------------[ cut here ]------------ WARNING: CPU: 0 PID: 1 at mm/slub.c:4550 slab_free_after_rcu_debug+0x18b/0x270 mm/slub.c:4550 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-rc2-next-20240807-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:slab_free_after_rcu_debug+0x18b/0x270 mm/slub.c:4550 Code: 48 89 04 19 48 8d 4a 08 49 8b 34 24 65 48 0f c7 0e 75 c8 4c 89 f7 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 55 ff ff 90 <0f> 0b 90 eb 92 90 0f 0b 90 eb 8c 90 0f 0b 90 eb 86 41 8b 54 24 1c RSP: 0000:ffffc90000007bc0 EFLAGS: 00010286 RAX: ffff88823be00000 RBX: ffff888020ec8280 RCX: 000000000004efe0 RDX: ffffea0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000007e30 R08: ffffffff8142d3dc R09: 1ffffffff26e96f3 R10: dffffc0000000000 R11: ffffffff81f100d0 R12: dffffc0000000000 R13: ffffffff817bf146 R14: ffff88823be4efe0 R15: ffffea000083b200 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88823ffff000 CR3: 000000000e734000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_do_batch kernel/rcu/tree.c:2569 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2843 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:console_flush_all+0x9f7/0xf50 kernel/printk/printk.c:3103 Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 03 0f 20 00 e8 7e 4d 49 0a 4d 85 f6 74 c0 e8 f4 0e 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 b5 64 88 00 4c 8b RSP: 0000:ffffc90000067400 EFLAGS: 00000293 RAX: ffffffff8173f26c RBX: 0000000000000000 RCX: ffff8880176f0000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000067590 R08: ffffffff8173f213 R09: 1ffffffff26e96f0 R10: dffffc0000000000 R11: fffffbfff26e96f1 R12: ffffffff8f139ee0 R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e273e7 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3173 vprintk_emit+0x7a1/0x900 kernel/printk/printk.c:2423 _printk+0xd5/0x120 kernel/printk/printk.c:2450 usb_serial_register drivers/usb/serial/usb-serial.c:1444 [inline] __usb_serial_register_drivers+0x7a9/0xe00 drivers/usb/serial/usb-serial.c:1519 do_one_initcall+0x248/0x880 init/main.c:1267 do_initcall_level+0x157/0x210 init/main.c:1329 do_initcalls+0x3f/0x80 init/main.c:1345 kernel_init_freeable+0x435/0x5d0 init/main.c:1578 kernel_init+0x1d/0x2b0 init/main.c:1467 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ---------------- Code disassembly (best guess): 0: 20 00 and %al,(%rax) 2: 90 nop 3: 0f 0b ud2 5: 90 nop 6: e9 f3 f9 ff ff jmp 0xfffff9fe b: e8 03 0f 20 00 call 0x200f13 10: e8 7e 4d 49 0a call 0xa494d93 15: 4d 85 f6 test %r14,%r14 18: 74 c0 je 0xffffffda 1a: e8 f4 0e 20 00 call 0x200f13 1f: fb sti 20: 49 bd 00 00 00 00 00 movabs $0xdffffc0000000000,%r13 27: fc ff df * 2a: 43 80 3c 2f 00 cmpb $0x0,(%r15,%r13,1) <-- trapping instruction 2f: 48 8b 5c 24 30 mov 0x30(%rsp),%rbx 34: 74 08 je 0x3e 36: 48 89 df mov %rbx,%rdi 39: e8 b5 64 88 00 call 0x8864f3 3e: 4c rex.WR 3f: 8b .byte 0x8b