[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 13.762528][ C1] random: crng init done [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.983576][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.193628][ T83] usb 1-1: config index 0 descriptor too short (expected 52759, got 27) [ 25.202067][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 184, changing to 11 [ 25.213246][ T83] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 25.222459][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.232057][ T83] usb 1-1: config 0 descriptor?? [ 25.493569][ T83] radio-si470x 1-1:0.0: DeviceID=0xfa8f ChipID=0xcf81 [ 25.713596][ T83] radio-si470x 1-1:0.0: software version 250, hardware version 143 executing program [ 25.933590][ T83] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 25.953537][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 25.960202][ T83] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 25.969081][ T83] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 25.976079][ C1] ================================================================== [ 25.976116][ C1] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x27/0xbe [ 25.976123][ C1] Read of size 8 at addr ffff8881cd624ad0 by task kworker/1:2/83 [ 25.976125][ C1] [ 25.976134][ C1] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.6.0-rc5-syzkaller #0 [ 25.976138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.976148][ C1] Workqueue: usb_hub_wq hub_event [ 25.976152][ C1] Call Trace: [ 25.976155][ C1] [ 25.976164][ C1] dump_stack+0xef/0x16e [ 25.976172][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.976179][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.976189][ C1] print_address_description.constprop.0.cold+0xd3/0x314 [ 25.976197][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.976204][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.976211][ C1] __kasan_report.cold+0x37/0x77 [ 25.976218][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.976225][ C1] kasan_report+0xe/0x20 [ 25.976233][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 25.976241][ C1] ? trace_hardirqs_off+0x50/0x200 [ 25.976249][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 25.976256][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 25.976264][ C1] dummy_timer+0x1258/0x32ae [ 25.976273][ C1] ? __lock_acquire+0x145e/0x3b60 [ 25.976279][ C1] ? __lock_acquire+0x145e/0x3b60 [ 25.976289][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 25.976296][ C1] ? mark_held_locks+0xe0/0xe0 [ 25.976303][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.976312][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.976319][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.976330][ C1] call_timer_fn+0x195/0x6f0 [ 25.976338][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.976347][ C1] ? msleep_interruptible+0x130/0x130 [ 25.976354][ C1] ? mark_held_locks+0x9f/0xe0 [ 25.976363][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.976371][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 25.976379][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.976389][ C1] run_timer_softirq+0x5f9/0x1500 [ 25.976395][ C1] ? add_timer+0x7a0/0x7a0 [ 25.976403][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.976410][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.976419][ C1] ? mark_held_locks+0x9f/0xe0 [ 25.976429][ C1] __do_softirq+0x21e/0x950 [ 25.976447][ C1] irq_exit+0x178/0x1a0 [ 25.976455][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 25.976463][ C1] apic_timer_interrupt+0xf/0x20 [ 25.976466][ C1] [ 25.976475][ C1] RIP: 0010:console_unlock+0xa6b/0xca0 [ 25.976482][ C1] Code: 00 89 ee 48 c7 c7 60 43 14 87 e8 10 c3 03 00 65 ff 0d a1 ef d8 7e e9 b5 f9 ff ff e8 af 36 16 00 e8 aa 7f 1b 00 ff 74 24 30 9d fd fd ff ff e8 9b 36 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 25.976487][ C1] RSP: 0018:ffff8881d8a7f178 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 25.976494][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 25.976498][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881d8d751cc [ 25.976503][ C1] RBP: 0000000000000000 R08: ffff8881d8d74980 R09: fffffbfff1266e85 [ 25.976508][ C1] R10: fffffbfff1266e84 R11: ffffffff89337427 R12: ffffffff82a07730 [ 25.976512][ C1] R13: ffffffff874d4810 R14: 000000000000004c R15: dffffc0000000000 [ 25.976521][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 25.976529][ C1] vprintk_emit+0x171/0x3d0 [ 25.976537][ C1] vprintk_func+0x75/0x113 [ 25.976544][ C1] printk+0xba/0xed [ 25.976551][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 25.976559][ C1] really_probe.cold+0x88/0x1fd [ 25.976566][ C1] driver_probe_device+0x223/0x350 [ 25.976573][ C1] __device_attach_driver+0x1d1/0x290 [ 25.976580][ C1] ? driver_allows_async_probing+0x160/0x160 [ 25.976588][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.976595][ C1] ? bus_rescan_devices+0x20/0x20 [ 25.976603][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.976609][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 25.976616][ C1] __device_attach+0x217/0x390 [ 25.976622][ C1] ? device_bind_driver+0xd0/0xd0 [ 25.976629][ C1] bus_probe_device+0x1e4/0x290 [ 25.976636][ C1] device_add+0x1459/0x1bf0 [ 25.976643][ C1] ? wait_for_completion+0x3c0/0x3c0 [ 25.976650][ C1] ? device_link_remove+0x110/0x110 [ 25.976657][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.976666][ C1] usb_set_configuration+0xe47/0x17d0 [ 25.976675][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 25.976682][ C1] usb_probe_device+0xd9/0x230 [ 25.976689][ C1] ? usb_suspend+0x5f0/0x5f0 [ 25.976695][ C1] really_probe+0x290/0xac0 [ 25.976702][ C1] driver_probe_device+0x223/0x350 [ 25.976709][ C1] __device_attach_driver+0x1d1/0x290 [ 25.976716][ C1] ? driver_allows_async_probing+0x160/0x160 [ 25.976723][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.976730][ C1] ? bus_rescan_devices+0x20/0x20 [ 25.976737][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.976744][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 25.976751][ C1] __device_attach+0x217/0x390 [ 25.976757][ C1] ? device_bind_driver+0xd0/0xd0 [ 25.976764][ C1] bus_probe_device+0x1e4/0x290 [ 25.976770][ C1] device_add+0x1459/0x1bf0 [ 25.976778][ C1] ? device_link_remove+0x110/0x110 [ 25.976785][ C1] usb_new_device.cold+0x540/0xcd0 [ 25.976791][ C1] hub_event+0x21cb/0x4300 [ 25.976798][ C1] ? hub_port_debounce+0x350/0x350 [ 25.976804][ C1] ? find_held_lock+0x2d/0x110 [ 25.976811][ C1] ? mark_held_locks+0xe0/0xe0 [ 25.976818][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.976825][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.976834][ C1] process_one_work+0x94b/0x1620 [ 25.976842][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 25.976849][ C1] ? do_raw_spin_lock+0x129/0x290 [ 25.976857][ C1] worker_thread+0x96/0xe20 [ 25.976864][ C1] ? process_one_work+0x1620/0x1620 [ 25.976871][ C1] kthread+0x318/0x420 [ 25.976878][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 25.976885][ C1] ret_from_fork+0x24/0x30 [ 25.976887][ C1] [ 25.976891][ C1] Allocated by task 83: [ 25.976898][ C1] save_stack+0x1b/0x80 [ 25.976905][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 25.976912][ C1] si470x_usb_driver_probe+0x51/0xf50 [ 25.976919][ C1] usb_probe_interface+0x310/0x800 [ 25.976924][ C1] really_probe+0x290/0xac0 [ 25.976930][ C1] driver_probe_device+0x223/0x350 [ 25.976936][ C1] __device_attach_driver+0x1d1/0x290 [ 25.976943][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.976949][ C1] __device_attach+0x217/0x390 [ 25.976954][ C1] bus_probe_device+0x1e4/0x290 [ 25.976960][ C1] device_add+0x1459/0x1bf0 [ 25.976967][ C1] usb_set_configuration+0xe47/0x17d0 [ 25.976974][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 25.976981][ C1] usb_probe_device+0xd9/0x230 [ 25.976986][ C1] really_probe+0x290/0xac0 [ 25.976992][ C1] driver_probe_device+0x223/0x350 [ 25.976998][ C1] __device_attach_driver+0x1d1/0x290 [ 25.977005][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.977011][ C1] __device_attach+0x217/0x390 [ 25.977016][ C1] bus_probe_device+0x1e4/0x290 [ 25.977022][ C1] device_add+0x1459/0x1bf0 [ 25.977028][ C1] usb_new_device.cold+0x540/0xcd0 [ 25.977034][ C1] hub_event+0x21cb/0x4300 [ 25.977040][ C1] process_one_work+0x94b/0x1620 [ 25.977048][ C1] worker_thread+0x96/0xe20 [ 25.977058][ C1] kthread+0x318/0x420 [ 25.977069][ C1] ret_from_fork+0x24/0x30 [ 25.977073][ C1] [ 25.977079][ C1] Freed by task 83: [ 25.977091][ C1] save_stack+0x1b/0x80 [ 25.977104][ C1] __kasan_slab_free+0x117/0x160 [ 25.977115][ C1] kfree+0xd5/0x300 [ 25.977124][ C1] si470x_usb_driver_probe+0xb27/0xf50 [ 25.977131][ C1] usb_probe_interface+0x310/0x800 [ 25.977137][ C1] really_probe+0x290/0xac0 [ 25.977143][ C1] driver_probe_device+0x223/0x350 [ 25.977149][ C1] __device_attach_driver+0x1d1/0x290 [ 25.977156][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.977161][ C1] __device_attach+0x217/0x390 [ 25.977167][ C1] bus_probe_device+0x1e4/0x290 [ 25.977173][ C1] device_add+0x1459/0x1bf0 [ 25.977180][ C1] usb_set_configuration+0xe47/0x17d0 [ 25.977187][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 25.977193][ C1] usb_probe_device+0xd9/0x230 [ 25.977199][ C1] really_probe+0x290/0xac0 [ 25.977205][ C1] driver_probe_device+0x223/0x350 [ 25.977211][ C1] __device_attach_driver+0x1d1/0x290 [ 25.977218][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.977223][ C1] __device_attach+0x217/0x390 [ 25.977229][ C1] bus_probe_device+0x1e4/0x290 [ 25.977235][ C1] device_add+0x1459/0x1bf0 [ 25.977241][ C1] usb_new_device.cold+0x540/0xcd0 [ 25.977247][ C1] hub_event+0x21cb/0x4300 [ 25.977253][ C1] process_one_work+0x94b/0x1620 [ 25.977260][ C1] worker_thread+0x96/0xe20 [ 25.977265][ C1] kthread+0x318/0x420 [ 25.977272][ C1] ret_from_fork+0x24/0x30 [ 25.977273][ C1] [ 25.977279][ C1] The buggy address belongs to the object at ffff8881cd624000 [ 25.977279][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 25.977286][ C1] The buggy address is located 2768 bytes inside of [ 25.977286][ C1] 4096-byte region [ffff8881cd624000, ffff8881cd625000) [ 25.977288][ C1] The buggy address belongs to the page: [ 25.977296][ C1] page:ffffea0007358800 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 25.977303][ C1] flags: 0x200000000010200(slab|head) [ 25.977313][ C1] raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881da00c280 [ 25.977321][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 25.977324][ C1] page dumped because: kasan: bad access detected [ 25.977326][ C1] [ 25.977329][ C1] Memory state around the buggy address: [ 25.977335][ C1] ffff8881cd624980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.977340][ C1] ffff8881cd624a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.977346][ C1] >ffff8881cd624a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.977349][ C1] ^ [ 25.977354][ C1] ffff8881cd624b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.977360][ C1] ffff8881cd624b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.977363][ C1] ================================================================== [ 25.977365][ C1] Disabling lock debugging due to kernel taint [ 25.977369][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 25.977376][ C1] CPU: 1 PID: 83 Comm: kworker/1:2 Tainted: G B 5.6.0-rc5-syzkaller #0 [ 25.977380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.977386][ C1] Workqueue: usb_hub_wq hub_event [ 25.977389][ C1] Call Trace: [ 25.977391][ C1] [ 25.977397][ C1] dump_stack+0xef/0x16e [ 25.977403][ C1] panic+0x2aa/0x6e1 [ 25.977409][ C1] ? add_taint.cold+0x16/0x16 [ 25.977416][ C1] ? print_shadow_for_address+0xb8/0x114 [ 25.977424][ C1] ? trace_hardirqs_off+0x50/0x200 [ 25.977430][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.977441][ C1] end_report+0x43/0x49 [ 25.977448][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.977455][ C1] __kasan_report.cold+0x55/0x77 [ 25.977462][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 25.977468][ C1] kasan_report+0xe/0x20 [ 25.977475][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 25.977482][ C1] ? trace_hardirqs_off+0x50/0x200 [ 25.977488][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 25.977495][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 25.977502][ C1] dummy_timer+0x1258/0x32ae [ 25.977508][ C1] ? __lock_acquire+0x145e/0x3b60 [ 25.977514][ C1] ? __lock_acquire+0x145e/0x3b60 [ 25.977522][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 25.977528][ C1] ? mark_held_locks+0xe0/0xe0 [ 25.977535][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.977542][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.977548][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.977554][ C1] call_timer_fn+0x195/0x6f0 [ 25.977561][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.977567][ C1] ? msleep_interruptible+0x130/0x130 [ 25.977573][ C1] ? mark_held_locks+0x9f/0xe0 [ 25.977579][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.977585][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 25.977592][ C1] ? dummy_udc_probe+0x930/0x930 [ 25.977598][ C1] run_timer_softirq+0x5f9/0x1500 [ 25.977604][ C1] ? add_timer+0x7a0/0x7a0 [ 25.977611][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.977617][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.977623][ C1] ? mark_held_locks+0x9f/0xe0 [ 25.977630][ C1] __do_softirq+0x21e/0x950 [ 25.977636][ C1] irq_exit+0x178/0x1a0 [ 25.977644][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 25.977650][ C1] apic_timer_interrupt+0xf/0x20 [ 25.977653][ C1] [ 25.977660][ C1] RIP: 0010:console_unlock+0xa6b/0xca0 [ 25.977667][ C1] Code: 00 89 ee 48 c7 c7 60 43 14 87 e8 10 c3 03 00 65 ff 0d a1 ef d8 7e e9 b5 f9 ff ff e8 af 36 16 00 e8 aa 7f 1b 00 ff 74 24 30 9d fd fd ff ff e8 9b 36 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 25.977670][ C1] RSP: 0018:ffff8881d8a7f178 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 25.977676][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 25.977680][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881d8d751cc [ 25.977684][ C1] RBP: 0000000000000000 R08: ffff8881d8d74980 R09: fffffbfff1266e85 [ 25.977688][ C1] R10: fffffbfff1266e84 R11: ffffffff89337427 R12: ffffffff82a07730 [ 25.977692][ C1] R13: ffffffff874d4810 R14: 000000000000004c R15: dffffc0000000000 [ 25.977698][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 25.977709][ C1] vprintk_emit+0x171/0x3d0 [ 25.977716][ C1] vprintk_func+0x75/0x113 [ 25.977722][ C1] printk+0xba/0xed [ 25.977730][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 25.977739][ C1] really_probe.cold+0x88/0x1fd [ 25.977745][ C1] driver_probe_device+0x223/0x350 [ 25.977751][ C1] __device_attach_driver+0x1d1/0x290 [ 25.977763][ C1] ? driver_allows_async_probing+0x160/0x160 [ 25.977777][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.977787][ C1] ? bus_rescan_devices+0x20/0x20 [ 25.977793][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.977802][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 25.977808][ C1] __device_attach+0x217/0x390 [ 25.977814][ C1] ? device_bind_driver+0xd0/0xd0 [ 25.977820][ C1] bus_probe_device+0x1e4/0x290 [ 25.977826][ C1] device_add+0x1459/0x1bf0 [ 25.977832][ C1] ? wait_for_completion+0x3c0/0x3c0 [ 25.977839][ C1] ? device_link_remove+0x110/0x110 [ 25.977845][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.977852][ C1] usb_set_configuration+0xe47/0x17d0 [ 25.977860][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 25.977866][ C1] usb_probe_device+0xd9/0x230 [ 25.977873][ C1] ? usb_suspend+0x5f0/0x5f0 [ 25.977878][ C1] really_probe+0x290/0xac0 [ 25.977885][ C1] driver_probe_device+0x223/0x350 [ 25.977891][ C1] __device_attach_driver+0x1d1/0x290 [ 25.977897][ C1] ? driver_allows_async_probing+0x160/0x160 [ 25.977904][ C1] bus_for_each_drv+0x162/0x1e0 [ 25.977911][ C1] ? bus_rescan_devices+0x20/0x20 [ 25.977917][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.977924][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 25.977929][ C1] __device_attach+0x217/0x390 [ 25.977935][ C1] ? device_bind_driver+0xd0/0xd0 [ 25.977941][ C1] bus_probe_device+0x1e4/0x290 [ 25.977948][ C1] device_add+0x1459/0x1bf0 [ 25.977955][ C1] ? device_link_remove+0x110/0x110 [ 25.977961][ C1] usb_new_device.cold+0x540/0xcd0 [ 25.977966][ C1] hub_event+0x21cb/0x4300 [ 25.977973][ C1] ? hub_port_debounce+0x350/0x350 [ 25.977979][ C1] ? find_held_lock+0x2d/0x110 [ 25.977985][ C1] ? mark_held_locks+0xe0/0xe0 [ 25.977992][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.977998][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.978005][ C1] process_one_work+0x94b/0x1620 [ 25.978012][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 25.978019][ C1] ? do_raw_spin_lock+0x129/0x290 [ 25.978025][ C1] worker_thread+0x96/0xe20 [ 25.978032][ C1] ? process_one_work+0x1620/0x1620 [ 25.978038][ C1] kthread+0x318/0x420 [ 25.978045][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 25.978051][ C1] ret_from_fork+0x24/0x30 [ 25.978766][ C1] Kernel Offset: disabled [ 27.559562][ C1] Rebooting in 86400 seconds..