list_del corruption, ffff0000cc176c10->prev is LIST_POISON2 (dead000000000122) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:61! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 UID: 0 PID: 7586 Comm: syz.2.222 Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 lr : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 sp : ffff80009ca87680 x29: ffff80009ca87680 x28: ffff700013950f04 x27: ffff0000cc176c00 x26: dfff800000000000 x25: ffff0000d0be8a58 x24: 1fffe0001e701480 x23: ffff0000f380a468 x22: dfff800000000000 x21: dead000000000122 x20: ffff0000cc177c10 x19: ffff0000cc176c10 x18: 0000000000000008 x17: 6165642820324e4f x16: ffff80008b22c470 x15: ffff700011eb116c x14: 1ffff00011eb116c x13: 0000000000000004 x12: ffffffffffffffff x11: 0000000000040000 x10: 000000000003ffff x9 : bea48ac230256100 x8 : bea48ac230256100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80009ca86df8 x4 : ffff80008f5fb200 x3 : ffff800080381c08 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000004e Call trace: __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] destroy_workqueue+0x6e4/0xdc0 kernel/workqueue.c:5827 gfs2_fill_super+0xe78/0x1f98 fs/gfs2/ops_fstype.c:1310 get_tree_bdev+0x320/0x470 fs/super.c:1635 gfs2_get_tree+0x54/0x1b4 fs/gfs2/ops_fstype.c:1329 vfs_get_tree+0x90/0x28c fs/super.c:1800 do_new_mount+0x278/0x900 fs/namespace.c:3472 path_mount+0x590/0xe04 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount fs/namespace.c:3997 [inline] __arm64_sys_mount+0x45c/0x5a8 fs/namespace.c:3997 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: b0044c80 91348000 aa1303e1 953c48bf (d4210000) ---[ end trace 0000000000000000 ]---