------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at net/core/stream.c:205 sk_stream_kill_queues+0x2d8/0x350 net/core/stream.c:205 Modules linked in: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc2-syzkaller-00039-g9f7fb8de5d9b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:sk_stream_kill_queues+0x2d8/0x350 net/core/stream.c:205 Code: f9 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 dd eb 6a f9 0f 0b e9 db fe ff ff e8 d1 eb 6a f9 0f 0b eb b1 e8 c8 eb 6a f9 <0f> 0b eb d3 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c d3 fe ff ff e8 3f RSP: 0018:ffffc90000007ab0 EFLAGS: 00010246 RAX: ffffffff881abe48 RBX: 00000000000004ff RCX: ffffffff8c8bb6c0 RDX: 0000000080000102 RSI: 00000000000004ff RDI: 0000000000000000 RBP: ffffffff8dc60728 R08: ffffffff881abe16 R09: ffff88807dcc4660 R10: ffffed100fb988ce R11: 0000000000000000 R12: ffff88807dcc3db8 R13: ffff88807dcc3c00 R14: dffffc0000000000 R15: ffff88807dcc3e30 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f46c106f218 CR3: 000000000c88e000 CR4: 00000000003506f0 Call Trace: inet_csk_destroy_sock+0x15d/0x390 net/ipv4/inet_connection_sock.c:1012 tcp_write_err net/ipv4/tcp_timer.c:74 [inline] tcp_probe_timer net/ipv4/tcp_timer.c:395 [inline] tcp_write_timer_handler+0x6fb/0xa90 net/ipv4/tcp_timer.c:626 tcp_write_timer+0x176/0x290 net/ipv4/tcp_timer.c:642 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline] RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline] RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:551 [inline] RIP: 0010:acpi_idle_enter+0x42d/0x790 drivers/acpi/processor_idle.c:687 Code: fd 48 83 e3 08 44 8b 7c 24 04 0f 85 22 01 00 00 4c 8d 74 24 40 e8 e3 ba 14 fd eb 0c e8 4c 14 0e fd 0f 00 2d 75 b4 6b 06 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 23 00 74 08 4c 89 f7 e8 dd a5 59 fd RSP: 0018:ffffffff8c807ba0 EFLAGS: 00000286 RAX: 4b80a133fe988100 RBX: 0000000000000000 RCX: ffffffff90bf7803 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff8c807c50 R08: ffffffff818c50d0 R09: fffffbfff19176d9 R10: fffffbfff19176d9 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff888142bb4064 R14: ffffffff8c807be0 R15: 0000000000000001 cpuidle_enter_state+0x507/0xea0 drivers/cpuidle/cpuidle.c:237 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351 call_cpuidle kernel/sched/idle.c:158 [inline] cpuidle_idle_call kernel/sched/idle.c:239 [inline] do_idle+0x3e8/0x670 kernel/sched/idle.c:306 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403 start_kernel+0x4bf/0x56e init/main.c:1138 secondary_startup_64_no_verify+0xc4/0xcb ---------------- Code disassembly (best guess): 0: fd std 1: 48 83 e3 08 and $0x8,%rbx 5: 44 8b 7c 24 04 mov 0x4(%rsp),%r15d a: 0f 85 22 01 00 00 jne 0x132 10: 4c 8d 74 24 40 lea 0x40(%rsp),%r14 15: e8 e3 ba 14 fd callq 0xfd14bafd 1a: eb 0c jmp 0x28 1c: e8 4c 14 0e fd callq 0xfd0e146d 21: 0f 00 2d 75 b4 6b 06 verw 0x66bb475(%rip) # 0x66bb49d 28: fb sti 29: f4 hlt * 2a: 4c 89 f3 mov %r14,%rbx <-- trapping instruction 2d: 48 c1 eb 03 shr $0x3,%rbx 31: 42 80 3c 23 00 cmpb $0x0,(%rbx,%r12,1) 36: 74 08 je 0x40 38: 4c 89 f7 mov %r14,%rdi 3b: e8 dd a5 59 fd callq 0xfd59a61d