program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x2a, 0x2, 0x400) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)) write(r3, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x4000000) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) [ 139.930650][ T44] Bluetooth: hci0: command tx timeout [ 140.101561][ T5338] vhci_hcd vhci_hcd.0: remove, state 4 [ 140.110064][ T5338] usb usb7: USB disconnect, device number 1 [ 140.236759][ T1061] vhci_hcd vhci_hcd.0: stop threads [ 140.239958][ T1061] vhci_hcd vhci_hcd.0: release socket [ 140.242638][ T1061] vhci_hcd vhci_hcd.0: disconnect device [ 140.248790][ T1061] vhci_hcd vhci_hcd.0: stop threads [ 140.251405][ T1061] vhci_hcd vhci_hcd.0: release socket [ 140.255504][ T5338] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 140.259556][ T1061] vhci_hcd vhci_hcd.0: disconnect device [ 140.266322][ T1061] vhci_hcd vhci_hcd.0: stop threads [ 140.273431][ T1061] vhci_hcd vhci_hcd.0: release socket [ 140.280737][ T1061] vhci_hcd vhci_hcd.0: disconnect device [ 140.288995][ T5338] vhci_hcd vhci_hcd.0: remove, state 4 [ 140.294429][ T1061] ================================================================== [ 140.298594][ T1061] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 140.302373][ T1061] Read of size 1 at addr ffff888034b04918 by task kworker/u4:9/1061 [ 140.306466][ T1061] [ 140.307915][ T1061] CPU: 0 UID: 0 PID: 1061 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 140.307935][ T1061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.307944][ T1061] Workqueue: usbip_event event_handler [ 140.307968][ T1061] Call Trace: [ 140.307977][ T1061] [ 140.307984][ T1061] dump_stack_lvl+0xe8/0x150 [ 140.308006][ T1061] print_address_description+0x55/0x1e0 [ 140.308023][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.308037][ T1061] print_report+0x58/0x70 [ 140.308053][ T1061] kasan_report+0x117/0x150 [ 140.308071][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.308087][ T1061] ? event_handler+0x2b0/0x4b0 [ 140.308099][ T1061] __kasan_check_byte+0x2a/0x40 [ 140.308115][ T1061] lock_acquire+0x84/0x350 [ 140.308132][ T1061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.308148][ T1061] ? rcu_is_watching+0x15/0xb0 [ 140.308161][ T1061] _raw_spin_lock_irqsave+0x40/0x60 [ 140.308173][ T1061] ? event_handler+0x2b0/0x4b0 [ 140.308186][ T1061] event_handler+0x2b0/0x4b0 [ 140.308200][ T1061] ? process_scheduled_works+0xa20/0x14e0 [ 140.308215][ T1061] process_scheduled_works+0xa8e/0x14e0 [ 140.308238][ T1061] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.308255][ T1061] ? assign_work+0x3cf/0x5d0 [ 140.308270][ T1061] worker_thread+0xa47/0xfb0 [ 140.308294][ T1061] kthread+0x388/0x470 [ 140.308314][ T1061] ? __pfx_worker_thread+0x10/0x10 [ 140.308329][ T1061] ? __pfx_kthread+0x10/0x10 [ 140.308347][ T1061] ret_from_fork+0x514/0xb70 [ 140.308369][ T1061] ? __pfx_ret_from_fork+0x10/0x10 [ 140.308388][ T1061] ? __switch_to+0xc89/0x1420 [ 140.308405][ T1061] ? __pfx_kthread+0x10/0x10 [ 140.308422][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.308439][ T1061] [ 140.308444][ T1061] [ 140.397225][ T1061] Allocated by task 1: [ 140.399196][ T1061] kasan_save_track+0x3e/0x80 [ 140.401244][ T1061] __kasan_kmalloc+0x93/0xb0 [ 140.403450][ T1061] __kmalloc_noprof+0x375/0x720 [ 140.406008][ T1061] __usb_create_hcd+0x67/0x900 [ 140.408839][ T1061] vhci_hcd_probe+0x1e6/0x3e0 [ 140.411806][ T1061] platform_probe+0xf9/0x190 [ 140.414243][ T1061] really_probe+0x254/0xae0 [ 140.416631][ T1061] __driver_probe_device+0x1e8/0x360 [ 140.419206][ T1061] driver_probe_device+0x4f/0x240 [ 140.422043][ T1061] __device_attach_driver+0x270/0x410 [ 140.425139][ T1061] bus_for_each_drv+0x258/0x2f0 [ 140.427770][ T1061] __device_attach+0x2c4/0x450 [ 140.430096][ T1061] device_initial_probe+0xa1/0xd0 [ 140.432442][ T1061] bus_probe_device+0x12a/0x220 [ 140.434936][ T1061] device_add+0x7d7/0xb80 [ 140.437564][ T1061] platform_device_add+0x4bd/0x860 [ 140.440750][ T1061] platform_device_register_full+0x62d/0x710 [ 140.443594][ T1061] vhci_hcd_init+0x227/0x360 [ 140.445619][ T1061] do_one_initcall+0x250/0x870 [ 140.447790][ T1061] do_initcall_level+0x10a/0x1a0 [ 140.450300][ T1061] do_initcalls+0x59/0xa0 [ 140.453176][ T1061] kernel_init_freeable+0x29d/0x3e0 [ 140.455792][ T1061] kernel_init+0x1d/0x1d0 [ 140.457723][ T1061] ret_from_fork+0x514/0xb70 [ 140.459665][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.461790][ T1061] [ 140.463068][ T1061] Freed by task 5338: [ 140.465299][ T1061] kasan_save_track+0x3e/0x80 [ 140.467956][ T1061] kasan_save_free_info+0x40/0x50 [ 140.470470][ T1061] __kasan_slab_free+0x5c/0x80 [ 140.472957][ T1061] kfree+0x1c5/0x640 [ 140.474975][ T1061] vhci_hcd_remove+0x9e/0x110 [ 140.477547][ T1061] device_release_driver_internal+0x48b/0x880 [ 140.480763][ T1061] unbind_store+0x1a1/0x1d0 [ 140.483158][ T1061] kernfs_fop_write_iter+0x3a4/0x540 [ 140.485865][ T1061] vfs_write+0x612/0xba0 [ 140.487991][ T1061] ksys_write+0x150/0x270 [ 140.490093][ T1061] do_syscall_64+0x174/0x580 [ 140.492572][ T1061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.495744][ T1061] [ 140.497201][ T1061] Last potentially related work creation: [ 140.500432][ T1061] kasan_save_stack+0x3e/0x60 [ 140.502809][ T1061] kasan_record_aux_stack+0xbd/0xd0 [ 140.505399][ T1061] insert_work+0x3d/0x330 [ 140.507661][ T1061] __queue_work+0xcd8/0x10a0 [ 140.510061][ T1061] queue_work_on+0x106/0x1d0 [ 140.512489][ T1061] unlink1+0x344/0x3e0 [ 140.514459][ T1061] usb_hcd_unlink_urb+0xe6/0x1e0 [ 140.517057][ T1061] usb_kill_urb+0x10b/0x2f0 [ 140.519162][ T1061] hub_quiesce+0x211/0x330 [ 140.521220][ T1061] hub_suspend+0x904/0xad0 [ 140.523437][ T1061] usb_suspend_both+0x285/0x1040 [ 140.526358][ T1061] usb_runtime_suspend+0x58/0x110 [ 140.529399][ T1061] __rpm_callback+0x2c7/0x950 [ 140.531943][ T1061] rpm_suspend+0x8a0/0x17b0 [ 140.533816][ T1061] __pm_runtime_suspend+0x12f/0x1a0 [ 140.535861][ T1061] usb_new_device+0xadf/0x1620 [ 140.538094][ T1061] register_root_hub+0x250/0x5c0 [ 140.540809][ T1061] usb_add_hcd+0xac7/0xf80 [ 140.543715][ T1061] vhci_hcd_probe+0x1fa/0x3e0 [ 140.546578][ T1061] platform_probe+0xf9/0x190 [ 140.548535][ T1061] really_probe+0x254/0xae0 [ 140.550473][ T1061] __driver_probe_device+0x1e8/0x360 [ 140.553026][ T1061] driver_probe_device+0x4f/0x240 [ 140.555935][ T1061] __device_attach_driver+0x270/0x410 [ 140.558927][ T1061] bus_for_each_drv+0x258/0x2f0 [ 140.561469][ T1061] __device_attach+0x2c4/0x450 [ 140.563957][ T1061] device_initial_probe+0xa1/0xd0 [ 140.566728][ T1061] bus_probe_device+0x12a/0x220 [ 140.569332][ T1061] device_add+0x7d7/0xb80 [ 140.571439][ T1061] platform_device_add+0x4bd/0x860 [ 140.574119][ T1061] platform_device_register_full+0x62d/0x710 [ 140.577208][ T1061] vhci_hcd_init+0x227/0x360 [ 140.579601][ T1061] do_one_initcall+0x250/0x870 [ 140.582173][ T1061] do_initcall_level+0x10a/0x1a0 [ 140.584691][ T1061] do_initcalls+0x59/0xa0 [ 140.586873][ T1061] kernel_init_freeable+0x29d/0x3e0 [ 140.589557][ T1061] kernel_init+0x1d/0x1d0 [ 140.591781][ T1061] ret_from_fork+0x514/0xb70 [ 140.594206][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.596676][ T1061] [ 140.597910][ T1061] Second to last potentially related work creation: [ 140.601320][ T1061] kasan_save_stack+0x3e/0x60 [ 140.603725][ T1061] kasan_record_aux_stack+0xbd/0xd0 [ 140.606311][ T1061] insert_work+0x3d/0x330 [ 140.608599][ T1061] __queue_work+0xcd8/0x10a0 [ 140.611006][ T1061] queue_work_on+0x106/0x1d0 [ 140.613215][ T1061] usb_hcd_submit_urb+0xa3b/0x1b60 [ 140.615789][ T1061] usb_start_wait_urb+0x13f/0x5b0 [ 140.618480][ T1061] usb_control_msg+0x234/0x3e0 [ 140.621080][ T1061] hub_suspend+0x891/0xad0 [ 140.623350][ T1061] usb_suspend_both+0x285/0x1040 [ 140.625889][ T1061] usb_runtime_suspend+0x58/0x110 [ 140.628311][ T1061] __rpm_callback+0x2c7/0x950 [ 140.630524][ T1061] rpm_suspend+0x8a0/0x17b0 [ 140.632645][ T1061] __pm_runtime_suspend+0x12f/0x1a0 [ 140.634926][ T1061] usb_new_device+0xadf/0x1620 [ 140.637409][ T1061] register_root_hub+0x250/0x5c0 [ 140.639845][ T1061] usb_add_hcd+0xac7/0xf80 [ 140.642173][ T1061] vhci_hcd_probe+0x1fa/0x3e0 [ 140.644184][ T1061] platform_probe+0xf9/0x190 [ 140.646098][ T1061] really_probe+0x254/0xae0 [ 140.648122][ T1061] __driver_probe_device+0x1e8/0x360 [ 140.650683][ T1061] driver_probe_device+0x4f/0x240 [ 140.653287][ T1061] __device_attach_driver+0x270/0x410 [ 140.655953][ T1061] bus_for_each_drv+0x258/0x2f0 [ 140.658174][ T1061] __device_attach+0x2c4/0x450 [ 140.660380][ T1061] device_initial_probe+0xa1/0xd0 [ 140.662723][ T1061] bus_probe_device+0x12a/0x220 [ 140.664985][ T1061] device_add+0x7d7/0xb80 [ 140.667289][ T1061] platform_device_add+0x4bd/0x860 [ 140.670088][ T1061] platform_device_register_full+0x62d/0x710 [ 140.672983][ T1061] vhci_hcd_init+0x227/0x360 [ 140.675166][ T1061] do_one_initcall+0x250/0x870 [ 140.677355][ T1061] do_initcall_level+0x10a/0x1a0 [ 140.679723][ T1061] do_initcalls+0x59/0xa0 [ 140.681887][ T1061] kernel_init_freeable+0x29d/0x3e0 [ 140.684905][ T1061] kernel_init+0x1d/0x1d0 [ 140.687017][ T1061] ret_from_fork+0x514/0xb70 [ 140.689226][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.691465][ T1061] [ 140.692740][ T1061] The buggy address belongs to the object at ffff888034b04000 [ 140.692740][ T1061] which belongs to the cache kmalloc-8k of size 8192 [ 140.699312][ T1061] The buggy address is located 2328 bytes inside of [ 140.699312][ T1061] freed 8192-byte region [ffff888034b04000, ffff888034b06000) [ 140.705820][ T1061] [ 140.707077][ T1061] The buggy address belongs to the physical page: [ 140.710054][ T1061] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b00 [ 140.714234][ T1061] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 140.718472][ T1061] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 140.722127][ T1061] page_type: f5(slab) [ 140.723964][ T1061] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 140.728131][ T1061] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 140.732425][ T1061] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 140.736556][ T1061] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 140.740684][ T1061] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 140.745099][ T1061] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 140.749265][ T1061] page dumped because: kasan: bad access detected [ 140.752322][ T1061] page_owner tracks the page as allocated [ 140.754928][ T1061] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19966372501, free_ts 19860597162 [ 140.765803][ T1061] post_alloc_hook+0x1f9/0x250 [ 140.768357][ T1061] get_page_from_freelist+0x21fa/0x2270 [ 140.771045][ T1061] __alloc_frozen_pages_noprof+0x18d/0x380 [ 140.773792][ T1061] allocate_slab+0x79/0x5e0 [ 140.775981][ T1061] refill_objects+0x2d5/0x350 [ 140.778368][ T1061] __pcs_replace_empty_main+0x2bf/0x6b0 [ 140.781110][ T1061] __kmalloc_noprof+0x485/0x720 [ 140.783560][ T1061] __usb_create_hcd+0x67/0x900 [ 140.785739][ T1061] vhci_hcd_probe+0x1e6/0x3e0 [ 140.787847][ T1061] platform_probe+0xf9/0x190 [ 140.789976][ T1061] really_probe+0x254/0xae0 [ 140.792192][ T1061] __driver_probe_device+0x1e8/0x360 [ 140.794690][ T1061] driver_probe_device+0x4f/0x240 [ 140.797147][ T1061] __device_attach_driver+0x270/0x410 [ 140.799526][ T1061] bus_for_each_drv+0x258/0x2f0 [ 140.801419][ T1061] __device_attach+0x2c4/0x450 [ 140.803357][ T1061] page last free pid 1 tgid 1 stack trace: [ 140.805896][ T1061] __free_frozen_pages+0xc1e/0xd10 [ 140.808069][ T1061] __slab_free+0x274/0x2c0 [ 140.809925][ T1061] qlist_free_all+0x99/0x100 [ 140.811889][ T1061] kasan_quarantine_reduce+0x148/0x160 [ 140.815331][ T1061] __kasan_slab_alloc+0x22/0x80 [ 140.818888][ T1061] __kmalloc_noprof+0x311/0x720 [ 140.820923][ T1061] __alloc_workqueue+0x10b/0x2060 [ 140.822997][ T1061] alloc_workqueue_noprof+0xe3/0x210 [ 140.825233][ T1061] usbip_init_eh+0x26/0x60 [ 140.827068][ T1061] do_one_initcall+0x250/0x870 [ 140.829174][ T1061] do_initcall_level+0x10a/0x1a0 [ 140.831494][ T1061] do_initcalls+0x59/0xa0 [ 140.833833][ T1061] kernel_init_freeable+0x29d/0x3e0 [ 140.836962][ T1061] kernel_init+0x1d/0x1d0 [ 140.839247][ T1061] ret_from_fork+0x514/0xb70 [ 140.841594][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.844101][ T1061] [ 140.845419][ T1061] Memory state around the buggy address: [ 140.848599][ T1061] ffff888034b04800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.853106][ T1061] ffff888034b04880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.856673][ T1061] >ffff888034b04900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.860054][ T1061] ^ [ 140.862210][ T1061] ffff888034b04980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.866590][ T1061] ffff888034b04a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.870054][ T1061] ================================================================== [ 140.873204][ T1061] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 140.876059][ T1061] CPU: 0 UID: 0 PID: 1061 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 140.879795][ T1061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.883911][ T1061] Workqueue: usbip_event event_handler [ 140.886158][ T1061] Call Trace: [ 140.887573][ T1061] [ 140.888847][ T1061] vpanic+0x56c/0xa60 [ 140.890588][ T1061] ? __pfx_vpanic+0x10/0x10 [ 140.892490][ T1061] panic+0xc5/0xd0 [ 140.894079][ T1061] ? __pfx_panic+0x10/0x10 [ 140.896231][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.898901][ T1061] ? rcu_is_watching+0x15/0xb0 [ 140.901077][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.903394][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.905687][ T1061] check_panic_on_warn+0x89/0xb0 [ 140.908007][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.910582][ T1061] end_report+0x73/0x170 [ 140.912818][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.915839][ T1061] kasan_report+0x128/0x150 [ 140.918253][ T1061] ? _raw_spin_lock_irqsave+0x40/0x60 [ 140.920886][ T1061] ? event_handler+0x2b0/0x4b0 [ 140.923173][ T1061] __kasan_check_byte+0x2a/0x40 [ 140.925623][ T1061] lock_acquire+0x84/0x350 [ 140.927986][ T1061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.931228][ T1061] ? rcu_is_watching+0x15/0xb0 [ 140.934088][ T1061] _raw_spin_lock_irqsave+0x40/0x60 [ 140.936998][ T1061] ? event_handler+0x2b0/0x4b0 [ 140.939245][ T1061] event_handler+0x2b0/0x4b0 [ 140.941218][ T1061] ? process_scheduled_works+0xa20/0x14e0 [ 140.943692][ T1061] process_scheduled_works+0xa8e/0x14e0 [ 140.946618][ T1061] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.949708][ T1061] ? assign_work+0x3cf/0x5d0 [ 140.952093][ T1061] worker_thread+0xa47/0xfb0 [ 140.954370][ T1061] kthread+0x388/0x470 [ 140.956413][ T1061] ? __pfx_worker_thread+0x10/0x10 [ 140.958979][ T1061] ? __pfx_kthread+0x10/0x10 [ 140.961015][ T1061] ret_from_fork+0x514/0xb70 [ 140.962891][ T1061] ? __pfx_ret_from_fork+0x10/0x10 [ 140.964941][ T1061] ? __switch_to+0xc89/0x1420 [ 140.966866][ T1061] ? __pfx_kthread+0x10/0x10 [ 140.968748][ T1061] ret_from_fork_asm+0x1a/0x30 [ 140.970656][ T1061] [ 140.972349][ T1061] Kernel Offset: disabled [ 140.974186][ T1061] Rebooting in 86400 seconds..