[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.99' (ECDSA) to the list of known hosts. syzkaller login: [ 55.684588][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.700756][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 55.743146][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.762971][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.771994][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.780416][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.056034][ T3157] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.416522][ T3157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 56.427713][ T3157] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 56.437689][ T3157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.451014][ T3157] usb 1-1: config 0 descriptor?? [ 56.716042][ T3157] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 56.722972][ T3157] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, [ 56.731966][ T3157] radio-si470x 1-1:0.0: but the device has firmware version 0. [ 56.936428][ T3157] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 56.944052][ T3157] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, [ 56.959331][ T3157] radio-si470x 1-1:0.0: but the device has hardware version 0. [ 56.970270][ T3157] radio-si470x 1-1:0.0: If you have some trouble using this driver, [ 56.981447][ T3157] radio-si470x 1-1:0.0: please report to V4L ML at linux-media@vger.kernel.org [ 57.145908][ T3157] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 57.165837][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 57.172723][ T3157] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 57.182320][ T3157] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 57.189572][ C0] ================================================================== [ 57.189638][ C0] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x96/0xbf [ 57.189688][ C0] Read of size 8 at addr ffff88802ed8ab40 by task kworker/0:3/3157 [ 57.189707][ C0] [ 57.189713][ C0] CPU: 0 PID: 3157 Comm: kworker/0:3 Not tainted 5.13.0-rc3-syzkaller #0 [ 57.189734][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.189749][ C0] Workqueue: usb_hub_wq hub_event [ 57.189774][ C0] Call Trace: [ 57.189780][ C0] [ 57.189788][ C0] dump_stack+0x141/0x1d7 [ 57.189812][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.189835][ C0] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 57.189863][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.189885][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.189907][ C0] kasan_report.cold+0x7c/0xd8 [ 57.189931][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.189957][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 57.189980][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 57.190007][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 57.190036][ C0] ? si470x_fops_read+0x790/0x790 [ 57.190070][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 57.190100][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 57.190130][ C0] dummy_timer+0x11f4/0x32a0 [ 57.190172][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.190221][ C0] ? lock_chain_count+0x20/0x20 [ 57.190248][ C0] ? dummy_dequeue+0x500/0x500 [ 57.190282][ C0] ? dummy_dequeue+0x500/0x500 [ 57.190306][ C0] call_timer_fn+0x1a5/0x6b0 [ 57.190331][ C0] ? add_timer_on+0x4a0/0x4a0 [ 57.190363][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.190386][ C0] ? dummy_dequeue+0x500/0x500 [ 57.190414][ C0] __run_timers.part.0+0x67c/0xa50 [ 57.190448][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 57.190471][ C0] ? lapic_next_event+0x4d/0x80 [ 57.190506][ C0] run_timer_softirq+0xb3/0x1d0 [ 57.190531][ C0] __do_softirq+0x29b/0x9f6 [ 57.190562][ C0] __irq_exit_rcu+0x136/0x200 [ 57.190586][ C0] irq_exit_rcu+0x5/0x20 [ 57.190607][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 57.190634][ C0] [ 57.190643][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 57.190665][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 57.190693][ C0] Code: f0 4d 89 03 e9 f2 fc ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 <65> 8b 05 39 13 8d 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 57.190714][ C0] RSP: 0018:ffffc90002aaef98 EFLAGS: 00000293 [ 57.190733][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.190747][ C0] RDX: ffff88801f7b8000 RSI: ffffffff815cb113 RDI: 0000000000000003 [ 57.190762][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff902268a7 [ 57.190776][ C0] R10: ffffffff815cb109 R11: 0000000000000000 R12: ffffffff84bbfa00 [ 57.190791][ C0] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc90002aaeff8 [ 57.190808][ C0] ? loopback_xmit+0x630/0x630 [ 57.190834][ C0] ? console_unlock+0x7b9/0xc40 [ 57.190863][ C0] ? console_unlock+0x7c3/0xc40 [ 57.190893][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.190921][ C0] console_unlock+0x7c9/0xc40 [ 57.190952][ C0] ? devkmsg_read+0x7d0/0x7d0 [ 57.190980][ C0] ? lock_release+0x720/0x720 [ 57.191016][ C0] ? vprintk+0x8d/0x260 [ 57.191036][ C0] ? vprintk+0x8d/0x260 [ 57.191060][ C0] vprintk_emit+0x1ca/0x560 [ 57.191091][ C0] vprintk+0x8d/0x260 [ 57.191112][ C0] printk+0xba/0xed [ 57.191131][ C0] ? record_print_text.cold+0x16/0x16 [ 57.191158][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.191199][ C0] ? really_probe+0x741/0xf60 [ 57.191222][ C0] really_probe.cold+0x147/0x248 [ 57.191254][ C0] driver_probe_device+0x298/0x410 [ 57.191281][ C0] __device_attach_driver+0x203/0x2c0 [ 57.191306][ C0] ? driver_allows_async_probing+0x150/0x150 [ 57.191329][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.191351][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 57.191370][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.191393][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 57.191419][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 57.191445][ C0] __device_attach+0x228/0x4b0 [ 57.191468][ C0] ? __driver_attach_async_helper+0x330/0x330 [ 57.191495][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 57.191523][ C0] bus_probe_device+0x1e4/0x290 [ 57.191548][ C0] device_add+0xbe0/0x2100 [ 57.191578][ C0] ? wait_for_completion_io+0x270/0x270 [ 57.191603][ C0] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 57.191630][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.191652][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.191685][ C0] usb_set_configuration+0x113f/0x1910 [ 57.191732][ C0] usb_generic_driver_probe+0xba/0x100 [ 57.191762][ C0] usb_probe_device+0xd9/0x2c0 [ 57.191784][ C0] ? usb_driver_release_interface+0x180/0x180 [ 57.191807][ C0] really_probe+0x291/0xf60 [ 57.191828][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 57.191860][ C0] driver_probe_device+0x298/0x410 [ 57.191884][ C0] __device_attach_driver+0x203/0x2c0 [ 57.191909][ C0] ? driver_allows_async_probing+0x150/0x150 [ 57.191932][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.191953][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 57.191971][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.191994][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 57.192019][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 57.192045][ C0] __device_attach+0x228/0x4b0 [ 57.192068][ C0] ? __driver_attach_async_helper+0x330/0x330 [ 57.192095][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 57.192122][ C0] bus_probe_device+0x1e4/0x290 [ 57.192148][ C0] device_add+0xbe0/0x2100 [ 57.192187][ C0] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 57.192215][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.192249][ C0] usb_new_device.cold+0x721/0x1058 [ 57.192281][ C0] ? hub_disconnect+0x510/0x510 [ 57.192303][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 57.192326][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.192351][ C0] hub_event+0x2357/0x4330 [ 57.192398][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 57.192428][ C0] ? lock_release+0x720/0x720 [ 57.192454][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 57.192480][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 57.192513][ C0] process_one_work+0x98d/0x1600 [ 57.192548][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 57.192581][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 57.192601][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 57.192635][ C0] worker_thread+0x64c/0x1120 [ 57.192667][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 57.192689][ C0] ? process_one_work+0x1600/0x1600 [ 57.192717][ C0] kthread+0x3b1/0x4a0 [ 57.192737][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 57.192762][ C0] ret_from_fork+0x1f/0x30 [ 57.192800][ C0] [ 57.192804][ C0] Allocated by task 3157: [ 57.192815][ C0] kasan_save_stack+0x1b/0x40 [ 57.192840][ C0] __kasan_kmalloc+0x9b/0xd0 [ 57.192862][ C0] si470x_usb_driver_probe+0x51/0xf30 [ 57.192883][ C0] usb_probe_interface+0x315/0x7f0 [ 57.192902][ C0] really_probe+0x291/0xf60 [ 57.192920][ C0] driver_probe_device+0x298/0x410 [ 57.192940][ C0] __device_attach_driver+0x203/0x2c0 [ 57.192961][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.192978][ C0] __device_attach+0x228/0x4b0 [ 57.192998][ C0] bus_probe_device+0x1e4/0x290 [ 57.193016][ C0] device_add+0xbe0/0x2100 [ 57.193038][ C0] usb_set_configuration+0x113f/0x1910 [ 57.193064][ C0] usb_generic_driver_probe+0xba/0x100 [ 57.193088][ C0] usb_probe_device+0xd9/0x2c0 [ 57.193106][ C0] really_probe+0x291/0xf60 [ 57.193125][ C0] driver_probe_device+0x298/0x410 [ 57.193144][ C0] __device_attach_driver+0x203/0x2c0 [ 57.193172][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.193190][ C0] __device_attach+0x228/0x4b0 [ 57.193208][ C0] bus_probe_device+0x1e4/0x290 [ 57.193227][ C0] device_add+0xbe0/0x2100 [ 57.193250][ C0] usb_new_device.cold+0x721/0x1058 [ 57.193270][ C0] hub_event+0x2357/0x4330 [ 57.193290][ C0] process_one_work+0x98d/0x1600 [ 57.193311][ C0] worker_thread+0x64c/0x1120 [ 57.193332][ C0] kthread+0x3b1/0x4a0 [ 57.193350][ C0] ret_from_fork+0x1f/0x30 [ 57.193371][ C0] [ 57.193375][ C0] Freed by task 3157: [ 57.193384][ C0] kasan_save_stack+0x1b/0x40 [ 57.193408][ C0] kasan_set_track+0x1c/0x30 [ 57.193432][ C0] kasan_set_free_info+0x20/0x30 [ 57.193450][ C0] __kasan_slab_free+0xfb/0x130 [ 57.193468][ C0] slab_free_freelist_hook+0xdf/0x240 [ 57.193491][ C0] kfree+0xe5/0x7f0 [ 57.193511][ C0] si470x_usb_driver_probe+0xb0f/0xf30 [ 57.193532][ C0] usb_probe_interface+0x315/0x7f0 [ 57.193551][ C0] really_probe+0x291/0xf60 [ 57.193570][ C0] driver_probe_device+0x298/0x410 [ 57.193589][ C0] __device_attach_driver+0x203/0x2c0 [ 57.193610][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.193627][ C0] __device_attach+0x228/0x4b0 [ 57.193646][ C0] bus_probe_device+0x1e4/0x290 [ 57.193664][ C0] device_add+0xbe0/0x2100 [ 57.193685][ C0] usb_set_configuration+0x113f/0x1910 [ 57.193710][ C0] usb_generic_driver_probe+0xba/0x100 [ 57.193734][ C0] usb_probe_device+0xd9/0x2c0 [ 57.193752][ C0] really_probe+0x291/0xf60 [ 57.193770][ C0] driver_probe_device+0x298/0x410 [ 57.193789][ C0] __device_attach_driver+0x203/0x2c0 [ 57.193810][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.193827][ C0] __device_attach+0x228/0x4b0 [ 57.193846][ C0] bus_probe_device+0x1e4/0x290 [ 57.193864][ C0] device_add+0xbe0/0x2100 [ 57.193887][ C0] usb_new_device.cold+0x721/0x1058 [ 57.193907][ C0] hub_event+0x2357/0x4330 [ 57.193927][ C0] process_one_work+0x98d/0x1600 [ 57.193949][ C0] worker_thread+0x64c/0x1120 [ 57.193971][ C0] kthread+0x3b1/0x4a0 [ 57.193989][ C0] ret_from_fork+0x1f/0x30 [ 57.194009][ C0] [ 57.194014][ C0] The buggy address belongs to the object at ffff88802ed8a000 [ 57.194014][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 57.194031][ C0] The buggy address is located 2880 bytes inside of [ 57.194031][ C0] 4096-byte region [ffff88802ed8a000, ffff88802ed8b000) [ 57.194051][ C0] The buggy address belongs to the page: [ 57.194059][ C0] page:ffffea0000bb6200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ed88 [ 57.194080][ C0] head:ffffea0000bb6200 order:3 compound_mapcount:0 compound_pincount:0 [ 57.194097][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 57.194129][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011042140 [ 57.194148][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 57.194168][ C0] page dumped because: kasan: bad access detected [ 57.194177][ C0] page_owner tracks the page as allocated [ 57.194184][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7543, ts 35705847464, free_ts 35646152828 [ 57.194216][ C0] get_page_from_freelist+0x1033/0x2b60 [ 57.194240][ C0] __alloc_pages+0x1b2/0x500 [ 57.194260][ C0] alloc_pages+0x18c/0x2a0 [ 57.194278][ C0] allocate_slab+0x2c5/0x4c0 [ 57.194299][ C0] ___slab_alloc+0x4a1/0x810 [ 57.194322][ C0] __slab_alloc.constprop.0+0xa7/0xf0 [ 57.194346][ C0] __kmalloc+0x315/0x330 [ 57.194367][ C0] tomoyo_realpath_from_path+0xc3/0x620 [ 57.194389][ C0] tomoyo_path_perm+0x21b/0x400 [ 57.194407][ C0] security_inode_getattr+0xcf/0x140 [ 57.194427][ C0] vfs_fstat+0x43/0xb0 [ 57.194444][ C0] __do_sys_newfstat+0x81/0x100 [ 57.194462][ C0] do_syscall_64+0x3a/0xb0 [ 57.194482][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.194503][ C0] page last free stack trace: [ 57.194509][ C0] __free_pages_ok+0x476/0xce0 [ 57.194529][ C0] unfreeze_partials+0x17c/0x1d0 [ 57.194552][ C0] put_cpu_partial+0x13d/0x230 [ 57.194574][ C0] qlist_free_all+0x5a/0xc0 [ 57.194594][ C0] kasan_quarantine_reduce+0x180/0x200 [ 57.194615][ C0] __kasan_slab_alloc+0x8e/0xa0 [ 57.194634][ C0] __kmalloc+0x1f7/0x330 [ 57.194655][ C0] tomoyo_realpath_from_path+0xc3/0x620 [ 57.194674][ C0] tomoyo_path_perm+0x21b/0x400 [ 57.194691][ C0] security_inode_getattr+0xcf/0x140 [ 57.194711][ C0] vfs_statx+0x164/0x390 [ 57.194734][ C0] __do_sys_newstat+0x91/0x110 [ 57.194758][ C0] do_syscall_64+0x3a/0xb0 [ 57.194778][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.194799][ C0] [ 57.194803][ C0] Memory state around the buggy address: [ 57.194813][ C0] ffff88802ed8aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.194828][ C0] ffff88802ed8aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.194842][ C0] >ffff88802ed8ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.194854][ C0] ^ [ 57.194865][ C0] ffff88802ed8ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.194879][ C0] ffff88802ed8ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.194890][ C0] ================================================================== [ 57.194898][ C0] Disabling lock debugging due to kernel taint [ 57.194905][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 57.194914][ C0] CPU: 0 PID: 3157 Comm: kworker/0:3 Tainted: G B 5.13.0-rc3-syzkaller #0 [ 57.194934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.194947][ C0] Workqueue: usb_hub_wq hub_event [ 57.194966][ C0] Call Trace: [ 57.194971][ C0] [ 57.194976][ C0] dump_stack+0x141/0x1d7 [ 57.194995][ C0] panic+0x306/0x73d [ 57.195015][ C0] ? __warn_printk+0xf3/0xf3 [ 57.195038][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.195058][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.195079][ C0] end_report.cold+0x5a/0x5a [ 57.195097][ C0] kasan_report.cold+0x6a/0xd8 [ 57.195117][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 57.195139][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 57.195159][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 57.195189][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 57.195213][ C0] ? si470x_fops_read+0x790/0x790 [ 57.195235][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 57.195259][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 57.195283][ C0] dummy_timer+0x11f4/0x32a0 [ 57.195308][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.195339][ C0] ? lock_chain_count+0x20/0x20 [ 57.195363][ C0] ? dummy_dequeue+0x500/0x500 [ 57.195387][ C0] ? dummy_dequeue+0x500/0x500 [ 57.195410][ C0] call_timer_fn+0x1a5/0x6b0 [ 57.195430][ C0] ? add_timer_on+0x4a0/0x4a0 [ 57.195452][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.195471][ C0] ? dummy_dequeue+0x500/0x500 [ 57.195495][ C0] __run_timers.part.0+0x67c/0xa50 [ 57.195519][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 57.195540][ C0] ? lapic_next_event+0x4d/0x80 [ 57.195564][ C0] run_timer_softirq+0xb3/0x1d0 [ 57.195587][ C0] __do_softirq+0x29b/0x9f6 [ 57.195609][ C0] __irq_exit_rcu+0x136/0x200 [ 57.195630][ C0] irq_exit_rcu+0x5/0x20 [ 57.195649][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 57.195671][ C0] [ 57.195677][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 57.195699][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 57.195725][ C0] Code: f0 4d 89 03 e9 f2 fc ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 <65> 8b 05 39 13 8d 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 57.195744][ C0] RSP: 0018:ffffc90002aaef98 EFLAGS: 00000293 [ 57.195760][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.195776][ C0] RDX: ffff88801f7b8000 RSI: ffffffff815cb113 RDI: 0000000000000003 [ 57.195789][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff902268a7 [ 57.195802][ C0] R10: ffffffff815cb109 R11: 0000000000000000 R12: ffffffff84bbfa00 [ 57.195815][ C0] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc90002aaeff8 [ 57.195828][ C0] ? loopback_xmit+0x630/0x630 [ 57.195849][ C0] ? console_unlock+0x7b9/0xc40 [ 57.195873][ C0] ? console_unlock+0x7c3/0xc40 [ 57.195897][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 57.195923][ C0] console_unlock+0x7c9/0xc40 [ 57.195948][ C0] ? devkmsg_read+0x7d0/0x7d0 [ 57.195971][ C0] ? lock_release+0x720/0x720 [ 57.195995][ C0] ? vprintk+0x8d/0x260 [ 57.196011][ C0] ? vprintk+0x8d/0x260 [ 57.196027][ C0] vprintk_emit+0x1ca/0x560 [ 57.196050][ C0] vprintk+0x8d/0x260 [ 57.196066][ C0] printk+0xba/0xed [ 57.196082][ C0] ? record_print_text.cold+0x16/0x16 [ 57.196102][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.196128][ C0] ? really_probe+0x741/0xf60 [ 57.196146][ C0] really_probe.cold+0x147/0x248 [ 57.196176][ C0] driver_probe_device+0x298/0x410 [ 57.196196][ C0] __device_attach_driver+0x203/0x2c0 [ 57.196216][ C0] ? driver_allows_async_probing+0x150/0x150 [ 57.196235][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.196253][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 57.196269][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.196288][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 57.196310][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 57.196330][ C0] __device_attach+0x228/0x4b0 [ 57.196348][ C0] ? __driver_attach_async_helper+0x330/0x330 [ 57.196370][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 57.196389][ C0] bus_probe_device+0x1e4/0x290 [ 57.196409][ C0] device_add+0xbe0/0x2100 [ 57.196431][ C0] ? wait_for_completion_io+0x270/0x270 [ 57.196453][ C0] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 57.196477][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.196496][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.196522][ C0] usb_set_configuration+0x113f/0x1910 [ 57.196550][ C0] usb_generic_driver_probe+0xba/0x100 [ 57.196575][ C0] usb_probe_device+0xd9/0x2c0 [ 57.196592][ C0] ? usb_driver_release_interface+0x180/0x180 [ 57.196612][ C0] really_probe+0x291/0xf60 [ 57.196629][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 57.196655][ C0] driver_probe_device+0x298/0x410 [ 57.196673][ C0] __device_attach_driver+0x203/0x2c0 [ 57.196692][ C0] ? driver_allows_async_probing+0x150/0x150 [ 57.196713][ C0] bus_for_each_drv+0x15f/0x1e0 [ 57.196730][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 57.196747][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.196766][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 57.196788][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 57.196808][ C0] __device_attach+0x228/0x4b0 [ 57.196827][ C0] ? __driver_attach_async_helper+0x330/0x330 [ 57.196847][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 57.196866][ C0] bus_probe_device+0x1e4/0x290 [ 57.196885][ C0] device_add+0xbe0/0x2100 [ 57.196909][ C0] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 57.196934][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 57.196960][ C0] usb_new_device.cold+0x721/0x1058 [ 57.196982][ C0] ? hub_disconnect+0x510/0x510 [ 57.197001][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 57.197020][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.197037][ C0] hub_event+0x2357/0x4330 [ 57.197062][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 57.197084][ C0] ? lock_release+0x720/0x720 [ 57.197105][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 57.197127][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 57.197148][ C0] process_one_work+0x98d/0x1600 [ 57.197178][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 57.197201][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 57.197219][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 57.197242][ C0] worker_thread+0x64c/0x1120 [ 57.197264][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 57.197282][ C0] ? process_one_work+0x1600/0x1600 [ 57.197304][ C0] kthread+0x3b1/0x4a0 [ 57.197321][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 57.197341][ C0] ret_from_fork+0x1f/0x30 [ 57.203535][ C0] Kernel Offset: disabled [ 59.121514][ C0] Rebooting in 86400 seconds..