list_add double add: new=ffff0000c6ce5818, prev=ffff0000c6ce5818, next=ffff0000d91f8078.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:37!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6503 Comm: syz.2.1377 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_add_valid_or_report+0xbc/0x148 lib/list_debug.c:35
lr : __list_add_valid_or_report+0xbc/0x148 lib/list_debug.c:35
sp : ffff80009a857700
x29: ffff80009a857700 x28: 1fffe0001943fa42 x27: 1fffe0001943fa80
x26: 1fffe0001b23f010 x25: ffff0000c6ce5818 x24: ffff0000d91f8080
x23: 1fffe00018d9cb03 x22: dfff800000000000 x21: ffff0000c6ce5818
x20: ffff0000c6ce5818 x19: ffff0000d91f8078 x18: 1fffe000359eee28
x17: 3831383565633663 x16: 3030303066666666 x15: 3d76657270202c38
x14: 0000000000002a19 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000003 x9 : a1f09e1bd8bdaf00
x8 : a1f09e1bd8bdaf00 x7 : ffff800080484084 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80008048eb84
x2 : 0000000100000002 x1 : ffff0000cce38000 x0 : 0000000000000058
Call trace:
 __list_add_valid_or_report+0xbc/0x148 lib/list_debug.c:35 (P)
 __list_add_valid include/linux/list.h:104 [inline]
 __list_add include/linux/list.h:169 [inline]
 list_add_tail include/linux/list.h:206 [inline]
 usb_hcd_link_urb_to_ep+0x17c/0x2d0 drivers/usb/core/hcd.c:1154
 dummy_urb_enqueue+0x250/0x690 drivers/usb/gadget/udc/dummy_hcd.c:1314
 usb_hcd_submit_urb+0x2dc/0x169c drivers/usb/core/hcd.c:1542
 usb_submit_urb+0xd44/0x1458 drivers/usb/core/urb.c:586
 keyspan_usa49_send_setup+0x780/0xce0 drivers/usb/serial/keyspan.c:2466
 keyspan_send_setup+0x11c/0x178 drivers/usb/serial/keyspan.c:2763
 keyspan_dtr_rts+0x8c/0xdc drivers/usb/serial/keyspan.c:1577
 serial_port_dtr_rts+0x90/0xac drivers/usb/serial/usb-serial.c:822
 tty_port_lower_dtr_rts drivers/tty/tty_port.c:500 [inline]
 tty_port_shutdown_locked+0x17c/0x27c drivers/tty/tty_port.c:359
 tty_port_shutdown drivers/tty/tty_port.c:379 [inline]
 tty_port_close+0x60/0x124 drivers/tty/tty_port.c:734
 serial_close+0x5c/0xc8 drivers/usb/serial/usb-serial.c:326
 tty_release+0x2c4/0xffc drivers/tty/tty_io.c:1720
 __fput+0x338/0x74c fs/file_table.c:512
 ____fput+0x20/0x30 fs/file_table.c:541
 task_work_run+0x1cc/0x25c kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:70 [inline]
 exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:146 [inline]
 el0_svc+0x12c/0x1d8 arch/arm64/kernel/entry-common.c:797
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
Code: aa1503e1 aa1403e2 aa1303e3 979c3816 (d4210000) 
---[ end trace 0000000000000000 ]---