------------[ cut here ]------------ WARNING: CPU: 1 PID: 15393 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155 Modules linked in: CPU: 1 PID: 15393 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00025-ga2c63a3f3d68 #0 Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:156 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : refcount_read include/linux/refcount.h:136 [inline] lr : inet_sock_destruct+0x320/0x63c net/ipv4/af_inet.c:154 sp : ffff8000895f7c50 x29: ffff8000895f7c50 x28: ffff000016fc6890 x27: 1fffe00002df8d9e x26: ffff00000e673c00 x25: ffff000016fc6ce8 x24: 1fffe00002df8d12 x23: ffff800084f2b3a0 x22: ffff000016fc6828 x21: 1fffe00002df8d05 x20: ffff000016fc6800 x19: ffff800087cdb320 x18: ffff00000e674670 x17: ffff7fffe3fed000 x16: 0000000000000006 x15: 1fffe00001cce8cd x14: 1fffe00001cce8d2 x13: 1fffe00001cce8ca x12: ffff600002df8d54 x11: 1fffe00002df8d53 x10: ffff600002df8d53 x9 : dfff800000000000 x8 : ffff000016fc6a9f x7 : 0000000000000001 x6 : ffff600002df8d53 x5 : ffff000016fc6a9c x4 : ffff600002df8d54 x3 : 1fffe00002df8d50 x2 : 0000000000000000 x1 : 0000000000000007 x0 : 0000000000000400 Call trace: inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155 inet6_sock_destruct+0x20/0x30 net/ipv6/af_inet6.c:116 __sk_destruct+0x4c/0x548 net/core/sock.c:2175 rcu_do_batch kernel/rcu/tree.c:2196 [inline] rcu_core+0x960/0x1bd0 kernel/rcu/tree.c:2471 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2488 __do_softirq+0x2e8/0xde8 kernel/softirq.c:554 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x334/0x434 kernel/softirq.c:633 irq_exit_rcu+0x14/0x80 kernel/softirq.c:645 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:551 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:176 [inline] arch_local_irq_restore arch/arm64/include/asm/irqflags.h:196 [inline] lock_release+0x648/0x890 kernel/locking/lockdep.c:5777 __might_fault mm/memory.c:6220 [inline] __might_fault+0xfc/0x138 mm/memory.c:6213 rseq_get_rseq_cs kernel/rseq.c:161 [inline] rseq_ip_fixup kernel/rseq.c:281 [inline] __rseq_handle_notify_resume+0xec/0x13fc kernel/rseq.c:329 rseq_handle_notify_resume include/linux/rseq.h:38 [inline] resume_user_mode_work include/linux/resume_user_mode.h:62 [inline] do_notify_resume+0x128/0x25c arch/arm64/kernel/entry-common.c:151 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc_compat+0xfc/0x17c arch/arm64/kernel/entry-common.c:853 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:862 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:603 irq event stamp: 2767041 hardirqs last enabled at (2767040): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (2767040): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (2767041): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (2766942): [] fpsimd_restore_current_state+0x44/0xe4 arch/arm64/kernel/fpsimd.c:1784 softirqs last disabled at (2767009): [] ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 ---[ end trace 0000000000000000 ]---