list_del corruption. prev->next should be ffff0000d06ee828, but was ffff800015b77a80. (prev=ffff800015b77a80) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:61! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4440 Comm: syz.0.1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59 lr : __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59 sp : ffff800021b57950 x29: ffff800021b57950 x28: ffff0000d2a2be00 x27: ffff0000d2a2be00 x26: dfff800000000000 x25: 0000000000000002 x24: ffff0000d06ec828 x23: ffff0000d06ee828 x22: dfff800000000000 x21: ffff800015b77a80 x20: ffff0000d06ec828 x19: ffff0000d06ee828 x18: 1fffe00033e6997e x17: 20747562202c3832 x16: ffff800011bb65f8 x15: 3030666666662065 x14: 0000000000000001 x13: 1ffff0000436ae90 x12: 0000000000080000 x11: 0000000000050662 x10: ffff800022129000 x9 : 8368a751c0eba400 x8 : 8368a751c0eba400 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800021b57418 x4 : ffff8000154a4e80 x3 : ffff80000a92ec3c x2 : ffff00019f34cd10 x1 : 0000000100000000 x0 : 000000000000006d Call trace: __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59 __list_del_entry include/linux/list.h:141 [inline] list_del include/linux/list.h:155 [inline] efivar_entry_remove+0x34/0x108 fs/efivarfs/vars.c:493 efivarfs_destroy+0x20/0x3c fs/efivarfs/super.c:246 efivar_entry_iter+0x94/0xdc fs/efivarfs/vars.c:720 efivarfs_kill_sb+0x5c/0x74 fs/efivarfs/super.c:320 deactivate_locked_super+0xb4/0x128 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x3a8/0x430 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1f4/0x280 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: 91300000 aa1303e1 aa1503e3 95c56534 (d4210000) ---[ end trace 0000000000000000 ]---