[ 52.109191][ T39] audit: type=1400 audit(1648341750.539:73): avc: denied { transition } for pid=3620 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.149424][ T39] audit: type=1400 audit(1648341750.549:74): avc: denied { write } for pid=3620 comm="sh" path="pipe:[27245]" dev="pipefs" ino=27245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:14953' (ECDSA) to the list of known hosts. [ 55.136508][ T39] audit: type=1400 audit(1648341753.569:75): avc: denied { execute } for pid=3652 comm="sh" name="syz-executor1415052024" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 executing program [ 55.160404][ T39] audit: type=1400 audit(1648341753.579:76): avc: denied { execute_no_trans } for pid=3652 comm="sh" path="/syz-executor1415052024" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.184870][ T39] audit: type=1400 audit(1648341753.589:77): avc: denied { execmem } for pid=3652 comm="syz-executor141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.204941][ T39] audit: type=1400 audit(1648341753.589:78): avc: denied { read write } for pid=3652 comm="syz-executor141" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.229159][ T39] audit: type=1400 audit(1648341753.589:79): avc: denied { open } for pid=3652 comm="syz-executor141" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.253071][ T39] audit: type=1400 audit(1648341753.589:80): avc: denied { ioctl } for pid=3652 comm="syz-executor141" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.431625][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.803168][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 55.815721][ T15] usb 5-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 55.825437][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.838077][ T15] usb 5-1: config 0 descriptor?? [ 56.102036][ T15] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 56.112257][ T15] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 56.321851][ T15] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 56.332321][ T15] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 56.351119][ T15] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 56.541763][ T15] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 56.571789][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 56.580191][ T15] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 56.590496][ T15] radio-si470x: probe of 5-1:0.0 failed with error -22 [ 56.598011][ C0] ================================================================== [ 56.598020][ C0] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x96/0xbf [ 56.598237][ C0] Read of size 8 at addr ffff88802578eb48 by task kworker/0:1/15 [ 56.598249][ C0] [ 56.598275][ C0] CPU: 0 PID: 15 Comm: kworker/0:1 Not tainted 5.17.0-syzkaller-10752-g52d543b5497c #0 [ 56.598290][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 56.598319][ C0] Workqueue: usb_hub_wq hub_event [ 56.598446][ C0] Call Trace: [ 56.598474][ C0] [ 56.598479][ C0] dump_stack_lvl+0xcd/0x134 [ 56.598561][ C0] print_address_description.constprop.0.cold+0xeb/0x467 [ 56.598619][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 56.598633][ C0] kasan_report.cold+0xf4/0x1c6 [ 56.598647][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 56.598661][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 56.598676][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.598810][ C0] ? si470x_fops_read+0x790/0x790 [ 56.598929][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.599029][ C0] ? usb_hcd_unmap_urb_for_dma+0x105/0x6d0 [ 56.599042][ C0] ? dummy_timer+0x11e7/0x32b0 [ 56.599087][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 56.599101][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 56.599115][ C0] dummy_timer+0x11f9/0x32b0 [ 56.599129][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.599147][ C0] ? dummy_dequeue+0x500/0x500 [ 56.599161][ C0] ? dummy_dequeue+0x500/0x500 [ 56.599174][ C0] call_timer_fn+0x1a5/0x6b0 [ 56.599205][ C0] ? timer_fixup_activate+0x350/0x350 [ 56.599219][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.599298][ C0] ? dummy_dequeue+0x500/0x500 [ 56.599311][ C0] __run_timers.part.0+0x67c/0xa30 [ 56.599326][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 56.599347][ C0] run_timer_softirq+0xb3/0x1d0 [ 56.599360][ C0] __do_softirq+0x29b/0x9c2 [ 56.599389][ C0] __irq_exit_rcu+0x123/0x180 [ 56.599438][ C0] irq_exit_rcu+0x5/0x20 [ 56.599454][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 56.599474][ C0] [ 56.599478][ C0] [ 56.599482][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 56.599499][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 56.599529][ C0] Code: 48 89 ef 5d e9 a1 94 4a 00 5d be 03 00 00 00 e9 96 55 74 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 e9 34 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 56.599550][ C0] RSP: 0018:ffffc9000062ef48 EFLAGS: 00000293 [ 56.599571][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.599580][ C0] RDX: ffff8880118d00c0 RSI: ffffffff815f15f8 RDI: 0000000000000003 [ 56.599589][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff9000c907 [ 56.599598][ C0] R10: ffffffff815f15ee R11: 0000000000000000 R12: ffffffff84e17a50 [ 56.599607][ C0] R13: 0000000000000200 R14: ffffc9000062efa8 R15: dffffc0000000000 [ 56.599626][ C0] ? loopback_xmit+0x730/0x730 [ 56.599755][ C0] ? console_unlock+0x81e/0xdd0 [ 56.599774][ C0] ? console_unlock+0x828/0xdd0 [ 56.599789][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.599806][ C0] console_unlock+0x82e/0xdd0 [ 56.599821][ C0] ? devkmsg_read+0x730/0x730 [ 56.599835][ C0] ? lock_release+0x720/0x720 [ 56.599850][ C0] ? vprintk+0x80/0x90 [ 56.599864][ C0] ? vprintk+0x80/0x90 [ 56.599878][ C0] vprintk_emit+0x1b4/0x5f0 [ 56.599892][ C0] vprintk+0x80/0x90 [ 56.599907][ C0] _printk+0xba/0xed [ 56.599936][ C0] ? record_print_text.cold+0x16/0x16 [ 56.599949][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 56.599965][ C0] ? __pm_runtime_suspend+0xce/0x2d0 [ 56.600036][ C0] ? usb_probe_interface+0x3bf/0x7f0 [ 56.600052][ C0] ? really_probe+0x25c/0xcc0 [ 56.600075][ C0] really_probe.cold+0x6d/0x280 [ 56.600131][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.600149][ C0] __driver_probe_device+0x338/0x4d0 [ 56.600165][ C0] driver_probe_device+0x4c/0x1a0 [ 56.600180][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.600196][ C0] ? driver_allows_async_probing+0x150/0x150 [ 56.600231][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.600246][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.600260][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.600275][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 56.600288][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.600304][ C0] __device_attach+0x228/0x4a0 [ 56.600318][ C0] ? device_driver_attach+0x210/0x210 [ 56.600334][ C0] ? kobject_uevent_env+0x2ac/0x1600 [ 56.600452][ C0] bus_probe_device+0x1e4/0x290 [ 56.600468][ C0] device_add+0xb83/0x1e20 [ 56.600481][ C0] ? mark_held_locks+0x9f/0xe0 [ 56.600496][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.600511][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.600532][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.600550][ C0] usb_set_configuration+0x101e/0x1900 [ 56.600575][ C0] usb_generic_driver_probe+0xba/0x100 [ 56.600598][ C0] usb_probe_device+0xd9/0x2c0 [ 56.600612][ C0] ? usb_driver_release_interface+0x180/0x180 [ 56.600628][ C0] really_probe+0x245/0xcc0 [ 56.600642][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.600659][ C0] __driver_probe_device+0x338/0x4d0 [ 56.600675][ C0] driver_probe_device+0x4c/0x1a0 [ 56.600690][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.600707][ C0] ? driver_allows_async_probing+0x150/0x150 [ 56.600731][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.600745][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.600759][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.600774][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 56.600787][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.600802][ C0] __device_attach+0x228/0x4a0 [ 56.600817][ C0] ? device_driver_attach+0x210/0x210 [ 56.600832][ C0] ? kobject_uevent_env+0x2ac/0x1600 [ 56.600847][ C0] bus_probe_device+0x1e4/0x290 [ 56.600862][ C0] device_add+0xb83/0x1e20 [ 56.600875][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.600891][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.600908][ C0] usb_new_device.cold+0x641/0x1091 [ 56.600976][ C0] ? hub_disconnect+0x510/0x510 [ 56.600992][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.601007][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.601021][ C0] hub_event+0x25c6/0x4680 [ 56.601038][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 56.601055][ C0] ? lock_release+0x720/0x720 [ 56.601068][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 56.601082][ C0] ? do_raw_spin_lock+0x120/0x2a0 [ 56.601098][ C0] process_one_work+0x996/0x1610 [ 56.601120][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.601134][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.601149][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 56.601163][ C0] worker_thread+0x665/0x1080 [ 56.601176][ C0] ? __kthread_parkme+0x15f/0x220 [ 56.601200][ C0] ? process_one_work+0x1610/0x1610 [ 56.601213][ C0] kthread+0x2e9/0x3a0 [ 56.601227][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 56.601244][ C0] ret_from_fork+0x1f/0x30 [ 56.601312][ C0] [ 56.601317][ C0] [ 56.601320][ C0] Allocated by task 15: [ 56.601377][ C0] kasan_save_stack+0x1e/0x40 [ 56.601469][ C0] __kasan_kmalloc+0xa6/0xd0 [ 56.601482][ C0] kmem_cache_alloc_trace+0x1ea/0x4a0 [ 56.601497][ C0] si470x_usb_driver_probe+0x51/0xf90 [ 56.601510][ C0] usb_probe_interface+0x315/0x7f0 [ 56.601542][ C0] really_probe+0x245/0xcc0 [ 56.601556][ C0] __driver_probe_device+0x338/0x4d0 [ 56.601570][ C0] driver_probe_device+0x4c/0x1a0 [ 56.601584][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.601598][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.601611][ C0] __device_attach+0x228/0x4a0 [ 56.601624][ C0] bus_probe_device+0x1e4/0x290 [ 56.601646][ C0] device_add+0xb83/0x1e20 [ 56.601658][ C0] usb_set_configuration+0x101e/0x1900 [ 56.601672][ C0] usb_generic_driver_probe+0xba/0x100 [ 56.601684][ C0] usb_probe_device+0xd9/0x2c0 [ 56.601697][ C0] really_probe+0x245/0xcc0 [ 56.601710][ C0] __driver_probe_device+0x338/0x4d0 [ 56.601725][ C0] driver_probe_device+0x4c/0x1a0 [ 56.601738][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.601753][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.601765][ C0] __device_attach+0x228/0x4a0 [ 56.601779][ C0] bus_probe_device+0x1e4/0x290 [ 56.601792][ C0] device_add+0xb83/0x1e20 [ 56.601804][ C0] usb_new_device.cold+0x641/0x1091 [ 56.601818][ C0] hub_event+0x25c6/0x4680 [ 56.601832][ C0] process_one_work+0x996/0x1610 [ 56.601843][ C0] worker_thread+0x665/0x1080 [ 56.601854][ C0] kthread+0x2e9/0x3a0 [ 56.601867][ C0] ret_from_fork+0x1f/0x30 [ 56.601880][ C0] [ 56.601882][ C0] Freed by task 15: [ 56.601888][ C0] kasan_save_stack+0x1e/0x40 [ 56.601902][ C0] kasan_set_track+0x21/0x30 [ 56.601915][ C0] kasan_set_free_info+0x20/0x30 [ 56.601926][ C0] ____kasan_slab_free+0x13d/0x180 [ 56.601941][ C0] kfree+0xfb/0x2c0 [ 56.601952][ C0] si470x_usb_driver_probe+0xb3d/0xf90 [ 56.601965][ C0] usb_probe_interface+0x315/0x7f0 [ 56.601978][ C0] really_probe+0x245/0xcc0 [ 56.601991][ C0] __driver_probe_device+0x338/0x4d0 [ 56.602006][ C0] driver_probe_device+0x4c/0x1a0 [ 56.602020][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.602034][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.602047][ C0] __device_attach+0x228/0x4a0 [ 56.602060][ C0] bus_probe_device+0x1e4/0x290 [ 56.602073][ C0] device_add+0xb83/0x1e20 [ 56.602085][ C0] usb_set_configuration+0x101e/0x1900 [ 56.602098][ C0] usb_generic_driver_probe+0xba/0x100 [ 56.602122][ C0] usb_probe_device+0xd9/0x2c0 [ 56.602135][ C0] really_probe+0x245/0xcc0 [ 56.602148][ C0] __driver_probe_device+0x338/0x4d0 [ 56.602162][ C0] driver_probe_device+0x4c/0x1a0 [ 56.602176][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.602191][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.602203][ C0] __device_attach+0x228/0x4a0 [ 56.602217][ C0] bus_probe_device+0x1e4/0x290 [ 56.602230][ C0] device_add+0xb83/0x1e20 [ 56.602241][ C0] usb_new_device.cold+0x641/0x1091 [ 56.602263][ C0] hub_event+0x25c6/0x4680 [ 56.602277][ C0] process_one_work+0x996/0x1610 [ 56.602289][ C0] worker_thread+0x665/0x1080 [ 56.602299][ C0] kthread+0x2e9/0x3a0 [ 56.602313][ C0] ret_from_fork+0x1f/0x30 [ 56.602325][ C0] [ 56.602328][ C0] The buggy address belongs to the object at ffff88802578e000 [ 56.602328][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 56.602338][ C0] The buggy address is located 2888 bytes inside of [ 56.602338][ C0] 4096-byte region [ffff88802578e000, ffff88802578f000) [ 56.602351][ C0] [ 56.602353][ C0] The buggy address belongs to the physical page: [ 56.602368][ C0] page:ffffea000095e380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2578e [ 56.602409][ C0] head:ffffea000095e380 order:1 compound_mapcount:0 compound_pincount:0 [ 56.602421][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 56.602485][ C0] raw: 00fff00000010200 ffffea000060e888 ffffea0000981688 ffff888010c40900 [ 56.602525][ C0] raw: 0000000000000000 ffff88802578e000 0000000100000001 0000000000000000 [ 56.602540][ C0] page dumped because: kasan: bad access detected [ 56.602560][ C0] page_owner tracks the page as allocated [ 56.602564][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 15, tgid 15 (kworker/0:1), ts 55885160556, free_ts 55142902109 [ 56.602589][ C0] get_page_from_freelist+0xba2/0x3df0 [ 56.602615][ C0] __alloc_pages+0x1b2/0x500 [ 56.602627][ C0] cache_grow_begin+0x75/0x350 [ 56.602640][ C0] cache_alloc_refill+0x27f/0x380 [ 56.602653][ C0] kmem_cache_alloc_trace+0x380/0x4a0 [ 56.602666][ C0] si470x_usb_driver_probe+0x51/0xf90 [ 56.602679][ C0] usb_probe_interface+0x315/0x7f0 [ 56.602692][ C0] really_probe+0x245/0xcc0 [ 56.602705][ C0] __driver_probe_device+0x338/0x4d0 [ 56.602720][ C0] driver_probe_device+0x4c/0x1a0 [ 56.602733][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.602748][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.602761][ C0] __device_attach+0x228/0x4a0 [ 56.602774][ C0] bus_probe_device+0x1e4/0x290 [ 56.602787][ C0] device_add+0xb83/0x1e20 [ 56.602799][ C0] usb_set_configuration+0x101e/0x1900 [ 56.602812][ C0] page last free stack trace: [ 56.602816][ C0] free_pcp_prepare+0x549/0xd20 [ 56.602828][ C0] free_unref_page+0x19/0x690 [ 56.602839][ C0] slabs_destroy+0x89/0xc0 [ 56.602852][ C0] ___cache_free+0x34e/0x670 [ 56.602865][ C0] qlist_free_all+0x4f/0x1b0 [ 56.602876][ C0] kasan_quarantine_reduce+0x180/0x200 [ 56.602923][ C0] __kasan_slab_alloc+0x97/0xb0 [ 56.602939][ C0] kmem_cache_alloc+0x265/0x560 [ 56.602952][ C0] jbd2__journal_start+0x191/0x930 [ 56.603054][ C0] __ext4_journal_start_sb+0x3a8/0x4a0 [ 56.603116][ C0] ext4_dirty_inode+0x9d/0x110 [ 56.603145][ C0] __mark_inode_dirty+0x45b/0xfe0 [ 56.603192][ C0] touch_atime+0x63d/0x700 [ 56.603212][ C0] filemap_read+0xab0/0xc70 [ 56.603267][ C0] generic_file_read_iter+0x3b6/0x5a0 [ 56.603281][ C0] ext4_file_read_iter+0x1d7/0x600 [ 56.603296][ C0] [ 56.603298][ C0] Memory state around the buggy address: [ 56.603304][ C0] ffff88802578ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.603314][ C0] ffff88802578ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.603322][ C0] >ffff88802578eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.603329][ C0] ^ [ 56.603335][ C0] ffff88802578eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.603344][ C0] ffff88802578ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.603350][ C0] ================================================================== [ 56.603370][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 56.603377][ C0] CPU: 0 PID: 15 Comm: kworker/0:1 Not tainted 5.17.0-syzkaller-10752-g52d543b5497c #0 [ 56.603391][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 56.603400][ C0] Workqueue: usb_hub_wq hub_event [ 56.603423][ C0] Call Trace: [ 56.603428][ C0] [ 56.603432][ C0] dump_stack_lvl+0xcd/0x134 [ 56.603446][ C0] panic+0x2d7/0x636 [ 56.603466][ C0] ? panic_print_sys_info.part.0+0x10b/0x10b [ 56.603481][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 56.603496][ C0] end_report.part.0+0x3f/0x7c [ 56.603511][ C0] kasan_report.cold+0x93/0x1c6 [ 56.603529][ C0] ? si470x_int_in_callback.cold+0x96/0xbf [ 56.603543][ C0] si470x_int_in_callback.cold+0x96/0xbf [ 56.603557][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.603572][ C0] ? si470x_fops_read+0x790/0x790 [ 56.603585][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.603602][ C0] ? usb_hcd_unmap_urb_for_dma+0x105/0x6d0 [ 56.603614][ C0] ? dummy_timer+0x11e7/0x32b0 [ 56.603629][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 56.603642][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 56.603655][ C0] dummy_timer+0x11f9/0x32b0 [ 56.603669][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.603687][ C0] ? dummy_dequeue+0x500/0x500 [ 56.603700][ C0] ? dummy_dequeue+0x500/0x500 [ 56.603713][ C0] call_timer_fn+0x1a5/0x6b0 [ 56.603727][ C0] ? timer_fixup_activate+0x350/0x350 [ 56.603740][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.603754][ C0] ? dummy_dequeue+0x500/0x500 [ 56.603768][ C0] __run_timers.part.0+0x67c/0xa30 [ 56.603781][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 56.603794][ C0] run_timer_softirq+0xb3/0x1d0 [ 56.603807][ C0] __do_softirq+0x29b/0x9c2 [ 56.603830][ C0] __irq_exit_rcu+0x123/0x180 [ 56.603846][ C0] irq_exit_rcu+0x5/0x20 [ 56.603861][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 56.603875][ C0] [ 56.603878][ C0] [ 56.603882][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 56.603899][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 56.603916][ C0] Code: 48 89 ef 5d e9 a1 94 4a 00 5d be 03 00 00 00 e9 96 55 74 02 66 0f 1f 44 00 00 48 8b be b0 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 e9 34 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 56.603928][ C0] RSP: 0018:ffffc9000062ef48 EFLAGS: 00000293 [ 56.603939][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.603947][ C0] RDX: ffff8880118d00c0 RSI: ffffffff815f15f8 RDI: 0000000000000003 [ 56.603956][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff9000c907 [ 56.603964][ C0] R10: ffffffff815f15ee R11: 0000000000000000 R12: ffffffff84e17a50 [ 56.603973][ C0] R13: 0000000000000200 R14: ffffc9000062efa8 R15: dffffc0000000000 [ 56.603982][ C0] ? loopback_xmit+0x730/0x730 [ 56.603998][ C0] ? console_unlock+0x81e/0xdd0 [ 56.604012][ C0] ? console_unlock+0x828/0xdd0 [ 56.604026][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.604043][ C0] console_unlock+0x82e/0xdd0 [ 56.604057][ C0] ? devkmsg_read+0x730/0x730 [ 56.604071][ C0] ? lock_release+0x720/0x720 [ 56.604085][ C0] ? vprintk+0x80/0x90 [ 56.604099][ C0] ? vprintk+0x80/0x90 [ 56.604112][ C0] vprintk_emit+0x1b4/0x5f0 [ 56.604127][ C0] vprintk+0x80/0x90 [ 56.604141][ C0] _printk+0xba/0xed [ 56.604152][ C0] ? record_print_text.cold+0x16/0x16 [ 56.604165][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 56.604181][ C0] ? __pm_runtime_suspend+0xce/0x2d0 [ 56.604195][ C0] ? usb_probe_interface+0x3bf/0x7f0 [ 56.604210][ C0] ? really_probe+0x25c/0xcc0 [ 56.604224][ C0] really_probe.cold+0x6d/0x280 [ 56.604238][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.604255][ C0] __driver_probe_device+0x338/0x4d0 [ 56.604270][ C0] driver_probe_device+0x4c/0x1a0 [ 56.604285][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.604300][ C0] ? driver_allows_async_probing+0x150/0x150 [ 56.604316][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.604330][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.604343][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.604357][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 56.604371][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.604385][ C0] __device_attach+0x228/0x4a0 [ 56.604399][ C0] ? device_driver_attach+0x210/0x210 [ 56.604414][ C0] ? kobject_uevent_env+0x2ac/0x1600 [ 56.604429][ C0] bus_probe_device+0x1e4/0x290 [ 56.604454][ C0] device_add+0xb83/0x1e20 [ 56.604468][ C0] ? mark_held_locks+0x9f/0xe0 [ 56.604482][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.604496][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.604511][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.604532][ C0] usb_set_configuration+0x101e/0x1900 [ 56.604548][ C0] usb_generic_driver_probe+0xba/0x100 [ 56.604563][ C0] usb_probe_device+0xd9/0x2c0 [ 56.604576][ C0] ? usb_driver_release_interface+0x180/0x180 [ 56.604591][ C0] really_probe+0x245/0xcc0 [ 56.604613][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 56.604630][ C0] __driver_probe_device+0x338/0x4d0 [ 56.604646][ C0] driver_probe_device+0x4c/0x1a0 [ 56.604661][ C0] __device_attach_driver+0x20b/0x2f0 [ 56.604676][ C0] ? driver_allows_async_probing+0x150/0x150 [ 56.604692][ C0] bus_for_each_drv+0x15f/0x1e0 [ 56.604706][ C0] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.604720][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.604734][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 56.604747][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.604763][ C0] __device_attach+0x228/0x4a0 [ 56.604777][ C0] ? device_driver_attach+0x210/0x210 [ 56.604792][ C0] ? kobject_uevent_env+0x2ac/0x1600 [ 56.604807][ C0] bus_probe_device+0x1e4/0x290 [ 56.604821][ C0] device_add+0xb83/0x1e20 [ 56.604834][ C0] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.604849][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.604866][ C0] usb_new_device.cold+0x641/0x1091 [ 56.604881][ C0] ? hub_disconnect+0x510/0x510 [ 56.604896][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.604910][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.604924][ C0] hub_event+0x25c6/0x4680 [ 56.604941][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 56.604957][ C0] ? lock_release+0x720/0x720 [ 56.604970][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 56.604984][ C0] ? do_raw_spin_lock+0x120/0x2a0 [ 56.604999][ C0] process_one_work+0x996/0x1610 [ 56.605012][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.605025][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 56.605039][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 56.605053][ C0] worker_thread+0x665/0x1080 [ 56.605066][ C0] ? __kthread_parkme+0x15f/0x220 [ 56.605080][ C0] ? process_one_work+0x1610/0x1610 [ 56.605092][ C0] kthread+0x2e9/0x3a0 [ 56.605107][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 56.605123][ C0] ret_from_fork+0x1f/0x30 [ 56.605138][ C0] [ 56.606471][ C0] Kernel Offset: disabled [ 58.712386][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:42:45 Registers: info registers vcpu 0 RAX=000000004190dd1e RBX=000000254190dcb4 RCX=0000000000000000 RDX=0000000000000025 RSI=0000000000000103 RDI=0000000000000000 RBP=00000025418f95b8 RSP=ffffc90000007820 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8919f287 R11=0000000000000000 R12=0000000000000000 R13=0000000000231870 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff84147185 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001680 CR3=0000000018947000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=3a302e303a312d35207830373469732d XMM04=616964656d2d78756e696c207461204c XMM05=657361656c70202c7265766972642073 XMM06=7420656d6f73206576616820756f7920 XMM07=69732d6f69646172205d353154202020 XMM08=7465722067736d5f6c6f72746e6f635f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812c139f RDI=0000000000000003 RBP=0000000000000001 RSP=ffffc90000748f68 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff812f8998 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812c13b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005572cc9ab4c0 CR3=00000000165a4000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000ff000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=3a302e303a312d35207830373469732d XMM04=746e6f6373203030353578303d646d63 XMM05=00000000000000000000000000000000 XMM06=666e6d63732030223535653020226d63 XMM07=69732d6f69646172205d353154202020 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812c139f RDI=0000000000000003 RBP=0000000000000002 RSP=ffffc900007a0f68 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff812f8998 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812c13b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 00007f789c3f7800 ffffffff 00000000 GS =0000 ffff88802cc00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d368f87130 CR3=00000000165a4000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=43202020205b5d3639343030362e3635 XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=20383420303020303020343420663120 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812c139f RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc900007f8f68 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff812f8998 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812c13b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005572cc925368 CR3=0000000020d66000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4b5f5455504e495f4449006b636f6c62 XMM02=ffffffffffffffffffffffffffffffff XMM03=00000000000000000000ff000000ff00 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=7261726f706d6574002a3f005b3f2a00 XMM09=00000000000000000000000000000000 XMM10=20202000002020202020202020202020 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000