------------[ cut here ]------------
WARNING: CPU: 0 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156
Code: 0f 0b 90 e9 12 fe ff ff e8 a9 ec bd f7 90 0f 0b 90 e9 5e fe ff ff e8 9b ec bd f7 90 0f 0b 90 e9 94 fe ff ff e8 8d ec bd f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 7f bc 24 f8 e9 d7 fc ff ff 4c 89 ff e8
RSP: 0018:ffffc90000007d90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888053e53600 RCX: ffffffff89fe2f57
RDX: ffffffff8e297780 RSI: ffffffff89fe3083 RDI: 0000000000000005
RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000fff R11: 0000000000000001 R12: ffff888053e53600
R13: ffff888053e53690 R14: ffffc90000007e90 R15: 0000000000000007
FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f493dfb7bac CR3: 00000000475f3000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__sk_destruct+0x81/0x980 net/core/sock.c:2347
rcu_do_batch kernel/rcu/tree.c:2576 [inline]
rcu_core+0x79c/0x14e0 kernel/rcu/tree.c:2832
handle_softirqs+0x219/0x8e0 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:sched_core_balance+0x9e/0xd60 kernel/sched/core.c:6427
Code: 48 5c 8e e8 a4 19 0d 00 e8 af 9d f4 09 41 5a 85 c0 0f 85 a9 09 00 00 48 89 ef e8 3d 71 fe ff e8 88 89 38 00 fb 48 63 44 24 50 <48> c7 c3 80 7c ce 93 48 89 44 24 08 48 83 f8 07 0f 87 05 0c 00 00
RSP: 0018:ffffffff8e207b78 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c3ecbf
RDX: 0000000000000000 RSI: ffffffff8de19ac4 RDI: ffffffff8c1575a0
RBP: ffff8880b843bc80 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff90a81657 R11: 0000000000000001 R12: dffffc0000000000
R13: ffff8880b8423f10 R14: ffffffff818b63a0 R15: ffff8880b843bc80
do_balance_callbacks kernel/sched/core.c:5042 [inline]
__balance_callbacks kernel/sched/core.c:5096 [inline]
__schedule+0x3fef/0x5de0 kernel/sched/core.c:6788
schedule_idle+0x5c/0x90 kernel/sched/core.c:6904
do_idle+0x2b6/0x510 kernel/sched/idle.c:353
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423
rest_init+0x16b/0x2b0 init/main.c:744
start_kernel+0x3ee/0x4d0 init/main.c:1101
x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:307
x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:288
common_startup_64+0x13e/0x148
----------------
Code disassembly (best guess):
0: 48 5c rex.W pop %rsp
2: 8e e8 mov %eax,%gs
4: a4 movsb %ds:(%rsi),%es:(%rdi)
5: 19 0d 00 e8 af 9d sbb %ecx,-0x62501800(%rip) # 0x9dafe80b
b: f4 hlt
c: 09 41 5a or %eax,0x5a(%rcx)
f: 85 c0 test %eax,%eax
11: 0f 85 a9 09 00 00 jne 0x9c0
17: 48 89 ef mov %rbp,%rdi
1a: e8 3d 71 fe ff call 0xfffe715c
1f: e8 88 89 38 00 call 0x3889ac
24: fb sti
25: 48 63 44 24 50 movslq 0x50(%rsp),%rax
* 2a: 48 c7 c3 80 7c ce 93 mov $0xffffffff93ce7c80,%rbx <-- trapping instruction
31: 48 89 44 24 08 mov %rax,0x8(%rsp)
36: 48 83 f8 07 cmp $0x7,%rax
3a: 0f 87 05 0c 00 00 ja 0xc45