list_del corruption. prev->next should be ffff0000c9a4d000, but was ffff0000d6a6b000. (prev=ffff800018a92060)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 25745 Comm: syz-executor.5 Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
lr : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
sp : ffff8000237277a0
x29: ffff8000237277a0 x28: 1fffe0001aea428f x27: 1fffe0001aea4285
x26: ffff0000d7521428 x25: ffff0000cd7a39c0 x24: 1fffe000193490c1
x23: ffff800018a92060 x22: dfff800000000000 x21: ffff800018a92060
x20: ffff0000c2cd7000 x19: ffff0000c9a4d000 x18: 1fffe00036848fbe
x17: ffff800015ead000 x16: ffff80001243078c x15: 0000000000000002
x14: ffff800015eb0570 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 926f4d50def15c00
x8 : 926f4d50def15c00 x7 : ffff80000828a7b8 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80000aa8e264
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 local_release net/nfc/llcp_core.c:172 [inline]
 kref_put include/linux/kref.h:65 [inline]
 nfc_llcp_local_put+0x6c/0x1b4 net/nfc/llcp_core.c:182
 nfc_llcp_unregister_device+0xa4/0x11c net/nfc/llcp_core.c:1620
 nfc_unregister_device+0x150/0x290 net/nfc/core.c:1179
 nci_unregister_device+0x1dc/0x21c net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:163
 __fput+0x30c/0x7bc fs/file_table.c:321
 ____fput+0x20/0x30 fs/file_table.c:349
 task_work_run+0x230/0x2e0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2180/0x3c90 arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x90/0x15c arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: 910a0000 aa1303e1 aa1503e3 95e4a84c (d4210000) 
---[ end trace 0000000000000000 ]---