list_del corruption. next->prev should be ffff000121668a00, but was b5e43f3f28242a6c. (next=ffff000110f24500) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:64! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 6.1.0-rc6-syzkaller-32662-g6d464646530f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid+0xcc/0xd0 lib/list_debug.c:62 lr : __list_del_entry_valid+0xcc/0xd0 lib/list_debug.c:62 sp : ffff80000f303ad0 x29: ffff80000f303ad0 x28: 000000000000000a x27: 000000000000000a x26: 0000000000000000 x25: ffff000110cd36d8 x24: 0000000000000001 x23: 0000000000000000 x22: ffff00011ddd01b0 x21: ffff000121668a00 x20: 0000000000000000 x19: ffff00011ddd0150 x18: 00000000000000c0 x17: 20747562202c3030 x16: ffff80000dbe6158 x15: ffff0000c0330000 x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c0330000 x11: ff808000081c4d40 x10: 0000000000000000 x9 : 6a86eff285e3f500 x8 : 6a86eff285e3f500 x7 : ffff80000c08e4f4 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0001fefddcc8 x1 : 0000000100000101 x0 : 000000000000006d Call trace: __list_del_entry_valid+0xcc/0xd0 lib/list_debug.c:62 __list_del_entry include/linux/list.h:134 [inline] list_del include/linux/list.h:148 [inline] ref_tracker_free+0x188/0x340 lib/ref_tracker.c:146 netns_tracker_free include/net/net_namespace.h:335 [inline] put_net_track include/net/net_namespace.h:349 [inline] __sk_destruct+0x27c/0x4e4 net/core/sock.c:2151 sk_destruct net/core/sock.c:2167 [inline] __sk_free+0x238/0x290 net/core/sock.c:2178 sk_free+0x54/0xbc net/core/sock.c:2189 deferred_put_nlk_sk+0x11c/0x168 net/netlink/af_netlink.c:745 rcu_do_batch+0x1a4/0x584 kernel/rcu/tree.c:2250 rcu_core+0x2bc/0x5b4 kernel/rcu/tree.c:2510 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2527 _stext+0x168/0x37c run_ksoftirqd+0x4c/0x21c kernel/softirq.c:934 smpboot_thread_fn+0x248/0x3ec kernel/smpboot.c:164 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863 Code: d4210000 b001b760 91380800 94aa910b (d4210000) ---[ end trace 0000000000000000 ]---