[ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ 13.069740][ C1] random: crng init done [ 13.074057][ C1] random: 7 urandom warning(s) missed due to ratelimiting [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 25.181770][ T168] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.391074][ T168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 25.402095][ T168] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 25.411249][ T168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.420976][ T168] usb 1-1: config 0 descriptor?? [ 25.670700][ T168] radio-si470x 1-1:0.0: DeviceID=0x1b94 ChipID=0xce81 [ 25.890471][ T168] radio-si470x 1-1:0.0: software version 27, hardware version 148 executing program [ 26.100303][ T168] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 26.120087][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 26.126832][ T168] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 26.135585][ T168] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 26.142691][ C0] ================================================================== [ 26.142749][ C0] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x27/0xbe [ 26.142760][ C0] Read of size 8 at addr ffff8881cd194b50 by task kworker/0:3/168 [ 26.142764][ C0] [ 26.142777][ C0] CPU: 0 PID: 168 Comm: kworker/0:3 Not tainted 5.7.0-rc1-syzkaller #0 [ 26.142784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.142807][ C0] Workqueue: usb_hub_wq hub_event [ 26.142813][ C0] Call Trace: [ 26.142819][ C0] [ 26.142839][ C0] dump_stack+0xef/0x16e [ 26.142854][ C0] print_address_description.constprop.0.cold+0xd3/0x314 [ 26.142865][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.142875][ C0] __kasan_report.cold+0x37/0x92 [ 26.142886][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.142896][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.142910][ C0] kasan_report+0x33/0x50 [ 26.142922][ C0] si470x_int_in_callback.cold+0x27/0xbe [ 26.142932][ C0] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 26.142943][ C0] __usb_hcd_giveback_urb+0x1f2/0x470 [ 26.142953][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 26.142967][ C0] dummy_timer+0x125e/0x32b4 [ 26.142980][ C0] ? __lock_acquire+0x2248/0x6650 [ 26.142992][ C0] ? lock_acquire+0x18b/0x7c0 [ 26.143005][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.143019][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.143032][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.143044][ C0] call_timer_fn+0x1ac/0x700 [ 26.143057][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.143070][ C0] ? timer_fixup_init+0x60/0x60 [ 26.143080][ C0] ? lock_downgrade+0x720/0x720 [ 26.143091][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.143104][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.143116][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.143128][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.143139][ C0] run_timer_softirq+0x5f9/0x1500 [ 26.143149][ C0] ? add_timer+0x7a0/0x7a0 [ 26.143168][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.143184][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.143195][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.143208][ C0] __do_softirq+0x21e/0x9aa [ 26.143222][ C0] irq_exit+0x178/0x1a0 [ 26.143239][ C0] smp_apic_timer_interrupt+0x141/0x540 [ 26.143256][ C0] apic_timer_interrupt+0xf/0x20 [ 26.143262][ C0] [ 26.143276][ C0] RIP: 0010:console_unlock+0xa6b/0xca0 [ 26.143290][ C0] Code: 00 89 ee 48 c7 c7 20 d0 14 87 e8 f0 d0 03 00 65 ff 0d 61 35 d8 7e e9 b5 f9 ff ff e8 ff 60 16 00 e8 aa bc 1b 00 ff 74 24 30 9d 17 fe ff ff e8 eb 60 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 26.143308][ C0] RSP: 0018:ffff8881cd4af0c0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 26.143321][ C0] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffffffff126c9cd [ 26.143329][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881cf06d2bc [ 26.143337][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff126c8cd [ 26.143345][ C0] R10: ffffffff89364667 R11: fffffbfff126c8cc R12: ffffffff82ab9e20 [ 26.143353][ C0] R13: ffffffff874edbd0 R14: 000000000000004c R15: dffffc0000000000 [ 26.143365][ C0] ? netconsole_netdev_event+0x2a0/0x2a0 [ 26.143375][ C0] vprintk_emit+0x16d/0x3e0 [ 26.143385][ C0] vprintk_func+0x75/0x113 [ 26.143393][ C0] printk+0xba/0xed [ 26.143410][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 26.143425][ C0] really_probe.cold+0x88/0x1fd [ 26.143439][ C0] driver_probe_device+0x223/0x350 [ 26.143449][ C0] __device_attach_driver+0x1d1/0x290 [ 26.143467][ C0] ? driver_allows_async_probing+0x160/0x160 [ 26.143488][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.143504][ C0] ? bus_rescan_devices+0x20/0x20 [ 26.143518][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.143531][ C0] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.143543][ C0] __device_attach+0x21a/0x390 [ 26.143555][ C0] ? device_bind_driver+0xd0/0xd0 [ 26.143568][ C0] bus_probe_device+0x1e4/0x290 [ 26.143579][ C0] device_add+0x1367/0x1c20 [ 26.143591][ C0] ? wait_for_completion+0x280/0x280 [ 26.143602][ C0] ? device_link_remove+0x110/0x110 [ 26.143619][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.143632][ C0] usb_set_configuration+0xed4/0x1850 [ 26.143646][ C0] usb_generic_driver_probe+0x9d/0xe0 [ 26.143658][ C0] usb_probe_device+0xd9/0x230 [ 26.143670][ C0] ? usb_suspend+0x600/0x600 [ 26.143681][ C0] really_probe+0x290/0xac0 [ 26.143694][ C0] driver_probe_device+0x223/0x350 [ 26.143707][ C0] __device_attach_driver+0x1d1/0x290 [ 26.143721][ C0] ? driver_allows_async_probing+0x160/0x160 [ 26.143733][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.143743][ C0] ? bus_rescan_devices+0x20/0x20 [ 26.143763][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.143775][ C0] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.143797][ C0] __device_attach+0x21a/0x390 [ 26.143809][ C0] ? device_bind_driver+0xd0/0xd0 [ 26.143822][ C0] bus_probe_device+0x1e4/0x290 [ 26.143833][ C0] device_add+0x1367/0x1c20 [ 26.143845][ C0] ? device_link_remove+0x110/0x110 [ 26.143858][ C0] usb_new_device.cold+0x552/0xf6e [ 26.143871][ C0] ? hub_disconnect+0x4a0/0x4a0 [ 26.143885][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.143897][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.143907][ C0] hub_event+0x226d/0x43c0 [ 26.143922][ C0] ? hub_port_debounce+0x350/0x350 [ 26.143935][ C0] ? umh_clean_and_save_pid+0x1/0xd0 [ 26.143948][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.143960][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.143971][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.143983][ C0] process_one_work+0x965/0x1630 [ 26.143996][ C0] ? lock_release+0x720/0x720 [ 26.144005][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 26.144016][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 26.144025][ C0] worker_thread+0x96/0xe20 [ 26.144048][ C0] ? process_one_work+0x1630/0x1630 [ 26.144060][ C0] kthread+0x326/0x430 [ 26.144073][ C0] ? kthread_create_on_node+0xf0/0xf0 [ 26.144084][ C0] ret_from_fork+0x24/0x30 [ 26.144090][ C0] [ 26.144096][ C0] Allocated by task 168: [ 26.144108][ C0] save_stack+0x1b/0x40 [ 26.144119][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 26.144129][ C0] si470x_usb_driver_probe+0x51/0xf50 [ 26.144144][ C0] usb_probe_interface+0x310/0x800 [ 26.144155][ C0] really_probe+0x290/0xac0 [ 26.144166][ C0] driver_probe_device+0x223/0x350 [ 26.144178][ C0] __device_attach_driver+0x1d1/0x290 [ 26.144189][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.144200][ C0] __device_attach+0x21a/0x390 [ 26.144210][ C0] bus_probe_device+0x1e4/0x290 [ 26.144220][ C0] device_add+0x1367/0x1c20 [ 26.144234][ C0] usb_set_configuration+0xed4/0x1850 [ 26.144245][ C0] usb_generic_driver_probe+0x9d/0xe0 [ 26.144256][ C0] usb_probe_device+0xd9/0x230 [ 26.144267][ C0] really_probe+0x290/0xac0 [ 26.144279][ C0] driver_probe_device+0x223/0x350 [ 26.144290][ C0] __device_attach_driver+0x1d1/0x290 [ 26.144305][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.144323][ C0] __device_attach+0x21a/0x390 [ 26.144335][ C0] bus_probe_device+0x1e4/0x290 [ 26.144348][ C0] device_add+0x1367/0x1c20 [ 26.144360][ C0] usb_new_device.cold+0x552/0xf6e [ 26.144371][ C0] hub_event+0x226d/0x43c0 [ 26.144381][ C0] process_one_work+0x965/0x1630 [ 26.144390][ C0] worker_thread+0x96/0xe20 [ 26.144400][ C0] kthread+0x326/0x430 [ 26.144411][ C0] ret_from_fork+0x24/0x30 [ 26.144420][ C0] [ 26.144426][ C0] Freed by task 168: [ 26.144437][ C0] save_stack+0x1b/0x40 [ 26.144449][ C0] __kasan_slab_free+0x117/0x160 [ 26.144459][ C0] kfree+0xd5/0x300 [ 26.144469][ C0] si470x_usb_driver_probe+0xb27/0xf50 [ 26.144484][ C0] usb_probe_interface+0x310/0x800 [ 26.144495][ C0] really_probe+0x290/0xac0 [ 26.144506][ C0] driver_probe_device+0x223/0x350 [ 26.144518][ C0] __device_attach_driver+0x1d1/0x290 [ 26.144528][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.144540][ C0] __device_attach+0x21a/0x390 [ 26.144551][ C0] bus_probe_device+0x1e4/0x290 [ 26.144560][ C0] device_add+0x1367/0x1c20 [ 26.144571][ C0] usb_set_configuration+0xed4/0x1850 [ 26.144592][ C0] usb_generic_driver_probe+0x9d/0xe0 [ 26.144603][ C0] usb_probe_device+0xd9/0x230 [ 26.144620][ C0] really_probe+0x290/0xac0 [ 26.144635][ C0] driver_probe_device+0x223/0x350 [ 26.144646][ C0] __device_attach_driver+0x1d1/0x290 [ 26.144657][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.144668][ C0] __device_attach+0x21a/0x390 [ 26.144682][ C0] bus_probe_device+0x1e4/0x290 [ 26.144695][ C0] device_add+0x1367/0x1c20 [ 26.144707][ C0] usb_new_device.cold+0x552/0xf6e [ 26.144718][ C0] hub_event+0x226d/0x43c0 [ 26.144728][ C0] process_one_work+0x965/0x1630 [ 26.144744][ C0] worker_thread+0x96/0xe20 [ 26.144755][ C0] kthread+0x326/0x430 [ 26.144765][ C0] ret_from_fork+0x24/0x30 [ 26.144769][ C0] [ 26.144778][ C0] The buggy address belongs to the object at ffff8881cd194000 [ 26.144778][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 26.144801][ C0] The buggy address is located 2896 bytes inside of [ 26.144801][ C0] 4096-byte region [ffff8881cd194000, ffff8881cd195000) [ 26.144806][ C0] The buggy address belongs to the page: [ 26.144824][ C0] page:ffffea0007346400 refcount:1 mapcount:0 mapping:0000000046eb718c index:0x0 head:ffffea0007346400 order:3 compound_mapcount:0 compound_pincount:0 [ 26.144834][ C0] flags: 0x200000000010200(slab|head) [ 26.144853][ C0] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 26.144867][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 26.144876][ C0] page dumped because: kasan: bad access detected [ 26.144883][ C0] [ 26.144887][ C0] Memory state around the buggy address: [ 26.144897][ C0] ffff8881cd194a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.144907][ C0] ffff8881cd194a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.144916][ C0] >ffff8881cd194b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.144922][ C0] ^ [ 26.144934][ C0] ffff8881cd194b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.144944][ C0] ffff8881cd194c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.144949][ C0] ================================================================== [ 26.144953][ C0] Disabling lock debugging due to kernel taint [ 26.144964][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 26.144976][ C0] CPU: 0 PID: 168 Comm: kworker/0:3 Tainted: G B 5.7.0-rc1-syzkaller #0 [ 26.144986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.144998][ C0] Workqueue: usb_hub_wq hub_event [ 26.145003][ C0] Call Trace: [ 26.145007][ C0] [ 26.145018][ C0] dump_stack+0xef/0x16e [ 26.145032][ C0] panic+0x2aa/0x6e1 [ 26.145042][ C0] ? add_taint.cold+0x16/0x16 [ 26.145051][ C0] ? print_shadow_for_address+0xb8/0x114 [ 26.145061][ C0] ? trace_hardirqs_off+0x50/0x200 [ 26.145071][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.145089][ C0] end_report+0x4d/0x53 [ 26.145097][ C0] __kasan_report.cold+0x72/0x92 [ 26.145107][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.145118][ C0] ? si470x_int_in_callback.cold+0x27/0xbe [ 26.145140][ C0] kasan_report+0x33/0x50 [ 26.145154][ C0] si470x_int_in_callback.cold+0x27/0xbe [ 26.145163][ C0] ? usb_hcd_unmap_urb_for_dma+0x105/0x9b0 [ 26.145174][ C0] __usb_hcd_giveback_urb+0x1f2/0x470 [ 26.145184][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 26.145195][ C0] dummy_timer+0x125e/0x32b4 [ 26.145212][ C0] ? __lock_acquire+0x2248/0x6650 [ 26.145223][ C0] ? lock_acquire+0x18b/0x7c0 [ 26.145237][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.145249][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.145266][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.145280][ C0] call_timer_fn+0x1ac/0x700 [ 26.145290][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.145299][ C0] ? timer_fixup_init+0x60/0x60 [ 26.145309][ C0] ? lock_downgrade+0x720/0x720 [ 26.145320][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.145331][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.145346][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.145362][ C0] ? dummy_udc_probe+0x980/0x980 [ 26.145384][ C0] run_timer_softirq+0x5f9/0x1500 [ 26.145397][ C0] ? add_timer+0x7a0/0x7a0 [ 26.145409][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.145420][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.145430][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.145446][ C0] __do_softirq+0x21e/0x9aa [ 26.145457][ C0] irq_exit+0x178/0x1a0 [ 26.145468][ C0] smp_apic_timer_interrupt+0x141/0x540 [ 26.145483][ C0] apic_timer_interrupt+0xf/0x20 [ 26.145487][ C0] [ 26.145499][ C0] RIP: 0010:console_unlock+0xa6b/0xca0 [ 26.145511][ C0] Code: 00 89 ee 48 c7 c7 20 d0 14 87 e8 f0 d0 03 00 65 ff 0d 61 35 d8 7e e9 b5 f9 ff ff e8 ff 60 16 00 e8 aa bc 1b 00 ff 74 24 30 9d 17 fe ff ff e8 eb 60 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 26.145517][ C0] RSP: 0018:ffff8881cd4af0c0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 26.145536][ C0] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffffffff126c9cd [ 26.145542][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881cf06d2bc [ 26.145548][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff126c8cd [ 26.145555][ C0] R10: ffffffff89364667 R11: fffffbfff126c8cc R12: ffffffff82ab9e20 [ 26.145562][ C0] R13: ffffffff874edbd0 R14: 000000000000004c R15: dffffc0000000000 [ 26.145576][ C0] ? netconsole_netdev_event+0x2a0/0x2a0 [ 26.145590][ C0] vprintk_emit+0x16d/0x3e0 [ 26.145598][ C0] vprintk_func+0x75/0x113 [ 26.145613][ C0] printk+0xba/0xed [ 26.145624][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 26.145635][ C0] really_probe.cold+0x88/0x1fd [ 26.145647][ C0] driver_probe_device+0x223/0x350 [ 26.145666][ C0] __device_attach_driver+0x1d1/0x290 [ 26.145678][ C0] ? driver_allows_async_probing+0x160/0x160 [ 26.145688][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.145699][ C0] ? bus_rescan_devices+0x20/0x20 [ 26.145709][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.145720][ C0] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.145730][ C0] __device_attach+0x21a/0x390 [ 26.145741][ C0] ? device_bind_driver+0xd0/0xd0 [ 26.145755][ C0] bus_probe_device+0x1e4/0x290 [ 26.145765][ C0] device_add+0x1367/0x1c20 [ 26.145775][ C0] ? wait_for_completion+0x280/0x280 [ 26.145785][ C0] ? device_link_remove+0x110/0x110 [ 26.145802][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.145811][ C0] usb_set_configuration+0xed4/0x1850 [ 26.145823][ C0] usb_generic_driver_probe+0x9d/0xe0 [ 26.145841][ C0] usb_probe_device+0xd9/0x230 [ 26.145851][ C0] ? usb_suspend+0x600/0x600 [ 26.145861][ C0] really_probe+0x290/0xac0 [ 26.145879][ C0] driver_probe_device+0x223/0x350 [ 26.145891][ C0] __device_attach_driver+0x1d1/0x290 [ 26.145905][ C0] ? driver_allows_async_probing+0x160/0x160 [ 26.145920][ C0] bus_for_each_drv+0x162/0x1e0 [ 26.145930][ C0] ? bus_rescan_devices+0x20/0x20 [ 26.145944][ C0] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.145955][ C0] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.145966][ C0] __device_attach+0x21a/0x390 [ 26.145976][ C0] ? device_bind_driver+0xd0/0xd0 [ 26.145990][ C0] bus_probe_device+0x1e4/0x290 [ 26.146000][ C0] device_add+0x1367/0x1c20 [ 26.146011][ C0] ? device_link_remove+0x110/0x110 [ 26.146023][ C0] usb_new_device.cold+0x552/0xf6e [ 26.146033][ C0] ? hub_disconnect+0x4a0/0x4a0 [ 26.146044][ C0] ? mark_held_locks+0x9f/0xe0 [ 26.146052][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.146072][ C0] hub_event+0x226d/0x43c0 [ 26.146085][ C0] ? hub_port_debounce+0x350/0x350 [ 26.146095][ C0] ? umh_clean_and_save_pid+0x1/0xd0 [ 26.146110][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.146125][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.146135][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.146144][ C0] process_one_work+0x965/0x1630 [ 26.146155][ C0] ? lock_release+0x720/0x720 [ 26.146165][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 26.146174][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 26.146184][ C0] worker_thread+0x96/0xe20 [ 26.146197][ C0] ? process_one_work+0x1630/0x1630 [ 26.146208][ C0] kthread+0x326/0x430 [ 26.146219][ C0] ? kthread_create_on_node+0xf0/0xf0 [ 26.146234][ C0] ret_from_fork+0x24/0x30 [ 26.146796][ C0] Kernel Offset: disabled [ 27.751591][ C0] Rebooting in 86400 seconds..