program: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000009c0)='\\', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0xfffffff9}], 0x3}}], 0x4, 0x4048841) [ 85.434748][ T5302] Bluetooth: hci0: command tx timeout [ 85.566440][ T5324] TCP: out of memory -- consider tuning tcp_mem [ 85.594291][ T5324] ------------[ cut here ]------------ [ 85.596770][ T5324] WARNING: CPU: 0 PID: 5324 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 85.601255][ T5324] Modules linked in: [ 85.603489][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 85.609491][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.614603][ T5324] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 85.617356][ T5324] Code: 0f 0b 90 e9 62 fe ff ff e8 8a 9b d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c 9b d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e 9b d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 85.626689][ T5324] RSP: 0018:ffffc9000d4d7c58 EFLAGS: 00010293 [ 85.629980][ T5324] RAX: ffffffff89eeb1b2 RBX: dffffc0000000000 RCX: ffff88800079c880 [ 85.633316][ T5324] RDX: 0000000000000000 RSI: 000000008000c000 RDI: 0000000000000000 [ 85.636693][ T5324] RBP: 000000008000c000 R08: ffff888043abdbdf R09: 1ffff11008757b7b [ 85.640603][ T5324] R10: dffffc0000000000 R11: ffffed1008757b7c R12: ffff888043abd940 [ 85.643972][ T5324] R13: dffffc0000000000 R14: ffff888043abdbc4 R15: 1ffff11008757b2a [ 85.647352][ T5324] FS: 000055556d8c7500(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 85.651392][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.654188][ T5324] CR2: 00007ffd15af9220 CR3: 000000003305c000 CR4: 0000000000352ef0 [ 85.657704][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.661117][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.664465][ T5324] Call Trace: [ 85.665899][ T5324] [ 85.667213][ T5324] ? netlink_has_listeners+0x339/0x3f0 [ 85.669716][ T5324] ? __pfx_inet_sock_destruct+0x10/0x10 [ 85.671921][ T5324] __sk_destruct+0x89/0x660 [ 85.673809][ T5324] inet_release+0x187/0x210 [ 85.675792][ T5324] sock_close+0xc3/0x240 [ 85.677611][ T5324] ? __pfx_sock_close+0x10/0x10 [ 85.679864][ T5324] __fput+0x44c/0xa70 [ 85.681747][ T5324] task_work_run+0x1d1/0x260 [ 85.683916][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 85.686203][ T5324] ? exit_to_user_mode_loop+0x40/0x110 [ 85.688674][ T5324] exit_to_user_mode_loop+0xec/0x110 [ 85.690933][ T5324] do_syscall_64+0x2bd/0x3b0 [ 85.692968][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.695329][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.697991][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 85.700244][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.702878][ T5324] RIP: 0033:0x7f114a38e929 [ 85.704809][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.713187][ T5324] RSP: 002b:00007ffd6573fc58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 85.716737][ T5324] RAX: 0000000000000000 RBX: 0000000000014d8a RCX: 00007f114a38e929 [ 85.720282][ T5324] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 85.723716][ T5324] RBP: 00007f114a5b7ba0 R08: 0000000000000001 R09: 000000076573ff4f [ 85.727692][ T5324] R10: 00007f114a1ff02c R11: 0000000000000246 R12: 00007f114a5b5fac [ 85.731424][ T5324] R13: 00007f114a5b5fa0 R14: ffffffffffffffff R15: 00007ffd6573fd70 [ 85.734733][ T5324] [ 85.736083][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.739048][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 85.743878][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.748569][ T5324] Call Trace: [ 85.750095][ T5324] [ 85.751413][ T5324] dump_stack_lvl+0x99/0x250 [ 85.753452][ T5324] ? __asan_memcpy+0x40/0x70 [ 85.755503][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.757894][ T5324] ? __pfx__printk+0x10/0x10 [ 85.760044][ T5324] panic+0x2db/0x790 [ 85.761773][ T5324] ? __pfx_panic+0x10/0x10 [ 85.763736][ T5324] __warn+0x31b/0x4b0 [ 85.765505][ T5324] ? inet_sock_destruct+0x623/0x730 [ 85.767901][ T5324] ? inet_sock_destruct+0x623/0x730 [ 85.770144][ T5324] report_bug+0x2be/0x4f0 [ 85.772045][ T5324] ? inet_sock_destruct+0x623/0x730 [ 85.774263][ T5324] ? inet_sock_destruct+0x623/0x730 [ 85.776370][ T5324] ? inet_sock_destruct+0x625/0x730 [ 85.778701][ T5324] handle_bug+0x84/0x160 [ 85.780607][ T5324] exc_invalid_op+0x1a/0x50 [ 85.782680][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 85.784771][ T5324] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 85.787327][ T5324] Code: 0f 0b 90 e9 62 fe ff ff e8 8a 9b d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c 9b d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e 9b d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 85.795317][ T5324] RSP: 0018:ffffc9000d4d7c58 EFLAGS: 00010293 [ 85.797740][ T5324] RAX: ffffffff89eeb1b2 RBX: dffffc0000000000 RCX: ffff88800079c880 [ 85.801336][ T5324] RDX: 0000000000000000 RSI: 000000008000c000 RDI: 0000000000000000 [ 85.804809][ T5324] RBP: 000000008000c000 R08: ffff888043abdbdf R09: 1ffff11008757b7b [ 85.808261][ T5324] R10: dffffc0000000000 R11: ffffed1008757b7c R12: ffff888043abd940 [ 85.811711][ T5324] R13: dffffc0000000000 R14: ffff888043abdbc4 R15: 1ffff11008757b2a [ 85.814896][ T5324] ? inet_sock_destruct+0x622/0x730 [ 85.816974][ T5324] ? inet_sock_destruct+0x622/0x730 [ 85.819521][ T5324] ? netlink_has_listeners+0x339/0x3f0 [ 85.821749][ T5324] ? __pfx_inet_sock_destruct+0x10/0x10 [ 85.824166][ T5324] __sk_destruct+0x89/0x660 [ 85.826067][ T5324] inet_release+0x187/0x210 [ 85.828253][ T5324] sock_close+0xc3/0x240 [ 85.830198][ T5324] ? __pfx_sock_close+0x10/0x10 [ 85.832376][ T5324] __fput+0x44c/0xa70 [ 85.834098][ T5324] task_work_run+0x1d1/0x260 [ 85.836098][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 85.838234][ T5324] ? exit_to_user_mode_loop+0x40/0x110 [ 85.840626][ T5324] exit_to_user_mode_loop+0xec/0x110 [ 85.842838][ T5324] do_syscall_64+0x2bd/0x3b0 [ 85.844788][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.847107][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.849637][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 85.851667][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.854381][ T5324] RIP: 0033:0x7f114a38e929 [ 85.856272][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.864184][ T5324] RSP: 002b:00007ffd6573fc58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 85.867661][ T5324] RAX: 0000000000000000 RBX: 0000000000014d8a RCX: 00007f114a38e929 [ 85.870915][ T5324] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 85.874189][ T5324] RBP: 00007f114a5b7ba0 R08: 0000000000000001 R09: 000000076573ff4f [ 85.877440][ T5324] R10: 00007f114a1ff02c R11: 0000000000000246 R12: 00007f114a5b5fac [ 85.880634][ T5324] R13: 00007f114a5b5fa0 R14: ffffffffffffffff R15: 00007ffd6573fd70 [ 85.883927][ T5324] [ 85.885569][ T5324] Kernel Offset: disabled [ 85.887388][ T5324] Rebooting in 86400 seconds..