------------[ cut here ]------------
WARNING: CPU: 1 PID: 3195 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155
Modules linked in:
CPU: 1 PID: 3195 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00159-gc942a0cd3603 #0
Hardware name: linux,dummy-virt (DT)
pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:156
lr : instrument_atomic_read include/linux/instrumented.h:68 [inline]
lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
lr : refcount_read include/linux/refcount.h:136 [inline]
lr : inet_sock_destruct+0x320/0x63c net/ipv4/af_inet.c:154
sp : ffff8000895f7c50
x29: ffff8000895f7c50 x28: ffff00000ef82790 x27: 1fffe00001df057e
x26: ffff0000124abc00 x25: ffff00000ef82be8 x24: 1fffe00001df04f2
x23: ffff800084f2b3a0 x22: ffff00000ef82728 x21: 1fffe00001df04e5
x20: ffff00000ef82700 x19: ffff800087cdb2a0 x18: ffff0000124ac670
x17: ffff80008052f4e8 x16: 0000000000000006 x15: 1fffe000024958cd
x14: 1fffe000024958e1 x13: 1fffe000024958ca x12: ffff600001df0534
x11: 1fffe00001df0533 x10: ffff600001df0533 x9 : dfff800000000000
x8 : ffff00000ef8299f x7 : 0000000000000001 x6 : ffff600001df0533
x5 : ffff00000ef8299c x4 : ffff600001df0534 x3 : 1fffe00001df0530
x2 : 0000000000000000 x1 : 0000000000000007 x0 : 0000000000000400
Call trace:
 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155
 inet6_sock_destruct+0x20/0x30 net/ipv6/af_inet6.c:116
 __sk_destruct+0x4c/0x548 net/core/sock.c:2175
 rcu_do_batch kernel/rcu/tree.c:2196 [inline]
 rcu_core+0x960/0x1bd0 kernel/rcu/tree.c:2471
 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2488
 __do_softirq+0x2e8/0xde8 kernel/softirq.c:554
 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81
 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0x334/0x434 kernel/softirq.c:633
 irq_exit_rcu+0x14/0x80 kernel/softirq.c:645
 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:551
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594
 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:176 [inline]
 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:196 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
 _raw_spin_unlock_irqrestore+0x40/0xac kernel/locking/spinlock.c:194
 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline]
 debug_check_no_obj_freed+0x27c/0x4f4 lib/debugobjects.c:1019
 slab_free_hook mm/slub.c:2078 [inline]
 slab_free mm/slub.c:4280 [inline]
 kmem_cache_free+0x294/0x450 mm/slub.c:4344
 jbd2_free_handle include/linux/jbd2.h:1596 [inline]
 jbd2_journal_stop+0x568/0xd80 fs/jbd2/transaction.c:1973
 __ext4_journal_stop+0xac/0x1b0 fs/ext4/ext4_jbd2.c:134
 __ext4_unlink+0x430/0x874 fs/ext4/namei.c:3296
 ext4_unlink+0x154/0x5e4 fs/ext4/namei.c:3321
 vfs_unlink+0x248/0x6f0 fs/namei.c:4335
 do_unlinkat+0x39c/0x4ac fs/namei.c:4399
 __do_sys_unlink fs/namei.c:4447 [inline]
 __se_sys_unlink fs/namei.c:4445 [inline]
 __arm64_sys_unlink+0x9c/0x100 fs/namei.c:4445
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x6c/0x25c arch/arm64/kernel/syscall.c:48
 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:133
 do_el0_svc_compat+0x40/0x64 arch/arm64/kernel/syscall.c:158
 el0_svc_compat+0x4c/0x17c arch/arm64/kernel/entry-common.c:852
 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:862
 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:603
irq event stamp: 147623
hardirqs last  enabled at (147622): [<ffff800084e8e5a4>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (147622): [<ffff800084e8e5a4>] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (147623): [<ffff800084e64480>] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (147226): [<ffff80008001d830>] fpsimd_restore_current_state+0x44/0xe4 arch/arm64/kernel/fpsimd.c:1784
softirqs last disabled at (147561): [<ffff80008001972c>] ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---