------------[ cut here ]------------ WARNING: CPU: 0 PID: 4331 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x508/0x68c net/ipv4/af_inet.c:155 Modules linked in: CPU: 0 UID: 0 PID: 4331 Comm: kworker/u8:3 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 Hardware name: linux,dummy-virt (DT) Workqueue: events_power_efficient gc_worker pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : inet_sock_destruct+0x508/0x68c net/ipv4/af_inet.c:156 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : refcount_read include/linux/refcount.h:136 [inline] lr : inet_sock_destruct+0x320/0x68c net/ipv4/af_inet.c:154 sp : ffff800080007c50 x29: ffff800080007c50 x28: 0000000000000002 x27: ffff00001e48c410 x26: ffff0000128f1e00 x25: ffff00001e48c868 x24: ffff000069fa6f00 x23: 1fffe00003c91882 x22: ffff00001e48c3a8 x21: 1fffe00003c91875 x20: ffff80008831f2c0 x19: ffff00001e48c380 x18: 00000000ffffffff x17: ffff7fffe33de000 x16: 0000000000000000 x15: ffff0000128f2880 x14: 1fffe0000251e50f x13: 1fffe0000251e523 x12: ffff600003c918c4 x11: 1fffe00003c918c3 x10: ffff600003c918c3 x9 : dfff800000000000 x8 : ffff00001e48c61f x7 : 0000000000000001 x6 : ffff600003c918c3 x5 : ffff00001e48c61c x4 : ffff600003c918c4 x3 : 1fffe00003c918c0 x2 : 0000000000000000 x1 : 0000000000000007 x0 : 000000000000046b Call trace: inet_sock_destruct+0x508/0x68c net/ipv4/af_inet.c:155 inet6_sock_destruct+0x20/0x30 net/ipv6/af_inet6.c:116 __sk_destruct+0x4c/0x548 net/core/sock.c:2259 rcu_do_batch kernel/rcu/tree.c:2567 [inline] rcu_core+0x910/0x1ab4 kernel/rcu/tree.c:2823 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2840 handle_softirqs+0x2e8/0xd40 kernel/softirq.c:554 __do_softirq+0x14/0x20 kernel/softirq.c:588 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x1c/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x334/0x434 kernel/softirq.c:637 irq_exit_rcu+0x14/0x80 kernel/softirq.c:649 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:551 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] seqcount_lockdep_reader_access include/linux/seqlock.h:74 [inline] nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:345 [inline] gc_worker+0x268/0xf9c net/netfilter/nf_conntrack_core.c:1534 process_one_work+0x7b8/0x189c kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x730/0xb74 kernel/workqueue.c:3391 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 100159 hardirqs last enabled at (100158): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (100158): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (100159): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:470 softirqs last enabled at (100102): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (100102): [] handle_softirqs+0x878/0xd40 kernel/softirq.c:582 softirqs last disabled at (100125): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 ---[ end trace 0000000000000000 ]---