BUG: corrupted list in dst_destroy list_del corruption, ffff888026cd2890->next is NULL ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 174 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 Workqueue: netns cleanup_net RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 lib/list_debug.c:52 Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 RAX: 0000000000000033 RBX: ffff888026cd2890 RCX: ba9622f0541bf600 RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff11004d9a512 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556264ff4138 CR3: 000000007b138000 CR4: 00000000003526f0 Call Trace: __list_del_entry_valid include/linux/list.h:132 [inline] __list_del_entry include/linux/list.h:223 [inline] list_del_init include/linux/list.h:295 [inline] dst_destroy+0x202/0x5a0 net/core/dst.c:163 rcu_do_batch kernel/rcu/tree.c:2617 [inline] rcu_core+0x7cd/0x1070 kernel/rcu/tree.c:2869 handle_softirqs+0x22a/0x870 kernel/softirq.c:626 __do_softirq kernel/softirq.c:660 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:727 irq_exit_rcu+0x9/0x30 kernel/softirq.c:743 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 kernel/locking/spinlock.c:194 Code: f7 e8 3d b7 f0 f5 f7 c3 00 02 00 00 74 05 e8 20 0e 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 69 e2 f5 65 8b 05 6d 11 6b 07 85 c0 74 18 5b 41 5e e9 91 48 RSP: 0018:ffffc900031875b0 EFLAGS: 00000206 RAX: 0000000000000006 RBX: 0000000000000283 RCX: 0000000080000002 RDX: 0000000000000006 RSI: ffffffff8defcb55 RDI: 0000000000000001 RBP: ffff88801e75bd00 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16 R10: dffffc0000000000 R11: fffffbfff2023d17 R12: dffffc0000000000 R13: 1ffff110170e7768 R14: ffff88801e75c778 R15: ffff8880b873bb40 class_raw_spinlock_irqsave_destructor include/linux/spinlock.h:570 [inline] try_to_wake_up+0x7be/0x1390 kernel/sched/core.c:4130 kthread_stop+0x177/0x610 kernel/kthread.c:759 destroy_workqueue+0x107/0xc60 kernel/workqueue.c:5975 wg_destruct+0x1ec/0x310 drivers/net/wireguard/device.c:257 netdev_run_todo+0xf58/0x1130 net/core/dev.c:11736 default_device_exit_batch+0x986/0xa00 net/core/dev.c:13087 ops_exit_list net/core/net_namespace.c:205 [inline] ops_undo_list+0x52b/0x940 net/core/net_namespace.c:252 cleanup_net+0x56b/0x800 net/core/net_namespace.c:704 process_one_work+0x949/0x1650 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0xb46/0x1140 kernel/workqueue.c:3443 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 lib/list_debug.c:52 Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 RAX: 0000000000000033 RBX: ffff888026cd2890 RCX: ba9622f0541bf600 RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff11004d9a512 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556264ff4138 CR3: 000000007b138000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: f7 e8 imul %eax 2: 3d b7 f0 f5 f7 cmp $0xf7f5f0b7,%eax 7: c3 ret 8: 00 02 add %al,(%rdx) a: 00 00 add %al,(%rax) c: 74 05 je 0x13 e: e8 20 0e 1c f6 call 0xf61c0e33 13: 9c pushf 14: 58 pop %rax 15: a9 00 02 00 00 test $0x200,%eax 1a: 75 27 jne 0x43 1c: f7 c3 00 02 00 00 test $0x200,%ebx 22: 74 01 je 0x25 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi * 2a: e8 54 69 e2 f5 call 0xf5e26983 <-- trapping instruction 2f: 65 8b 05 6d 11 6b 07 mov %gs:0x76b116d(%rip),%eax # 0x76b11a3 36: 85 c0 test %eax,%eax 38: 74 18 je 0x52 3a: 5b pop %rbx 3b: 41 5e pop %r14 3d: e9 .byte 0xe9 3e: 91 xchg %eax,%ecx 3f: 48 rex.W Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 2026/03/01 09:17:08 parsed 1 programs [ 72.560648][ T5820] cgroup: Unknown subsys name 'net' [ 72.692035][ T5820] cgroup: Unknown subsys name 'cpuset' [ 72.700353][ T5820] cgroup: Unknown subsys name 'rlimit' [ 74.048757][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.586059][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.156340][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.164658][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.173710][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.182546][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.191401][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.824456][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 78.919637][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.927087][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.934643][ T5882] bridge_slave_0: entered allmulticast mode [ 78.942158][ T5882] bridge_slave_0: entered promiscuous mode [ 78.951760][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.959413][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.966664][ T5882] bridge_slave_1: entered allmulticast mode [ 78.974190][ T5882] bridge_slave_1: entered promiscuous mode [ 79.011445][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.024752][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.058866][ T5882] team0: Port device team_slave_0 added [ 79.066928][ T5882] team0: Port device team_slave_1 added [ 79.094660][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.102539][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.128509][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.141425][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.148518][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.174660][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.219251][ T5882] hsr_slave_0: entered promiscuous mode [ 79.226088][ T5882] hsr_slave_1: entered promiscuous mode [ 79.372669][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.384898][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.394800][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.405055][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.437234][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.444464][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.452434][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.459574][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.524083][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.544724][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.553020][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.570534][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.584590][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.591869][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.606132][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.613313][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.775253][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.831306][ T5882] veth0_vlan: entered promiscuous mode [ 79.844236][ T5882] veth1_vlan: entered promiscuous mode [ 79.880230][ T5882] veth0_macvtap: entered promiscuous mode [ 79.891250][ T5882] veth1_macvtap: entered promiscuous mode [ 79.913388][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.932355][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.952092][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.961672][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.972170][ T174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.981079][ T174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.122624][ T174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.211475][ T174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.303217][ T174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.343147][ T174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.789016][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.798389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.829702][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.837679][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/01 09:17:19 executed programs: 0 [ 81.251927][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.261129][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.272024][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.280183][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.287660][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.435582][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 81.516661][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.524044][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.532103][ T5928] bridge_slave_0: entered allmulticast mode [ 81.540468][ T5928] bridge_slave_0: entered promiscuous mode [ 81.549804][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.557059][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.564594][ T5928] bridge_slave_1: entered allmulticast mode [ 81.573043][ T5928] bridge_slave_1: entered promiscuous mode [ 81.608028][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.624049][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.684341][ T5928] team0: Port device team_slave_0 added [ 81.695004][ T5928] team0: Port device team_slave_1 added [ 81.749889][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.756859][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.784049][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.798775][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.805997][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.833639][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.906684][ T5928] hsr_slave_0: entered promiscuous mode [ 81.914063][ T5928] hsr_slave_1: entered promiscuous mode [ 81.921361][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 81.927252][ T5928] Cannot create hsr debugfs directory [ 83.202980][ T174] bridge_slave_1: left allmulticast mode [ 83.208874][ T174] bridge_slave_1: left promiscuous mode [ 83.215164][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.227054][ T174] bridge_slave_0: left allmulticast mode [ 83.233494][ T174] bridge_slave_0: left promiscuous mode [ 83.240293][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.369348][ T5141] Bluetooth: hci0: command tx timeout [ 83.394246][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.405586][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.415373][ T174] bond0 (unregistering): Released all slaves [ 83.512116][ T174] hsr_slave_0: left promiscuous mode [ 83.518581][ T174] hsr_slave_1: left promiscuous mode [ 83.524849][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.535288][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.544330][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.552137][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.569094][ T174] veth1_macvtap: left promiscuous mode [ 83.574726][ T174] veth0_macvtap: left promiscuous mode [ 83.580798][ T174] veth1_vlan: left promiscuous mode [ 83.586139][ T174] veth0_vlan: left promiscuous mode [ 83.862659][ T174] team0 (unregistering): Port device team_slave_1 removed [ 83.881840][ T174] team0 (unregistering): Port device team_slave_0 removed [ 84.068586][ C0] list_del corruption, ffff888026cd2890->next is NULL [ 84.075827][ C0] ------------[ cut here ]------------ [ 84.081280][ C0] kernel BUG at lib/list_debug.c:53! [ 84.086577][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 84.092811][ C0] CPU: 0 UID: 0 PID: 174 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.102241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.112285][ C0] Workqueue: netns cleanup_net [ 84.117044][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 84.123970][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 [ 84.143753][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 84.149826][ C0] RAX: 0000000000000033 RBX: ffff888026cd2890 RCX: ba9622f0541bf600 [ 84.157931][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 84.165900][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 84.173856][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff11004d9a512 [ 84.181995][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.189967][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 84.198895][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.205501][ C0] CR2: 0000556264ff4138 CR3: 000000007b138000 CR4: 00000000003526f0 [ 84.213554][ C0] Call Trace: [ 84.216855][ C0] [ 84.219739][ C0] dst_destroy+0x202/0x5a0 [ 84.224163][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 84.230058][ C0] ? rcu_core+0x751/0x1070 [ 84.234468][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 84.239741][ C0] rcu_core+0x7cd/0x1070 [ 84.243982][ C0] ? __pfx_rcu_core+0x10/0x10 [ 84.248710][ C0] ? sched_balance_domains+0xf9/0x900 [ 84.254158][ C0] handle_softirqs+0x22a/0x870 [ 84.258999][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 84.263751][ C0] __irq_exit_rcu+0x5f/0x150 [ 84.268320][ C0] irq_exit_rcu+0x9/0x30 [ 84.272549][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 84.278162][ C0] [ 84.281071][ C0] [ 84.283980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.289944][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 84.296358][ C0] Code: f7 e8 3d b7 f0 f5 f7 c3 00 02 00 00 74 05 e8 20 0e 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 69 e2 f5 65 8b 05 6d 11 6b 07 85 c0 74 18 5b 41 5e e9 91 48 [ 84.316050][ C0] RSP: 0018:ffffc900031875b0 EFLAGS: 00000206 [ 84.322104][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 0000000080000002 [ 84.330090][ C0] RDX: 0000000000000006 RSI: ffffffff8defcb55 RDI: 0000000000000001 [ 84.338703][ C0] RBP: ffff88801e75bd00 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16 [ 84.346688][ C0] R10: dffffc0000000000 R11: fffffbfff2023d17 R12: dffffc0000000000 [ 84.354646][ C0] R13: 1ffff110170e7768 R14: ffff88801e75c778 R15: ffff8880b873bb40 [ 84.362673][ C0] try_to_wake_up+0x7be/0x1390 [ 84.367429][ C0] kthread_stop+0x177/0x610 [ 84.371947][ C0] destroy_workqueue+0x107/0xc60 [ 84.376950][ C0] ? destroy_workqueue+0x891/0xc60 [ 84.382039][ C0] wg_destruct+0x1ec/0x310 [ 84.386455][ C0] ? __pfx_wg_destruct+0x10/0x10 [ 84.391370][ C0] netdev_run_todo+0xf58/0x1130 [ 84.396294][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 84.401558][ C0] ? unregister_netdevice_queue+0x19b/0x360 [ 84.407694][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 84.414086][ C0] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 84.420235][ C0] default_device_exit_batch+0x986/0xa00 [ 84.425868][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 84.432003][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 84.438134][ C0] ops_undo_list+0x52b/0x940 [ 84.442706][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 84.447788][ C0] ? idr_destroy+0x218/0x290 [ 84.452361][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 84.457447][ C0] cleanup_net+0x56b/0x800 [ 84.461835][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 84.466747][ C0] ? process_one_work+0x87c/0x1650 [ 84.471930][ C0] process_one_work+0x949/0x1650 [ 84.476847][ C0] ? __pfx_process_one_work+0x10/0x10 [ 84.482280][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.487550][ C0] worker_thread+0xb46/0x1140 [ 84.492227][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 84.498013][ C0] kthread+0x388/0x470 [ 84.502060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 84.507148][ C0] ? __pfx_kthread+0x10/0x10 [ 84.511711][ C0] ret_from_fork+0x51e/0xb90 [ 84.516278][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 84.521362][ C0] ? __switch_to+0xc7d/0x1450 [ 84.526020][ C0] ? __pfx_kthread+0x10/0x10 [ 84.530588][ C0] ret_from_fork_asm+0x1a/0x30 [ 84.535327][ C0] [ 84.538319][ C0] Modules linked in: [ 84.542203][ C0] ---[ end trace 0000000000000000 ]--- [ 84.547637][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 84.554554][ C0] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f e9 52 5c f8 06 cc 48 c7 c7 a0 e8 27 8c 48 89 de e8 12 51 6e fc 90 <0f> 0b 48 c7 c7 00 e9 27 8c 48 89 de e8 00 51 6e fc 90 0f 0b 4c 89 [ 84.574148][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00010046 [ 84.580191][ C0] RAX: 0000000000000033 RBX: ffff888026cd2890 RCX: ba9622f0541bf600 [ 84.588149][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 84.596109][ C0] RBP: 0000000000000203 R08: ffffc90000007ae7 R09: 1ffff92000000f5c [ 84.604072][ C0] R10: dffffc0000000000 R11: fffff52000000f5d R12: 1ffff11004d9a512 [ 84.612021][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.619969][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 84.628874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.635444][ C0] CR2: 0000556264ff4138 CR3: 000000007b138000 CR4: 00000000003526f0 [ 84.643855][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 85.719847][ C0] Shutting down cpus with NMI [ 85.724898][ C0] Kernel Offset: disabled [ 85.729214][ C0] Rebooting in 86400 seconds.. syzkaller build log: go env (err=) AR='ar' CC='gcc' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_ENABLED='1' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' CXX='g++' GCCGO='gccgo' GO111MODULE='auto' GOAMD64='v1' GOARCH='amd64' GOAUTH='netrc' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOCACHEPROG='' GODEBUG='' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3582431865=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.24.4' GOWORK='' PKG_CONFIG='pkg-config' git status (err=) HEAD detached at e2beed91937 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=e2beed91937c0ace342f19a2e9afb67adb3a828a -X github.com/google/syzkaller/prog.gitRevisionDate=20250911-084951" ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=e2beed91937c0ace342f19a2e9afb67adb3a828a -X github.com/google/syzkaller/prog.gitRevisionDate=20250911-084951" ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=e2beed91937c0ace342f19a2e9afb67adb3a828a -X github.com/google/syzkaller/prog.gitRevisionDate=20250911-084951" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"e2beed91937c0ace342f19a2e9afb67adb3a828a\" /usr/bin/ld: /tmp/ccRHBR8Q.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x386): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./tools/check-syzos.sh 2>/dev/null