slab net_namespace start ffff8880315c0000 pointer offset 4344 size 9280
list_del corruption. prev->next should be ffff88814d335208, but was ffff888030c9ad08. (prev=ffff8880315c10f8)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:64!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 11549 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 lib/list_debug.c:62
Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d
RSP: 0018:ffffc90003657938 EFLAGS: 00010246
RAX: 000000000000006d RBX: ffff88814d335208 RCX: d0e4d36cba463800
RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110062b821f
R13: dffffc0000000000 R14: ffff8880315c10f8 R15: ffff8880315c10f8
FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000004ddf0000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:132 [inline]
 __list_del_entry include/linux/list.h:223 [inline]
 list_del include/linux/list.h:237 [inline]
 sctp_destroy_sock+0xb4/0x370 net/sctp/socket.c:5164
 sk_common_release+0x75/0x310 net/core/sock.c:3961
 sctp_close+0x77e/0x900 net/sctp/socket.c:1551
 inet_release+0x144/0x190 net/ipv4/af_inet.c:437
 __sock_release net/socket.c:662 [inline]
 sock_close+0xc3/0x240 net/socket.c:1455
 __fput+0x44c/0xa70 fs/file_table.c:468
 task_work_run+0x1d4/0x260 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0x6b5/0x2300 kernel/exit.c:966
 do_group_exit+0x21c/0x2d0 kernel/exit.c:1107
 __do_sys_exit_group kernel/exit.c:1118 [inline]
 __se_sys_exit_group kernel/exit.c:1116 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1116
 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fedb198f6c9
Code: Unable to access opcode bytes at 0x7fedb198f69f.
RSP: 002b:00007ffec7c406b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fedb198f6c9
RDX: 00007fedb1946b97 RSI: 0000000000000000 RDI: 000000000000000b
RBP: 0000000000000003 R08: 00007ffec7c40b47 R09: 000000000000000b
R10: 00007fedb1be5fa0 R11: 0000000000000246 R12: 00007fedb1be627c
R13: 00007fedb1be6270 R14: 000000000000030d R15: 0000000000000005
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 lib/list_debug.c:62
Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d
RSP: 0018:ffffc90003657938 EFLAGS: 00010246
RAX: 000000000000006d RBX: ffff88814d335208 RCX: d0e4d36cba463800
RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110062b821f
R13: dffffc0000000000 R14: ffff8880315c10f8 R15: ffff8880315c10f8
FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000004ddf0000 CR4: 00000000003526f0