list_del corruption. next->prev should be ffff000015ebf000, but was dead000000000122. (next=ffff00001171f000)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:62!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 7091 Comm: syz-executor.1 Not tainted 6.3.0-rc6-syzkaller-00173-g7a934f4bd7d6 #0
Hardware name: linux,dummy-virt (DT)
pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x148/0x194 lib/list_debug.c:62
lr : __list_del_entry_valid+0x148/0x194 lib/list_debug.c:62
sp : ffff800018037970
x29: ffff800018037970 x28: ffff00000eb24468 x27: ffff00000a511e20
x26: ffff00001167b038 x25: 1fffe000022cf607 x24: 1fffe00002169234
x23: ffff0000117df600 x22: ffff0000117df018 x21: 1fffe00002bd7e00
x20: ffff000015ebf008 x19: ffff00001171f000 x18: 0000000006448db7
x17: 20747562202c3030 x16: 3066626535313030 x15: 3030666666662065
x14: 0000000000000001 x13: 00000000f1f1f1f1 x12: ffff700003006ed5
x11: 1ffff00003006ed4 x10: ffff700003006ed4 x9 : dfff800000000000
x8 : ffff8000180376a7 x7 : 00008ffffcff912c x6 : 0000000000000001
x5 : ffff8000180376a0 x4 : 1fffe00002102361 x3 : 0000000000000000
x2 : 0000000000000000 x1 : ffff000010811b00 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x148/0x194 lib/list_debug.c:62
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 local_release net/nfc/llcp_core.c:172 [inline]
 kref_put include/linux/kref.h:65 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:182 [inline]
 nfc_llcp_local_put net/nfc/llcp_core.c:177 [inline]
 nfc_llcp_unregister_device+0x98/0x20c net/nfc/llcp_core.c:1620
 nfc_unregister_device+0x120/0x298 net/nfc/core.c:1179
 nci_unregister_device+0x1c0/0x280 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x48/0xb0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x1ac/0x860 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x12c/0x214 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x914/0x26c8 arch/arm64/kernel/signal.c:1302
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x11c/0x140 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: 912b0000 aa1303e3 91108000 97c5bd18 (d4210000) 
---[ end trace 0000000000000000 ]---