------------[ cut here ]------------
WARNING: CPU: 0 PID: 31701 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155
Modules linked in:
CPU: 0 PID: 31701 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0
Hardware name: linux,dummy-virt (DT)
pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:156
lr : instrument_atomic_read include/linux/instrumented.h:68 [inline]
lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
lr : refcount_read include/linux/refcount.h:136 [inline]
lr : inet_sock_destruct+0x320/0x63c net/ipv4/af_inet.c:154
sp : ffff800080007c50
x29: ffff800080007c50 x28: ffff000013cfdb90 x27: 1fffe0000279fbfe
x26: ffff00000a315a00 x25: ffff000013cfdfe8 x24: 1fffe0000279fb72
x23: ffff800084f2b3a0 x22: ffff000013cfdb28 x21: 1fffe0000279fb65
x20: ffff000013cfdb00 x19: ffff800087cdb320 x18: ffff00000a316470
x17: ffff7fffe3fca000 x16: 0000000000000006 x15: 1fffe00001462c8d
x14: 1fffe00001462c97 x13: 1fffe00001462c8a x12: ffff60000279fbb4
x11: 1fffe0000279fbb3 x10: ffff60000279fbb3 x9 : dfff800000000000
x8 : ffff000013cfdd9f x7 : 0000000000000001 x6 : ffff60000279fbb3
x5 : ffff000013cfdd9c x4 : ffff60000279fbb4 x3 : 1fffe0000279fbb0
x2 : 0000000000000000 x1 : 0000000000000007 x0 : 0000000000000400
Call trace:
 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155
 inet6_sock_destruct+0x20/0x30 net/ipv6/af_inet6.c:116
 __sk_destruct+0x4c/0x548 net/core/sock.c:2175
 rcu_do_batch kernel/rcu/tree.c:2196 [inline]
 rcu_core+0x960/0x1bd0 kernel/rcu/tree.c:2471
 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2488
 __do_softirq+0x2e8/0xde8 kernel/softirq.c:554
 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81
 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0x334/0x434 kernel/softirq.c:633
 irq_exit_rcu+0x14/0x80 kernel/softirq.c:645
 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:551
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594
 __kasan_check_write+0x0/0x2c mm/kasan/shadow.c:32
 free_pages_and_swap_cache+0x1b8/0x304 mm/swap_state.c:329
 __tlb_batch_free_encoded_pages+0xb0/0x1cc mm/mmu_gather.c:136
 tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]
 tlb_flush_mmu+0xac/0x324 mm/mmu_gather.c:373
 zap_pte_range mm/memory.c:1683 [inline]
 zap_pmd_range mm/memory.c:1722 [inline]
 zap_pud_range mm/memory.c:1751 [inline]
 zap_p4d_range mm/memory.c:1772 [inline]
 unmap_page_range+0x10a0/0x2480 mm/memory.c:1793
 unmap_single_vma.constprop.0+0xb4/0x188 mm/memory.c:1839
 unmap_vmas+0x194/0x318 mm/memory.c:1883
 exit_mmap+0x134/0x9c4 mm/mmap.c:3267
 __mmput+0xa8/0x3a0 kernel/fork.c:1346
 mmput+0x88/0x98 kernel/fork.c:1368
 exit_mm kernel/exit.c:569 [inline]
 do_exit+0x6a4/0x202c kernel/exit.c:865
 do_group_exit+0xa4/0x208 kernel/exit.c:1027
 __do_sys_exit_group kernel/exit.c:1038 [inline]
 __se_sys_exit_group kernel/exit.c:1036 [inline]
 __arm64_sys_exit_group+0x3c/0x44 kernel/exit.c:1036
 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline]
 invoke_syscall+0x6c/0x25c arch/arm64/kernel/syscall.c:48
 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:133
 do_el0_svc_compat+0x40/0x64 arch/arm64/kernel/syscall.c:158
 el0_svc_compat+0x4c/0x17c arch/arm64/kernel/entry-common.c:852
 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:862
 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:603
irq event stamp: 4457
hardirqs last  enabled at (4456): [<ffff800084e8e824>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (4456): [<ffff800084e8e824>] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (4457): [<ffff800084e64700>] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (4400): [<ffff800080011034>] softirq_handle_end kernel/softirq.c:400 [inline]
softirqs last  enabled at (4400): [<ffff800080011034>] __do_softirq+0x8d4/0xde8 kernel/softirq.c:583
softirqs last disabled at (4427): [<ffff80008001972c>] ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---