./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2288791754
<...>
DUID 00:04:11:31:ea:d8:bb:db:47:a8:80:cb:7d:0b:3c:d8:ea:74
forked to background, child pid 3185
[ 26.908205][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.922179][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.144' (ECDSA) to the list of known hosts.
execve("./syz-executor2288791754", ["./syz-executor2288791754"], 0x7ffc6217ef30 /* 10 vars */) = 0
brk(NULL) = 0x555555d30000
brk(0x555555d30c40) = 0x555555d30c40
arch_prctl(ARCH_SET_FS, 0x555555d30300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2288791754", 4096) = 28
brk(0x555555d51c40) = 0x555555d51c40
brk(0x555555d52000) = 0x555555d52000
mprotect(0x7efe48b53000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3607 attached
, child_tidptr=0x555555d305d0) = 3607
[pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3607] setpgid(0, 0) = 0
[pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3607] write(3, "1000", 4) = 4
[pid 3607] close(3) = 0
[pid 3607] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3607] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3607] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3607] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3607] write(4, "9", 1) = 1
[pid 3607] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3607] exit_group(0) = ?
[pid 3607] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3611 attached
, child_tidptr=0x555555d305d0) = 3611
[pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3611] setpgid(0, 0) = 0
[pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3611] write(3, "1000", 4) = 4
[pid 3611] close(3) = 0
[pid 3611] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3611] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3611] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3611] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3611] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3611] write(4, "9", 1) = 1
[pid 3611] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3611] exit_group(0) = ?
syzkaller login: [ 49.918146][ T3611] ------------[ cut here ]------------
[ 49.923932][ T3611] WARNING: CPU: 0 PID: 3611 at kernel/workqueue.c:3066 __flush_work+0x926/0xb10
[ 49.934730][ T3611] Modules linked in:
[ 49.939176][ T3611] CPU: 0 PID: 3611 Comm: syz-executor228 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 49.949922][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.960341][ T3611] RIP: 0010:__flush_work+0x926/0xb10
[ 49.965654][ T3611] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 49.985751][ T3611] RSP: 0018:ffffc900037ef948 EFLAGS: 00010293
[ 49.992158][ T3611] RAX: 0000000000000000 RBX: ffff888075e350f0 RCX: 0000000000000000
[ 50.000383][ T3611] RDX: ffff888022859d80 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 50.008371][ T3611] RBP: ffffc900037efae0 R08: 0000000000000001 R09: 0000000000000000
[ 50.016621][ T3611] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 50.024902][ T3611] R13: 1ffff920006fdf5f R14: 0000000000000001 R15: ffff888075e35108
[ 50.033093][ T3611] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.042281][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.049067][ T3611] CR2: 00007efe48b5a290 CR3: 000000002674a000 CR4: 00000000003506f0
[ 50.057156][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.065732][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.074421][ T3611] Call Trace:
[ 50.077705][ T3611]
[ 50.080961][ T3611] ? lock_chain_count+0x20/0x20
[ 50.085822][ T3611] ? queue_delayed_work_on+0x120/0x120
[ 50.091651][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 50.096929][ T3611] ? finish_task_switch.isra.0+0x2b5/0xc70
[ 50.103219][ T3611] ? __switch_to+0x5cc/0x1050
[ 50.107917][ T3611] ? lock_chain_count+0x20/0x20
[ 50.113192][ T3611] ? __schedule+0xae7/0x52b0
[ 50.117793][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.122785][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.127573][ T3611] ? __cancel_work_timer+0x408/0x570
[ 50.133370][ T3611] __cancel_work_timer+0x3f9/0x570
[ 50.138760][ T3611] ? cancel_delayed_work+0x20/0x20
[ 50.143896][ T3611] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 50.149707][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 50.154951][ T3611] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 50.160852][ T3611] tls_strp_done+0x66/0x230
[ 50.165381][ T3611] tls_sk_proto_close+0x40d/0xaf0
[ 50.170596][ T3611] ? wait_on_pending_writer+0x440/0x440
[ 50.176188][ T3611] ? ip_mc_drop_socket+0x16/0x260
[ 50.181678][ T3611] inet_release+0x12e/0x270
[ 50.186219][ T3611] inet6_release+0x4c/0x70
[ 50.191141][ T3611] __sock_release+0xcd/0x280
[ 50.195775][ T3611] sock_close+0x18/0x20
[ 50.200287][ T3611] __fput+0x277/0x9d0
[ 50.204301][ T3611] ? __sock_release+0x280/0x280
[ 50.209454][ T3611] task_work_run+0xdd/0x1a0
[ 50.214001][ T3611] do_exit+0xad5/0x29b0
[ 50.218192][ T3611] ? mm_update_next_owner+0x7a0/0x7a0
[ 50.223884][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.229272][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.234501][ T3611] do_group_exit+0xd2/0x2f0
[ 50.239253][ T3611] __x64_sys_exit_group+0x3a/0x50
[ 50.244316][ T3611] do_syscall_64+0x35/0xb0
[ 50.249006][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.255194][ T3611] RIP: 0033:0x7efe48ae4df9
[ 50.259817][ T3611] Code: Unable to access opcode bytes at RIP 0x7efe48ae4dcf.
[ 50.267239][ T3611] RSP: 002b:00007ffecd486908 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.275980][ T3611] RAX: ffffffffffffffda RBX: 00007efe48b593f0 RCX: 00007efe48ae4df9
[ 50.284174][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.292581][ T3611] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 50.301097][ T3611] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007efe48b593f0
[ 50.309569][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.317582][ T3611]
[ 50.320808][ T3611] Kernel panic - not syncing: panic_on_warn set ...
[ 50.327407][ T3611] CPU: 0 PID: 3611 Comm: syz-executor228 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 50.337557][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.347607][ T3611] Call Trace:
[ 50.350884][ T3611]
[ 50.353809][ T3611] dump_stack_lvl+0xcd/0x134
[ 50.358413][ T3611] panic+0x2c8/0x627
[ 50.362327][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.368417][ T3611] ? __warn.cold+0x248/0x2c4
[ 50.373071][ T3611] ? __flush_work+0x926/0xb10
[ 50.377746][ T3611] __warn.cold+0x259/0x2c4
[ 50.382164][ T3611] ? __flush_work+0x926/0xb10
[ 50.386848][ T3611] report_bug+0x1bc/0x210
[ 50.391194][ T3611] handle_bug+0x3c/0x60
[ 50.395363][ T3611] exc_invalid_op+0x14/0x40
[ 50.399888][ T3611] asm_exc_invalid_op+0x16/0x20
[ 50.404734][ T3611] RIP: 0010:__flush_work+0x926/0xb10
[ 50.410021][ T3611] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 50.429679][ T3611] RSP: 0018:ffffc900037ef948 EFLAGS: 00010293
[ 50.435757][ T3611] RAX: 0000000000000000 RBX: ffff888075e350f0 RCX: 0000000000000000
[ 50.443746][ T3611] RDX: ffff888022859d80 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 50.454179][ T3611] RBP: ffffc900037efae0 R08: 0000000000000001 R09: 0000000000000000
[ 50.462161][ T3611] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 50.470144][ T3611] R13: 1ffff920006fdf5f R14: 0000000000000001 R15: ffff888075e35108
[ 50.478135][ T3611] ? __flush_work+0x926/0xb10
[ 50.482817][ T3611] ? __flush_work+0x926/0xb10
[ 50.487512][ T3611] ? lock_chain_count+0x20/0x20
[ 50.492384][ T3611] ? queue_delayed_work_on+0x120/0x120
[ 50.497869][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 50.503073][ T3611] ? finish_task_switch.isra.0+0x2b5/0xc70
[ 50.508896][ T3611] ? __switch_to+0x5cc/0x1050
[ 50.513571][ T3611] ? lock_chain_count+0x20/0x20
[ 50.518426][ T3611] ? __schedule+0xae7/0x52b0
[ 50.523058][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.527841][ T3611] ? mark_held_locks+0x9f/0xe0
[ 50.532621][ T3611] ? __cancel_work_timer+0x408/0x570
[ 50.537911][ T3611] __cancel_work_timer+0x3f9/0x570
[ 50.543040][ T3611] ? cancel_delayed_work+0x20/0x20
[ 50.548171][ T3611] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 50.553802][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 50.558997][ T3611] ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 50.564648][ T3611] tls_strp_done+0x66/0x230
[ 50.569150][ T3611] tls_sk_proto_close+0x40d/0xaf0
[ 50.574190][ T3611] ? wait_on_pending_writer+0x440/0x440
[ 50.579770][ T3611] ? ip_mc_drop_socket+0x16/0x260
[ 50.584848][ T3611] inet_release+0x12e/0x270
[ 50.589363][ T3611] inet6_release+0x4c/0x70
[ 50.593792][ T3611] __sock_release+0xcd/0x280
[ 50.598434][ T3611] sock_close+0x18/0x20
[ 50.602607][ T3611] __fput+0x277/0x9d0
[ 50.606596][ T3611] ? __sock_release+0x280/0x280
[ 50.611462][ T3611] task_work_run+0xdd/0x1a0
[ 50.615983][ T3611] do_exit+0xad5/0x29b0
[ 50.620135][ T3611] ? mm_update_next_owner+0x7a0/0x7a0
[ 50.625502][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.630709][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.635931][ T3611] do_group_exit+0xd2/0x2f0
[ 50.640442][ T3611] __x64_sys_exit_group+0x3a/0x50
[ 50.645479][ T3611] do_syscall_64+0x35/0xb0
[ 50.649890][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.655786][ T3611] RIP: 0033:0x7efe48ae4df9
[ 50.660202][ T3611] Code: Unable to access opcode bytes at RIP 0x7efe48ae4dcf.
[ 50.667589][ T3611] RSP: 002b:00007ffecd486908 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.676021][ T3611] RAX: ffffffffffffffda RBX: 00007efe48b593f0 RCX: 00007efe48ae4df9
[ 50.683994][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.691958][ T3611] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 50.699935][ T3611] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007efe48b593f0
[ 50.707942][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.715917][ T3611]
[ 50.719212][ T3611] Kernel Offset: disabled
[ 50.723603][ T3611] Rebooting in 86400 seconds..