program: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x68, 0x48, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, r2, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}}]}, 0x68}}, 0x40000) close(r1) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000400)=0x2) write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 74.808992][ T5298] Bluetooth: hci0: command tx timeout [ 74.929741][ T5314] TCP: out of memory -- consider tuning tcp_mem [ 74.934016][ T5314] ------------[ cut here ]------------ [ 74.936586][ T5314] WARNING: CPU: 0 PID: 5314 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 74.941196][ T5314] Modules linked in: [ 74.943106][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 74.947960][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.953021][ T5314] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 74.955338][ T5314] Code: 0f 0b 90 e9 62 fe ff ff e8 2a df df f7 90 0f 0b 90 e9 95 fe ff ff e8 1c df df f7 90 0f 0b 90 e9 bb fe ff ff e8 0e df df f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 74.963006][ T5314] RSP: 0018:ffffc9000fe47898 EFLAGS: 00010293 [ 74.966033][ T5314] RAX: ffffffff89dff142 RBX: dffffc0000000000 RCX: ffff88801f544880 [ 74.969738][ T5314] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 74.973291][ T5314] RBP: 0000000080000000 R08: ffff8880437cc25f R09: 1ffff110086f984b [ 74.976728][ T5314] R10: dffffc0000000000 R11: ffffed10086f984c R12: ffff8880437cbfc0 [ 74.980220][ T5314] R13: dffffc0000000000 R14: ffff8880437cc244 R15: 1ffff110086f97fa [ 74.984765][ T5314] FS: 0000000000000000(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 74.988294][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.991430][ T5314] CR2: 00007ffdc0efcfc0 CR3: 00000000514ab000 CR4: 0000000000352ef0 [ 74.994314][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.997508][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.001005][ T5314] Call Trace: [ 75.002521][ T5314] [ 75.003856][ T5314] ? netlink_has_listeners+0x339/0x3f0 [ 75.006447][ T5314] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.008960][ T5314] __sk_destruct+0x86/0x660 [ 75.010997][ T5314] inet_release+0x184/0x210 [ 75.013025][ T5314] sock_close+0xc0/0x240 [ 75.014882][ T5314] ? __pfx_sock_close+0x10/0x10 [ 75.016773][ T5314] __fput+0x449/0xa70 [ 75.018607][ T5314] task_work_run+0x1d1/0x260 [ 75.020652][ T5314] ? __pfx_task_work_run+0x10/0x10 [ 75.022873][ T5314] do_exit+0x8d6/0x2550 [ 75.024678][ T5314] ? do_raw_spin_lock+0x121/0x290 [ 75.026919][ T5314] ? __pfx_do_exit+0x10/0x10 [ 75.029122][ T5314] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.031436][ T5314] do_group_exit+0x21c/0x2d0 [ 75.033549][ T5314] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.035813][ T5314] get_signal+0x125e/0x1310 [ 75.037887][ T5314] arch_do_signal_or_restart+0x95/0x780 [ 75.040317][ T5314] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.042792][ T5314] ? local_irq_enable_exit_to_user+0x5/0x10 [ 75.045421][ T5314] syscall_exit_to_user_mode+0x8b/0x120 [ 75.047866][ T5314] do_syscall_64+0x103/0x210 [ 75.050113][ T5314] ? clear_bhb_loop+0x45/0xa0 [ 75.052187][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.054915][ T5314] RIP: 0033:0x7f23b558e969 [ 75.057024][ T5314] Code: Unable to access opcode bytes at 0x7f23b558e93f. [ 75.060177][ T5314] RSP: 002b:00007f23b63a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.063807][ T5314] RAX: 0000000000000001 RBX: 00007f23b57b5fa8 RCX: 00007f23b558e969 [ 75.067249][ T5314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23b57b5fac [ 75.070716][ T5314] RBP: 00007f23b57b5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 75.073898][ T5314] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f23b57b5fac [ 75.077336][ T5314] R13: 0000000000000000 R14: 00007ffdc0efda60 R15: 00007ffdc0efdb48 [ 75.080763][ T5314] [ 75.082142][ T5314] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.085229][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 75.090011][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.094435][ T5314] Call Trace: [ 75.095888][ T5314] [ 75.097203][ T5314] dump_stack_lvl+0x99/0x250 [ 75.099235][ T5314] ? __asan_memcpy+0x40/0x70 [ 75.101243][ T5314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.103472][ T5314] ? __pfx__printk+0x10/0x10 [ 75.105456][ T5314] panic+0x2db/0x790 [ 75.107051][ T5314] ? __pfx_panic+0x10/0x10 [ 75.109001][ T5314] __warn+0x31b/0x4b0 [ 75.110476][ T5314] ? inet_sock_destruct+0x623/0x730 [ 75.112619][ T5314] ? inet_sock_destruct+0x623/0x730 [ 75.114848][ T5314] report_bug+0x2be/0x4f0 [ 75.116767][ T5314] ? inet_sock_destruct+0x623/0x730 [ 75.119106][ T5314] ? inet_sock_destruct+0x623/0x730 [ 75.121454][ T5314] ? inet_sock_destruct+0x625/0x730 [ 75.123650][ T5314] handle_bug+0x84/0x160 [ 75.125308][ T5314] exc_invalid_op+0x1a/0x50 [ 75.127130][ T5314] asm_exc_invalid_op+0x1a/0x20 [ 75.129223][ T5314] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 75.131583][ T5314] Code: 0f 0b 90 e9 62 fe ff ff e8 2a df df f7 90 0f 0b 90 e9 95 fe ff ff e8 1c df df f7 90 0f 0b 90 e9 bb fe ff ff e8 0e df df f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 75.139689][ T5314] RSP: 0018:ffffc9000fe47898 EFLAGS: 00010293 [ 75.142057][ T5314] RAX: ffffffff89dff142 RBX: dffffc0000000000 RCX: ffff88801f544880 [ 75.145129][ T5314] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 75.148404][ T5314] RBP: 0000000080000000 R08: ffff8880437cc25f R09: 1ffff110086f984b [ 75.151645][ T5314] R10: dffffc0000000000 R11: ffffed10086f984c R12: ffff8880437cbfc0 [ 75.154886][ T5314] R13: dffffc0000000000 R14: ffff8880437cc244 R15: 1ffff110086f97fa [ 75.158125][ T5314] ? inet_sock_destruct+0x622/0x730 [ 75.160335][ T5314] ? inet_sock_destruct+0x622/0x730 [ 75.162433][ T5314] ? netlink_has_listeners+0x339/0x3f0 [ 75.164504][ T5314] ? __pfx_inet_sock_destruct+0x10/0x10 [ 75.166738][ T5314] __sk_destruct+0x86/0x660 [ 75.168684][ T5314] inet_release+0x184/0x210 [ 75.170605][ T5314] sock_close+0xc0/0x240 [ 75.172269][ T5314] ? __pfx_sock_close+0x10/0x10 [ 75.174339][ T5314] __fput+0x449/0xa70 [ 75.175999][ T5314] task_work_run+0x1d1/0x260 [ 75.178061][ T5314] ? __pfx_task_work_run+0x10/0x10 [ 75.180266][ T5314] do_exit+0x8d6/0x2550 [ 75.182104][ T5314] ? do_raw_spin_lock+0x121/0x290 [ 75.184300][ T5314] ? __pfx_do_exit+0x10/0x10 [ 75.186255][ T5314] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.188610][ T5314] do_group_exit+0x21c/0x2d0 [ 75.190603][ T5314] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.192833][ T5314] get_signal+0x125e/0x1310 [ 75.194774][ T5314] arch_do_signal_or_restart+0x95/0x780 [ 75.197163][ T5314] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 75.199814][ T5314] ? local_irq_enable_exit_to_user+0x5/0x10 [ 75.202424][ T5314] syscall_exit_to_user_mode+0x8b/0x120 [ 75.204980][ T5314] do_syscall_64+0x103/0x210 [ 75.207012][ T5314] ? clear_bhb_loop+0x45/0xa0 [ 75.209016][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.211445][ T5314] RIP: 0033:0x7f23b558e969 [ 75.213517][ T5314] Code: Unable to access opcode bytes at 0x7f23b558e93f. [ 75.216705][ T5314] RSP: 002b:00007f23b63a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.220130][ T5314] RAX: 0000000000000001 RBX: 00007f23b57b5fa8 RCX: 00007f23b558e969 [ 75.223774][ T5314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23b57b5fac [ 75.227244][ T5314] RBP: 00007f23b57b5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 75.230751][ T5314] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f23b57b5fac [ 75.234267][ T5314] R13: 0000000000000000 R14: 00007ffdc0efda60 R15: 00007ffdc0efdb48 [ 75.237803][ T5314] [ 75.239383][ T5314] Kernel Offset: disabled [ 75.241211][ T5314] Rebooting in 86400 seconds..