program:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000186100000b000000000000006100000018280000", @ANYRES32, @ANYBLOB="000000000600000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000447180001000000059680200f50500009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0xa7, &(0x7f0000000680)=""/167, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x36a6, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000009500000000287cbfb08d1c7200008491c9cf5a3d370c00a82d96293c5676a06bd20fceab1af42c60bb8b246b7f77c3d5d3b8b79f7e068c91db93f35cfea9bffb035b3952094f5e029d3b89d1cd430fb8221444488e1c53428fcda708f3f184ae0622c3408d1b9074180d448b91873c828e8de786ea9104312490a712200fd5b2f8493f52160eeffd318caeb0d579a7395a167b57bf5d394e22a836907533705ddb26ab4a49a6f8c04f176f5017"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000009500000000287cbfb08d1c7200008491c9cf5a3d370c00a82d96293c5676a06bd20fceab1af42c60bb8b246b7f77c3d5d3b8b79f7e068c91db93f35cfea9bffb035b3952094f5e029d3b89d1cd430fb8221444488e1c53428fcda708f3f184ae0622c3408d1b9074180d448b91873c828e8de786ea9104312490a712200fd5b2f8493f52160eeffd318caeb0d579a7395a167b57bf5d394e22a836907533705ddb26ab4a49a6f8c04f176f5017"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r0, r2, 0xa, 0x0, @void}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async)
write(r4, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
listen(r3, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='4\\94967295 2000000000 0\n', 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00), 0x0, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00), 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x3, 0xa0531, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb27, 0x2}, 0x200010, 0x10002, 0x20da, 0x5, 0xa, 0x20005, 0x28, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(r6, &(0x7f0000000200)='./proc\x00', 0x80000, 0x0)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x212000, 0x0) (async)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x212000, 0x0)
syz_create_resource$binfmt(&(0x7f0000000280)='./proc\x00')
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) (async)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
dup(r7) (async)
dup(r7)
mount$bind(&(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x3908430, 0x0)
[ 86.597550][ T4640] Bluetooth: hci0: command tx timeout
[ 86.623593][ T5314] vhci_hcd vhci_hcd.0: remove, state 4
[ 86.634035][ T5314] usb usb7: USB disconnect, device number 1
[ 86.746372][ T37] vhci_hcd vhci_hcd.0: stop threads
[ 86.750466][ T5314] vhci_hcd vhci_hcd.0: USB bus 7 deregistered
[ 86.757528][ T37] vhci_hcd vhci_hcd.0: release socket
[ 86.765020][ T37] vhci_hcd vhci_hcd.0: disconnect device
[ 86.774884][ T37] vhci_hcd vhci_hcd.0: stop threads
[ 86.778980][ T37] vhci_hcd vhci_hcd.0: release socket
[ 86.788361][ T37] vhci_hcd vhci_hcd.0: disconnect device
[ 86.794248][ T5314] vhci_hcd vhci_hcd.0: remove, state 4
[ 86.797013][ T37] ==================================================================
[ 86.801035][ T37] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[ 86.804771][ T37] Read of size 1 at addr ffff888034d5c6c8 by task kworker/u4:3/37
[ 86.808213][ T37]
[ 86.809286][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 86.809310][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.809324][ T37] Workqueue: usbip_event event_handler
[ 86.809360][ T37] Call Trace:
[ 86.809370][ T37]
[ 86.809379][ T37] dump_stack_lvl+0xe8/0x150
[ 86.809408][ T37] print_address_description+0x55/0x1e0
[ 86.809433][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 86.809454][ T37] print_report+0x58/0x70
[ 86.809468][ T37] kasan_report+0x117/0x150
[ 86.809486][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 86.809501][ T37] ? event_handler+0x2b0/0x4b0
[ 86.809519][ T37] __kasan_check_byte+0x2a/0x40
[ 86.809533][ T37] lock_acquire+0x84/0x350
[ 86.809551][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.809565][ T37] ? rcu_is_watching+0x15/0xb0
[ 86.809587][ T37] _raw_spin_lock_irqsave+0x40/0x60
[ 86.809601][ T37] ? event_handler+0x2b0/0x4b0
[ 86.809619][ T37] event_handler+0x2b0/0x4b0
[ 86.809637][ T37] ? process_scheduled_works+0xa20/0x14e0
[ 86.809652][ T37] process_scheduled_works+0xa8e/0x14e0
[ 86.809673][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.809690][ T37] ? assign_work+0x3cf/0x5d0
[ 86.809705][ T37] worker_thread+0xa47/0xfb0
[ 86.809725][ T37] ? __kthread_parkme+0x71/0x1f0
[ 86.809742][ T37] kthread+0x388/0x470
[ 86.809760][ T37] ? __pfx_worker_thread+0x10/0x10
[ 86.809774][ T37] ? __pfx_kthread+0x10/0x10
[ 86.809791][ T37] ret_from_fork+0x514/0xb70
[ 86.809813][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 86.809832][ T37] ? __switch_to+0xc89/0x1420
[ 86.809849][ T37] ? __pfx_kthread+0x10/0x10
[ 86.809867][ T37] ret_from_fork_asm+0x1a/0x30
[ 86.809891][ T37]
[ 86.809895][ T37]
[ 86.891010][ T37] Allocated by task 1:
[ 86.892727][ T37] kasan_save_track+0x3e/0x80
[ 86.894799][ T37] __kasan_kmalloc+0x93/0xb0
[ 86.897082][ T37] __kmalloc_noprof+0x375/0x720
[ 86.899409][ T37] __usb_create_hcd+0x67/0x900
[ 86.901927][ T37] vhci_hcd_probe+0x1e6/0x3e0
[ 86.904270][ T37] platform_probe+0xf9/0x190
[ 86.906387][ T37] really_probe+0x254/0xae0
[ 86.908353][ T37] __driver_probe_device+0x1e8/0x360
[ 86.910682][ T37] driver_probe_device+0x4f/0x240
[ 86.912895][ T37] __device_attach_driver+0x270/0x410
[ 86.915225][ T37] bus_for_each_drv+0x258/0x2f0
[ 86.917390][ T37] __device_attach+0x2c4/0x450
[ 86.919920][ T37] device_initial_probe+0xa1/0xd0
[ 86.922569][ T37] bus_probe_device+0x12a/0x220
[ 86.924945][ T37] device_add+0x7d7/0xb80
[ 86.926826][ T37] platform_device_add+0x4bd/0x860
[ 86.929044][ T37] platform_device_register_full+0x62d/0x710
[ 86.931658][ T37] vhci_hcd_init+0x227/0x360
[ 86.933800][ T37] do_one_initcall+0x250/0x870
[ 86.935845][ T37] do_initcall_level+0x10a/0x1a0
[ 86.937897][ T37] do_initcalls+0x59/0xa0
[ 86.939774][ T37] kernel_init_freeable+0x29d/0x3e0
[ 86.942043][ T37] kernel_init+0x1d/0x1d0
[ 86.943941][ T37] ret_from_fork+0x514/0xb70
[ 86.945885][ T37] ret_from_fork_asm+0x1a/0x30
[ 86.947783][ T37]
[ 86.948828][ T37] Freed by task 5314:
[ 86.950496][ T37] kasan_save_track+0x3e/0x80
[ 86.952785][ T37] kasan_save_free_info+0x40/0x50
[ 86.955319][ T37] __kasan_slab_free+0x5c/0x80
[ 86.957712][ T37] kfree+0x1c5/0x640
[ 86.959751][ T37] vhci_hcd_remove+0x9e/0x110
[ 86.961897][ T37] device_release_driver_internal+0x48b/0x880
[ 86.964453][ T37] unbind_store+0x1a1/0x1d0
[ 86.966453][ T37] kernfs_fop_write_iter+0x3a4/0x540
[ 86.968676][ T37] vfs_write+0x612/0xba0
[ 86.970437][ T37] ksys_write+0x150/0x270
[ 86.972282][ T37] do_syscall_64+0x174/0x580
[ 86.974236][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.976907][ T37]
[ 86.978178][ T37] Last potentially related work creation:
[ 86.981152][ T37] kasan_save_stack+0x3e/0x60
[ 86.983701][ T37] kasan_record_aux_stack+0xbd/0xd0
[ 86.986159][ T37] insert_work+0x3d/0x330
[ 86.987910][ T37] __queue_work+0xcd8/0x10a0
[ 86.989905][ T37] queue_work_on+0x106/0x1d0
[ 86.991875][ T37] unlink1+0x344/0x3e0
[ 86.993552][ T37] usb_hcd_unlink_urb+0xe6/0x1e0
[ 86.995682][ T37] usb_kill_urb+0x10b/0x2f0
[ 86.997605][ T37] hub_quiesce+0x211/0x330
[ 86.999501][ T37] hub_suspend+0x904/0xad0
[ 87.001467][ T37] usb_suspend_both+0x285/0x1040
[ 87.003798][ T37] usb_runtime_suspend+0x58/0x110
[ 87.006307][ T37] __rpm_callback+0x2c7/0x950
[ 87.008510][ T37] rpm_suspend+0x8a0/0x17b0
[ 87.010534][ T37] __pm_runtime_suspend+0x12f/0x1a0
[ 87.012701][ T37] usb_new_device+0xaee/0x1690
[ 87.014783][ T37] register_root_hub+0x250/0x5c0
[ 87.016900][ T37] usb_add_hcd+0xac7/0xf80
[ 87.018723][ T37] vhci_hcd_probe+0x1fa/0x3e0
[ 87.020667][ T37] platform_probe+0xf9/0x190
[ 87.022874][ T37] really_probe+0x254/0xae0
[ 87.025216][ T37] __driver_probe_device+0x1e8/0x360
[ 87.027901][ T37] driver_probe_device+0x4f/0x240
[ 87.030207][ T37] __device_attach_driver+0x270/0x410
[ 87.032414][ T37] bus_for_each_drv+0x258/0x2f0
[ 87.034174][ T37] __device_attach+0x2c4/0x450
[ 87.036157][ T37] device_initial_probe+0xa1/0xd0
[ 87.038333][ T37] bus_probe_device+0x12a/0x220
[ 87.040326][ T37] device_add+0x7d7/0xb80
[ 87.042186][ T37] platform_device_add+0x4bd/0x860
[ 87.044541][ T37] platform_device_register_full+0x62d/0x710
[ 87.047411][ T37] vhci_hcd_init+0x227/0x360
[ 87.049874][ T37] do_one_initcall+0x250/0x870
[ 87.052137][ T37] do_initcall_level+0x10a/0x1a0
[ 87.054388][ T37] do_initcalls+0x59/0xa0
[ 87.056356][ T37] kernel_init_freeable+0x29d/0x3e0
[ 87.058663][ T37] kernel_init+0x1d/0x1d0
[ 87.060602][ T37] ret_from_fork+0x514/0xb70
[ 87.062712][ T37] ret_from_fork_asm+0x1a/0x30
[ 87.064824][ T37]
[ 87.066007][ T37] Second to last potentially related work creation:
[ 87.069397][ T37] kasan_save_stack+0x3e/0x60
[ 87.072237][ T37] kasan_record_aux_stack+0xbd/0xd0
[ 87.074826][ T37] insert_work+0x3d/0x330
[ 87.076555][ T37] __queue_work+0xcd8/0x10a0
[ 87.078409][ T37] queue_work_on+0x106/0x1d0
[ 87.080423][ T37] usb_hcd_submit_urb+0xa3b/0x1b60
[ 87.082703][ T37] usb_start_wait_urb+0x13f/0x5b0
[ 87.084954][ T37] usb_control_msg+0x234/0x3e0
[ 87.087145][ T37] hub_suspend+0x891/0xad0
[ 87.089183][ T37] usb_suspend_both+0x285/0x1040
[ 87.091457][ T37] usb_runtime_suspend+0x58/0x110
[ 87.094052][ T37] __rpm_callback+0x2c7/0x950
[ 87.096880][ T37] rpm_suspend+0x8a0/0x17b0
[ 87.099174][ T37] __pm_runtime_suspend+0x12f/0x1a0
[ 87.101588][ T37] usb_new_device+0xaee/0x1690
[ 87.103765][ T37] register_root_hub+0x250/0x5c0
[ 87.106017][ T37] usb_add_hcd+0xac7/0xf80
[ 87.107999][ T37] vhci_hcd_probe+0x1fa/0x3e0
[ 87.110094][ T37] platform_probe+0xf9/0x190
[ 87.112284][ T37] really_probe+0x254/0xae0
[ 87.114851][ T37] __driver_probe_device+0x1e8/0x360
[ 87.117935][ T37] driver_probe_device+0x4f/0x240
[ 87.120360][ T37] __device_attach_driver+0x270/0x410
[ 87.122779][ T37] bus_for_each_drv+0x258/0x2f0
[ 87.125011][ T37] __device_attach+0x2c4/0x450
[ 87.127218][ T37] device_initial_probe+0xa1/0xd0
[ 87.129515][ T37] bus_probe_device+0x12a/0x220
[ 87.131705][ T37] device_add+0x7d7/0xb80
[ 87.133747][ T37] platform_device_add+0x4bd/0x860
[ 87.136360][ T37] platform_device_register_full+0x62d/0x710
[ 87.139253][ T37] vhci_hcd_init+0x227/0x360
[ 87.141712][ T37] do_one_initcall+0x250/0x870
[ 87.144365][ T37] do_initcall_level+0x10a/0x1a0
[ 87.146731][ T37] do_initcalls+0x59/0xa0
[ 87.148501][ T37] kernel_init_freeable+0x29d/0x3e0
[ 87.150509][ T37] kernel_init+0x1d/0x1d0
[ 87.152222][ T37] ret_from_fork+0x514/0xb70
[ 87.154026][ T37] ret_from_fork_asm+0x1a/0x30
[ 87.156094][ T37]
[ 87.157116][ T37] The buggy address belongs to the object at ffff888034d5c000
[ 87.157116][ T37] which belongs to the cache kmalloc-8k of size 8192
[ 87.163283][ T37] The buggy address is located 1736 bytes inside of
[ 87.163283][ T37] freed 8192-byte region [ffff888034d5c000, ffff888034d5e000)
[ 87.168786][ T37]
[ 87.169778][ T37] The buggy address belongs to the physical page:
[ 87.172201][ T37] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34d58
[ 87.175747][ T37] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 87.178938][ T37] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 87.181908][ T37] page_type: f5(slab)
[ 87.183477][ T37] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 87.186920][ T37] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 87.190348][ T37] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 87.193387][ T37] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 87.196678][ T37] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 87.199837][ T37] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 87.202952][ T37] page dumped because: kasan: bad access detected
[ 87.205185][ T37] page_owner tracks the page as allocated
[ 87.207211][ T37] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16289957116, free_ts 16218339810
[ 87.214811][ T37] post_alloc_hook+0x1f9/0x250
[ 87.217385][ T37] get_page_from_freelist+0x21fa/0x2270
[ 87.219654][ T37] __alloc_frozen_pages_noprof+0x18d/0x380
[ 87.221955][ T37] allocate_slab+0x79/0x5e0
[ 87.223552][ T37] refill_objects+0x2d5/0x350
[ 87.225235][ T37] __pcs_replace_empty_main+0x2bf/0x6b0
[ 87.227192][ T37] __kmalloc_noprof+0x485/0x720
[ 87.228993][ T37] __usb_create_hcd+0x67/0x900
[ 87.230724][ T37] vhci_hcd_probe+0x1e6/0x3e0
[ 87.232344][ T37] platform_probe+0xf9/0x190
[ 87.233952][ T37] really_probe+0x254/0xae0
[ 87.235620][ T37] __driver_probe_device+0x1e8/0x360
[ 87.237481][ T37] driver_probe_device+0x4f/0x240
[ 87.239244][ T37] __device_attach_driver+0x270/0x410
[ 87.241309][ T37] bus_for_each_drv+0x258/0x2f0
[ 87.243420][ T37] __device_attach+0x2c4/0x450
[ 87.246077][ T37] page last free pid 1 tgid 1 stack trace:
[ 87.248540][ T37] __free_frozen_pages+0xc1e/0xd10
[ 87.250150][ T37] __slab_free+0x274/0x2c0
[ 87.251584][ T37] qlist_free_all+0x99/0x100
[ 87.253060][ T37] kasan_quarantine_reduce+0x148/0x160
[ 87.254756][ T37] __kasan_slab_alloc+0x22/0x80
[ 87.256424][ T37] __kmalloc_cache_noprof+0x2ab/0x660
[ 87.258149][ T37] mon_bus_init+0x50/0x2a0
[ 87.259588][ T37] mon_notify+0x10c/0x3f0
[ 87.261069][ T37] notifier_call_chain+0x1a5/0x3d0
[ 87.263034][ T37] blocking_notifier_call_chain+0x6a/0x90
[ 87.265473][ T37] usb_register_bus+0xcf/0x150
[ 87.267822][ T37] usb_add_hcd+0x3e6/0xf80
[ 87.269930][ T37] vhci_hcd_probe+0x141/0x3e0
[ 87.271898][ T37] platform_probe+0xf9/0x190
[ 87.273569][ T37] really_probe+0x254/0xae0
[ 87.275395][ T37] __driver_probe_device+0x1e8/0x360
[ 87.277417][ T37]
[ 87.278378][ T37] Memory state around the buggy address:
[ 87.280828][ T37] ffff888034d5c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.284357][ T37] ffff888034d5c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.288194][ T37] >ffff888034d5c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.291866][ T37] ^
[ 87.294632][ T37] ffff888034d5c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.298139][ T37] ffff888034d5c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.301715][ T37] ==================================================================
[ 87.305581][ T37] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.308631][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 87.312591][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.317007][ T37] Workqueue: usbip_event event_handler
[ 87.319621][ T37] Call Trace:
[ 87.321496][ T37]
[ 87.323128][ T37] vpanic+0x56c/0xa60
[ 87.325214][ T37] ? __pfx_vpanic+0x10/0x10
[ 87.327265][ T37] panic+0xc5/0xd0
[ 87.328971][ T37] ? __pfx_panic+0x10/0x10
[ 87.330993][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.333481][ T37] ? rcu_is_watching+0x15/0xb0
[ 87.335601][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.338012][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.340555][ T37] check_panic_on_warn+0x89/0xb0
[ 87.343003][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.345397][ T37] end_report+0x73/0x170
[ 87.347111][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.349257][ T37] kasan_report+0x128/0x150
[ 87.351113][ T37] ? _raw_spin_lock_irqsave+0x40/0x60
[ 87.353272][ T37] ? event_handler+0x2b0/0x4b0
[ 87.355270][ T37] __kasan_check_byte+0x2a/0x40
[ 87.357537][ T37] lock_acquire+0x84/0x350
[ 87.359753][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.362552][ T37] ? rcu_is_watching+0x15/0xb0
[ 87.364825][ T37] _raw_spin_lock_irqsave+0x40/0x60
[ 87.367158][ T37] ? event_handler+0x2b0/0x4b0
[ 87.369267][ T37] event_handler+0x2b0/0x4b0
[ 87.371298][ T37] ? process_scheduled_works+0xa20/0x14e0
[ 87.373823][ T37] process_scheduled_works+0xa8e/0x14e0
[ 87.376391][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.379296][ T37] ? assign_work+0x3cf/0x5d0
[ 87.381596][ T37] worker_thread+0xa47/0xfb0
[ 87.383921][ T37] ? __kthread_parkme+0x71/0x1f0
[ 87.386196][ T37] kthread+0x388/0x470
[ 87.387981][ T37] ? __pfx_worker_thread+0x10/0x10
[ 87.390302][ T37] ? __pfx_kthread+0x10/0x10
[ 87.392365][ T37] ret_from_fork+0x514/0xb70
[ 87.394427][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 87.396709][ T37] ? __switch_to+0xc89/0x1420
[ 87.398887][ T37] ? __pfx_kthread+0x10/0x10
[ 87.400970][ T37] ret_from_fork_asm+0x1a/0x30
[ 87.403118][ T37]
[ 87.405217][ T37] Kernel Offset: disabled
[ 87.407447][ T37] Rebooting in 86400 seconds..