_on_warn set ...
[ 39.541471][ T3616] CPU: 0 PID: 3616 Comm: syz-executor310 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 39.551625][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 39.561666][ T3616] Call Trace:
[ 39.564940][ T3616]
[ 39.567857][ T3616] dump_stack_lvl+0xcd/0x134
[ 39.572448][ T3616] panic+0x2c8/0x627
[ 39.576363][ T3616] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 39.582347][ T3616] ? __warn.cold+0x248/0x2c4
[ 39.586936][ T3616] ? __flush_work+0x926/0xb10
[ 39.591617][ T3616] __warn.cold+0x259/0x2c4
[ 39.596055][ T3616] ? __flush_work+0x926/0xb10
[ 39.600755][ T3616] report_bug+0x1bc/0x210
[ 39.605083][ T3616] handle_bug+0x3c/0x60
[ 39.609236][ T3616] exc_invalid_op+0x14/0x40
[ 39.613728][ T3616] asm_exc_invalid_op+0x16/0x20
[ 39.618565][ T3616] RIP: 0010:__flush_work+0x926/0xb10
[ 39.623849][ T3616] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 39.643454][ T3616] RSP: 0018:ffffc90003b5f948 EFLAGS: 00010293
[ 39.649521][ T3616] RAX: 0000000000000000 RBX: ffff8880773e48f0 RCX: 0000000000000000
[ 39.657485][ T3616] RDX: ffff888022c48000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 39.665448][ T3616] RBP: ffffc90003b5fae0 R08: 0000000000000001 R09: 0000000000000000
[ 39.673411][ T3616] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 39.681376][ T3616] R13: 1ffff9200076bf5f R14: 0000000000000001 R15: ffff8880773e4908
[ 39.689351][ T3616] ? __flush_work+0x926/0xb10
[ 39.694032][ T3616] ? __flush_work+0x926/0xb10
[ 39.698702][ T3616] ? lock_chain_count+0x20/0x20
[ 39.703546][ T3616] ? queue_delayed_work_on+0x120/0x120
[ 39.709011][ T3616] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 39.714982][ T3616] ? mark_lock.part.0+0xee/0x1910
[ 39.719997][ T3616] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 39.725976][ T3616] ? mark_held_locks+0x9f/0xe0
[ 39.730734][ T3616] ? __cancel_work_timer+0x408/0x570
[ 39.736020][ T3616] __cancel_work_timer+0x3f9/0x570
[ 39.741135][ T3616] ? cancel_delayed_work+0x20/0x20
[ 39.746246][ T3616] ? tls_sk_proto_close+0x29b/0xaf0
[ 39.751447][ T3616] ? mark_held_locks+0x9f/0xe0
[ 39.756209][ T3616] ? __local_bh_enable_ip+0xa0/0x120
[ 39.761494][ T3616] tls_strp_done+0x66/0x230
[ 39.765994][ T3616] tls_sk_proto_close+0x40d/0xaf0
[ 39.771025][ T3616] ? wait_on_pending_writer+0x440/0x440
[ 39.776577][ T3616] ? ip_mc_drop_socket+0x16/0x260
[ 39.781639][ T3616] inet_release+0x12e/0x270
[ 39.786142][ T3616] inet6_release+0x4c/0x70
[ 39.790559][ T3616] __sock_release+0xcd/0x280
[ 39.795140][ T3616] sock_close+0x18/0x20
[ 39.799285][ T3616] __fput+0x277/0x9d0
[ 39.803259][ T3616] ? __sock_release+0x280/0x280
[ 39.808105][ T3616] task_work_run+0xdd/0x1a0
[ 39.812606][ T3616] do_exit+0xad5/0x29b0
[ 39.816762][ T3616] ? mm_update_next_owner+0x7a0/0x7a0
[ 39.822126][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 39.827322][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 39.832517][ T3616] do_group_exit+0xd2/0x2f0
[ 39.837015][ T3616] __x64_sys_exit_group+0x3a/0x50
[ 39.842033][ T3616] do_syscall_64+0x35/0xb0
[ 39.846442][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 39.852334][ T3616] RIP: 0033:0x7f0ea968fdf9
[ 39.856739][ T3616] Code: Unable to access opcode bytes at RIP 0x7f0ea968fdcf.
[ 39.864089][ T3616] RSP: 002b:00007ffc37754748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 39.872493][ T3616] RAX: ffffffffffffffda RBX: 00007f0ea97043f0 RCX: 00007f0ea968fdf9
[ 39.880455][ T3616] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 39.888417][ T3616] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 39.896381][ T3616] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f0ea97043f0
[ 39.904346][ T3616] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 39.912321][ T3616]
[ 39.916093][ T3616] Kernel Offset: disabled
[ 39.920484][ T3616] Rebooting in 86400 seconds..