program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xf0}]) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x14, 0x1, 0x0, "3271bdf0f2f20d55806b26b1d72197edb1439b1c4200"}) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x5b) write$binfmt_misc(r7, &(0x7f00000001c0)="d71de73e7f77ef9338e1073bf181c40a033e5ec27bf838c8c7ae6aefaafc4093ca38f7d50940708c19fa9eba63158519df9cdde6ffb2ed10f33b313ba19f3c79b65a427093eaf764683fea20e5520529c6b531b56ef635a3bf4596c48012ba5e87c13508d5c52aee0cdeee4c975eada616a5b5afd7dbf854f2a1516b756d90a909692193a422f72fb82fa6ca34f76450e6e87a46e73c56e1d2fb0f64f2d1aed28e5668782090ab2115ddd8472a52d65451e7c3b52a8d7a2d414d", 0xba) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) [ 152.841715][ T5304] Bluetooth: hci0: command tx timeout [ 153.004932][ T5339] vhci_hcd vhci_hcd.0: remove, state 4 [ 153.009051][ T5339] usb usb7: USB disconnect, device number 1 [ 153.374840][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.377464][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.384644][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.394279][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.397355][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.401304][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.406159][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.408441][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.411362][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.414228][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.416507][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.432273][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.448658][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.452792][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.455123][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.457592][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.479548][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.496481][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.510662][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.513222][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.515912][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.536923][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.553755][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.557214][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.561668][ T5339] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 153.577949][ T5339] vhci_hcd vhci_hcd.0: remove, state 4 [ 153.582273][ T5339] usb usb6: USB disconnect, device number 1 [ 153.623394][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.626714][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.631821][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.635372][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.638624][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.655846][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.659818][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.677730][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.680744][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.683866][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.686455][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.706033][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.709653][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.712662][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.715573][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.718633][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.743064][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.749248][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.798189][ T5339] vhci_hcd vhci_hcd.0: USB bus 6 deregistered [ 153.805316][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.821720][ T1060] vhci_hcd vhci_hcd.0: release socket [ 153.825193][ T1060] vhci_hcd vhci_hcd.0: disconnect device [ 153.835960][ T1060] vhci_hcd vhci_hcd.0: stop threads [ 153.883885][ T1060] ================================================================== [ 153.895975][ T1060] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection+0x1d4/0x650 [ 153.902399][ T1060] Read of size 8 at addr ffff8880341a1560 by task kworker/u4:7/1060 [ 153.915780][ T1060] [ 153.917125][ T1060] CPU: 0 UID: 0 PID: 1060 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 153.917142][ T1060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.917151][ T1060] Workqueue: usbip_event event_handler [ 153.917169][ T1060] Call Trace: [ 153.917176][ T1060] [ 153.917181][ T1060] dump_stack_lvl+0xe8/0x150 [ 153.917197][ T1060] print_address_description+0x55/0x1e0 [ 153.917212][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 153.917225][ T1060] print_report+0x58/0x70 [ 153.917238][ T1060] kasan_report+0x117/0x150 [ 153.917254][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 153.917277][ T1060] vhci_shutdown_connection+0x1d4/0x650 [ 153.917291][ T1060] event_handler+0x2a4/0x4b0 [ 153.917303][ T1060] ? process_scheduled_works+0xa20/0x14e0 [ 153.917315][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 153.917331][ T1060] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.917345][ T1060] ? assign_work+0x3cf/0x5d0 [ 153.917357][ T1060] worker_thread+0xa47/0xfb0 [ 153.917375][ T1060] kthread+0x388/0x470 [ 153.917389][ T1060] ? __pfx_worker_thread+0x10/0x10 [ 153.917400][ T1060] ? __pfx_kthread+0x10/0x10 [ 153.917412][ T1060] ret_from_fork+0x514/0xb70 [ 153.917428][ T1060] ? __pfx_ret_from_fork+0x10/0x10 [ 153.917442][ T1060] ? __switch_to+0xc89/0x1420 [ 153.917455][ T1060] ? __pfx_kthread+0x10/0x10 [ 153.917468][ T1060] ret_from_fork_asm+0x1a/0x30 [ 153.917481][ T1060] [ 153.917485][ T1060] [ 154.027030][ T1060] Allocated by task 1: [ 154.028960][ T1060] kasan_save_track+0x3e/0x80 [ 154.033828][ T1060] __kasan_kmalloc+0x93/0xb0 [ 154.042585][ T1060] __kmalloc_noprof+0x375/0x720 [ 154.044632][ T1060] __usb_create_hcd+0x67/0x900 [ 154.046908][ T1060] vhci_hcd_probe+0x104/0x3e0 [ 154.062085][ T1060] platform_probe+0xf9/0x190 [ 154.065277][ T1060] really_probe+0x254/0xae0 [ 154.069452][ T1060] __driver_probe_device+0x1e8/0x360 [ 154.082146][ T1060] driver_probe_device+0x4f/0x240 [ 154.086604][ T1060] __device_attach_driver+0x270/0x410 [ 154.090162][ T1060] bus_for_each_drv+0x258/0x2f0 [ 154.092647][ T1060] __device_attach+0x2c4/0x450 [ 154.094623][ T1060] device_initial_probe+0xa1/0xd0 [ 154.096679][ T1060] bus_probe_device+0x12a/0x220 [ 154.099454][ T1060] device_add+0x7d7/0xb80 [ 154.102804][ T1060] platform_device_add+0x4bd/0x860 [ 154.107033][ T1060] platform_device_register_full+0x62d/0x710 [ 154.112624][ T1060] vhci_hcd_init+0x227/0x360 [ 154.116846][ T1060] do_one_initcall+0x250/0x870 [ 154.121598][ T1060] do_initcall_level+0x10a/0x1a0 [ 154.126213][ T1060] do_initcalls+0x59/0xa0 [ 154.129820][ T1060] kernel_init_freeable+0x29d/0x3e0 [ 154.135469][ T1060] kernel_init+0x1d/0x1d0 [ 154.138676][ T1060] ret_from_fork+0x514/0xb70 [ 154.141412][ T1060] ret_from_fork_asm+0x1a/0x30 [ 154.143741][ T1060] [ 154.144681][ T1060] Freed by task 5339: [ 154.146375][ T1060] kasan_save_track+0x3e/0x80 [ 154.148287][ T1060] kasan_save_free_info+0x40/0x50 [ 154.150261][ T1060] __kasan_slab_free+0x5c/0x80 [ 154.152249][ T1060] kfree+0x1c5/0x640 [ 154.154760][ T1060] vhci_hcd_remove+0xe4/0x110 [ 154.158696][ T1060] device_release_driver_internal+0x48b/0x880 [ 154.162764][ T1060] unbind_store+0x1a1/0x1d0 [ 154.165620][ T1060] kernfs_fop_write_iter+0x3a4/0x540 [ 154.169217][ T1060] vfs_write+0x612/0xba0 [ 154.172915][ T1060] ksys_write+0x150/0x270 [ 154.176208][ T1060] do_syscall_64+0x174/0x580 [ 154.180387][ T1060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.186620][ T1060] [ 154.188711][ T1060] Last potentially related work creation: [ 154.192905][ T1060] kasan_save_stack+0x3e/0x60 [ 154.197133][ T1060] kasan_record_aux_stack+0xbd/0xd0 [ 154.201390][ T1060] insert_work+0x3d/0x330 [ 154.204186][ T1060] __queue_work+0xcd8/0x10a0 [ 154.207360][ T1060] queue_work_on+0x106/0x1d0 [ 154.211096][ T1060] unlink1+0x344/0x3e0 [ 154.214245][ T1060] usb_hcd_unlink_urb+0xe6/0x1e0 [ 154.217276][ T1060] usb_kill_urb+0x10b/0x2f0 [ 154.219404][ T1060] hub_quiesce+0x211/0x330 [ 154.221333][ T1060] hub_suspend+0x904/0xad0 [ 154.223351][ T1060] usb_suspend_both+0x285/0x1040 [ 154.229287][ T1060] usb_runtime_suspend+0x58/0x110 [ 154.232793][ T1060] __rpm_callback+0x2c7/0x950 [ 154.236174][ T1060] rpm_suspend+0x8a0/0x17b0 [ 154.240727][ T1060] __pm_runtime_suspend+0x12f/0x1a0 [ 154.244897][ T1060] usb_new_device+0xadf/0x1620 [ 154.250248][ T1060] register_root_hub+0x250/0x5c0 [ 154.253752][ T1060] usb_add_hcd+0xac7/0xf80 [ 154.256102][ T1060] vhci_hcd_probe+0x141/0x3e0 [ 154.258764][ T1060] platform_probe+0xf9/0x190 [ 154.260985][ T1060] really_probe+0x254/0xae0 [ 154.263513][ T1060] __driver_probe_device+0x1e8/0x360 [ 154.265626][ T1060] driver_probe_device+0x4f/0x240 [ 154.267657][ T1060] __device_attach_driver+0x270/0x410 [ 154.269778][ T1060] bus_for_each_drv+0x258/0x2f0 [ 154.281889][ T1060] __device_attach+0x2c4/0x450 [ 154.284228][ T1060] device_initial_probe+0xa1/0xd0 [ 154.293143][ T1060] bus_probe_device+0x12a/0x220 [ 154.295380][ T1060] device_add+0x7d7/0xb80 [ 154.298157][ T1060] platform_device_add+0x4bd/0x860 [ 154.303207][ T1060] platform_device_register_full+0x62d/0x710 [ 154.313905][ T1060] vhci_hcd_init+0x227/0x360 [ 154.315937][ T1060] do_one_initcall+0x250/0x870 [ 154.318397][ T1060] do_initcall_level+0x10a/0x1a0 [ 154.322125][ T1060] do_initcalls+0x59/0xa0 [ 154.332394][ T1060] kernel_init_freeable+0x29d/0x3e0 [ 154.334756][ T1060] kernel_init+0x1d/0x1d0 [ 154.336517][ T1060] ret_from_fork+0x514/0xb70 [ 154.338446][ T1060] ret_from_fork_asm+0x1a/0x30 [ 154.340305][ T1060] [ 154.351283][ T1060] Second to last potentially related work creation: [ 154.353835][ T1060] kasan_save_stack+0x3e/0x60 [ 154.355862][ T1060] kasan_record_aux_stack+0xbd/0xd0 [ 154.358783][ T1060] insert_work+0x3d/0x330 [ 154.362355][ T1060] __queue_work+0xcd8/0x10a0 [ 154.367736][ T1060] queue_work_on+0x106/0x1d0 [ 154.371708][ T1060] usb_hcd_submit_urb+0xa3b/0x1b60 [ 154.376132][ T1060] usb_start_wait_urb+0x13f/0x5b0 [ 154.381343][ T1060] usb_control_msg+0x234/0x3e0 [ 154.384085][ T1060] hub_ext_port_status+0x114/0x810 [ 154.400652][ T1060] hub_activate+0x740/0x1b20 [ 154.416841][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 154.419115][ T1060] worker_thread+0xa47/0xfb0 [ 154.420976][ T1060] kthread+0x388/0x470 [ 154.443383][ T1060] ret_from_fork+0x514/0xb70 [ 154.445532][ T1060] ret_from_fork_asm+0x1a/0x30 [ 154.447773][ T1060] [ 154.462394][ T1060] The buggy address belongs to the object at ffff8880341a0000 [ 154.462394][ T1060] which belongs to the cache kmalloc-8k of size 8192 [ 154.470354][ T1060] The buggy address is located 5472 bytes inside of [ 154.470354][ T1060] freed 8192-byte region [ffff8880341a0000, ffff8880341a2000) [ 154.483915][ T1060] [ 154.484932][ T1060] The buggy address belongs to the physical page: [ 154.487500][ T1060] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x341a0 [ 154.490938][ T1060] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.518120][ T1060] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 154.527791][ T1060] page_type: f5(slab) [ 154.531658][ T1060] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 154.539068][ T1060] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 154.559919][ T1060] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 154.574435][ T1060] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 154.582869][ T1060] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 154.586308][ T1060] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 154.594585][ T1060] page dumped because: kasan: bad access detected [ 154.612044][ T1060] page_owner tracks the page as allocated [ 154.623559][ T1060] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27423794112, free_ts 27403591485 [ 154.634454][ T1060] post_alloc_hook+0x1f9/0x250 [ 154.636299][ T1060] get_page_from_freelist+0x21fa/0x2270 [ 154.638696][ T1060] __alloc_frozen_pages_noprof+0x18d/0x380 [ 154.641393][ T1060] allocate_slab+0x79/0x5e0 [ 154.643421][ T1060] refill_objects+0x2d5/0x350 [ 154.645602][ T1060] __pcs_replace_empty_main+0x2bf/0x6b0 [ 154.647773][ T1060] __kmalloc_noprof+0x485/0x720 [ 154.649682][ T1060] acpi_ut_initialize_buffer+0xca/0x170 [ 154.651900][ T1060] acpi_rs_create_pci_routing_table+0x1c0/0xd90 [ 154.656268][ T1060] acpi_rs_get_prt_method_data+0xdf/0x150 [ 154.659986][ T1060] acpi_get_irq_routing_table+0x98/0xe0 [ 154.664074][ T1060] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 154.667445][ T1060] acpi_pci_irq_lookup+0x45/0x690 [ 154.686384][ T1060] acpi_pci_irq_enable+0x1ee/0x7a0 [ 154.691053][ T1060] do_pci_enable_device+0x26f/0x4a0 [ 154.702924][ T1060] pci_enable_device_flags+0x5ab/0x700 [ 154.705308][ T1060] page last free pid 9 tgid 9 stack trace: [ 154.713405][ T1060] free_pages_prepare+0x960/0xa60 [ 154.715637][ T1060] __free_contig_range_common+0x174/0x340 [ 154.718144][ T1060] free_pages_bulk+0x48/0x120 [ 154.720222][ T1060] vfree+0x224/0x4a0 [ 154.732013][ T1060] delayed_vfree_work+0x55/0x80 [ 154.734226][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 154.736830][ T1060] worker_thread+0xa47/0xfb0 [ 154.755727][ T1060] kthread+0x388/0x470 [ 154.757717][ T1060] ret_from_fork+0x514/0xb70 [ 154.759713][ T1060] ret_from_fork_asm+0x1a/0x30 [ 154.761873][ T1060] [ 154.762947][ T1060] Memory state around the buggy address: [ 154.765391][ T1060] ffff8880341a1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.768911][ T1060] ffff8880341a1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.783870][ T1060] >ffff8880341a1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.795352][ T1060] ^ [ 154.800823][ T1060] ffff8880341a1580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.807957][ T1060] ffff8880341a1600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.817485][ T1060] ================================================================== [ 154.830135][ T5340] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 154.894867][ T5340] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 6 [ 154.907894][ T5340] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 154.927511][ T5340] usb usb6: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 154.941243][ T5340] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 154.953231][ T5304] Bluetooth: hci0: command tx timeout [ 154.961843][ T5340] usb usb6: Product: USB/IP Virtual Host Controller [ 154.966177][ T5340] usb usb6: Manufacturer: Linux syzkaller vhci_hcd [ 154.970250][ T5340] usb usb6: SerialNumber: vhci_hcd.0 [ 154.993107][ T5340] hub 6-0:1.0: USB hub found [ 154.997477][ T5340] hub 6-0:1.0: 8 ports detected [ 155.046273][ T5340] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 155.091917][ T5340] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 7 [ 155.109024][ T5340] usb usb7: We don't know the algorithms for LPM for this host, disabling LPM. [ 155.117511][ T1060] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.122594][ T1060] CPU: 0 UID: 0 PID: 1060 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 155.128621][ T1060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.134869][ T1060] Workqueue: usbip_event event_handler [ 155.138321][ T1060] Call Trace: [ 155.140543][ T1060] [ 155.142486][ T1060] vpanic+0x56c/0xa60 [ 155.144725][ T1060] ? __pfx_vpanic+0x10/0x10 [ 155.146741][ T1060] ? __pfx___schedule+0x10/0x10 [ 155.149241][ T1060] panic+0xc5/0xd0 [ 155.151690][ T1060] ? __pfx_panic+0x10/0x10 [ 155.154529][ T1060] ? preempt_schedule_common+0x82/0xd0 [ 155.158084][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 155.161706][ T1060] check_panic_on_warn+0x89/0xb0 [ 155.181859][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 155.187408][ T1060] end_report+0x73/0x170 [ 155.199609][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 155.204079][ T1060] kasan_report+0x128/0x150 [ 155.206161][ T1060] ? vhci_shutdown_connection+0x1d4/0x650 [ 155.209452][ T1060] vhci_shutdown_connection+0x1d4/0x650 [ 155.212519][ T1060] event_handler+0x2a4/0x4b0 [ 155.214608][ T1060] ? process_scheduled_works+0xa20/0x14e0 [ 155.222024][ T1060] process_scheduled_works+0xa8e/0x14e0 [ 155.225084][ T1060] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.228313][ T1060] ? assign_work+0x3cf/0x5d0 [ 155.230841][ T1060] worker_thread+0xa47/0xfb0 [ 155.233715][ T1060] kthread+0x388/0x470 [ 155.236155][ T1060] ? __pfx_worker_thread+0x10/0x10 [ 155.239250][ T1060] ? __pfx_kthread+0x10/0x10 [ 155.261130][ T1060] ret_from_fork+0x514/0xb70 [ 155.263878][ T1060] ? __pfx_ret_from_fork+0x10/0x10 [ 155.266532][ T1060] ? __switch_to+0xc89/0x1420 [ 155.268995][ T1060] ? __pfx_kthread+0x10/0x10 [ 155.279004][ T1060] ret_from_fork_asm+0x1a/0x30 [ 155.282475][ T1060] [ 155.284251][ T1060] Kernel Offset: disabled [ 155.288825][ T1060] Rebooting in 86400 seconds..