dvb-usb: error while querying for an remote control event. non-slab/vmalloc memory list_add corruption. prev->next should be next (ffffffff8a2d0740), but was ffffffff84b733f5. (prev=ffff88813448c250). ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:32! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 6445 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events request_module_async RIP: 0010:__list_add_valid_or_report+0x12b/0x190 lib/list_debug.c:32 Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 75 8a 87 48 89 ee e8 56 df c9 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 75 8a 87 e8 3e df c9 RSP: 0018:ffffc90013ee7b70 EFLAGS: 00010286 RAX: 0000000000000075 RBX: ffff888134f01ac8 RCX: ffffffff815e4f95 RDX: 0000000000000000 RSI: ffffffff815ecb79 RDI: 0000000000000005 RBP: ffffffff8a2d0740 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: ffff88811fee0aa8 R12: ffff888134f00250 R13: ffffffff8a2d0748 R14: ffffc90013ee7ca0 R15: ffff888100094800 FS: 0000000000000000(0000) GS:ffff888268bf4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe7b4f21000 CR3: 000000011a928000 CR4: 00000000003506f0 Call Trace: __list_add_valid include/linux/list.h:96 [inline] __list_add include/linux/list.h:158 [inline] list_add_tail include/linux/list.h:191 [inline] em28xx_init_extension+0x48/0x200 drivers/media/usb/em28xx/em28xx-core.c:1114 request_module_async+0x61/0x70 drivers/media/usb/em28xx/em28xx-cards.c:3457 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x74f/0xa30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_add_valid_or_report+0x12b/0x190 lib/list_debug.c:32 Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 75 8a 87 48 89 ee e8 56 df c9 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 75 8a 87 e8 3e df c9 RSP: 0018:ffffc90013ee7b70 EFLAGS: 00010286 RAX: 0000000000000075 RBX: ffff888134f01ac8 RCX: ffffffff815e4f95 RDX: 0000000000000000 RSI: ffffffff815ecb79 RDI: 0000000000000005 RBP: ffffffff8a2d0740 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: ffff88811fee0aa8 R12: ffff888134f00250 R13: ffffffff8a2d0748 R14: ffffc90013ee7ca0 R15: ffff888100094800 FS: 0000000000000000(0000) GS:ffff888268bf4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe7b4f21000 CR3: 000000011a928000 CR4: 00000000003506f0