list_del corruption. prev->next should be ffff88810630f048, but was ffff888105bcb048. (prev=ffff88810a243048)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:64!
invalid opcode: 0000 [#1] PREEMPT SMP
CPU: 1 PID: 4912 Comm: syz-executor.3 Not tainted 6.6.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
RIP: 0010:__list_del_entry_valid_or_report+0x8b/0xa0 lib/list_debug.c:62
Code: c7 c7 74 c7 11 82 e8 54 78 60 00 0f 0b 48 c7 c7 ac c7 11 82 e8 46 78 60 00 0f 0b 48 c7 c7 e4 c7 11 82 48 89 c1 e8 35 78 60 00 <0f> 0b 48 c7 c7 2e c8 11 82 e8 27 78 60 00 0f 0b 0f 1f 44 00 00 f3
RSP: 0018:ffffc90002943e90 EFLAGS: 00010046
RAX: 000000000000006d RBX: ffff88810630e000 RCX: d754303f9cfdb800
RDX: ffff888237d28180 RSI: ffffffff820e637f RDI: 00000000ffffffff
RBP: ffff88810aa49000 R08: 0000000000000000 R09: ffffffff824c1730
R10: 00000000ffffffff R11: 00000000ffffdfff R12: ffff888106e6d060
R13: 0000000000000000 R14: ffff88810630f008 R15: 0000000000000282
FS:  0000555555da5480(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f89987c6000 CR3: 0000000106f32000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del include/linux/list.h:229 [inline]
 ptp_release+0x38/0x90 drivers/ptp/ptp_chardev.c:127
 posix_clock_release+0x2a/0x70 kernel/time/posix-clock.c:157
 __fput+0xfc/0x270 fs/file_table.c:384
 __do_sys_close fs/open.c:1572 [inline]
 __se_sys_close+0x67/0xb0 fs/open.c:1557
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f89986a99da
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
RSP: 002b:00007ffdd2b6ac70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89986a99da
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b33760000 R09: 00007f89987c9f8c
R10: 00007ffdd2b6adc0 R11: 0000000000000293 R12: 00007f899822e0a8
R13: ffffffffffffffff R14: 00007f899822e000 R15: 000000000000c6a2
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x8b/0xa0 lib/list_debug.c:62
Code: c7 c7 74 c7 11 82 e8 54 78 60 00 0f 0b 48 c7 c7 ac c7 11 82 e8 46 78 60 00 0f 0b 48 c7 c7 e4 c7 11 82 48 89 c1 e8 35 78 60 00 <0f> 0b 48 c7 c7 2e c8 11 82 e8 27 78 60 00 0f 0b 0f 1f 44 00 00 f3
RSP: 0018:ffffc90002943e90 EFLAGS: 00010046
RAX: 000000000000006d RBX: ffff88810630e000 RCX: d754303f9cfdb800
RDX: ffff888237d28180 RSI: ffffffff820e637f RDI: 00000000ffffffff
RBP: ffff88810aa49000 R08: 0000000000000000 R09: ffffffff824c1730
R10: 00000000ffffffff R11: 00000000ffffdfff R12: ffff888106e6d060
R13: 0000000000000000 R14: ffff88810630f008 R15: 0000000000000282
FS:  0000555555da5480(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f89987c6000 CR3: 0000000106f32000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400