R10: 0000000020ade000 R11: 0000000000000212 R12: 00000000004b75bb R13: 00007f8214d9abc8 R14: 00000000004b75bb R15: 0000000000000000 list_del corruption. prev->next should be 0000000039010915, but was 00000000581b4753 ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 13740 Comm: syz-executor3 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: 0000:ffffc90000e3bcc0 EFLAGS: 00010082 RAX: 0000000000000054 RBX: ffffc90000e3bd88 RCX: ffffffff8123dede RDX: 00000000000002cc RSI: ffffc900039ce000 RDI: ffffffff81239f68 RBP: ffffc90000e3bcc0 R08: 0000000000000001 R09: 0000000000000000 R10: ffffc90000e3bc38 R11: ffff88020e250280 R12: ffffc90000e3bda0 R13: ffff8801fd7e2600 R14: 0000000000000286 R15: 0000000000000000 FS: 00007fdb7c8c6700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020d2e000 CR3: 00000001fccbf005 CR4: 00000000001606e0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] finish_wait+0x47/0x90 kernel/sched/wait.c:369 unix_stream_data_wait net/unix/af_unix.c:2228 [inline] unix_stream_read_generic+0x83d/0xb00 net/unix/af_unix.c:2325 unix_stream_splice_read+0x85/0xb0 net/unix/af_unix.c:2499 sock_splice_read+0x61/0x80 net/socket.c:873 do_splice_to+0x95/0xc0 fs/splice.c:880 do_splice fs/splice.c:1173 [inline] SYSC_splice fs/splice.c:1402 [inline] SyS_splice+0x762/0x7b0 fs/splice.c:1382 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a09 RSP: 002b:00007fdb7c8c5c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000113 RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452a09 RDX: 0000000000000018 RSI: 0000000000000000 RDI: 000000000000001a RBP: 0000000000000589 R08: 0000000000000058 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f5578 R13: 00000000ffffffff R14: 00007fdb7c8c66d4 R15: 0000000000000000 Code: 82 e8 85 dd ae ff 0f 0b 48 89 fe 48 c7 c7 08 34 e8 82 e8 74 dd ae ff 0f 0b 48 89 f2 48 89 fe 48 c7 c7 40 34 e8 82 e8 60 dd ae ff <0f> 0b 48 c7 c7 80 34 e8 82 e8 52 dd ae ff 0f 0b 90 90 90 90 90 RIP: __list_del_entry_valid+0x78/0x90 lib/list_debug.c:51 RSP: ffffc90000e3bcc0 ---[ end trace 8566648cb27e1323 ]--- Kernel panic - not syncing: Fatal exception Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..