Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 73.526517][ T2612] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.536554][ T1020] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.547497][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.555082][ T136] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.566642][ T2971] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.574633][ T2936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.766597][ T2612] usb 6-1: Using ep0 maxpacket: 8 [ 73.786583][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 73.797313][ T136] usb 2-1: Using ep0 maxpacket: 8 [ 73.816492][ T1020] usb 1-1: Using ep0 maxpacket: 8 [ 73.836827][ T2936] usb 3-1: Using ep0 maxpacket: 8 [ 73.842070][ T2971] usb 5-1: Using ep0 maxpacket: 8 [ 73.886626][ T2612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 73.896626][ T2612] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 73.906274][ T2612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.916160][ T2612] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.926485][ T2612] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 73.935545][ T2612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.945674][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 73.955397][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 73.955762][ T1020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 73.965212][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.965238][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.965275][ T23] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 73.965300][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.966386][ T136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 73.976105][ T1020] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 73.985908][ T136] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 73.995689][ T1020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.004672][ T136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.012731][ T1020] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.022299][ T136] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.031955][ T1020] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 74.041595][ T136] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 74.051337][ T1020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.061057][ T136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.097090][ T2936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 74.124536][ T2936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 74.129291][ T23] usb 4-1: config 0 descriptor?? [ 74.134274][ T2936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.148978][ T2936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.158777][ T2936] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 74.164495][ T2612] usb 6-1: config 0 descriptor?? [ 74.167841][ T2936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.168555][ T2971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 74.178634][ T23] ums-alauda 4-1:0.0: USB Mass Storage device detected [ 74.180823][ T2971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 74.207142][ T2971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.207889][ T2612] ums-alauda 6-1:0.0: USB Mass Storage device detected [ 74.216902][ T2971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.233532][ T2971] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 74.242610][ T2971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.254234][ T2936] usb 3-1: config 0 descriptor?? [ 74.274531][ T2971] usb 5-1: config 0 descriptor?? [ 74.281675][ T1020] usb 1-1: config 0 descriptor?? [ 74.305944][ T23] scsi host1: usb-storage 4-1:0.0 [ 74.308191][ T2936] ums-alauda 3-1:0.0: USB Mass Storage device detected [ 74.319652][ T2971] ums-alauda 5-1:0.0: USB Mass Storage device detected [ 74.337466][ T1020] ums-alauda 1-1:0.0: USB Mass Storage device detected [ 74.356967][ T2936] scsi host3: usb-storage 3-1:0.0 [ 74.395842][ T2971] scsi host4: usb-storage 5-1:0.0 [ 74.415143][ T1020] scsi host5: usb-storage 1-1:0.0 [ 74.441829][ T136] usb 2-1: config 0 descriptor?? [ 74.447376][ T2612] scsi host2: usb-storage 6-1:0.0 [ 74.492705][ T136] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 74.546778][ T136] scsi host6: usb-storage 2-1:0.0 [ 74.859489][ T6648] UDC core: couldn't find an available UDC or it's busy: -16 [ 74.867076][ T6648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.884687][ T6650] UDC core: couldn't find an available UDC or it's busy: -16 [ 74.892269][ T6650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.989246][ T6652] UDC core: couldn't find an available UDC or it's busy: -16 [ 74.996709][ T6652] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.014025][ T6654] UDC core: couldn't find an available UDC or it's busy: -16 [ 75.021776][ T6654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.036419][ T6656] UDC core: couldn't find an available UDC or it's busy: -16 [ 75.043864][ T6656] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.166897][ T6658] UDC core: couldn't find an available UDC or it's busy: -16 [ 75.174368][ T6658] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program [ 75.325961][ T2971] usb 4-1: USB disconnect, device number 2 executing program [ 75.369960][ T136] usb 6-1: USB disconnect, device number 2 [ 75.377835][ T1527] scsi 3:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 75.397727][ T1527] scsi 3:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 75.460016][ T10] scsi 5:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 75.467028][ T1009] sd 3:0:0:0: [sdb] Media removed, stopped polling [ 75.470447][ T8] scsi 4:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS executing program [ 75.501482][ T1527] sd 3:0:0:0: Attached scsi generic sg1 type 0 [ 75.523982][ T10] scsi 5:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 75.539149][ T2936] usb 3-1: USB disconnect, device number 2 executing program executing program [ 75.546985][ T52] sd 3:0:0:1: [sdc] Media removed, stopped polling [ 75.555570][ T1527] sd 3:0:0:1: Attached scsi generic sg2 type 0 [ 75.559734][ T8] scsi 4:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 75.585172][ T5] usb 1-1: USB disconnect, device number 2 [ 75.591563][ T2935] usb 5-1: USB disconnect, device number 2 [ 75.624238][ T1527] sd 5:0:0:0: [sdd] Media removed, stopped polling [ 75.633936][ T52] sd 3:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 75.644862][ T52] sd 3:0:0:1: [sdc] Attached SCSI removable disk [ 75.657967][ T10] sd 5:0:0:0: Attached scsi generic sg1 type 0 [ 75.680104][ T1009] sd 3:0:0:0: [sdb] Attached SCSI removable disk [ 75.701778][ T10] scsi 5:0:0:1: Attached scsi generic sg3 type 0 [ 75.708087][ T2612] usb 2-1: USB disconnect, device number 2 executing program [ 75.734834][ T52] sd 5:0:0:1: [sde] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 75.804745][ T52] sd 5:0:0:1: [sde] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 75.815825][ T52] sd 5:0:0:1: [sde] Sense not available. [ 75.821902][ T52] sd 5:0:0:1: [sde] 0 512-byte logical blocks: (0 B/0 B) [ 75.826296][ T2971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.829012][ T52] sd 5:0:0:1: [sde] 0-byte physical blocks [ 75.844223][ T52] sd 5:0:0:1: [sde] Test WP failed, assume Write Enabled [ 75.851796][ T136] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.859590][ T52] sd 5:0:0:1: [sde] Asking for cache data failed [ 75.865954][ T52] sd 5:0:0:1: [sde] Assuming drive cache: write through [ 75.874613][ T1527] sd 5:0:0:0: [sdd] Attached SCSI removable disk [ 75.899414][ T8] sd 4:0:0:0: Attached scsi generic sg1 type 0 [ 75.912333][ T10] sd 4:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 75.941308][ T6750] sd 3:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 75.989935][ T10] sd 4:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.000891][ T10] sd 4:0:0:0: [sdb] Sense not available. [ 76.006693][ T10] sd 4:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 76.013754][ T10] sd 4:0:0:0: [sdb] 0-byte physical blocks [ 76.021313][ T52] sd 5:0:0:1: [sde] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.033638][ T10] sd 4:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 76.041856][ T10] sd 4:0:0:0: [sdb] Asking for cache data failed [ 76.048582][ T10] sd 4:0:0:0: [sdb] Assuming drive cache: write through [ 76.056537][ T1527] sd 4:0:0:1: [sdf] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.067594][ T52] sd 5:0:0:1: [sde] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 76.075687][ T8] sd 4:0:0:1: Attached scsi generic sg4 type 0 [ 76.077934][ T52] sd 5:0:0:1: [sde] Sense not available. [ 76.078154][ T52] sd 5:0:0:1: [sde] Attached SCSI removable disk [ 76.100537][ T1527] sd 4:0:0:1: [sdf] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.111534][ T1527] sd 4:0:0:1: [sdf] Sense not available. [ 76.117397][ T1527] sd 4:0:0:1: [sdf] 0 512-byte logical blocks: (0 B/0 B) [ 76.124456][ T1527] sd 4:0:0:1: [sdf] 0-byte physical blocks [ 76.130924][ T136] usb 6-1: Using ep0 maxpacket: 8 [ 76.146309][ T2971] usb 4-1: Using ep0 maxpacket: 8 [ 76.147035][ T1527] sd 4:0:0:1: [sdf] Test WP failed, assume Write Enabled [ 76.168076][ T1527] sd 4:0:0:1: [sdf] Asking for cache data failed [ 76.174527][ T1527] sd 4:0:0:1: [sdf] Assuming drive cache: write through [ 76.206595][ T2612] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.207300][ T10] sd 4:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 76.224503][ T10] sd 4:0:0:0: [sdb] Sense not available. [ 76.230397][ T10] sd 4:0:0:0: [sdb] Attached SCSI removable disk [ 76.246652][ T136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 76.256575][ T136] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 76.266290][ T136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.276024][ T136] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.285816][ T136] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 76.294910][ T136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.303499][ T1527] sd 4:0:0:1: [sdf] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.314617][ T2971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 76.324341][ T2971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 76.334052][ T2971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.343846][ T2971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.353659][ T2971] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 76.363026][ T2971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.374199][ T1527] sd 4:0:0:1: [sdf] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 76.376252][ T136] usb 6-1: config 0 descriptor?? [ 76.385012][ T1527] sd 4:0:0:1: [sdf] Sense not available. [ 76.395889][ T1527] sd 4:0:0:1: [sdf] Attached SCSI removable disk [ 76.466419][ T136] ums-alauda 6-1:0.0: USB Mass Storage device detected [ 76.478728][ T2971] usb 4-1: config 0 descriptor?? [ 76.506317][ T2612] usb 2-1: Using ep0 maxpacket: 8 [ 76.513477][ T136] scsi host1: usb-storage 6-1:0.0 [ 76.626587][ T2612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 76.636500][ T2612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 76.646215][ T2612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.655955][ T2612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.665775][ T2612] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 76.674874][ T2612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.768407][ T2612] usb 2-1: config 0 descriptor?? [ 76.775142][ T2971] ums-alauda 4-1:0.0: USB Mass Storage device detected [ 76.814142][ T2612] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 76.893310][ T2971] scsi host2: usb-storage 4-1:0.0 [ 76.934806][ T2612] scsi host5: usb-storage 2-1:0.0 [ 77.032019][ T6750] ================================================================== [ 77.040361][ T6750] BUG: KASAN: use-after-free in blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 77.048638][ T6750] Read of size 4 at addr ffff8880760b81e0 by task systemd-udevd/6750 [ 77.056716][ T6750] [ 77.059098][ T6750] CPU: 1 PID: 6750 Comm: systemd-udevd Not tainted 5.15.0-rc6-next-20211020-syzkaller #0 [ 77.068918][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.078985][ T6750] Call Trace: [ 77.082273][ T6750] [ 77.085212][ T6750] dump_stack_lvl+0xcd/0x134 [ 77.089840][ T6750] print_address_description.constprop.0.cold+0x8d/0x320 [ 77.096893][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 77.102810][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 77.108727][ T6750] kasan_report.cold+0x83/0xdf [ 77.113513][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 77.119429][ T6750] blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 77.125174][ T6750] ? dd_depth_updated+0x160/0x160 [ 77.130227][ T6750] blk_mq_exit_sched+0x21f/0x300 [ 77.135185][ T6750] ? lockdep_hardirqs_on+0x79/0x100 [ 77.140413][ T6750] __elevator_exit+0x28/0x40 [ 77.145025][ T6750] blk_release_queue+0x25c/0x490 [ 77.149995][ T6750] kobject_put+0x1c8/0x540 [ 77.154451][ T6750] disk_release+0x173/0x230 [ 77.158975][ T6750] ? block_uevent+0x80/0x80 [ 77.163498][ T6750] device_release+0x9f/0x240 [ 77.168111][ T6750] kobject_put+0x1c8/0x540 [ 77.172552][ T6750] put_device+0x1b/0x30 [ 77.176726][ T6750] blkdev_close+0x6a/0x80 [ 77.181075][ T6750] __fput+0x286/0x9f0 [ 77.185073][ T6750] ? blkdev_fsync+0xa0/0xa0 [ 77.185696][ T6868] UDC core: couldn't find an available UDC or it's busy: -16 [ 77.189591][ T6750] task_work_run+0xdd/0x1a0 [ 77.189641][ T6750] exit_to_user_mode_prepare+0x27e/0x290 [ 77.197029][ T6868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.201479][ T6750] syscall_exit_to_user_mode+0x19/0x60 [ 77.219970][ T6750] do_syscall_64+0x42/0xb0 [ 77.224410][ T6750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.230317][ T6750] RIP: 0033:0x7fc7c26c8270 [ 77.234759][ T6750] Code: 73 01 c3 48 8b 0d 38 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 59 c1 20 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ee fb ff ff 48 89 04 24 [ 77.254381][ T6750] RSP: 002b:00007ffd26f73c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 77.262813][ T6750] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007fc7c26c8270 [ 77.270810][ T6750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 77.278801][ T6750] RBP: 00007fc7c3582710 R08: 000055da33920730 R09: 000055da33905200 [ 77.286799][ T6750] R10: 00007fc7c35828c0 R11: 0000000000000246 R12: 0000000000000000 [ 77.294796][ T6750] R13: 000055da3392ecc0 R14: 0000000000000003 R15: 000000000000000e [ 77.302807][ T6750] [ 77.305846][ T6750] [ 77.308173][ T6750] Allocated by task 2936: [ 77.312498][ T6750] kasan_save_stack+0x1e/0x50 [ 77.317199][ T6750] __kasan_kmalloc+0xa9/0xd0 [ 77.321800][ T6750] scsi_host_alloc+0x2c/0x1120 [ 77.326581][ T6750] usb_stor_probe1+0x45/0x162b [ 77.331359][ T6750] alauda_probe+0x89/0x1d0 [ 77.335889][ T6750] usb_probe_interface+0x315/0x7f0 [ 77.341007][ T6750] really_probe+0x245/0xcc0 [ 77.345527][ T6750] __driver_probe_device+0x338/0x4d0 [ 77.350822][ T6750] driver_probe_device+0x4c/0x1a0 [ 77.355880][ T6750] __device_attach_driver+0x20b/0x2f0 [ 77.361251][ T6750] bus_for_each_drv+0x15f/0x1e0 [ 77.366113][ T6750] __device_attach+0x228/0x4a0 [ 77.370864][ T6750] bus_probe_device+0x1e4/0x290 [ 77.375703][ T6750] device_add+0xc17/0x1ee0 [ 77.380108][ T6750] usb_set_configuration+0x101e/0x1900 [ 77.385550][ T6750] usb_generic_driver_probe+0xba/0x100 [ 77.391010][ T6750] usb_probe_device+0xd9/0x2c0 [ 77.395821][ T6750] really_probe+0x245/0xcc0 [ 77.400314][ T6750] __driver_probe_device+0x338/0x4d0 [ 77.405632][ T6750] driver_probe_device+0x4c/0x1a0 [ 77.410647][ T6750] __device_attach_driver+0x20b/0x2f0 [ 77.416011][ T6750] bus_for_each_drv+0x15f/0x1e0 [ 77.420856][ T6750] __device_attach+0x228/0x4a0 [ 77.425626][ T6750] bus_probe_device+0x1e4/0x290 [ 77.430465][ T6750] device_add+0xc17/0x1ee0 [ 77.434864][ T6750] usb_new_device.cold+0x63f/0x108e [ 77.440059][ T6750] hub_event+0x2357/0x4330 [ 77.444489][ T6750] process_one_work+0x9b2/0x1690 [ 77.449438][ T6750] worker_thread+0x658/0x11f0 [ 77.454217][ T6750] kthread+0x405/0x4f0 [ 77.458292][ T6750] ret_from_fork+0x1f/0x30 [ 77.462697][ T6750] [ 77.465006][ T6750] Freed by task 6750: [ 77.468977][ T6750] kasan_save_stack+0x1e/0x50 [ 77.469074][ T6870] UDC core: couldn't find an available UDC or it's busy: -16 [ 77.473683][ T6750] kasan_set_track+0x21/0x30 [ 77.473706][ T6750] kasan_set_free_info+0x20/0x30 [ 77.473731][ T6750] __kasan_slab_free+0xff/0x130 [ 77.473754][ T6750] slab_free_freelist_hook+0x8b/0x1c0 [ 77.473775][ T6750] kfree+0xf6/0x560 [ 77.481185][ T6870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.485715][ T6750] device_release+0x9f/0x240 [ 77.516645][ T6750] kobject_put+0x1c8/0x540 [ 77.521056][ T6750] put_device+0x1b/0x30 [ 77.525204][ T6750] device_release+0x9f/0x240 [ 77.529802][ T6750] kobject_put+0x1c8/0x540 [ 77.534211][ T6750] put_device+0x1b/0x30 [ 77.538362][ T6750] scsi_device_dev_release_usercontext+0x97e/0xdd0 [ 77.544873][ T6750] execute_in_process_context+0x37/0x150 [ 77.550493][ T6750] device_release+0x9f/0x240 [ 77.555080][ T6750] kobject_put+0x1c8/0x540 [ 77.559495][ T6750] put_device+0x1b/0x30 [ 77.563643][ T6750] scsi_device_put+0x74/0xa0 [ 77.568230][ T6750] sd_release+0x124/0x290 [ 77.572543][ T6750] blkdev_put+0x2fb/0x9e0 [ 77.576851][ T6750] blkdev_close+0x6a/0x80 [ 77.581163][ T6750] __fput+0x286/0x9f0 [ 77.585128][ T6750] task_work_run+0xdd/0x1a0 [ 77.589617][ T6750] exit_to_user_mode_prepare+0x27e/0x290 [ 77.595239][ T6750] syscall_exit_to_user_mode+0x19/0x60 [ 77.600705][ T6750] do_syscall_64+0x42/0xb0 [ 77.605107][ T6750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.610983][ T6750] [ 77.613292][ T6750] Last potentially related work creation: [ 77.618984][ T6750] kasan_save_stack+0x1e/0x50 [ 77.623651][ T6750] __kasan_record_aux_stack+0xf5/0x120 [ 77.629116][ T6750] insert_work+0x48/0x370 [ 77.633460][ T6750] __queue_work+0x5ca/0xf30 [ 77.637955][ T6750] call_timer_fn+0x1a5/0x6b0 [ 77.642542][ T6750] __run_timers.part.0+0x49f/0xa20 [ 77.647663][ T6750] run_timer_softirq+0xb3/0x1d0 [ 77.652496][ T6750] __do_softirq+0x29b/0x9c2 [ 77.656997][ T6750] [ 77.659309][ T6750] The buggy address belongs to the object at ffff8880760b8000 [ 77.659309][ T6750] which belongs to the cache kmalloc-8k of size 8192 [ 77.673368][ T6750] The buggy address is located 480 bytes inside of [ 77.673368][ T6750] 8192-byte region [ffff8880760b8000, ffff8880760ba000) [ 77.686711][ T6750] The buggy address belongs to the page: [ 77.692324][ T6750] page:ffffea0001d82e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x760b8 [ 77.702458][ T6750] head:ffffea0001d82e00 order:3 compound_mapcount:0 compound_pincount:0 [ 77.710780][ T6750] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.718760][ T6750] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010c42280 [ 77.727346][ T6750] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 77.735908][ T6750] page dumped because: kasan: bad access detected [ 77.742319][ T6750] page_owner tracks the page as allocated [ 77.748016][ T6750] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2936, ts 74318146894, free_ts 74302716229 [ 77.756503][ T7] usb 6-1: USB disconnect, device number 3 [ 77.767135][ T6750] get_page_from_freelist+0xa72/0x2f50 [ 77.767169][ T6750] __alloc_pages+0x1b2/0x500 [ 77.783112][ T6750] alloc_pages+0x1a7/0x300 [ 77.787549][ T6750] new_slab+0x32d/0x4a0 [ 77.791721][ T6750] ___slab_alloc+0x947/0x1040 [ 77.796499][ T6750] __slab_alloc.constprop.0+0x4d/0xa0 [ 77.801887][ T6750] __kmalloc+0x303/0x320 [ 77.806134][ T6750] scsi_host_alloc+0x2c/0x1120 [ 77.810896][ T6750] usb_stor_probe1+0x45/0x162b [ 77.815665][ T6750] alauda_probe+0x89/0x1d0 [ 77.820082][ T6750] usb_probe_interface+0x315/0x7f0 [ 77.825449][ T6750] really_probe+0x245/0xcc0 [ 77.829945][ T6750] __driver_probe_device+0x338/0x4d0 [ 77.835226][ T6750] driver_probe_device+0x4c/0x1a0 [ 77.840243][ T6750] __device_attach_driver+0x20b/0x2f0 [ 77.845608][ T6750] bus_for_each_drv+0x15f/0x1e0 [ 77.850451][ T6750] page last free stack trace: [ 77.855125][ T6750] free_pcp_prepare+0x373/0x870 [ 77.859970][ T6750] free_unref_page+0x19/0x690 [ 77.864816][ T6750] __unfreeze_partials+0x343/0x360 [ 77.869927][ T6750] qlist_free_all+0x5a/0xc0 [ 77.874430][ T6750] kasan_quarantine_reduce+0x180/0x200 [ 77.879886][ T6750] __kasan_slab_alloc+0xa2/0xc0 [ 77.884737][ T6750] kmem_cache_alloc+0x209/0x390 [ 77.889581][ T6750] getname_flags.part.0+0x50/0x4f0 [ 77.894689][ T6750] getname_flags+0x9a/0xe0 [ 77.899122][ T6750] user_path_at_empty+0x2b/0x60 [ 77.903967][ T6750] do_readlinkat+0xcd/0x2f0 [ 77.908461][ T6750] __x64_sys_readlinkat+0x93/0xf0 [ 77.913479][ T6750] do_syscall_64+0x35/0xb0 [ 77.917889][ T6750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.923784][ T6750] [ 77.926096][ T6750] Memory state around the buggy address: [ 77.931716][ T6750] ffff8880760b8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.939768][ T6750] ffff8880760b8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.947820][ T6750] >ffff8880760b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.955863][ T6750] ^ [ 77.963041][ T6750] ffff8880760b8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.971090][ T6750] ffff8880760b8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.979135][ T6750] ================================================================== [ 77.987179][ T6750] Disabling lock debugging due to kernel taint [ 77.993709][ T6750] Kernel panic - not syncing: panic_on_warn set ... [ 78.000295][ T6750] CPU: 1 PID: 6750 Comm: systemd-udevd Tainted: G B 5.15.0-rc6-next-20211020-syzkaller #0 [ 78.011500][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.021543][ T6750] Call Trace: [ 78.024809][ T6750] [ 78.027729][ T6750] dump_stack_lvl+0xcd/0x134 [ 78.032318][ T6750] panic+0x2b0/0x6dd [ 78.036305][ T6750] ? __warn_printk+0xf3/0xf3 [ 78.040916][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 78.046841][ T6750] ? trace_hardirqs_on+0x38/0x1c0 [ 78.051861][ T6750] ? trace_hardirqs_on+0x51/0x1c0 [ 78.056880][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 78.062763][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 78.068654][ T6750] end_report.cold+0x63/0x6f [ 78.073246][ T6750] kasan_report.cold+0x71/0xdf [ 78.078004][ T6750] ? blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 78.083888][ T6750] blk_mq_sched_tags_teardown+0x2a1/0x2d0 [ 78.089597][ T6750] ? dd_depth_updated+0x160/0x160 [ 78.094615][ T6750] blk_mq_exit_sched+0x21f/0x300 [ 78.099544][ T6750] ? lockdep_hardirqs_on+0x79/0x100 [ 78.104747][ T6750] __elevator_exit+0x28/0x40 [ 78.109331][ T6750] blk_release_queue+0x25c/0x490 [ 78.114265][ T6750] kobject_put+0x1c8/0x540 [ 78.118673][ T6750] disk_release+0x173/0x230 [ 78.123170][ T6750] ? block_uevent+0x80/0x80 [ 78.127660][ T6750] device_release+0x9f/0x240 [ 78.132240][ T6750] kobject_put+0x1c8/0x540 [ 78.136665][ T6750] put_device+0x1b/0x30 [ 78.140819][ T6750] blkdev_close+0x6a/0x80 [ 78.145140][ T6750] __fput+0x286/0x9f0 [ 78.149126][ T6750] ? blkdev_fsync+0xa0/0xa0 [ 78.153619][ T6750] task_work_run+0xdd/0x1a0 [ 78.158111][ T6750] exit_to_user_mode_prepare+0x27e/0x290 [ 78.163736][ T6750] syscall_exit_to_user_mode+0x19/0x60 [ 78.169221][ T6750] do_syscall_64+0x42/0xb0 [ 78.173649][ T6750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.179564][ T6750] RIP: 0033:0x7fc7c26c8270 [ 78.183970][ T6750] Code: 73 01 c3 48 8b 0d 38 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 59 c1 20 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ee fb ff ff 48 89 04 24 [ 78.203566][ T6750] RSP: 002b:00007ffd26f73c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.212140][ T6750] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007fc7c26c8270 [ 78.220095][ T6750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 78.228051][ T6750] RBP: 00007fc7c3582710 R08: 000055da33920730 R09: 000055da33905200 [ 78.236028][ T6750] R10: 00007fc7c35828c0 R11: 0000000000000246 R12: 0000000000000000 [ 78.243987][ T6750] R13: 000055da3392ecc0 R14: 0000000000000003 R15: 000000000000000e [ 78.251949][ T6750] [ 78.255007][ T6750] Kernel Offset: disabled [ 78.259317][ T6750] Rebooting in 86400 seconds..