list_add corruption. next->prev should be prev (ffff80000dad05c0), but was dead000000000122. (next=ffff0000d4958000).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:29!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 13136 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-16387-g9598c377d828 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_add_valid+0x9c/0xb8 lib/list_debug.c:27
lr : __list_add_valid+0x9c/0xb8 lib/list_debug.c:27
sp : ffff80001609b8f0
x29: ffff80001609b8f0 x28: 0000000000000030 x27: ffff0000c04404e0
x26: 0000000000000000 x25: ffff80000d84dbc0 x24: ffff80000d84dba8
x23: ffff80000d8314a0 x22: ffff80000dad0190 x21: ffff0000d4958000
x20: ffff80000dad05c0 x19: ffff0000d2a99800 x18: 00000000000002ed
x17: ffff80000c15d8bc x16: ffff80000dd86118 x15: ffff0000d2df4e00
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000d2df4e00
x11: ff808000081cbbc8 x10: 0000000000000000 x9 : 3b1fbceaf23ee500
x8 : 3b1fbceaf23ee500 x7 : ffff80000816c254 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff0001fefdef08 x1 : 0000000100000000 x0 : 0000000000000075
Call trace:
 __list_add_valid+0x9c/0xb8 lib/list_debug.c:27
 __list_add include/linux/list.h:69 [inline]
 list_add include/linux/list.h:88 [inline]
 nfc_llcp_register_device+0x2c4/0x308 net/nfc/llcp_core.c:1603
 nfc_register_device+0x74/0x208 net/nfc/core.c:1124
 nci_register_device+0x338/0x3b0 net/nfc/nci/core.c:1257
 virtual_ncidev_open+0xa0/0x10c drivers/nfc/virtual_ncidev.c:148
 misc_open+0x1b8/0x200 drivers/char/misc.c:165
 chrdev_open+0x2b4/0x2e8 fs/char_dev.c:414
 do_dentry_open+0x364/0x748 fs/open.c:882
 vfs_open+0x38/0x48 fs/open.c:1013
 do_open fs/namei.c:3557 [inline]
 path_openat+0xe34/0x11f0 fs/namei.c:3714
 do_filp_open+0xdc/0x1b8 fs/namei.c:3741
 do_sys_openat2+0xb8/0x22c fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_sys_openat fs/open.c:1342 [inline]
 __se_sys_openat fs/open.c:1337 [inline]
 __arm64_sys_openat+0xb0/0xe0 fs/open.c:1337
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x104 arch/arm64/kernel/syscall.c:193
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
Code: b001c2a0 9134cc00 aa0803e1 94ac3987 (d4210000) 
---[ end trace 0000000000000000 ]---