syzbot

usb 1-1: USB disconnect, device number 2
mcba_usb 1-1:0.225 can0: device disconnected
==================================================================
BUG: KMSAN: uninit-value in usb_kill_anchored_urbs+0x358/0x3b0 drivers/usb/core/urb.c:790
CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0+ #15
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x191/0x1f0 lib/dump_stack.c:113
 kmsan_report+0x162/0x2d0 mm/kmsan/kmsan_report.c:109
 __msan_warning+0x75/0xe0 mm/kmsan/kmsan_instr.c:294
 usb_kill_anchored_urbs+0x358/0x3b0 drivers/usb/core/urb.c:790
 mcba_urb_unlink drivers/net/can/usb/mcba_usb.c:711 [inline]
 mcba_usb_disconnect+0x135/0x1a0 drivers/net/can/usb/mcba_usb.c:881
 usb_unbind_interface+0x3a2/0xdd0 drivers/usb/core/driver.c:423
 __device_release_driver drivers/base/dd.c:1081 [inline]
 device_release_driver_internal+0x911/0xd20 drivers/base/dd.c:1112
 device_release_driver+0x4b/0x60 drivers/base/dd.c:1135
 bus_remove_device+0x4bf/0x670 drivers/base/bus.c:556
 device_del+0xc75/0x1c50 drivers/base/core.c:2274
 usb_disable_device+0x567/0x1150 drivers/usb/core/message.c:1241
 usb_disconnect+0x51e/0xd60 drivers/usb/core/hub.c:2197
 hub_port_connect drivers/usb/core/hub.c:4940 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5204 [inline]
 port_event drivers/usb/core/hub.c:5350 [inline]
 hub_event+0x4003/0x7320 drivers/usb/core/hub.c:5432
 process_one_work+0x1572/0x1f00 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355

Uninit was created at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:187 [inline]
 kmsan_internal_poison_shadow+0x53/0xa0 mm/kmsan/kmsan.c:146
 kmsan_slab_free+0x8d/0x100 mm/kmsan/kmsan_hooks.c:195
 slab_free_freelist_hook mm/slub.c:1449 [inline]
 slab_free mm/slub.c:3019 [inline]
 kfree+0x4b2/0x2960 mm/slub.c:3975
 kvfree+0xe4/0x100 mm/util.c:460
 netdev_freemem+0x6b/0x90 net/core/dev.c:9098
 netdev_release+0xab/0xf0 net/core/net-sysfs.c:1635
 device_release+0xe2/0x380 drivers/base/core.c:1060
 kobject_cleanup lib/kobject.c:691 [inline]
 kobject_release lib/kobject.c:720 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x38d/0x480 lib/kobject.c:737
 put_device+0x51/0x70 drivers/base/core.c:2210
 free_netdev+0x50e/0x540 net/core/dev.c:9255
 free_candev+0x37/0x40 drivers/net/can/dev.c:754
 mcba_usb_disconnect+0x11b/0x1a0 drivers/net/can/usb/mcba_usb.c:879
 usb_unbind_interface+0x3a2/0xdd0 drivers/usb/core/driver.c:423
 __device_release_driver drivers/base/dd.c:1081 [inline]
 device_release_driver_internal+0x911/0xd20 drivers/base/dd.c:1112
 device_release_driver+0x4b/0x60 drivers/base/dd.c:1135
 bus_remove_device+0x4bf/0x670 drivers/base/bus.c:556
 device_del+0xc75/0x1c50 drivers/base/core.c:2274
 usb_disable_device+0x567/0x1150 drivers/usb/core/message.c:1241
 usb_disconnect+0x51e/0xd60 drivers/usb/core/hub.c:2197
 hub_port_connect drivers/usb/core/hub.c:4940 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5204 [inline]
 port_event drivers/usb/core/hub.c:5350 [inline]
 hub_event+0x4003/0x7320 drivers/usb/core/hub.c:5432
 process_one_work+0x1572/0x1f00 kernel/workqueue.c:2269
 worker_thread+0x111b/0x2460 kernel/workqueue.c:2415
 kthread+0x4b5/0x4f0 kernel/kthread.c:256
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:355
==================================================================