program: syz_open_dev$evdev(0x0, 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) [ 76.893861][ T5274] Bluetooth: hci0: command tx timeout [ 76.898031][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.898108][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.256379][ T5309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.403862][ T5309] usb 5-1: Using ep0 maxpacket: 32 [ 77.407581][ T5309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.407619][ T5309] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 77.409524][ T5309] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 77.409541][ T5309] usb 5-1: config 3 has an invalid interface number: 25 but max is 1 [ 77.409549][ T5309] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 77.409559][ T5309] usb 5-1: config 3 has no interface number 0 [ 77.409567][ T5309] usb 5-1: config 3 has no interface number 1 [ 77.409601][ T5309] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.409612][ T5309] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.409625][ T5309] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 77.409650][ T5309] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 77.409665][ T5309] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 77.409678][ T5309] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 77.409691][ T5309] usb 5-1: config 3 interface 223 has no altsetting 1 [ 77.409700][ T5309] usb 5-1: config 3 interface 25 has no altsetting 0 [ 77.411713][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.411728][ T5309] usb 5-1: Product: syz [ 77.411736][ T5309] usb 5-1: Manufacturer: syz [ 77.411743][ T5309] usb 5-1: SerialNumber: syz [ 77.699841][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.702992][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.898459][ T5309] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 77.946553][ T5309] usb 5-1: USB disconnect, device number 2 [ 78.036178][ T5309] [ 78.037260][ T5309] ========================= [ 78.039253][ T5309] WARNING: held lock freed! [ 78.041217][ T5309] syzkaller #0 Not tainted [ 78.043165][ T5309] ------------------------- [ 78.045085][ T5309] kworker/0:7/5309 is freeing memory ffff88801f8a5000-ffff88801f8a57ff, with a lock still held there! [ 78.049568][ T5309] ffff88801f8a51a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 78.053976][ T5309] locks held by kworker/0:7/5309: 5, last CPU#0: [ 78.056715][ T5309] #0: ffff88801d23ed40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 78.061782][ T5309] #1: ffffc9000eb37c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 78.066793][ T5309] #2: ffff88801fa401d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 78.070579][ T5309] #3: ffff8880365a91d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 78.074297][ T5309] #4: ffff88801f8a51a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 78.078654][ T5309] [ 78.078654][ T5309] stack backtrace: [ 78.080884][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 78.084648][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.089059][ T5309] Workqueue: usb_hub_wq hub_event [ 78.091319][ T5309] Call Trace: [ 78.092820][ T5309] [ 78.094141][ T5309] dump_stack_lvl+0xe8/0x150 [ 78.096270][ T5309] debug_check_no_locks_freed+0x149/0x170 [ 78.098745][ T5309] kfree+0x12b/0x650 [ 78.100596][ T5309] ? device_release+0xc4/0x1f0 [ 78.102943][ T5309] ? __pfx_usb_release_interface+0x10/0x10 [ 78.105500][ T5309] device_release+0xc4/0x1f0 [ 78.107541][ T5309] kobject_put+0x222/0x550 [ 78.109544][ T5309] v4l2_device_disconnect+0x79/0xd0 [ 78.113055][ T5309] usbtv_video_free+0x25/0x30 [ 78.114949][ T5309] usbtv_disconnect+0x5c/0xa0 [ 78.116945][ T5309] usb_unbind_interface+0x295/0x9f0 [ 78.119252][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.121661][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.124227][ T5309] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.126622][ T5309] device_release_driver_internal+0x4f5/0x880 [ 78.129038][ T5309] bus_remove_device+0x444/0x560 [ 78.131060][ T5309] ? __pfx_bus_remove_device+0x10/0x10 [ 78.133141][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.135587][ T5309] device_del+0x524/0x8f0 [ 78.137675][ T5309] ? __pfx_device_del+0x10/0x10 [ 78.139756][ T5309] ? __pfx___mutex_lock+0x10/0x10 [ 78.141874][ T5309] usb_disable_device+0x3d4/0x8d0 [ 78.144000][ T5309] usb_disconnect+0x346/0x9a0 [ 78.145998][ T5309] hub_event+0x1bbb/0x4d30 [ 78.148015][ T5309] ? do_raw_spin_unlock+0x4d/0x200 [ 78.150273][ T5309] ? register_lock_class+0x31/0x2e0 [ 78.152660][ T5309] ? __pfx_hub_event+0x10/0x10 [ 78.154836][ T5309] ? rcu_is_watching+0x16/0xb0 [ 78.157206][ T5309] ? process_scheduled_works+0x97a/0x1630 [ 78.159829][ T5309] process_scheduled_works+0xc3d/0x1630 [ 78.162293][ T5309] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.164871][ T5309] ? assign_work+0x3cf/0x5d0 [ 78.166716][ T5309] worker_thread+0xa47/0xfb0 [ 78.168752][ T5309] ? __kthread_parkme+0x71/0x1f0 [ 78.170915][ T5309] kthread+0x38b/0x480 [ 78.172660][ T5309] ? __pfx_worker_thread+0x10/0x10 [ 78.174839][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.176955][ T5309] ret_from_fork+0x514/0xb70 [ 78.179048][ T5309] ? __pfx_ret_from_fork+0x10/0x10 [ 78.181257][ T5309] ? __switch_to+0xc89/0x1420 [ 78.183162][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.185115][ T5309] ret_from_fork_asm+0x1a/0x30 [ 78.187151][ T5309] [ 78.364309][ T5309] ================================================================== [ 78.364323][ T5309] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 [ 78.364344][ T5309] Read of size 8 at addr ffff88801f8a5008 by task kworker/0:7/5309 [ 78.364356][ T5309] [ 78.364362][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 78.364374][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.364399][ T5309] Workqueue: usb_hub_wq hub_event [ 78.364415][ T5309] Call Trace: [ 78.364420][ T5309] [ 78.364426][ T5309] dump_stack_lvl+0xe8/0x150 [ 78.364443][ T5309] print_address_description+0x55/0x1e0 [ 78.364470][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.364481][ T5309] print_report+0x58/0x70 [ 78.364494][ T5309] kasan_report+0x117/0x150 [ 78.364514][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.364528][ T5309] usb_unbind_interface+0x2c2/0x9f0 [ 78.364539][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.364551][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.364561][ T5309] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.364573][ T5309] device_release_driver_internal+0x4f5/0x880 [ 78.364586][ T5309] bus_remove_device+0x444/0x560 [ 78.364601][ T5309] ? __pfx_bus_remove_device+0x10/0x10 [ 78.364615][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.364626][ T5309] device_del+0x524/0x8f0 [ 78.364637][ T5309] ? __pfx_device_del+0x10/0x10 [ 78.364652][ T5309] ? __pfx___mutex_lock+0x10/0x10 [ 78.364666][ T5309] usb_disable_device+0x3d4/0x8d0 [ 78.364679][ T5309] usb_disconnect+0x346/0x9a0 [ 78.364695][ T5309] hub_event+0x1bbb/0x4d30 [ 78.364704][ T5309] ? do_raw_spin_unlock+0x4d/0x200 [ 78.364721][ T5309] ? register_lock_class+0x31/0x2e0 [ 78.364737][ T5309] ? __pfx_hub_event+0x10/0x10 [ 78.364749][ T5309] ? rcu_is_watching+0x16/0xb0 [ 78.364762][ T5309] ? process_scheduled_works+0x97a/0x1630 [ 78.364776][ T5309] process_scheduled_works+0xc3d/0x1630 [ 78.364795][ T5309] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.364809][ T5309] ? assign_work+0x3cf/0x5d0 [ 78.364823][ T5309] worker_thread+0xa47/0xfb0 [ 78.364839][ T5309] ? __kthread_parkme+0x71/0x1f0 [ 78.364855][ T5309] kthread+0x38b/0x480 [ 78.364871][ T5309] ? __pfx_worker_thread+0x10/0x10 [ 78.364884][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.364894][ T5309] ret_from_fork+0x514/0xb70 [ 78.364905][ T5309] ? __pfx_ret_from_fork+0x10/0x10 [ 78.364914][ T5309] ? __switch_to+0xc89/0x1420 [ 78.364929][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.364939][ T5309] ret_from_fork_asm+0x1a/0x30 [ 78.364958][ T5309] [ 78.364962][ T5309] [ 78.364964][ T5309] Allocated by task 5309: [ 78.364981][ T5309] kasan_save_track+0x3e/0x80 [ 78.364996][ T5309] __kasan_kmalloc+0x93/0xb0 [ 78.365005][ T5309] __kmalloc_cache_noprof+0x321/0x600 [ 78.365019][ T5309] usb_set_configuration+0x3cc/0x2180 [ 78.365028][ T5309] usb_generic_driver_probe+0x8d/0x150 [ 78.365038][ T5309] usb_probe_device+0x1c3/0x3b0 [ 78.365049][ T5309] really_probe+0x254/0xae0 [ 78.365059][ T5309] __driver_probe_device+0x1e8/0x360 [ 78.365068][ T5309] driver_probe_device+0x4f/0x240 [ 78.365078][ T5309] __device_attach_driver+0x270/0x410 [ 78.365087][ T5309] bus_for_each_drv+0x258/0x2f0 [ 78.365099][ T5309] __device_attach+0x2c4/0x450 [ 78.365107][ T5309] device_initial_probe+0xa1/0xd0 [ 78.365116][ T5309] bus_probe_device+0x12a/0x220 [ 78.365127][ T5309] device_add+0x7d7/0xb80 [ 78.365140][ T5309] usb_new_device+0x9aa/0x1690 [ 78.365153][ T5309] hub_event+0x28e8/0x4d30 [ 78.365162][ T5309] process_scheduled_works+0xc3d/0x1630 [ 78.365174][ T5309] worker_thread+0xa47/0xfb0 [ 78.365186][ T5309] kthread+0x38b/0x480 [ 78.365193][ T5309] ret_from_fork+0x514/0xb70 [ 78.365201][ T5309] ret_from_fork_asm+0x1a/0x30 [ 78.365215][ T5309] [ 78.365218][ T5309] Freed by task 5309: [ 78.365223][ T5309] kasan_save_track+0x3e/0x80 [ 78.365235][ T5309] kasan_save_free_info+0x40/0x50 [ 78.365246][ T5309] __kasan_slab_free+0x5c/0x80 [ 78.365254][ T5309] kfree+0x1c5/0x650 [ 78.365266][ T5309] device_release+0xc4/0x1f0 [ 78.365276][ T5309] kobject_put+0x222/0x550 [ 78.365289][ T5309] v4l2_device_disconnect+0x79/0xd0 [ 78.365302][ T5309] usbtv_video_free+0x25/0x30 [ 78.365311][ T5309] usbtv_disconnect+0x5c/0xa0 [ 78.365318][ T5309] usb_unbind_interface+0x295/0x9f0 [ 78.365324][ T5309] device_release_driver_internal+0x4f5/0x880 [ 78.365330][ T5309] bus_remove_device+0x444/0x560 [ 78.365341][ T5309] device_del+0x524/0x8f0 [ 78.365348][ T5309] usb_disable_device+0x3d4/0x8d0 [ 78.365357][ T5309] usb_disconnect+0x346/0x9a0 [ 78.365369][ T5309] hub_event+0x1bbb/0x4d30 [ 78.365377][ T5309] process_scheduled_works+0xc3d/0x1630 [ 78.365388][ T5309] worker_thread+0xa47/0xfb0 [ 78.365400][ T5309] kthread+0x38b/0x480 [ 78.365409][ T5309] ret_from_fork+0x514/0xb70 [ 78.365416][ T5309] ret_from_fork_asm+0x1a/0x30 [ 78.365429][ T5309] [ 78.365432][ T5309] The buggy address belongs to the object at ffff88801f8a5000 [ 78.365432][ T5309] which belongs to the cache kmalloc-2k of size 2048 [ 78.365441][ T5309] The buggy address is located 8 bytes inside of [ 78.365441][ T5309] freed 2048-byte region [ffff88801f8a5000, ffff88801f8a5800) [ 78.365451][ T5309] [ 78.365455][ T5309] The buggy address belongs to the physical page: [ 78.365461][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f8a0 [ 78.365471][ T5309] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.365480][ T5309] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 78.365490][ T5309] page_type: f5(slab) [ 78.365499][ T5309] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 78.365508][ T5309] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 78.365517][ T5309] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 78.365525][ T5309] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 78.365534][ T5309] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 78.365543][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 78.365548][ T5309] page dumped because: kasan: bad access detected [ 78.365553][ T5309] page_owner tracks the page as allocated [ 78.365558][ T5309] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5273, tgid 5273 (syz-executor), ts 73119083270 [ 78.365573][ T5309] post_alloc_hook+0x1f9/0x250 [ 78.365587][ T5309] get_page_from_freelist+0x2209/0x2280 [ 78.365601][ T5309] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 78.365615][ T5309] allocate_slab+0x7d/0x620 [ 78.365624][ T5309] refill_objects+0x2d5/0x350 [ 78.365634][ T5309] __pcs_replace_empty_main+0x2c8/0x6c0 [ 78.365644][ T5309] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 78.365657][ T5309] __alloc_skb+0x2c1/0x7a0 [ 78.365679][ T5309] inet6_ifinfo_notify+0x70/0x120 [ 78.365697][ T5309] addrconf_notify+0xca0/0x1050 [ 78.365708][ T5309] notifier_call_chain+0x1a5/0x3d0 [ 78.365723][ T5309] __dev_notify_flags+0x31e/0x510 [ 78.365734][ T5309] netif_change_flags+0xde/0x1b0 [ 78.365745][ T5309] do_setlink+0xdd6/0x4670 [ 78.365756][ T5309] rtnl_newlink+0x15a3/0x1c30 [ 78.365765][ T5309] rtnetlink_rcv_msg+0x802/0xc00 [ 78.365775][ T5309] page last free pid 4695 tgid 4695 ts 26644854248 stack trace: [ 78.365783][ T5309] __free_frozen_pages+0xc93/0xd90 [ 78.365795][ T5309] __slab_free+0x274/0x2c0 [ 78.365807][ T5309] qlist_free_all+0x99/0x100 [ 78.365820][ T5309] kasan_quarantine_reduce+0x148/0x160 [ 78.365832][ T5309] __kasan_slab_alloc+0x22/0x80 [ 78.365841][ T5309] kmem_cache_alloc_noprof+0x2b9/0x600 [ 78.365853][ T5309] do_getname+0x2e/0x250 [ 78.365875][ T5309] do_sys_openat2+0xcc/0x200 [ 78.365886][ T5309] __x64_sys_openat+0x138/0x170 [ 78.365895][ T5309] do_syscall_64+0x166/0x520 [ 78.365907][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.365918][ T5309] [ 78.365920][ T5309] Memory state around the buggy address: [ 78.365926][ T5309] ffff88801f8a4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.365933][ T5309] ffff88801f8a4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.365940][ T5309] >ffff88801f8a5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.365945][ T5309] ^ [ 78.365950][ T5309] ffff88801f8a5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.365956][ T5309] ffff88801f8a5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.365961][ T5309] ================================================================== [ 78.366786][ T5309] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.722519][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 78.726478][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.730602][ T5309] Workqueue: usb_hub_wq hub_event [ 78.732646][ T5309] Call Trace: [ 78.734015][ T5309] [ 78.735273][ T5309] vpanic+0x56d/0xa60 [ 78.736945][ T5309] ? rcu_is_watching+0x16/0xb0 [ 78.738970][ T5309] ? __pfx_vpanic+0x10/0x10 [ 78.740915][ T5309] ? __pfx___schedule+0x10/0x10 [ 78.742957][ T5309] panic+0xc5/0xd0 [ 78.744610][ T5309] ? __pfx_panic+0x10/0x10 [ 78.746557][ T5309] ? preempt_schedule_thunk+0x16/0x40 [ 78.748833][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.751160][ T5309] check_panic_on_warn+0x89/0xb0 [ 78.753239][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.755448][ T5309] end_report+0x73/0x170 [ 78.757229][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.759497][ T5309] kasan_report+0x128/0x150 [ 78.761436][ T5309] ? usb_unbind_interface+0x2c2/0x9f0 [ 78.763730][ T5309] usb_unbind_interface+0x2c2/0x9f0 [ 78.765866][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.768258][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.770731][ T5309] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.773170][ T5309] device_release_driver_internal+0x4f5/0x880 [ 78.775679][ T5309] bus_remove_device+0x444/0x560 [ 78.777861][ T5309] ? __pfx_bus_remove_device+0x10/0x10 [ 78.780282][ T5309] ? kernfs_remove_by_name_ns+0x101/0x140 [ 78.782704][ T5309] device_del+0x524/0x8f0 [ 78.784687][ T5309] ? __pfx_device_del+0x10/0x10 [ 78.786806][ T5309] ? __pfx___mutex_lock+0x10/0x10 [ 78.788942][ T5309] usb_disable_device+0x3d4/0x8d0 [ 78.790970][ T5309] usb_disconnect+0x346/0x9a0 [ 78.793125][ T5309] hub_event+0x1bbb/0x4d30 [ 78.795280][ T5309] ? do_raw_spin_unlock+0x4d/0x200 [ 78.797540][ T5309] ? register_lock_class+0x31/0x2e0 [ 78.799840][ T5309] ? __pfx_hub_event+0x10/0x10 [ 78.801897][ T5309] ? rcu_is_watching+0x16/0xb0 [ 78.803983][ T5309] ? process_scheduled_works+0x97a/0x1630 [ 78.806454][ T5309] process_scheduled_works+0xc3d/0x1630 [ 78.808771][ T5309] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.812155][ T5309] ? assign_work+0x3cf/0x5d0 [ 78.814236][ T5309] worker_thread+0xa47/0xfb0 [ 78.816373][ T5309] ? __kthread_parkme+0x71/0x1f0 [ 78.818530][ T5309] kthread+0x38b/0x480 [ 78.820291][ T5309] ? __pfx_worker_thread+0x10/0x10 [ 78.822568][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.824562][ T5309] ret_from_fork+0x514/0xb70 [ 78.826419][ T5309] ? __pfx_ret_from_fork+0x10/0x10 [ 78.828622][ T5309] ? __switch_to+0xc89/0x1420 [ 78.830766][ T5309] ? __pfx_kthread+0x10/0x10 [ 78.832739][ T5309] ret_from_fork_asm+0x1a/0x30 [ 78.834821][ T5309] [ 78.836472][ T5309] Kernel Offset: disabled [ 78.838397][ T5309] Rebooting in 86400 seconds..