IPVS: Creating netns size=2688 id=6
IPVS: ftp: loaded support on port[0] = 21
IPVS: Creating netns size=2688 id=7
IPVS: ftp: loaded support on port[0] = 21
------------[ cut here ]------------
WARNING: CPU: 0 PID: 3658 at lib/list_debug.c:62 __list_del_entry+0xdd/0xe0 lib/list_debug.c:60()
list_del corruption. next->prev should be ffff8800b8f891c8, but was ffff8800b8f895c8
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 3658 Comm: syz-executor Not tainted 4.1.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffffffff82668c78 ffff8800b8f1fa08 ffffffff820471b4 0000000000000032
 ffffffff8263e396 ffff8800b8f1fa88 ffffffff82045151 0000000000000000
 ffffffff00000008 ffff8800b8f1fa98 ffff8800b8f1fa38 0000000000000006
Call Trace:
 [<ffffffff820471b4>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff820471b4>] dump_stack+0x4c/0x65 lib/dump_stack.c:50
 [<ffffffff82045151>] panic+0xcd/0x211 kernel/panic.c:111
 [<ffffffff8116b87b>] warn_slowpath_common+0xbb/0xc0 kernel/panic.c:442
 [<ffffffff8116b8c1>] warn_slowpath_fmt+0x41/0x50 kernel/panic.c:458
 [<ffffffff8156c13d>] __list_del_entry+0xdd/0xe0 lib/list_debug.c:60
 [<ffffffff8156c151>] list_del+0x11/0x40 lib/list_debug.c:77
 [<ffffffff81a8a2f0>] cma_cancel_listens drivers/infiniband/core/cma.c:967 [inline]
 [<ffffffff81a8a2f0>] cma_cancel_operation+0xe0/0x230 drivers/infiniband/core/cma.c:995
 [<ffffffff81a8a48f>] rdma_destroy_id+0x4f/0x260 drivers/infiniband/core/cma.c:1047
 [<ffffffff81a9b891>] ucma_free_ctx+0x31/0x1b0 drivers/infiniband/core/ucma.c:456
 [<ffffffff81a9ba8d>] ucma_close+0x7d/0xc0 drivers/infiniband/core/ucma.c:1565
 [<ffffffff812f483a>] __fput+0xea/0x200 fs/file_table.c:208
 [<ffffffff812f4999>] ____fput+0x9/0x10 fs/file_table.c:244
 [<ffffffff81190f74>] task_work_run+0xc4/0xf0 kernel/task_work.c:123
 [<ffffffff8116ee28>] exit_task_work include/linux/task_work.h:21 [inline]
 [<ffffffff8116ee28>] do_exit+0x358/0xc40 kernel/exit.c:746
 [<ffffffff8116f79b>] do_group_exit+0x4b/0xc0 kernel/exit.c:874
 [<ffffffff8117f1e1>] get_signal+0x2a1/0xa10 kernel/signal.c:2358
 [<ffffffff8107b683>] do_signal+0x23/0xaf0 arch/x86/kernel/signal.c:690
 [<ffffffff8107c1a8>] do_notify_resume+0x58/0x70 arch/x86/kernel/signal.c:735
 [<ffffffff8205776b>] int_signal+0x12/0x17
Kernel Offset: disabled