program: socket(0x1d, 0x2, 0x6) (async) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) (async) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (async) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000000010104000000000000000002000008240000018018a9c3df566691f2499fa2672b08000100e000000108000200e00000010000000400108000000000000000000000aa19"], 0x3c}}, 0x0) [ 75.195733][ T5307] Bluetooth: hci0: command tx timeout [ 75.312480][ T5324] TCP: out of memory -- consider tuning tcp_mem [ 75.316366][ T5324] ------------[ cut here ]------------ [ 75.318783][ T5324] WARNING: CPU: 0 PID: 5324 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x638/0x740 [ 75.322370][ T5324] Modules linked in: [ 75.324024][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 75.328827][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.333038][ T5324] RIP: 0010:inet_sock_destruct+0x638/0x740 [ 75.335357][ T5324] Code: 0f 0b 90 e9 5f fe ff ff e8 25 f9 2b f7 90 0f 0b 90 e9 92 fe ff ff e8 17 f9 2b f7 90 0f 0b 90 e9 b8 fe ff ff e8 09 f9 2b f7 90 <0f> 0b 90 e9 de fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fc [ 75.342906][ T5324] RSP: 0018:ffffc9000d4f7c58 EFLAGS: 00010293 [ 75.345204][ T5324] RAX: ffffffff8a96c417 RBX: 0000000080005000 RCX: ffff88801f674880 [ 75.348378][ T5324] RDX: 0000000000000000 RSI: 0000000080005000 RDI: 0000000000000000 [ 75.351527][ T5324] RBP: 0000000000000007 R08: ffffffff8a96c2f1 R09: 1ffff11008264b7b [ 75.354590][ T5324] R10: dffffc0000000000 R11: ffffed1008264b7c R12: ffff888041325940 [ 75.357890][ T5324] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888041325952 [ 75.361133][ T5324] FS: 00007ff24664a6c0(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 [ 75.364562][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.367127][ T5324] CR2: 00002000000014c0 CR3: 0000000041040000 CR4: 0000000000352ef0 [ 75.370485][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.373546][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.376517][ T5324] Call Trace: [ 75.377972][ T5324] [ 75.379210][ T5324] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.381305][ T5324] __sk_destruct+0x8d/0x650 [ 75.383071][ T5324] inet_release+0x17d/0x200 [ 75.385180][ T5324] sock_close+0xbc/0x240 [ 75.387427][ T5324] ? __pfx_sock_close+0x10/0x10 [ 75.389346][ T5324] __fput+0x3e9/0x9f0 [ 75.390877][ T5324] task_work_run+0x251/0x310 [ 75.392821][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 75.394946][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 75.396787][ T5324] ? syscall_exit_to_user_mode+0xa3/0x340 [ 75.399380][ T5324] syscall_exit_to_user_mode+0x13f/0x340 [ 75.401585][ T5324] do_syscall_64+0x100/0x210 [ 75.403440][ T5324] ? clear_bhb_loop+0x45/0xa0 [ 75.405389][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.407802][ T5324] RIP: 0033:0x7ff24578e969 [ 75.409645][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.417568][ T5324] RSP: 002b:00007ff24664a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 75.420885][ T5324] RAX: 0000000000000000 RBX: 00007ff2459b6080 RCX: 00007ff24578e969 [ 75.424454][ T5324] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 75.428072][ T5324] RBP: 00007ff245810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 75.431650][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.434667][ T5324] R13: 0000000000000000 R14: 00007ff2459b6080 R15: 00007fff9e155e48 [ 75.438336][ T5324] [ 75.439703][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.442598][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 75.447112][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.451343][ T5324] Call Trace: [ 75.452691][ T5324] [ 75.453941][ T5324] dump_stack_lvl+0x241/0x360 [ 75.455840][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.457788][ T5324] ? __pfx__printk+0x10/0x10 [ 75.459611][ T5324] ? vscnprintf+0x5d/0x90 [ 75.461405][ T5324] panic+0x349/0x880 [ 75.462738][ T5324] ? __warn+0x174/0x4d0 [ 75.464465][ T5324] ? __pfx_panic+0x10/0x10 [ 75.466283][ T5324] __warn+0x344/0x4d0 [ 75.467746][ T5324] ? inet_sock_destruct+0x638/0x740 [ 75.469834][ T5324] report_bug+0x2b3/0x500 [ 75.471595][ T5324] ? inet_sock_destruct+0x638/0x740 [ 75.473641][ T5324] ? inet_sock_destruct+0x638/0x740 [ 75.475740][ T5324] ? inet_sock_destruct+0x63a/0x740 [ 75.477801][ T5324] handle_bug+0x89/0x170 [ 75.479593][ T5324] exc_invalid_op+0x1a/0x50 [ 75.481484][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 75.483456][ T5324] RIP: 0010:inet_sock_destruct+0x638/0x740 [ 75.485701][ T5324] Code: 0f 0b 90 e9 5f fe ff ff e8 25 f9 2b f7 90 0f 0b 90 e9 92 fe ff ff e8 17 f9 2b f7 90 0f 0b 90 e9 b8 fe ff ff e8 09 f9 2b f7 90 <0f> 0b 90 e9 de fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fc [ 75.493040][ T5324] RSP: 0018:ffffc9000d4f7c58 EFLAGS: 00010293 [ 75.495621][ T5324] RAX: ffffffff8a96c417 RBX: 0000000080005000 RCX: ffff88801f674880 [ 75.498539][ T5324] RDX: 0000000000000000 RSI: 0000000080005000 RDI: 0000000000000000 [ 75.501537][ T5324] RBP: 0000000000000007 R08: ffffffff8a96c2f1 R09: 1ffff11008264b7b [ 75.504670][ T5324] R10: dffffc0000000000 R11: ffffed1008264b7c R12: ffff888041325940 [ 75.507714][ T5324] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888041325952 [ 75.510822][ T5324] ? inet_sock_destruct+0x511/0x740 [ 75.512872][ T5324] ? inet_sock_destruct+0x637/0x740 [ 75.514961][ T5324] ? inet_sock_destruct+0x637/0x740 [ 75.516997][ T5324] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.519002][ T5324] __sk_destruct+0x8d/0x650 [ 75.520762][ T5324] inet_release+0x17d/0x200 [ 75.522543][ T5324] sock_close+0xbc/0x240 [ 75.524278][ T5324] ? __pfx_sock_close+0x10/0x10 [ 75.526210][ T5324] __fput+0x3e9/0x9f0 [ 75.527745][ T5324] task_work_run+0x251/0x310 [ 75.529572][ T5324] ? _raw_spin_unlock+0x28/0x50 [ 75.531413][ T5324] ? __pfx_task_work_run+0x10/0x10 [ 75.533384][ T5324] ? syscall_exit_to_user_mode+0xa3/0x340 [ 75.535522][ T5324] syscall_exit_to_user_mode+0x13f/0x340 [ 75.537793][ T5324] do_syscall_64+0x100/0x210 [ 75.539637][ T5324] ? clear_bhb_loop+0x45/0xa0 [ 75.541429][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.543766][ T5324] RIP: 0033:0x7ff24578e969 [ 75.545500][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.552555][ T5324] RSP: 002b:00007ff24664a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 75.555846][ T5324] RAX: 0000000000000000 RBX: 00007ff2459b6080 RCX: 00007ff24578e969 [ 75.559066][ T5324] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 75.562292][ T5324] RBP: 00007ff245810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 75.565508][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.568546][ T5324] R13: 0000000000000000 R14: 00007ff2459b6080 R15: 00007fff9e155e48 [ 75.571493][ T5324] [ 75.572906][ T5324] Kernel Offset: disabled [ 75.574638][ T5324] Rebooting in 86400 seconds..