------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156 Code: 0f 0b 90 e9 12 fe ff ff e8 a9 ec bd f7 90 0f 0b 90 e9 5e fe ff ff e8 9b ec bd f7 90 0f 0b 90 e9 94 fe ff ff e8 8d ec bd f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 7f bc 24 f8 e9 d7 fc ff ff 4c 89 ff e8 RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888053e53600 RCX: ffffffff89fe2f57 RDX: ffffffff8e297780 RSI: ffffffff89fe3083 RDI: 0000000000000005 RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000fff R11: 0000000000000001 R12: ffff888053e53600 R13: ffff888053e53690 R14: ffffc90000007e90 R15: 0000000000000007 FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f493dfb7bac CR3: 00000000475f3000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __sk_destruct+0x81/0x980 net/core/sock.c:2347 rcu_do_batch kernel/rcu/tree.c:2576 [inline] rcu_core+0x79c/0x14e0 kernel/rcu/tree.c:2832 handle_softirqs+0x219/0x8e0 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:sched_core_balance+0x9e/0xd60 kernel/sched/core.c:6427 Code: 48 5c 8e e8 a4 19 0d 00 e8 af 9d f4 09 41 5a 85 c0 0f 85 a9 09 00 00 48 89 ef e8 3d 71 fe ff e8 88 89 38 00 fb 48 63 44 24 50 <48> c7 c3 80 7c ce 93 48 89 44 24 08 48 83 f8 07 0f 87 05 0c 00 00 RSP: 0018:ffffffff8e207b78 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c3ecbf RDX: 0000000000000000 RSI: ffffffff8de19ac4 RDI: ffffffff8c1575a0 RBP: ffff8880b843bc80 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff90a81657 R11: 0000000000000001 R12: dffffc0000000000 R13: ffff8880b8423f10 R14: ffffffff818b63a0 R15: ffff8880b843bc80 do_balance_callbacks kernel/sched/core.c:5042 [inline] __balance_callbacks kernel/sched/core.c:5096 [inline] __schedule+0x3fef/0x5de0 kernel/sched/core.c:6788 schedule_idle+0x5c/0x90 kernel/sched/core.c:6904 do_idle+0x2b6/0x510 kernel/sched/idle.c:353 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423 rest_init+0x16b/0x2b0 init/main.c:744 start_kernel+0x3ee/0x4d0 init/main.c:1101 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:307 x86_64_start_kernel+0x130/0x190 arch/x86/kernel/head64.c:288 common_startup_64+0x13e/0x148 ---------------- Code disassembly (best guess): 0: 48 5c rex.W pop %rsp 2: 8e e8 mov %eax,%gs 4: a4 movsb %ds:(%rsi),%es:(%rdi) 5: 19 0d 00 e8 af 9d sbb %ecx,-0x62501800(%rip) # 0x9dafe80b b: f4 hlt c: 09 41 5a or %eax,0x5a(%rcx) f: 85 c0 test %eax,%eax 11: 0f 85 a9 09 00 00 jne 0x9c0 17: 48 89 ef mov %rbp,%rdi 1a: e8 3d 71 fe ff call 0xfffe715c 1f: e8 88 89 38 00 call 0x3889ac 24: fb sti 25: 48 63 44 24 50 movslq 0x50(%rsp),%rax * 2a: 48 c7 c3 80 7c ce 93 mov $0xffffffff93ce7c80,%rbx <-- trapping instruction 31: 48 89 44 24 08 mov %rax,0x8(%rsp) 36: 48 83 f8 07 cmp $0x7,%rax 3a: 0f 87 05 0c 00 00 ja 0xc45