program: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) (async) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xffffffffffffffb6) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x0, 0x8}, @window={0x3, 0x400, 0x7}], 0x2) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) [ 75.682237][ T5301] Bluetooth: hci0: command tx timeout [ 75.752694][ T5317] deleting an unspecified loop device is not supported. [ 75.790634][ T5316] TCP: out of memory -- consider tuning tcp_mem [ 75.794427][ T5316] ------------[ cut here ]------------ [ 75.796673][ T5316] WARNING: CPU: 0 PID: 5316 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 75.800573][ T5316] Modules linked in: [ 75.802168][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 75.806887][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.811227][ T5316] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 75.813468][ T5316] Code: 0f 0b 90 e9 62 fe ff ff e8 ba 55 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 ac 55 e0 f7 90 0f 0b 90 e9 bb fe ff ff e8 9e 55 e0 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 75.820993][ T5316] RSP: 0018:ffffc9000d497ab8 EFLAGS: 00010293 [ 75.823258][ T5316] RAX: ffffffff89df6902 RBX: dffffc0000000000 RCX: ffff88801e2e2440 [ 75.826144][ T5316] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.829589][ T5316] RBP: 0000000080000000 R08: ffff88803f885bdf R09: 1ffff11007f10b7b [ 75.832596][ T5316] R10: dffffc0000000000 R11: ffffed1007f10b7c R12: ffff88803f885940 [ 75.835567][ T5316] R13: dffffc0000000000 R14: ffff88803f885bc4 R15: 1ffff11007f10b2a [ 75.838990][ T5316] FS: 0000000000000000(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 75.842381][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.844792][ T5316] CR2: 00007ffd62bfab80 CR3: 0000000035872000 CR4: 0000000000352ef0 [ 75.847832][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.851089][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.854074][ T5316] Call Trace: [ 75.855313][ T5316] [ 75.856688][ T5316] ? netlink_has_listeners+0x339/0x3f0 [ 75.859370][ T5316] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.861523][ T5316] __sk_destruct+0x86/0x660 [ 75.863240][ T5316] inet_release+0x184/0x210 [ 75.864972][ T5316] sock_close+0xc0/0x240 [ 75.866663][ T5316] ? __pfx_sock_close+0x10/0x10 [ 75.868587][ T5316] __fput+0x449/0xa70 [ 75.870255][ T5316] task_work_run+0x1d1/0x260 [ 75.871998][ T5316] ? __pfx_task_work_run+0x10/0x10 [ 75.874028][ T5316] do_exit+0x8d6/0x2550 [ 75.875698][ T5316] ? preempt_schedule_common+0x83/0xd0 [ 75.878083][ T5316] ? preempt_schedule+0xae/0xc0 [ 75.879925][ T5316] ? __pfx_do_exit+0x10/0x10 [ 75.881768][ T5316] ? preempt_schedule_thunk+0x16/0x30 [ 75.883801][ T5316] do_group_exit+0x21c/0x2d0 [ 75.885536][ T5316] __x64_sys_exit_group+0x3f/0x40 [ 75.887671][ T5316] x64_sys_call+0x21ba/0x21c0 [ 75.889544][ T5316] do_syscall_64+0xf6/0x210 [ 75.891354][ T5316] ? clear_bhb_loop+0x45/0xa0 [ 75.893196][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.895502][ T5316] RIP: 0033:0x7f0bd8d8e969 [ 75.898110][ T5316] Code: Unable to access opcode bytes at 0x7f0bd8d8e93f. [ 75.900811][ T5316] RSP: 002b:00007ffd62bfa778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 75.903929][ T5316] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0bd8d8e969 [ 75.906851][ T5316] RDX: 00007f0bd8d45f57 RSI: 0000000000000000 RDI: 000000000000000b [ 75.910039][ T5316] RBP: 0000000000000003 R08: 00007ffd62bfb367 R09: 000000000000000b [ 75.913091][ T5316] R10: 00007f0bd8fb5fa0 R11: 0000000000000246 R12: 00007f0bd8fb624c [ 75.916490][ T5316] R13: 00007f0bd8fb6240 R14: 00000000000000a8 R15: 0000000000000003 [ 75.920326][ T5316] [ 75.921529][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.924148][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 75.928207][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.932097][ T5316] Call Trace: [ 75.933507][ T5316] [ 75.934645][ T5316] dump_stack_lvl+0x99/0x250 [ 75.936229][ T5316] ? __asan_memcpy+0x40/0x70 [ 75.937930][ T5316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.940048][ T5316] ? __pfx__printk+0x10/0x10 [ 75.941650][ T5316] panic+0x2db/0x790 [ 75.943005][ T5316] ? __pfx_panic+0x10/0x10 [ 75.944584][ T5316] __warn+0x31b/0x4b0 [ 75.946143][ T5316] ? inet_sock_destruct+0x623/0x730 [ 75.948163][ T5316] ? inet_sock_destruct+0x623/0x730 [ 75.950123][ T5316] report_bug+0x2be/0x4f0 [ 75.951712][ T5316] ? inet_sock_destruct+0x623/0x730 [ 75.953637][ T5316] ? inet_sock_destruct+0x623/0x730 [ 75.955527][ T5316] ? inet_sock_destruct+0x625/0x730 [ 75.957365][ T5316] handle_bug+0x84/0x160 [ 75.958832][ T5316] exc_invalid_op+0x1a/0x50 [ 75.960457][ T5316] asm_exc_invalid_op+0x1a/0x20 [ 75.962123][ T5316] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 75.964139][ T5316] Code: 0f 0b 90 e9 62 fe ff ff e8 ba 55 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 ac 55 e0 f7 90 0f 0b 90 e9 bb fe ff ff e8 9e 55 e0 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 75.970677][ T5316] RSP: 0018:ffffc9000d497ab8 EFLAGS: 00010293 [ 75.972754][ T5316] RAX: ffffffff89df6902 RBX: dffffc0000000000 RCX: ffff88801e2e2440 [ 75.975424][ T5316] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.978219][ T5316] RBP: 0000000080000000 R08: ffff88803f885bdf R09: 1ffff11007f10b7b [ 75.981189][ T5316] R10: dffffc0000000000 R11: ffffed1007f10b7c R12: ffff88803f885940 [ 75.984167][ T5316] R13: dffffc0000000000 R14: ffff88803f885bc4 R15: 1ffff11007f10b2a [ 75.987123][ T5316] ? inet_sock_destruct+0x622/0x730 [ 75.989249][ T5316] ? inet_sock_destruct+0x622/0x730 [ 75.991312][ T5316] ? netlink_has_listeners+0x339/0x3f0 [ 75.993448][ T5316] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.995576][ T5316] __sk_destruct+0x86/0x660 [ 75.997278][ T5316] inet_release+0x184/0x210 [ 75.999063][ T5316] sock_close+0xc0/0x240 [ 76.000632][ T5316] ? __pfx_sock_close+0x10/0x10 [ 76.002516][ T5316] __fput+0x449/0xa70 [ 76.004100][ T5316] task_work_run+0x1d1/0x260 [ 76.005865][ T5316] ? __pfx_task_work_run+0x10/0x10 [ 76.007791][ T5316] do_exit+0x8d6/0x2550 [ 76.009422][ T5316] ? preempt_schedule_common+0x83/0xd0 [ 76.011600][ T5316] ? preempt_schedule+0xae/0xc0 [ 76.013540][ T5316] ? __pfx_do_exit+0x10/0x10 [ 76.015311][ T5316] ? preempt_schedule_thunk+0x16/0x30 [ 76.017353][ T5316] do_group_exit+0x21c/0x2d0 [ 76.019165][ T5316] __x64_sys_exit_group+0x3f/0x40 [ 76.021195][ T5316] x64_sys_call+0x21ba/0x21c0 [ 76.023095][ T5316] do_syscall_64+0xf6/0x210 [ 76.024846][ T5316] ? clear_bhb_loop+0x45/0xa0 [ 76.026668][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.028859][ T5316] RIP: 0033:0x7f0bd8d8e969 [ 76.030637][ T5316] Code: Unable to access opcode bytes at 0x7f0bd8d8e93f. [ 76.033322][ T5316] RSP: 002b:00007ffd62bfa778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 76.036529][ T5316] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0bd8d8e969 [ 76.039471][ T5316] RDX: 00007f0bd8d45f57 RSI: 0000000000000000 RDI: 000000000000000b [ 76.042400][ T5316] RBP: 0000000000000003 R08: 00007ffd62bfb367 R09: 000000000000000b [ 76.045418][ T5316] R10: 00007f0bd8fb5fa0 R11: 0000000000000246 R12: 00007f0bd8fb624c [ 76.048415][ T5316] R13: 00007f0bd8fb6240 R14: 00000000000000a8 R15: 0000000000000003 [ 76.051278][ T5316] [ 76.052791][ T5316] Kernel Offset: disabled [ 76.054312][ T5316] Rebooting in 86400 seconds..