slab xfs_buf_item start ffff0000d21372a0 pointer offset 104 size 272 list_del corruption. next->prev should be ffff0000f17706c8, but was ffff0000f17706ff. (next=ffff0000d2137308) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:67! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 773 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: xfs-cil/loop0 xlog_cil_push_work pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid_or_report+0x1b0/0x1b4 lib/list_debug.c:65 lr : __list_del_entry_valid_or_report+0x1b0/0x1b4 lib/list_debug.c:65 sp : ffff80009d207700 x29: ffff80009d207700 x28: ffff0000d248b8b0 x27: dfff800000000000 x26: 1fffe0001e2ee0d9 x25: 000000000000000b x24: ffff0000f17706c8 x23: 1fffe0001a426e62 x22: dfff800000000000 x21: ffff0000d2137310 x20: ffff0000d2137308 x19: ffff0000f17706c8 x18: 00000000ffffffff x17: 20747562202c3863 x16: ffff80008ad0f308 x15: ffff700011e6ff40 x14: 1ffff00011e6ff40 x13: 0000000000000004 x12: ffffffffffffffff x11: ffff700011e6ff40 x10: 0000000000ff0100 x9 : d5ac4c7d7f97b900 x8 : d5ac4c7d7f97b900 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80009d207098 x4 : ffff80008f3f4fa0 x3 : ffff80008053fd64 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000006d Call trace: __list_del_entry_valid_or_report+0x1b0/0x1b4 lib/list_debug.c:65 (P) __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_move include/linux/list.h:298 [inline] xlog_cil_build_lv_chain fs/xfs/xfs_log_cil.c:1239 [inline] xlog_cil_push_work+0xb24/0x1f74 fs/xfs/xfs_log_cil.c:1381 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 Code: 91390000 aa1303e1 aa1403e3 9743cd95 (d4210000) ---[ end trace 0000000000000000 ]---