------------[ cut here ]------------
WARNING: CPU: 0 PID: 15922 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x723/0x830 net/ipv4/af_inet.c:156
Modules linked in:
CPU: 0 PID: 15922 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00150-g52afb15e9d9a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:inet_sock_destruct+0x723/0x830 net/ipv4/af_inet.c:156
Code: 0f 0b 90 e9 c6 fd ff ff e8 8a f9 9f f7 90 0f 0b 90 e9 01 fe ff ff e8 7c f9 9f f7 90 0f 0b 90 e9 2f fe ff ff e8 6e f9 9f f7 90 <0f> 0b 90 e9 be fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fb
RSP: 0000:ffffc90000007b70 EFLAGS: 00010246
RAX: ffffffff89f607f2 RBX: 0000000000000004 RCX: ffff88802ccc8000
RDX: 0000000000000101 RSI: 0000000000000004 RDI: 0000000000000000
RBP: ffff88807e0a0000 R08: ffffffff89f606ac R09: 1ffff1100fc14053
R10: dffffc0000000000 R11: ffffed100fc14054 R12: 1ffff1100fc14005
R13: ffff88807e0a04e8 R14: ffff88807e0a0028 R15: ffff88807e0a0012
FS: 0000555564bc6480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7212044040 CR3: 000000006e7f4000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__sk_destruct+0x58/0x5f0 net/core/sock.c:2175
rcu_do_batch kernel/rcu/tree.c:2196 [inline]
rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2471
__do_softirq+0x2c6/0x980 kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633
irq_exit_rcu+0x9/0x30 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:206 [inline]
RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:238 [inline]
RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline]
RIP: 0010:folio_test_head include/linux/page-flags.h:811 [inline]
RIP: 0010:folio_test_large include/linux/page-flags.h:832 [inline]
RIP: 0010:folio_test_hugetlb+0x6a/0x1d0 include/linux/page-flags.h:874
Code: ac ff 48 83 e3 01 0f 85 a8 00 00 00 0f 1f 44 00 00 e8 5a 2b ac ff 4c 89 f7 be 08 00 00 00 e8 0d 90 10 00 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 87 8d 10 00 49 8b 1e 48 89 de 48
RSP: 0000:ffffc9000f64f6a0 EFLAGS: 00000a06
RAX: 1ffffd400008f830 RBX: 0000000000000000 RCX: ffffffff81e9d613
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000047c180
RBP: ffffea000047c180 R08: ffffea000047c187 R09: 1ffffd400008f830
R10: dffffc0000000000 R11: fffff9400008f831 R12: ffffea000047c180
R13: ffff88806bff7b00 R14: ffffea000047c180 R15: dffffc0000000000
__folio_rmap_sanity_checks+0x23/0x5b0 include/linux/rmap.h:201
__folio_add_rmap mm/rmap.c:1167 [inline]
__folio_add_file_rmap mm/rmap.c:1452 [inline]
folio_add_file_rmap_ptes+0x90/0x520 mm/rmap.c:1478
set_pte_range+0x490/0xa80 mm/memory.c:4682
filemap_map_order0_folio mm/filemap.c:3557 [inline]
filemap_map_pages+0xee2/0x1830 mm/filemap.c:3603
do_fault_around mm/memory.c:4852 [inline]
do_read_fault mm/memory.c:4885 [inline]
do_fault mm/memory.c:5024 [inline]
do_pte_missing mm/memory.c:3880 [inline]
handle_pte_fault mm/memory.c:5300 [inline]
__handle_mm_fault+0x446e/0x7240 mm/memory.c:5441
handle_mm_fault+0x3c2/0x8a0 mm/memory.c:5606
do_user_addr_fault arch/x86/mm/fault.c:1362 [inline]
handle_page_fault arch/x86/mm/fault.c:1505 [inline]
exc_page_fault+0x446/0x8e0 arch/x86/mm/fault.c:1563
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f7212044040
Code: Unable to access opcode bytes at 0x7f7212044016.
RSP: 002b:00007ffc9d5a6ac8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00007ffc9d5a6b90 RCX: 0000000000000000
RDX: 00007f72120ca3ba RSI: 0000000000000040 RDI: 00007ffc9d5a6b90
RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f7212cdb320
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
----------------
Code disassembly (best guess):
0: ac lods %ds:(%rsi),%al
1: ff 48 83 decl -0x7d(%rax)
4: e3 01 jrcxz 0x7
6: 0f 85 a8 00 00 00 jne 0xb4
c: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
11: e8 5a 2b ac ff call 0xffac2b70
16: 4c 89 f7 mov %r14,%rdi
19: be 08 00 00 00 mov $0x8,%esi
1e: e8 0d 90 10 00 call 0x109030
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 f7 mov %r14,%rdi
34: e8 87 8d 10 00 call 0x108dc0
39: 49 8b 1e mov (%r14),%rbx
3c: 48 89 de mov %rbx,%rsi
3f: 48 rex.W