dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:28:fc:25:ea:d7:72:11:85:ec:f5:a4:60:37:c9:76:43 forked to background, child pid 1216 Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.120' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.801374][ T685] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.161405][ T685] usb 1-1: config index 0 descriptor too short (expected 12164, got 27) [ 30.170024][ T685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 30.180946][ T685] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 30.190000][ T685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.200345][ T685] usb 1-1: config 0 descriptor?? [ 30.471441][ T685] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 30.478285][ T685] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 30.691429][ T685] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 30.698993][ T685] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 30.711302][ T685] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org executing program [ 30.911379][ T685] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 30.931329][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 30.938002][ T685] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 30.946820][ T685] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 30.953736][ C1] ================================================================== [ 30.953747][ C1] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x96/0xbf [ 30.953796][ C1] Read of size 8 at addr ffff888109328b40 by task kworker/1:2/685 [ 30.953819][ C1] [ 30.953826][ C1] CPU: 1 PID: 685 Comm: kworker/1:2 Not tainted 5.18.0-rc5-syzkaller-00157-g97fa5887cf28 #0 [ 30.953858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.953876][ C1] Workqueue: usb_hub_wq hub_event [ 30.953904][ C1] Call Trace: [ 30.953911][ C1] [ 30.953920][ C1] dump_stack_lvl+0xcd/0x134 [ 30.953948][ C1] print_address_description.constprop.0.cold+0xeb/0x495 [ 30.953985][ C1] ? si470x_int_in_callback.cold+0x96/0xbf [ 30.954015][ C1] kasan_report.cold+0xf4/0x1c6 [ 30.954044][ C1] ? si470x_int_in_callback.cold+0x96/0xbf [ 30.954075][ C1] si470x_int_in_callback.cold+0x96/0xbf [ 30.954106][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.954158][ C1] ? si470x_fops_read+0x790/0x790 [ 30.954191][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.954223][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x6d0 [ 30.954253][ C1] ? dummy_timer+0x11e7/0x32b0 [ 30.954279][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 30.954310][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 30.954339][ C1] dummy_timer+0x11f9/0x32b0 [ 30.954369][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 30.954399][ C1] ? dummy_dequeue+0x500/0x500 [ 30.954423][ C1] ? dummy_dequeue+0x500/0x500 [ 30.954448][ C1] call_timer_fn+0x1a5/0x6b0 [ 30.954479][ C1] ? timer_fixup_activate+0x350/0x350 [ 30.954513][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 30.954547][ C1] ? dummy_dequeue+0x500/0x500 [ 30.954572][ C1] __run_timers.part.0+0x679/0xa80 [ 30.954606][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 30.954637][ C1] ? lapic_next_event+0x4d/0x80 [ 30.954669][ C1] run_timer_softirq+0xb3/0x1d0 [ 30.954701][ C1] __do_softirq+0x288/0x9a5 [ 30.954729][ C1] __irq_exit_rcu+0x113/0x170 [ 30.954756][ C1] irq_exit_rcu+0x5/0x20 [ 30.954781][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 30.954809][ C1] [ 30.954817][ C1] [ 30.954825][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 30.954859][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 30.954891][ C1] Code: 48 89 ef 5d e9 21 f7 33 00 5d be 03 00 00 00 e9 86 3d cf 00 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 99 f9 bd 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 30.954916][ C1] RSP: 0018:ffffc90001bcef58 EFLAGS: 00000293 [ 30.954939][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.954956][ C1] RDX: ffff88810f49d580 RSI: ffffffff812ba488 RDI: 0000000000000003 [ 30.954974][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aa3b687 [ 30.954992][ C1] R10: ffffffff812ba47e R11: 0000000000000000 R12: ffffffff82f3a400 [ 30.955010][ C1] R13: 0000000000000200 R14: ffffc90001bcefb8 R15: dffffc0000000000 [ 30.955029][ C1] ? loopback_xmit+0x730/0x730 [ 30.955064][ C1] ? console_unlock+0x81e/0xdd0 [ 30.955092][ C1] ? console_unlock+0x828/0xdd0 [ 30.955129][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 30.955166][ C1] console_unlock+0x82e/0xdd0 [ 30.955194][ C1] ? devkmsg_read+0x730/0x730 [ 30.955222][ C1] ? lock_release+0x720/0x720 [ 30.955250][ C1] ? vprintk+0x80/0x90 [ 30.955281][ C1] ? vprintk+0x80/0x90 [ 30.955307][ C1] vprintk_emit+0x1b4/0x5f0 [ 30.955335][ C1] vprintk+0x80/0x90 [ 30.955361][ C1] _printk+0xba/0xed [ 30.955389][ C1] ? record_print_text.cold+0x16/0x16 [ 30.955418][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 30.955446][ C1] ? __pm_runtime_suspend+0xce/0x2d0 [ 30.955480][ C1] ? usb_probe_interface+0x3bf/0x7f0 [ 30.955514][ C1] ? really_probe+0x255/0xb20 [ 30.955547][ C1] really_probe.cold+0xb1/0x17a [ 30.955581][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 30.955612][ C1] __driver_probe_device+0x338/0x4d0 [ 30.955647][ C1] driver_probe_device+0x4c/0x1a0 [ 30.955685][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.955711][ C1] ? driver_allows_async_probing+0x150/0x150 [ 30.955738][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.955769][ C1] ? bus_for_each_dev+0x1d0/0x1d0 [ 30.955800][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.955835][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 30.955861][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 30.955896][ C1] __device_attach+0x228/0x4a0 [ 30.955928][ C1] ? device_driver_attach+0x210/0x210 [ 30.955962][ C1] ? kobject_uevent_env+0x2ac/0x1660 [ 30.955993][ C1] bus_probe_device+0x1e4/0x290 [ 30.956025][ C1] device_add+0xb83/0x1e20 [ 30.956054][ C1] ? mark_held_locks+0x9f/0xe0 [ 30.956081][ C1] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 30.956115][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.956157][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.956189][ C1] usb_set_configuration+0x101e/0x1900 [ 30.956223][ C1] usb_generic_driver_probe+0xba/0x100 [ 30.956255][ C1] usb_probe_device+0xd9/0x2c0 [ 30.956287][ C1] ? usb_driver_release_interface+0x180/0x180 [ 30.956322][ C1] really_probe+0x23e/0xb20 [ 30.956354][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 30.956386][ C1] __driver_probe_device+0x338/0x4d0 [ 30.956421][ C1] driver_probe_device+0x4c/0x1a0 [ 30.956454][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.956480][ C1] ? driver_allows_async_probing+0x150/0x150 [ 30.956508][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.956539][ C1] ? bus_for_each_dev+0x1d0/0x1d0 [ 30.956569][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.956604][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 30.956630][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 30.956663][ C1] __device_attach+0x228/0x4a0 [ 30.956695][ C1] ? device_driver_attach+0x210/0x210 [ 30.956729][ C1] ? kobject_uevent_env+0x2ac/0x1660 [ 30.956758][ C1] bus_probe_device+0x1e4/0x290 [ 30.956790][ C1] device_add+0xb83/0x1e20 [ 30.956821][ C1] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 30.956855][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.956888][ C1] usb_new_device.cold+0x641/0x1091 [ 30.956926][ C1] ? hub_disconnect+0x510/0x510 [ 30.956953][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.956982][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 30.957015][ C1] hub_event+0x25d5/0x4690 [ 30.957044][ C1] ? hub_port_debounce+0x3c0/0x3c0 [ 30.957072][ C1] ? lock_release+0x720/0x720 [ 30.957097][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 30.957124][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 30.957159][ C1] process_one_work+0x996/0x1610 [ 30.957189][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 30.957218][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.957246][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 30.957278][ C1] worker_thread+0x665/0x1080 [ 30.957307][ C1] ? __kthread_parkme+0x15f/0x220 [ 30.957333][ C1] ? process_one_work+0x1610/0x1610 [ 30.957362][ C1] kthread+0x2ef/0x3a0 [ 30.957386][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 30.957414][ C1] ret_from_fork+0x1f/0x30 [ 30.957443][ C1] [ 30.957451][ C1] [ 30.957456][ C1] Allocated by task 685: [ 30.957467][ C1] kasan_save_stack+0x1e/0x40 [ 30.957494][ C1] __kasan_kmalloc+0x81/0xa0 [ 30.957518][ C1] si470x_usb_driver_probe+0x51/0xf90 [ 30.957549][ C1] usb_probe_interface+0x315/0x7f0 [ 30.957579][ C1] really_probe+0x23e/0xb20 [ 30.957609][ C1] __driver_probe_device+0x338/0x4d0 [ 30.957640][ C1] driver_probe_device+0x4c/0x1a0 [ 30.957671][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.957694][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.957722][ C1] __device_attach+0x228/0x4a0 [ 30.957751][ C1] bus_probe_device+0x1e4/0x290 [ 30.957779][ C1] device_add+0xb83/0x1e20 [ 30.957805][ C1] usb_set_configuration+0x101e/0x1900 [ 30.957835][ C1] usb_generic_driver_probe+0xba/0x100 [ 30.957870][ C1] usb_probe_device+0xd9/0x2c0 [ 30.957900][ C1] really_probe+0x23e/0xb20 [ 30.957930][ C1] __driver_probe_device+0x338/0x4d0 [ 30.957962][ C1] driver_probe_device+0x4c/0x1a0 [ 30.957994][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.958017][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.958046][ C1] __device_attach+0x228/0x4a0 [ 30.958076][ C1] bus_probe_device+0x1e4/0x290 [ 30.958105][ C1] device_add+0xb83/0x1e20 [ 30.958131][ C1] usb_new_device.cold+0x641/0x1091 [ 30.958163][ C1] hub_event+0x25d5/0x4690 [ 30.958186][ C1] process_one_work+0x996/0x1610 [ 30.958219][ C1] worker_thread+0x665/0x1080 [ 30.958244][ C1] kthread+0x2ef/0x3a0 [ 30.958265][ C1] ret_from_fork+0x1f/0x30 [ 30.958288][ C1] [ 30.958293][ C1] Freed by task 685: [ 30.958303][ C1] kasan_save_stack+0x1e/0x40 [ 30.958327][ C1] kasan_set_track+0x21/0x30 [ 30.958351][ C1] kasan_set_free_info+0x20/0x30 [ 30.958379][ C1] ____kasan_slab_free+0x10f/0x190 [ 30.958404][ C1] kfree+0xc1/0x4f0 [ 30.958424][ C1] si470x_usb_driver_probe+0xb3d/0xf90 [ 30.958454][ C1] usb_probe_interface+0x315/0x7f0 [ 30.958490][ C1] really_probe+0x23e/0xb20 [ 30.958519][ C1] __driver_probe_device+0x338/0x4d0 [ 30.958550][ C1] driver_probe_device+0x4c/0x1a0 [ 30.958581][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.958609][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.958642][ C1] __device_attach+0x228/0x4a0 [ 30.958672][ C1] bus_probe_device+0x1e4/0x290 [ 30.958701][ C1] device_add+0xb83/0x1e20 [ 30.958727][ C1] usb_set_configuration+0x101e/0x1900 [ 30.958756][ C1] usb_generic_driver_probe+0xba/0x100 [ 30.958784][ C1] usb_probe_device+0xd9/0x2c0 [ 30.958817][ C1] really_probe+0x23e/0xb20 [ 30.958846][ C1] __driver_probe_device+0x338/0x4d0 [ 30.958877][ C1] driver_probe_device+0x4c/0x1a0 [ 30.958907][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.958930][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.958959][ C1] __device_attach+0x228/0x4a0 [ 30.958989][ C1] bus_probe_device+0x1e4/0x290 [ 30.959019][ C1] device_add+0xb83/0x1e20 [ 30.959045][ C1] usb_new_device.cold+0x641/0x1091 [ 30.959074][ C1] hub_event+0x25d5/0x4690 [ 30.959098][ C1] process_one_work+0x996/0x1610 [ 30.959125][ C1] worker_thread+0x665/0x1080 [ 30.959156][ C1] kthread+0x2ef/0x3a0 [ 30.959177][ C1] ret_from_fork+0x1f/0x30 [ 30.959201][ C1] [ 30.959206][ C1] The buggy address belongs to the object at ffff888109328000 [ 30.959206][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 30.959226][ C1] The buggy address is located 2880 bytes inside of [ 30.959226][ C1] 4096-byte region [ffff888109328000, ffff888109329000) [ 30.959250][ C1] [ 30.959254][ C1] The buggy address belongs to the physical page: [ 30.959262][ C1] page:ffffea000424ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109328 [ 30.959290][ C1] head:ffffea000424ca00 order:3 compound_mapcount:0 compound_pincount:0 [ 30.959309][ C1] flags: 0x200000000010200(slab|head|node=0|zone=2) [ 30.959345][ C1] raw: 0200000000010200 ffffea000422e000 dead000000000002 ffff888100042140 [ 30.959369][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 30.959384][ C1] page dumped because: kasan: bad access detected [ 30.959394][ C1] page_owner tracks the page as allocated [ 30.959401][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 1788334312, free_ts 0 [ 30.959446][ C1] get_page_from_freelist+0x1373/0x27b0 [ 30.959474][ C1] __alloc_pages+0x1b2/0x500 [ 30.959498][ C1] alloc_page_interleave+0x1e/0x1e0 [ 30.959525][ C1] alloc_pages+0x2b1/0x310 [ 30.959551][ C1] allocate_slab+0x26c/0x3c0 [ 30.959573][ C1] ___slab_alloc+0x95a/0x1010 [ 30.959595][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 30.959620][ C1] kmem_cache_alloc_trace+0x2fd/0x3b0 [ 30.959645][ C1] kobject_uevent_env+0x235/0x1660 [ 30.959672][ C1] param_sysfs_init+0x367/0x43b [ 30.959700][ C1] do_one_initcall+0x103/0x650 [ 30.959724][ C1] kernel_init_freeable+0x6ac/0x735 [ 30.959749][ C1] kernel_init+0x1a/0x1d0 [ 30.959771][ C1] ret_from_fork+0x1f/0x30 [ 30.959795][ C1] page_owner free stack trace missing [ 30.959801][ C1] [ 30.959805][ C1] Memory state around the buggy address: [ 30.959817][ C1] ffff888109328a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.959835][ C1] ffff888109328a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.959853][ C1] >ffff888109328b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.959866][ C1] ^ [ 30.959879][ C1] ffff888109328b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.959897][ C1] ffff888109328c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.959910][ C1] ================================================================== [ 30.959920][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 30.959930][ C1] CPU: 1 PID: 685 Comm: kworker/1:2 Not tainted 5.18.0-rc5-syzkaller-00157-g97fa5887cf28 #0 [ 30.959956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.959972][ C1] Workqueue: usb_hub_wq hub_event [ 30.959997][ C1] Call Trace: [ 30.960003][ C1] [ 30.960010][ C1] dump_stack_lvl+0xcd/0x134 [ 30.960037][ C1] panic+0x2d7/0x636 [ 30.960064][ C1] ? panic_print_sys_info.part.0+0x10b/0x10b [ 30.960098][ C1] ? si470x_int_in_callback.cold+0x96/0xbf [ 30.960128][ C1] end_report.part.0+0x3f/0x7c [ 30.960165][ C1] kasan_report.cold+0x93/0x1c6 [ 30.960195][ C1] ? si470x_int_in_callback.cold+0x96/0xbf [ 30.960224][ C1] si470x_int_in_callback.cold+0x96/0xbf [ 30.960251][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.960279][ C1] ? si470x_fops_read+0x790/0x790 [ 30.960309][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.960340][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x6d0 [ 30.960369][ C1] ? dummy_timer+0x11e7/0x32b0 [ 30.960394][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 30.960424][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 30.960454][ C1] dummy_timer+0x11f9/0x32b0 [ 30.960479][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 30.960511][ C1] ? dummy_dequeue+0x500/0x500 [ 30.960537][ C1] ? dummy_dequeue+0x500/0x500 [ 30.960561][ C1] call_timer_fn+0x1a5/0x6b0 [ 30.960590][ C1] ? timer_fixup_activate+0x350/0x350 [ 30.960623][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 30.960654][ C1] ? dummy_dequeue+0x500/0x500 [ 30.960678][ C1] __run_timers.part.0+0x679/0xa80 [ 30.960711][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 30.960742][ C1] ? lapic_next_event+0x4d/0x80 [ 30.960773][ C1] run_timer_softirq+0xb3/0x1d0 [ 30.960805][ C1] __do_softirq+0x288/0x9a5 [ 30.960833][ C1] __irq_exit_rcu+0x113/0x170 [ 30.960859][ C1] irq_exit_rcu+0x5/0x20 [ 30.960884][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 30.960910][ C1] [ 30.960917][ C1] [ 30.960925][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 30.960952][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 30.960983][ C1] Code: 48 89 ef 5d e9 21 f7 33 00 5d be 03 00 00 00 e9 86 3d cf 00 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 99 f9 bd 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 30.961007][ C1] RSP: 0018:ffffc90001bcef58 EFLAGS: 00000293 [ 30.961028][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 30.961044][ C1] RDX: ffff88810f49d580 RSI: ffffffff812ba488 RDI: 0000000000000003 [ 30.961061][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aa3b687 [ 30.961077][ C1] R10: ffffffff812ba47e R11: 0000000000000000 R12: ffffffff82f3a400 [ 30.961094][ C1] R13: 0000000000000200 R14: ffffc90001bcefb8 R15: dffffc0000000000 [ 30.961112][ C1] ? loopback_xmit+0x730/0x730 [ 30.961137][ C1] ? console_unlock+0x81e/0xdd0 [ 30.961171][ C1] ? console_unlock+0x828/0xdd0 [ 30.961198][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 30.961234][ C1] console_unlock+0x82e/0xdd0 [ 30.961263][ C1] ? devkmsg_read+0x730/0x730 [ 30.961288][ C1] ? lock_release+0x720/0x720 [ 30.961313][ C1] ? vprintk+0x80/0x90 [ 30.961338][ C1] ? vprintk+0x80/0x90 [ 30.961364][ C1] vprintk_emit+0x1b4/0x5f0 [ 30.961391][ C1] vprintk+0x80/0x90 [ 30.961417][ C1] _printk+0xba/0xed [ 30.961442][ C1] ? record_print_text.cold+0x16/0x16 [ 30.961470][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 30.961499][ C1] ? __pm_runtime_suspend+0xce/0x2d0 [ 30.961536][ C1] ? usb_probe_interface+0x3bf/0x7f0 [ 30.961568][ C1] ? really_probe+0x255/0xb20 [ 30.961600][ C1] really_probe.cold+0xb1/0x17a [ 30.961627][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 30.961657][ C1] __driver_probe_device+0x338/0x4d0 [ 30.961698][ C1] driver_probe_device+0x4c/0x1a0 [ 30.961732][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.961757][ C1] ? driver_allows_async_probing+0x150/0x150 [ 30.961783][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.961811][ C1] ? bus_for_each_dev+0x1d0/0x1d0 [ 30.961840][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.961872][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 30.961897][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 30.961931][ C1] __device_attach+0x228/0x4a0 [ 30.961963][ C1] ? device_driver_attach+0x210/0x210 [ 30.961996][ C1] ? kobject_uevent_env+0x2ac/0x1660 [ 30.962025][ C1] bus_probe_device+0x1e4/0x290 [ 30.962058][ C1] device_add+0xb83/0x1e20 [ 30.962087][ C1] ? mark_held_locks+0x9f/0xe0 [ 30.962114][ C1] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 30.962152][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.962188][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.962220][ C1] usb_set_configuration+0x101e/0x1900 [ 30.962254][ C1] usb_generic_driver_probe+0xba/0x100 [ 30.962285][ C1] usb_probe_device+0xd9/0x2c0 [ 30.962315][ C1] ? usb_driver_release_interface+0x180/0x180 [ 30.962349][ C1] really_probe+0x23e/0xb20 [ 30.962379][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 30.962410][ C1] __driver_probe_device+0x338/0x4d0 [ 30.962444][ C1] driver_probe_device+0x4c/0x1a0 [ 30.962477][ C1] __device_attach_driver+0x20b/0x2f0 [ 30.962502][ C1] ? driver_allows_async_probing+0x150/0x150 [ 30.962528][ C1] bus_for_each_drv+0x15f/0x1e0 [ 30.962558][ C1] ? bus_for_each_dev+0x1d0/0x1d0 [ 30.962588][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 30.962627][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 30.962652][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 30.962686][ C1] __device_attach+0x228/0x4a0 [ 30.962718][ C1] ? device_driver_attach+0x210/0x210 [ 30.962751][ C1] ? kobject_uevent_env+0x2ac/0x1660 [ 30.962781][ C1] bus_probe_device+0x1e4/0x290 [ 30.962812][ C1] device_add+0xb83/0x1e20 [ 30.962840][ C1] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 30.962873][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 30.962909][ C1] usb_new_device.cold+0x641/0x1091 [ 30.962940][ C1] ? hub_disconnect+0x510/0x510 [ 30.962965][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.962993][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 30.963025][ C1] hub_event+0x25d5/0x4690 [ 30.963053][ C1] ? hub_port_debounce+0x3c0/0x3c0 [ 30.963080][ C1] ? lock_release+0x720/0x720 [ 30.963106][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 30.963131][ C1] ? do_raw_spin_lock+0x120/0x2a0 [ 30.963173][ C1] process_one_work+0x996/0x1610 [ 30.963202][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 30.963232][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 30.963259][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 30.963291][ C1] worker_thread+0x665/0x1080 [ 30.963320][ C1] ? __kthread_parkme+0x15f/0x220 [ 30.963344][ C1] ? process_one_work+0x1610/0x1610 [ 30.963372][ C1] kthread+0x2ef/0x3a0 [ 30.963395][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 30.963423][ C1] ret_from_fork+0x1f/0x30 [ 30.963450][ C1] [ 30.963610][ C1] Kernel Offset: disabled [ 32.890554][ C1] Rebooting in 86400 seconds..