./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor686431284 <...> Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. execve("./syz-executor686431284", ["./syz-executor686431284"], 0x7ffe7106a7f0 /* 10 vars */) = 0 brk(NULL) = 0x555556bc4000 brk(0x555556bc4d00) = 0x555556bc4d00 arch_prctl(ARCH_SET_FS, 0x555556bc4380) = 0 set_tid_address(0x555556bc4650) = 5075 set_robust_list(0x555556bc4660, 24) = 0 rseq(0x555556bc4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor686431284", 4096) = 27 getrandom("\x14\x4b\x16\x01\x65\xb3\xd4\x35", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556bc4d00 brk(0x555556be5d00) = 0x555556be5d00 brk(0x555556be6000) = 0x555556be6000 mprotect(0x7f8ccb1d6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 close(3) = 0 socket(AF_INET6, SOCK_STREAM, IPPROTO_MPTCP) = 3 bind(3, {sa_family=AF_INET6, sin6_port=htons(20002), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 listen(3, 0) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_SOCK_DIAG) = 4 writev(4, [{iov_base="\x58\x00\x00\x00\x15\x00\xad\xd4\x27\x32\x3b\x47\x0c\x45\xb4\x56\x02\x06\x7f\xff\xff\xff\x81\x00\x4e\x22\x00\x0d\x00\xff\x00\x28\x92\x5a\xa8\x00\x20\x00\xea\xa5\x7b\x00\x09\x00\x80\x00\x0e\xff\xfe\xff\xe8\x09\x00\x00\x00\xff\x00\x00\xf0\x3a\x02\x00\xf0\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xe7\xee\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=120}], 1) = 120 exit_group(0) = ? syzkaller login: [ 99.053606][ T5075] ------------[ cut here ]------------ [ 99.059365][ T5075] WARNING: CPU: 0 PID: 5075 at net/mptcp/protocol.c:2999 mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.070390][ T5075] Modules linked in: [ 99.074481][ T5075] CPU: 0 PID: 5075 Comm: syz-executor686 Not tainted 6.7.0-rc4-syzkaller-00167-g2513974cc3e1 #0 [ 99.085012][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 99.095253][ T5075] RIP: 0010:mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.102240][ T5075] Code: 00 00 00 0f b6 45 12 88 44 24 20 44 0f b6 6c 24 20 bf 0a 00 00 00 44 89 ee e8 c1 66 24 f7 41 80 fd 0a 74 2b e8 86 6b 24 f7 90 <0f> 0b 90 e8 7d 6b 24 f7 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 [ 99.121981][ T5075] RSP: 0018:ffffc900039efb50 EFLAGS: 00010293 [ 99.128112][ T5075] RAX: 0000000000000000 RBX: ffff8880187b8000 RCX: ffffffff8a63221f [ 99.136278][ T5075] RDX: ffff8880137a0000 RSI: ffffffff8a63222a RDI: 0000000000000001 [ 99.144363][ T5075] RBP: ffff888018b30000 R08: 0000000000000001 R09: 000000000000000a [ 99.152413][ T5075] R10: 0000000000000007 R11: 0000000000000002 R12: 1ffff9200073df6a [ 99.160429][ T5075] R13: 0000000000000007 R14: ffff8880187b8012 R15: 000000000000000a [ 99.168626][ T5075] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 99.177742][ T5075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.184449][ T5075] CR2: 00007f8ccb1dd0f0 CR3: 000000000cd77000 CR4: 00000000003506f0 [ 99.192543][ T5075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.200533][ T5075] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.208608][ T5075] Call Trace: [ 99.211950][ T5075] [ 99.214897][ T5075] ? show_regs+0x8f/0xa0 [ 99.219167][ T5075] ? __warn+0xe6/0x390 [ 99.223381][ T5075] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.229712][ T5075] ? report_bug+0x3bc/0x580 [ 99.234340][ T5075] ? handle_bug+0x3d/0x70 [ 99.238731][ T5075] ? exc_invalid_op+0x17/0x40 [ 99.243562][ T5075] ? asm_exc_invalid_op+0x1a/0x20 [ 99.248662][ T5075] ? mptcp_check_listen_stop.part.0+0x16f/0x240 [ 99.255261][ T5075] ? mptcp_check_listen_stop.part.0+0x17a/0x240 [ 99.261618][ T5075] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.267913][ T5075] ? __bpf_trace_subflow_check_data_avail+0x110/0x110 [ 99.274786][ T5075] __mptcp_close+0x888/0xa10 [ 99.279437][ T5075] ? __sock_release+0x260/0x260 [ 99.284559][ T5075] ? __mptcp_unaccepted_force_close+0x120/0x120 [ 99.290892][ T5075] ? __local_bh_enable_ip+0xa4/0x120 [ 99.296212][ T5075] ? __sock_release+0x260/0x260 [ 99.301343][ T5075] mptcp_close+0x28/0xf0 [ 99.305644][ T5075] inet_release+0x132/0x270 [ 99.310182][ T5075] inet6_release+0x4f/0x70 [ 99.314686][ T5075] __sock_release+0xae/0x260 [ 99.319335][ T5075] sock_close+0x1c/0x20 [ 99.323607][ T5075] __fput+0x270/0xbb0 [ 99.327659][ T5075] task_work_run+0x14d/0x240 [ 99.332347][ T5075] ? task_work_cancel+0x30/0x30 [ 99.337245][ T5075] ? do_raw_spin_unlock+0x173/0x230 [ 99.342600][ T5075] do_exit+0xa92/0x2ae0 [ 99.346816][ T5075] ? do_group_exit+0x1c5/0x2a0 [ 99.351663][ T5075] ? reacquire_held_locks+0x4c0/0x4c0 [ 99.357125][ T5075] ? do_raw_spin_lock+0x12e/0x2b0 [ 99.362410][ T5075] ? mm_update_next_owner+0x840/0x840 [ 99.367864][ T5075] ? spin_bug+0x1d0/0x1d0 [ 99.372319][ T5075] do_group_exit+0xd4/0x2a0 [ 99.376963][ T5075] __x64_sys_exit_group+0x3e/0x50 [ 99.382141][ T5075] do_syscall_64+0x40/0x110 [ 99.386720][ T5075] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 99.392811][ T5075] RIP: 0033:0x7f8ccb161d79 [ 99.397329][ T5075] Code: Unable to access opcode bytes at 0x7f8ccb161d4f. [ 99.404494][ T5075] RSP: 002b:00007ffce6b9dbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 99.413033][ T5075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ccb161d79 [ 99.421403][ T5075] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 99.429449][ T5075] RBP: 00007f8ccb1dc290 R08: ffffffffffffffb8 R09: 00007ffce6b9ddf8 [ 99.437951][ T5075] R10: 00007ffce6b9ddf8 R11: 0000000000000246 R12: 00007f8ccb1dc290 [ 99.446029][ T5075] R13: 0000000000000000 R14: 00007f8ccb1dcce0 R15: 00007f8ccb133b40 [ 99.454300][ T5075] [ 99.457357][ T5075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.464853][ T5075] CPU: 0 PID: 5075 Comm: syz-executor686 Not tainted 6.7.0-rc4-syzkaller-00167-g2513974cc3e1 #0 [ 99.476092][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 99.486775][ T5075] Call Trace: [ 99.490067][ T5075] [ 99.493027][ T5075] dump_stack_lvl+0xd9/0x1b0 [ 99.497651][ T5075] panic+0x6dc/0x790 [ 99.501588][ T5075] ? panic_smp_self_stop+0xa0/0xa0 [ 99.506748][ T5075] ? show_trace_log_lvl+0x363/0x4f0 [ 99.512016][ T5075] ? check_panic_on_warn+0x1f/0xb0 [ 99.517204][ T5075] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.523491][ T5075] check_panic_on_warn+0xab/0xb0 [ 99.528500][ T5075] __warn+0xf2/0x390 [ 99.532477][ T5075] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.539188][ T5075] report_bug+0x3bc/0x580 [ 99.543582][ T5075] handle_bug+0x3d/0x70 [ 99.547774][ T5075] exc_invalid_op+0x17/0x40 [ 99.552336][ T5075] asm_exc_invalid_op+0x1a/0x20 [ 99.557492][ T5075] RIP: 0010:mptcp_check_listen_stop.part.0+0x17b/0x240 [ 99.564410][ T5075] Code: 00 00 00 0f b6 45 12 88 44 24 20 44 0f b6 6c 24 20 bf 0a 00 00 00 44 89 ee e8 c1 66 24 f7 41 80 fd 0a 74 2b e8 86 6b 24 f7 90 <0f> 0b 90 e8 7d 6b 24 f7 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 [ 99.584081][ T5075] RSP: 0018:ffffc900039efb50 EFLAGS: 00010293 [ 99.590293][ T5075] RAX: 0000000000000000 RBX: ffff8880187b8000 RCX: ffffffff8a63221f [ 99.598324][ T5075] RDX: ffff8880137a0000 RSI: ffffffff8a63222a RDI: 0000000000000001 [ 99.606511][ T5075] RBP: ffff888018b30000 R08: 0000000000000001 R09: 000000000000000a [ 99.614506][ T5075] R10: 0000000000000007 R11: 0000000000000002 R12: 1ffff9200073df6a [ 99.622499][ T5075] R13: 0000000000000007 R14: ffff8880187b8012 R15: 000000000000000a [ 99.630505][ T5075] ? mptcp_check_listen_stop.part.0+0x16f/0x240 [ 99.636811][ T5075] ? mptcp_check_listen_stop.part.0+0x17a/0x240 [ 99.643543][ T5075] ? __bpf_trace_subflow_check_data_avail+0x110/0x110 [ 99.650354][ T5075] __mptcp_close+0x888/0xa10 [ 99.655000][ T5075] ? __sock_release+0x260/0x260 [ 99.659973][ T5075] ? __mptcp_unaccepted_force_close+0x120/0x120 [ 99.666255][ T5075] ? __local_bh_enable_ip+0xa4/0x120 [ 99.671756][ T5075] ? __sock_release+0x260/0x260 [ 99.676639][ T5075] mptcp_close+0x28/0xf0 [ 99.680929][ T5075] inet_release+0x132/0x270 [ 99.685479][ T5075] inet6_release+0x4f/0x70 [ 99.690016][ T5075] __sock_release+0xae/0x260 [ 99.694643][ T5075] sock_close+0x1c/0x20 [ 99.698836][ T5075] __fput+0x270/0xbb0 [ 99.702866][ T5075] task_work_run+0x14d/0x240 [ 99.707491][ T5075] ? task_work_cancel+0x30/0x30 [ 99.712516][ T5075] ? do_raw_spin_unlock+0x173/0x230 [ 99.717767][ T5075] do_exit+0xa92/0x2ae0 [ 99.721958][ T5075] ? do_group_exit+0x1c5/0x2a0 [ 99.726769][ T5075] ? reacquire_held_locks+0x4c0/0x4c0 [ 99.732205][ T5075] ? do_raw_spin_lock+0x12e/0x2b0 [ 99.737257][ T5075] ? mm_update_next_owner+0x840/0x840 [ 99.742654][ T5075] ? spin_bug+0x1d0/0x1d0 [ 99.747018][ T5075] do_group_exit+0xd4/0x2a0 [ 99.751568][ T5075] __x64_sys_exit_group+0x3e/0x50 [ 99.756645][ T5075] do_syscall_64+0x40/0x110 [ 99.761233][ T5075] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 99.767185][ T5075] RIP: 0033:0x7f8ccb161d79 [ 99.771634][ T5075] Code: Unable to access opcode bytes at 0x7f8ccb161d4f. [ 99.778667][ T5075] RSP: 002b:00007ffce6b9dbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 99.787113][ T5075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ccb161d79 [ 99.795283][ T5075] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 99.803393][ T5075] RBP: 00007f8ccb1dc290 R08: ffffffffffffffb8 R09: 00007ffce6b9ddf8 [ 99.811402][ T5075] R10: 00007ffce6b9ddf8 R11: 0000000000000246 R12: 00007f8ccb1dc290 [ 99.819572][ T5075] R13: 0000000000000000 R14: 00007f8ccb1dcce0 R15: 00007f8ccb133b40 [ 99.827588][ T5075] [ 99.830867][ T5075] Kernel Offset: disabled [ 99.835312][ T5075] Rebooting in 86400 seconds..