non-slab/vmalloc memory list_add corruption. prev->next should be next (ffff0000c812b840), but was ffff0000c8731248. (prev=ffff0000c8731248). ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:34! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 4388 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: kblockd blk_mq_requeue_work pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 lr : __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 sp : ffff8000976b79f0 x29: ffff8000976b79f0 x28: ffff8000976b7aa8 x27: ffff8000976b7aa0 x26: 1fffe00019025709 x25: ffff0000c812b840 x24: ffff0000c812b848 x23: 1fffe000190e6249 x22: dfff800000000000 x21: ffff0000c8731248 x20: ffff0000c8731248 x19: ffff0000c812b840 x18: 00000000ffffffff x17: 3034386232313863 x16: 3030303066666666 x15: 28207478656e2065 x14: 0000000000000d23 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000002 x9 : c50a2fd1c429bd00 x8 : c50a2fd1c429bd00 x7 : ffff800080482944 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008048d444 x2 : 0000000100000001 x1 : ffff0000c5143b00 x0 : 0000000000000075 Call trace: __list_add_valid_or_report+0x144/0x148 lib/list_debug.c:32 (P) __list_add_valid include/linux/list.h:104 [inline] __list_add include/linux/list.h:169 [inline] list_add_tail include/linux/list.h:206 [inline] blk_mq_request_bypass_insert+0x130/0x1cc block/blk-mq.c:2564 blk_mq_requeue_work+0x3a4/0x52c block/blk-mq.c:1573 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 Code: 91230000 aa1303e1 aa1403e3 979c4bc9 (d4210000) ---[ end trace 0000000000000000 ]---