Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 23.279197][ T28] audit: type=1400 audit(1733103802.329:66): avc: denied { execmem } for pid=290 comm="syz-executor246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.299224][ T28] audit: type=1400 audit(1733103802.329:67): avc: denied { create } for pid=297 comm="syz-executor246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.314073][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 23.319615][ T28] audit: type=1400 audit(1733103802.329:68): avc: denied { ioctl } for pid=297 comm="syz-executor246" path="socket:[13170]" dev="sockfs" ino=13170 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.325522][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 23.351039][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 23.357034][ T8] Bluetooth: hci4: Frame reassembly failed (-84) [ 25.328777][ T297] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 25.328824][ T308] Bluetooth: hci4: command 0x1003 tx timeout [ 25.341236][ T305] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 25.341241][ T306] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 25.341310][ T305] Bluetooth: hci3: command 0x1003 tx timeout [ 25.347225][ T304] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 25.352973][ T303] Bluetooth: hci1: Opcode 0x1003 failed: -110 executing program [ 27.408754][ T296] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 27.457073][ T309] Bluetooth: hci1: Frame reassembly failed (-84) executing program [ 28.296815][ T300] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.302665][ T299] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.308515][ T298] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.318044][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.324468][ T43] Bluetooth: hci0: Frame reassembly failed (-84) executing program executing program executing program [ 28.351368][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 28.371729][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 28.375480][ T10] Bluetooth: hci4: Frame reassembly failed (-84) executing program [ 29.488745][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 29.488753][ T307] Bluetooth: hci1: command 0x1003 tx timeout [ 29.506615][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 30.368800][ T303] Bluetooth: hci2: command 0x1003 tx timeout [ 30.368795][ T306] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 30.368829][ T303] Bluetooth: hci0: command 0x1003 tx timeout [ 30.374651][ T304] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.392452][ T317] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.398327][ T319] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.404241][ T320] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.410177][ T321] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.416123][ T323] Bluetooth: hci0: Opcode 0x080f failed: -22 executing program executing program executing program executing program [ 30.448790][ T308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 30.448804][ T304] Bluetooth: hci4: command 0x1003 tx timeout [ 30.448825][ T304] Bluetooth: hci3: command 0x1003 tx timeout [ 30.454692][ T305] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 30.474715][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.479780][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 30.489154][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 30.499403][ T43] Bluetooth: hci4: Frame reassembly failed (-84) executing program [ 31.568758][ T325] Bluetooth: hci1: command 0x1003 tx timeout [ 31.568750][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.592897][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 32.528747][ T305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.538772][ T305] Bluetooth: hci4: command 0x1003 tx timeout [ 32.538799][ T304] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 32.544571][ T305] Bluetooth: hci3: command 0x1003 tx timeout [ 32.544587][ T305] Bluetooth: hci2: command 0x1003 tx timeout [ 32.544652][ T306] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 32.550499][ T308] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 33.648760][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 34.608739][ T327] Bluetooth: hci0: Opcode 0x080f failed: -110 executing program [ 35.474283][ T326] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 35.494448][ T328] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 35.500335][ T329] Bluetooth: hci0: Opcode 0x080f failed: -4 executing program [ 35.520867][ T43] Bluetooth: hci2: Frame reassembly failed (-84) executing program [ 35.561085][ T43] Bluetooth: hci3: Frame reassembly failed (-84) executing program executing program [ 36.597831][ T331] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 36.607236][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.642144][ T309] Bluetooth: hci1: Frame reassembly failed (-84) executing program executing program executing program [ 37.568761][ T308] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 37.568760][ T304] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 37.568826][ T304] Bluetooth: hci2: command 0x1003 tx timeout [ 37.574741][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 37.594188][ T309] Bluetooth: hci2: Frame reassembly failed (-84) [ 37.598183][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 37.606404][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 37.612773][ T10] Bluetooth: hci4: Frame reassembly failed (-84) executing program [ 38.608776][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 38.608776][ T307] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.620639][ T342] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.626547][ T343] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.632525][ T347] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.638434][ T346] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.644282][ T348] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 38.676249][ T307] ================================================================== [ 38.680709][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.684129][ T307] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 38.697149][ T307] Write of size 8 at addr ffff88810a438a00 by task kworker/u5:5/307 [ 38.704960][ T307] [ 38.707143][ T307] CPU: 1 PID: 307 Comm: kworker/u5:5 Not tainted 6.1.115-syzkaller-00041-ga887a44ace2a #0 [ 38.716850][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.726763][ T307] Workqueue: hci0 hci_power_on [ 38.731345][ T307] Call Trace: [ 38.734482][ T307] [ 38.737247][ T307] dump_stack_lvl+0x151/0x1b7 [ 38.741760][ T307] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 38.747051][ T307] ? _printk+0xd1/0x111 [ 38.751070][ T307] ? __virt_addr_valid+0x242/0x2f0 [ 38.755999][ T307] print_report+0x158/0x4e0 [ 38.760366][ T307] ? __virt_addr_valid+0x242/0x2f0 [ 38.765392][ T307] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 38.771444][ T307] ? enqueue_timer+0xa6/0x480 [ 38.775959][ T307] kasan_report+0x13c/0x170 [ 38.780298][ T307] ? enqueue_timer+0xa6/0x480 [ 38.784807][ T307] __asan_report_store8_noabort+0x17/0x20 [ 38.790452][ T307] enqueue_timer+0xa6/0x480 [ 38.794794][ T307] __mod_timer+0x8d3/0xcf0 [ 38.799046][ T307] ? mod_timer_pending+0x30/0x30 [ 38.803823][ T307] ? insert_work+0x283/0x310 [ 38.808244][ T307] ? __kasan_check_write+0x14/0x20 [ 38.813191][ T307] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 38.818488][ T307] schedule_timeout+0x187/0x380 [ 38.823171][ T307] ? console_conditional_schedule+0x10/0x10 [ 38.828898][ T307] ? queue_work_on+0x135/0x170 [ 38.833502][ T307] ? update_process_times+0x1b0/0x1b0 [ 38.838715][ T307] ? prepare_to_wait_event+0x3e6/0x420 [ 38.844003][ T307] __hci_cmd_sync_sk+0x2ad/0xf70 [ 38.848786][ T307] ? eir_get_service_data+0x2e0/0x2e0 [ 38.853986][ T307] ? wake_bit_function+0x230/0x230 [ 38.858930][ T307] ? __kasan_check_read+0x11/0x20 [ 38.863792][ T307] hci_dev_open_sync+0x1314/0x30a0 [ 38.868750][ T307] ? hci_reset_sync+0x100/0x100 [ 38.873422][ T307] ? __switch_to+0x62c/0x1190 [ 38.877938][ T307] ? __kasan_check_write+0x14/0x20 [ 38.883030][ T307] ? mutex_lock+0xb1/0x1e0 [ 38.887282][ T307] ? bit_wait_io_timeout+0x120/0x120 [ 38.892412][ T307] ? kthread_data+0x53/0xc0 [ 38.896741][ T307] hci_power_on+0x1a7/0x5e0 [ 38.901081][ T307] ? hci_tx_work+0x3790/0x3790 [ 38.905684][ T307] ? __schedule+0xcbd/0x1560 [ 38.910109][ T307] process_one_work+0x73d/0xcb0 [ 38.914807][ T307] worker_thread+0xa60/0x1260 [ 38.919310][ T307] kthread+0x26d/0x300 [ 38.923213][ T307] ? worker_clr_flags+0x1a0/0x1a0 [ 38.928072][ T307] ? kthread_blkcg+0xd0/0xd0 [ 38.932498][ T307] ret_from_fork+0x1f/0x30 [ 38.936768][ T307] [ 38.939624][ T307] [ 38.941784][ T307] Allocated by task 342: [ 38.945864][ T307] kasan_set_track+0x4b/0x70 [ 38.950288][ T307] kasan_save_alloc_info+0x1f/0x30 [ 38.955235][ T307] __kasan_kmalloc+0x9c/0xb0 [ 38.959663][ T307] __kmalloc+0xb4/0x1e0 [ 38.963658][ T307] hci_alloc_dev_priv+0x27/0x1c00 [ 38.968515][ T307] hci_uart_tty_ioctl+0x401/0xa70 [ 38.973376][ T307] tty_ioctl+0x903/0xc50 [ 38.977456][ T307] __se_sys_ioctl+0x114/0x190 [ 38.981973][ T307] __x64_sys_ioctl+0x7b/0x90 [ 38.986400][ T307] x64_sys_call+0x98/0x9a0 [ 38.990648][ T307] do_syscall_64+0x3b/0xb0 [ 38.994902][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.000631][ T307] [ 39.002800][ T307] Freed by task 348: [ 39.006532][ T307] kasan_set_track+0x4b/0x70 [ 39.010958][ T307] kasan_save_free_info+0x2b/0x40 [ 39.015819][ T307] ____kasan_slab_free+0x131/0x180 [ 39.020767][ T307] __kasan_slab_free+0x11/0x20 [ 39.025364][ T307] __kmem_cache_free+0x21d/0x410 [ 39.030141][ T307] kfree+0x7a/0xf0 [ 39.033696][ T307] hci_release_dev+0x14d3/0x1640 [ 39.038481][ T307] bt_host_release+0x83/0xa0 [ 39.042900][ T307] device_release+0x95/0x1c0 [ 39.047324][ T307] kobject_put+0x178/0x260 [ 39.051584][ T307] put_device+0x1f/0x30 [ 39.055569][ T307] hci_dev_cmd+0x2be/0x9b0 [ 39.059821][ T307] hci_sock_ioctl+0x415/0x7f0 [ 39.064336][ T307] sock_do_ioctl+0x152/0x450 [ 39.068762][ T307] sock_ioctl+0x455/0x740 [ 39.072929][ T307] __se_sys_ioctl+0x114/0x190 [ 39.077441][ T307] __x64_sys_ioctl+0x7b/0x90 [ 39.081868][ T307] x64_sys_call+0x98/0x9a0 [ 39.086122][ T307] do_syscall_64+0x3b/0xb0 [ 39.090372][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.096102][ T307] [ 39.098274][ T307] Last potentially related work creation: [ 39.103829][ T307] kasan_save_stack+0x3b/0x60 [ 39.108338][ T307] __kasan_record_aux_stack+0xb4/0xc0 [ 39.113549][ T307] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.119190][ T307] insert_work+0x56/0x310 [ 39.123356][ T307] __queue_work+0x9b6/0xd70 [ 39.127694][ T307] queue_work_on+0x105/0x170 [ 39.132120][ T307] __hci_cmd_sync_sk+0xc2a/0xf70 [ 39.136896][ T307] hci_cmd_sync_status+0x52/0x130 [ 39.141760][ T307] hci_dev_cmd+0x771/0x9b0 [ 39.146008][ T307] hci_sock_ioctl+0x415/0x7f0 [ 39.150522][ T307] sock_do_ioctl+0x152/0x450 [ 39.154948][ T307] sock_ioctl+0x455/0x740 [ 39.159115][ T307] __se_sys_ioctl+0x114/0x190 [ 39.163629][ T307] __x64_sys_ioctl+0x7b/0x90 [ 39.168055][ T307] x64_sys_call+0x98/0x9a0 [ 39.172305][ T307] do_syscall_64+0x3b/0xb0 [ 39.176560][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.182290][ T307] [ 39.184457][ T307] Second to last potentially related work creation: [ 39.190880][ T307] kasan_save_stack+0x3b/0x60 [ 39.195391][ T307] __kasan_record_aux_stack+0xb4/0xc0 [ 39.200602][ T307] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.206244][ T307] insert_work+0x56/0x310 [ 39.210412][ T307] __queue_work+0x9b6/0xd70 [ 39.214749][ T307] queue_work_on+0x105/0x170 [ 39.219174][ T307] __hci_cmd_sync_sk+0xc2a/0xf70 [ 39.223951][ T307] hci_cmd_sync_status+0x52/0x130 [ 39.228808][ T307] hci_dev_cmd+0x771/0x9b0 [ 39.233065][ T307] hci_sock_ioctl+0x415/0x7f0 [ 39.237573][ T307] sock_do_ioctl+0x152/0x450 [ 39.242002][ T307] sock_ioctl+0x455/0x740 [ 39.246167][ T307] __se_sys_ioctl+0x114/0x190 [ 39.250680][ T307] __x64_sys_ioctl+0x7b/0x90 [ 39.255107][ T307] x64_sys_call+0x98/0x9a0 [ 39.259362][ T307] do_syscall_64+0x3b/0xb0 [ 39.263612][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.269343][ T307] [ 39.271510][ T307] The buggy address belongs to the object at ffff88810a438000 [ 39.271510][ T307] which belongs to the cache kmalloc-8k of size 8192 [ 39.285400][ T307] The buggy address is located 2560 bytes inside of [ 39.285400][ T307] 8192-byte region [ffff88810a438000, ffff88810a43a000) [ 39.298682][ T307] [ 39.300850][ T307] The buggy address belongs to the physical page: [ 39.307110][ T307] page:ffffea0004290e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a438 [ 39.317162][ T307] head:ffffea0004290e00 order:3 compound_mapcount:0 compound_pincount:0 [ 39.325325][ T307] flags: 0x4000000000010200(slab|head|zone=1) [ 39.331233][ T307] raw: 4000000000010200 ffffea0004291200 dead000000000002 ffff888100043500 [ 39.339652][ T307] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 39.348062][ T307] page dumped because: kasan: bad access detected [ 39.354318][ T307] page_owner tracks the page as allocated [ 39.359956][ T307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2130354213, free_ts 0 [ 39.379403][ T307] post_alloc_hook+0x213/0x220 [ 39.383995][ T307] prep_new_page+0x1b/0x110 [ 39.388337][ T307] get_page_from_freelist+0x2980/0x2a10 [ 39.393715][ T307] __alloc_pages+0x234/0x610 [ 39.398144][ T307] alloc_slab_page+0x6c/0xf0 [ 39.402569][ T307] new_slab+0x90/0x3e0 [ 39.406495][ T307] ___slab_alloc+0x6f9/0xb80 [ 39.410904][ T307] __slab_alloc+0x5d/0xa0 [ 39.415068][ T307] __kmem_cache_alloc_node+0x207/0x2a0 [ 39.420377][ T307] __kmalloc_node+0xa3/0x1e0 [ 39.424786][ T307] kvmalloc_node+0x221/0x640 [ 39.429214][ T307] sbitmap_init_node+0x48b/0x5f0 [ 39.433988][ T307] scsi_realloc_sdev_budget_map+0x2a3/0x450 [ 39.439716][ T307] scsi_alloc_sdev+0x86c/0xb30 [ 39.444315][ T307] scsi_probe_and_add_lun+0x17f/0x4070 [ 39.449611][ T307] __scsi_scan_target+0x20a/0xea0 [ 39.454474][ T307] page_owner free stack trace missing [ 39.459680][ T307] [ 39.461847][ T307] Memory state around the buggy address: [ 39.467320][ T307] ffff88810a438900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.475219][ T307] ffff88810a438980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.483117][ T307] >ffff88810a438a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.491018][ T307] ^ [ 39.494920][ T307] ffff88810a438a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.502823][ T307] ffff88810a438b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.510715][ T307] ================================================================== [ 39.518613][ T307] Disabling lock debugging due to kernel taint [ 39.524675][ T325] Bluetooth: hci1: command 0x1003 tx timeout executing program [ 39.524725][ T306] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 39.548955][ T10] Bluetooth: hci1: Frame reassembly failed (-84) executing program executing program executing program [ 39.648771][ T325] Bluetooth: hci3: command 0x1003 tx timeout [ 39.648771][ T305] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 39.648823][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 39.654628][ T305] Bluetooth: hci4: command 0x1003 tx timeout [ 39.663064][ T304] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 39.677309][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 39.683552][ T43] Bluetooth: hci3: Frame reassembly failed (-84) [ 39.690888][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 39.697090][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 40.688775][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 40.688795][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 40.706221][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 40.714562][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.1.115-syzkaller-00041-ga887a44ace2a #0 [ 40.725315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.735218][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 40.740338][ C1] Code: 39 03 0f 84 40 01 00 00 e8 0c 6c 2a 00 4c 89 e7 e8 d4 73 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 d0 da 71 00 49 8b 3e e8 88 6c d6 [ 40.759774][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 40.765676][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a8000 [ 40.773486][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 40.781301][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b185b R09: 0000000000000007 [ 40.789112][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810a4389c8 [ 40.796926][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810a4389e0 [ 40.804732][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.813499][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.819923][ C1] CR2: 0000000020000008 CR3: 00000001106ab000 CR4: 00000000003506a0 [ 40.827738][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.835544][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.843358][ C1] Call Trace: [ 40.846483][ C1] [ 40.849180][ C1] ? __die_body+0x62/0xb0 [ 40.853339][ C1] ? die_addr+0x9f/0xd0 [ 40.857334][ C1] ? exc_general_protection+0x317/0x4c0 [ 40.862713][ C1] ? ttwu_do_wakeup+0xe5/0x430 [ 40.867311][ C1] ? asm_exc_general_protection+0x27/0x30 [ 40.872868][ C1] ? __queue_work+0x28b/0xd70 [ 40.877384][ C1] ? __queue_work+0x4f1/0xd70 [ 40.881891][ C1] ? __queue_work+0x29c/0xd70 [ 40.886419][ C1] delayed_work_timer_fn+0x61/0x80 [ 40.891377][ C1] ? queue_work_node+0x1d0/0x1d0 [ 40.896126][ C1] call_timer_fn+0x3b/0x2d0 [ 40.900468][ C1] ? queue_work_node+0x1d0/0x1d0 [ 40.905238][ C1] __run_timers+0x756/0xa10 [ 40.909584][ C1] ? calc_index+0x270/0x270 [ 40.913925][ C1] ? sched_clock+0x9/0x10 [ 40.918082][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 40.922774][ C1] run_timer_softirq+0x69/0xf0 [ 40.927373][ C1] handle_softirqs+0x1db/0x650 [ 40.931972][ C1] ? irqtime_account_irq+0xdc/0x260 [ 40.937008][ C1] __irq_exit_rcu+0x52/0xf0 [ 40.941344][ C1] irq_exit_rcu+0x9/0x10 [ 40.945422][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 40.950891][ C1] [ 40.953671][ C1] [ 40.956449][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 40.962261][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 40.967647][ C1] Code: 89 de 48 83 e6 08 31 ff e8 27 1c 54 fc 48 83 e3 08 0f 85 b1 00 00 00 0f 1f 44 00 00 e8 d3 17 54 fc 0f 00 2d 7c e8 ce 00 fb f4 e9 e3 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 40.987087][ C1] RSP: 0018:ffffc90000147c50 EFLAGS: 000002d3 [ 40.992987][ C1] RAX: ffffffff85216edd RBX: 0000000000000000 RCX: ffff8881003a8000 [ 41.000801][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.008610][ C1] RBP: ffffc90000147c90 R08: ffffffff85216ec9 R09: ffffed1020075001 [ 41.016423][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 41.024239][ C1] R13: ffff88810a1f7804 R14: dffffc0000000000 R15: ffff8881097e5864 [ 41.032050][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 41.036815][ C1] ? acpi_idle_enter+0x40d/0x760 [ 41.041596][ C1] ? intel_idle_xstate+0xa0/0xa0 [ 41.046365][ C1] cpuidle_enter_state+0x5eb/0x17f0 [ 41.051405][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 41.056606][ C1] ? menu_enable_device+0x380/0x380 [ 41.061639][ C1] ? __sched_text_start+0x8/0x8 [ 41.066329][ C1] cpuidle_enter+0x5f/0xa0 [ 41.070581][ C1] do_idle+0x3d1/0x580 [ 41.074485][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 41.079522][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 41.085159][ C1] ? complete+0x16b/0x1c0 [ 41.089334][ C1] cpu_startup_entry+0x44/0x60 [ 41.093928][ C1] start_secondary+0xe3/0xf0 [ 41.098353][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 41.104096][ C1] [ 41.106946][ C1] Modules linked in: [ 41.110683][ C1] ---[ end trace 0000000000000000 ]--- [ 41.115971][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 41.121097][ C1] Code: 39 03 0f 84 40 01 00 00 e8 0c 6c 2a 00 4c 89 e7 e8 d4 73 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 d0 da 71 00 49 8b 3e e8 88 6c d6 [ 41.140542][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 41.146523][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003a8000 [ 41.154336][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 41.162148][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b185b R09: 0000000000000007 [ 41.169961][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810a4389c8 [ 41.177770][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810a4389e0 [ 41.185582][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 41.194348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.200770][ C1] CR2: 0000000020000008 CR3: 00000001106ab000 CR4: 00000000003506a0 [ 41.208582][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.216392][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.224208][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 41.231586][ C1] Kernel Offset: disabled [ 41.235712][ C1] Rebooting in 86400 seconds..