list_del corruption, ffffea000190a508->next is LIST_POISON1 (dead000000000100)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:45!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3480 Comm: kworker/1:2 Not tainted 5.1.0-rc3+ #159
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events cache_reap
RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f lib/list_debug.c:45
Code: e8 a5 63 29 fe 0f 0b 4c 89 f6 48 c7 c7 e0 90 a1 87 e8 94 63 29 fe 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 90 a1 87 e8 80 63 29 fe <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 90 a1 87 e8 6c 63 29 fe 0f 0b
RSP: 0018:ffff88809b90fbd8 EFLAGS: 00010086
RAX: 000000000000004e RBX: ffffe8ffffd67448 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815affc6 RDI: ffffed1013721f6d
RBP: ffff88809b90fbf0 R08: 000000000000004e R09: ffffed1015d25011
R10: ffffed1015d25010 R11: ffff8880ae928087 R12: dead000000000200
R13: dead000000000100 R14: ffffea000190a508 R15: ffffea000190a508
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd08e0eb40 CR3: 00000000a52c0000 CR4: 00000000001406e0
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del include/linux/list.h:125 [inline]
 free_block+0xd8/0x250 mm/slab.c:3418
 drain_array_locked+0x36/0x90 mm/slab.c:2203
 drain_array+0x8c/0xb0 mm/slab.c:4028
 cache_reap+0xf4/0x280 mm/slab.c:4069
 process_one_work+0x98e/0x1790 kernel/workqueue.c:2269
 worker_thread+0x98/0xe40 kernel/workqueue.c:2415
 kthread+0x357/0x430 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 164100db0332b18f ]---
RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f lib/list_debug.c:45
Code: e8 a5 63 29 fe 0f 0b 4c 89 f6 48 c7 c7 e0 90 a1 87 e8 94 63 29 fe 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 90 a1 87 e8 80 63 29 fe <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 90 a1 87 e8 6c 63 29 fe 0f 0b
RSP: 0018:ffff88809b90fbd8 EFLAGS: 00010086
RAX: 000000000000004e RBX: ffffe8ffffd67448 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff815affc6 RDI: ffffed1013721f6d
RBP: ffff88809b90fbf0 R08: 000000000000004e R09: ffffed1015d25011
R10: ffffed1015d25010 R11: ffff8880ae928087 R12: dead000000000200
R13: dead000000000100 R14: ffffea000190a508 R15: ffffea000190a508
FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd08e0eb40 CR3: 00000000a52c0000 CR4: 00000000001406e0