./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1653868371
<...>
forked to background, child pid 3184
[ 27.447633][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.459653][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 27.679789][ T3269] ssh-keygen (3269) used greatest stack depth: 22472 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.193' (ECDSA) to the list of known hosts.
execve("./syz-executor1653868371", ["./syz-executor1653868371"], 0x7ffce76ed720 /* 10 vars */) = 0
brk(NULL) = 0x5555559cb000
brk(0x5555559cbc40) = 0x5555559cbc40
arch_prctl(ARCH_SET_FS, 0x5555559cb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1653868371", 4096) = 28
brk(0x5555559ecc40) = 0x5555559ecc40
brk(0x5555559ed000) = 0x5555559ed000
mprotect(0x7f0b52a9e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3607 attached
, child_tidptr=0x5555559cb5d0) = 3607
[pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3607] setpgid(0, 0) = 0
[pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3607] write(3, "1000", 4) = 4
[pid 3607] close(3) = 0
[pid 3607] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3607] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3607] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3607] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3607] write(4, "9", 1) = 1
[pid 3607] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3607] exit_group(0) = ?
[pid 3607] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3611 attached
, child_tidptr=0x5555559cb5d0) = 3611
[pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3611] setpgid(0, 0) = 0
[pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3611] write(3, "1000", 4) = 4
[pid 3611] close(3) = 0
[pid 3611] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3611] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3611] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3611] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3611] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3611] write(4, "9", 1) = 1
[pid 3611] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3611] exit_group(0) = ?
syzkaller login: [ 50.183155][ T3611] ------------[ cut here ]------------
[ 50.189152][ T3611] WARNING: CPU: 0 PID: 3611 at kernel/workqueue.c:3066 __flush_work+0x926/0xb10
[ 50.198764][ T3611] Modules linked in:
[ 50.202935][ T3611] CPU: 0 PID: 3611 Comm: syz-executor165 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 50.213898][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.224219][ T3611] RIP: 0010:__flush_work+0x926/0xb10
[ 50.229522][ T3611] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 50.249244][ T3611] RSP: 0018:ffffc900038bf948 EFLAGS: 00010293
[ 50.255359][ T3611] RAX: 0000000000000000 RBX: ffff888020f0a8f0 RCX: 0000000000000000
[ 50.263384][ T3611] RDX: ffff88801bd50000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 50.271380][ T3611] RBP: ffffc900038bfae0 R08: 0000000000000001 R09: 0000000000000000
[ 50.279528][ T3611] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 50.287562][ T3611] R13: 1ffff92000717f5f R14: 0000000000000001 R15: ffff888020f0a908
[ 50.295590][ T3611] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.304607][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.311214][ T3611] CR2: 00005555559cb5d0 CR3: 000000000bc8e000 CR4: 00000000003506e0
[ 50.319254][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.327490][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.335601][ T3611] Call Trace:
[ 50.338912][ T3611]
[ 50.341867][ T3611] ? lock_chain_count+0x20/0x20
[ 50.346896][ T3611] ? queue_delayed_work_on+0x120/0x120
[ 50.352479][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.358532][ T3611] ? mark_lock.part.0+0xee/0x1910
[ 50.363697][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.369977][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.375010][ T3611] ? __cancel_work_timer+0x408/0x570
[ 50.380337][ T3611] __cancel_work_timer+0x3f9/0x570
[ 50.385591][ T3611] ? cancel_delayed_work+0x20/0x20
[ 50.390746][ T3611] ? tls_sk_proto_close+0x29b/0xaf0
[ 50.396025][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.400819][ T3611] ? __local_bh_enable_ip+0xa0/0x120
[ 50.406186][ T3611] tls_strp_done+0x66/0x230
[ 50.410714][ T3611] tls_sk_proto_close+0x40d/0xaf0
[ 50.415837][ T3611] ? wait_on_pending_writer+0x440/0x440
[ 50.421503][ T3611] ? ip_mc_drop_socket+0x16/0x260
[ 50.426598][ T3611] inet_release+0x12e/0x270
[ 50.431127][ T3611] inet6_release+0x4c/0x70
[ 50.435594][ T3611] __sock_release+0xcd/0x280
[ 50.440207][ T3611] sock_close+0x18/0x20
[ 50.444527][ T3611] __fput+0x277/0x9d0
[ 50.448544][ T3611] ? __sock_release+0x280/0x280
[ 50.453475][ T3611] task_work_run+0xdd/0x1a0
[ 50.458010][ T3611] do_exit+0xad5/0x29b0
[ 50.462184][ T3611] ? mm_update_next_owner+0x7a0/0x7a0
[ 50.467632][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.472887][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.478150][ T3611] do_group_exit+0xd2/0x2f0
[ 50.482684][ T3611] __x64_sys_exit_group+0x3a/0x50
[ 50.487772][ T3611] do_syscall_64+0x35/0xb0
[ 50.492213][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.498204][ T3611] RIP: 0033:0x7f0b52a2fdf9
[ 50.502646][ T3611] Code: Unable to access opcode bytes at RIP 0x7f0b52a2fdcf.
[ 50.510082][ T3611] RSP: 002b:00007fffd86d4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.518538][ T3611] RAX: ffffffffffffffda RBX: 00007f0b52aa43f0 RCX: 00007f0b52a2fdf9
[ 50.526570][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.534582][ T3611] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 50.542566][ T3611] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f0b52aa43f0
[ 50.550608][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.558632][ T3611]
[ 50.561659][ T3611] Kernel panic - not syncing: panic_on_warn set ...
[ 50.568248][ T3611] CPU: 1 PID: 3611 Comm: syz-executor165 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 50.578414][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.588471][ T3611] Call Trace:
[ 50.591759][ T3611]
[ 50.594700][ T3611] dump_stack_lvl+0xcd/0x134
[ 50.599310][ T3611] panic+0x2c8/0x627
[ 50.603217][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.609235][ T3611] ? __warn.cold+0x248/0x2c4
[ 50.613851][ T3611] ? __flush_work+0x926/0xb10
[ 50.618559][ T3611] __warn.cold+0x259/0x2c4
[ 50.623005][ T3611] ? __flush_work+0x926/0xb10
[ 50.627709][ T3611] report_bug+0x1bc/0x210
[ 50.632061][ T3611] handle_bug+0x3c/0x60
[ 50.636230][ T3611] exc_invalid_op+0x14/0x40
[ 50.640743][ T3611] asm_exc_invalid_op+0x16/0x20
[ 50.645611][ T3611] RIP: 0010:__flush_work+0x926/0xb10
[ 50.650915][ T3611] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 50.670557][ T3611] RSP: 0018:ffffc900038bf948 EFLAGS: 00010293
[ 50.676659][ T3611] RAX: 0000000000000000 RBX: ffff888020f0a8f0 RCX: 0000000000000000
[ 50.684645][ T3611] RDX: ffff88801bd50000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 50.692668][ T3611] RBP: ffffc900038bfae0 R08: 0000000000000001 R09: 0000000000000000
[ 50.700650][ T3611] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 50.708626][ T3611] R13: 1ffff92000717f5f R14: 0000000000000001 R15: ffff888020f0a908
[ 50.716618][ T3611] ? __flush_work+0x926/0xb10
[ 50.721534][ T3611] ? __flush_work+0x926/0xb10
[ 50.726243][ T3611] ? lock_chain_count+0x20/0x20
[ 50.731130][ T3611] ? queue_delayed_work_on+0x120/0x120
[ 50.736620][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.742617][ T3611] ? mark_lock.part.0+0xee/0x1910
[ 50.747652][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.753650][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.758426][ T3611] ? __cancel_work_timer+0x408/0x570
[ 50.763730][ T3611] __cancel_work_timer+0x3f9/0x570
[ 50.768856][ T3611] ? cancel_delayed_work+0x20/0x20
[ 50.773989][ T3611] ? tls_sk_proto_close+0x29b/0xaf0
[ 50.779208][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.784070][ T3611] ? __local_bh_enable_ip+0xa0/0x120
[ 50.789371][ T3611] tls_strp_done+0x66/0x230
[ 50.793889][ T3611] tls_sk_proto_close+0x40d/0xaf0
[ 50.799021][ T3611] ? wait_on_pending_writer+0x440/0x440
[ 50.804585][ T3611] ? ip_mc_drop_socket+0x16/0x260
[ 50.809638][ T3611] inet_release+0x12e/0x270
[ 50.814203][ T3611] inet6_release+0x4c/0x70
[ 50.818634][ T3611] __sock_release+0xcd/0x280
[ 50.823239][ T3611] sock_close+0x18/0x20
[ 50.827409][ T3611] __fput+0x277/0x9d0
[ 50.831406][ T3611] ? __sock_release+0x280/0x280
[ 50.836278][ T3611] task_work_run+0xdd/0x1a0
[ 50.840797][ T3611] do_exit+0xad5/0x29b0
[ 50.844983][ T3611] ? mm_update_next_owner+0x7a0/0x7a0
[ 50.850368][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.855587][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.860805][ T3611] do_group_exit+0xd2/0x2f0
[ 50.865322][ T3611] __x64_sys_exit_group+0x3a/0x50
[ 50.870357][ T3611] do_syscall_64+0x35/0xb0
[ 50.874790][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.880709][ T3611] RIP: 0033:0x7f0b52a2fdf9
[ 50.885134][ T3611] Code: Unable to access opcode bytes at RIP 0x7f0b52a2fdcf.
[ 50.892503][ T3611] RSP: 002b:00007fffd86d4c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.900932][ T3611] RAX: ffffffffffffffda RBX: 00007f0b52aa43f0 RCX: 00007f0b52a2fdf9
[ 50.908914][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.916891][ T3611] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 50.924869][ T3611] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f0b52aa43f0
[ 50.932850][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.940843][ T3611]
[ 50.944167][ T3611] Kernel Offset: disabled
[ 50.948568][ T3611] Rebooting in 86400 seconds..