[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. syzkaller login: [ 53.657461][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.674591][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 53.714432][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.716059][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.735482][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.746961][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.030223][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.410384][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 54.421541][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1280, setting to 1024 [ 54.434055][ T7] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 54.443996][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.455168][ T7] usb 1-1: config 0 descriptor?? [ 54.491058][ T6534] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 54.720191][ T7] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 54.727326][ T7] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, [ 54.736808][ T7] radio-si470x 1-1:0.0: but the device has firmware version 0. [ 54.950107][ T7] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 54.958592][ T7] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, [ 54.968211][ T7] radio-si470x 1-1:0.0: but the device has hardware version 0. [ 54.975907][ T7] radio-si470x 1-1:0.0: If you have some trouble using this driver, [ 54.984119][ T7] radio-si470x 1-1:0.0: please report to V4L ML at linux-media@vger.kernel.org [ 55.160050][ T7] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 55.180063][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 55.187343][ T7] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 55.196129][ T7] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 55.203190][ C0] ================================================================== [ 55.203260][ C0] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x96/0xbf [ 55.203313][ C0] Read of size 8 at addr ffff888020c9cb88 by task kworker/0:1/7 [ 55.203329][ C0] [ 55.203335][ C0] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.15.0-rc5-syzkaller #0 [ 55.203355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.203369][ C0] Workqueue: usb_hub_wq hub_event [ 55.203395][ C0] Call Trace: [ 55.203402][ C0] [ 55.203409][ C0] dump_stack_lvl+0xcd/0x134 [ 55.203433][ C0] print_address_description.constprop.0.cold+0x6c/0x309 [ 55.203459][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.203481][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.203501][ C0] kasan_report.cold+0x83/0xdf [ 55.203523][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.203549][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 55.203572][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 55.203598][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 55.203623][ C0] ? si470x_fops_read+0x790/0x790 [ 55.203654][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 55.203683][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 55.203710][ C0] dummy_timer+0x11f9/0x32b0 [ 55.203741][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.203783][ C0] ? lock_chain_count+0x20/0x20 [ 55.203804][ C0] ? dummy_dequeue+0x500/0x500 [ 55.203832][ C0] ? dummy_dequeue+0x500/0x500 [ 55.203852][ C0] call_timer_fn+0x1a5/0x6b0 [ 55.203872][ C0] ? add_timer_on+0x4a0/0x4a0 [ 55.203899][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 55.203923][ C0] ? dummy_dequeue+0x500/0x500 [ 55.203946][ C0] __run_timers.part.0+0x675/0xa20 [ 55.203973][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 55.204007][ C0] run_timer_softirq+0xb3/0x1d0 [ 55.204027][ C0] __do_softirq+0x29b/0x9c2 [ 55.204058][ C0] __irq_exit_rcu+0x123/0x180 [ 55.204081][ C0] irq_exit_rcu+0x5/0x20 [ 55.204102][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 55.204125][ C0] [ 55.204133][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.204157][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 55.204183][ C0] Code: 01 f0 4d 89 03 e9 63 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 <65> 8b 05 e9 17 8b 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 55.204202][ C0] RSP: 0018:ffffc90000cc6f60 EFLAGS: 00000293 [ 55.204227][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 55.204239][ C0] RDX: ffff888010e43900 RSI: ffffffff815e525c RDI: 0000000000000003 [ 55.204253][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8fcff9e7 [ 55.204266][ C0] R10: ffffffff815e5252 R11: 0000000000000000 R12: ffffffff84ca3750 [ 55.204279][ C0] R13: 0000000000000200 R14: ffffc90000cc6fc0 R15: dffffc0000000000 [ 55.204295][ C0] ? loopback_xmit+0x6d0/0x6d0 [ 55.204318][ C0] ? console_unlock+0x6b2/0xb70 [ 55.204342][ C0] ? console_unlock+0x6bc/0xb70 [ 55.204366][ C0] console_unlock+0x6c2/0xb70 [ 55.204392][ C0] ? devkmsg_read+0x730/0x730 [ 55.204415][ C0] ? lock_release+0x720/0x720 [ 55.204445][ C0] ? vprintk+0x80/0x90 [ 55.204467][ C0] ? vprintk+0x80/0x90 [ 55.204492][ C0] vprintk_emit+0x198/0x4f0 [ 55.204518][ C0] vprintk+0x80/0x90 [ 55.204540][ C0] _printk+0xba/0xed [ 55.204559][ C0] ? record_print_text.cold+0x16/0x16 [ 55.204577][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 55.204602][ C0] ? __pm_runtime_suspend+0xce/0x2d0 [ 55.204628][ C0] ? usb_probe_interface+0x3bf/0x7f0 [ 55.204652][ C0] ? really_probe+0x25c/0xcc0 [ 55.204676][ C0] really_probe.cold+0x6d/0x278 [ 55.204701][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 55.204726][ C0] __driver_probe_device+0x338/0x4d0 [ 55.204754][ C0] driver_probe_device+0x4c/0x1a0 [ 55.204779][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.204805][ C0] ? driver_allows_async_probing+0x150/0x150 [ 55.204829][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.204852][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.204873][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.204897][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 55.204919][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.204945][ C0] __device_attach+0x228/0x4a0 [ 55.204969][ C0] ? device_driver_attach+0x210/0x210 [ 55.204995][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 55.205023][ C0] bus_probe_device+0x1e4/0x290 [ 55.205050][ C0] device_add+0xc17/0x1ee0 [ 55.205073][ C0] ? mark_held_locks+0x9f/0xe0 [ 55.205096][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 55.205119][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.205142][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.205173][ C0] usb_set_configuration+0x113f/0x1910 [ 55.205219][ C0] usb_generic_driver_probe+0xba/0x100 [ 55.205242][ C0] usb_probe_device+0xd9/0x2c0 [ 55.205263][ C0] ? usb_driver_release_interface+0x180/0x180 [ 55.205287][ C0] really_probe+0x245/0xcc0 [ 55.205309][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 55.205336][ C0] __driver_probe_device+0x338/0x4d0 [ 55.205365][ C0] driver_probe_device+0x4c/0x1a0 [ 55.205390][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.205416][ C0] ? driver_allows_async_probing+0x150/0x150 [ 55.205440][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.205463][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.205484][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.205507][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 55.205526][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.205553][ C0] __device_attach+0x228/0x4a0 [ 55.205577][ C0] ? device_driver_attach+0x210/0x210 [ 55.205603][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 55.205630][ C0] bus_probe_device+0x1e4/0x290 [ 55.205656][ C0] device_add+0xc17/0x1ee0 [ 55.205684][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 55.205708][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.205738][ C0] usb_new_device.cold+0x63f/0x108e [ 55.205770][ C0] ? hub_disconnect+0x510/0x510 [ 55.205792][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 55.205816][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 55.205842][ C0] hub_event+0x2357/0x4330 [ 55.205887][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 55.205918][ C0] ? lock_release+0x720/0x720 [ 55.205938][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 55.205960][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 55.205993][ C0] process_one_work+0x9bf/0x16b0 [ 55.206022][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 55.206052][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 55.206072][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 55.206101][ C0] worker_thread+0x658/0x11f0 [ 55.206130][ C0] ? process_one_work+0x16b0/0x16b0 [ 55.206152][ C0] kthread+0x3e5/0x4d0 [ 55.206173][ C0] ? set_kthread_struct+0x130/0x130 [ 55.206199][ C0] ret_from_fork+0x1f/0x30 [ 55.206242][ C0] [ 55.206247][ C0] Allocated by task 7: [ 55.206255][ C0] kasan_save_stack+0x1b/0x40 [ 55.206273][ C0] __kasan_kmalloc+0xa4/0xd0 [ 55.206289][ C0] si470x_usb_driver_probe+0x51/0xf90 [ 55.206307][ C0] usb_probe_interface+0x315/0x7f0 [ 55.206326][ C0] really_probe+0x245/0xcc0 [ 55.206346][ C0] __driver_probe_device+0x338/0x4d0 [ 55.206367][ C0] driver_probe_device+0x4c/0x1a0 [ 55.206387][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.206409][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.206428][ C0] __device_attach+0x228/0x4a0 [ 55.206448][ C0] bus_probe_device+0x1e4/0x290 [ 55.206467][ C0] device_add+0xc17/0x1ee0 [ 55.206485][ C0] usb_set_configuration+0x113f/0x1910 [ 55.206504][ C0] usb_generic_driver_probe+0xba/0x100 [ 55.206522][ C0] usb_probe_device+0xd9/0x2c0 [ 55.206540][ C0] really_probe+0x245/0xcc0 [ 55.206559][ C0] __driver_probe_device+0x338/0x4d0 [ 55.206580][ C0] driver_probe_device+0x4c/0x1a0 [ 55.206601][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.206623][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.206642][ C0] __device_attach+0x228/0x4a0 [ 55.206662][ C0] bus_probe_device+0x1e4/0x290 [ 55.206681][ C0] device_add+0xc17/0x1ee0 [ 55.206698][ C0] usb_new_device.cold+0x63f/0x108e [ 55.206717][ C0] hub_event+0x2357/0x4330 [ 55.206737][ C0] process_one_work+0x9bf/0x16b0 [ 55.206753][ C0] worker_thread+0x658/0x11f0 [ 55.206768][ C0] kthread+0x3e5/0x4d0 [ 55.206787][ C0] ret_from_fork+0x1f/0x30 [ 55.206806][ C0] [ 55.206810][ C0] Freed by task 7: [ 55.206818][ C0] kasan_save_stack+0x1b/0x40 [ 55.206834][ C0] kasan_set_track+0x1c/0x30 [ 55.206850][ C0] kasan_set_free_info+0x20/0x30 [ 55.206868][ C0] __kasan_slab_free+0xff/0x130 [ 55.206885][ C0] slab_free_freelist_hook+0x81/0x190 [ 55.206906][ C0] kfree+0xe4/0x530 [ 55.206925][ C0] si470x_usb_driver_probe+0xb3d/0xf90 [ 55.206943][ C0] usb_probe_interface+0x315/0x7f0 [ 55.206962][ C0] really_probe+0x245/0xcc0 [ 55.206981][ C0] __driver_probe_device+0x338/0x4d0 [ 55.207002][ C0] driver_probe_device+0x4c/0x1a0 [ 55.207022][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.207043][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.207063][ C0] __device_attach+0x228/0x4a0 [ 55.207083][ C0] bus_probe_device+0x1e4/0x290 [ 55.207103][ C0] device_add+0xc17/0x1ee0 [ 55.207121][ C0] usb_set_configuration+0x113f/0x1910 [ 55.207139][ C0] usb_generic_driver_probe+0xba/0x100 [ 55.207157][ C0] usb_probe_device+0xd9/0x2c0 [ 55.207176][ C0] really_probe+0x245/0xcc0 [ 55.207195][ C0] __driver_probe_device+0x338/0x4d0 [ 55.207223][ C0] driver_probe_device+0x4c/0x1a0 [ 55.207244][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.207264][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.207283][ C0] __device_attach+0x228/0x4a0 [ 55.207303][ C0] bus_probe_device+0x1e4/0x290 [ 55.207323][ C0] device_add+0xc17/0x1ee0 [ 55.207341][ C0] usb_new_device.cold+0x63f/0x108e [ 55.207361][ C0] hub_event+0x2357/0x4330 [ 55.207381][ C0] process_one_work+0x9bf/0x16b0 [ 55.207397][ C0] worker_thread+0x658/0x11f0 [ 55.207413][ C0] kthread+0x3e5/0x4d0 [ 55.207431][ C0] ret_from_fork+0x1f/0x30 [ 55.207450][ C0] [ 55.207454][ C0] The buggy address belongs to the object at ffff888020c9c000 [ 55.207454][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 55.207469][ C0] The buggy address is located 2952 bytes inside of [ 55.207469][ C0] 4096-byte region [ffff888020c9c000, ffff888020c9d000) [ 55.207487][ C0] The buggy address belongs to the page: [ 55.207494][ C0] page:ffffea0000832600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20c98 [ 55.207514][ C0] head:ffffea0000832600 order:3 compound_mapcount:0 compound_pincount:0 [ 55.207530][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 55.207558][ C0] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010c42140 [ 55.207576][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 55.207586][ C0] page dumped because: kasan: bad access detected [ 55.207595][ C0] page_owner tracks the page as allocated [ 55.207601][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2973, ts 54511397582, free_ts 54061320413 [ 55.207630][ C0] get_page_from_freelist+0xa72/0x2f80 [ 55.207652][ C0] __alloc_pages+0x1b2/0x500 [ 55.207671][ C0] alloc_pages+0x1a7/0x300 [ 55.207687][ C0] new_slab+0x319/0x490 [ 55.207705][ C0] ___slab_alloc+0x921/0xfe0 [ 55.207725][ C0] __slab_alloc.constprop.0+0x4d/0xa0 [ 55.207747][ C0] __kmalloc+0x305/0x320 [ 55.207767][ C0] tomoyo_realpath_from_path+0xc3/0x620 [ 55.207787][ C0] tomoyo_path_number_perm+0x1d5/0x590 [ 55.207804][ C0] tomoyo_path_mknod+0x10d/0x190 [ 55.207822][ C0] security_path_mknod+0xf9/0x170 [ 55.207844][ C0] lookup_open.isra.0+0x475/0x13d0 [ 55.207865][ C0] path_openat+0x9a5/0x2740 [ 55.207885][ C0] do_filp_open+0x1aa/0x400 [ 55.207905][ C0] do_sys_openat2+0x16d/0x4d0 [ 55.207922][ C0] __x64_sys_open+0x119/0x1c0 [ 55.207939][ C0] page last free stack trace: [ 55.207945][ C0] free_pcp_prepare+0x2c5/0x780 [ 55.207962][ C0] free_unref_page+0x19/0x690 [ 55.207981][ C0] __unfreeze_partials+0x340/0x360 [ 55.208002][ C0] qlist_free_all+0x5a/0xc0 [ 55.208020][ C0] kasan_quarantine_reduce+0x180/0x200 [ 55.208040][ C0] __kasan_slab_alloc+0x95/0xb0 [ 55.208057][ C0] __kmalloc+0x1e7/0x320 [ 55.208076][ C0] tomoyo_supervisor+0xce8/0xf00 [ 55.208097][ C0] tomoyo_path_number_perm+0x419/0x590 [ 55.208114][ C0] security_file_ioctl+0x50/0xb0 [ 55.208134][ C0] __x64_sys_ioctl+0xb3/0x200 [ 55.208151][ C0] do_syscall_64+0x35/0xb0 [ 55.208167][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.208188][ C0] [ 55.208192][ C0] Memory state around the buggy address: [ 55.208202][ C0] ffff888020c9ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.208222][ C0] ffff888020c9cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.208235][ C0] >ffff888020c9cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.208245][ C0] ^ [ 55.208255][ C0] ffff888020c9cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.208268][ C0] ffff888020c9cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.208278][ C0] ================================================================== [ 55.208285][ C0] Disabling lock debugging due to kernel taint [ 55.208292][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 55.208300][ C0] CPU: 0 PID: 7 Comm: kworker/0:1 Tainted: G B 5.15.0-rc5-syzkaller #0 [ 55.208319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.208330][ C0] Workqueue: usb_hub_wq hub_event [ 55.208351][ C0] Call Trace: [ 55.208356][ C0] [ 55.208361][ C0] dump_stack_lvl+0xcd/0x134 [ 55.208378][ C0] panic+0x2b0/0x6dd [ 55.208395][ C0] ? __warn_printk+0xf3/0xf3 [ 55.208417][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.208437][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.208458][ C0] end_report.cold+0x63/0x6f [ 55.208474][ C0] kasan_report.cold+0x71/0xdf [ 55.208492][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 55.208513][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 55.208534][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 55.208557][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 55.208576][ C0] ? si470x_fops_read+0x790/0x790 [ 55.208595][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 55.208619][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 55.208643][ C0] dummy_timer+0x11f9/0x32b0 [ 55.208664][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.208691][ C0] ? lock_chain_count+0x20/0x20 [ 55.208708][ C0] ? dummy_dequeue+0x500/0x500 [ 55.208729][ C0] ? dummy_dequeue+0x500/0x500 [ 55.208746][ C0] call_timer_fn+0x1a5/0x6b0 [ 55.208762][ C0] ? add_timer_on+0x4a0/0x4a0 [ 55.208779][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 55.208799][ C0] ? dummy_dequeue+0x500/0x500 [ 55.208818][ C0] __run_timers.part.0+0x675/0xa20 [ 55.208838][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 55.208858][ C0] run_timer_softirq+0xb3/0x1d0 [ 55.208874][ C0] __do_softirq+0x29b/0x9c2 [ 55.208897][ C0] __irq_exit_rcu+0x123/0x180 [ 55.208915][ C0] irq_exit_rcu+0x5/0x20 [ 55.208931][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 55.208948][ C0] [ 55.208953][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 55.208971][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 55.208990][ C0] Code: 01 f0 4d 89 03 e9 63 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 <65> 8b 05 e9 17 8b 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 55.209004][ C0] RSP: 0018:ffffc90000cc6f60 EFLAGS: 00000293 [ 55.209019][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 55.209030][ C0] RDX: ffff888010e43900 RSI: ffffffff815e525c RDI: 0000000000000003 [ 55.209042][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8fcff9e7 [ 55.209052][ C0] R10: ffffffff815e5252 R11: 0000000000000000 R12: ffffffff84ca3750 [ 55.209064][ C0] R13: 0000000000000200 R14: ffffc90000cc6fc0 R15: dffffc0000000000 [ 55.209075][ C0] ? loopback_xmit+0x6d0/0x6d0 [ 55.209091][ C0] ? console_unlock+0x6b2/0xb70 [ 55.209109][ C0] ? console_unlock+0x6bc/0xb70 [ 55.209129][ C0] console_unlock+0x6c2/0xb70 [ 55.209149][ C0] ? devkmsg_read+0x730/0x730 [ 55.209168][ C0] ? lock_release+0x720/0x720 [ 55.209188][ C0] ? vprintk+0x80/0x90 [ 55.209219][ C0] ? vprintk+0x80/0x90 [ 55.209239][ C0] vprintk_emit+0x198/0x4f0 [ 55.209260][ C0] vprintk+0x80/0x90 [ 55.209278][ C0] _printk+0xba/0xed [ 55.209293][ C0] ? record_print_text.cold+0x16/0x16 [ 55.209309][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 55.209331][ C0] ? __pm_runtime_suspend+0xce/0x2d0 [ 55.209351][ C0] ? usb_probe_interface+0x3bf/0x7f0 [ 55.209372][ C0] ? really_probe+0x25c/0xcc0 [ 55.209391][ C0] really_probe.cold+0x6d/0x278 [ 55.209413][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 55.209436][ C0] __driver_probe_device+0x338/0x4d0 [ 55.209459][ C0] driver_probe_device+0x4c/0x1a0 [ 55.209480][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.209503][ C0] ? driver_allows_async_probing+0x150/0x150 [ 55.209525][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.209545][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.209564][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.209584][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 55.209603][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.209625][ C0] __device_attach+0x228/0x4a0 [ 55.209646][ C0] ? device_driver_attach+0x210/0x210 [ 55.209668][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 55.209688][ C0] bus_probe_device+0x1e4/0x290 [ 55.209709][ C0] device_add+0xc17/0x1ee0 [ 55.209726][ C0] ? mark_held_locks+0x9f/0xe0 [ 55.209745][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 55.209766][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.209786][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.209809][ C0] usb_set_configuration+0x113f/0x1910 [ 55.209834][ C0] usb_generic_driver_probe+0xba/0x100 [ 55.209853][ C0] usb_probe_device+0xd9/0x2c0 [ 55.209872][ C0] ? usb_driver_release_interface+0x180/0x180 [ 55.209892][ C0] really_probe+0x245/0xcc0 [ 55.209916][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 55.209936][ C0] __driver_probe_device+0x338/0x4d0 [ 55.209956][ C0] driver_probe_device+0x4c/0x1a0 [ 55.209977][ C0] __device_attach_driver+0x20b/0x2f0 [ 55.209999][ C0] ? driver_allows_async_probing+0x150/0x150 [ 55.210022][ C0] bus_for_each_drv+0x15f/0x1e0 [ 55.210040][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.210059][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.210080][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 55.210098][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.210120][ C0] __device_attach+0x228/0x4a0 [ 55.210141][ C0] ? device_driver_attach+0x210/0x210 [ 55.210163][ C0] ? kobject_uevent_env+0x2bb/0x1650 [ 55.210184][ C0] bus_probe_device+0x1e4/0x290 [ 55.210213][ C0] device_add+0xc17/0x1ee0 [ 55.210232][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 55.210253][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.210276][ C0] usb_new_device.cold+0x63f/0x108e [ 55.210300][ C0] ? hub_disconnect+0x510/0x510 [ 55.210320][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 55.210340][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 55.210362][ C0] hub_event+0x2357/0x4330 [ 55.210389][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 55.210412][ C0] ? lock_release+0x720/0x720 [ 55.210431][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 55.210448][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 55.210471][ C0] process_one_work+0x9bf/0x16b0 [ 55.210491][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 55.210515][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 55.210535][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 55.210556][ C0] worker_thread+0x658/0x11f0 [ 55.210576][ C0] ? process_one_work+0x16b0/0x16b0 [ 55.210593][ C0] kthread+0x3e5/0x4d0 [ 55.210612][ C0] ? set_kthread_struct+0x130/0x130 [ 55.210632][ C0] ret_from_fork+0x1f/0x30 [ 55.211661][ C0] Kernel Offset: disabled [ 57.178089][ C0] Rebooting in 86400 seconds..