------------[ cut here ]------------ WARNING: CPU: 1 PID: 19277 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155 Modules linked in: CPU: 1 PID: 19277 Comm: syz-executor.1 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:156 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : refcount_read include/linux/refcount.h:136 [inline] lr : inet_sock_destruct+0x320/0x63c net/ipv4/af_inet.c:154 sp : ffff8000895f7c50 x29: ffff8000895f7c50 x28: ffff0000201d8090 x27: 1fffe0000403b09e x26: ffff00000bd50000 x25: ffff0000201d84e8 x24: 1fffe0000403b012 x23: ffff800084f2b3a0 x22: ffff0000201d8028 x21: 1fffe0000403b005 x20: ffff0000201d8000 x19: ffff800087cdb320 x18: ffff00000bd50a70 x17: 0000000000000000 x16: 0000000000000006 x15: 1fffe000017aa14d x14: 1fffe000017aa161 x13: 1fffe000017aa14a x12: ffff60000403b054 x11: 1fffe0000403b053 x10: ffff60000403b053 x9 : dfff800000000000 x8 : ffff0000201d829f x7 : 0000000000000001 x6 : ffff60000403b053 x5 : ffff0000201d829c x4 : ffff60000403b054 x3 : 1fffe0000403b050 x2 : 0000000000000000 x1 : 0000000000000007 x0 : 0000000000000400 Call trace: inet_sock_destruct+0x508/0x63c net/ipv4/af_inet.c:155 inet6_sock_destruct+0x20/0x30 net/ipv6/af_inet6.c:116 __sk_destruct+0x4c/0x548 net/core/sock.c:2175 rcu_do_batch kernel/rcu/tree.c:2196 [inline] rcu_core+0x960/0x1bd0 kernel/rcu/tree.c:2471 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2488 __do_softirq+0x2e8/0xde8 kernel/softirq.c:554 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x334/0x434 kernel/softirq.c:633 irq_exit_rcu+0x14/0x80 kernel/softirq.c:645 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:551 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594 order_objects mm/slub.c:568 [inline] __update_cpu_freelist_fast+0x0/0xbc mm/slub.c:1383 kmalloc include/linux/slab.h:632 [inline] tomoyo_realpath_from_path+0x90/0x54c security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_number_perm+0x200/0x458 security/tomoyo/file.c:723 tomoyo_path_mkdir+0x98/0xe4 security/tomoyo/tomoyo.c:179 security_path_mkdir+0xd8/0x144 security/security.c:1824 do_mkdirat+0x110/0x294 fs/namei.c:4143 __do_sys_mkdir fs/namei.c:4166 [inline] __se_sys_mkdir fs/namei.c:4164 [inline] __arm64_sys_mkdir+0xbc/0x10c fs/namei.c:4164 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x6c/0x25c arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:133 do_el0_svc_compat+0x40/0x64 arch/arm64/kernel/syscall.c:158 el0_svc_compat+0x4c/0x17c arch/arm64/kernel/entry-common.c:852 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:862 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:603 irq event stamp: 1924607 hardirqs last enabled at (1924606): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1924606): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (1924607): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (1924382): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (1924382): [] __do_softirq+0x8d4/0xde8 kernel/softirq.c:583 softirqs last disabled at (1924541): [] ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 ---[ end trace 0000000000000000 ]---