Warning: Permanently added '10.128.0.182' (ED25519) to the list of known hosts. syzkaller login: [ 62.466201][ T4240] chnl_net:caif_netlink_parms(): no params data found [ 62.506164][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.513378][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.522290][ T4240] device bridge_slave_0 entered promiscuous mode [ 62.530975][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.538121][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.546488][ T4240] device bridge_slave_1 entered promiscuous mode [ 62.567620][ T4240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.578483][ T4240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.599975][ T4240] team0: Port device team_slave_0 added [ 62.607255][ T4240] team0: Port device team_slave_1 added [ 62.624298][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.631368][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.657263][ T4240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.669609][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.676612][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.702648][ T4240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.731855][ T4240] device hsr_slave_0 entered promiscuous mode [ 62.738954][ T4240] device hsr_slave_1 entered promiscuous mode [ 62.823357][ T4240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.834133][ T4240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.842931][ T4240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.852410][ T4240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.872414][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.879559][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.887477][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.894575][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.938129][ T4240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.949850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.959624][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.968763][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.977546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 62.991218][ T4240] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.003359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.012297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.019385][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.030597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.039143][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.046363][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.065428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.073910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.086467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.098909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.111866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.122196][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.138426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.146229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.158380][ T4240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.176083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.194078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.202752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.211698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.221397][ T4240] device veth0_vlan entered promiscuous mode [ 63.232601][ T4240] device veth1_vlan entered promiscuous mode [ 63.253093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.261653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.269678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.281210][ T4240] device veth0_macvtap entered promiscuous mode [ 63.289936][ T4240] device veth1_macvtap entered promiscuous mode [ 63.305715][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.313318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.322877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.335088][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.343313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 63.354502][ T4240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.363615][ T4240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.373673][ T4240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.382717][ T4240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.710467][ T4245] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.120342][ T4245] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 64.128512][ T4245] usb 1-1: config 0 has no interface number 0 [ 64.134746][ T4245] usb 1-1: config 0 interface 8 has no altsetting 0 [ 64.310422][ T4245] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=e8.b6 [ 64.319512][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.327560][ T4245] usb 1-1: Product: syz [ 64.332003][ T4245] usb 1-1: Manufacturer: syz [ 64.336604][ T4245] usb 1-1: SerialNumber: syz [ 64.344833][ T4245] usb 1-1: config 0 descriptor?? [ 64.689897][ T4245] usb 1-1: USB disconnect, device number 2 [ 64.700815][ T4245] ================================================================== [ 64.708901][ T4245] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0 [ 64.716117][ T4245] Read of size 8 at addr ffff88807ebbd898 by task kworker/0:3/4245 [ 64.724001][ T4245] [ 64.726318][ T4245] CPU: 0 PID: 4245 Comm: kworker/0:3 Not tainted 6.1.114-syzkaller #0 [ 64.734452][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.744492][ T4245] Workqueue: usb_hub_wq hub_event [ 64.749519][ T4245] Call Trace: [ 64.752792][ T4245] [ 64.755711][ T4245] dump_stack_lvl+0x1e3/0x2cb [ 64.760380][ T4245] ? nf_tcp_handle_invalid+0x642/0x642 [ 64.765836][ T4245] ? panic+0x764/0x764 [ 64.769909][ T4245] ? _printk+0xd1/0x111 [ 64.774055][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 64.779163][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 64.784269][ T4245] print_report+0x15f/0x4f0 [ 64.788763][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 64.793868][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 64.798968][ T4245] ? __virt_addr_valid+0x45b/0x530 [ 64.804069][ T4245] ? __phys_addr+0xb6/0x170 [ 64.808560][ T4245] ? hdm_disconnect+0x109/0x1c0 [ 64.813408][ T4245] kasan_report+0x136/0x160 [ 64.817898][ T4245] ? hdm_disconnect+0x109/0x1c0 [ 64.822743][ T4245] hdm_disconnect+0x109/0x1c0 [ 64.827413][ T4245] usb_unbind_interface+0x1cd/0x840 [ 64.832611][ T4245] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 64.838324][ T4245] ? usb_driver_release_interface+0x1c0/0x1c0 [ 64.844385][ T4245] device_release_driver_internal+0x59e/0x880 [ 64.850448][ T4245] bus_remove_device+0x2e5/0x400 [ 64.855384][ T4245] device_del+0x6e2/0xbd0 [ 64.859735][ T4245] ? kill_device+0x160/0x160 [ 64.864666][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 64.870640][ T4245] ? usb_disconnect+0xfa/0x8c0 [ 64.875396][ T4245] ? mutex_lock_nested+0x10/0x10 [ 64.880322][ T4245] usb_disable_device+0x3b8/0x840 [ 64.885335][ T4245] usb_disconnect+0x33c/0x8c0 [ 64.890004][ T4245] hub_event+0x1f78/0x5730 [ 64.894423][ T4245] ? led_work+0x700/0x700 [ 64.898744][ T4245] ? read_lock_is_recursive+0x10/0x10 [ 64.904128][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 64.910103][ T4245] ? print_irqtrace_events+0x210/0x210 [ 64.915558][ T4245] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 64.921450][ T4245] ? do_raw_spin_unlock+0x137/0x8a0 [ 64.926636][ T4245] ? process_one_work+0x7a9/0x11d0 [ 64.931736][ T4245] process_one_work+0x8a9/0x11d0 [ 64.936667][ T4245] ? worker_detach_from_pool+0x260/0x260 [ 64.942289][ T4245] ? _raw_spin_lock_irqsave+0x120/0x120 [ 64.947824][ T4245] ? kthread_data+0x4e/0xc0 [ 64.952321][ T4245] ? wq_worker_running+0x97/0x190 [ 64.957333][ T4245] worker_thread+0xd04/0x1200 [ 64.962002][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 64.966928][ T4245] ? release_firmware_map_entry+0x186/0x186 [ 64.972812][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 64.977655][ T4245] kthread+0x28d/0x320 [ 64.981712][ T4245] ? worker_clr_flags+0x190/0x190 [ 64.986728][ T4245] ? kthread_blkcg+0xd0/0xd0 [ 64.991302][ T4245] ret_from_fork+0x1f/0x30 [ 64.995711][ T4245] [ 64.998719][ T4245] [ 65.001028][ T4245] Allocated by task 4245: [ 65.005334][ T4245] kasan_set_track+0x4b/0x70 [ 65.009916][ T4245] __kasan_kmalloc+0x97/0xb0 [ 65.014490][ T4245] hdm_probe+0x91/0x13d0 [ 65.018723][ T4245] usb_probe_interface+0x5c0/0xaf0 [ 65.023824][ T4245] really_probe+0x2ab/0xcb0 [ 65.028317][ T4245] __driver_probe_device+0x1a2/0x3d0 [ 65.033594][ T4245] driver_probe_device+0x50/0x420 [ 65.038609][ T4245] __device_attach_driver+0x2cf/0x510 [ 65.043971][ T4245] bus_for_each_drv+0x183/0x200 [ 65.048806][ T4245] __device_attach+0x359/0x570 [ 65.053556][ T4245] bus_probe_device+0xba/0x1e0 [ 65.058317][ T4245] device_add+0xb48/0xfd0 [ 65.062632][ T4245] usb_set_configuration+0x19dd/0x2020 [ 65.068095][ T4245] usb_generic_driver_probe+0x84/0x140 [ 65.073567][ T4245] usb_probe_device+0x130/0x260 [ 65.078420][ T4245] really_probe+0x2ab/0xcb0 [ 65.082920][ T4245] __driver_probe_device+0x1a2/0x3d0 [ 65.088195][ T4245] driver_probe_device+0x50/0x420 [ 65.093209][ T4245] __device_attach_driver+0x2cf/0x510 [ 65.098569][ T4245] bus_for_each_drv+0x183/0x200 [ 65.103408][ T4245] __device_attach+0x359/0x570 [ 65.108186][ T4245] bus_probe_device+0xba/0x1e0 [ 65.112935][ T4245] device_add+0xb48/0xfd0 [ 65.117334][ T4245] usb_new_device+0xbdd/0x18f0 [ 65.122088][ T4245] hub_event+0x2efe/0x5730 [ 65.126500][ T4245] process_one_work+0x8a9/0x11d0 [ 65.131442][ T4245] worker_thread+0xa47/0x1200 [ 65.136119][ T4245] kthread+0x28d/0x320 [ 65.140182][ T4245] ret_from_fork+0x1f/0x30 [ 65.144590][ T4245] [ 65.146910][ T4245] Freed by task 4245: [ 65.150876][ T4245] kasan_set_track+0x4b/0x70 [ 65.155456][ T4245] kasan_save_free_info+0x27/0x40 [ 65.160469][ T4245] ____kasan_slab_free+0xd6/0x120 [ 65.165496][ T4245] __kmem_cache_free+0x25c/0x3c0 [ 65.170442][ T4245] device_release+0x91/0x1c0 [ 65.175026][ T4245] kobject_put+0x224/0x460 [ 65.179429][ T4245] hdm_disconnect+0xef/0x1c0 [ 65.184096][ T4245] usb_unbind_interface+0x1cd/0x840 [ 65.189284][ T4245] device_release_driver_internal+0x59e/0x880 [ 65.195340][ T4245] bus_remove_device+0x2e5/0x400 [ 65.200266][ T4245] device_del+0x6e2/0xbd0 [ 65.204582][ T4245] usb_disable_device+0x3b8/0x840 [ 65.209599][ T4245] usb_disconnect+0x33c/0x8c0 [ 65.214268][ T4245] hub_event+0x1f78/0x5730 [ 65.218695][ T4245] process_one_work+0x8a9/0x11d0 [ 65.223628][ T4245] worker_thread+0xd04/0x1200 [ 65.228293][ T4245] kthread+0x28d/0x320 [ 65.232344][ T4245] ret_from_fork+0x1f/0x30 [ 65.236752][ T4245] [ 65.239080][ T4245] The buggy address belongs to the object at ffff88807ebbc000 [ 65.239080][ T4245] which belongs to the cache kmalloc-8k of size 8192 [ 65.253138][ T4245] The buggy address is located 6296 bytes inside of [ 65.253138][ T4245] 8192-byte region [ffff88807ebbc000, ffff88807ebbe000) [ 65.266597][ T4245] [ 65.268913][ T4245] The buggy address belongs to the physical page: [ 65.275316][ T4245] page:ffffea0001faee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ebb8 [ 65.285453][ T4245] head:ffffea0001faee00 order:3 compound_mapcount:0 compound_pincount:0 [ 65.293767][ T4245] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 65.301746][ T4245] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c42280 [ 65.310316][ T4245] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 65.318883][ T4245] page dumped because: kasan: bad access detected [ 65.325297][ T4245] page_owner tracks the page as allocated [ 65.330996][ T4245] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4240, tgid 4240 (syz-executor843), ts 62934181314, free_ts 62921424497 [ 65.352607][ T4245] post_alloc_hook+0x18d/0x1b0 [ 65.357368][ T4245] get_page_from_freelist+0x322e/0x33b0 [ 65.362903][ T4245] __alloc_pages+0x28d/0x770 [ 65.367484][ T4245] alloc_slab_page+0x6a/0x150 [ 65.372152][ T4245] new_slab+0x84/0x2d0 [ 65.376210][ T4245] ___slab_alloc+0xc20/0x1270 [ 65.380876][ T4245] __kmem_cache_alloc_node+0x19f/0x260 [ 65.386410][ T4245] __kmalloc_node+0xa2/0x230 [ 65.390988][ T4245] kvmalloc_node+0x6e/0x180 [ 65.395477][ T4245] pfifo_fast_init+0x385/0x6d0 [ 65.400228][ T4245] qdisc_create_dflt+0x130/0x500 [ 65.405154][ T4245] dev_activate+0x3b4/0x1200 [ 65.409730][ T4245] __dev_open+0x3f3/0x510 [ 65.414046][ T4245] __dev_change_flags+0x1db/0x6e0 [ 65.419059][ T4245] dev_change_flags+0x87/0x190 [ 65.423813][ T4245] do_setlink+0xcf4/0x3de0 [ 65.428219][ T4245] page last free stack trace: [ 65.432876][ T4245] free_unref_page_prepare+0xf63/0x1120 [ 65.438428][ T4245] free_unref_page+0x33/0x3e0 [ 65.443110][ T4245] __unfreeze_partials+0x1b7/0x210 [ 65.448221][ T4245] put_cpu_partial+0x17b/0x250 [ 65.453005][ T4245] qlist_free_all+0x76/0xe0 [ 65.457498][ T4245] kasan_quarantine_reduce+0x156/0x170 [ 65.462948][ T4245] __kasan_slab_alloc+0x1f/0x70 [ 65.467786][ T4245] slab_post_alloc_hook+0x52/0x3a0 [ 65.472894][ T4245] __kmem_cache_alloc_node+0x137/0x260 [ 65.478342][ T4245] __kmalloc+0xa1/0x230 [ 65.482486][ T4245] fib6_info_alloc+0x2c/0xd0 [ 65.487065][ T4245] ip6_route_info_create+0x446/0x12c0 [ 65.492457][ T4245] ip6_route_add+0x22/0x120 [ 65.496955][ T4245] addrconf_add_dev+0x350/0x500 [ 65.501794][ T4245] addrconf_init_auto_addrs+0x88e/0xe60 [ 65.507325][ T4245] addrconf_notify+0xade/0xf60 [ 65.512078][ T4245] [ 65.514389][ T4245] Memory state around the buggy address: [ 65.520002][ T4245] ffff88807ebbd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.528062][ T4245] ffff88807ebbd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.536112][ T4245] >ffff88807ebbd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.544154][ T4245] ^ [ 65.548986][ T4245] ffff88807ebbd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.557033][ T4245] ffff88807ebbd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.565077][ T4245] ================================================================== [ 65.578440][ T4245] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.585707][ T4245] CPU: 0 PID: 4245 Comm: kworker/0:3 Not tainted 6.1.114-syzkaller #0 [ 65.593869][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.603933][ T4245] Workqueue: usb_hub_wq hub_event [ 65.608972][ T4245] Call Trace: [ 65.612241][ T4245] [ 65.615165][ T4245] dump_stack_lvl+0x1e3/0x2cb [ 65.619831][ T4245] ? nf_tcp_handle_invalid+0x642/0x642 [ 65.625280][ T4245] ? panic+0x764/0x764 [ 65.629338][ T4245] ? preempt_schedule_common+0xa6/0xd0 [ 65.634791][ T4245] ? vscnprintf+0x59/0x80 [ 65.639113][ T4245] panic+0x318/0x764 [ 65.642998][ T4245] ? check_panic_on_warn+0x1d/0xa0 [ 65.648096][ T4245] ? memcpy_page_flushcache+0xfc/0xfc [ 65.653463][ T4245] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 65.659435][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 65.664275][ T4245] ? print_report+0x4a3/0x4f0 [ 65.668947][ T4245] check_panic_on_warn+0x7e/0xa0 [ 65.673873][ T4245] ? hdm_disconnect+0x109/0x1c0 [ 65.678719][ T4245] end_report+0x66/0x110 [ 65.682950][ T4245] kasan_report+0x143/0x160 [ 65.687440][ T4245] ? hdm_disconnect+0x109/0x1c0 [ 65.692286][ T4245] hdm_disconnect+0x109/0x1c0 [ 65.696953][ T4245] usb_unbind_interface+0x1cd/0x840 [ 65.702145][ T4245] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 65.707881][ T4245] ? usb_driver_release_interface+0x1c0/0x1c0 [ 65.713961][ T4245] device_release_driver_internal+0x59e/0x880 [ 65.720050][ T4245] bus_remove_device+0x2e5/0x400 [ 65.724994][ T4245] device_del+0x6e2/0xbd0 [ 65.729318][ T4245] ? kill_device+0x160/0x160 [ 65.733901][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 65.739881][ T4245] ? usb_disconnect+0xfa/0x8c0 [ 65.744659][ T4245] ? mutex_lock_nested+0x10/0x10 [ 65.749598][ T4245] usb_disable_device+0x3b8/0x840 [ 65.754618][ T4245] usb_disconnect+0x33c/0x8c0 [ 65.759289][ T4245] hub_event+0x1f78/0x5730 [ 65.763746][ T4245] ? led_work+0x700/0x700 [ 65.768067][ T4245] ? read_lock_is_recursive+0x10/0x10 [ 65.773441][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 65.779418][ T4245] ? print_irqtrace_events+0x210/0x210 [ 65.784870][ T4245] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 65.790755][ T4245] ? do_raw_spin_unlock+0x137/0x8a0 [ 65.795942][ T4245] ? process_one_work+0x7a9/0x11d0 [ 65.801042][ T4245] process_one_work+0x8a9/0x11d0 [ 65.805979][ T4245] ? worker_detach_from_pool+0x260/0x260 [ 65.811615][ T4245] ? _raw_spin_lock_irqsave+0x120/0x120 [ 65.817154][ T4245] ? kthread_data+0x4e/0xc0 [ 65.821652][ T4245] ? wq_worker_running+0x97/0x190 [ 65.826665][ T4245] worker_thread+0xd04/0x1200 [ 65.831330][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 65.836177][ T4245] ? release_firmware_map_entry+0x186/0x186 [ 65.842057][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 65.846901][ T4245] kthread+0x28d/0x320 [ 65.850958][ T4245] ? worker_clr_flags+0x190/0x190 [ 65.855969][ T4245] ? kthread_blkcg+0xd0/0xd0 [ 65.860550][ T4245] ret_from_fork+0x1f/0x30 [ 65.864961][ T4245] [ 65.868247][ T4245] Kernel Offset: disabled [ 65.872560][ T4245] Rebooting in 86400 seconds..