program: open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0xd, &(0x7f0000000380)={[{@device={'device', 0x3d, './bus'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}]}, 0x10, 0x55d8, &(0x7f0000010240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x81, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002e0003470fbb65e1c3e4ffff060060001600000056000000250000001900130004000f0007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './sys\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r5, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x30c948ce38a0b9fc, 0x0) ioctl$TIOCPKT(r6, 0x5420, 0x0) [ 132.526429][ T5296] Bluetooth: hci0: command tx timeout [ 132.896685][ T5334] loop0: detected capacity change from 0 to 32768 [ 132.922719][ T5334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:0) scanned by syz.0.0 (5334) [ 132.944210][ T5334] BTRFS info: missing devid 1 re-appeared at /dev/loop0 scanned by syz.0.0 (5334) [ 132.997326][ T5288] udevd[5288]: incorrect btrfs checksum on /dev/loop0 [ 133.009166][ T5334] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.019426][ T5334] BTRFS info (device loop0): using sha256 checksum algorithm [ 133.029665][ T5334] BTRFS error (device loop0): superblock checksum mismatch [ 133.046487][ T5334] BTRFS error (device loop0): open_ctree failed: -22 [ 133.093211][ T5334] vhci_hcd vhci_hcd.0: remove, state 4 [ 133.102444][ T5334] usb usb7: USB disconnect, device number 1 [ 133.106349][ T5288] udevd[5288]: incorrect btrfs checksum on /dev/loop0 [ 133.249510][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.265050][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.275074][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.284199][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.294754][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.304742][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.315631][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.322419][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.333184][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.340233][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.346039][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.350790][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.358775][ T5336] iommufd_mock iommufd_mock0: Adding to iommu group 11 [ 133.362769][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.365998][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.373384][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.379163][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.382997][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.386216][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.389092][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.391657][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.394211][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.397932][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.400726][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.403056][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.409755][ T5334] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 133.422813][ T5334] vhci_hcd vhci_hcd.0: remove, state 4 [ 133.425677][ T5334] usb usb6: USB disconnect, device number 1 [ 133.456456][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.460883][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.467195][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.470430][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.473161][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.476469][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.478998][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.481524][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.485969][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.493401][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.497685][ T5334] vhci_hcd vhci_hcd.0: USB bus 6 deregistered [ 133.500741][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.506817][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 133.512631][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 133.521955][ T1142] vhci_hcd vhci_hcd.0: release socket [ 133.527658][ T1142] ================================================================== [ 133.530895][ T1142] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x452/0x460 [ 133.534280][ T1142] Read of size 4 at addr ffff888034000d90 by task kworker/u4:9/1142 [ 133.537540][ T1142] [ 133.538633][ T1142] CPU: 0 UID: 0 PID: 1142 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 133.538648][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.538655][ T1142] Workqueue: usbip_event event_handler [ 133.538673][ T1142] Call Trace: [ 133.538681][ T1142] [ 133.538687][ T1142] dump_stack_lvl+0xe8/0x150 [ 133.538706][ T1142] print_address_description+0x55/0x1e0 [ 133.538722][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 133.538735][ T1142] print_report+0x58/0x70 [ 133.538747][ T1142] kasan_report+0x117/0x150 [ 133.538763][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 133.538777][ T1142] vhci_cleanup_unlink_list+0x452/0x460 [ 133.538788][ T1142] ? kasan_quarantine_put+0xbb/0x1f0 [ 133.538801][ T1142] vhci_shutdown_connection+0x2af/0x650 [ 133.538813][ T1142] event_handler+0x2a4/0x4b0 [ 133.538822][ T1142] ? process_scheduled_works+0xa20/0x14e0 [ 133.538833][ T1142] process_scheduled_works+0xa8e/0x14e0 [ 133.538850][ T1142] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.538865][ T1142] ? assign_work+0x3cf/0x5d0 [ 133.538876][ T1142] worker_thread+0xa47/0xfb0 [ 133.538890][ T1142] ? __kthread_parkme+0x71/0x1f0 [ 133.538904][ T1142] kthread+0x388/0x470 [ 133.538926][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 133.538937][ T1142] ? __pfx_kthread+0x10/0x10 [ 133.538949][ T1142] ret_from_fork+0x514/0xb70 [ 133.538964][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 133.538978][ T1142] ? __switch_to+0xc89/0x1420 [ 133.538990][ T1142] ? __pfx_kthread+0x10/0x10 [ 133.539003][ T1142] ret_from_fork_asm+0x1a/0x30 [ 133.539017][ T1142] [ 133.539021][ T1142] [ 133.607236][ T1142] Allocated by task 1: [ 133.609032][ T1142] kasan_save_track+0x3e/0x80 [ 133.611155][ T1142] __kasan_kmalloc+0x93/0xb0 [ 133.613277][ T1142] __kmalloc_noprof+0x375/0x720 [ 133.615405][ T1142] __usb_create_hcd+0x67/0x900 [ 133.617521][ T1142] vhci_hcd_probe+0x104/0x3e0 [ 133.619529][ T1142] platform_probe+0xf9/0x190 [ 133.623962][ T1142] really_probe+0x254/0xae0 [ 133.625824][ T1142] __driver_probe_device+0x1e8/0x360 [ 133.627947][ T1142] driver_probe_device+0x4f/0x240 [ 133.630030][ T1142] __device_attach_driver+0x270/0x410 [ 133.632297][ T1142] bus_for_each_drv+0x258/0x2f0 [ 133.634314][ T1142] __device_attach+0x2c4/0x450 [ 133.636334][ T1142] device_initial_probe+0xa1/0xd0 [ 133.638521][ T1142] bus_probe_device+0x12a/0x220 [ 133.640551][ T1142] device_add+0x7d7/0xb80 [ 133.642311][ T1142] platform_device_add+0x4bd/0x860 [ 133.644516][ T1142] platform_device_register_full+0x62d/0x710 [ 133.647067][ T1142] vhci_hcd_init+0x227/0x360 [ 133.649193][ T1142] do_one_initcall+0x250/0x870 [ 133.651329][ T1142] do_initcall_level+0x10a/0x1a0 [ 133.653582][ T1142] do_initcalls+0x59/0xa0 [ 133.655494][ T1142] kernel_init_freeable+0x29d/0x3e0 [ 133.657806][ T1142] kernel_init+0x1d/0x1d0 [ 133.659742][ T1142] ret_from_fork+0x514/0xb70 [ 133.661798][ T1142] ret_from_fork_asm+0x1a/0x30 [ 133.663875][ T1142] [ 133.664945][ T1142] Freed by task 5334: [ 133.666693][ T1142] kasan_save_track+0x3e/0x80 [ 133.668678][ T1142] kasan_save_free_info+0x40/0x50 [ 133.670826][ T1142] __kasan_slab_free+0x5c/0x80 [ 133.672929][ T1142] kfree+0x1c5/0x640 [ 133.674740][ T1142] vhci_hcd_remove+0xe4/0x110 [ 133.676927][ T1142] device_release_driver_internal+0x48b/0x880 [ 133.679585][ T1142] unbind_store+0x1a1/0x1d0 [ 133.681604][ T1142] kernfs_fop_write_iter+0x3a4/0x540 [ 133.684142][ T1142] vfs_write+0x612/0xba0 [ 133.686077][ T1142] ksys_write+0x150/0x270 [ 133.687963][ T1142] do_syscall_64+0x174/0x580 [ 133.690039][ T1142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.692687][ T1142] [ 133.693751][ T1142] Last potentially related work creation: [ 133.696281][ T1142] kasan_save_stack+0x3e/0x60 [ 133.698370][ T1142] kasan_record_aux_stack+0xbd/0xd0 [ 133.700870][ T1142] insert_work+0x3d/0x330 [ 133.702953][ T1142] __queue_work+0xcd8/0x10a0 [ 133.705021][ T1142] queue_work_on+0x106/0x1d0 [ 133.707089][ T1142] unlink1+0x344/0x3e0 [ 133.708877][ T1142] usb_hcd_unlink_urb+0xe6/0x1e0 [ 133.711082][ T1142] usb_kill_urb+0x10b/0x2f0 [ 133.713164][ T1142] hub_quiesce+0x211/0x330 [ 133.715058][ T1142] hub_suspend+0x904/0xad0 [ 133.716877][ T1142] usb_suspend_both+0x285/0x1040 [ 133.719044][ T1142] usb_runtime_suspend+0x58/0x110 [ 133.721139][ T1142] __rpm_callback+0x2c7/0x950 [ 133.722999][ T1142] rpm_suspend+0x8a0/0x17b0 [ 133.724791][ T1142] __pm_runtime_suspend+0x12f/0x1a0 [ 133.726870][ T1142] usb_new_device+0xadf/0x1620 [ 133.728758][ T1142] register_root_hub+0x250/0x5c0 [ 133.730746][ T1142] usb_add_hcd+0xac7/0xf80 [ 133.732614][ T1142] vhci_hcd_probe+0x141/0x3e0 [ 133.734597][ T1142] platform_probe+0xf9/0x190 [ 133.736539][ T1142] really_probe+0x254/0xae0 [ 133.738436][ T1142] __driver_probe_device+0x1e8/0x360 [ 133.740653][ T1142] driver_probe_device+0x4f/0x240 [ 133.742652][ T1142] __device_attach_driver+0x270/0x410 [ 133.744675][ T1142] bus_for_each_drv+0x258/0x2f0 [ 133.746699][ T1142] __device_attach+0x2c4/0x450 [ 133.748765][ T1142] device_initial_probe+0xa1/0xd0 [ 133.750989][ T1142] bus_probe_device+0x12a/0x220 [ 133.753206][ T1142] device_add+0x7d7/0xb80 [ 133.755457][ T1142] platform_device_add+0x4bd/0x860 [ 133.758026][ T1142] platform_device_register_full+0x62d/0x710 [ 133.760705][ T1142] vhci_hcd_init+0x227/0x360 [ 133.762757][ T1142] do_one_initcall+0x250/0x870 [ 133.764887][ T1142] do_initcall_level+0x10a/0x1a0 [ 133.767071][ T1142] do_initcalls+0x59/0xa0 [ 133.769036][ T1142] kernel_init_freeable+0x29d/0x3e0 [ 133.771323][ T1142] kernel_init+0x1d/0x1d0 [ 133.773112][ T1142] ret_from_fork+0x514/0xb70 [ 133.774909][ T1142] ret_from_fork_asm+0x1a/0x30 [ 133.776451][ T1142] [ 133.777494][ T1142] Second to last potentially related work creation: [ 133.780363][ T1142] kasan_save_stack+0x3e/0x60 [ 133.782339][ T1142] kasan_record_aux_stack+0xbd/0xd0 [ 133.784615][ T1142] insert_work+0x3d/0x330 [ 133.786490][ T1142] __queue_work+0xcd8/0x10a0 [ 133.788509][ T1142] queue_work_on+0x106/0x1d0 [ 133.790527][ T1142] usb_hcd_submit_urb+0xa3b/0x1b60 [ 133.792835][ T1142] usb_start_wait_urb+0x13f/0x5b0 [ 133.795176][ T1142] usb_control_msg+0x234/0x3e0 [ 133.797506][ T1142] hub_ext_port_status+0x114/0x810 [ 133.799744][ T1142] hub_activate+0x740/0x1b20 [ 133.801799][ T1142] process_scheduled_works+0xa8e/0x14e0 [ 133.804228][ T1142] worker_thread+0xa47/0xfb0 [ 133.806128][ T1142] kthread+0x388/0x470 [ 133.807621][ T1142] ret_from_fork+0x514/0xb70 [ 133.809377][ T1142] ret_from_fork_asm+0x1a/0x30 [ 133.811162][ T1142] [ 133.812144][ T1142] The buggy address belongs to the object at ffff888034000000 [ 133.812144][ T1142] which belongs to the cache kmalloc-8k of size 8192 [ 133.817390][ T1142] The buggy address is located 3472 bytes inside of [ 133.817390][ T1142] freed 8192-byte region [ffff888034000000, ffff888034002000) [ 133.823729][ T1142] [ 133.824825][ T1142] The buggy address belongs to the physical page: [ 133.827585][ T1142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34000 [ 133.831159][ T1142] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.834667][ T1142] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 133.837755][ T1142] page_type: f5(slab) [ 133.839388][ T1142] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 133.843026][ T1142] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 133.846637][ T1142] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 133.850061][ T1142] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 133.853340][ T1142] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 133.856696][ T1142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 133.860178][ T1142] page dumped because: kasan: bad access detected [ 133.862846][ T1142] page_owner tracks the page as allocated [ 133.865153][ T1142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16298673730, free_ts 16285401137 [ 133.873246][ T1142] post_alloc_hook+0x1f9/0x250 [ 133.875195][ T1142] get_page_from_freelist+0x21fa/0x2270 [ 133.877536][ T1142] __alloc_frozen_pages_noprof+0x18d/0x380 [ 133.879888][ T1142] allocate_slab+0x79/0x5e0 [ 133.881779][ T1142] refill_objects+0x2d5/0x350 [ 133.883588][ T1142] __pcs_replace_empty_main+0x2bf/0x6b0 [ 133.885730][ T1142] __kmalloc_noprof+0x485/0x720 [ 133.887569][ T1142] acpi_ut_initialize_buffer+0xca/0x170 [ 133.889761][ T1142] acpi_rs_create_pci_routing_table+0x1c0/0xd90 [ 133.892502][ T1142] acpi_rs_get_prt_method_data+0xdf/0x150 [ 133.894741][ T1142] acpi_get_irq_routing_table+0x98/0xe0 [ 133.896812][ T1142] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 133.899154][ T1142] acpi_pci_irq_lookup+0x45/0x690 [ 133.901186][ T1142] acpi_pci_irq_enable+0x1ee/0x7a0 [ 133.903170][ T1142] do_pci_enable_device+0x26f/0x4a0 [ 133.905214][ T1142] pci_enable_device_flags+0x5ab/0x700 [ 133.907406][ T1142] page last free pid 1373 tgid 1373 stack trace: [ 133.909975][ T1142] free_pages_prepare+0x960/0xa60 [ 133.912193][ T1142] __free_contig_range_common+0x174/0x340 [ 133.914412][ T1142] free_pages_bulk+0x48/0x120 [ 133.916388][ T1142] vfree+0x224/0x4a0 [ 133.917908][ T1142] delayed_vfree_work+0x55/0x80 [ 133.919827][ T1142] process_scheduled_works+0xa8e/0x14e0 [ 133.922216][ T1142] worker_thread+0xa47/0xfb0 [ 133.924089][ T1142] kthread+0x388/0x470 [ 133.925649][ T1142] ret_from_fork+0x514/0xb70 [ 133.927331][ T1142] ret_from_fork_asm+0x1a/0x30 [ 133.929176][ T1142] [ 133.930135][ T1142] Memory state around the buggy address: [ 133.932543][ T1142] ffff888034000c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.935895][ T1142] ffff888034000d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.939099][ T1142] >ffff888034000d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.942254][ T1142] ^ [ 133.944338][ T1142] ffff888034000e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.947496][ T1142] ffff888034000e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.950714][ T1142] ================================================================== [ 133.958912][ T5335] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 133.973635][ T5335] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 6 [ 133.977597][ T5335] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 133.990108][ T5335] usb usb6: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 133.993814][ T5335] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 134.001321][ T5335] usb usb6: Product: USB/IP Virtual Host Controller [ 134.005773][ T5335] usb usb6: Manufacturer: Linux syzkaller vhci_hcd [ 134.009407][ T5335] usb usb6: SerialNumber: vhci_hcd.0 [ 134.037920][ T5335] hub 6-0:1.0: USB hub found [ 134.045406][ T5335] hub 6-0:1.0: 8 ports detected [ 134.091017][ T1142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.094060][ T1142] CPU: 0 UID: 0 PID: 1142 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 134.098038][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.102318][ T1142] Workqueue: usbip_event event_handler [ 134.104715][ T1142] Call Trace: [ 134.106536][ T1142] [ 134.108117][ T1142] vpanic+0x56c/0xa60 [ 134.110182][ T1142] ? __pfx_vpanic+0x10/0x10 [ 134.112717][ T1142] ? __pfx___schedule+0x10/0x10 [ 134.115375][ T1142] panic+0xc5/0xd0 [ 134.117518][ T1142] ? __pfx_panic+0x10/0x10 [ 134.119665][ T1142] ? preempt_schedule_thunk+0x16/0x40 [ 134.121815][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 134.124154][ T1142] check_panic_on_warn+0x89/0xb0 [ 134.126179][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 134.128599][ T1142] end_report+0x73/0x170 [ 134.130478][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 134.132922][ T1142] kasan_report+0x128/0x150 [ 134.134952][ T1142] ? vhci_cleanup_unlink_list+0x452/0x460 [ 134.137305][ T1142] vhci_cleanup_unlink_list+0x452/0x460 [ 134.139763][ T1142] ? kasan_quarantine_put+0xbb/0x1f0 [ 134.141950][ T1142] vhci_shutdown_connection+0x2af/0x650 [ 134.143991][ T1142] event_handler+0x2a4/0x4b0 [ 134.145657][ T1142] ? process_scheduled_works+0xa20/0x14e0 [ 134.147634][ T1142] process_scheduled_works+0xa8e/0x14e0 [ 134.149693][ T1142] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.152229][ T1142] ? assign_work+0x3cf/0x5d0 [ 134.154092][ T1142] worker_thread+0xa47/0xfb0 [ 134.155881][ T1142] ? __kthread_parkme+0x71/0x1f0 [ 134.157883][ T1142] kthread+0x388/0x470 [ 134.159513][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 134.161683][ T1142] ? __pfx_kthread+0x10/0x10 [ 134.163604][ T1142] ret_from_fork+0x514/0xb70 [ 134.165524][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 134.167666][ T1142] ? __switch_to+0xc89/0x1420 [ 134.169805][ T1142] ? __pfx_kthread+0x10/0x10 [ 134.171803][ T1142] ret_from_fork_asm+0x1a/0x30 [ 134.173918][ T1142] [ 134.175711][ T1142] Kernel Offset: disabled [ 134.177620][ T1142] Rebooting in 86400 seconds..