./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3377543711
<...>
DUID 00:04:b0:7e:30:9f:4d:11:81:da:bf:2d:3d:77:4c:17:c1:ba
forked to background, child pid 3185
[ 26.476285][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.488855][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.111' (ECDSA) to the list of known hosts.
execve("./syz-executor3377543711", ["./syz-executor3377543711"], 0x7ffcac62d4c0 /* 10 vars */) = 0
brk(NULL) = 0x5555555cc000
brk(0x5555555ccc40) = 0x5555555ccc40
arch_prctl(ARCH_SET_FS, 0x5555555cc300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3377543711", 4096) = 28
brk(0x5555555edc40) = 0x5555555edc40
brk(0x5555555ee000) = 0x5555555ee000
mprotect(0x7ff42108c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3608 attached
, child_tidptr=0x5555555cc5d0) = 3608
[pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3608] setpgid(0, 0) = 0
[pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3608] write(3, "1000", 4) = 4
[pid 3608] close(3) = 0
[pid 3608] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3608] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3608] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3608] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3608] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3608] write(4, "9", 1) = 1
[pid 3608] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3608] exit_group(0) = ?
[pid 3608] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3608, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached
, child_tidptr=0x5555555cc5d0) = 3612
[pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3612] setpgid(0, 0) = 0
[pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3612] write(3, "1000", 4) = 4
[pid 3612] close(3) = 0
[pid 3612] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
[pid 3612] setsockopt(3, SOL_TCP, TCP_REPAIR, [1], 4) = 0
[pid 3612] connect(3, {sa_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
[pid 3612] setsockopt(3, SOL_TCP, TCP_ULP, [7564404], 4) = 0
[pid 3612] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3612] write(4, "9", 1) = 1
[pid 3612] setsockopt(3, SOL_TLS, TLS_RX, "\x04\x03\x34\x00\x4c\x45\x74\x28\xef\xad\xcb\x38\x04\xfa\xf5\xf6\xbd\x6b\x35\x61\x4e\xeb\x95\xe7\xfb\x8c\x65\x6f\xb7\xe6\x8e\x97\xc5\x3b\x54\x74\x6f\xd0\x9d\xc1\xbd\x97\xee\xe0\x00\x00\x00\x00\xb4\x0d\x81\x27\x81\xe7\x16\x50", 56) = 0
[pid 3612] exit_group(0) = ?
syzkaller login: [ 42.657913][ T3612] ------------[ cut here ]------------
[ 42.663558][ T3612] WARNING: CPU: 1 PID: 3612 at kernel/workqueue.c:3066 __flush_work+0x926/0xb10
[ 42.673029][ T3612] Modules linked in:
[ 42.677338][ T3612] CPU: 1 PID: 3612 Comm: syz-executor337 Not tainted 5.19.0-syzkaller-11908-g7ebfc85e2cd7 #0
[ 42.687778][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 42.698826][ T3612] RIP: 0010:__flush_work+0x926/0xb10
[ 42.704562][ T3612] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 42.724507][ T3612] RSP: 0018:ffffc9000396f948 EFLAGS: 00010293
[ 42.730644][ T3612] RAX: 0000000000000000 RBX: ffff8880126530f0 RCX: 0000000000000000
[ 42.738821][ T3612] RDX: ffff8880219a8000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 42.747146][ T3612] RBP: ffffc9000396fae0 R08: 0000000000000001 R09: 0000000000000000
[ 42.755728][ T3612] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 42.763781][ T3612] R13: 1ffff9200072df5f R14: 0000000000000001 R15: ffff888012653108
[ 42.771765][ T3612] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 42.780748][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.787383][ T3612] CR2: 00007ff421093290 CR3: 000000007f3a9000 CR4: 00000000003506e0
[ 42.795387][ T3612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.803366][ T3612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.811372][ T3612] Call Trace:
[ 42.814693][ T3612]
[ 42.817641][ T3612] ? lock_chain_count+0x20/0x20
[ 42.822510][ T3612] ? queue_delayed_work_on+0x120/0x120
[ 42.828169][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 42.834186][ T3612] ? mark_lock.part.0+0xee/0x1910
[ 42.839224][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 42.845257][ T3612] ? mark_held_locks+0x9f/0xe0
[ 42.850223][ T3612] ? __cancel_work_timer+0x408/0x570
[ 42.855576][ T3612] __cancel_work_timer+0x3f9/0x570
[ 42.860722][ T3612] ? cancel_delayed_work+0x20/0x20
[ 42.866137][ T3612] ? tls_sk_proto_close+0x29b/0xaf0
[ 42.871382][ T3612] ? mark_held_locks+0x9f/0xe0
[ 42.876284][ T3612] ? __local_bh_enable_ip+0xa0/0x120
[ 42.881607][ T3612] tls_strp_done+0x66/0x230
[ 42.886179][ T3612] tls_sk_proto_close+0x40d/0xaf0
[ 42.891222][ T3612] ? wait_on_pending_writer+0x440/0x440
[ 42.896820][ T3612] ? ip_mc_drop_socket+0x16/0x260
[ 42.901862][ T3612] inet_release+0x12e/0x270
[ 42.907156][ T3612] inet6_release+0x4c/0x70
[ 42.911869][ T3612] __sock_release+0xcd/0x280
[ 42.916573][ T3612] sock_close+0x18/0x20
[ 42.920742][ T3612] __fput+0x277/0x9d0
[ 42.924756][ T3612] ? __sock_release+0x280/0x280
[ 42.929623][ T3612] task_work_run+0xdd/0x1a0
[ 42.934167][ T3612] do_exit+0xad5/0x29b0
[ 42.938341][ T3612] ? mm_update_next_owner+0x7a0/0x7a0
[ 42.943755][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 42.948972][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 42.954225][ T3612] do_group_exit+0xd2/0x2f0
[ 42.958750][ T3612] __x64_sys_exit_group+0x3a/0x50
[ 42.963821][ T3612] do_syscall_64+0x35/0xb0
[ 42.968249][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.974196][ T3612] RIP: 0033:0x7ff42101ddf9
[ 42.978626][ T3612] Code: Unable to access opcode bytes at RIP 0x7ff42101ddcf.
[ 42.986044][ T3612] RSP: 002b:00007fff953203c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 42.994511][ T3612] RAX: ffffffffffffffda RBX: 00007ff4210923f0 RCX: 00007ff42101ddf9
[ 43.002514][ T3612] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 43.010591][ T3612] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 43.018612][ T3612] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007ff4210923f0
[ 43.026646][ T3612] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.034680][ T3612]
[ 43.038068][ T3612] Kernel panic - not syncing: panic_on_warn set ...
[ 43.044643][ T3612] CPU: 1 PID: 3612 Comm: syz-executor337 Not tainted 5.19.0-syzkaller-11908-g7ebfc85e2cd7 #0
[ 43.054786][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 43.064835][ T3612] Call Trace:
[ 43.068107][ T3612]
[ 43.071027][ T3612] dump_stack_lvl+0xcd/0x134
[ 43.075630][ T3612] panic+0x2c8/0x627
[ 43.079546][ T3612] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 43.085546][ T3612] ? __warn.cold+0x248/0x2c4
[ 43.090153][ T3612] ? __flush_work+0x926/0xb10
[ 43.094841][ T3612] __warn.cold+0x259/0x2c4
[ 43.099258][ T3612] ? __flush_work+0x926/0xb10
[ 43.104633][ T3612] report_bug+0x1bc/0x210
[ 43.108972][ T3612] handle_bug+0x3c/0x60
[ 43.113119][ T3612] exc_invalid_op+0x14/0x40
[ 43.117621][ T3612] asm_exc_invalid_op+0x16/0x20
[ 43.122487][ T3612] RIP: 0010:__flush_work+0x926/0xb10
[ 43.127787][ T3612] Code: 00 48 c7 c6 0b 12 4f 81 48 c7 c7 40 92 f8 8b e8 30 61 10 00 e9 66 fc ff ff e8 d6 f4 2c 00 0f 0b e9 5a fc ff ff e8 ca f4 2c 00 <0f> 0b 45 31 f6 e9 4b fc ff ff e8 0b 4c 79 00 e9 3a fb ff ff e8 b1
[ 43.147402][ T3612] RSP: 0018:ffffc9000396f948 EFLAGS: 00010293
[ 43.153476][ T3612] RAX: 0000000000000000 RBX: ffff8880126530f0 RCX: 0000000000000000
[ 43.161449][ T3612] RDX: ffff8880219a8000 RSI: ffffffff814f1246 RDI: 0000000000000001
[ 43.169436][ T3612] RBP: ffffc9000396fae0 R08: 0000000000000001 R09: 0000000000000000
[ 43.177430][ T3612] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[ 43.185425][ T3612] R13: 1ffff9200072df5f R14: 0000000000000001 R15: ffff888012653108
[ 43.193415][ T3612] ? __flush_work+0x926/0xb10
[ 43.198124][ T3612] ? __flush_work+0x926/0xb10
[ 43.202834][ T3612] ? lock_chain_count+0x20/0x20
[ 43.207703][ T3612] ? queue_delayed_work_on+0x120/0x120
[ 43.213193][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 43.219188][ T3612] ? mark_lock.part.0+0xee/0x1910
[ 43.224235][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 43.230235][ T3612] ? mark_held_locks+0x9f/0xe0
[ 43.235010][ T3612] ? __cancel_work_timer+0x408/0x570
[ 43.240312][ T3612] __cancel_work_timer+0x3f9/0x570
[ 43.245437][ T3612] ? cancel_delayed_work+0x20/0x20
[ 43.250563][ T3612] ? tls_sk_proto_close+0x29b/0xaf0
[ 43.255780][ T3612] ? mark_held_locks+0x9f/0xe0
[ 43.260560][ T3612] ? __local_bh_enable_ip+0xa0/0x120
[ 43.265861][ T3612] tls_strp_done+0x66/0x230
[ 43.270382][ T3612] tls_sk_proto_close+0x40d/0xaf0
[ 43.275419][ T3612] ? wait_on_pending_writer+0x440/0x440
[ 43.280982][ T3612] ? ip_mc_drop_socket+0x16/0x260
[ 43.286025][ T3612] inet_release+0x12e/0x270
[ 43.290541][ T3612] inet6_release+0x4c/0x70
[ 43.294970][ T3612] __sock_release+0xcd/0x280
[ 43.299565][ T3612] sock_close+0x18/0x20
[ 43.303740][ T3612] __fput+0x277/0x9d0
[ 43.307733][ T3612] ? __sock_release+0x280/0x280
[ 43.312593][ T3612] task_work_run+0xdd/0x1a0
[ 43.317104][ T3612] do_exit+0xad5/0x29b0
[ 43.321271][ T3612] ? mm_update_next_owner+0x7a0/0x7a0
[ 43.326650][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.331864][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.337076][ T3612] do_group_exit+0xd2/0x2f0
[ 43.341588][ T3612] __x64_sys_exit_group+0x3a/0x50
[ 43.346617][ T3612] do_syscall_64+0x35/0xb0
[ 43.351037][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.356940][ T3612] RIP: 0033:0x7ff42101ddf9
[ 43.361355][ T3612] Code: Unable to access opcode bytes at RIP 0x7ff42101ddcf.
[ 43.368715][ T3612] RSP: 002b:00007fff953203c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 43.377143][ T3612] RAX: ffffffffffffffda RBX: 00007ff4210923f0 RCX: 00007ff42101ddf9
[ 43.385114][ T3612] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 43.393084][ T3612] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001
[ 43.401054][ T3612] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007ff4210923f0
[ 43.409025][ T3612] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.417018][ T3612]
[ 43.420242][ T3612] Kernel Offset: disabled
[ 43.424683][ T3612] Rebooting in 86400 seconds..