ums_eneub6250 7-1:1.0: USB Mass Storage device detected scsi host1: usb-storage 7-1:1.0 list_add double add: new=ffff88804047fc18, prev=ffff88804047fc18, next=ffff8880564ea078. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:35! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 8958 Comm: kworker/0:11 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: usb_hub_wq hub_event RIP: 0010:__list_add_valid_or_report.cold+0x34/0x36 lib/list_debug.c:35 Code: eb ff 90 0f 0b 48 c7 c7 00 24 60 8c e8 ba e6 eb ff 90 0f 0b 48 89 d9 4c 89 ea 48 89 ee 48 c7 c7 40 26 60 8c e8 a2 e6 eb ff 90 <0f> 0b 48 89 de 48 c7 c7 00 27 60 8c e8 90 e6 eb ff 90 0f 0b 48 89 RSP: 0018:ffffc900064d6c20 EFLAGS: 00010082 RAX: 0000000000000058 RBX: ffff8880564ea078 RCX: 0000000000000000 RDX: 0000000000000058 RSI: ffffffff81e8c2e9 RDI: fffff52000c9ad75 RBP: ffff88804047fc18 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000002 R11: fffffffffffcd3f8 R12: ffff8880564ea080 R13: ffff88804047fc18 R14: 0000000000000000 R15: ffff88804047fc18 FS: 0000000000000000(0000) GS:ffff888123bd4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b5b1eb7c0 CR3: 000000007e4c4000 CR4: 00000000003526f0 Call Trace: __list_add_valid include/linux/list.h:96 [inline] __list_add include/linux/list.h:158 [inline] list_add_tail include/linux/list.h:191 [inline] usb_hcd_link_urb_to_ep+0x220/0x3a0 drivers/usb/core/hcd.c:1154 dummy_urb_enqueue+0x2b5/0x880 drivers/usb/gadget/udc/dummy_hcd.c:1310 usb_hcd_submit_urb+0x268/0x2150 drivers/usb/core/hcd.c:1542 usb_submit_urb+0x827/0x19b0 drivers/usb/core/urb.c:586 usb_stor_msg_common+0x241/0x560 drivers/usb/storage/transport.c:143 usb_stor_bulk_transfer_buf+0x17c/0x420 drivers/usb/storage/transport.c:395 ene_send_scsi_cmd+0x12b/0x610 drivers/usb/storage/ene_ub6250.c:502 ene_ub6250_probe+0x2c0/0x430 drivers/usb/storage/ene_ub6250.c:2360 usb_probe_interface+0x303/0x8f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:706 __driver_probe_device+0x20e/0x450 drivers/base/dd.c:868 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153 bus_probe_device+0x64/0x160 drivers/base/bus.c:620 device_add+0x121d/0x1970 drivers/base/core.c:3772 usb_set_configuration+0xd97/0x1c60 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0xa1/0xe0 drivers/usb/core/generic.c:250 usb_probe_device+0xef/0x400 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x241/0xa60 drivers/base/dd.c:706 __driver_probe_device+0x20e/0x450 drivers/base/dd.c:868 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153 bus_probe_device+0x64/0x160 drivers/base/bus.c:620 device_add+0x121d/0x1970 drivers/base/core.c:3772 usb_new_device.part.0+0xcc2/0x1686 drivers/usb/core/hub.c:2703 usb_new_device include/linux/workqueue.h:714 [inline] hub_port_connect drivers/usb/core/hub.c:5575 [inline] hub_port_connect_change drivers/usb/core/hub.c:5715 [inline] port_event drivers/usb/core/hub.c:5879 [inline] hub_event.cold+0x1e3/0xe90 drivers/usb/core/hub.c:5961 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_add_valid_or_report.cold+0x34/0x36 lib/list_debug.c:35 Code: eb ff 90 0f 0b 48 c7 c7 00 24 60 8c e8 ba e6 eb ff 90 0f 0b 48 89 d9 4c 89 ea 48 89 ee 48 c7 c7 40 26 60 8c e8 a2 e6 eb ff 90 <0f> 0b 48 89 de 48 c7 c7 00 27 60 8c e8 90 e6 eb ff 90 0f 0b 48 89 RSP: 0018:ffffc900064d6c20 EFLAGS: 00010082 RAX: 0000000000000058 RBX: ffff8880564ea078 RCX: 0000000000000000 RDX: 0000000000000058 RSI: ffffffff81e8c2e9 RDI: fffff52000c9ad75 RBP: ffff88804047fc18 R08: 0000000000000007 R09: 0000000000000000 R10: 8000000000000002 R11: fffffffffffcd3f8 R12: ffff8880564ea080 R13: ffff88804047fc18 R14: 0000000000000000 R15: ffff88804047fc18 FS: 0000000000000000(0000) GS:ffff888123bd4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b5b1eb7c0 CR3: 000000007e4c4000 CR4: 00000000003526f0