program:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0xffffff47}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20040005, 0x0, 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0xef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
close(r0)
[ 92.368185][ T45] Bluetooth: hci0: command tx timeout
[ 92.387834][ T9] cfg80211: failed to load regulatory.db
[ 92.842483][ T5330] TCP: out of memory -- consider tuning tcp_mem
[ 92.847803][ T5330] ------------[ cut here ]------------
[ 92.851082][ T5330] WARNING: CPU: 0 PID: 5330 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730
[ 92.855426][ T5330] Modules linked in:
[ 92.858078][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full)
[ 92.862220][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 92.867110][ T5330] RIP: 0010:inet_sock_destruct+0x623/0x730
[ 92.870979][ T5330] Code: 0f 0b 90 e9 62 fe ff ff e8 8a ee d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c ee d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e ee d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[ 92.879979][ T5330] RSP: 0018:ffffc9000d1b7c58 EFLAGS: 00010293
[ 92.882483][ T5330] RAX: ffffffff89ee7082 RBX: dffffc0000000000 RCX: ffff88800011a440
[ 92.885932][ T5330] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 92.889546][ T5330] RBP: 0000000080000000 R08: ffff8880418c8f5f R09: 1ffff110083191eb
[ 92.893175][ T5330] R10: dffffc0000000000 R11: ffffed10083191ec R12: ffff8880418c8cc0
[ 92.896967][ T5330] R13: dffffc0000000000 R14: ffff8880418c8f44 R15: 1ffff1100831919a
[ 92.900779][ T5330] FS: 00005555811a8500(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000
[ 92.904493][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.907236][ T5330] CR2: 00007fca313d3fc8 CR3: 00000000439cd000 CR4: 0000000000352ef0
[ 92.910645][ T5330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 92.915526][ T5330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 92.920714][ T5330] Call Trace:
[ 92.922299][ T5330]
[ 92.923533][ T5330] ? netlink_has_listeners+0x339/0x3f0
[ 92.926017][ T5330] ? __pfx_inet_sock_destruct+0x10/0x10
[ 92.928544][ T5330] __sk_destruct+0x86/0x660
[ 92.930624][ T5330] inet_release+0x187/0x210
[ 92.932592][ T5330] sock_close+0xc0/0x240
[ 92.934511][ T5330] ? __pfx_sock_close+0x10/0x10
[ 92.936594][ T5330] __fput+0x44c/0xa70
[ 92.938572][ T5330] task_work_run+0x1d1/0x260
[ 92.940615][ T5330] ? __pfx_task_work_run+0x10/0x10
[ 92.943003][ T5330] ? exit_to_user_mode_loop+0x40/0x110
[ 92.945538][ T5330] exit_to_user_mode_loop+0xec/0x110
[ 92.948398][ T5330] do_syscall_64+0x2bd/0x3b0
[ 92.951290][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.954146][ T5330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 92.956769][ T5330] ? clear_bhb_loop+0x60/0xb0
[ 92.959240][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.961923][ T5330] RIP: 0033:0x7fca34f8e929
[ 92.963946][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 92.972323][ T5330] RSP: 002b:00007fff4fdb6058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 92.975744][ T5330] RAX: 0000000000000000 RBX: 00007fca351b7ba0 RCX: 00007fca34f8e929
[ 92.979430][ T5330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 92.983442][ T5330] RBP: 00007fca351b7ba0 R08: 000000000000c224 R09: 0000000f4fdb634f
[ 92.987219][ T5330] R10: 0000000000df3ba8 R11: 0000000000000246 R12: 0000000000016bf7
[ 92.990962][ T5330] R13: 00007fca351b6080 R14: ffffffffffffffff R15: 00007fff4fdb6170
[ 92.994368][ T5330]
[ 92.995909][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.999110][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full)
[ 93.003466][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.008252][ T5330] Call Trace:
[ 93.009716][ T5330]
[ 93.011072][ T5330] dump_stack_lvl+0x99/0x250
[ 93.013211][ T5330] ? __asan_memcpy+0x40/0x70
[ 93.015486][ T5330] ? __pfx_dump_stack_lvl+0x10/0x10
[ 93.018126][ T5330] ? __pfx__printk+0x10/0x10
[ 93.020346][ T5330] panic+0x2db/0x790
[ 93.022243][ T5330] ? __pfx_panic+0x10/0x10
[ 93.024346][ T5330] __warn+0x31b/0x4b0
[ 93.026302][ T5330] ? inet_sock_destruct+0x623/0x730
[ 93.028909][ T5330] ? inet_sock_destruct+0x623/0x730
[ 93.031876][ T5330] report_bug+0x2be/0x4f0
[ 93.034474][ T5330] ? inet_sock_destruct+0x623/0x730
[ 93.037119][ T5330] ? inet_sock_destruct+0x623/0x730
[ 93.039441][ T5330] ? inet_sock_destruct+0x625/0x730
[ 93.041846][ T5330] handle_bug+0x84/0x160
[ 93.043899][ T5330] exc_invalid_op+0x1a/0x50
[ 93.045811][ T5330] asm_exc_invalid_op+0x1a/0x20
[ 93.047836][ T5330] RIP: 0010:inet_sock_destruct+0x623/0x730
[ 93.050459][ T5330] Code: 0f 0b 90 e9 62 fe ff ff e8 8a ee d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c ee d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e ee d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[ 93.060053][ T5330] RSP: 0018:ffffc9000d1b7c58 EFLAGS: 00010293
[ 93.062884][ T5330] RAX: ffffffff89ee7082 RBX: dffffc0000000000 RCX: ffff88800011a440
[ 93.066772][ T5330] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 93.070776][ T5330] RBP: 0000000080000000 R08: ffff8880418c8f5f R09: 1ffff110083191eb
[ 93.074607][ T5330] R10: dffffc0000000000 R11: ffffed10083191ec R12: ffff8880418c8cc0
[ 93.079088][ T5330] R13: dffffc0000000000 R14: ffff8880418c8f44 R15: 1ffff1100831919a
[ 93.082664][ T5330] ? inet_sock_destruct+0x622/0x730
[ 93.084780][ T5330] ? inet_sock_destruct+0x622/0x730
[ 93.086965][ T5330] ? netlink_has_listeners+0x339/0x3f0
[ 93.089009][ T5330] ? __pfx_inet_sock_destruct+0x10/0x10
[ 93.091104][ T5330] __sk_destruct+0x86/0x660
[ 93.092817][ T5330] inet_release+0x187/0x210
[ 93.094532][ T5330] sock_close+0xc0/0x240
[ 93.096209][ T5330] ? __pfx_sock_close+0x10/0x10
[ 93.098719][ T5330] __fput+0x44c/0xa70
[ 93.100937][ T5330] task_work_run+0x1d1/0x260
[ 93.103173][ T5330] ? __pfx_task_work_run+0x10/0x10
[ 93.105514][ T5330] ? exit_to_user_mode_loop+0x40/0x110
[ 93.107988][ T5330] exit_to_user_mode_loop+0xec/0x110
[ 93.110395][ T5330] do_syscall_64+0x2bd/0x3b0
[ 93.112325][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.114940][ T5330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 93.117782][ T5330] ? clear_bhb_loop+0x60/0xb0
[ 93.120651][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.123962][ T5330] RIP: 0033:0x7fca34f8e929
[ 93.126108][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 93.134617][ T5330] RSP: 002b:00007fff4fdb6058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 93.138408][ T5330] RAX: 0000000000000000 RBX: 00007fca351b7ba0 RCX: 00007fca34f8e929
[ 93.141989][ T5330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 93.146516][ T5330] RBP: 00007fca351b7ba0 R08: 000000000000c224 R09: 0000000f4fdb634f
[ 93.150436][ T5330] R10: 0000000000df3ba8 R11: 0000000000000246 R12: 0000000000016bf7
[ 93.154197][ T5330] R13: 00007fca351b6080 R14: ffffffffffffffff R15: 00007fff4fdb6170
[ 93.157844][ T5330]
[ 93.159643][ T5330] Kernel Offset: disabled
[ 93.161939][ T5330] Rebooting in 86400 seconds..