INFO: task hung in usb_deregister

INFO: task hung in usb_deregister_dev
Status: upstream: reported on 2020/07/06 15:22
Reported-by: syzbot+4189d5cde8630463053f@syzkaller.appspotmail.com
First crash: 569d, last: 13h58m

Sample crash report:

INFO: task kworker/1:1:31132 blocked for more than 143 seconds.
      Not tainted 5.12.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1     state:D stack:22928 pid:31132 ppid:     2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 context_switch kernel/sched/core.c:4324 [inline]
 __schedule+0x91b/0x1f90 kernel/sched/core.c:5075
 schedule+0xcb/0x270 kernel/sched/core.c:5154
 rwsem_down_write_slowpath+0x917/0x11c0 kernel/locking/rwsem.c:1106
 __down_write_common kernel/locking/rwsem.c:1261 [inline]
 __down_write_common kernel/locking/rwsem.c:1258 [inline]
 __down_write kernel/locking/rwsem.c:1270 [inline]
 down_write+0x137/0x150 kernel/locking/rwsem.c:1407
 usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
 iowarrior_disconnect+0x7a/0x370 drivers/usb/misc/iowarrior.c:895
 usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
 __device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1156
 device_release_driver_internal drivers/base/dd.c:1187 [inline]
 device_release_driver+0x26/0x40 drivers/base/dd.c:1210
 bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
 device_del+0x502/0xd40 drivers/base/core.c:3421
 usb_disable_device+0x35b/0x7b0 drivers/usb/core/message.c:1413
 usb_disconnect.cold+0x27d/0x791 drivers/usb/core/hub.c:2218
 hub_port_connect drivers/usb/core/hub.c:5074 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]
 port_event drivers/usb/core/hub.c:5509 [inline]
 hub_event+0x1c9c/0x4320 drivers/usb/core/hub.c:5591
 process_one_work+0x98d/0x1580 kernel/workqueue.c:2275
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2421
 kthread+0x38c/0x460 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
INFO: task kworker/1:8:3212 blocked for more than 143 seconds.
      Not tainted 5.12.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:8     state:D stack:23816 pid: 3212 ppid:     2 flags:0x00004000
Workqueue: usb_hub_wq hub_event
Call Trace:
 context_switch kernel/sched/core.c:4324 [inline]
 __schedule+0x91b/0x1f90 kernel/sched/core.c:5075
 schedule+0xcb/0x270 kernel/sched/core.c:5154
 rwsem_down_write_slowpath+0x917/0x11c0 kernel/locking/rwsem.c:1106
 __down_write_common kernel/locking/rwsem.c:1261 [inline]
 __down_write_common kernel/locking/rwsem.c:1258 [inline]
 __down_write kernel/locking/rwsem.c:1270 [inline]
 down_write+0x137/0x150 kernel/locking/rwsem.c:1407
 usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
 sisusb_disconnect+0x5a/0x200 drivers/usb/misc/sisusbvga/sisusb.c:3166
 usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
 __device_release_driver+0x3bd/0x6f0 drivers/base/dd.c:1156
 device_release_driver_internal drivers/base/dd.c:1187 [inline]
 device_release_driver+0x26/0x40 drivers/base/dd.c:1210
 bus_remove_device+0x2eb/0x5a0 drivers/base/bus.c:533
 device_del+0x502/0xd40 drivers/base/core.c:3421
 usb_disable_device+0x35b/0x7b0 drivers/usb/core/message.c:1413
 usb_disconnect.cold+0x27d/0x791 drivers/usb/core/hub.c:2218
 hub_port_connect drivers/usb/core/hub.c:5074 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5363 [inline]
 port_event drivers/usb/core/hub.c:5509 [inline]
 hub_event+0x1c9c/0x4320 drivers/usb/core/hub.c:5591
 process_one_work+0x98d/0x1580 kernel/workqueue.c:2275
 process_scheduled_works kernel/workqueue.c:2337 [inline]
 worker_thread+0x82b/0x1120 kernel/workqueue.c:2423
 kthread+0x38c/0x460 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
INFO: task syz-executor.5:4433 blocked for more than 143 seconds.
      Not tainted 5.12.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:28792 pid: 4433 ppid:  5262 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4324 [inline]
 __schedule+0x91b/0x1f90 kernel/sched/core.c:5075
 schedule+0xcb/0x270 kernel/sched/core.c:5154
 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:5213
 __mutex_lock_common kernel/locking/mutex.c:1023 [inline]
 __mutex_lock+0x7ef/0x10e0 kernel/locking/mutex.c:1093
 sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
 usb_open+0x204/0x2e0 drivers/usb/core/file.c:48
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4b4/0x1090 fs/open.c:826
 do_open fs/namei.c:3365 [inline]
 path_openat+0x1c0e/0x27e0 fs/namei.c:3498
 do_filp_open+0x17e/0x3c0 fs/namei.c:3525
 do_sys_openat2+0x16d/0x420 fs/open.c:1187
 do_sys_open fs/open.c:1203 [inline]
 __do_sys_openat fs/open.c:1219 [inline]
 __se_sys_openat fs/open.c:1214 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1214
 do_syscall_64+0x2d/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4194e4
RSP: 002b:00007f317bf92cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 00000000004194e4
RDX: 0000000000000002 RSI: 00007f317bf92d60 RDI: 00000000ffffff9c
RBP: 00007f317bf92d60 R08: 0000000000000000 R09: 000000000000000f
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007fff74db196f R14: 00007f317bf93300 R15: 0000000000022000
INFO: task syz-executor.5:4434 blocked for more than 144 seconds.
      Not tainted 5.12.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:29168 pid: 4434 ppid:  5262 flags:0x00000004
Call Trace:
 context_switch kernel/sched/core.c:4324 [inline]
 __schedule+0x91b/0x1f90 kernel/sched/core.c:5075
 schedule+0xcb/0x270 kernel/sched/core.c:5154
 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:5213
 __mutex_lock_common kernel/locking/mutex.c:1023 [inline]
 __mutex_lock+0x7ef/0x10e0 kernel/locking/mutex.c:1093
 sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
 usb_open+0x204/0x2e0 drivers/usb/core/file.c:48
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4b4/0x1090 fs/open.c:826
 do_open fs/namei.c:3365 [inline]
 path_openat+0x1c0e/0x27e0 fs/namei.c:3498
 do_filp_open+0x17e/0x3c0 fs/namei.c:3525
 do_sys_openat2+0x16d/0x420 fs/open.c:1187
 do_sys_open fs/open.c:1203 [inline]
 __do_sys_openat fs/open.c:1219 [inline]
 __se_sys_openat fs/open.c:1214 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1214
 do_syscall_64+0x2d/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4194e4
RSP: 002b:00007f317bf71cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c200 RCX: 00000000004194e4
RDX: 0000000000000002 RSI: 00007f317bf71d60 RDI: 00000000ffffff9c
RBP: 00007f317bf71d60 R08: 0000000000000000 R09: 000000000000000f
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007fff74db196f R14: 00007f317bf72300 R15: 0000000000022000
INFO: task syz-executor.5:4437 blocked for more than 144 seconds.
      Not tainted 5.12.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:28816 pid: 4437 ppid:  5262 flags:0x00000004
Call Trace:
 context_switch kernel/sched/core.c:4324 [inline]
 __schedule+0x91b/0x1f90 kernel/sched/core.c:5075
 schedule+0xcb/0x270 kernel/sched/core.c:5154
 schedule_preempt_disabled+0xc/0x20 kernel/sched/core.c:5213
 __mutex_lock_common kernel/locking/mutex.c:1023 [inline]
 __mutex_lock+0x7ef/0x10e0 kernel/locking/mutex.c:1093
 sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
 usb_open+0x204/0x2e0 drivers/usb/core/file.c:48
 chrdev_open+0x266/0x770 fs/char_dev.c:414
 do_dentry_open+0x4b4/0x1090 fs/open.c:826
 do_open fs/namei.c:3365 [inline]
 path_openat+0x1c0e/0x27e0 fs/namei.c:3498
 do_filp_open+0x17e/0x3c0 fs/namei.c:3525
 do_sys_openat2+0x16d/0x420 fs/open.c:1187
 do_sys_open fs/open.c:1203 [inline]
 __do_sys_openat fs/open.c:1219 [inline]
 __se_sys_openat fs/open.c:1214 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1214
 do_syscall_64+0x2d/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4194e4
RSP: 002b:00007f317bf50cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 000000000056c2a8 RCX: 00000000004194e4
RDX: 0000000000000002 RSI: 00007f317bf50d60 RDI: 00000000ffffff9c
RBP: 00007f317bf50d60 R08: 0000000000000000 R09: 000000000000000f
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 00007fff74db196f R14: 00007f317bf51300 R15: 0000000000022000

Showing all locks held in the system:
1 lock held by khungtaskd/1269:
 #0: ffffffff87a781e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 kernel/locking/lockdep.c:6327
1 lock held by in:imklog/4284:
2 locks held by agetty/4289:
 #0: ffff8881115e0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc9000059b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
2 locks held by agetty/4290:
 #0: ffff8881115e1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc900005ab2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
2 locks held by agetty/20702:
 #0: ffff888110b14098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc9000469b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
6 locks held by kworker/1:1/31132:
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1580 kernel/workqueue.c:2246
 #1: ffffc9001170fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1580 kernel/workqueue.c:2250
 #2: ffff888109010218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #2: ffff888109010218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537
 #3: ffff88810c1ec218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #3: ffff88810c1ec218 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x791 drivers/usb/core/hub.c:2209
 #4: ffff8881023a21a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #4: ffff8881023a21a8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:977 [inline]
 #4: ffff8881023a21a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal drivers/base/dd.c:1184 [inline]
 #4: ffff8881023a21a8 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 drivers/base/dd.c:1210
 #5: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
2 locks held by agetty/24995:
 #0: ffff88810c02d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc9000029b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
2 locks held by agetty/26213:
 #0: ffff8881115d1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc90005ac32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
6 locks held by kworker/1:8/3212:
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic64_set include/asm-generic/atomic-instrumented.h:856 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: atomic_long_set include/asm-generic/atomic-long.h:41 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:616 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline]
 #0: ffff888103fcc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x1580 kernel/workqueue.c:2246
 #1: ffffc90008077da8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1580 kernel/workqueue.c:2250
 #2: ffff888108fd8218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #2: ffff888108fd8218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4320 drivers/usb/core/hub.c:5537
 #3: ffff88813b9bc218 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #3: ffff88813b9bc218 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x791 drivers/usb/core/hub.c:2209
 #4: ffff8881106891a8 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:740 [inline]
 #4: ffff8881106891a8 (&dev->mutex){....}-{3:3}, at: __device_driver_lock drivers/base/dd.c:977 [inline]
 #4: ffff8881106891a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal drivers/base/dd.c:1184 [inline]
 #4: ffff8881106891a8 (&dev->mutex){....}-{3:3}, at: device_release_driver+0x1c/0x40 drivers/base/dd.c:1210
 #5: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_deregister_dev+0xaa/0x320 drivers/usb/core/file.c:239
2 locks held by agetty/25280:
 #0: ffff888146f30098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:266
 #1: ffffc90005f7b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd5b/0x12f0 drivers/tty/n_tty.c:2178
2 locks held by syz-executor.5/4432:
 #0: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_open+0x24/0x2e0 drivers/usb/core/file.c:39
 #1: ffff88813b5f50d0 (&(sisusb->lock)){+.+.}-{3:3}, at: sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
2 locks held by syz-executor.5/4433:
 #0: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_open+0x24/0x2e0 drivers/usb/core/file.c:39
 #1: ffff88813b5f50d0 (&(sisusb->lock)){+.+.}-{3:3}, at: sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
2 locks held by syz-executor.5/4434:
 #0: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_open+0x24/0x2e0 drivers/usb/core/file.c:39
 #1: ffff88813b5f50d0 (&(sisusb->lock)){+.+.}-{3:3}, at: sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396
2 locks held by syz-executor.5/4437:
 #0: ffffffff88355a10 (minor_rwsem){++++}-{3:3}, at: usb_open+0x24/0x2e0 drivers/usb/core/file.c:39
 #1: ffff88813b5f50d0 (&(sisusb->lock)){+.+.}-{3:3}, at: sisusb_open+0xb2/0x4d0 drivers/usb/misc/sisusbvga/sisusb.c:2396

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1269 Comm: khungtaskd Not tainted 5.12.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0xfa/0x151 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x46/0xe0 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1da/0x200 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
 watchdog+0xd32/0xf70 kernel/hung_task.c:294
 kthread+0x38c/0x460 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2631 Comm: systemd-journal Not tainted 5.12.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:unwind_next_frame+0x8d7/0x1fb0 arch/x86/kernel/unwind_orc.c:466
Code: 84 d2 0f 95 c0 40 84 c6 0f 85 c4 16 00 00 49 0f bf 00 48 01 44 24 60 e9 6b fd ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 <48> c1 ea 03 80 3c 02 00 0f 85 f2 10 00 00 4c 89 c0 4c 8b 53 38 48
RSP: 0018:ffffc900001b7970 EFLAGS: 00000297
RAX: dffffc0000000000 RBX: ffffc900001b7a48 RCX: ffffffff8970e519
RDX: ffffc900001b7a80 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc900001b7a7d R08: ffffffff8970e514 R09: ffffffff8970e518
R10: 00000000000fc2bc R11: 000000000004e044 R12: ffffc900001b7a90
R13: ffffc900001b7a98 R14: 0000000000000001 R15: 1ffff92000036f36
FS:  00007f6f79f268c0(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6f77874000 CR3: 00000001020cb000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 arch_stack_walk+0x7d/0xe0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:38
 kasan_set_track+0x1c/0x30 mm/kasan/common.c:46
 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:357
 ____kasan_slab_free mm/kasan/common.c:360 [inline]
 ____kasan_slab_free mm/kasan/common.c:325 [inline]
 __kasan_slab_free+0xda/0x110 mm/kasan/common.c:367
 kasan_slab_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:1562 [inline]
 slab_free_freelist_hook+0x51/0x130 mm/slub.c:1600
 slab_free mm/slub.c:3161 [inline]
 kmem_cache_free+0x82/0x330 mm/slub.c:3177
 __put_cred+0x1de/0x250 kernel/cred.c:148
 put_cred include/linux/cred.h:287 [inline]
 put_cred include/linux/cred.h:280 [inline]
 revert_creds+0x1a8/0x1f0 kernel/cred.c:598
 do_faccessat+0x2e7/0x850 fs/open.c:466
 do_syscall_64+0x2d/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6f791e19c7
Code: 83 c4 08 48 3d 01 f0 ff ff 73 01 c3 48 8b 0d c8 d4 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 15 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 d4 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007fff2ba4c4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
RAX: ffffffffffffffda RBX: 00007fff2ba4f4f0 RCX: 00007f6f791e19c7
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055ec91e7e9a3
RBP: 00007fff2ba4c610 R08: 000055ec91e743e5 R09: 0000000000000018
R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 000055ec930e48a0 R15: 00007fff2ba4cb00

Crashes (141):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-usb	2021/03/01 15:30	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	fe07bfda	4c37c133	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/03/01 13:09	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	fe07bfda	4c37c133	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/25 07:53	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3b9cdafb	fcc6d71b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/24 10:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3b9cdafb	fcc6d71b	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/22 00:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	55f62bc8	a659b3f1	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/20 16:53	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	3e5ed8b4	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/16 09:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	98682e5e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/15 19:23	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	b5a12546	98682e5e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/09 15:58	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b049f55	2bd9619f	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/02/09 11:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	4b049f55	2bd9619f	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/31 11:30	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3c648d3d	fc9fd31e	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/26 22:06	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	7a35a5ca	55a7d4df	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/26 12:22	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	7cbcd008	52e37319	.config	log	report	info	INFO: task hung in usb_deregister_dev
ci2-upstream-usb	2021/01/09 20:51	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	841081d8	a6c52263	.config	log	report	info
ci2-upstream-usb	2021/01/05 16:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ed054e4e	a0234d98	.config	log	report	info
ci2-upstream-usb	2021/01/04 03:18	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2021/01/03 05:54	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2020/12/31 18:20	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	cb4d9b52	79264ae3	.config	log	report	info
ci2-upstream-usb	2020/12/26 21:24	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	821e0b09	.config	log	report	info
ci2-upstream-usb	2020/12/25 11:02	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	b982b3ea	.config	log	report	info
ci2-upstream-usb	2020/12/24 19:44	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	c2c1d1dd	.config	log	report	info
ci2-upstream-usb	2020/12/23 19:36	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	c2c1d1dd	.config	log	report	info
ci2-upstream-usb	2020/12/22 02:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	04201c06	.config	log	report	info
ci2-upstream-usb	2020/12/20 13:33	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	3644e2d2	04201c06	.config	log	report	info
ci2-upstream-usb	2020/12/18 16:53	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	5e60366d	04201c06	.config	log	report	info
ci2-upstream-usb	2020/12/16 22:49	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	5e60366d	04201c06	.config	log	report	info
ci2-upstream-usb	2020/12/14 16:58	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	a256e240	b22a7ec3	.config	log	report	info
ci2-upstream-usb	2020/12/07 22:28	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	08a02f95	51a9082e	.config	log	report	info
ci2-upstream-usb	2020/12/02 08:00	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ebad4326	c42a35e9	.config	log	report	info
ci2-upstream-usb	2020/12/01 14:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ebad4326	07bfe8a5	.config	log	report	info
ci2-upstream-usb	2020/12/01 08:44	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ebad4326	b3a34598	.config	log	report	info
ci2-upstream-usb	2020/11/28 21:39	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	ab37fa85	3c7136c0	.config	log	report	info
ci2-upstream-usb	2020/11/25 08:04	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	93c747ed	1a1f4bd8	.config	log	report	info
ci2-upstream-usb	2020/11/24 19:51	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	93c747ed	e34b696c	.config	log	report	info
ci2-upstream-usb	2020/11/22 02:04	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	52a0372a	0d27f508	.config	log	report	info
ci2-upstream-usb	2020/11/21 11:07	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	52a0372a	c7ec2d19	.config	log	report	info
ci2-upstream-usb	2020/11/18 22:10	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	a07c81ac	0767f13f	.config	log	report	info
ci2-upstream-usb	2020/11/15 11:34	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	56c62080	1bf9a662	.config	log	report	info
ci2-upstream-usb	2020/11/08 02:43	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9e39aef3	cba33199	.config	log	report	info
ci2-upstream-usb	2020/11/06 16:55	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	9e39aef3	cba33199	.config	log	report	info
ci2-upstream-usb	2020/11/03 12:35	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	35ad0d90	cba33199	.config	log	report	info
ci2-upstream-usb	2020/11/03 03:26	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	8fba56b4	7f344fa6	.config	log	report	info
ci2-upstream-usb	2020/11/01 23:25	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	aee9ddb1	8bc4594f	.config	log	report	info
ci2-upstream-usb	2020/07/05 00:56	https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing	768a0741	24d7f505	.config	log	report
ci2-upstream-usb	2019/08/11 00:40	https://github.com/google/kasan.git usb-fuzzer	e96407b4	acb51638	.config	log	report