slab: use a singly-linked list for bufctls