------------[ cut here ]------------
WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x6df/0x8a0 net/ipv4/af_inet.c:154
Modules linked in:
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
RIP: 0010:inet_sock_destruct+0x6df/0x8a0 net/ipv4/af_inet.c:154
Code: ff e8 c5 07 e1 f8 0f 0b e9 07 fe ff ff e8 b9 07 e1 f8 0f 0b e9 3f fe ff ff e8 ad 07 e1 f8 0f 0b e9 95 fd ff ff e8 a1 07 e1 f8 <0f> 0b e9 9f fe ff ff e8 b5 4d 32 f9 e9 7a fc ff ff 4c 89 e7 e8 e8
RSP: 0018:ffffc900001e0c48 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 00000000ffff9000 RCX: 0000000000000100
RDX: ffff8880167b9d40 RSI: ffffffff88a2cdef RDI: 0000000000000005
RBP: ffff88807e2bf2c0 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000ffff9000 R11: 0000000000000043 R12: ffff88807e2bf2e8
R13: ffff88807e2bf534 R14: ffff88807e2bf340 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f529cb87218 CR3: 0000000030651000 CR4: 0000000000350ee0
Call Trace:
__sk_destruct+0x4d/0x770 net/core/sock.c:2135
sk_destruct net/core/sock.c:2183 [inline]
__sk_free+0x175/0x460 net/core/sock.c:2194
sk_free+0x7c/0xa0 net/core/sock.c:2205
sock_put include/net/sock.h:1968 [inline]
tcp_write_timer+0x24b/0x2b0 net/ipv4/tcp_timer.c:644
call_timer_fn+0x1a0/0x6f0 kernel/time/timer.c:1700
expire_timers+0x29b/0x570 kernel/time/timer.c:1751
__run_timers kernel/time/timer.c:2022 [inline]
__run_timers kernel/time/timer.c:1995 [inline]
run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035
__do_softirq+0x29d/0x9d3 kernel/softirq.c:571
invoke_softirq kernel/softirq.c:445 [inline]
__irq_exit_rcu+0x114/0x190 kernel/softirq.c:650
irq_exit_rcu+0x9/0x20 kernel/softirq.c:662
sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1107
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline]
RIP: 0010:acpi_safe_halt+0x40/0x50 drivers/acpi/processor_idle.c:113
Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d e7 75 a3 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f
RSP: 0018:ffffc90000177d20 EFLAGS: 00000246
RAX: ffff8880167b9d40 RBX: 0000000000000000 RCX: ffffffff8a0e93c5
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888144b4e864 R08: 0000000000000001 R09: ffff8880b9936cab
R10: ffffed1017326d95 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888144b4e800 R14: ffff888144b4e864 R15: 0000000000000000
acpi_idle_do_entry+0x53/0x70 drivers/acpi/processor_idle.c:573
acpi_idle_enter+0x173/0x290 drivers/acpi/processor_idle.c:711
cpuidle_enter_state+0xd3/0x6f0 drivers/cpuidle/cpuidle.c:267
cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388
cpuidle_idle_call kernel/sched/idle.c:215 [inline]
do_idle+0x305/0x3e0 kernel/sched/idle.c:282
cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379
start_secondary+0x221/0x2b0 arch/x86/kernel/smpboot.c:264
secondary_startup_64_no_verify+0xce/0xdb
----------------
Code disassembly (best guess):
0: eb 03 jmp 0x5
2: 83 e3 01 and $0x1,%ebx
5: 89 de mov %ebx,%esi
7: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
c: 84 db test %bl,%bl
e: 75 1b jne 0x2b
10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
15: eb 0c jmp 0x23
17: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
1c: 0f 00 2d e7 75 a3 00 verw 0xa375e7(%rip) # 0xa3760a
23: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
28: fb sti
29: f4 hlt
* 2a: fa cli <-- trapping instruction
2b: 5b pop %rbx
2c: c3 retq
2d: cc int3
2e: 0f 1f 00 nopl (%rax)
31: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1)
38: 00 00
3a: 55 push %rbp
3b: 48 89 fd mov %rdi,%rbp
3e: 53 push %rbx
3f: 0f .byte 0xf