------------[ cut here ]------------
sk->sk_forward_alloc
WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x653/0x800 net/ipv4/af_inet.c:162, CPU#0: ksoftirqd/0/15
Modules linked in:
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
RIP: 0010:inet_sock_destruct+0x653/0x800 net/ipv4/af_inet.c:162
Code: 3f 4d ff e9 06 fd ff ff e8 8a 1b ff f7 90 0f 0b 90 e9 35 fe ff ff e8 7c 1b ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 6e 1b ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 60 1b ff f7 90 0f 0b 90 e9 65 fe ff ff
RSP: 0018:ffffc90000007d88 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888035d17700 RCX: ffffffff8a097957
RDX: ffff88801e2c9ec0 RSI: ffffffff8a097a52 RDI: ffff88801e2c9ec0
RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000f70 R11: 000000000000755b R12: ffff888035d17700
R13: ffff888035d17790 R14: ffffffff81ee1b3d R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888124371000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2b899f16a4 CR3: 000000003472c000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 __sk_destruct+0x85/0xab0 net/core/sock.c:2352
 rcu_do_batch kernel/rcu/tree.c:2617 [inline]
 rcu_core+0x5a2/0x10d0 kernel/rcu/tree.c:2869
 handle_softirqs+0x1ea/0xa00 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1061
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 kernel/sched/core.c:5245
Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 3a ec b6 09 e8 35 94 3b 00 fb 48 8d bb b0 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
RSP: 0018:ffffc90000147c08 EFLAGS: 00000202
RAX: 00000000003eff6d RBX: ffff88801e2c9ec0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8df1f008 RDI: ffff88801e2cb570
RBP: ffffc90000147c60 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026821ec0
R13: 0000000000000001 R14: ffffffff90d811c4 R15: ffff8880b843b380
 context_switch kernel/sched/core.c:5391 [inline]
 __schedule+0x129d/0x67a0 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0xdd/0x390 kernel/sched/core.c:7283
 smpboot_thread_fn+0x893/0xaa0 kernel/smpboot.c:156
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	0a 00                	or     (%rax),%al
   2:	00 41 c7             	add    %al,-0x39(%rcx)
   5:	87 e0                	xchg   %esp,%eax
   7:	0d 00 00 00 00       	or     $0x0,%eax
   c:	00 00                	add    %al,(%rax)
   e:	e9 0f 04 00 00       	jmp    0x422
  13:	49 8d 7f 48          	lea    0x48(%r15),%rdi
  17:	e8 3a ec b6 09       	call   0x9b6ec56
  1c:	e8 35 94 3b 00       	call   0x3b9456
  21:	fb                   	sti
  22:	48 8d bb b0 16 00 00 	lea    0x16b0(%rbx),%rdi
* 29:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax <-- trapping instruction
  30:	fc ff df
  33:	48 89 fa             	mov    %rdi,%rdx
  36:	48 c1 ea 03          	shr    $0x3,%rdx
  3a:	0f b6 04 02          	movzbl (%rdx,%rax,1),%eax
  3e:	84                   	.byte 0x84