list_add corruption. prev->next should be next (ffffe8ffffc660f8), but was ffffe8ffffc66102. (prev=ffffe8ffffc660f8).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:34!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: xfs-conv/loop1 xfs_end_io
RIP: 0010:__list_add_valid_or_report+0xeb/0xf0 lib/list_debug.c:32
Code: 0f 0b 48 c7 c7 e0 dd 5e 8c 4c 89 e6 4c 89 f1 e8 ab 53 46 fc 90 0f 0b 48 c7 c7 60 de 5e 8c 4c 89 f6 4c 89 e1 e8 96 53 46 fc 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
RSP: 0018:ffffc900000e7170 EFLAGS: 00010246
RAX: 0000000000000075 RBX: ffffe8ffffc66100 RCX: 0f61e98034803100
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900000e7350 R08: ffffffff817f0a3c R09: 1ffff9200001cdc8
R10: dffffc0000000000 R11: fffff5200001cdc9 R12: ffffe8ffffc660f8
R13: dffffc0000000000 R14: ffffe8ffffc660f8 R15: ffff88805ec6e440
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555837a05c8 CR3: 000000003078e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_add_valid include/linux/list.h:88 [inline]
 __list_add include/linux/list.h:150 [inline]
 list_add_tail include/linux/list.h:183 [inline]
 xlog_cil_insert_items fs/xfs/xfs_log_cil.c:669 [inline]
 xlog_cil_commit+0x1c23/0x3040 fs/xfs/xfs_log_cil.c:1759
 __xfs_trans_commit+0x403/0xc40 fs/xfs/xfs_trans.c:898
 xfs_trans_roll+0x152/0x4a0 fs/xfs/xfs_trans.c:1060
 xfs_defer_trans_roll+0x1a0/0x600 fs/xfs/libxfs/xfs_defer.c:479
 xfs_defer_finish_noroll+0x977/0x15b0 fs/xfs/libxfs/xfs_defer.c:688
 xfs_trans_commit+0x15a/0x220 fs/xfs/xfs_trans.c:949
 xfs_reflink_end_cow_extent+0x9dd/0xbc0 fs/xfs/xfs_reflink.c:814
 xfs_reflink_end_cow+0x29d/0x780 fs/xfs/xfs_reflink.c:880
 xfs_end_ioend+0x232/0x470 fs/xfs/xfs_aops.c:129
 xfs_end_io+0x2e5/0x380 fs/xfs/xfs_aops.c:173
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xeb/0xf0 lib/list_debug.c:32
Code: 0f 0b 48 c7 c7 e0 dd 5e 8c 4c 89 e6 4c 89 f1 e8 ab 53 46 fc 90 0f 0b 48 c7 c7 60 de 5e 8c 4c 89 f6 4c 89 e1 e8 96 53 46 fc 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
RSP: 0018:ffffc900000e7170 EFLAGS: 00010246
RAX: 0000000000000075 RBX: ffffe8ffffc66100 RCX: 0f61e98034803100
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc900000e7350 R08: ffffffff817f0a3c R09: 1ffff9200001cdc8
R10: dffffc0000000000 R11: fffff5200001cdc9 R12: ffffe8ffffc660f8
R13: dffffc0000000000 R14: ffffe8ffffc660f8 R15: ffff88805ec6e440
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555837a05c8 CR3: 000000000e736000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400