program: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) [ 73.297327][ T4673] Bluetooth: hci0: command tx timeout [ 73.410852][ T5323] TCP: out of memory -- consider tuning tcp_mem [ 73.416085][ T5323] ------------[ cut here ]------------ [ 73.418944][ T5323] WARNING: CPU: 0 PID: 5323 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 73.423288][ T5323] Modules linked in: [ 73.425282][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 73.431365][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.436561][ T5323] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 73.439376][ T5323] Code: 0f 0b 90 e9 62 fe ff ff e8 5a f9 d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c f9 d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e f9 d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 73.447965][ T5323] RSP: 0018:ffffc9000d2cfab8 EFLAGS: 00010293 [ 73.451432][ T5323] RAX: ffffffff89ee62e2 RBX: dffffc0000000000 RCX: ffff888000f5c880 [ 73.455306][ T5323] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 73.459173][ T5323] RBP: 0000000080000000 R08: ffff888030f4b59f R09: 1ffff110061e96b3 [ 73.462554][ T5323] R10: dffffc0000000000 R11: ffffed10061e96b4 R12: ffff888030f4b300 [ 73.465931][ T5323] R13: dffffc0000000000 R14: ffff888030f4b584 R15: 1ffff110061e9662 [ 73.470098][ T5323] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 73.474339][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.477180][ T5323] CR2: 00007fff87471f00 CR3: 0000000051b1b000 CR4: 0000000000352ef0 [ 73.480631][ T5323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.484400][ T5323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.488042][ T5323] Call Trace: [ 73.489723][ T5323] [ 73.491355][ T5323] ? netlink_has_listeners+0x339/0x3f0 [ 73.494167][ T5323] ? __pfx_inet_sock_destruct+0x10/0x10 [ 73.496550][ T5323] __sk_destruct+0x89/0x660 [ 73.498553][ T5323] inet_release+0x184/0x210 [ 73.500247][ T5323] sock_close+0xc3/0x240 [ 73.502027][ T5323] ? __pfx_sock_close+0x10/0x10 [ 73.504146][ T5323] __fput+0x44c/0xa70 [ 73.505988][ T5323] task_work_run+0x1d1/0x260 [ 73.508383][ T5323] ? __pfx_task_work_run+0x10/0x10 [ 73.510769][ T5323] do_exit+0x6ad/0x22e0 [ 73.512766][ T5323] ? preempt_schedule_common+0x83/0xd0 [ 73.515074][ T5323] ? preempt_schedule+0xae/0xc0 [ 73.517147][ T5323] ? __pfx_do_exit+0x10/0x10 [ 73.518995][ T5323] ? preempt_schedule_thunk+0x16/0x30 [ 73.521132][ T5323] do_group_exit+0x21c/0x2d0 [ 73.523282][ T5323] __x64_sys_exit_group+0x3f/0x40 [ 73.525820][ T5323] x64_sys_call+0x21ba/0x21c0 [ 73.528109][ T5323] do_syscall_64+0xfa/0x3b0 [ 73.530110][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 73.532188][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.534612][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 73.536532][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.539117][ T5323] RIP: 0033:0x7fc7f118e929 [ 73.540870][ T5323] Code: Unable to access opcode bytes at 0x7fc7f118e8ff. [ 73.543459][ T5323] RSP: 002b:00007fff87471af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 73.546736][ T5323] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc7f118e929 [ 73.550506][ T5323] RDX: 00007fc7f1145f37 RSI: 0000000000000000 RDI: 000000000000000b [ 73.554933][ T5323] RBP: 0000000000000003 R08: 00007fff874726c7 R09: 000000000000000b [ 73.558920][ T5323] R10: 00007fc7f13b5fa0 R11: 0000000000000246 R12: 00007fc7f13b624c [ 73.562388][ T5323] R13: 00007fc7f13b6240 R14: 000000000000166e R15: 0000000000000003 [ 73.565537][ T5323] [ 73.567202][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.570832][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 73.575392][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.579470][ T5323] Call Trace: [ 73.580812][ T5323] [ 73.582082][ T5323] dump_stack_lvl+0x99/0x250 [ 73.584231][ T5323] ? __asan_memcpy+0x40/0x70 [ 73.586489][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.588716][ T5323] ? __pfx__printk+0x10/0x10 [ 73.590663][ T5323] panic+0x2db/0x790 [ 73.592209][ T5323] ? __pfx_panic+0x10/0x10 [ 73.594511][ T5323] __warn+0x31b/0x4b0 [ 73.596254][ T5323] ? inet_sock_destruct+0x623/0x730 [ 73.598491][ T5323] ? inet_sock_destruct+0x623/0x730 [ 73.600590][ T5323] report_bug+0x2be/0x4f0 [ 73.602257][ T5323] ? inet_sock_destruct+0x623/0x730 [ 73.604584][ T5323] ? inet_sock_destruct+0x623/0x730 [ 73.607142][ T5323] ? inet_sock_destruct+0x625/0x730 [ 73.609925][ T5323] handle_bug+0x84/0x160 [ 73.612151][ T5323] exc_invalid_op+0x1a/0x50 [ 73.614238][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 73.616398][ T5323] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 73.618950][ T5323] Code: 0f 0b 90 e9 62 fe ff ff e8 5a f9 d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 4c f9 d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 3e f9 d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 73.627950][ T5323] RSP: 0018:ffffc9000d2cfab8 EFLAGS: 00010293 [ 73.630568][ T5323] RAX: ffffffff89ee62e2 RBX: dffffc0000000000 RCX: ffff888000f5c880 [ 73.634211][ T5323] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 73.638271][ T5323] RBP: 0000000080000000 R08: ffff888030f4b59f R09: 1ffff110061e96b3 [ 73.641888][ T5323] R10: dffffc0000000000 R11: ffffed10061e96b4 R12: ffff888030f4b300 [ 73.645432][ T5323] R13: dffffc0000000000 R14: ffff888030f4b584 R15: 1ffff110061e9662 [ 73.649251][ T5323] ? inet_sock_destruct+0x622/0x730 [ 73.651847][ T5323] ? inet_sock_destruct+0x622/0x730 [ 73.654344][ T5323] ? netlink_has_listeners+0x339/0x3f0 [ 73.656731][ T5323] ? __pfx_inet_sock_destruct+0x10/0x10 [ 73.659263][ T5323] __sk_destruct+0x89/0x660 [ 73.661581][ T5323] inet_release+0x184/0x210 [ 73.663908][ T5323] sock_close+0xc3/0x240 [ 73.665882][ T5323] ? __pfx_sock_close+0x10/0x10 [ 73.668054][ T5323] __fput+0x44c/0xa70 [ 73.670043][ T5323] task_work_run+0x1d1/0x260 [ 73.672087][ T5323] ? __pfx_task_work_run+0x10/0x10 [ 73.674592][ T5323] do_exit+0x6ad/0x22e0 [ 73.676878][ T5323] ? preempt_schedule_common+0x83/0xd0 [ 73.679444][ T5323] ? preempt_schedule+0xae/0xc0 [ 73.681625][ T5323] ? __pfx_do_exit+0x10/0x10 [ 73.683785][ T5323] ? preempt_schedule_thunk+0x16/0x30 [ 73.686123][ T5323] do_group_exit+0x21c/0x2d0 [ 73.688294][ T5323] __x64_sys_exit_group+0x3f/0x40 [ 73.690814][ T5323] x64_sys_call+0x21ba/0x21c0 [ 73.693323][ T5323] do_syscall_64+0xfa/0x3b0 [ 73.695544][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 73.697916][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.700541][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 73.702785][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.705824][ T5323] RIP: 0033:0x7fc7f118e929 [ 73.708291][ T5323] Code: Unable to access opcode bytes at 0x7fc7f118e8ff. [ 73.711575][ T5323] RSP: 002b:00007fff87471af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 73.715343][ T5323] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc7f118e929 [ 73.718988][ T5323] RDX: 00007fc7f1145f37 RSI: 0000000000000000 RDI: 000000000000000b [ 73.722847][ T5323] RBP: 0000000000000003 R08: 00007fff874726c7 R09: 000000000000000b [ 73.726965][ T5323] R10: 00007fc7f13b5fa0 R11: 0000000000000246 R12: 00007fc7f13b624c [ 73.730628][ T5323] R13: 00007fc7f13b6240 R14: 000000000000166e R15: 0000000000000003 [ 73.734372][ T5323] [ 73.736355][ T5323] Kernel Offset: disabled [ 73.738704][ T5323] Rebooting in 86400 seconds..