program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e7e6ae0cd", 0x8}]) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x0, 0x2, 0x8f47, 0x2, 0x20}, {0x7}, {0x4479d51f, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) io_setup(0x20, &(0x7f0000001140)) (async) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e7e6ae0cd", 0x8}]) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x0, 0x2, 0x8f47, 0x2, 0x20}, {0x7}, {0x4479d51f, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) (async) write(r4, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) (async) [ 101.526668][ T4653] Bluetooth: hci0: command tx timeout [ 101.604514][ T5333] vhci_hcd vhci_hcd.0: remove, state 4 [ 101.619116][ T5333] usb usb7: USB disconnect, device number 1 [ 101.670162][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.674032][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.678456][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 101.681998][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.684117][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.686950][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 101.689426][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.691579][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.693853][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 101.696960][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.699287][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.701668][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 101.704179][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.708297][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.718757][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 101.722175][ T5333] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 101.728648][ T30] vhci_hcd vhci_hcd.0: stop threads [ 101.735302][ T30] vhci_hcd vhci_hcd.0: release socket [ 101.742517][ T5333] vhci_hcd vhci_hcd.0: remove, state 4 [ 101.745082][ T30] ================================================================== [ 101.748529][ T30] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x452/0x460 [ 101.752060][ T30] Read of size 4 at addr ffff888034c54fe0 by task kworker/u4:2/30 [ 101.755214][ T30] [ 101.756289][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) [ 101.756303][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.756311][ T30] Workqueue: usbip_event event_handler [ 101.756327][ T30] Call Trace: [ 101.756334][ T30] [ 101.756345][ T30] dump_stack_lvl+0xe8/0x150 [ 101.756362][ T30] print_address_description+0x55/0x1e0 [ 101.756379][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 101.756391][ T30] print_report+0x58/0x70 [ 101.756405][ T30] kasan_report+0x117/0x150 [ 101.756421][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 101.756435][ T30] vhci_cleanup_unlink_list+0x452/0x460 [ 101.756448][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 101.756461][ T30] vhci_shutdown_connection+0x2af/0x650 [ 101.756475][ T30] event_handler+0x2a4/0x4b0 [ 101.756486][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 101.756499][ T30] process_scheduled_works+0xa8e/0x14e0 [ 101.756517][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.756531][ T30] ? assign_work+0x3cf/0x5d0 [ 101.756544][ T30] worker_thread+0xa47/0xfb0 [ 101.756561][ T30] kthread+0x388/0x470 [ 101.756577][ T30] ? __pfx_worker_thread+0x10/0x10 [ 101.756588][ T30] ? __pfx_kthread+0x10/0x10 [ 101.756603][ T30] ret_from_fork+0x514/0xb70 [ 101.756619][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 101.756634][ T30] ? __switch_to+0xc89/0x1420 [ 101.756648][ T30] ? __pfx_kthread+0x10/0x10 [ 101.756662][ T30] ret_from_fork_asm+0x1a/0x30 [ 101.756676][ T30] [ 101.756681][ T30] [ 101.825734][ T30] Allocated by task 1: [ 101.827657][ T30] kasan_save_track+0x3e/0x80 [ 101.829579][ T30] __kasan_kmalloc+0x93/0xb0 [ 101.831486][ T30] __kmalloc_noprof+0x375/0x720 [ 101.833486][ T30] __usb_create_hcd+0x67/0x900 [ 101.835485][ T30] vhci_hcd_probe+0x1e6/0x3e0 [ 101.837889][ T30] platform_probe+0xf9/0x190 [ 101.840372][ T30] really_probe+0x254/0xae0 [ 101.842930][ T30] __driver_probe_device+0x1e8/0x360 [ 101.845324][ T30] driver_probe_device+0x4f/0x240 [ 101.847361][ T30] __device_attach_driver+0x270/0x410 [ 101.849545][ T30] bus_for_each_drv+0x258/0x2f0 [ 101.851619][ T30] __device_attach+0x2c4/0x450 [ 101.853737][ T30] device_initial_probe+0xa1/0xd0 [ 101.855959][ T30] bus_probe_device+0x12a/0x220 [ 101.858071][ T30] device_add+0x7d7/0xb80 [ 101.859958][ T30] platform_device_add+0x4bd/0x860 [ 101.862338][ T30] platform_device_register_full+0x62d/0x710 [ 101.864846][ T30] vhci_hcd_init+0x227/0x360 [ 101.866818][ T30] do_one_initcall+0x250/0x870 [ 101.868714][ T30] do_initcall_level+0x10a/0x1a0 [ 101.870932][ T30] do_initcalls+0x59/0xa0 [ 101.872858][ T30] kernel_init_freeable+0x29d/0x3e0 [ 101.875121][ T30] kernel_init+0x1d/0x1d0 [ 101.877005][ T30] ret_from_fork+0x514/0xb70 [ 101.879032][ T30] ret_from_fork_asm+0x1a/0x30 [ 101.881128][ T30] [ 101.882258][ T30] Freed by task 5333: [ 101.883752][ T30] kasan_save_track+0x3e/0x80 [ 101.885596][ T30] kasan_save_free_info+0x40/0x50 [ 101.887718][ T30] __kasan_slab_free+0x5c/0x80 [ 101.889682][ T30] kfree+0x1c5/0x640 [ 101.891264][ T30] vhci_hcd_remove+0x9e/0x110 [ 101.893215][ T30] device_release_driver_internal+0x48b/0x880 [ 101.895657][ T30] unbind_store+0x1a1/0x1d0 [ 101.897424][ T30] kernfs_fop_write_iter+0x3a4/0x540 [ 101.899710][ T30] vfs_write+0x612/0xba0 [ 101.901561][ T30] ksys_write+0x150/0x270 [ 101.903544][ T30] do_syscall_64+0x174/0x580 [ 101.905557][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.908144][ T30] [ 101.909174][ T30] Last potentially related work creation: [ 101.911698][ T30] kasan_save_stack+0x3e/0x60 [ 101.913704][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 101.915913][ T30] insert_work+0x3d/0x330 [ 101.917777][ T30] __queue_work+0xcd8/0x10a0 [ 101.919659][ T30] queue_work_on+0x106/0x1d0 [ 101.921373][ T30] unlink1+0x344/0x3e0 [ 101.923091][ T30] usb_hcd_unlink_urb+0xe6/0x1e0 [ 101.925159][ T30] usb_kill_urb+0x10b/0x2f0 [ 101.927011][ T30] hub_quiesce+0x211/0x330 [ 101.928832][ T30] hub_suspend+0x904/0xad0 [ 101.930665][ T30] usb_suspend_both+0x285/0x1040 [ 101.932493][ T30] usb_runtime_suspend+0x58/0x110 [ 101.934380][ T30] __rpm_callback+0x2c7/0x950 [ 101.936303][ T30] rpm_suspend+0x8a0/0x17b0 [ 101.937908][ T30] __pm_runtime_suspend+0x12f/0x1a0 [ 101.939745][ T30] usb_new_device+0xadf/0x1620 [ 101.941543][ T30] register_root_hub+0x250/0x5c0 [ 101.943343][ T30] usb_add_hcd+0xac7/0xf80 [ 101.944956][ T30] vhci_hcd_probe+0x1fa/0x3e0 [ 101.946777][ T30] platform_probe+0xf9/0x190 [ 101.948782][ T30] really_probe+0x254/0xae0 [ 101.950805][ T30] __driver_probe_device+0x1e8/0x360 [ 101.953077][ T30] driver_probe_device+0x4f/0x240 [ 101.955210][ T30] __device_attach_driver+0x270/0x410 [ 101.957012][ T30] bus_for_each_drv+0x258/0x2f0 [ 101.958752][ T30] __device_attach+0x2c4/0x450 [ 101.960590][ T30] device_initial_probe+0xa1/0xd0 [ 101.962705][ T30] bus_probe_device+0x12a/0x220 [ 101.964675][ T30] device_add+0x7d7/0xb80 [ 101.966383][ T30] platform_device_add+0x4bd/0x860 [ 101.968427][ T30] platform_device_register_full+0x62d/0x710 [ 101.970742][ T30] vhci_hcd_init+0x227/0x360 [ 101.972616][ T30] do_one_initcall+0x250/0x870 [ 101.974603][ T30] do_initcall_level+0x10a/0x1a0 [ 101.976560][ T30] do_initcalls+0x59/0xa0 [ 101.978187][ T30] kernel_init_freeable+0x29d/0x3e0 [ 101.980230][ T30] kernel_init+0x1d/0x1d0 [ 101.982083][ T30] ret_from_fork+0x514/0xb70 [ 101.984183][ T30] ret_from_fork_asm+0x1a/0x30 [ 101.986312][ T30] [ 101.987270][ T30] Second to last potentially related work creation: [ 101.989854][ T30] kasan_save_stack+0x3e/0x60 [ 101.991810][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 101.994041][ T30] insert_work+0x3d/0x330 [ 101.995858][ T30] __queue_work+0xcd8/0x10a0 [ 101.997675][ T30] queue_work_on+0x106/0x1d0 [ 101.999593][ T30] usb_hcd_submit_urb+0xa3b/0x1b60 [ 102.001594][ T30] usb_start_wait_urb+0x13f/0x5b0 [ 102.003620][ T30] usb_control_msg+0x234/0x3e0 [ 102.005652][ T30] hub_suspend+0x891/0xad0 [ 102.007511][ T30] usb_suspend_both+0x285/0x1040 [ 102.009653][ T30] usb_runtime_suspend+0x58/0x110 [ 102.011869][ T30] __rpm_callback+0x2c7/0x950 [ 102.013911][ T30] rpm_suspend+0x8a0/0x17b0 [ 102.015957][ T30] __pm_runtime_suspend+0x12f/0x1a0 [ 102.018375][ T30] usb_new_device+0xadf/0x1620 [ 102.020485][ T30] register_root_hub+0x250/0x5c0 [ 102.022688][ T30] usb_add_hcd+0xac7/0xf80 [ 102.024482][ T30] vhci_hcd_probe+0x1fa/0x3e0 [ 102.026366][ T30] platform_probe+0xf9/0x190 [ 102.028020][ T30] really_probe+0x254/0xae0 [ 102.029803][ T30] __driver_probe_device+0x1e8/0x360 [ 102.031834][ T30] driver_probe_device+0x4f/0x240 [ 102.033734][ T30] __device_attach_driver+0x270/0x410 [ 102.035697][ T30] bus_for_each_drv+0x258/0x2f0 [ 102.037570][ T30] __device_attach+0x2c4/0x450 [ 102.039552][ T30] device_initial_probe+0xa1/0xd0 [ 102.042140][ T30] bus_probe_device+0x12a/0x220 [ 102.044293][ T30] device_add+0x7d7/0xb80 [ 102.046039][ T30] platform_device_add+0x4bd/0x860 [ 102.048109][ T30] platform_device_register_full+0x62d/0x710 [ 102.050505][ T30] vhci_hcd_init+0x227/0x360 [ 102.052400][ T30] do_one_initcall+0x250/0x870 [ 102.054309][ T30] do_initcall_level+0x10a/0x1a0 [ 102.056237][ T30] do_initcalls+0x59/0xa0 [ 102.057822][ T30] kernel_init_freeable+0x29d/0x3e0 [ 102.059818][ T30] kernel_init+0x1d/0x1d0 [ 102.061476][ T30] ret_from_fork+0x514/0xb70 [ 102.063348][ T30] ret_from_fork_asm+0x1a/0x30 [ 102.065198][ T30] [ 102.066134][ T30] The buggy address belongs to the object at ffff888034c54000 [ 102.066134][ T30] which belongs to the cache kmalloc-8k of size 8192 [ 102.071632][ T30] The buggy address is located 4064 bytes inside of [ 102.071632][ T30] freed 8192-byte region [ffff888034c54000, ffff888034c56000) [ 102.077149][ T30] [ 102.078167][ T30] The buggy address belongs to the physical page: [ 102.080655][ T30] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34c50 [ 102.083621][ T30] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.086557][ T30] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 102.089058][ T30] page_type: f5(slab) [ 102.090443][ T30] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 102.093851][ T30] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 102.097079][ T30] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 102.100716][ T30] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 102.104412][ T30] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 102.108101][ T30] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 102.111837][ T30] page dumped because: kasan: bad access detected [ 102.114611][ T30] page_owner tracks the page as allocated [ 102.117010][ T30] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17375966146, free_ts 17282080572 [ 102.125586][ T30] post_alloc_hook+0x1f9/0x250 [ 102.127707][ T30] get_page_from_freelist+0x21fa/0x2270 [ 102.129958][ T30] __alloc_frozen_pages_noprof+0x18d/0x380 [ 102.132527][ T30] allocate_slab+0x79/0x5e0 [ 102.134474][ T30] refill_objects+0x2d5/0x350 [ 102.136462][ T30] __pcs_replace_empty_main+0x2bf/0x6b0 [ 102.139228][ T30] __kmalloc_noprof+0x485/0x720 [ 102.141457][ T30] __usb_create_hcd+0x67/0x900 [ 102.143550][ T30] vhci_hcd_probe+0x1e6/0x3e0 [ 102.145573][ T30] platform_probe+0xf9/0x190 [ 102.147144][ T30] really_probe+0x254/0xae0 [ 102.148795][ T30] __driver_probe_device+0x1e8/0x360 [ 102.150663][ T30] driver_probe_device+0x4f/0x240 [ 102.152430][ T30] __device_attach_driver+0x270/0x410 [ 102.154569][ T30] bus_for_each_drv+0x258/0x2f0 [ 102.156403][ T30] __device_attach+0x2c4/0x450 [ 102.158347][ T30] page last free pid 1 tgid 1 stack trace: [ 102.160664][ T30] __free_frozen_pages+0xc1e/0xd10 [ 102.162812][ T30] __slab_free+0x274/0x2c0 [ 102.164574][ T30] qlist_free_all+0x99/0x100 [ 102.166430][ T30] kasan_quarantine_reduce+0x148/0x160 [ 102.168411][ T30] __kasan_slab_alloc+0x22/0x80 [ 102.170068][ T30] __kmalloc_cache_noprof+0x2ab/0x660 [ 102.172084][ T30] bus_add_driver+0x162/0x670 [ 102.173865][ T30] driver_register+0x23a/0x320 [ 102.175673][ T30] do_one_initcall+0x250/0x870 [ 102.177480][ T30] do_initcall_level+0x10a/0x1a0 [ 102.179512][ T30] do_initcalls+0x59/0xa0 [ 102.181354][ T30] kernel_init_freeable+0x29d/0x3e0 [ 102.183505][ T30] kernel_init+0x1d/0x1d0 [ 102.185320][ T30] ret_from_fork+0x514/0xb70 [ 102.187274][ T30] ret_from_fork_asm+0x1a/0x30 [ 102.189212][ T30] [ 102.190194][ T30] Memory state around the buggy address: [ 102.192516][ T30] ffff888034c54e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.195898][ T30] ffff888034c54f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.199268][ T30] >ffff888034c54f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.202559][ T30] ^ [ 102.205309][ T30] ffff888034c55000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.208395][ T30] ffff888034c55080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.211627][ T30] ================================================================== [ 102.216859][ T5333] usb usb6: USB disconnect, device number 1 [ 102.242457][ T5333] vhci_hcd vhci_hcd.0: USB bus 6 deregistered [ 102.271937][ T5334] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 102.326440][ T5334] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 6 [ 102.333508][ T5334] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 102.341559][ T5334] usb usb6: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 102.344930][ T5334] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 102.349809][ T5334] usb usb6: Product: USB/IP Virtual Host Controller [ 102.353125][ T5334] usb usb6: Manufacturer: Linux syzkaller vhci_hcd [ 102.356883][ T5334] usb usb6: SerialNumber: vhci_hcd.0 [ 102.367540][ T5334] hub 6-0:1.0: USB hub found [ 102.370855][ T5334] hub 6-0:1.0: 8 ports detected [ 102.406796][ T5334] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 102.431159][ T5334] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 7 [ 102.452893][ T5334] usb usb7: We don't know the algorithms for LPM for this host, disabling LPM. [ 102.470195][ T5334] usb usb7: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 102.478548][ T5334] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 102.488186][ T5334] usb usb7: Product: USB/IP Virtual Host Controller [ 102.490956][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.493833][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) [ 102.497528][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.501535][ T30] Workqueue: usbip_event event_handler [ 102.503795][ T30] Call Trace: [ 102.505051][ T30] [ 102.506216][ T30] vpanic+0x56c/0xa60 [ 102.507775][ T30] ? __pfx_vpanic+0x10/0x10 [ 102.509605][ T30] ? __pfx___schedule+0x10/0x10 [ 102.511613][ T30] panic+0xc5/0xd0 [ 102.512865][ T30] ? __pfx_panic+0x10/0x10 [ 102.514722][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 102.516957][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 102.519375][ T30] check_panic_on_warn+0x89/0xb0 [ 102.521465][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 102.523783][ T30] end_report+0x73/0x170 [ 102.525532][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 102.527600][ T30] kasan_report+0x128/0x150 [ 102.529299][ T30] ? vhci_cleanup_unlink_list+0x452/0x460 [ 102.531402][ T30] vhci_cleanup_unlink_list+0x452/0x460 [ 102.533777][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 102.536055][ T30] vhci_shutdown_connection+0x2af/0x650 [ 102.538450][ T30] event_handler+0x2a4/0x4b0 [ 102.540478][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 102.542888][ T30] process_scheduled_works+0xa8e/0x14e0 [ 102.545162][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.547744][ T30] ? assign_work+0x3cf/0x5d0 [ 102.549779][ T30] worker_thread+0xa47/0xfb0 [ 102.551801][ T30] kthread+0x388/0x470 [ 102.553432][ T30] ? __pfx_worker_thread+0x10/0x10 [ 102.555601][ T30] ? __pfx_kthread+0x10/0x10 [ 102.557558][ T30] ret_from_fork+0x514/0xb70 [ 102.559496][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 102.561680][ T30] ? __switch_to+0xc89/0x1420 [ 102.563721][ T30] ? __pfx_kthread+0x10/0x10 [ 102.565692][ T30] ret_from_fork_asm+0x1a/0x30 [ 102.567735][ T30] [ 102.569440][ T30] Kernel Offset: disabled [ 102.571357][ T30] Rebooting in 86400 seconds..