[info] Using makefile-style concurrent boot in runlevel 2. [ 14.646933][ C1] random: crng init done [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.912773][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.122877][ T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 28.135326][ T95] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 28.144960][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.154952][ T95] usb 1-1: config 0 descriptor?? [ 28.412888][ T95] radio-si470x 1-1:0.0: DeviceID=0xc9f9 ChipID=0xcf81 [ 28.632824][ T95] radio-si470x 1-1:0.0: software version 201, hardware version 249 executing program [ 28.852842][ T95] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 28.872750][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 28.879499][ T95] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 28.888352][ T95] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 28.895433][ C1] ================================================================== [ 28.895476][ C1] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x27/0xbe [ 28.895483][ C1] Read of size 8 at addr ffff8881cd00aad0 by task kworker/1:2/95 [ 28.895486][ C1] [ 28.895495][ C1] CPU: 1 PID: 95 Comm: kworker/1:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 28.895500][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.895512][ C1] Workqueue: usb_hub_wq hub_event [ 28.895517][ C1] Call Trace: [ 28.895520][ C1] [ 28.895529][ C1] dump_stack+0xef/0x16e [ 28.895537][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.895543][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.895555][ C1] print_address_description.constprop.0.cold+0xd3/0x314 [ 28.895562][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.895569][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.895575][ C1] __kasan_report.cold+0x37/0x77 [ 28.895582][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.895589][ C1] kasan_report+0xe/0x20 [ 28.895596][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 28.895604][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 28.895610][ C1] __usb_hcd_giveback_urb+0x1f2/0x470 [ 28.895617][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 28.895626][ C1] dummy_timer+0x1258/0x32ae [ 28.895635][ C1] ? __lock_acquire+0x145e/0x3b60 [ 28.895641][ C1] ? __lock_acquire+0x145e/0x3b60 [ 28.895653][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 28.895659][ C1] ? mark_held_locks+0xe0/0xe0 [ 28.895666][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.895676][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.895682][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.895690][ C1] call_timer_fn+0x195/0x6f0 [ 28.895697][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.895703][ C1] ? msleep_interruptible+0x130/0x130 [ 28.895709][ C1] ? mark_held_locks+0x9f/0xe0 [ 28.895715][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.895724][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 28.895731][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.895737][ C1] run_timer_softirq+0x5f9/0x1500 [ 28.895743][ C1] ? add_timer+0x7a0/0x7a0 [ 28.895750][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.895756][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.895762][ C1] ? mark_held_locks+0x9f/0xe0 [ 28.895771][ C1] __do_softirq+0x21e/0x950 [ 28.895786][ C1] irq_exit+0x178/0x1a0 [ 28.895793][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 28.895800][ C1] apic_timer_interrupt+0xf/0x20 [ 28.895803][ C1] [ 28.895812][ C1] RIP: 0010:console_unlock+0xa6b/0xca0 [ 28.895819][ C1] Code: 00 89 ee 48 c7 c7 20 43 14 87 e8 10 c3 03 00 65 ff 0d c1 ea d8 7e e9 b5 f9 ff ff e8 df 38 16 00 e8 da 80 1b 00 ff 74 24 30 9d fd fd ff ff e8 cb 38 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 28.895823][ C1] RSP: 0018:ffff8881d5adf178 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 28.895831][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 28.895835][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881d735b94c [ 28.895839][ C1] RBP: 0000000000000000 R08: ffff8881d735b100 R09: fffffbfff1266c85 [ 28.895844][ C1] R10: fffffbfff1266c84 R11: ffffffff89336427 R12: ffffffff82a05400 [ 28.895848][ C1] R13: ffffffff874d4610 R14: 000000000000004c R15: dffffc0000000000 [ 28.895858][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 28.895866][ C1] vprintk_emit+0x171/0x3d0 [ 28.895873][ C1] vprintk_func+0x75/0x113 [ 28.895879][ C1] printk+0xba/0xed [ 28.895887][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 28.895896][ C1] really_probe.cold+0x88/0x1fd [ 28.895902][ C1] driver_probe_device+0x223/0x350 [ 28.895908][ C1] __device_attach_driver+0x1d1/0x290 [ 28.895915][ C1] ? driver_allows_async_probing+0x160/0x160 [ 28.895923][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.895930][ C1] ? bus_rescan_devices+0x20/0x20 [ 28.895937][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.895943][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 28.895949][ C1] __device_attach+0x217/0x390 [ 28.895955][ C1] ? device_bind_driver+0xd0/0xd0 [ 28.895961][ C1] bus_probe_device+0x1e4/0x290 [ 28.895968][ C1] device_add+0x1459/0x1bf0 [ 28.895975][ C1] ? wait_for_completion+0x3c0/0x3c0 [ 28.895982][ C1] ? device_link_remove+0x110/0x110 [ 28.895988][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.895996][ C1] usb_set_configuration+0xe47/0x17d0 [ 28.896005][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 28.896012][ C1] usb_probe_device+0xd9/0x230 [ 28.896018][ C1] ? usb_suspend+0x5f0/0x5f0 [ 28.896024][ C1] really_probe+0x290/0xac0 [ 28.896030][ C1] driver_probe_device+0x223/0x350 [ 28.896036][ C1] __device_attach_driver+0x1d1/0x290 [ 28.896043][ C1] ? driver_allows_async_probing+0x160/0x160 [ 28.896050][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.896057][ C1] ? bus_rescan_devices+0x20/0x20 [ 28.896063][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.896069][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 28.896075][ C1] __device_attach+0x217/0x390 [ 28.896081][ C1] ? device_bind_driver+0xd0/0xd0 [ 28.896087][ C1] bus_probe_device+0x1e4/0x290 [ 28.896094][ C1] device_add+0x1459/0x1bf0 [ 28.896100][ C1] ? device_link_remove+0x110/0x110 [ 28.896107][ C1] usb_new_device.cold+0x540/0xcd0 [ 28.896113][ C1] hub_event+0x21cb/0x4300 [ 28.896119][ C1] ? hub_port_debounce+0x350/0x350 [ 28.896125][ C1] ? find_held_lock+0x2d/0x110 [ 28.896131][ C1] ? mark_held_locks+0xe0/0xe0 [ 28.896138][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.896145][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.896154][ C1] process_one_work+0x94b/0x1620 [ 28.896162][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 28.896169][ C1] ? do_raw_spin_lock+0x129/0x290 [ 28.896176][ C1] worker_thread+0x96/0xe20 [ 28.896183][ C1] ? process_one_work+0x1620/0x1620 [ 28.896190][ C1] kthread+0x318/0x420 [ 28.896196][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 28.896202][ C1] ret_from_fork+0x24/0x30 [ 28.896205][ C1] [ 28.896209][ C1] Allocated by task 95: [ 28.896217][ C1] save_stack+0x1b/0x80 [ 28.896223][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 28.896230][ C1] si470x_usb_driver_probe+0x51/0xf50 [ 28.896236][ C1] usb_probe_interface+0x310/0x800 [ 28.896241][ C1] really_probe+0x290/0xac0 [ 28.896252][ C1] driver_probe_device+0x223/0x350 [ 28.896257][ C1] __device_attach_driver+0x1d1/0x290 [ 28.896264][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.896269][ C1] __device_attach+0x217/0x390 [ 28.896274][ C1] bus_probe_device+0x1e4/0x290 [ 28.896280][ C1] device_add+0x1459/0x1bf0 [ 28.896286][ C1] usb_set_configuration+0xe47/0x17d0 [ 28.896292][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 28.896298][ C1] usb_probe_device+0xd9/0x230 [ 28.896304][ C1] really_probe+0x290/0xac0 [ 28.896309][ C1] driver_probe_device+0x223/0x350 [ 28.896315][ C1] __device_attach_driver+0x1d1/0x290 [ 28.896321][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.896326][ C1] __device_attach+0x217/0x390 [ 28.896332][ C1] bus_probe_device+0x1e4/0x290 [ 28.896338][ C1] device_add+0x1459/0x1bf0 [ 28.896343][ C1] usb_new_device.cold+0x540/0xcd0 [ 28.896348][ C1] hub_event+0x21cb/0x4300 [ 28.896354][ C1] process_one_work+0x94b/0x1620 [ 28.896360][ C1] worker_thread+0x96/0xe20 [ 28.896368][ C1] kthread+0x318/0x420 [ 28.896377][ C1] ret_from_fork+0x24/0x30 [ 28.896380][ C1] [ 28.896385][ C1] Freed by task 95: [ 28.896394][ C1] save_stack+0x1b/0x80 [ 28.896403][ C1] __kasan_slab_free+0x117/0x160 [ 28.896412][ C1] kfree+0xd5/0x300 [ 28.896423][ C1] si470x_usb_driver_probe+0xb27/0xf50 [ 28.896433][ C1] usb_probe_interface+0x310/0x800 [ 28.896441][ C1] really_probe+0x290/0xac0 [ 28.896450][ C1] driver_probe_device+0x223/0x350 [ 28.896456][ C1] __device_attach_driver+0x1d1/0x290 [ 28.896462][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.896468][ C1] __device_attach+0x217/0x390 [ 28.896473][ C1] bus_probe_device+0x1e4/0x290 [ 28.896479][ C1] device_add+0x1459/0x1bf0 [ 28.896485][ C1] usb_set_configuration+0xe47/0x17d0 [ 28.896491][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 28.896498][ C1] usb_probe_device+0xd9/0x230 [ 28.896503][ C1] really_probe+0x290/0xac0 [ 28.896508][ C1] driver_probe_device+0x223/0x350 [ 28.896514][ C1] __device_attach_driver+0x1d1/0x290 [ 28.896520][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.896526][ C1] __device_attach+0x217/0x390 [ 28.896531][ C1] bus_probe_device+0x1e4/0x290 [ 28.896537][ C1] device_add+0x1459/0x1bf0 [ 28.896542][ C1] usb_new_device.cold+0x540/0xcd0 [ 28.896547][ C1] hub_event+0x21cb/0x4300 [ 28.896553][ C1] process_one_work+0x94b/0x1620 [ 28.896559][ C1] worker_thread+0x96/0xe20 [ 28.896564][ C1] kthread+0x318/0x420 [ 28.896570][ C1] ret_from_fork+0x24/0x30 [ 28.896572][ C1] [ 28.896577][ C1] The buggy address belongs to the object at ffff8881cd00a000 [ 28.896577][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 28.896584][ C1] The buggy address is located 2768 bytes inside of [ 28.896584][ C1] 4096-byte region [ffff8881cd00a000, ffff8881cd00b000) [ 28.896586][ C1] The buggy address belongs to the page: [ 28.896594][ C1] page:ffffea0007340200 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 28.896601][ C1] flags: 0x200000000010200(slab|head) [ 28.896612][ C1] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 28.896620][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 28.896623][ C1] page dumped because: kasan: bad access detected [ 28.896625][ C1] [ 28.896627][ C1] Memory state around the buggy address: [ 28.896633][ C1] ffff8881cd00a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.896638][ C1] ffff8881cd00aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.896644][ C1] >ffff8881cd00aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.896646][ C1] ^ [ 28.896652][ C1] ffff8881cd00ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.896657][ C1] ffff8881cd00ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.896659][ C1] ================================================================== [ 28.896662][ C1] Disabling lock debugging due to kernel taint [ 28.896666][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 28.896673][ C1] CPU: 1 PID: 95 Comm: kworker/1:2 Tainted: G B 5.6.0-rc3-syzkaller #0 [ 28.896676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.896682][ C1] Workqueue: usb_hub_wq hub_event [ 28.896685][ C1] Call Trace: [ 28.896687][ C1] [ 28.896693][ C1] dump_stack+0xef/0x16e [ 28.896699][ C1] panic+0x2aa/0x6e1 [ 28.896705][ C1] ? add_taint.cold+0x16/0x16 [ 28.896712][ C1] ? print_shadow_for_address+0xb8/0x114 [ 28.896721][ C1] ? trace_hardirqs_off+0x50/0x200 [ 28.896728][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.896733][ C1] end_report+0x43/0x49 [ 28.896740][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.896746][ C1] __kasan_report.cold+0x55/0x77 [ 28.896752][ C1] ? si470x_int_in_callback.cold+0x27/0xbe [ 28.896758][ C1] kasan_report+0xe/0x20 [ 28.896764][ C1] si470x_int_in_callback.cold+0x27/0xbe [ 28.896770][ C1] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 28.896776][ C1] __usb_hcd_giveback_urb+0x1f2/0x470 [ 28.896782][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 28.896792][ C1] dummy_timer+0x1258/0x32ae [ 28.896798][ C1] ? __lock_acquire+0x145e/0x3b60 [ 28.896803][ C1] ? __lock_acquire+0x145e/0x3b60 [ 28.896810][ C1] ? debug_object_deactivate+0x1d9/0x320 [ 28.896816][ C1] ? mark_held_locks+0xe0/0xe0 [ 28.896823][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.896829][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.896835][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.896840][ C1] call_timer_fn+0x195/0x6f0 [ 28.896847][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.896852][ C1] ? msleep_interruptible+0x130/0x130 [ 28.896858][ C1] ? mark_held_locks+0x9f/0xe0 [ 28.896864][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.896869][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 28.896876][ C1] ? dummy_udc_probe+0x930/0x930 [ 28.896881][ C1] run_timer_softirq+0x5f9/0x1500 [ 28.896887][ C1] ? add_timer+0x7a0/0x7a0 [ 28.896893][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.896899][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.896904][ C1] ? mark_held_locks+0x9f/0xe0 [ 28.896910][ C1] __do_softirq+0x21e/0x950 [ 28.896916][ C1] irq_exit+0x178/0x1a0 [ 28.896923][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 28.896929][ C1] apic_timer_interrupt+0xf/0x20 [ 28.896932][ C1] [ 28.896938][ C1] RIP: 0010:console_unlock+0xa6b/0xca0 [ 28.896944][ C1] Code: 00 89 ee 48 c7 c7 20 43 14 87 e8 10 c3 03 00 65 ff 0d c1 ea d8 7e e9 b5 f9 ff ff e8 df 38 16 00 e8 da 80 1b 00 ff 74 24 30 9d fd fd ff ff e8 cb 38 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 28.896947][ C1] RSP: 0018:ffff8881d5adf178 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 28.896953][ C1] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 0000000000000006 [ 28.896957][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881d735b94c [ 28.896960][ C1] RBP: 0000000000000000 R08: ffff8881d735b100 R09: fffffbfff1266c85 [ 28.896964][ C1] R10: fffffbfff1266c84 R11: ffffffff89336427 R12: ffffffff82a05400 [ 28.896967][ C1] R13: ffffffff874d4610 R14: 000000000000004c R15: dffffc0000000000 [ 28.896974][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 28.896981][ C1] vprintk_emit+0x171/0x3d0 [ 28.896987][ C1] vprintk_func+0x75/0x113 [ 28.896993][ C1] printk+0xba/0xed [ 28.896999][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 28.897005][ C1] really_probe.cold+0x88/0x1fd [ 28.897011][ C1] driver_probe_device+0x223/0x350 [ 28.897017][ C1] __device_attach_driver+0x1d1/0x290 [ 28.897023][ C1] ? driver_allows_async_probing+0x160/0x160 [ 28.897029][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.897036][ C1] ? bus_rescan_devices+0x20/0x20 [ 28.897042][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.897048][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 28.897053][ C1] __device_attach+0x217/0x390 [ 28.897058][ C1] ? device_bind_driver+0xd0/0xd0 [ 28.897064][ C1] bus_probe_device+0x1e4/0x290 [ 28.897070][ C1] device_add+0x1459/0x1bf0 [ 28.897075][ C1] ? wait_for_completion+0x3c0/0x3c0 [ 28.897081][ C1] ? device_link_remove+0x110/0x110 [ 28.897087][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.897094][ C1] usb_set_configuration+0xe47/0x17d0 [ 28.897100][ C1] usb_generic_driver_probe+0x9d/0xe0 [ 28.897107][ C1] usb_probe_device+0xd9/0x230 [ 28.897113][ C1] ? usb_suspend+0x5f0/0x5f0 [ 28.897118][ C1] really_probe+0x290/0xac0 [ 28.897123][ C1] driver_probe_device+0x223/0x350 [ 28.897129][ C1] __device_attach_driver+0x1d1/0x290 [ 28.897135][ C1] ? driver_allows_async_probing+0x160/0x160 [ 28.897141][ C1] bus_for_each_drv+0x162/0x1e0 [ 28.897148][ C1] ? bus_rescan_devices+0x20/0x20 [ 28.897154][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.897160][ C1] ? lockdep_hardirqs_on+0x382/0x580 [ 28.897165][ C1] __device_attach+0x217/0x390 [ 28.897170][ C1] ? device_bind_driver+0xd0/0xd0 [ 28.897176][ C1] bus_probe_device+0x1e4/0x290 [ 28.897182][ C1] device_add+0x1459/0x1bf0 [ 28.897188][ C1] ? device_link_remove+0x110/0x110 [ 28.897194][ C1] usb_new_device.cold+0x540/0xcd0 [ 28.897199][ C1] hub_event+0x21cb/0x4300 [ 28.897205][ C1] ? hub_port_debounce+0x350/0x350 [ 28.897210][ C1] ? find_held_lock+0x2d/0x110 [ 28.897216][ C1] ? mark_held_locks+0xe0/0xe0 [ 28.897223][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.897229][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.897235][ C1] process_one_work+0x94b/0x1620 [ 28.897241][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 28.897252][ C1] ? do_raw_spin_lock+0x129/0x290 [ 28.897258][ C1] worker_thread+0x96/0xe20 [ 28.897264][ C1] ? process_one_work+0x1620/0x1620 [ 28.897270][ C1] kthread+0x318/0x420 [ 28.897276][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 28.897281][ C1] ret_from_fork+0x24/0x30 [ 28.897915][ C1] Kernel Offset: disabled [ 30.516695][ C1] Rebooting in 86400 seconds..