program: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9d4, &(0x7f00000001c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='U', 0x1}]) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000880)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff88801fe0f000, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000f0ff00000000ade50700000000000045", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000280), 0x20000000}, 0x20) recvmmsg$unix(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/134, 0x86}], 0x1}}], 0x2, 0x40002042, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@local, 0x0, r7}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaacce390677742810018008600000000ed00102c00fc010000000000000000000000000000fe88000000000000000000000000000100000000040190780088263300000000"], 0x0) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0xffffffc3}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb"}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@initdev, @in6=@private2}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001080)={{{@in6=@private0, @in=@dev}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) [ 73.327447][ T5307] Bluetooth: hci0: command tx timeout [ 73.454226][ T5323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.461339][ T5322] TCP: out of memory -- consider tuning tcp_mem [ 73.467328][ T5322] ------------[ cut here ]------------ [ 73.469628][ T5322] WARNING: CPU: 0 PID: 5322 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x6fc/0x810 [ 73.473148][ T5322] Modules linked in: [ 73.474507][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 73.478928][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.483074][ T5322] RIP: 0010:inet_sock_destruct+0x6fc/0x810 [ 73.485504][ T5322] Code: 62 f7 90 0f 0b 90 e9 17 fe ff ff e8 fe f3 62 f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 f3 62 f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 73.492733][ T5322] RSP: 0018:ffffc9000d3b7c58 EFLAGS: 00010293 [ 73.495229][ T5322] RAX: ffffffff8a3c6a5b RBX: 0000000080002000 RCX: ffff888000c34880 [ 73.498494][ T5322] RDX: 0000000000000000 RSI: 0000000080002000 RDI: 0000000000000000 [ 73.501368][ T5322] RBP: ffff88803f36d940 R08: ffffffff8a3c690a R09: 1ffff11007e6db7b [ 73.504311][ T5322] R10: dffffc0000000000 R11: ffffed1007e6db7c R12: 1ffff11007e6db2d [ 73.507675][ T5322] R13: ffff88803f36de28 R14: ffff88803f36d968 R15: ffff88803f36d952 [ 73.510749][ T5322] FS: 000055558b30c500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 73.514032][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.516560][ T5322] CR2: 00000000200014c0 CR3: 0000000040b22000 CR4: 0000000000352ef0 [ 73.519481][ T5322] DR0: ffff88801fe0f000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.522510][ T5322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 73.525687][ T5322] Call Trace: [ 73.527044][ T5322] [ 73.528182][ T5322] ? __warn+0x165/0x4d0 [ 73.529711][ T5322] ? inet_sock_destruct+0x6fc/0x810 [ 73.531673][ T5322] ? report_bug+0x2b3/0x500 [ 73.533349][ T5322] ? inet_sock_destruct+0x6fc/0x810 [ 73.535542][ T5322] ? handle_bug+0x60/0x90 [ 73.537222][ T5322] ? exc_invalid_op+0x1a/0x50 [ 73.539021][ T5322] ? asm_exc_invalid_op+0x1a/0x20 [ 73.540920][ T5322] ? inet_sock_destruct+0x5aa/0x810 [ 73.542939][ T5322] ? inet_sock_destruct+0x6fb/0x810 [ 73.544882][ T5322] ? inet_sock_destruct+0x6fc/0x810 [ 73.547030][ T5322] ? inet_sock_destruct+0x6fb/0x810 [ 73.549012][ T5322] ? __pfx_inet_sock_destruct+0x10/0x10 [ 73.551191][ T5322] __sk_destruct+0x58/0x5f0 [ 73.552912][ T5322] ? __sk_free+0x333/0x460 [ 73.554590][ T5322] inet_release+0x17d/0x200 [ 73.556603][ T5322] sock_close+0xbc/0x240 [ 73.558273][ T5322] ? __pfx_sock_close+0x10/0x10 [ 73.560100][ T5322] __fput+0x23c/0xa50 [ 73.561629][ T5322] task_work_run+0x24f/0x310 [ 73.563432][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 73.565463][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 73.567519][ T5322] ? syscall_exit_to_user_mode+0xa3/0x340 [ 73.569679][ T5322] syscall_exit_to_user_mode+0x13f/0x340 [ 73.571839][ T5322] do_syscall_64+0x100/0x230 [ 73.573429][ T5322] ? clear_bhb_loop+0x35/0x90 [ 73.575222][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.577340][ T5322] RIP: 0033:0x7f1301b7ff19 [ 73.578921][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.585575][ T5322] RSP: 002b:00007ffc2ccfda58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 73.588568][ T5322] RAX: 0000000000000000 RBX: 0000000000011e45 RCX: 00007f1301b7ff19 [ 73.591527][ T5322] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 73.594506][ T5322] RBP: 00007f1301d47ba0 R08: 0000000000000001 R09: 00007ffc2ccfdd3f [ 73.597665][ T5322] R10: 00007f13019ff02c R11: 0000000000000246 R12: 0000000000011e9f [ 73.601263][ T5322] R13: 00007f1301d45fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 73.604235][ T5322] [ 73.605683][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.608460][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 73.612466][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.616530][ T5322] Call Trace: [ 73.617834][ T5322] [ 73.618980][ T5322] dump_stack_lvl+0x241/0x360 [ 73.620782][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.622791][ T5322] ? __pfx__printk+0x10/0x10 [ 73.624582][ T5322] ? vscnprintf+0x5d/0x90 [ 73.626259][ T5322] panic+0x349/0x880 [ 73.627856][ T5322] ? __warn+0x174/0x4d0 [ 73.629486][ T5322] ? __pfx_panic+0x10/0x10 [ 73.631266][ T5322] __warn+0x344/0x4d0 [ 73.632791][ T5322] ? inet_sock_destruct+0x6fc/0x810 [ 73.634961][ T5322] report_bug+0x2b3/0x500 [ 73.636645][ T5322] ? inet_sock_destruct+0x6fc/0x810 [ 73.638514][ T5322] handle_bug+0x60/0x90 [ 73.640006][ T5322] exc_invalid_op+0x1a/0x50 [ 73.641619][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 73.643395][ T5322] RIP: 0010:inet_sock_destruct+0x6fc/0x810 [ 73.645451][ T5322] Code: 62 f7 90 0f 0b 90 e9 17 fe ff ff e8 fe f3 62 f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 f3 62 f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 73.652396][ T5322] RSP: 0018:ffffc9000d3b7c58 EFLAGS: 00010293 [ 73.654776][ T5322] RAX: ffffffff8a3c6a5b RBX: 0000000080002000 RCX: ffff888000c34880 [ 73.657965][ T5322] RDX: 0000000000000000 RSI: 0000000080002000 RDI: 0000000000000000 [ 73.661180][ T5322] RBP: ffff88803f36d940 R08: ffffffff8a3c690a R09: 1ffff11007e6db7b [ 73.664305][ T5322] R10: dffffc0000000000 R11: ffffed1007e6db7c R12: 1ffff11007e6db2d [ 73.667300][ T5322] R13: ffff88803f36de28 R14: ffff88803f36d968 R15: ffff88803f36d952 [ 73.670423][ T5322] ? inet_sock_destruct+0x5aa/0x810 [ 73.672490][ T5322] ? inet_sock_destruct+0x6fb/0x810 [ 73.674554][ T5322] ? inet_sock_destruct+0x6fb/0x810 [ 73.676643][ T5322] ? __pfx_inet_sock_destruct+0x10/0x10 [ 73.678864][ T5322] __sk_destruct+0x58/0x5f0 [ 73.680690][ T5322] ? __sk_free+0x333/0x460 [ 73.682445][ T5322] inet_release+0x17d/0x200 [ 73.684324][ T5322] sock_close+0xbc/0x240 [ 73.686042][ T5322] ? __pfx_sock_close+0x10/0x10 [ 73.688027][ T5322] __fput+0x23c/0xa50 [ 73.689631][ T5322] task_work_run+0x24f/0x310 [ 73.691483][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 73.693465][ T5322] ? __pfx_task_work_run+0x10/0x10 [ 73.695499][ T5322] ? syscall_exit_to_user_mode+0xa3/0x340 [ 73.697718][ T5322] syscall_exit_to_user_mode+0x13f/0x340 [ 73.699913][ T5322] do_syscall_64+0x100/0x230 [ 73.701723][ T5322] ? clear_bhb_loop+0x35/0x90 [ 73.703566][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.705878][ T5322] RIP: 0033:0x7f1301b7ff19 [ 73.707685][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.715329][ T5322] RSP: 002b:00007ffc2ccfda58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 73.718600][ T5322] RAX: 0000000000000000 RBX: 0000000000011e45 RCX: 00007f1301b7ff19 [ 73.721799][ T5322] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 73.724869][ T5322] RBP: 00007f1301d47ba0 R08: 0000000000000001 R09: 00007ffc2ccfdd3f [ 73.728115][ T5322] R10: 00007f13019ff02c R11: 0000000000000246 R12: 0000000000011e9f [ 73.731155][ T5322] R13: 00007f1301d45fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 73.734302][ T5322] [ 73.735766][ T5322] Kernel Offset: disabled [ 73.737517][ T5322] Rebooting in 86400 seconds..