Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.865912][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.105685][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 28.225807][ T21] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 28.234184][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.244628][ T21] usb 1-1: config 0 has no interface number 0 [ 28.250879][ T21] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 28.262181][ T21] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08 [ 28.271252][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.280497][ T21] usb 1-1: config 0 descriptor?? [ 28.535796][ T21] radio-si470x 1-1:0.128: DeviceID=0xb82e ChipID=0xd281 [ 28.755786][ T21] radio-si470x 1-1:0.128: software version 184, hardware version 46 tun: can't open /dev/net/tun: please enable CONFIG_TUN=y otherwise fuzzing or reproducing might not work as intended [ 28.975729][ T21] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71 [ 28.995681][ C1] radio-si470x 1-1:0.128: non-zero urb status (-71) [ 29.002995][ T21] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71 [ 29.012694][ T21] radio-si470x: probe of 1-1:0.128 failed with error -22 [ 29.019939][ C1] ================================================================== [ 29.019979][ C1] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x27/0xbe [ 29.019986][ C1] Read of size 8 at addr ffff8881d52370b0 by task kworker/1:1/21 [ 29.019988][ C1] [ 29.019996][ C1] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.3.0-rc2+ #25 [ 29.020001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.020012][ C1] Workqueue: usb_hub_wq hub_event [ 29.020017][ C1] Call Trace: [ 29.020021][ C1] [ 29.020029][ C1] dump_stack+0xca/0x13e [ 29.020037][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.020044][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.020053][ C1] print_address_description+0x6a/0x32c [ 29.020060][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.020067][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.020073][ C1] __kasan_report.cold+0x1a/0x33 [ 29.020083][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.020098][ C1] kasan_report+0xe/0x12 [ 29.020106][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 29.020113][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 29.020120][ C1] __usb_hcd_giveback_urb+0x1f2/0x470 [ 29.020127][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 29.020135][ C1] dummy_timer+0x120f/0x2fa2 [ 29.020144][ C1] ? __lock_acquire+0x145e/0x3b50 [ 29.020150][ C1] ? find_held_lock+0x2d/0x110 [ 29.020158][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 29.020165][ C1] ? mark_held_locks+0xe0/0xe0 [ 29.020171][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 29.020177][ C1] ? lock_acquire+0x127/0x320 [ 29.020184][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.020192][ C1] call_timer_fn+0x179/0x650 [ 29.020199][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.020205][ C1] ? msleep_interruptible+0x130/0x130 [ 29.020212][ C1] ? do_raw_spin_lock+0x11a/0x280 [ 29.020223][ C1] ? mark_held_locks+0x9f/0xe0 [ 29.020231][ C1] ? _raw_spin_unlock_irq+0x24/0x30 [ 29.020237][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.020244][ C1] run_timer_softirq+0x5cc/0x14b0 [ 29.020250][ C1] ? add_timer+0x7a0/0x7a0 [ 29.020256][ C1] ? mark_lock+0xbc/0x1130 [ 29.020263][ C1] __do_softirq+0x221/0x912 [ 29.020271][ C1] irq_exit+0x178/0x1a0 [ 29.020279][ C1] smp_apic_timer_interrupt+0x12f/0x500 [ 29.020286][ C1] apic_timer_interrupt+0xf/0x20 [ 29.020289][ C1] [ 29.020297][ C1] RIP: 0010:console_unlock+0xa2a/0xc40 [ 29.020305][ C1] Code: 00 89 ee 48 c7 c7 20 88 d3 86 e8 81 ad 03 00 65 ff 0d 72 a1 d9 7e e9 db f9 ff ff e8 70 a1 15 00 e8 1b cb 1a 00 ff 74 24 30 9d 18 fe ff ff e8 5c a1 15 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 29.020309][ C1] RSP: 0018:ffff8881da2f7200 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 29.020316][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 29.020320][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881da236844 [ 29.020325][ C1] RBP: 0000000000000000 R08: ffff8881da236000 R09: fffffbfff11acd91 [ 29.020329][ C1] R10: fffffbfff11acd90 R11: ffffffff88d66c87 R12: 000000000000004e [ 29.020333][ C1] R13: dffffc0000000000 R14: ffffffff82909100 R15: ffffffff87077190 [ 29.020342][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 29.020350][ C1] vprintk_emit+0x171/0x3e0 [ 29.020357][ C1] vprintk_func+0x75/0x113 [ 29.020362][ C1] printk+0xba/0xed [ 29.020368][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 29.020377][ C1] really_probe.cold+0x81/0x13a [ 29.020384][ C1] driver_probe_device+0x101/0x1b0 [ 29.020391][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020399][ C1] ? driver_allows_async_probing+0x160/0x160 [ 29.020405][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020411][ C1] ? bus_rescan_devices+0x20/0x20 [ 29.020418][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.020425][ C1] ? lockdep_hardirqs_on+0x379/0x580 [ 29.020431][ C1] __device_attach+0x217/0x360 [ 29.020438][ C1] ? device_bind_driver+0xd0/0xd0 [ 29.020445][ C1] ? kobject_uevent_env+0x29e/0x1160 [ 29.020452][ C1] ? kobject_uevent_env+0x2a8/0x1160 [ 29.020458][ C1] bus_probe_device+0x1e4/0x290 [ 29.020465][ C1] ? blocking_notifier_call_chain+0x54/0xa0 [ 29.020472][ C1] device_add+0xae6/0x16f0 [ 29.020477][ C1] ? uevent_store+0x50/0x50 [ 29.020484][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.020491][ C1] usb_set_configuration+0xdf6/0x1670 [ 29.020498][ C1] generic_probe+0x9d/0xd5 [ 29.020504][ C1] usb_probe_device+0x99/0x100 [ 29.020510][ C1] ? usb_suspend+0x620/0x620 [ 29.020516][ C1] really_probe+0x281/0x650 [ 29.020523][ C1] driver_probe_device+0x101/0x1b0 [ 29.020530][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020537][ C1] ? driver_allows_async_probing+0x160/0x160 [ 29.020544][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020550][ C1] ? bus_rescan_devices+0x20/0x20 [ 29.020557][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.020563][ C1] ? lockdep_hardirqs_on+0x379/0x580 [ 29.020570][ C1] __device_attach+0x217/0x360 [ 29.020576][ C1] ? device_bind_driver+0xd0/0xd0 [ 29.020583][ C1] ? kobject_uevent_env+0x29e/0x1160 [ 29.020593][ C1] ? kobject_uevent_env+0x2a8/0x1160 [ 29.020603][ C1] bus_probe_device+0x1e4/0x290 [ 29.020611][ C1] ? blocking_notifier_call_chain+0x54/0xa0 [ 29.020617][ C1] device_add+0xae6/0x16f0 [ 29.020623][ C1] ? uevent_store+0x50/0x50 [ 29.020630][ C1] usb_new_device.cold+0x6a4/0xe79 [ 29.020636][ C1] hub_event+0x1b5c/0x3640 [ 29.020643][ C1] ? hub_port_debounce+0x260/0x260 [ 29.020652][ C1] process_one_work+0x92b/0x1530 [ 29.020659][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 29.020664][ C1] ? do_raw_spin_lock+0x11a/0x280 [ 29.020671][ C1] worker_thread+0x96/0xe20 [ 29.020678][ C1] ? process_one_work+0x1530/0x1530 [ 29.020685][ C1] kthread+0x318/0x420 [ 29.020691][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 29.020698][ C1] ret_from_fork+0x24/0x30 [ 29.020701][ C1] [ 29.020705][ C1] Allocated by task 21: [ 29.020711][ C1] save_stack+0x1b/0x80 [ 29.020718][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 29.020724][ C1] si470x_usb_driver_probe+0x51/0xf50 [ 29.020730][ C1] usb_probe_interface+0x305/0x7a0 [ 29.020736][ C1] really_probe+0x281/0x650 [ 29.020742][ C1] driver_probe_device+0x101/0x1b0 [ 29.020749][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020754][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020760][ C1] __device_attach+0x217/0x360 [ 29.020766][ C1] bus_probe_device+0x1e4/0x290 [ 29.020771][ C1] device_add+0xae6/0x16f0 [ 29.020777][ C1] usb_set_configuration+0xdf6/0x1670 [ 29.020782][ C1] generic_probe+0x9d/0xd5 [ 29.020788][ C1] usb_probe_device+0x99/0x100 [ 29.020794][ C1] really_probe+0x281/0x650 [ 29.020800][ C1] driver_probe_device+0x101/0x1b0 [ 29.020806][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020812][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020818][ C1] __device_attach+0x217/0x360 [ 29.020824][ C1] bus_probe_device+0x1e4/0x290 [ 29.020829][ C1] device_add+0xae6/0x16f0 [ 29.020835][ C1] usb_new_device.cold+0x6a4/0xe79 [ 29.020840][ C1] hub_event+0x1b5c/0x3640 [ 29.020846][ C1] process_one_work+0x92b/0x1530 [ 29.020852][ C1] worker_thread+0x96/0xe20 [ 29.020858][ C1] kthread+0x318/0x420 [ 29.020863][ C1] ret_from_fork+0x24/0x30 [ 29.020865][ C1] [ 29.020870][ C1] Freed by task 21: [ 29.020877][ C1] save_stack+0x1b/0x80 [ 29.020883][ C1] __kasan_slab_free+0x130/0x180 [ 29.020888][ C1] kfree+0xe4/0x2f0 [ 29.020894][ C1] si470x_usb_driver_probe+0xb27/0xf50 [ 29.020900][ C1] usb_probe_interface+0x305/0x7a0 [ 29.020906][ C1] really_probe+0x281/0x650 [ 29.020912][ C1] driver_probe_device+0x101/0x1b0 [ 29.020918][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020924][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020930][ C1] __device_attach+0x217/0x360 [ 29.020936][ C1] bus_probe_device+0x1e4/0x290 [ 29.020941][ C1] device_add+0xae6/0x16f0 [ 29.020947][ C1] usb_set_configuration+0xdf6/0x1670 [ 29.020952][ C1] generic_probe+0x9d/0xd5 [ 29.020957][ C1] usb_probe_device+0x99/0x100 [ 29.020963][ C1] really_probe+0x281/0x650 [ 29.020969][ C1] driver_probe_device+0x101/0x1b0 [ 29.020975][ C1] __device_attach_driver+0x1c2/0x220 [ 29.020981][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.020987][ C1] __device_attach+0x217/0x360 [ 29.020993][ C1] bus_probe_device+0x1e4/0x290 [ 29.020999][ C1] device_add+0xae6/0x16f0 [ 29.021007][ C1] usb_new_device.cold+0x6a4/0xe79 [ 29.021012][ C1] hub_event+0x1b5c/0x3640 [ 29.021018][ C1] process_one_work+0x92b/0x1530 [ 29.021024][ C1] worker_thread+0x96/0xe20 [ 29.021030][ C1] kthread+0x318/0x420 [ 29.021035][ C1] ret_from_fork+0x24/0x30 [ 29.021037][ C1] [ 29.021043][ C1] The buggy address belongs to the object at ffff8881d5236600 [ 29.021043][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 29.021049][ C1] The buggy address is located 2736 bytes inside of [ 29.021049][ C1] 4096-byte region [ffff8881d5236600, ffff8881d5237600) [ 29.021052][ C1] The buggy address belongs to the page: [ 29.021059][ C1] page:ffffea0007548c00 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 29.021068][ C1] flags: 0x200000000010200(slab|head) [ 29.021078][ C1] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 29.021115][ C1] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 29.021118][ C1] page dumped because: kasan: bad access detected [ 29.021120][ C1] [ 29.021122][ C1] Memory state around the buggy address: [ 29.021128][ C1] ffff8881d5236f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.021134][ C1] ffff8881d5237000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.021139][ C1] >ffff8881d5237080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.021142][ C1] ^ [ 29.021147][ C1] ffff8881d5237100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.021153][ C1] ffff8881d5237180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.021155][ C1] ================================================================== [ 29.021158][ C1] Disabling lock debugging due to kernel taint [ 29.021162][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 29.021169][ C1] CPU: 1 PID: 21 Comm: kworker/1:1 Tainted: G B 5.3.0-rc2+ #25 [ 29.021172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.021178][ C1] Workqueue: usb_hub_wq hub_event [ 29.021182][ C1] Call Trace: [ 29.021185][ C1] [ 29.021191][ C1] dump_stack+0xca/0x13e [ 29.021196][ C1] panic+0x2a3/0x6da [ 29.021202][ C1] ? add_taint.cold+0x16/0x16 [ 29.021208][ C1] ? print_shadow_for_address+0xb8/0x114 [ 29.021215][ C1] ? trace_hardirqs_off+0x50/0x1d0 [ 29.021225][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.021230][ C1] end_report+0x43/0x49 [ 29.021237][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.021243][ C1] __kasan_report.cold+0xd/0x33 [ 29.021250][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 29.021255][ C1] kasan_report+0xe/0x12 [ 29.021262][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 29.021268][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 29.021276][ C1] __usb_hcd_giveback_urb+0x1f2/0x470 [ 29.021283][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 29.021289][ C1] dummy_timer+0x120f/0x2fa2 [ 29.021295][ C1] ? __lock_acquire+0x145e/0x3b50 [ 29.021301][ C1] ? find_held_lock+0x2d/0x110 [ 29.021307][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 29.021313][ C1] ? mark_held_locks+0xe0/0xe0 [ 29.021319][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 29.021325][ C1] ? lock_acquire+0x127/0x320 [ 29.021331][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.021337][ C1] call_timer_fn+0x179/0x650 [ 29.021343][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.021349][ C1] ? msleep_interruptible+0x130/0x130 [ 29.021354][ C1] ? do_raw_spin_lock+0x11a/0x280 [ 29.021364][ C1] ? mark_held_locks+0x9f/0xe0 [ 29.021370][ C1] ? _raw_spin_unlock_irq+0x24/0x30 [ 29.021376][ C1] ? dummy_udc_probe+0x930/0x930 [ 29.021382][ C1] run_timer_softirq+0x5cc/0x14b0 [ 29.021388][ C1] ? add_timer+0x7a0/0x7a0 [ 29.021393][ C1] ? mark_lock+0xbc/0x1130 [ 29.021399][ C1] __do_softirq+0x221/0x912 [ 29.021406][ C1] irq_exit+0x178/0x1a0 [ 29.021414][ C1] smp_apic_timer_interrupt+0x12f/0x500 [ 29.021421][ C1] apic_timer_interrupt+0xf/0x20 [ 29.021423][ C1] [ 29.021430][ C1] RIP: 0010:console_unlock+0xa2a/0xc40 [ 29.021436][ C1] Code: 00 89 ee 48 c7 c7 20 88 d3 86 e8 81 ad 03 00 65 ff 0d 72 a1 d9 7e e9 db f9 ff ff e8 70 a1 15 00 e8 1b cb 1a 00 ff 74 24 30 9d 18 fe ff ff e8 5c a1 15 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 29.021440][ C1] RSP: 0018:ffff8881da2f7200 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 29.021446][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 29.021450][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881da236844 [ 29.021455][ C1] RBP: 0000000000000000 R08: ffff8881da236000 R09: fffffbfff11acd91 [ 29.021459][ C1] R10: fffffbfff11acd90 R11: ffffffff88d66c87 R12: 000000000000004e [ 29.021463][ C1] R13: dffffc0000000000 R14: ffffffff82909100 R15: ffffffff87077190 [ 29.021469][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 29.021475][ C1] vprintk_emit+0x171/0x3e0 [ 29.021481][ C1] vprintk_func+0x75/0x113 [ 29.021486][ C1] printk+0xba/0xed [ 29.021491][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 29.021498][ C1] really_probe.cold+0x81/0x13a [ 29.021504][ C1] driver_probe_device+0x101/0x1b0 [ 29.021511][ C1] __device_attach_driver+0x1c2/0x220 [ 29.021518][ C1] ? driver_allows_async_probing+0x160/0x160 [ 29.021523][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.021529][ C1] ? bus_rescan_devices+0x20/0x20 [ 29.021535][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.021541][ C1] ? lockdep_hardirqs_on+0x379/0x580 [ 29.021547][ C1] __device_attach+0x217/0x360 [ 29.021553][ C1] ? device_bind_driver+0xd0/0xd0 [ 29.021560][ C1] ? kobject_uevent_env+0x29e/0x1160 [ 29.021566][ C1] ? kobject_uevent_env+0x2a8/0x1160 [ 29.021572][ C1] bus_probe_device+0x1e4/0x290 [ 29.021578][ C1] ? blocking_notifier_call_chain+0x54/0xa0 [ 29.021583][ C1] device_add+0xae6/0x16f0 [ 29.021591][ C1] ? uevent_store+0x50/0x50 [ 29.021597][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.021603][ C1] usb_set_configuration+0xdf6/0x1670 [ 29.021608][ C1] generic_probe+0x9d/0xd5 [ 29.021614][ C1] usb_probe_device+0x99/0x100 [ 29.021620][ C1] ? usb_suspend+0x620/0x620 [ 29.021625][ C1] really_probe+0x281/0x650 [ 29.021632][ C1] driver_probe_device+0x101/0x1b0 [ 29.021638][ C1] __device_attach_driver+0x1c2/0x220 [ 29.021645][ C1] ? driver_allows_async_probing+0x160/0x160 [ 29.021650][ C1] bus_for_each_drv+0x15c/0x1e0 [ 29.021656][ C1] ? bus_rescan_devices+0x20/0x20 [ 29.021662][ C1] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 29.021668][ C1] ? lockdep_hardirqs_on+0x379/0x580 [ 29.021675][ C1] __device_attach+0x217/0x360 [ 29.021681][ C1] ? device_bind_driver+0xd0/0xd0 [ 29.021687][ C1] ? kobject_uevent_env+0x29e/0x1160 [ 29.021693][ C1] ? kobject_uevent_env+0x2a8/0x1160 [ 29.021699][ C1] bus_probe_device+0x1e4/0x290 [ 29.021704][ C1] ? blocking_notifier_call_chain+0x54/0xa0 [ 29.021710][ C1] device_add+0xae6/0x16f0 [ 29.021715][ C1] ? uevent_store+0x50/0x50 [ 29.021721][ C1] usb_new_device.cold+0x6a4/0xe79 [ 29.021727][ C1] hub_event+0x1b5c/0x3640 [ 29.021734][ C1] ? hub_port_debounce+0x260/0x260 [ 29.021740][ C1] process_one_work+0x92b/0x1530 [ 29.021747][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 29.021752][ C1] ? do_raw_spin_lock+0x11a/0x280 [ 29.021758][ C1] worker_thread+0x96/0xe20 [ 29.021765][ C1] ? process_one_work+0x1530/0x1530 [ 29.021770][ C1] kthread+0x318/0x420 [ 29.021776][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 29.021782][ C1] ret_from_fork+0x24/0x30 [ 29.022399][ C1] Kernel Offset: disabled [ 30.606741][ C1] Rebooting in 86400 seconds..