------------[ cut here ]------------
WARNING: CPU: 1 PID: 12421 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156
Modules linked in:
CPU: 1 UID: 0 PID: 12421 Comm: kworker/1:2 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: usb_hub_wq hub_event
RIP: 0010:inet_sock_destruct+0x684/0x830 net/ipv4/af_inet.c:156
Code: 0f 0b 90 e9 12 fe ff ff e8 69 c0 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 5b c0 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 4d c0 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 af 9b 1c f8 e9 d7 fc ff ff 4c 89 ff e8
RSP: 0018:ffffc90000a08d90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888023b88000 RCX: ffffffff8a063597
RDX: ffff88802b628000 RSI: ffffffff8a0636c3 RDI: 0000000000000005
RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000fff R11: 0000000000000001 R12: ffff888023b88000
R13: ffff888023b88090 R14: ffffc90000a08e90 R15: 0000000000000003
FS: 0000000000000000(0000) GS:ffff888124816000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c8eeff8 CR3: 000000003dc6b000 CR4: 00000000003526f0
Call Trace:
__sk_destruct+0x81/0x980 net/core/sock.c:2347
rcu_do_batch kernel/rcu/tree.c:2576 [inline]
rcu_core+0x79c/0x14e0 kernel/rcu/tree.c:2832
handle_softirqs+0x219/0x8e0 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0x9a2/0xc60 kernel/printk/printk.c:3227
Code: 00 e8 32 63 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 e0 8d 20 00 48 85 db 0f 85 55 01 00 00 e8 62 92 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 17 6e 87
RSP: 0018:ffffc900054f7088 EFLAGS: 00000287
RAX: ffffffff8f2ec358 RBX: 0000000000000000 RCX: ffffc90019b40000
RDX: 0000000000100000 RSI: ffffffff819b64ae RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ec358
R13: ffffffff8f2ec300 R14: ffffc900054f7118 R15: dffffc0000000000
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
dev_vprintk_emit drivers/base/core.c:4917 [inline]
dev_printk_emit+0xfa/0x140 drivers/base/core.c:4928
__dev_printk+0xf5/0x270 drivers/base/core.c:4940
_dev_err+0xe4/0x120 drivers/base/core.c:4983
usb_generic_driver_probe+0xf7/0x110 drivers/usb/core/generic.c:252
usb_probe_device+0xef/0x3e0 drivers/usb/core/driver.c:291
call_driver_probe drivers/base/dd.c:579 [inline]
really_probe+0x23e/0xa90 drivers/base/dd.c:657
__driver_probe_device+0x1de/0x440 drivers/base/dd.c:799
driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:829
__device_attach_driver+0x1df/0x310 drivers/base/dd.c:957
bus_for_each_drv+0x156/0x1e0 drivers/base/bus.c:462
__device_attach+0x1e4/0x4b0 drivers/base/dd.c:1029
bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:537
device_add+0x1148/0x1a70 drivers/base/core.c:3692
usb_new_device+0xd07/0x1a20 drivers/usb/core/hub.c:2694
hub_port_connect drivers/usb/core/hub.c:5566 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5706 [inline]
port_event drivers/usb/core/hub.c:5866 [inline]
hub_event+0x2eb7/0x4fa0 drivers/usb/core/hub.c:5948
process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238
process_scheduled_works kernel/workqueue.c:3321 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
kthread+0x3c5/0x780 kernel/kthread.c:464
ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: 00 e8 add %ch,%al
2: 32 63 28 xor 0x28(%rbx),%ah
5: 00 9c 5b 81 e3 00 02 add %bl,0x200e381(%rbx,%rbx,2)
c: 00 00 add %al,(%rax)
e: 31 ff xor %edi,%edi
10: 48 89 de mov %rbx,%rsi
13: e8 e0 8d 20 00 call 0x208df8
18: 48 85 db test %rbx,%rbx
1b: 0f 85 55 01 00 00 jne 0x176
21: e8 62 92 20 00 call 0x209288
26: fb sti
27: 4c 89 e0 mov %r12,%rax
* 2a: 48 c1 e8 03 shr $0x3,%rax <-- trapping instruction
2e: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)
33: 0f 84 11 ff ff ff je 0xffffff4a
39: 4c 89 e7 mov %r12,%rdi
3c: e8 .byte 0xe8
3d: 17 (bad)
3e: 6e outsb %ds:(%rsi),(%dx)
3f: 87 .byte 0x87