------------[ cut here ]------------ WARNING: CPU: 1 PID: 291489 at net/core/stream.c:212 sk_stream_kill_queues+0x2ba/0x390 net/core/stream.c:212 Modules linked in: CPU: 1 PID: 291489 Comm: syz-executor.4 Not tainted 5.10.170 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:sk_stream_kill_queues+0x2ba/0x390 net/core/stream.c:212 Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e e2 00 00 00 8b ab 20 02 00 00 e9 60 ff ff ff e8 bf d0 2d fe 0f 0b eb 97 e8 b6 d0 2d fe <0f> 0b eb a0 e8 ad d0 2d fe 0f 0b e9 a5 fe ff ff 4c 89 e7 e8 ce 81 RSP: 0018:ffff88804f457ac0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff83126b9a RDX: ffff88804aec3380 RSI: ffffffff83126bfa RDI: 0000000000000005 RBP: 0000000000000b00 R08: 0000000000000001 R09: ffffffff8679977f R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804adc59a0 R13: ffffffff8795adc0 R14: ffffed10095b8b28 R15: ffff88804adc5940 FS: 0000555555710400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d124000 CR3: 000000004d260000 CR4: 0000000000350ee0 Call Trace: inet_csk_destroy_sock+0x1aa/0x440 net/ipv4/inet_connection_sock.c:893 tcp_done+0x241/0x340 net/ipv4/tcp.c:4172 tcp_rcv_state_process+0x25d1/0x4aa0 net/ipv4/tcp_input.c:6552 tcp_v6_do_rcv+0x3e4/0x1500 net/ipv6/tcp_ipv6.c:1525 sk_backlog_rcv include/net/sock.h:1037 [inline] __release_sock+0x139/0x3b0 net/core/sock.c:2542 tcp_close+0x6e6/0x1140 net/ipv4/tcp.c:2611 inet_release+0xe9/0x1f0 net/ipv4/af_inet.c:431 inet6_release+0x4c/0x70 net/ipv6/af_inet6.c:475 __sock_release+0xd2/0x290 net/socket.c:596 sock_close+0x18/0x20 net/socket.c:1266 __fput+0x285/0x980 fs/file_table.c:281 task_work_run+0xe2/0x1a0 kernel/task_work.c:161 tracehook_notify_resume include/linux/tracehook.h:188 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x186/0x190 kernel/entry/common.c:199 syscall_exit_to_user_mode+0x38/0x230 kernel/entry/common.c:274 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fc12023572b Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007ffd83f4b600 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007fc12023572b RDX: 00007fc12039a508 RSI: ffffffff83e1d1cd RDI: 0000000000000004 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d2211d8 R10: 00000000000016b6 R11: 0000000000000293 R12: 0000000000140a56 R13: 00000000000003e8 R14: 00007fc120395f60 R15: 0000000000140a4f irq event stamp: 2251 hardirqs last enabled at (2261): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2561 hardirqs last disabled at (2270): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2476 softirqs last enabled at (1794): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (1723): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace 74d1acc5961588d9 ]--- program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO audit: type=1400 audit(1677342297.627:137): avc: denied { execmod } for pid=295930 comm="syz-executor.1" path="/syzkaller-testdir061290679/syzkaller.2cQowQ/1529/file0" dev="sda" ino=16177 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'.