program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xac}}, 0x4004000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './sys/bus/platform/drivers/vhci_hcd/unbind\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000001200)=""/183, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x1000000, 0x0}}, {{0x0, 0xffffffffffffff09, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/122, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xac}}, 0x4004000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './sys/bus/platform/drivers/vhci_hcd/unbind\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000001200)=""/183, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) socket$kcm(0x29, 0x2, 0x0) (async) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) (async) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x1000000, 0x0}}, {{0x0, 0xffffffffffffff09, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/122, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async) [ 86.463573][ T44] Bluetooth: hci0: command tx timeout [ 86.555614][ T5326] vhci_hcd vhci_hcd.0: remove, state 4 [ 86.558640][ T5326] usb usb7: USB disconnect, device number 1 [ 86.600424][ T13] vhci_hcd vhci_hcd.0: stop threads [ 86.610307][ T13] vhci_hcd vhci_hcd.0: release socket [ 86.615707][ T5326] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 86.618466][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 86.621964][ T13] vhci_hcd vhci_hcd.0: stop threads [ 86.628028][ T13] vhci_hcd vhci_hcd.0: release socket [ 86.636102][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 86.640685][ T5326] vhci_hcd vhci_hcd.0: remove, state 4 [ 86.644221][ T5326] usb usb6: USB disconnect, device number 1 [ 86.646380][ T13] ================================================================== [ 86.646386][ T13] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 86.646500][ T13] Read of size 1 at addr ffff888034b146c8 by task kworker/u4:1/13 [ 86.646509][ T13] [ 86.646516][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full) [ 86.646532][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.646538][ T13] Workqueue: usbip_event event_handler [ 86.646551][ T13] Call Trace: [ 86.646555][ T13] [ 86.646559][ T13] dump_stack_lvl+0xe8/0x150 [ 86.646573][ T13] print_address_description+0x55/0x1e0 [ 86.646587][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.646597][ T13] print_report+0x58/0x70 [ 86.646609][ T13] kasan_report+0x117/0x150 [ 86.646624][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.646634][ T13] ? event_handler+0x2b0/0x4b0 [ 86.646643][ T13] __kasan_check_byte+0x2a/0x40 [ 86.646655][ T13] lock_acquire+0x84/0x350 [ 86.646669][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.646680][ T13] ? rcu_is_watching+0x15/0xb0 [ 86.646690][ T13] _raw_spin_lock_irqsave+0x40/0x60 [ 86.646699][ T13] ? event_handler+0x2b0/0x4b0 [ 86.646708][ T13] event_handler+0x2b0/0x4b0 [ 86.646719][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 86.646730][ T13] process_scheduled_works+0xa8e/0x14e0 [ 86.646748][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.646782][ T13] ? assign_work+0x3cf/0x5d0 [ 86.646791][ T13] worker_thread+0xa47/0xfb0 [ 86.646803][ T13] kthread+0x388/0x470 [ 86.646815][ T13] ? __pfx_worker_thread+0x10/0x10 [ 86.646825][ T13] ? __pfx_kthread+0x10/0x10 [ 86.646837][ T13] ret_from_fork+0x514/0xb70 [ 86.646850][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 86.646864][ T13] ? __switch_to+0xc89/0x1420 [ 86.646877][ T13] ? __pfx_kthread+0x10/0x10 [ 86.646891][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.646904][ T13] [ 86.646908][ T13] [ 86.646911][ T13] Allocated by task 1: [ 86.646916][ T13] kasan_save_track+0x3e/0x80 [ 86.646927][ T13] __kasan_kmalloc+0x93/0xb0 [ 86.646936][ T13] __kmalloc_noprof+0x375/0x720 [ 86.646948][ T13] __usb_create_hcd+0x67/0x900 [ 86.646995][ T13] vhci_hcd_probe+0x1e6/0x3e0 [ 86.647005][ T13] platform_probe+0xf9/0x190 [ 86.647014][ T13] really_probe+0x254/0xae0 [ 86.647024][ T13] __driver_probe_device+0x1e8/0x360 [ 86.647034][ T13] driver_probe_device+0x4f/0x240 [ 86.647044][ T13] __device_attach_driver+0x270/0x410 [ 86.647054][ T13] bus_for_each_drv+0x258/0x2f0 [ 86.647066][ T13] __device_attach+0x2c4/0x450 [ 86.647075][ T13] device_initial_probe+0xa1/0xd0 [ 86.647084][ T13] bus_probe_device+0x12a/0x220 [ 86.647097][ T13] device_add+0x7d7/0xb80 [ 86.647105][ T13] platform_device_add+0x4bd/0x860 [ 86.647118][ T13] platform_device_register_full+0x62d/0x710 [ 86.647132][ T13] vhci_hcd_init+0x227/0x360 [ 86.647211][ T13] do_one_initcall+0x250/0x870 [ 86.647224][ T13] do_initcall_level+0x10a/0x1a0 [ 86.647236][ T13] do_initcalls+0x59/0xa0 [ 86.647247][ T13] kernel_init_freeable+0x29d/0x3e0 [ 86.647257][ T13] kernel_init+0x1d/0x1d0 [ 86.647269][ T13] ret_from_fork+0x514/0xb70 [ 86.647281][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.647290][ T13] [ 86.647293][ T13] Freed by task 5326: [ 86.647298][ T13] kasan_save_track+0x3e/0x80 [ 86.647309][ T13] kasan_save_free_info+0x40/0x50 [ 86.647318][ T13] __kasan_slab_free+0x5c/0x80 [ 86.647328][ T13] kfree+0x1c5/0x640 [ 86.647336][ T13] vhci_hcd_remove+0x9e/0x110 [ 86.647346][ T13] device_release_driver_internal+0x48b/0x880 [ 86.647356][ T13] unbind_store+0x1a1/0x1d0 [ 86.647364][ T13] kernfs_fop_write_iter+0x3a4/0x540 [ 86.647373][ T13] vfs_write+0x612/0xba0 [ 86.647386][ T13] ksys_write+0x150/0x270 [ 86.647398][ T13] do_syscall_64+0x174/0x580 [ 86.647408][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.647418][ T13] [ 86.647421][ T13] Last potentially related work creation: [ 86.647425][ T13] kasan_save_stack+0x3e/0x60 [ 86.647435][ T13] kasan_record_aux_stack+0xbd/0xd0 [ 86.647443][ T13] insert_work+0x3d/0x330 [ 86.647452][ T13] __queue_work+0xcd8/0x10a0 [ 86.647463][ T13] queue_work_on+0x106/0x1d0 [ 86.647474][ T13] unlink1+0x344/0x3e0 [ 86.647482][ T13] usb_hcd_unlink_urb+0xe6/0x1e0 [ 86.647492][ T13] usb_kill_urb+0x10b/0x2f0 [ 86.647502][ T13] hub_quiesce+0x211/0x330 [ 86.647515][ T13] hub_suspend+0x904/0xad0 [ 86.647527][ T13] usb_suspend_both+0x285/0x1040 [ 86.647536][ T13] usb_runtime_suspend+0x58/0x110 [ 86.647545][ T13] __rpm_callback+0x2c7/0x950 [ 86.647556][ T13] rpm_suspend+0x8a0/0x17b0 [ 86.647565][ T13] __pm_runtime_suspend+0x12f/0x1a0 [ 86.647574][ T13] usb_new_device+0xadf/0x1620 [ 86.647585][ T13] register_root_hub+0x250/0x5c0 [ 86.647595][ T13] usb_add_hcd+0xac7/0xf80 [ 86.647604][ T13] vhci_hcd_probe+0x1fa/0x3e0 [ 86.647614][ T13] platform_probe+0xf9/0x190 [ 86.647623][ T13] really_probe+0x254/0xae0 [ 86.647632][ T13] __driver_probe_device+0x1e8/0x360 [ 86.647642][ T13] driver_probe_device+0x4f/0x240 [ 86.647651][ T13] __device_attach_driver+0x270/0x410 [ 86.647660][ T13] bus_for_each_drv+0x258/0x2f0 [ 86.647672][ T13] __device_attach+0x2c4/0x450 [ 86.647682][ T13] device_initial_probe+0xa1/0xd0 [ 86.647691][ T13] bus_probe_device+0x12a/0x220 [ 86.647702][ T13] device_add+0x7d7/0xb80 [ 86.647710][ T13] platform_device_add+0x4bd/0x860 [ 86.647723][ T13] platform_device_register_full+0x62d/0x710 [ 86.647737][ T13] vhci_hcd_init+0x227/0x360 [ 86.647745][ T13] do_one_initcall+0x250/0x870 [ 86.647758][ T13] do_initcall_level+0x10a/0x1a0 [ 86.647775][ T13] do_initcalls+0x59/0xa0 [ 86.647786][ T13] kernel_init_freeable+0x29d/0x3e0 [ 86.647797][ T13] kernel_init+0x1d/0x1d0 [ 86.647810][ T13] ret_from_fork+0x514/0xb70 [ 86.647822][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.647830][ T13] [ 86.647833][ T13] Second to last potentially related work creation: [ 86.647837][ T13] kasan_save_stack+0x3e/0x60 [ 86.647847][ T13] kasan_record_aux_stack+0xbd/0xd0 [ 86.647856][ T13] insert_work+0x3d/0x330 [ 86.647864][ T13] __queue_work+0xcd8/0x10a0 [ 86.647875][ T13] queue_work_on+0x106/0x1d0 [ 86.647886][ T13] usb_hcd_submit_urb+0xa3b/0x1b60 [ 86.647895][ T13] usb_start_wait_urb+0x13f/0x5b0 [ 86.647906][ T13] usb_control_msg+0x234/0x3e0 [ 86.647916][ T13] hub_suspend+0x891/0xad0 [ 86.647928][ T13] usb_suspend_both+0x285/0x1040 [ 86.647937][ T13] usb_runtime_suspend+0x58/0x110 [ 86.647946][ T13] __rpm_callback+0x2c7/0x950 [ 86.647957][ T13] rpm_suspend+0x8a0/0x17b0 [ 86.647966][ T13] __pm_runtime_suspend+0x12f/0x1a0 [ 86.647976][ T13] usb_new_device+0xadf/0x1620 [ 86.647986][ T13] register_root_hub+0x250/0x5c0 [ 86.647996][ T13] usb_add_hcd+0xac7/0xf80 [ 86.648007][ T13] vhci_hcd_probe+0x1fa/0x3e0 [ 86.648016][ T13] platform_probe+0xf9/0x190 [ 86.648025][ T13] really_probe+0x254/0xae0 [ 86.648033][ T13] __driver_probe_device+0x1e8/0x360 [ 86.648042][ T13] driver_probe_device+0x4f/0x240 [ 86.648051][ T13] __device_attach_driver+0x270/0x410 [ 86.648062][ T13] bus_for_each_drv+0x258/0x2f0 [ 86.648075][ T13] __device_attach+0x2c4/0x450 [ 86.648084][ T13] device_initial_probe+0xa1/0xd0 [ 86.648093][ T13] bus_probe_device+0x12a/0x220 [ 86.648105][ T13] device_add+0x7d7/0xb80 [ 86.648112][ T13] platform_device_add+0x4bd/0x860 [ 86.648125][ T13] platform_device_register_full+0x62d/0x710 [ 86.648139][ T13] vhci_hcd_init+0x227/0x360 [ 86.648147][ T13] do_one_initcall+0x250/0x870 [ 86.648160][ T13] do_initcall_level+0x10a/0x1a0 [ 86.648171][ T13] do_initcalls+0x59/0xa0 [ 86.648181][ T13] kernel_init_freeable+0x29d/0x3e0 [ 86.648193][ T13] kernel_init+0x1d/0x1d0 [ 86.648204][ T13] ret_from_fork+0x514/0xb70 [ 86.648217][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.648225][ T13] [ 86.648227][ T13] The buggy address belongs to the object at ffff888034b14000 [ 86.648227][ T13] which belongs to the cache kmalloc-8k of size 8192 [ 86.648236][ T13] The buggy address is located 1736 bytes inside of [ 86.648236][ T13] freed 8192-byte region [ffff888034b14000, ffff888034b16000) [ 86.648246][ T13] [ 86.648250][ T13] The buggy address belongs to the physical page: [ 86.648257][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b10 [ 86.648267][ T13] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.648277][ T13] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 86.648287][ T13] page_type: f5(slab) [ 86.648297][ T13] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 86.648306][ T13] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.648314][ T13] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 86.648323][ T13] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.648331][ T13] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 86.648339][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.648345][ T13] page dumped because: kasan: bad access detected [ 86.648351][ T13] page_owner tracks the page as allocated [ 86.648355][ T13] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16391331850, free_ts 16328880805 [ 86.648373][ T13] post_alloc_hook+0x1f9/0x250 [ 86.648383][ T13] get_page_from_freelist+0x21fa/0x2270 [ 86.648393][ T13] __alloc_frozen_pages_noprof+0x18d/0x380 [ 86.648404][ T13] allocate_slab+0x79/0x5e0 [ 86.648416][ T13] refill_objects+0x2d5/0x350 [ 86.648428][ T13] __pcs_replace_empty_main+0x2bf/0x6b0 [ 86.648441][ T13] __kmalloc_noprof+0x485/0x720 [ 86.648450][ T13] __usb_create_hcd+0x67/0x900 [ 86.648459][ T13] vhci_hcd_probe+0x1e6/0x3e0 [ 86.648469][ T13] platform_probe+0xf9/0x190 [ 86.648477][ T13] really_probe+0x254/0xae0 [ 86.648487][ T13] __driver_probe_device+0x1e8/0x360 [ 86.648497][ T13] driver_probe_device+0x4f/0x240 [ 86.648507][ T13] __device_attach_driver+0x270/0x410 [ 86.648517][ T13] bus_for_each_drv+0x258/0x2f0 [ 86.648526][ T13] __device_attach+0x2c4/0x450 [ 86.648532][ T13] page last free pid 1 tgid 1 stack trace: [ 86.648536][ T13] __free_frozen_pages+0xc1e/0xd10 [ 86.648542][ T13] __slab_free+0x274/0x2c0 [ 86.648549][ T13] qlist_free_all+0x99/0x100 [ 86.648555][ T13] kasan_quarantine_reduce+0x148/0x160 [ 86.648565][ T13] __kasan_slab_alloc+0x22/0x80 [ 86.648575][ T13] __kmalloc_cache_noprof+0x2ab/0x660 [ 86.648584][ T13] usb_alloc_dev+0x5f/0xf10 [ 86.648593][ T13] usb_add_hcd+0x407/0xf80 [ 86.648602][ T13] vhci_hcd_probe+0x141/0x3e0 [ 86.648611][ T13] platform_probe+0xf9/0x190 [ 86.648618][ T13] really_probe+0x254/0xae0 [ 86.648627][ T13] __driver_probe_device+0x1e8/0x360 [ 86.648637][ T13] driver_probe_device+0x4f/0x240 [ 86.648647][ T13] __device_attach_driver+0x270/0x410 [ 86.648658][ T13] bus_for_each_drv+0x258/0x2f0 [ 86.648670][ T13] __device_attach+0x2c4/0x450 [ 86.648680][ T13] [ 86.648683][ T13] Memory state around the buggy address: [ 86.648688][ T13] ffff888034b14580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.648693][ T13] ffff888034b14600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.648697][ T13] >ffff888034b14680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.648700][ T13] ^ [ 86.648704][ T13] ffff888034b14700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.648708][ T13] ffff888034b14780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.648711][ T13] ================================================================== [ 86.648716][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.648722][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full) [ 86.648730][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.648735][ T13] Workqueue: usbip_event event_handler [ 86.648743][ T13] Call Trace: [ 86.648747][ T13] [ 86.648750][ T13] vpanic+0x56c/0xa60 [ 86.648757][ T13] ? __pfx_vpanic+0x10/0x10 [ 86.648769][ T13] panic+0xc5/0xd0 [ 86.648778][ T13] ? __pfx_panic+0x10/0x10 [ 86.648788][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648795][ T13] ? rcu_is_watching+0x15/0xb0 [ 86.648801][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648808][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648814][ T13] check_panic_on_warn+0x89/0xb0 [ 86.648826][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648835][ T13] end_report+0x73/0x170 [ 86.648847][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648856][ T13] kasan_report+0x128/0x150 [ 86.648870][ T13] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648881][ T13] ? event_handler+0x2b0/0x4b0 [ 86.648890][ T13] __kasan_check_byte+0x2a/0x40 [ 86.648902][ T13] lock_acquire+0x84/0x350 [ 86.648916][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.648928][ T13] ? rcu_is_watching+0x15/0xb0 [ 86.648938][ T13] _raw_spin_lock_irqsave+0x40/0x60 [ 86.648948][ T13] ? event_handler+0x2b0/0x4b0 [ 86.648958][ T13] event_handler+0x2b0/0x4b0 [ 86.648967][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 86.648974][ T13] process_scheduled_works+0xa8e/0x14e0 [ 86.648985][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.648993][ T13] ? assign_work+0x3cf/0x5d0 [ 86.649001][ T13] worker_thread+0xa47/0xfb0 [ 86.649012][ T13] kthread+0x388/0x470 [ 86.649021][ T13] ? __pfx_worker_thread+0x10/0x10 [ 86.649029][ T13] ? __pfx_kthread+0x10/0x10 [ 86.649038][ T13] ret_from_fork+0x514/0xb70 [ 86.649048][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 86.649061][ T13] ? __switch_to+0xc89/0x1420 [ 86.649074][ T13] ? __pfx_kthread+0x10/0x10 [ 86.649088][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.649101][ T13] [ 86.649470][ T13] Kernel Offset: disabled