[ 60.312650][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.327517][ T49] device veth1_macvtap left promiscuous mode [ 60.334470][ T49] device veth0_macvtap left promiscuous mode [ 60.340590][ T49] device veth1_vlan left promiscuous mode [ 60.346619][ T49] device veth0_vlan left promiscuous mode [ 60.480327][ T49] team0 (unregistering): Port device team_slave_1 removed [ 60.492920][ T49] team0 (unregistering): Port device team_slave_0 removed [ 60.504656][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.518284][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.570284][ T49] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.114' (ECDSA) to the list of known hosts. [ 76.635561][ T4059] vhci_hcd vhci_hcd.0: rh_queue_status: len 2 tblen 4 [ 76.646743][ T4066] usb usb9: opened by process 4066: syz-executor029 [ 76.647368][ T4068] usb usb9: opened by process 4068: syz-executor029 [ 76.653580][ T4064] usb usb9: opened by process 4064: syz-executor029 [ 76.668227][ T4059] usb usb9: opened by process 4059: syz-executor029 [ 76.675937][ T4067] usb usb9: opened by process 4067: syz-executor029 [ 76.683157][ T4065] usb usb9: opened by process 4065: syz-executor029 [ 76.694575][ T4064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 76.695284][ T4067] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 76.701253][ T4064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.707731][ T4067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.723302][ T4065] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 76.727823][ T4064] vhci_hcd vhci_hcd.0: Device attached [ 76.729838][ T4065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.731943][ T4065] vhci_hcd vhci_hcd.0: Device attached [ 76.737202][ T4064] usb usb9: opened by process 4064: syz-executor029 [ 76.745071][ T4067] vhci_hcd vhci_hcd.0: Device attached [ 76.749448][ T4068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 76.756189][ T4067] usb usb9: opened by process 4067: syz-executor029 [ 76.761266][ T4068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.763075][ T4068] vhci_hcd vhci_hcd.0: Device attached [ 76.768209][ T4066] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 76.775044][ T4064] usb usb9: usbdev_do_ioctl: BULK [ 76.781917][ T4066] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.782321][ T4059] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 76.787886][ T4064] usb usb9: usbfs: process 4064 (syz-executor029) did not claim interface 0 before use [ 76.793947][ T4059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.823004][ T4059] vhci_hcd vhci_hcd.0: Device attached [ 76.830818][ T4068] usb usb9: opened by process 4068: syz-executor029 [ 76.835992][ T4065] usb usb9: opened by process 4065: syz-executor029 [ 76.842827][ T20] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 tblen 4 [ 76.849102][ T4067] usb usb9: usbdev_do_ioctl: BULK [ 76.861075][ T3616] vhci_hcd vhci_hcd.4: rh_queue_status: len 2 tblen 4 [ 76.868745][ T3615] vhci_hcd vhci_hcd.5: rh_queue_status: len 2 tblen 4 [ 76.875855][ T4066] vhci_hcd vhci_hcd.0: Device attached [ 76.881468][ T136] vhci_hcd vhci_hcd.3: rh_queue_status: len 2 tblen 4 [ 76.888894][ T4067] usb usb9: usbfs: process 4067 (syz-executor029) did not claim interface 0 before use [ 76.900625][ T4068] usb usb9: usbdev_do_ioctl: BULK [ 76.905758][ T4070] vhci_hcd: connection closed [ 76.906970][ T4068] usb usb9: usbfs: process 4068 (syz-executor029) did not claim interface 0 before use [ 76.908334][ T49] vhci_hcd: stop threads [ 76.912718][ T4066] usb usb9: opened by process 4066: syz-executor029 [ 76.922311][ T49] vhci_hcd: release socket [ 76.926061][ T4059] usb usb9: opened by process 4059: syz-executor029 [ 76.932633][ T4065] usb usb9: usbdev_do_ioctl: BULK [ 76.941711][ C0] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 tblen 4 [ 76.944597][ T4065] usb usb9: usbfs: process 4065 (syz-executor029) did not claim interface 0 before use [ 76.949157][ T49] vhci_hcd: disconnect device [ 76.957117][ C1] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 tblen 4 [ 76.966205][ T4082] usb usb9: opened by process 4082: syz-executor029 [ 76.972121][ C1] vhci_hcd vhci_hcd.3: rh_queue_status: len 2 tblen 4 [ 76.977271][ T4059] usb usb9: usbdev_do_ioctl: BULK [ 76.984058][ T4071] vhci_hcd: connection closed [ 76.990877][ C0] vhci_hcd vhci_hcd.5: rh_queue_status: len 2 tblen 4 [ 76.999990][ T4059] usb usb9: usbfs: process 4059 (syz-executor029) did not claim interface 0 before use [ 77.000413][ C0] vhci_hcd vhci_hcd.4: rh_queue_status: len 2 tblen 4 [ 77.012618][ T4076] vhci_hcd: connection closed [ 77.023697][ T4066] usb usb9: usbdev_do_ioctl: BULK [ 77.024887][ T49] vhci_hcd: stop threads [ 77.028382][ T4066] usb usb9: usbfs: process 4066 (syz-executor029) did not claim interface 0 before use [ 77.028456][ T4074] vhci_hcd: connection closed [ 77.034028][ T49] vhci_hcd: release socket [ 77.040894][ T7] vhci_hcd vhci_hcd.1: rh_queue_status: len 2 tblen 4 [ 77.055319][ T4086] usb usb9: opened by process 4086: syz-executor029 [ 77.058581][ T4075] vhci_hcd: connection closed [ 77.064370][ T136] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 77.083455][ C1] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 tblen 4 [ 77.084971][ T4084] usb usb9: opened by process 4084: syz-executor029 [ 77.094920][ C1] vhci_hcd vhci_hcd.5: rh_queue_status: len 2 tblen 4 [ 77.097110][ T4082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 77.104268][ T49] vhci_hcd: disconnect device [ 77.110144][ T4082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.112318][ T4085] usb usb9: opened by process 4085: syz-executor029 [ 77.117901][ T4086] vhci_hcd vhci_hcd.0: port 0 already used [ 77.122849][ T4079] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 77.125336][ T4083] usb usb9: opened by process 4083: syz-executor029 [ 77.131665][ T49] vhci_hcd: stop threads [ 77.140857][ T4077] vhci_hcd: connection closed [ 77.142058][ T4086] usb usb9: opened by process 4086: syz-executor029 [ 77.149499][ T4082] vhci_hcd vhci_hcd.0: Device attached [ 77.153941][ T49] vhci_hcd: release socket [ 77.157066][ T4082] usb usb9: opened by process 4082: syz-executor029 [ 77.163659][ C0] vhci_hcd vhci_hcd.2: rh_queue_status: len 2 tblen 4 [ 77.166513][ T4091] usb usb9: opened by process 4091: syz-executor029 [ 77.169989][ T3615] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 77.175388][ T4086] usb usb9: usbdev_do_ioctl: BULK [ 77.181413][ T3616] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 77.182234][ T3615] usb 19-1: enqueue for inactive port 0 [ 77.188968][ T4078] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 77.203613][ C0] vhci_hcd vhci_hcd.3: rh_queue_status: len 2 tblen 4 [ 77.209567][ T4086] usb usb9: usbfs: process 4086 (syz-executor029) did not claim interface 0 before use [ 77.222168][ T49] vhci_hcd: disconnect device [ 77.222763][ C0] vhci_hcd vhci_hcd.5: rh_queue_status: len 2 tblen 4 [ 77.234630][ T4082] usb usb9: usbdev_do_ioctl: BULK [ 77.235635][ T49] vhci_hcd: stop threads [ 77.245956][ T4082] usb usb9: usbfs: process 4082 (syz-executor029) did not claim interface 0 before use [ 77.250029][ T49] vhci_hcd: release socket [ 77.257392][ T4082] usb usb9: ep1 int-in, length 1, timeout 9 [ 77.264831][ T49] vhci_hcd: disconnect device [ 77.266657][ T4082] vhci_hcd vhci_hcd.0: rh_queue_status: len 1 tblen 1 [ 77.280810][ T49] vhci_hcd: stop threads [ 77.287099][ C1] ================================================================== [ 77.291224][ T49] vhci_hcd: release socket [ 77.297798][ C1] BUG: KASAN: slab-out-of-bounds in usb_hcd_poll_rh_status+0x376/0x780 [ 77.322658][ C1] Write of size 2 at addr ffff8880127f7028 by task syz-executor029/4082 [ 77.331017][ C1] [ 77.333325][ C1] CPU: 1 PID: 4082 Comm: syz-executor029 Not tainted 5.16.0-rc7-syzkaller #0 [ 77.342173][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.352208][ C1] Call Trace: [ 77.355470][ C1] [ 77.358302][ C1] dump_stack_lvl+0xcd/0x134 [ 77.362886][ C1] print_address_description.constprop.0.cold+0x8d/0x320 [ 77.369986][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 77.375514][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 77.381047][ C1] kasan_report.cold+0x83/0xdf [ 77.385799][ C1] ? _raw_spin_lock_irqsave+0x41/0x50 [ 77.391158][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 77.396690][ C1] kasan_check_range+0x13d/0x180 [ 77.401619][ C1] memcpy+0x39/0x60 [ 77.405425][ C1] usb_hcd_poll_rh_status+0x376/0x780 [ 77.411216][ C1] ? usb_create_hcd+0x30/0x30 [ 77.415883][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 77.421410][ C1] call_timer_fn+0x1a5/0x6b0 [ 77.425984][ C1] ? add_timer_on+0x4a0/0x4a0 [ 77.430642][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 77.435568][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 77.440752][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 77.446281][ C1] __run_timers.part.0+0x67c/0xa30 [ 77.451380][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 77.456131][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 77.461315][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 77.466155][ C1] run_timer_softirq+0xb3/0x1d0 [ 77.471008][ C1] __do_softirq+0x29b/0x9c2 [ 77.475498][ C1] __irq_exit_rcu+0x123/0x180 [ 77.480164][ C1] irq_exit_rcu+0x5/0x20 [ 77.484394][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 77.490102][ C1] [ 77.493017][ C1] [ 77.495939][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 77.501907][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 77.508307][ C1] Code: 74 24 10 e8 aa db 15 f8 48 89 ef e8 62 51 16 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 a3 1b 09 f8 65 8b 05 bc a0 bb 76 85 c0 74 0a 5b 5d c3 e8 d0 02 [ 77.528007][ C1] RSP: 0018:ffffc9000283f8b0 EFLAGS: 00000206 [ 77.534066][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1b22571 [ 77.542317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 77.550921][ C1] RBP: ffffffff8ca3bc60 R08: 0000000000000001 R09: 0000000000000001 [ 77.558981][ C1] R10: ffffffff817dd258 R11: 0000000000000000 R12: ffff88801cffc240 [ 77.566953][ C1] R13: ffff88801dba4000 R14: ffff88801dba4180 R15: 0000000000000000 [ 77.575209][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 77.581118][ C1] usb_hcd_submit_urb+0x155c/0x2300 [ 77.586484][ C1] ? try_to_wake_up+0x560/0x15a0 [ 77.591437][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 77.596567][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 77.601421][ C1] ? usb_add_hcd+0x2c0/0x2c0 [ 77.606000][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 77.611796][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 77.617077][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 77.622956][ C1] ? try_to_wake_up+0xfc/0x15a0 [ 77.627803][ C1] usb_submit_urb+0x86d/0x18a0 [ 77.632560][ C1] ? lockdep_init_map_type+0x243/0x7b0 [ 77.638126][ C1] usbfs_start_wait_urb+0x128/0x3d0 [ 77.643436][ C1] ? __mutex_unlock_slowpath+0x218/0x5e0 [ 77.649305][ C1] ? usbfs_blocking_completion+0x40/0x40 [ 77.655241][ C1] ? memset+0x20/0x40 [ 77.659242][ C1] do_proc_bulk+0x535/0xba0 [ 77.664243][ C1] ? processcompl_compat+0x680/0x680 [ 77.669909][ C1] usbdev_ioctl+0x586/0x36c0 [ 77.674675][ C1] ? do_proc_control+0xdd0/0xdd0 [ 77.679715][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 77.685802][ C1] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 77.692508][ C1] ? do_vfs_ioctl+0x132/0x15d0 [ 77.697446][ C1] ? vfs_fileattr_set+0xbe0/0xbe0 [ 77.702590][ C1] ? find_held_lock+0x2d/0x110 [ 77.707354][ C1] ? dump_pagetable.cold+0xc8/0x3d4 [ 77.712814][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 77.717970][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 77.722829][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.729159][ C1] ? do_proc_control+0xdd0/0xdd0 [ 77.734108][ C1] __x64_sys_ioctl+0x193/0x200 [ 77.738878][ C1] do_syscall_64+0x35/0xb0 [ 77.743290][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.749195][ C1] RIP: 0033:0x7fe659509799 [ 77.753690][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.773473][ C1] RSP: 002b:00007fffbcc163b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.782306][ C1] RAX: ffffffffffffffda RBX: 00007fe65954d098 RCX: 00007fe659509799 [ 77.790521][ C1] RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000006 [ 77.798475][ C1] RBP: 00007fffbcc163e0 R08: 00007fffbcc15e30 R09: 0000000000000000 [ 77.806432][ C1] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000012b3a [ 77.816402][ C1] R13: 00007fffbcc163c4 R14: 00007fffbcc163e0 R15: 00007fffbcc163d0 [ 77.824383][ C1] [ 77.827407][ C1] [ 77.829720][ C1] Allocated by task 4082: [ 77.834028][ C1] kasan_save_stack+0x1e/0x50 [ 77.838703][ C1] __kasan_kmalloc+0xa9/0xd0 [ 77.843291][ C1] do_proc_bulk+0x2fc/0xba0 [ 77.847883][ C1] usbdev_ioctl+0x586/0x36c0 [ 77.852479][ C1] __x64_sys_ioctl+0x193/0x200 [ 77.857251][ C1] do_syscall_64+0x35/0xb0 [ 77.861673][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.867616][ C1] [ 77.869934][ C1] The buggy address belongs to the object at ffff8880127f7028 [ 77.869934][ C1] which belongs to the cache kmalloc-8 of size 8 [ 77.883740][ C1] The buggy address is located 0 bytes inside of [ 77.883740][ C1] 8-byte region [ffff8880127f7028, ffff8880127f7030) [ 77.896656][ C1] The buggy address belongs to the page: [ 77.902266][ C1] page:ffffea000049fdc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127f7 [ 77.912399][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.919929][ C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888010c41280 [ 77.928497][ C1] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 77.937058][ C1] page dumped because: kasan: bad access detected [ 77.943444][ C1] page_owner tracks the page as allocated [ 77.949223][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2292076002, free_ts 0 [ 77.964047][ C1] get_page_from_freelist+0xa72/0x2f50 [ 77.969489][ C1] __alloc_pages+0x1b2/0x500 [ 77.974058][ C1] alloc_page_interleave+0x1e/0x200 [ 77.979285][ C1] alloc_pages+0x29f/0x300 [ 77.983685][ C1] new_slab+0x32d/0x4a0 [ 77.987836][ C1] ___slab_alloc+0x918/0xfe0 [ 77.992407][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 77.997765][ C1] __kmalloc+0x2fb/0x340 [ 78.001991][ C1] acpi_ns_internalize_name+0xf2/0x1a1 [ 78.007436][ C1] acpi_ns_get_node_unlocked+0x1d8/0x278 [ 78.013051][ C1] acpi_ns_get_node+0x4b/0x6a [ 78.017708][ C1] acpi_get_handle+0x129/0x211 [ 78.022450][ C1] acpi_has_method+0x6e/0xb0 [ 78.027031][ C1] acpi_is_video_device+0x154/0x210 [ 78.032209][ C1] acpi_init_device_object+0xee0/0x1a60 [ 78.037737][ C1] acpi_add_single_object+0xe4/0x1aa0 [ 78.043091][ C1] page_owner free stack trace missing [ 78.048434][ C1] [ 78.050736][ C1] Memory state around the buggy address: [ 78.056353][ C1] ffff8880127f6f00: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 78.064402][ C1] ffff8880127f6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.072452][ C1] >ffff8880127f7000: fb fc fc fc fc 01 fc fc fc fc fa fc fc fc fc 00 [ 78.080577][ C1] ^ [ 78.085926][ C1] ffff8880127f7080: fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc [ 78.093967][ C1] ffff8880127f7100: fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc fc [ 78.102005][ C1] ================================================================== [ 78.110042][ C1] Disabling lock debugging due to kernel taint [ 78.116165][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 78.122732][ C1] CPU: 1 PID: 4082 Comm: syz-executor029 Tainted: G B 5.16.0-rc7-syzkaller #0 [ 78.132867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.142914][ C1] Call Trace: [ 78.146178][ C1] [ 78.149005][ C1] dump_stack_lvl+0xcd/0x134 [ 78.153850][ C1] panic+0x2b0/0x6dd [ 78.157818][ C1] ? __warn_printk+0xf3/0xf3 [ 78.162573][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 78.168102][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 78.173630][ C1] end_report.cold+0x63/0x6f [ 78.178207][ C1] kasan_report.cold+0x71/0xdf [ 78.182983][ C1] ? _raw_spin_lock_irqsave+0x41/0x50 [ 78.188556][ C1] ? usb_hcd_poll_rh_status+0x376/0x780 [ 78.194109][ C1] kasan_check_range+0x13d/0x180 [ 78.199143][ C1] memcpy+0x39/0x60 [ 78.203139][ C1] usb_hcd_poll_rh_status+0x376/0x780 [ 78.208847][ C1] ? usb_create_hcd+0x30/0x30 [ 78.213533][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 78.219416][ C1] call_timer_fn+0x1a5/0x6b0 [ 78.224112][ C1] ? add_timer_on+0x4a0/0x4a0 [ 78.228802][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 78.233645][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 78.238843][ C1] ? usb_hcd_poll_rh_status+0x780/0x780 [ 78.244384][ C1] __run_timers.part.0+0x67c/0xa30 [ 78.249578][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 78.254604][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 78.260063][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 78.265362][ C1] run_timer_softirq+0xb3/0x1d0 [ 78.270304][ C1] __do_softirq+0x29b/0x9c2 [ 78.275504][ C1] __irq_exit_rcu+0x123/0x180 [ 78.280202][ C1] irq_exit_rcu+0x5/0x20 [ 78.284440][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 78.290069][ C1] [ 78.292990][ C1] [ 78.296082][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 78.302148][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 78.308983][ C1] Code: 74 24 10 e8 aa db 15 f8 48 89 ef e8 62 51 16 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 a3 1b 09 f8 65 8b 05 bc a0 bb 76 85 c0 74 0a 5b 5d c3 e8 d0 02 [ 78.330945][ C1] RSP: 0018:ffffc9000283f8b0 EFLAGS: 00000206 [ 78.337286][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1b22571 [ 78.345481][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 78.353635][ C1] RBP: ffffffff8ca3bc60 R08: 0000000000000001 R09: 0000000000000001 [ 78.361981][ C1] R10: ffffffff817dd258 R11: 0000000000000000 R12: ffff88801cffc240 [ 78.370139][ C1] R13: ffff88801dba4000 R14: ffff88801dba4180 R15: 0000000000000000 [ 78.378462][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 78.383719][ C1] usb_hcd_submit_urb+0x155c/0x2300 [ 78.389255][ C1] ? try_to_wake_up+0x560/0x15a0 [ 78.394272][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 78.399546][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 78.404484][ C1] ? usb_add_hcd+0x2c0/0x2c0 [ 78.409104][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 78.415196][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 78.420412][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 78.427015][ C1] ? try_to_wake_up+0xfc/0x15a0 [ 78.432431][ C1] usb_submit_urb+0x86d/0x18a0 [ 78.437229][ C1] ? lockdep_init_map_type+0x243/0x7b0 [ 78.442691][ C1] usbfs_start_wait_urb+0x128/0x3d0 [ 78.447889][ C1] ? __mutex_unlock_slowpath+0x218/0x5e0 [ 78.453532][ C1] ? usbfs_blocking_completion+0x40/0x40 [ 78.459156][ C1] ? memset+0x20/0x40 [ 78.463131][ C1] do_proc_bulk+0x535/0xba0 [ 78.467620][ C1] ? processcompl_compat+0x680/0x680 [ 78.472889][ C1] usbdev_ioctl+0x586/0x36c0 [ 78.477468][ C1] ? do_proc_control+0xdd0/0xdd0 [ 78.482384][ C1] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 78.488260][ C1] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 78.494483][ C1] ? do_vfs_ioctl+0x132/0x15d0 [ 78.499231][ C1] ? vfs_fileattr_set+0xbe0/0xbe0 [ 78.504242][ C1] ? find_held_lock+0x2d/0x110 [ 78.509003][ C1] ? dump_pagetable.cold+0xc8/0x3d4 [ 78.514184][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 78.519034][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 78.523866][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 78.530087][ C1] ? do_proc_control+0xdd0/0xdd0 [ 78.535002][ C1] __x64_sys_ioctl+0x193/0x200 [ 78.539842][ C1] do_syscall_64+0x35/0xb0 [ 78.544248][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 78.550126][ C1] RIP: 0033:0x7fe659509799 [ 78.554532][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.574205][ C1] RSP: 002b:00007fffbcc163b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.582597][ C1] RAX: ffffffffffffffda RBX: 00007fe65954d098 RCX: 00007fe659509799 [ 78.590545][ C1] RDX: 0000000020000240 RSI: 00000000c0185502 RDI: 0000000000000006 [ 78.598501][ C1] RBP: 00007fffbcc163e0 R08: 00007fffbcc15e30 R09: 0000000000000000 [ 78.606452][ C1] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000012b3a [ 78.614836][ C1] R13: 00007fffbcc163c4 R14: 00007fffbcc163e0 R15: 00007fffbcc163d0 [ 78.622811][ C1] [ 79.700055][ C1] Shutting down cpus with NMI [ 79.705114][ C1] Kernel Offset: disabled [ 79.709424][ C1] Rebooting in 86400 seconds..