syzbot
BUG: corrupted list in process_scheduled_works
Status:
moderation: reported on 2026/09/05 07:36
Subsystems:
block
Labels:
prio:high
[Documentation on labels]
Reported-by: syzbot+965ff2a20de4a9ea44fa@syzkaller.appspotmail.com
First crash: 4d07h, last: 4d07h
Sample crash report:
non-slab/vmalloc memory
list_del corruption. next->prev should be ffff0000c9271c48, but was ffff800093417aa0. (next=ffff0000c9271c48)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:67!
Internal error: Oops - BUG: 00000000f2000800 [#1] SMP
Modules linked in:
CPU: 0 UID: 0 PID: 4388 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: kblockd blk_mq_requeue_work
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65
lr : __list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65
sp : ffff800093417a40
x29: ffff800093417a40 x28: ffff800093417aa0 x27: 1fffe00019049d65
x26: ffff0000c824eb28 x25: ffff800093417aa0 x24: dfff800000000000
x23: ffff0000c9271c50 x22: dfff800000000000 x21: 1fffe0001924e38a
x20: ffff0000c9271c48 x19: ffff0000c9271c48 x18: 1fffe00034bb7428
x17: 20747562202c3834 x16: 6331373239633030 x15: 3030666666662065
x14: 6220646c756f6873 x13: 0000000000000001 x12: ffff0000c81d9d40
x11: 0000000000000000 x10: 0000000000000001 x9 : 8202ecd0ec991c00
x8 : 8202ecd0ec991c00 x7 : ffff80008048c60c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008049731c
x2 : 0000000100000000 x1 : ffff0000c81d9d40 x0 : 000000000000006d
Call trace:
__list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65 (P)
__list_del_entry_valid include/linux/list.h:132 [inline]
__list_del_entry include/linux/list.h:246 [inline]
list_del_init include/linux/list.h:318 [inline]
blk_mq_requeue_work+0x2b4/0x52c block/blk-mq.c:1552
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838
Code: 91328000 aa1303e1 aa1403e3 979c2c05 (d4210000)
---[ end trace 0000000000000000 ]---
* Struck through repros no longer work on HEAD.