program:
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10)
pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f0000000800)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0)
read(r4, &(0x7f0000000c00)=""/1000, 0x3e8)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) (async)
pwrite64(r0, &(0x7f0000000500)="f0000000", 0x4, 0x10) (async)
pwrite64(r0, &(0x7f0000000600)="0200", 0x2, 0x4) (async)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) (async)
write(r1, &(0x7f0000000800)='1', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async)
write(r2, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) (async)
write(r3, &(0x7f0000000a00)='1', 0x1) (async)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_sys/bus/pci/devices/0000:00:01.0/resource\x00', 0x0, 0x0) (async)
read(r4, &(0x7f0000000c00)=""/1000, 0x3e8) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async)
[ 103.149020][ T4653] Bluetooth: hci0: command tx timeout
[ 103.299942][ T5326] vhci_hcd vhci_hcd.0: remove, state 4
[ 103.306780][ T5326] usb usb7: USB disconnect, device number 1
[ 103.416666][ T90] vhci_hcd vhci_hcd.0: stop threads
[ 103.421048][ T5326] vhci_hcd vhci_hcd.0: USB bus 7 deregistered
[ 103.424396][ T90] vhci_hcd vhci_hcd.0: release socket
[ 103.429599][ T90] vhci_hcd vhci_hcd.0: disconnect device
[ 103.437070][ T90] vhci_hcd vhci_hcd.0: stop threads
[ 103.443790][ T90] vhci_hcd vhci_hcd.0: release socket
[ 103.449266][ T90] vhci_hcd vhci_hcd.0: disconnect device
[ 103.457351][ T90] vhci_hcd vhci_hcd.0: stop threads
[ 103.460303][ T5326] vhci_hcd vhci_hcd.0: remove, state 4
[ 103.462806][ T90] ==================================================================
[ 103.466261][ T90] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection+0x1d4/0x650
[ 103.470025][ T90] Read of size 8 at addr ffff888034c7c9d0 by task kworker/u4:5/90
[ 103.473385][ T90]
[ 103.474461][ T90] CPU: 0 UID: 0 PID: 90 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full)
[ 103.474476][ T90] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.474486][ T90] Workqueue: usbip_event event_handler
[ 103.474504][ T90] Call Trace:
[ 103.474510][ T90]
[ 103.474516][ T90] dump_stack_lvl+0xe8/0x150
[ 103.474534][ T90] print_address_description+0x55/0x1e0
[ 103.474548][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 103.474560][ T90] print_report+0x58/0x70
[ 103.474573][ T90] kasan_report+0x117/0x150
[ 103.474590][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 103.474604][ T90] vhci_shutdown_connection+0x1d4/0x650
[ 103.474619][ T90] event_handler+0x2a4/0x4b0
[ 103.474631][ T90] ? process_scheduled_works+0xa20/0x14e0
[ 103.474645][ T90] process_scheduled_works+0xa8e/0x14e0
[ 103.474663][ T90] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.474676][ T90] ? assign_work+0x3cf/0x5d0
[ 103.474690][ T90] worker_thread+0xa47/0xfb0
[ 103.474704][ T90] ? __kthread_parkme+0x71/0x1f0
[ 103.474718][ T90] kthread+0x388/0x470
[ 103.474731][ T90] ? __pfx_worker_thread+0x10/0x10
[ 103.474742][ T90] ? __pfx_kthread+0x10/0x10
[ 103.474754][ T90] ret_from_fork+0x514/0xb70
[ 103.474769][ T90] ? __pfx_ret_from_fork+0x10/0x10
[ 103.474783][ T90] ? __switch_to+0xc89/0x1420
[ 103.474795][ T90] ? __pfx_kthread+0x10/0x10
[ 103.474808][ T90] ret_from_fork_asm+0x1a/0x30
[ 103.474823][ T90]
[ 103.474827][ T90]
[ 103.536922][ T90] Allocated by task 1:
[ 103.538844][ T90] kasan_save_track+0x3e/0x80
[ 103.540862][ T90] __kasan_kmalloc+0x93/0xb0
[ 103.542923][ T90] __kmalloc_noprof+0x375/0x720
[ 103.545089][ T90] __usb_create_hcd+0x67/0x900
[ 103.547242][ T90] vhci_hcd_probe+0x1e6/0x3e0
[ 103.549318][ T90] platform_probe+0xf9/0x190
[ 103.551206][ T90] really_probe+0x254/0xae0
[ 103.553129][ T90] __driver_probe_device+0x1e8/0x360
[ 103.555397][ T90] driver_probe_device+0x4f/0x240
[ 103.557609][ T90] __device_attach_driver+0x270/0x410
[ 103.559949][ T90] bus_for_each_drv+0x258/0x2f0
[ 103.562065][ T90] __device_attach+0x2c4/0x450
[ 103.564159][ T90] device_initial_probe+0xa1/0xd0
[ 103.566377][ T90] bus_probe_device+0x12a/0x220
[ 103.568550][ T90] device_add+0x7d7/0xb80
[ 103.570478][ T90] platform_device_add+0x4bd/0x860
[ 103.572728][ T90] platform_device_register_full+0x62d/0x710
[ 103.575395][ T90] vhci_hcd_init+0x227/0x360
[ 103.577432][ T90] do_one_initcall+0x250/0x870
[ 103.579344][ T90] do_initcall_level+0x10a/0x1a0
[ 103.581306][ T90] do_initcalls+0x59/0xa0
[ 103.583167][ T90] kernel_init_freeable+0x29d/0x3e0
[ 103.585356][ T90] kernel_init+0x1d/0x1d0
[ 103.587202][ T90] ret_from_fork+0x514/0xb70
[ 103.589183][ T90] ret_from_fork_asm+0x1a/0x30
[ 103.591307][ T90]
[ 103.592364][ T90] Freed by task 5326:
[ 103.594125][ T90] kasan_save_track+0x3e/0x80
[ 103.596124][ T90] kasan_save_free_info+0x40/0x50
[ 103.598338][ T90] __kasan_slab_free+0x5c/0x80
[ 103.600420][ T90] kfree+0x1c5/0x640
[ 103.602099][ T90] vhci_hcd_remove+0x9e/0x110
[ 103.604168][ T90] device_release_driver_internal+0x48b/0x880
[ 103.606820][ T90] unbind_store+0x1a1/0x1d0
[ 103.608812][ T90] kernfs_fop_write_iter+0x3a4/0x540
[ 103.610985][ T90] vfs_write+0x612/0xba0
[ 103.612808][ T90] ksys_write+0x150/0x270
[ 103.614691][ T90] do_syscall_64+0x174/0x580
[ 103.616742][ T90] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.619269][ T90]
[ 103.620176][ T90] Last potentially related work creation:
[ 103.622702][ T90] kasan_save_stack+0x3e/0x60
[ 103.624715][ T90] kasan_record_aux_stack+0xbd/0xd0
[ 103.627018][ T90] insert_work+0x3d/0x330
[ 103.628923][ T90] __queue_work+0xcd8/0x10a0
[ 103.631026][ T90] queue_work_on+0x106/0x1d0
[ 103.633067][ T90] unlink1+0x344/0x3e0
[ 103.634870][ T90] usb_hcd_unlink_urb+0xe6/0x1e0
[ 103.637029][ T90] usb_kill_urb+0x10b/0x2f0
[ 103.639102][ T90] hub_quiesce+0x211/0x330
[ 103.641078][ T90] hub_suspend+0x904/0xad0
[ 103.643069][ T90] usb_suspend_both+0x285/0x1040
[ 103.645286][ T90] usb_runtime_suspend+0x58/0x110
[ 103.647535][ T90] __rpm_callback+0x2c7/0x950
[ 103.649604][ T90] rpm_suspend+0x8a0/0x17b0
[ 103.651572][ T90] __pm_runtime_suspend+0x12f/0x1a0
[ 103.653813][ T90] usb_new_device+0xadf/0x1620
[ 103.655848][ T90] register_root_hub+0x250/0x5c0
[ 103.657970][ T90] usb_add_hcd+0xac7/0xf80
[ 103.659812][ T90] vhci_hcd_probe+0x1fa/0x3e0
[ 103.661789][ T90] platform_probe+0xf9/0x190
[ 103.663789][ T90] really_probe+0x254/0xae0
[ 103.665861][ T90] __driver_probe_device+0x1e8/0x360
[ 103.668077][ T90] driver_probe_device+0x4f/0x240
[ 103.670371][ T90] __device_attach_driver+0x270/0x410
[ 103.672660][ T90] bus_for_each_drv+0x258/0x2f0
[ 103.674786][ T90] __device_attach+0x2c4/0x450
[ 103.676667][ T90] device_initial_probe+0xa1/0xd0
[ 103.678745][ T90] bus_probe_device+0x12a/0x220
[ 103.680901][ T90] device_add+0x7d7/0xb80
[ 103.682781][ T90] platform_device_add+0x4bd/0x860
[ 103.684946][ T90] platform_device_register_full+0x62d/0x710
[ 103.687513][ T90] vhci_hcd_init+0x227/0x360
[ 103.689572][ T90] do_one_initcall+0x250/0x870
[ 103.691621][ T90] do_initcall_level+0x10a/0x1a0
[ 103.693843][ T90] do_initcalls+0x59/0xa0
[ 103.695746][ T90] kernel_init_freeable+0x29d/0x3e0
[ 103.698091][ T90] kernel_init+0x1d/0x1d0
[ 103.699962][ T90] ret_from_fork+0x514/0xb70
[ 103.701987][ T90] ret_from_fork_asm+0x1a/0x30
[ 103.704107][ T90]
[ 103.705228][ T90] Second to last potentially related work creation:
[ 103.708097][ T90] kasan_save_stack+0x3e/0x60
[ 103.710211][ T90] kasan_record_aux_stack+0xbd/0xd0
[ 103.712491][ T90] insert_work+0x3d/0x330
[ 103.714424][ T90] __queue_work+0xcd8/0x10a0
[ 103.716372][ T90] queue_work_on+0x106/0x1d0
[ 103.718339][ T90] usb_hcd_submit_urb+0xa3b/0x1b60
[ 103.720454][ T90] usb_start_wait_urb+0x13f/0x5b0
[ 103.722565][ T90] usb_control_msg+0x234/0x3e0
[ 103.724592][ T90] hub_suspend+0x891/0xad0
[ 103.726566][ T90] usb_suspend_both+0x285/0x1040
[ 103.728698][ T90] usb_runtime_suspend+0x58/0x110
[ 103.730900][ T90] __rpm_callback+0x2c7/0x950
[ 103.732938][ T90] rpm_suspend+0x8a0/0x17b0
[ 103.734772][ T90] __pm_runtime_suspend+0x12f/0x1a0
[ 103.736791][ T90] usb_new_device+0xadf/0x1620
[ 103.738887][ T90] register_root_hub+0x250/0x5c0
[ 103.740971][ T90] usb_add_hcd+0xac7/0xf80
[ 103.742881][ T90] vhci_hcd_probe+0x1fa/0x3e0
[ 103.744948][ T90] platform_probe+0xf9/0x190
[ 103.746953][ T90] really_probe+0x254/0xae0
[ 103.748934][ T90] __driver_probe_device+0x1e8/0x360
[ 103.751220][ T90] driver_probe_device+0x4f/0x240
[ 103.753413][ T90] __device_attach_driver+0x270/0x410
[ 103.755710][ T90] bus_for_each_drv+0x258/0x2f0
[ 103.757859][ T90] __device_attach+0x2c4/0x450
[ 103.759883][ T90] device_initial_probe+0xa1/0xd0
[ 103.762104][ T90] bus_probe_device+0x12a/0x220
[ 103.764227][ T90] device_add+0x7d7/0xb80
[ 103.766174][ T90] platform_device_add+0x4bd/0x860
[ 103.768471][ T90] platform_device_register_full+0x62d/0x710
[ 103.771106][ T90] vhci_hcd_init+0x227/0x360
[ 103.773041][ T90] do_one_initcall+0x250/0x870
[ 103.775103][ T90] do_initcall_level+0x10a/0x1a0
[ 103.777232][ T90] do_initcalls+0x59/0xa0
[ 103.779052][ T90] kernel_init_freeable+0x29d/0x3e0
[ 103.781093][ T90] kernel_init+0x1d/0x1d0
[ 103.783010][ T90] ret_from_fork+0x514/0xb70
[ 103.785050][ T90] ret_from_fork_asm+0x1a/0x30
[ 103.787131][ T90]
[ 103.788268][ T90] The buggy address belongs to the object at ffff888034c7c000
[ 103.788268][ T90] which belongs to the cache kmalloc-8k of size 8192
[ 103.794068][ T90] The buggy address is located 2512 bytes inside of
[ 103.794068][ T90] freed 8192-byte region [ffff888034c7c000, ffff888034c7e000)
[ 103.799855][ T90]
[ 103.800953][ T90] The buggy address belongs to the physical page:
[ 103.803602][ T90] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34c78
[ 103.807380][ T90] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 103.810960][ T90] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 103.814268][ T90] page_type: f5(slab)
[ 103.816079][ T90] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 103.819628][ T90] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 103.823299][ T90] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 103.827031][ T90] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 103.830695][ T90] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 103.834311][ T90] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 103.837932][ T90] page dumped because: kasan: bad access detected
[ 103.840670][ T90] page_owner tracks the page as allocated
[ 103.843150][ T90] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20057410443, free_ts 19946924027
[ 103.851781][ T90] post_alloc_hook+0x1f9/0x250
[ 103.853872][ T90] get_page_from_freelist+0x21fa/0x2270
[ 103.856254][ T90] __alloc_frozen_pages_noprof+0x18d/0x380
[ 103.858704][ T90] allocate_slab+0x79/0x5e0
[ 103.860684][ T90] refill_objects+0x2d5/0x350
[ 103.862759][ T90] __pcs_replace_empty_main+0x2bf/0x6b0
[ 103.865222][ T90] __kmalloc_noprof+0x485/0x720
[ 103.867352][ T90] __usb_create_hcd+0x67/0x900
[ 103.869448][ T90] vhci_hcd_probe+0x1e6/0x3e0
[ 103.871488][ T90] platform_probe+0xf9/0x190
[ 103.873475][ T90] really_probe+0x254/0xae0
[ 103.875382][ T90] __driver_probe_device+0x1e8/0x360
[ 103.877710][ T90] driver_probe_device+0x4f/0x240
[ 103.879840][ T90] __device_attach_driver+0x270/0x410
[ 103.882088][ T90] bus_for_each_drv+0x258/0x2f0
[ 103.884113][ T90] __device_attach+0x2c4/0x450
[ 103.886150][ T90] page last free pid 1 tgid 1 stack trace:
[ 103.888713][ T90] __free_frozen_pages+0xc1e/0xd10
[ 103.890938][ T90] __slab_free+0x274/0x2c0
[ 103.892871][ T90] qlist_free_all+0x99/0x100
[ 103.894864][ T90] kasan_quarantine_reduce+0x148/0x160
[ 103.897273][ T90] __kasan_slab_alloc+0x22/0x80
[ 103.899414][ T90] __kmalloc_node_track_caller_noprof+0x461/0x730
[ 103.902247][ T90] kvasprintf+0xeb/0x1a0
[ 103.904085][ T90] kasprintf+0xe2/0x140
[ 103.905938][ T90] alloc_workqueue_noprof+0x12e/0x210
[ 103.908354][ T90] tty_register_driver+0x2f0/0xdf0
[ 103.910510][ T90] userial_init+0x17c/0x280
[ 103.912368][ T90] do_one_initcall+0x250/0x870
[ 103.914348][ T90] do_initcall_level+0x10a/0x1a0
[ 103.916344][ T90] do_initcalls+0x59/0xa0
[ 103.918147][ T90] kernel_init_freeable+0x29d/0x3e0
[ 103.920397][ T90] kernel_init+0x1d/0x1d0
[ 103.922303][ T90]
[ 103.923384][ T90] Memory state around the buggy address:
[ 103.925828][ T90] ffff888034c7c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.929347][ T90] ffff888034c7c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.932766][ T90] >ffff888034c7c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.936149][ T90] ^
[ 103.938951][ T90] ffff888034c7ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.942327][ T90] ffff888034c7ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.945673][ T90] ==================================================================
[ 103.954103][ T5326] usb usb6: USB disconnect, device number 1
[ 103.991306][ T5326] vhci_hcd vhci_hcd.0: USB bus 6 deregistered
[ 104.115993][ T5327] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint
[ 104.132240][ T5327] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x007fffff pref]
[ 104.145785][ T5327] pci 0000:00:01.0: BAR 2 [mem 0xfca00000-0xfca03fff 64bit pref]
[ 104.150678][ T5327] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff]
[ 104.154082][ T5327] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[ 104.158084][ T5327] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[ 104.171997][ T5327] pci 0000:00:01.0: Adding to iommu group 1
[ 104.193120][ T5327] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[ 104.196093][ T5327] pci 0000:00:01.0: vgaarb: bridge control possible
[ 104.198873][ T5327] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none
[ 104.212996][ T5327] pci 0000:00:01.0: BAR 0 [mem 0x60000000-0x607fffff pref]: assigned
[ 104.222373][ T5327] pci 0000:00:01.0: BAR 2 [mem 0x5c0000000-0x5c0003fff 64bit pref]: assigned
[ 104.245985][ T5327] pci 0000:00:01.0: BAR 4 [mem 0x60800000-0x60800fff]: assigned
[ 104.301907][ T90] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.304870][ T90] CPU: 0 UID: 0 PID: 90 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full)
[ 104.308591][ T90] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.313065][ T90] Workqueue: usbip_event event_handler
[ 104.315478][ T90] Call Trace:
[ 104.317267][ T90]
[ 104.318912][ T90] vpanic+0x56c/0xa60
[ 104.320933][ T90] ? __pfx_vpanic+0x10/0x10
[ 104.323365][ T90] ? __pfx___schedule+0x10/0x10
[ 104.325838][ T90] panic+0xc5/0xd0
[ 104.327806][ T90] ? __pfx_panic+0x10/0x10
[ 104.329812][ T90] ? preempt_schedule_common+0x82/0xd0
[ 104.332112][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 104.334426][ T90] check_panic_on_warn+0x89/0xb0
[ 104.336451][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 104.338851][ T90] end_report+0x73/0x170
[ 104.340671][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 104.343098][ T90] kasan_report+0x128/0x150
[ 104.345048][ T90] ? vhci_shutdown_connection+0x1d4/0x650
[ 104.347507][ T90] vhci_shutdown_connection+0x1d4/0x650
[ 104.349899][ T90] event_handler+0x2a4/0x4b0
[ 104.351815][ T90] ? process_scheduled_works+0xa20/0x14e0
[ 104.354311][ T90] process_scheduled_works+0xa8e/0x14e0
[ 104.356582][ T90] ? __pfx_process_scheduled_works+0x10/0x10
[ 104.359118][ T90] ? assign_work+0x3cf/0x5d0
[ 104.361118][ T90] worker_thread+0xa47/0xfb0
[ 104.363015][ T90] ? __kthread_parkme+0x71/0x1f0
[ 104.364993][ T90] kthread+0x388/0x470
[ 104.366715][ T90] ? __pfx_worker_thread+0x10/0x10
[ 104.368870][ T90] ? __pfx_kthread+0x10/0x10
[ 104.370804][ T90] ret_from_fork+0x514/0xb70
[ 104.372642][ T90] ? __pfx_ret_from_fork+0x10/0x10
[ 104.374780][ T90] ? __switch_to+0xc89/0x1420
[ 104.376741][ T90] ? __pfx_kthread+0x10/0x10
[ 104.378749][ T90] ret_from_fork_asm+0x1a/0x30
[ 104.380746][ T90]
[ 104.382399][ T90] Kernel Offset: disabled
[ 104.384266][ T90] Rebooting in 86400 seconds..