list_add corruption. prev->next should be next (ffff8801ce3966a8), but was (null). (prev=ffff8801a4dc4640). ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:28! invalid opcode: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 23347 Comm: syz-executor2 Not tainted 4.14.0-rc4+ #80 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801cae321c0 task.stack: ffff8801a5ca0000 RIP: 0010:__list_add_valid+0x8f/0xd0 lib/list_debug.c:26 RSP: 0018:ffff8801a5ca7428 EFLAGS: 00010282 RAX: 0000000000000075 RBX: ffff8801ce3966a8 RCX: 0000000000000000 RDX: 0000000000000075 RSI: ffffffff8158d38e RDI: ffffed0034b94e79 RBP: ffff8801a5ca7440 R08: ffff8801a5ca6b18 R09: 0000000000000000 R10: 00000000fba00196 R11: 0000000000000000 R12: ffff8801dad5c900 R13: ffff8801d80ffd00 R14: ffff8801ce3966a8 R15: ffff8801a4dc4640 FS: 00007f8f3bb71700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020eb1000 CR3: 00000001cd437000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_add include/linux/list.h:59 [inline] list_add_tail include/linux/list.h:92 [inline] sock_map_ctx_update_elem.isra.12+0x9e9/0x1a00 kernel/bpf/sockmap.c:768 sock_map_update_elem+0x145/0x2d0 kernel/bpf/sockmap.c:843 map_update_elem kernel/bpf/syscall.c:620 [inline] SYSC_bpf kernel/bpf/syscall.c:1577 [inline] SyS_bpf+0xfa4/0x4090 kernel/bpf/syscall.c:1552 entry_SYSCALL_64_fastpath+0x1f/0xbe RIP: 0033:0x4520a9 RSP: 002b:00007f8f3bb70c08 EFLAGS: 00000216 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00000000007182c0 RCX: 00000000004520a9 RDX: 0000000000000020 RSI: 00000000202cc000 RDI: 0000000000000002 RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000216 R12: 00000000004bb874 R13: 00000000ffffffff R14: 0000000000000002 R15: 0000000000000001 Code: 00 00 00 5b 41 5c 5d c3 48 89 d9 48 c7 c7 e0 dd fd 84 e8 aa 9b 19 ff 0f 0b 48 89 f1 48 c7 c7 a0 de fd 84 48 89 de e8 96 9b 19 ff <0f> 0b 48 89 f2 48 89 d9 4c 89 e6 48 c7 c7 20 df fd 84 e8 7f 9b RIP: __list_add_valid+0x8f/0xd0 lib/list_debug.c:26 RSP: ffff8801a5ca7428 ---[ end trace 342a30e4a593ac26 ]--- Kernel panic - not syncing: Fatal exception in interrupt Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..