program: syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0], 0x1, 0x14d1, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa000, 0x1ef) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x10000, 0x10, 0x7ffffffffffffdff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0], 0x1, 0x14d1, &(0x7f00000015c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa000, 0x1ef) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x10000, 0x10, 0x7ffffffffffffdff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async) [ 135.069763][ T45] Bluetooth: hci0: command tx timeout [ 135.138014][ T5315] loop0: detected capacity change from 0 to 256 [ 135.341360][ T5315] vhci_hcd vhci_hcd.0: remove, state 4 [ 135.343914][ T5315] usb usb7: USB disconnect, device number 1 [ 135.395608][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.398843][ T5315] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 135.402750][ T1176] vhci_hcd vhci_hcd.0: release socket [ 135.406795][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 135.416654][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.420761][ T1176] vhci_hcd vhci_hcd.0: release socket [ 135.423631][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 135.428109][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.430558][ T1176] vhci_hcd vhci_hcd.0: release socket [ 135.433622][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 135.437231][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.441691][ T1176] vhci_hcd vhci_hcd.0: release socket [ 135.445180][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 135.448870][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.453796][ T1176] vhci_hcd vhci_hcd.0: release socket [ 135.457539][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 135.464201][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 135.467159][ T5315] vhci_hcd vhci_hcd.0: remove, state 4 [ 135.469604][ T1176] ================================================================== [ 135.472990][ T1176] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection+0x1d4/0x650 [ 135.476583][ T1176] Read of size 8 at addr ffff888034df50c0 by task kworker/u4:10/1176 [ 135.480063][ T1176] [ 135.481115][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: kworker/u4:10 Not tainted syzkaller #0 PREEMPT(full) [ 135.481130][ T1176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.481138][ T1176] Workqueue: usbip_event event_handler [ 135.481156][ T1176] Call Trace: [ 135.481163][ T1176] [ 135.481169][ T1176] dump_stack_lvl+0xe8/0x150 [ 135.481187][ T1176] print_address_description+0x55/0x1e0 [ 135.481202][ T1176] ? vhci_shutdown_connection+0x1d4/0x650 [ 135.481215][ T1176] print_report+0x58/0x70 [ 135.481228][ T1176] kasan_report+0x117/0x150 [ 135.481243][ T1176] ? vhci_shutdown_connection+0x1d4/0x650 [ 135.481258][ T1176] vhci_shutdown_connection+0x1d4/0x650 [ 135.481273][ T1176] event_handler+0x2a4/0x4b0 [ 135.481284][ T1176] ? process_scheduled_works+0x97a/0x1630 [ 135.481297][ T1176] process_scheduled_works+0xc3d/0x1630 [ 135.481317][ T1176] ? __pfx_process_scheduled_works+0x10/0x10 [ 135.481330][ T1176] ? assign_work+0x3cf/0x5d0 [ 135.481341][ T1176] worker_thread+0xa47/0xfb0 [ 135.481358][ T1176] ? __kthread_parkme+0x71/0x1f0 [ 135.481374][ T1176] kthread+0x38b/0x480 [ 135.481388][ T1176] ? __pfx_worker_thread+0x10/0x10 [ 135.481399][ T1176] ? __pfx_kthread+0x10/0x10 [ 135.481414][ T1176] ret_from_fork+0x514/0xb70 [ 135.481428][ T1176] ? __pfx_ret_from_fork+0x10/0x10 [ 135.481441][ T1176] ? __switch_to+0xc89/0x1420 [ 135.481454][ T1176] ? __pfx_kthread+0x10/0x10 [ 135.481466][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.481485][ T1176] [ 135.481489][ T1176] [ 135.544283][ T1176] Allocated by task 1: [ 135.546058][ T1176] kasan_save_track+0x3e/0x80 [ 135.548094][ T1176] __kasan_kmalloc+0x93/0xb0 [ 135.550093][ T1176] __kmalloc_noprof+0x379/0x720 [ 135.552257][ T1176] __usb_create_hcd+0x67/0x900 [ 135.554328][ T1176] vhci_hcd_probe+0x1e6/0x3e0 [ 135.556325][ T1176] platform_probe+0xf9/0x190 [ 135.558403][ T1176] really_probe+0x254/0xae0 [ 135.560345][ T1176] __driver_probe_device+0x1e8/0x360 [ 135.562566][ T1176] driver_probe_device+0x4f/0x240 [ 135.564782][ T1176] __device_attach_driver+0x270/0x410 [ 135.567096][ T1176] bus_for_each_drv+0x258/0x2f0 [ 135.569195][ T1176] __device_attach+0x2c4/0x450 [ 135.571135][ T1176] device_initial_probe+0xa1/0xd0 [ 135.573166][ T1176] bus_probe_device+0x12a/0x220 [ 135.575149][ T1176] device_add+0x7d7/0xb80 [ 135.577019][ T1176] platform_device_add+0x4bd/0x860 [ 135.579101][ T1176] platform_device_register_full+0x53a/0x620 [ 135.581532][ T1176] vhci_hcd_init+0x227/0x360 [ 135.583499][ T1176] do_one_initcall+0x250/0x870 [ 135.585571][ T1176] do_initcall_level+0x10a/0x1a0 [ 135.587672][ T1176] do_initcalls+0x59/0xa0 [ 135.589496][ T1176] kernel_init_freeable+0x29d/0x3e0 [ 135.591706][ T1176] kernel_init+0x22/0x1d0 [ 135.593549][ T1176] ret_from_fork+0x514/0xb70 [ 135.595530][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.597597][ T1176] [ 135.598620][ T1176] Freed by task 5315: [ 135.600321][ T1176] kasan_save_track+0x3e/0x80 [ 135.602260][ T1176] kasan_save_free_info+0x40/0x50 [ 135.604314][ T1176] __kasan_slab_free+0x5c/0x80 [ 135.606274][ T1176] kfree+0x1c5/0x640 [ 135.607889][ T1176] vhci_hcd_remove+0x9e/0x110 [ 135.609809][ T1176] device_release_driver_internal+0x48b/0x880 [ 135.612293][ T1176] unbind_store+0x1a1/0x1d0 [ 135.614167][ T1176] kernfs_fop_write_iter+0x3a4/0x540 [ 135.616329][ T1176] vfs_write+0x612/0xba0 [ 135.618146][ T1176] ksys_write+0x150/0x270 [ 135.619976][ T1176] do_syscall_64+0x166/0x520 [ 135.621906][ T1176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.624419][ T1176] [ 135.625501][ T1176] Last potentially related work creation: [ 135.627927][ T1176] kasan_save_stack+0x3e/0x60 [ 135.629992][ T1176] kasan_record_aux_stack+0xbd/0xd0 [ 135.632200][ T1176] insert_work+0x3d/0x330 [ 135.634038][ T1176] __queue_work+0xd07/0x10d0 [ 135.636024][ T1176] queue_work_on+0x106/0x1d0 [ 135.638043][ T1176] unlink1+0x344/0x3e0 [ 135.639817][ T1176] usb_hcd_unlink_urb+0xe6/0x1e0 [ 135.641993][ T1176] usb_kill_urb+0x10b/0x2f0 [ 135.643957][ T1176] hub_quiesce+0x211/0x330 [ 135.645923][ T1176] hub_suspend+0x904/0xad0 [ 135.647850][ T1176] usb_suspend_both+0x285/0x1040 [ 135.649968][ T1176] usb_runtime_suspend+0x58/0x110 [ 135.652115][ T1176] __rpm_callback+0x2c7/0x950 [ 135.654147][ T1176] rpm_suspend+0x89d/0x17a0 [ 135.656086][ T1176] __pm_runtime_suspend+0x12f/0x1a0 [ 135.658347][ T1176] usb_new_device+0xaee/0x1690 [ 135.660408][ T1176] register_root_hub+0x250/0x5c0 [ 135.662579][ T1176] usb_add_hcd+0xac7/0xf80 [ 135.664510][ T1176] vhci_hcd_probe+0x1fa/0x3e0 [ 135.666534][ T1176] platform_probe+0xf9/0x190 [ 135.668526][ T1176] really_probe+0x254/0xae0 [ 135.670509][ T1176] __driver_probe_device+0x1e8/0x360 [ 135.672728][ T1176] driver_probe_device+0x4f/0x240 [ 135.674974][ T1176] __device_attach_driver+0x270/0x410 [ 135.677292][ T1176] bus_for_each_drv+0x258/0x2f0 [ 135.679343][ T1176] __device_attach+0x2c4/0x450 [ 135.681394][ T1176] device_initial_probe+0xa1/0xd0 [ 135.683470][ T1176] bus_probe_device+0x12a/0x220 [ 135.685578][ T1176] device_add+0x7d7/0xb80 [ 135.687395][ T1176] platform_device_add+0x4bd/0x860 [ 135.689561][ T1176] platform_device_register_full+0x53a/0x620 [ 135.692172][ T1176] vhci_hcd_init+0x227/0x360 [ 135.694193][ T1176] do_one_initcall+0x250/0x870 [ 135.696234][ T1176] do_initcall_level+0x10a/0x1a0 [ 135.698363][ T1176] do_initcalls+0x59/0xa0 [ 135.700186][ T1176] kernel_init_freeable+0x29d/0x3e0 [ 135.702410][ T1176] kernel_init+0x22/0x1d0 [ 135.704309][ T1176] ret_from_fork+0x514/0xb70 [ 135.706287][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.708319][ T1176] [ 135.709419][ T1176] Second to last potentially related work creation: [ 135.712160][ T1176] kasan_save_stack+0x3e/0x60 [ 135.714148][ T1176] kasan_record_aux_stack+0xbd/0xd0 [ 135.716327][ T1176] insert_work+0x3d/0x330 [ 135.718231][ T1176] __queue_work+0xd07/0x10d0 [ 135.720211][ T1176] queue_work_on+0x106/0x1d0 [ 135.722189][ T1176] usb_hcd_submit_urb+0xa3b/0x1b60 [ 135.724358][ T1176] usb_start_wait_urb+0x13f/0x5b0 [ 135.726493][ T1176] usb_control_msg+0x234/0x3e0 [ 135.728557][ T1176] hub_suspend+0x891/0xad0 [ 135.730490][ T1176] usb_suspend_both+0x285/0x1040 [ 135.732565][ T1176] usb_runtime_suspend+0x58/0x110 [ 135.734677][ T1176] __rpm_callback+0x2c7/0x950 [ 135.736663][ T1176] rpm_suspend+0x89d/0x17a0 [ 135.738651][ T1176] __pm_runtime_suspend+0x12f/0x1a0 [ 135.740819][ T1176] usb_new_device+0xaee/0x1690 [ 135.742867][ T1176] register_root_hub+0x250/0x5c0 [ 135.744956][ T1176] usb_add_hcd+0xac7/0xf80 [ 135.746805][ T1176] vhci_hcd_probe+0x1fa/0x3e0 [ 135.748918][ T1176] platform_probe+0xf9/0x190 [ 135.750914][ T1176] really_probe+0x254/0xae0 [ 135.752857][ T1176] __driver_probe_device+0x1e8/0x360 [ 135.755136][ T1176] driver_probe_device+0x4f/0x240 [ 135.757320][ T1176] __device_attach_driver+0x270/0x410 [ 135.759658][ T1176] bus_for_each_drv+0x258/0x2f0 [ 135.761793][ T1176] __device_attach+0x2c4/0x450 [ 135.763836][ T1176] device_initial_probe+0xa1/0xd0 [ 135.766112][ T1176] bus_probe_device+0x12a/0x220 [ 135.768282][ T1176] device_add+0x7d7/0xb80 [ 135.770227][ T1176] platform_device_add+0x4bd/0x860 [ 135.772477][ T1176] platform_device_register_full+0x53a/0x620 [ 135.775183][ T1176] vhci_hcd_init+0x227/0x360 [ 135.777262][ T1176] do_one_initcall+0x250/0x870 [ 135.779399][ T1176] do_initcall_level+0x10a/0x1a0 [ 135.781616][ T1176] do_initcalls+0x59/0xa0 [ 135.783540][ T1176] kernel_init_freeable+0x29d/0x3e0 [ 135.785844][ T1176] kernel_init+0x22/0x1d0 [ 135.787769][ T1176] ret_from_fork+0x514/0xb70 [ 135.789850][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.791944][ T1176] [ 135.793053][ T1176] The buggy address belongs to the object at ffff888034df4000 [ 135.793053][ T1176] which belongs to the cache kmalloc-8k of size 8192 [ 135.798753][ T1176] The buggy address is located 4288 bytes inside of [ 135.798753][ T1176] freed 8192-byte region [ffff888034df4000, ffff888034df6000) [ 135.804599][ T1176] [ 135.805682][ T1176] The buggy address belongs to the physical page: [ 135.808430][ T1176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34df0 [ 135.812186][ T1176] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.815888][ T1176] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 135.819159][ T1176] page_type: f5(slab) [ 135.820932][ T1176] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 135.824602][ T1176] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 135.829284][ T1176] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 135.833060][ T1176] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 135.836807][ T1176] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 135.840513][ T1176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 135.844189][ T1176] page dumped because: kasan: bad access detected [ 135.847084][ T1176] page_owner tracks the page as allocated [ 135.849546][ T1176] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 36692966645 [ 135.857537][ T1176] post_alloc_hook+0x1f9/0x250 [ 135.859686][ T1176] get_page_from_freelist+0x2209/0x2280 [ 135.862131][ T1176] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 135.864614][ T1176] allocate_slab+0x7c/0x5e0 [ 135.866595][ T1176] refill_objects+0x2d5/0x350 [ 135.868667][ T1176] __pcs_replace_empty_main+0x2c3/0x6b0 [ 135.871078][ T1176] __kmalloc_cache_noprof+0x3ab/0x660 [ 135.873316][ T1176] dummy_hcd_init+0x3e2/0xd00 [ 135.875341][ T1176] do_one_initcall+0x250/0x870 [ 135.877425][ T1176] do_initcall_level+0x10a/0x1a0 [ 135.879477][ T1176] do_initcalls+0x59/0xa0 [ 135.881355][ T1176] kernel_init_freeable+0x29d/0x3e0 [ 135.883636][ T1176] kernel_init+0x22/0x1d0 [ 135.885586][ T1176] ret_from_fork+0x514/0xb70 [ 135.887642][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.889759][ T1176] page last free pid 1 tgid 1 ts 36586797385 stack trace: [ 135.892821][ T1176] __free_frozen_pages+0xc93/0xd90 [ 135.895068][ T1176] __slab_free+0x274/0x2c0 [ 135.897035][ T1176] qlist_free_all+0x99/0x100 [ 135.899104][ T1176] kasan_quarantine_reduce+0x148/0x160 [ 135.901491][ T1176] __kasan_slab_alloc+0x22/0x80 [ 135.903667][ T1176] __kmalloc_cache_noprof+0x2af/0x660 [ 135.906105][ T1176] bus_add_driver+0x162/0x670 [ 135.908327][ T1176] driver_register+0x23a/0x320 [ 135.910418][ T1176] usb251xb_init+0x2c/0x50 [ 135.912380][ T1176] do_one_initcall+0x250/0x870 [ 135.914398][ T1176] do_initcall_level+0x10a/0x1a0 [ 135.916493][ T1176] do_initcalls+0x59/0xa0 [ 135.918450][ T1176] kernel_init_freeable+0x29d/0x3e0 [ 135.920757][ T1176] kernel_init+0x22/0x1d0 [ 135.922678][ T1176] ret_from_fork+0x514/0xb70 [ 135.924666][ T1176] ret_from_fork_asm+0x1a/0x30 [ 135.926710][ T1176] [ 135.927759][ T1176] Memory state around the buggy address: [ 135.930198][ T1176] ffff888034df4f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.933654][ T1176] ffff888034df5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.937135][ T1176] >ffff888034df5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.940630][ T1176] ^ [ 135.943312][ T1176] ffff888034df5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.946770][ T1176] ffff888034df5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.950351][ T1176] ================================================================== [ 135.956517][ T5315] usb usb6: USB disconnect, device number 1 [ 136.004588][ T5315] vhci_hcd vhci_hcd.0: USB bus 6 deregistered