usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #66304
list_del corruption. next->prev should be ffff8881d51838f0, but was ffff8881c20edd70
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:56!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 4.20.0-rc6-next-20181210+ #164
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_power_efficient neigh_periodic_work
kobject: 'loop1' (00000000ef8ec08e): kobject_uevent_env
RIP: 0010:__list_del_entry_valid.cold.1+0x37/0x4a lib/list_debug.c:54
Code: e8 36 1f d2 fd 0f 0b 4c 89 ea 48 89 de 48 c7 c7 60 e4 80 88 e8 22 1f d2 fd 0f 0b 48 89 de 48 c7 c7 c0 e5 80 88 e8 11 1f d2 fd <0f> 0b 48 89 de 48 c7 c7 60 e5 80 88 e8 00 1f d2 fd 0f 0b 48 89 d9
RSP: 0018:ffff8881d9b67440 EFLAGS: 00010282
RAX: 0000000000000054 RBX: ffff8881d51838f0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
kobject: 'loop1' (00000000ef8ec08e): fill_kobj_path: path = '/devices/virtual/block/loop1'
RBP: ffff8881d9b67458 R08: ffff8881d9b58480 R09: ffffed103b5a5020
R10: ffffed103b5a5020 R11: ffff8881dad28107 R12: ffff8881d1d834b0
R13: ffffffff8a1dca60 R14: ffff8881d9b67560 R15: 1ffff1103b36ce94
FS:  0000000000000000(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001780978 CR3: 00000001b4418000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #66304
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del_init include/linux/list.h:159 [inline]
 neigh_mark_dead+0x13b/0x410 net/core/neighbour.c:125
kobject: 'loop1' (00000000ef8ec08e): kobject_uevent_env
kobject: 'loop1' (00000000ef8ec08e): fill_kobj_path: path = '/devices/virtual/block/loop1'
 neigh_periodic_work+0x89a/0xc30 net/core/neighbour.c:905
usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #66304
 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153
kobject: 'loop1' (00000000ef8ec08e): kobject_uevent_env
kobject: 'loop1' (00000000ef8ec08e): fill_kobj_path: path = '/devices/virtual/block/loop1'
kobject: 'loop1' (00000000ef8ec08e): kobject_uevent_env
kobject: 'loop1' (00000000ef8ec08e): fill_kobj_path: path = '/devices/virtual/block/loop1'
 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296
kobject: 'loop5' (00000000b1b91026): kobject_uevent_env
kobject: 'loop5' (00000000b1b91026): fill_kobj_path: path = '/devices/virtual/block/loop5'
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 751b98d4cb8a973b ]---
RIP: 0010:__list_del_entry_valid.cold.1+0x37/0x4a lib/list_debug.c:54
Code: e8 36 1f d2 fd 0f 0b 4c 89 ea 48 89 de 48 c7 c7 60 e4 80 88 e8 22 1f d2 fd 0f 0b 48 89 de 48 c7 c7 c0 e5 80 88 e8 11 1f d2 fd <0f> 0b 48 89 de 48 c7 c7 60 e5 80 88 e8 00 1f d2 fd 0f 0b 48 89 d9
RSP: 0018:ffff8881d9b67440 EFLAGS: 00010282
RAX: 0000000000000054 RBX: ffff8881d51838f0 RCX: 0000000000000000
kobject: 'loop4' (00000000eba4efdd): kobject_uevent_env
RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005
RBP: ffff8881d9b67458 R08: ffff8881d9b58480 R09: ffffed103b5a5020
R10: ffffed103b5a5020 R11: ffff8881dad28107 R12: ffff8881d1d834b0
R13: ffffffff8a1dca60 R14: ffff8881d9b67560 R15: 1ffff1103b36ce94
FS:  0000000000000000(0000) GS:ffff8881dad00000(0000) knlGS:0000000000000000
kobject: 'loop4' (00000000eba4efdd): fill_kobj_path: path = '/devices/virtual/block/loop4'
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001780978 CR3: 000000000966e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
QAT: Invalid ioctl