list_add double add: new=ffff8801879c2518, prev=ffff8801879c2518, next=ffff8801ba076d00.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:31!
invalid opcode: 0000 [#1] SMP KASAN
CPU: 0 PID: 4709 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #216
device team0 entered promiscuous mode
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xaa/0xb0 lib/list_debug.c:29
Code: e8 eb a9 48 89 f7 48 89 75 e8 e8 31 1f 49 fe 48 8b 75 e8 eb bb 48 89 f2 48 89 d9 4c 89 e6 48 c7 c7 a0 18 5d 87 e8 3a f9 f0 fd <0f> 0b 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55
device team_slave_0 entered promiscuous mode
RSP: 0018:ffff880195e47378 EFLAGS: 00010282
RAX: 0000000000000058 RBX: ffff8801ba076d00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: 0000000000000001
RBP: ffff880195e47390 R08: ffff880195e3c140 R09: ffffed003b605010
R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff8801879c2518
R13: ffff8801878b6a40 R14: ffff8801879c24b0 R15: ffff8801879c2518
device team_slave_1 entered promiscuous mode
FS:  0000000001ac4940(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000080 CR3: 000000019661d000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
syz-executor1 (7155) used greatest stack depth: 16504 bytes left
Call Trace:
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 p9_fd_request+0x145/0x440 net/9p/trans_fd.c:672
8021q: adding VLAN 0 to HW filter on device team0
usb usb1: usbfs: process 7183 (syz-executor4) did not claim interface 0 before use
 p9_client_rpc+0x299/0x1400 net/9p/client.c:767
netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'.
 p9_client_clunk+0x93/0x180 net/9p/client.c:1471
 v9fs_dentry_release+0x68/0xd0 fs/9p/vfs_dentry.c:73
 __dentry_kill+0x4c0/0x7a0 fs/dcache.c:571
 dentry_kill+0xc9/0x5a0 fs/dcache.c:685
 dput.part.26+0x66b/0x7a0 fs/dcache.c:846
FAT-fs (loop1): invalid media value (0x12)
 dput fs/dcache.c:829 [inline]
 do_one_tree+0x37/0x40 fs/dcache.c:1529
 shrink_dcache_for_umount+0xc7/0x2b0 fs/dcache.c:1543
FAT-fs (loop1): Can't find a valid FAT filesystem
 generic_shutdown_super+0xd5/0x530 fs/super.c:441
 kill_anon_super+0x3e/0x60 fs/super.c:1032
 v9fs_kill_super+0x3e/0xa0 fs/9p/vfs_super.c:230
 deactivate_locked_super+0x97/0x100 fs/super.c:329
 deactivate_super+0x2bb/0x320 fs/super.c:360
 cleanup_mnt+0xbf/0x160 fs/namespace.c:1098
 __cleanup_mnt+0x16/0x20 fs/namespace.c:1105
 task_work_run+0x1e8/0x2a0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x318/0x380 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459aa7
Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ffc1ed62908 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000459aa7
RDX: 0000000000408450 RSI: 0000000000000002 RDI: 00007ffc1ed629b0
RBP: 000000000000011e R08: 0000000000000000 R09: 000000000000000a
R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffc1ed63a10
R13: 0000000001ac5940 R14: 0000000000000000 R15: badc0ffeebadface
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
---[ end trace 11a7712d3a8925a9 ]---
RIP: 0010:__list_add_valid+0xaa/0xb0 lib/list_debug.c:29
Code: e8 eb a9 48 89 f7 48 89 75 e8 e8 31 1f 49 fe 48 8b 75 e8 eb bb 48 89 f2 48 89 d9 4c 89 e6 48 c7 c7 a0 18 5d 87 e8 3a f9 f0 fd <0f> 0b 0f 1f 40 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 55
RSP: 0018:ffff880195e47378 EFLAGS: 00010282
RAX: 0000000000000058 RBX: ffff8801ba076d00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: 0000000000000001
RBP: ffff880195e47390 R08: ffff880195e3c140 R09: ffffed003b605010
R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff8801879c2518
R13: ffff8801878b6a40 R14: ffff8801879c24b0 R15: ffff8801879c2518
FS:  0000000001ac4940(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000080 CR3: 000000019661d000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600