------------[ cut here ]------------
WARNING: CPU: 3 PID: 3729 at net/core/stream.c:205 sk_stream_kill_queues+0x2eb/0x3d0 net/core/stream.c:205
Modules linked in:
CPU: 3 PID: 3729 Comm: kworker/u16:3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Workqueue: bat_events batadv_nc_worker
RIP: 0010:sk_stream_kill_queues+0x2eb/0x3d0 net/core/stream.c:205
Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ec 00 00 00 8b ab 30 02 00 00 e9 60 ff ff ff e8 0e d4 4d fa 0f 0b eb 97 e8 05 d4 4d fa <0f> 0b eb a0 e8 fc d3 4d fa 0f 0b e9 6a fe ff ff e8 50 23 95 fa e9
RSP: 0018:ffffc900005b8c28 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff88801ab61d00 RSI: ffffffff872aa48b RDI: 0000000000000003
RBP: 00000000000002a9 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff872aa42b R11: 0000000000000000 R12: ffff8880213dd630
R13: ffffffff908a4fc0 R14: ffff8880213dd428 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff88802cd00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000f6fb05dc CR3: 000000000b88e000 CR4: 0000000000150ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
inet_csk_destroy_sock+0x1a5/0x440 net/ipv4/inet_connection_sock.c:1012
tcp_done+0x23b/0x340 net/ipv4/tcp.c:4455
tcp_write_err net/ipv4/tcp_timer.c:74 [inline]
tcp_probe_timer net/ipv4/tcp_timer.c:395 [inline]
tcp_write_timer_handler+0x447/0xbc0 net/ipv4/tcp_timer.c:626
tcp_write_timer+0xa2/0x2b0 net/ipv4/tcp_timer.c:642
call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers.part.0+0x67c/0xa30 kernel/time/timer.c:1734
__run_timers kernel/time/timer.c:1715 [inline]
run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:rcu_is_watching+0x0/0xb0 kernel/rcu/tree.c:1124
Code: f9 5b 00 e9 2c ff ff ff 66 90 48 c7 c7 a0 ce ad 89 e8 64 0a e7 07 65 8a 05 e9 dd 9f 7e 0f be c0 c3 66 0f 1f 84 00 00 00 00 00 <55> 53 65 ff 05 17 a1 9e 7e e8 22 0a e7 07 48 c7 c3 50 ac 03 00 83
RSP: 0018:ffffc90002937c90 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff888061cc1f98 RCX: 0000000000000000
RDX: ffff88801ab61d00 RSI: ffffffff88e677c1 RDI: 0000000000000003
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff88e670cd R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000000003f3
rcu_read_unlock include/linux/rcupdate.h:723 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
batadv_nc_worker+0x836/0xfa0 net/batman-adv/network-coding.c:719
process_one_work+0x9ac/0x1650 kernel/workqueue.c:2307
worker_thread+0x657/0x1110 kernel/workqueue.c:2454
kthread+0x2e9/0x3a0 kernel/kthread.c:377
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess), 3 bytes skipped:
0: e9 2c ff ff ff jmpq 0xffffff31
5: 66 90 xchg %ax,%ax
7: 48 c7 c7 a0 ce ad 89 mov $0xffffffff89adcea0,%rdi
e: e8 64 0a e7 07 callq 0x7e70a77
13: 65 8a 05 e9 dd 9f 7e mov %gs:0x7e9fdde9(%rip),%al # 0x7e9fde03
1a: 0f be c0 movsbl %al,%eax
1d: c3 retq
1e: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1)
25: 00 00
* 27: 55 push %rbp <-- trapping instruction
28: 53 push %rbx
29: 65 ff 05 17 a1 9e 7e incl %gs:0x7e9ea117(%rip) # 0x7e9ea147
30: e8 22 0a e7 07 callq 0x7e70a57
35: 48 c7 c3 50 ac 03 00 mov $0x3ac50,%rbx
3c: 83 .byte 0x83