list_del corruption, ffff888056427470->next is NULL
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:53!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 5946 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:__list_del_entry_valid_or_report+0xe0/0x190 lib/list_debug.c:52
Code: 4d 39 3c 24 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 c7 60 1c 80 8c 4c 89 fe e8 a1 b7 32 fc 90 <0f> 0b 48 c7 c7 c0 1c 80 8c 4c 89 fe e8 8f b7 32 fc 90 0f 0b 48 89
RSP: 0018:ffffc900044afcd0 EFLAGS: 00010246
RAX: 0000000000000033 RBX: dffffc0000000000 RCX: 76d2e0ab3bd07e00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff888029aaa010 R08: ffffffff81a1102c R09: 1ffff92000895f34
R10: dffffc0000000000 R11: fffff52000895f35 R12: dead4ead00000000
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888056427470
FS:  000055558fcda500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f04001762d8 CR3: 0000000032490000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __list_del_entry_valid include/linux/list.h:124 [inline]
 __list_del_entry include/linux/list.h:215 [inline]
 list_del_init include/linux/list.h:287 [inline]
 list_lru_del+0x9a/0x1f0 mm/list_lru.c:206
 list_lru_del_obj+0x17b/0x250 mm/list_lru.c:223
 inode_lru_list_del fs/inode.c:563 [inline]
 iput_final fs/inode.c:1943 [inline]
 iput+0x6ec/0xa50 fs/inode.c:1972
 __dentry_kill+0x20d/0x630 fs/dcache.c:643
 dput+0x19f/0x2b0 fs/dcache.c:885
 __fput+0x60b/0x9f0 fs/file_table.c:472
 __do_sys_close fs/open.c:1580 [inline]
 __se_sys_close fs/open.c:1565 [inline]
 __x64_sys_close+0x7f/0x110 fs/open.c:1565
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f03fff8ba4a
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
RSP: 002b:00007fff101a4980 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f03fff8ba4a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fff101a49dc R08: 00007fff101a42dc R09: 00007fff101a46e7
R10: 00007fff101a4360 R11: 0000000000000293 R12: 0000000000000002
R13: 00000000000927c0 R14: 0000000000015050 R15: 00007fff101a4a30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0xe0/0x190 lib/list_debug.c:52
Code: 4d 39 3c 24 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 c7 60 1c 80 8c 4c 89 fe e8 a1 b7 32 fc 90 <0f> 0b 48 c7 c7 c0 1c 80 8c 4c 89 fe e8 8f b7 32 fc 90 0f 0b 48 89
RSP: 0018:ffffc900044afcd0 EFLAGS: 00010246
RAX: 0000000000000033 RBX: dffffc0000000000 RCX: 76d2e0ab3bd07e00
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff888029aaa010 R08: ffffffff81a1102c R09: 1ffff92000895f34
R10: dffffc0000000000 R11: fffff52000895f35 R12: dead4ead00000000
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888056427470
FS:  000055558fcda500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f04001762d8 CR3: 0000000032490000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400