------------[ cut here ]------------ kernel BUG at net/ipv4/tcp_input.c:5613! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 7477 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : tcp_collapse+0x1614/0x1628 net/ipv4/tcp_input.c:5613 lr : tcp_collapse+0x1614/0x1628 net/ipv4/tcp_input.c:5613 sp : ffff8000a4aa70a0 x29: ffff8000a4aa7200 x28: 00000000fffff8d4 x27: ffff0000d6606740 x26: dfff800000000000 x25: 0000000000009d38 x24: 000000002d0e8fdc x23: 000000002d0e9828 x22: 1fffe0001ea68e05 x21: ffff0000f5347000 x20: ffff0000f534702c x19: 000000002d0e9708 x18: 1fffe000337dfe90 x17: 0000000000020010 x16: ffff80008ad5ae08 x15: 0000000000000001 x14: 1fffe0001acc0ce8 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a614e000 x8 : 0000000000080000 x7 : 0000001000000000 x6 : 2d0e98282d0e9708 x5 : ffff0000fce8c2d8 x4 : ffff0000f5347058 x3 : ffff8000898a0d64 x2 : 0000000000000001 x1 : 00000000fffff8d4 x0 : 0000000000000000 Call trace: tcp_collapse+0x1614/0x1628 net/ipv4/tcp_input.c:5613 (P) tcp_prune_queue net/ipv4/tcp_input.c:5775 [inline] tcp_try_rmem_schedule+0x9b0/0x161c net/ipv4/tcp_input.c:5114 tcp_data_queue+0x3c8/0x49e0 net/ipv4/tcp_input.c:5399 tcp_rcv_established+0x1030/0x22e4 net/ipv4/tcp_input.c:6441 tcp_v4_do_rcv+0x5ec/0x11d0 net/ipv4/tcp_ipv4.c:1931 sk_backlog_rcv include/net/sock.h:1158 [inline] __release_sock+0x1c4/0x3cc net/core/sock.c:3180 release_sock+0x60/0x1ac net/core/sock.c:3735 sock_map_close+0x37c/0x3b8 net/core/sock_map.c:1697 inet_release+0x154/0x1d0 net/ipv4/af_inet.c:437 __sock_release net/socket.c:662 [inline] sock_close+0xa0/0x1e4 net/socket.c:1455 __fput+0x340/0x75c fs/file_table.c:468 ____fput+0x20/0x58 fs/file_table.c:496 task_work_run+0x1dc/0x260 kernel/task_work.c:227 get_signal+0x112c/0x12f8 kernel/signal.c:2807 arch_do_signal_or_restart+0x274/0x4414 arch/arm64/kernel/signal.c:1619 exit_to_user_mode_loop+0x7c/0x178 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] arm64_exit_to_user_mode arch/arm64/kernel/entry-common.c:103 [inline] el0_svc+0x170/0x254 arch/arm64/kernel/entry-common.c:747 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:765 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: 52800081 97a455bd 17fffc61 97a4551b (d4210000) ---[ end trace 0000000000000000 ]---