program:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0xffff}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x19, &(0x7f0000000140)=@gcm_128={{0x304}, "5f5960d3cc249487", "ba6229417643539612265653d06b684b", "ef9c82a4", "b7a7d657541e2b09"}, 0x28)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x40, @none, 0x3}, 0xe)
r5 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f00000000c0)={0x80000000, 0x10000, 0x47d, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000040)=[{0x10, 0xfe, 0x1}, {0xf, 0x1ff, 0xa}, {0xc, 0x1ff, 0x4e5}, {0x2, 0x101, 0xfc5}, {0x1a, 0x101, 0x1ff}, {0x12, 0x101, 0x9}, {0x3, 0x101}, {0x1, 0x1ff}]})
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "0300a511", "8606ba80", ["d808e7fbbe0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0xffff}, 0x1c) (async)
listen(r1, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) (async)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x19, &(0x7f0000000140)=@gcm_128={{0x304}, "5f5960d3cc249487", "ba6229417643539612265653d06b684b", "ef9c82a4", "b7a7d657541e2b09"}, 0x28) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x40, @none, 0x3}, 0xe) (async)
syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) (async)
ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f00000000c0)={0x80000000, 0x10000, 0x47d, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000040)=[{0x10, 0xfe, 0x1}, {0xf, 0x1ff, 0xa}, {0xc, 0x1ff, 0x4e5}, {0x2, 0x101, 0xfc5}, {0x1a, 0x101, 0x1ff}, {0x12, 0x101, 0x9}, {0x3, 0x101}, {0x1, 0x1ff}]}) (async)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "0300a511", "8606ba80", ["d808e7fbbe0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async)
write(r6, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async)
[ 140.808929][ T5299] Bluetooth: hci0: command tx timeout
[ 141.037176][ T5336] vhci_hcd vhci_hcd.0: remove, state 4
[ 141.040228][ T5336] usb usb7: USB disconnect, device number 1
[ 141.092153][ T173] vhci_hcd vhci_hcd.0: stop threads
[ 141.101459][ T173] vhci_hcd vhci_hcd.0: release socket
[ 141.104418][ T5336] vhci_hcd vhci_hcd.0: USB bus 7 deregistered
[ 141.107834][ T173] vhci_hcd vhci_hcd.0: disconnect device
[ 141.114140][ T173] vhci_hcd vhci_hcd.0: stop threads
[ 141.119294][ T173] vhci_hcd vhci_hcd.0: release socket
[ 141.123999][ T5336] vhci_hcd vhci_hcd.0: remove, state 4
[ 141.127271][ T173] ==================================================================
[ 141.130568][ T173] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x452/0x460
[ 141.134075][ T173] Read of size 4 at addr ffff888034cc46a0 by task kworker/u4:6/173
[ 141.137222][ T173]
[ 141.138260][ T173] CPU: 0 UID: 0 PID: 173 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full)
[ 141.138274][ T173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 141.138281][ T173] Workqueue: usbip_event event_handler
[ 141.138297][ T173] Call Trace:
[ 141.138303][ T173]
[ 141.138308][ T173] dump_stack_lvl+0xe8/0x150
[ 141.138325][ T173] print_address_description+0x55/0x1e0
[ 141.138339][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.138349][ T173] print_report+0x58/0x70
[ 141.138361][ T173] kasan_report+0x117/0x150
[ 141.138375][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.138387][ T173] vhci_cleanup_unlink_list+0x452/0x460
[ 141.138398][ T173] ? kasan_quarantine_put+0xbb/0x1f0
[ 141.138412][ T173] vhci_shutdown_connection+0x2af/0x650
[ 141.138424][ T173] event_handler+0x2a4/0x4b0
[ 141.138434][ T173] ? process_scheduled_works+0xa20/0x14e0
[ 141.138447][ T173] process_scheduled_works+0xa8e/0x14e0
[ 141.138464][ T173] ? __pfx_process_scheduled_works+0x10/0x10
[ 141.138476][ T173] ? assign_work+0x3cf/0x5d0
[ 141.138488][ T173] worker_thread+0xa47/0xfb0
[ 141.138505][ T173] kthread+0x388/0x470
[ 141.138519][ T173] ? __pfx_worker_thread+0x10/0x10
[ 141.138530][ T173] ? __pfx_kthread+0x10/0x10
[ 141.138542][ T173] ret_from_fork+0x514/0xb70
[ 141.138557][ T173] ? __pfx_ret_from_fork+0x10/0x10
[ 141.138569][ T173] ? __switch_to+0xc89/0x1420
[ 141.138581][ T173] ? __pfx_kthread+0x10/0x10
[ 141.138593][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.138605][ T173]
[ 141.138608][ T173]
[ 141.200524][ T173] Allocated by task 1:
[ 141.202183][ T173] kasan_save_track+0x3e/0x80
[ 141.204162][ T173] __kasan_kmalloc+0x93/0xb0
[ 141.206017][ T173] __kmalloc_noprof+0x375/0x720
[ 141.207977][ T173] __usb_create_hcd+0x67/0x900
[ 141.209870][ T173] vhci_hcd_probe+0x1e6/0x3e0
[ 141.211851][ T173] platform_probe+0xf9/0x190
[ 141.213645][ T173] really_probe+0x254/0xae0
[ 141.215455][ T173] __driver_probe_device+0x1e8/0x360
[ 141.217609][ T173] driver_probe_device+0x4f/0x240
[ 141.219741][ T173] __device_attach_driver+0x270/0x410
[ 141.221966][ T173] bus_for_each_drv+0x258/0x2f0
[ 141.223874][ T173] __device_attach+0x2c4/0x450
[ 141.225809][ T173] device_initial_probe+0xa1/0xd0
[ 141.227759][ T173] bus_probe_device+0x12a/0x220
[ 141.229663][ T173] device_add+0x7d7/0xb80
[ 141.231478][ T173] platform_device_add+0x4bd/0x860
[ 141.233670][ T173] platform_device_register_full+0x62d/0x710
[ 141.236190][ T173] vhci_hcd_init+0x227/0x360
[ 141.238194][ T173] do_one_initcall+0x250/0x870
[ 141.240252][ T173] do_initcall_level+0x10a/0x1a0
[ 141.242247][ T173] do_initcalls+0x59/0xa0
[ 141.243975][ T173] kernel_init_freeable+0x29d/0x3e0
[ 141.245934][ T173] kernel_init+0x1d/0x1d0
[ 141.247676][ T173] ret_from_fork+0x514/0xb70
[ 141.249696][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.251737][ T173]
[ 141.252794][ T173] Freed by task 5336:
[ 141.254429][ T173] kasan_save_track+0x3e/0x80
[ 141.256301][ T173] kasan_save_free_info+0x40/0x50
[ 141.258255][ T173] __kasan_slab_free+0x5c/0x80
[ 141.260116][ T173] kfree+0x1c5/0x640
[ 141.261781][ T173] vhci_hcd_remove+0x9e/0x110
[ 141.263790][ T173] device_release_driver_internal+0x48b/0x880
[ 141.266439][ T173] unbind_store+0x1a1/0x1d0
[ 141.268348][ T173] kernfs_fop_write_iter+0x3a4/0x540
[ 141.270648][ T173] vfs_write+0x612/0xba0
[ 141.272455][ T173] ksys_write+0x150/0x270
[ 141.274185][ T173] do_syscall_64+0x174/0x580
[ 141.276136][ T173] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.278652][ T173]
[ 141.279688][ T173] Last potentially related work creation:
[ 141.282106][ T173] kasan_save_stack+0x3e/0x60
[ 141.284070][ T173] kasan_record_aux_stack+0xbd/0xd0
[ 141.286192][ T173] insert_work+0x3d/0x330
[ 141.287977][ T173] __queue_work+0xcd8/0x10a0
[ 141.289785][ T173] queue_work_on+0x106/0x1d0
[ 141.291709][ T173] unlink1+0x344/0x3e0
[ 141.293450][ T173] usb_hcd_unlink_urb+0xe6/0x1e0
[ 141.295590][ T173] usb_kill_urb+0x10b/0x2f0
[ 141.297472][ T173] hub_quiesce+0x211/0x330
[ 141.299496][ T173] hub_suspend+0x904/0xad0
[ 141.301404][ T173] usb_suspend_both+0x285/0x1040
[ 141.303482][ T173] usb_runtime_suspend+0x58/0x110
[ 141.305508][ T173] __rpm_callback+0x2c7/0x950
[ 141.307430][ T173] rpm_suspend+0x8a0/0x17b0
[ 141.309363][ T173] __pm_runtime_suspend+0x12f/0x1a0
[ 141.311532][ T173] usb_new_device+0xadf/0x1620
[ 141.313609][ T173] register_root_hub+0x250/0x5c0
[ 141.315769][ T173] usb_add_hcd+0xac7/0xf80
[ 141.317710][ T173] vhci_hcd_probe+0x1fa/0x3e0
[ 141.319747][ T173] platform_probe+0xf9/0x190
[ 141.321734][ T173] really_probe+0x254/0xae0
[ 141.323677][ T173] __driver_probe_device+0x1e8/0x360
[ 141.325806][ T173] driver_probe_device+0x4f/0x240
[ 141.327848][ T173] __device_attach_driver+0x270/0x410
[ 141.330054][ T173] bus_for_each_drv+0x258/0x2f0
[ 141.332179][ T173] __device_attach+0x2c4/0x450
[ 141.334155][ T173] device_initial_probe+0xa1/0xd0
[ 141.336193][ T173] bus_probe_device+0x12a/0x220
[ 141.338093][ T173] device_add+0x7d7/0xb80
[ 141.339882][ T173] platform_device_add+0x4bd/0x860
[ 141.342085][ T173] platform_device_register_full+0x62d/0x710
[ 141.344671][ T173] vhci_hcd_init+0x227/0x360
[ 141.346716][ T173] do_one_initcall+0x250/0x870
[ 141.348836][ T173] do_initcall_level+0x10a/0x1a0
[ 141.350982][ T173] do_initcalls+0x59/0xa0
[ 141.352841][ T173] kernel_init_freeable+0x29d/0x3e0
[ 141.355005][ T173] kernel_init+0x1d/0x1d0
[ 141.356814][ T173] ret_from_fork+0x514/0xb70
[ 141.358963][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.361006][ T173]
[ 141.362041][ T173] Second to last potentially related work creation:
[ 141.364715][ T173] kasan_save_stack+0x3e/0x60
[ 141.366730][ T173] kasan_record_aux_stack+0xbd/0xd0
[ 141.369117][ T173] insert_work+0x3d/0x330
[ 141.371457][ T173] __queue_work+0xcd8/0x10a0
[ 141.373585][ T173] queue_work_on+0x106/0x1d0
[ 141.375557][ T173] usb_hcd_submit_urb+0xa3b/0x1b60
[ 141.377869][ T173] usb_start_wait_urb+0x13f/0x5b0
[ 141.380047][ T173] usb_control_msg+0x234/0x3e0
[ 141.382195][ T173] hub_suspend+0x891/0xad0
[ 141.383975][ T173] usb_suspend_both+0x285/0x1040
[ 141.386057][ T173] usb_runtime_suspend+0x58/0x110
[ 141.388420][ T173] __rpm_callback+0x2c7/0x950
[ 141.390381][ T173] rpm_suspend+0x8a0/0x17b0
[ 141.392282][ T173] __pm_runtime_suspend+0x12f/0x1a0
[ 141.394419][ T173] usb_new_device+0xadf/0x1620
[ 141.396471][ T173] register_root_hub+0x250/0x5c0
[ 141.398518][ T173] usb_add_hcd+0xac7/0xf80
[ 141.400432][ T173] vhci_hcd_probe+0x1fa/0x3e0
[ 141.402461][ T173] platform_probe+0xf9/0x190
[ 141.404437][ T173] really_probe+0x254/0xae0
[ 141.406415][ T173] __driver_probe_device+0x1e8/0x360
[ 141.408572][ T173] driver_probe_device+0x4f/0x240
[ 141.410690][ T173] __device_attach_driver+0x270/0x410
[ 141.412992][ T173] bus_for_each_drv+0x258/0x2f0
[ 141.414949][ T173] __device_attach+0x2c4/0x450
[ 141.417036][ T173] device_initial_probe+0xa1/0xd0
[ 141.419223][ T173] bus_probe_device+0x12a/0x220
[ 141.421329][ T173] device_add+0x7d7/0xb80
[ 141.423308][ T173] platform_device_add+0x4bd/0x860
[ 141.425417][ T173] platform_device_register_full+0x62d/0x710
[ 141.428017][ T173] vhci_hcd_init+0x227/0x360
[ 141.429883][ T173] do_one_initcall+0x250/0x870
[ 141.431853][ T173] do_initcall_level+0x10a/0x1a0
[ 141.433902][ T173] do_initcalls+0x59/0xa0
[ 141.435588][ T173] kernel_init_freeable+0x29d/0x3e0
[ 141.437745][ T173] kernel_init+0x1d/0x1d0
[ 141.439566][ T173] ret_from_fork+0x514/0xb70
[ 141.441491][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.443398][ T173]
[ 141.444420][ T173] The buggy address belongs to the object at ffff888034cc4000
[ 141.444420][ T173] which belongs to the cache kmalloc-8k of size 8192
[ 141.450011][ T173] The buggy address is located 1696 bytes inside of
[ 141.450011][ T173] freed 8192-byte region [ffff888034cc4000, ffff888034cc6000)
[ 141.455485][ T173]
[ 141.456430][ T173] The buggy address belongs to the physical page:
[ 141.459099][ T173] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34cc0
[ 141.462456][ T173] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 141.465810][ T173] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 141.468979][ T173] page_type: f5(slab)
[ 141.470685][ T173] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 141.474204][ T173] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 141.477805][ T173] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000
[ 141.481316][ T173] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 141.484773][ T173] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 141.488144][ T173] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 141.491693][ T173] page dumped because: kasan: bad access detected
[ 141.494342][ T173] page_owner tracks the page as allocated
[ 141.496660][ T173] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27868753741, free_ts 27773872146
[ 141.505051][ T173] post_alloc_hook+0x1f9/0x250
[ 141.506927][ T173] get_page_from_freelist+0x21fa/0x2270
[ 141.509638][ T173] __alloc_frozen_pages_noprof+0x18d/0x380
[ 141.512091][ T173] allocate_slab+0x79/0x5e0
[ 141.514156][ T173] refill_objects+0x2d5/0x350
[ 141.516064][ T173] __pcs_replace_empty_main+0x2bf/0x6b0
[ 141.518519][ T173] __kmalloc_noprof+0x485/0x720
[ 141.520550][ T173] __usb_create_hcd+0x67/0x900
[ 141.522637][ T173] vhci_hcd_probe+0x1e6/0x3e0
[ 141.524631][ T173] platform_probe+0xf9/0x190
[ 141.526540][ T173] really_probe+0x254/0xae0
[ 141.528563][ T173] __driver_probe_device+0x1e8/0x360
[ 141.530749][ T173] driver_probe_device+0x4f/0x240
[ 141.532882][ T173] __device_attach_driver+0x270/0x410
[ 141.535106][ T173] bus_for_each_drv+0x258/0x2f0
[ 141.537150][ T173] __device_attach+0x2c4/0x450
[ 141.539268][ T173] page last free pid 10 tgid 10 stack trace:
[ 141.541698][ T173] free_pages_prepare+0x960/0xa60
[ 141.543740][ T173] __free_contig_range_common+0x174/0x340
[ 141.546007][ T173] free_pages_bulk+0x48/0x120
[ 141.547950][ T173] vfree+0x224/0x4a0
[ 141.549609][ T173] delayed_vfree_work+0x55/0x80
[ 141.551691][ T173] process_scheduled_works+0xa8e/0x14e0
[ 141.554051][ T173] worker_thread+0xa47/0xfb0
[ 141.555934][ T173] kthread+0x388/0x470
[ 141.557635][ T173] ret_from_fork+0x514/0xb70
[ 141.559619][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.561550][ T173]
[ 141.562548][ T173] Memory state around the buggy address:
[ 141.564871][ T173] ffff888034cc4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.568181][ T173] ffff888034cc4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.571468][ T173] >ffff888034cc4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.574666][ T173] ^
[ 141.576780][ T173] ffff888034cc4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.580450][ T173] ffff888034cc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.583918][ T173] ==================================================================
[ 141.588033][ T5336] usb usb6: USB disconnect, device number 1
[ 141.607824][ T5336] vhci_hcd vhci_hcd.0: USB bus 6 deregistered
[ 141.644981][ T173] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 141.648179][ T173] CPU: 0 UID: 0 PID: 173 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full)
[ 141.652207][ T173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 141.656178][ T173] Workqueue: usbip_event event_handler
[ 141.658363][ T173] Call Trace:
[ 141.659642][ T173]
[ 141.660744][ T173] vpanic+0x56c/0xa60
[ 141.662286][ T173] ? __pfx_vpanic+0x10/0x10
[ 141.664196][ T173] ? __pfx___schedule+0x10/0x10
[ 141.666209][ T173] panic+0xc5/0xd0
[ 141.667816][ T173] ? __pfx_panic+0x10/0x10
[ 141.669757][ T173] ? preempt_schedule_thunk+0x16/0x40
[ 141.672431][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.675047][ T173] check_panic_on_warn+0x89/0xb0
[ 141.677149][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.679521][ T173] end_report+0x73/0x170
[ 141.681402][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.683854][ T173] kasan_report+0x128/0x150
[ 141.686179][ T173] ? vhci_cleanup_unlink_list+0x452/0x460
[ 141.689036][ T173] vhci_cleanup_unlink_list+0x452/0x460
[ 141.691654][ T173] ? kasan_quarantine_put+0xbb/0x1f0
[ 141.693794][ T173] vhci_shutdown_connection+0x2af/0x650
[ 141.696074][ T173] event_handler+0x2a4/0x4b0
[ 141.698128][ T173] ? process_scheduled_works+0xa20/0x14e0
[ 141.700440][ T173] process_scheduled_works+0xa8e/0x14e0
[ 141.702665][ T173] ? __pfx_process_scheduled_works+0x10/0x10
[ 141.704932][ T173] ? assign_work+0x3cf/0x5d0
[ 141.706998][ T173] worker_thread+0xa47/0xfb0
[ 141.708962][ T173] kthread+0x388/0x470
[ 141.710566][ T173] ? __pfx_worker_thread+0x10/0x10
[ 141.712741][ T173] ? __pfx_kthread+0x10/0x10
[ 141.714690][ T173] ret_from_fork+0x514/0xb70
[ 141.716650][ T173] ? __pfx_ret_from_fork+0x10/0x10
[ 141.718796][ T173] ? __switch_to+0xc89/0x1420
[ 141.720562][ T173] ? __pfx_kthread+0x10/0x10
[ 141.722551][ T173] ret_from_fork_asm+0x1a/0x30
[ 141.724551][ T173]
[ 141.726387][ T173] Kernel Offset: disabled
[ 141.728157][ T173] Rebooting in 86400 seconds..