program:
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r5, &(0x7f0000000080)=@unlock_all, 0xb)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0xfffffee9}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
[ 85.573374][ T5307] Bluetooth: hci0: command tx timeout
[ 85.765532][ T5332] TCP: out of memory -- consider tuning tcp_mem
[ 85.770519][ T5332] ------------[ cut here ]------------
[ 85.772993][ T5332] WARNING: CPU: 0 PID: 5332 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730
[ 85.777482][ T5332] Modules linked in:
[ 85.779782][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full)
[ 85.785187][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.789847][ T5332] RIP: 0010:inet_sock_destruct+0x623/0x730
[ 85.793253][ T5332] Code: 0f 0b 90 e9 62 fe ff ff e8 8a fc d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c fc d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e fc d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[ 85.801912][ T5332] RSP: 0018:ffffc9000d3cfc58 EFLAGS: 00010283
[ 85.804863][ T5332] RAX: ffffffff89ee6282 RBX: dffffc0000000000 RCX: 0000000000100000
[ 85.809026][ T5332] RDX: ffffc9000e8cb000 RSI: 0000000000000fcc RDI: 0000000000000fcd
[ 85.813531][ T5332] RBP: 0000000080002000 R08: ffff8880355ddbdf R09: 1ffff11006abbb7b
[ 85.816882][ T5332] R10: dffffc0000000000 R11: ffffed1006abbb7c R12: ffff8880355dd940
[ 85.820233][ T5332] R13: dffffc0000000000 R14: ffff8880355ddbc4 R15: 1ffff11006abbb2a
[ 85.823974][ T5332] FS: 00007f2e3c2696c0(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000
[ 85.829312][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.832983][ T5332] CR2: 00007f2e3c268fc8 CR3: 00000000357c7000 CR4: 0000000000352ef0
[ 85.836825][ T5332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 85.840683][ T5332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 85.844336][ T5332] Call Trace:
[ 85.845876][ T5332]
[ 85.847262][ T5332] ? netlink_has_listeners+0x339/0x3f0
[ 85.849536][ T5332] ? __pfx_inet_sock_destruct+0x10/0x10
[ 85.852057][ T5332] __sk_destruct+0x86/0x660
[ 85.854342][ T5332] inet_release+0x187/0x210
[ 85.856562][ T5332] sock_close+0xc0/0x240
[ 85.858491][ T5332] ? __pfx_sock_close+0x10/0x10
[ 85.860875][ T5332] __fput+0x449/0xa70
[ 85.862860][ T5332] task_work_run+0x1d1/0x260
[ 85.865569][ T5332] ? __pfx_task_work_run+0x10/0x10
[ 85.868842][ T5332] ? exit_to_user_mode_loop+0x40/0x110
[ 85.871609][ T5332] exit_to_user_mode_loop+0xec/0x110
[ 85.874009][ T5332] do_syscall_64+0x2bd/0x3b0
[ 85.876287][ T5332] ? lockdep_hardirqs_on+0x9c/0x150
[ 85.878647][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.881557][ T5332] ? clear_bhb_loop+0x60/0xb0
[ 85.883713][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.886860][ T5332] RIP: 0033:0x7f2e3b38e929
[ 85.889630][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 85.897713][ T5332] RSP: 002b:00007f2e3c269038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 85.901018][ T5332] RAX: 0000000000000000 RBX: 00007f2e3b5b6080 RCX: 00007f2e3b38e929
[ 85.904426][ T5332] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[ 85.909225][ T5332] RBP: 00007f2e3b410b39 R08: 0000000000000000 R09: 0000000000000000
[ 85.913236][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.916711][ T5332] R13: 0000000000000001 R14: 00007f2e3b5b6080 R15: 00007ffe22ec58d8
[ 85.920503][ T5332]
[ 85.921928][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.925692][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full)
[ 85.931244][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.935577][ T5332] Call Trace:
[ 85.937002][ T5332]
[ 85.938263][ T5332] dump_stack_lvl+0x99/0x250
[ 85.940160][ T5332] ? __asan_memcpy+0x40/0x70
[ 85.942155][ T5332] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.944456][ T5332] ? __pfx__printk+0x10/0x10
[ 85.947264][ T5332] panic+0x2db/0x790
[ 85.949778][ T5332] ? __pfx_panic+0x10/0x10
[ 85.952240][ T5332] __warn+0x31b/0x4b0
[ 85.954193][ T5332] ? inet_sock_destruct+0x623/0x730
[ 85.956542][ T5332] ? inet_sock_destruct+0x623/0x730
[ 85.958835][ T5332] report_bug+0x2be/0x4f0
[ 85.960761][ T5332] ? inet_sock_destruct+0x623/0x730
[ 85.963219][ T5332] ? inet_sock_destruct+0x623/0x730
[ 85.965371][ T5332] ? inet_sock_destruct+0x625/0x730
[ 85.967918][ T5332] handle_bug+0x84/0x160
[ 85.970036][ T5332] exc_invalid_op+0x1a/0x50
[ 85.972306][ T5332] asm_exc_invalid_op+0x1a/0x20
[ 85.974559][ T5332] RIP: 0010:inet_sock_destruct+0x623/0x730
[ 85.977228][ T5332] Code: 0f 0b 90 e9 62 fe ff ff e8 8a fc d1 f7 90 0f 0b 90 e9 95 fe ff ff e8 7c fc d1 f7 90 0f 0b 90 e9 bb fe ff ff e8 6e fc d1 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc
[ 85.986216][ T5332] RSP: 0018:ffffc9000d3cfc58 EFLAGS: 00010283
[ 85.989962][ T5332] RAX: ffffffff89ee6282 RBX: dffffc0000000000 RCX: 0000000000100000
[ 85.993748][ T5332] RDX: ffffc9000e8cb000 RSI: 0000000000000fcc RDI: 0000000000000fcd
[ 85.997454][ T5332] RBP: 0000000080002000 R08: ffff8880355ddbdf R09: 1ffff11006abbb7b
[ 86.001007][ T5332] R10: dffffc0000000000 R11: ffffed1006abbb7c R12: ffff8880355dd940
[ 86.005071][ T5332] R13: dffffc0000000000 R14: ffff8880355ddbc4 R15: 1ffff11006abbb2a
[ 86.009449][ T5332] ? inet_sock_destruct+0x622/0x730
[ 86.011933][ T5332] ? inet_sock_destruct+0x622/0x730
[ 86.014353][ T5332] ? netlink_has_listeners+0x339/0x3f0
[ 86.016926][ T5332] ? __pfx_inet_sock_destruct+0x10/0x10
[ 86.019909][ T5332] __sk_destruct+0x86/0x660
[ 86.022393][ T5332] inet_release+0x187/0x210
[ 86.024487][ T5332] sock_close+0xc0/0x240
[ 86.026591][ T5332] ? __pfx_sock_close+0x10/0x10
[ 86.028748][ T5332] __fput+0x449/0xa70
[ 86.030386][ T5332] task_work_run+0x1d1/0x260
[ 86.032730][ T5332] ? __pfx_task_work_run+0x10/0x10
[ 86.035679][ T5332] ? exit_to_user_mode_loop+0x40/0x110
[ 86.038875][ T5332] exit_to_user_mode_loop+0xec/0x110
[ 86.041586][ T5332] do_syscall_64+0x2bd/0x3b0
[ 86.043707][ T5332] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.045946][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.048293][ T5332] ? clear_bhb_loop+0x60/0xb0
[ 86.050320][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.053398][ T5332] RIP: 0033:0x7f2e3b38e929
[ 86.055788][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.064468][ T5332] RSP: 002b:00007f2e3c269038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 86.068175][ T5332] RAX: 0000000000000000 RBX: 00007f2e3b5b6080 RCX: 00007f2e3b38e929
[ 86.071644][ T5332] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[ 86.075255][ T5332] RBP: 00007f2e3b410b39 R08: 0000000000000000 R09: 0000000000000000
[ 86.078573][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.081427][ T5332] R13: 0000000000000001 R14: 00007f2e3b5b6080 R15: 00007ffe22ec58d8
[ 86.084587][ T5332]
[ 86.086115][ T5332] Kernel Offset: disabled
[ 86.087715][ T5332] Rebooting in 86400 seconds..