Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 23.676299][ T28] audit: type=1400 audit(1750186131.709:64): avc: denied { execmem } for pid=282 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.701642][ T28] audit: type=1400 audit(1750186131.709:65): avc: denied { create } for pid=290 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.716772][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 23.721907][ T28] audit: type=1400 audit(1750186131.709:66): avc: denied { ioctl } for pid=290 comm="syz-executor209" path="socket:[14829]" dev="sockfs" ino=14829 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.728743][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 23.754096][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 23.761089][ T43] Bluetooth: hci2: Frame reassembly failed (-84) [ 25.713662][ T301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 25.713657][ T302] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 25.713743][ T300] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 25.720139][ T296] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 25.726751][ T290] Bluetooth: hci0: Opcode 0x080f failed: -110 executing program [ 27.793638][ T289] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 27.844953][ T8] Bluetooth: hci1: Frame reassembly failed (-84) executing program executing program [ 28.687279][ T293] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.693314][ T292] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.699470][ T291] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 28.710109][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.726963][ T8] Bluetooth: hci2: Frame reassembly failed (-84) executing program executing program [ 28.776275][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 28.781423][ T10] Bluetooth: hci4: Frame reassembly failed (-84) executing program [ 29.873644][ T303] Bluetooth: hci1: command 0x1003 tx timeout [ 29.873643][ T296] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 29.892778][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 30.753646][ T305] Bluetooth: hci2: command 0x1003 tx timeout [ 30.753646][ T300] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 30.753691][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.759827][ T305] Bluetooth: hci0: command 0x1003 tx timeout [ 30.778095][ T308] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.784266][ T311] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.790393][ T313] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.796532][ T312] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 30.802774][ T314] Bluetooth: hci0: Opcode 0x080f failed: -22 executing program executing program executing program executing program [ 30.833661][ T302] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 30.833670][ T301] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 30.833725][ T302] Bluetooth: hci4: command 0x1003 tx timeout [ 30.855764][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.867676][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 30.867815][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 30.874147][ T10] Bluetooth: hci2: Frame reassembly failed (-84) executing program [ 31.953648][ T303] Bluetooth: hci1: command 0x1003 tx timeout [ 31.953648][ T296] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 31.972051][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 32.833589][ C0] ================================================================== [ 32.841858][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 32.848981][ C0] Write of size 8 at addr ffff88810da40a00 by task swapper/0/0 [ 32.856609][ C0] [ 32.858931][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 32.868369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.878508][ C0] Call Trace: [ 32.881782][ C0] [ 32.884640][ C0] __dump_stack+0x21/0x24 [ 32.889000][ C0] dump_stack_lvl+0xee/0x150 [ 32.893683][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.898798][ C0] ? update_rq_clock+0x536/0x5c0 [ 32.903860][ C0] ? __run_timers+0x32b/0x9a0 [ 32.908773][ C0] print_address_description+0x71/0x210 [ 32.914429][ C0] print_report+0x4a/0x60 [ 32.918757][ C0] kasan_report+0x122/0x150 [ 32.923252][ C0] ? __run_timers+0x32b/0x9a0 [ 32.927944][ C0] __asan_report_store8_noabort+0x17/0x20 [ 32.933666][ C0] __run_timers+0x32b/0x9a0 [ 32.938160][ C0] ? sched_clock+0x9/0x10 [ 32.942490][ C0] ? sched_clock_cpu+0x6e/0x250 [ 32.947371][ C0] ? calc_index+0x200/0x200 [ 32.951902][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 32.957208][ C0] run_timer_softirq+0x6a/0xf0 [ 32.961991][ C0] handle_softirqs+0x1d7/0x600 [ 32.963638][ T305] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 32.966789][ C0] ? irqtime_account_irq+0xc4/0x240 [ 32.972923][ T305] Bluetooth: hci4: command 0x1003 tx timeout [ 32.978059][ C0] __irq_exit_rcu+0x52/0xf0 [ 32.978082][ C0] irq_exit_rcu+0x9/0x10 [ 32.978099][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 32.998565][ C0] [ 33.001499][ C0] [ 33.004456][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 33.010471][ C0] RIP: 0010:default_idle+0xf/0x20 [ 33.015588][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 43 79 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 33.035370][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 33.041429][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: 873ebb97e84cbc00 [ 33.049390][ C0] RDX: 0000000000000001 RSI: ffffffff85a9f800 RDI: ffffffff85a9f7c0 [ 33.057455][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917 [ 33.065441][ C0] R10: 0000000000000000 R11: ffffffff84efba30 R12: 0000000000000000 [ 33.073535][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000 [ 33.081515][ C0] ? __cfi_default_idle+0x10/0x10 [ 33.086577][ C0] arch_cpu_idle+0x1c/0x20 [ 33.091018][ C0] default_idle_call+0x71/0x1d0 [ 33.095855][ C0] do_idle+0x1a7/0x520 [ 33.099912][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 33.105098][ C0] ? debug_smp_processor_id+0x17/0x20 [ 33.110457][ C0] cpu_startup_entry+0x43/0x60 [ 33.115219][ C0] rest_init+0x10a/0x130 [ 33.119535][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 33.124901][ C0] arch_call_rest_init+0xe/0x10 [ 33.129752][ C0] start_kernel+0x482/0x4f0 [ 33.134273][ C0] x86_64_start_reservations+0x2a/0x2c [ 33.139717][ C0] x86_64_start_kernel+0x7c/0x81 [ 33.144642][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 33.150525][ C0] [ 33.153705][ C0] [ 33.156010][ C0] Allocated by task 308: [ 33.160234][ C0] kasan_set_track+0x4b/0x70 [ 33.164808][ C0] kasan_save_alloc_info+0x25/0x30 [ 33.169934][ C0] __kasan_kmalloc+0x95/0xb0 [ 33.174515][ C0] __kmalloc+0xb1/0x1e0 [ 33.178656][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 33.183800][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 33.188913][ C0] tty_ioctl+0x8ef/0xc60 [ 33.193146][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 33.197810][ C0] __x64_sys_ioctl+0x7b/0x90 [ 33.202387][ C0] x64_sys_call+0x58b/0x9a0 [ 33.206972][ C0] do_syscall_64+0x4c/0xa0 [ 33.211391][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.217288][ C0] [ 33.219615][ C0] Freed by task 314: [ 33.223516][ C0] kasan_set_track+0x4b/0x70 [ 33.228191][ C0] kasan_save_free_info+0x31/0x50 [ 33.233209][ C0] ____kasan_slab_free+0x132/0x180 [ 33.238401][ C0] __kasan_slab_free+0x11/0x20 [ 33.243169][ C0] slab_free_freelist_hook+0xc2/0x190 [ 33.248570][ C0] __kmem_cache_free+0xb7/0x1b0 [ 33.253441][ C0] kfree+0x6f/0xf0 [ 33.257242][ C0] hci_release_dev+0x13ad/0x1500 [ 33.262255][ C0] bt_host_release+0x82/0x90 [ 33.267005][ C0] device_release+0xa4/0x1d0 [ 33.271668][ C0] kobject_put+0x19d/0x280 [ 33.276077][ C0] put_device+0x1f/0x30 [ 33.280308][ C0] hci_dev_cmd+0x265/0x720 [ 33.284802][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 33.289478][ C0] sock_do_ioctl+0x101/0x310 [ 33.294148][ C0] sock_ioctl+0x4d8/0x6e0 [ 33.298461][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 33.303228][ C0] __x64_sys_ioctl+0x7b/0x90 [ 33.307806][ C0] x64_sys_call+0x58b/0x9a0 [ 33.312295][ C0] do_syscall_64+0x4c/0xa0 [ 33.316705][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.322587][ C0] [ 33.324895][ C0] Last potentially related work creation: [ 33.330608][ C0] kasan_save_stack+0x3a/0x60 [ 33.335364][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 33.340812][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 33.346619][ C0] insert_work+0x51/0x300 [ 33.350970][ C0] __queue_work+0x9b1/0xd30 [ 33.355461][ C0] queue_work_on+0xd2/0x140 [ 33.359958][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 33.365071][ C0] hci_cmd_sync_status+0x53/0x120 [ 33.370166][ C0] hci_dev_cmd+0x628/0x720 [ 33.374662][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 33.379326][ C0] sock_do_ioctl+0x101/0x310 [ 33.384000][ C0] sock_ioctl+0x4d8/0x6e0 [ 33.388314][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 33.392980][ C0] __x64_sys_ioctl+0x7b/0x90 [ 33.397557][ C0] x64_sys_call+0x58b/0x9a0 [ 33.402060][ C0] do_syscall_64+0x4c/0xa0 [ 33.406471][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.412444][ C0] [ 33.414756][ C0] Second to last potentially related work creation: [ 33.421321][ C0] kasan_save_stack+0x3a/0x60 [ 33.425987][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 33.431348][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 33.437171][ C0] insert_work+0x51/0x300 [ 33.441922][ C0] __queue_work+0x9b1/0xd30 [ 33.446525][ C0] queue_work_on+0xd2/0x140 [ 33.451011][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 33.455940][ C0] hci_cmd_sync_status+0x53/0x120 [ 33.460980][ C0] hci_dev_cmd+0x628/0x720 [ 33.465386][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 33.470054][ C0] sock_do_ioctl+0x101/0x310 [ 33.474674][ C0] sock_ioctl+0x4d8/0x6e0 [ 33.479183][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 33.483951][ C0] __x64_sys_ioctl+0x7b/0x90 [ 33.488537][ C0] x64_sys_call+0x58b/0x9a0 [ 33.493028][ C0] do_syscall_64+0x4c/0xa0 [ 33.497446][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.503332][ C0] [ 33.505641][ C0] The buggy address belongs to the object at ffff88810da40000 [ 33.505641][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 33.519783][ C0] The buggy address is located 2560 bytes inside of [ 33.519783][ C0] 8192-byte region [ffff88810da40000, ffff88810da42000) [ 33.533221][ C0] [ 33.535540][ C0] The buggy address belongs to the physical page: [ 33.541937][ C0] page:ffffea0004369000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10da40 [ 33.552600][ C0] head:ffffea0004369000 order:3 compound_mapcount:0 compound_pincount:0 [ 33.560921][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 33.566989][ C0] raw: 4000000000010200 ffffea000436ea00 dead000000000004 ffff888100043500 [ 33.575645][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 33.584295][ C0] page dumped because: kasan: bad access detected [ 33.590776][ C0] page_owner tracks the page as allocated [ 33.596477][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2432834858, free_ts 0 [ 33.614606][ C0] post_alloc_hook+0x1f5/0x210 [ 33.619448][ C0] prep_new_page+0x1c/0x110 [ 33.623942][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 33.629667][ C0] __alloc_pages+0x19e/0x3a0 [ 33.634250][ C0] alloc_slab_page+0x6e/0xf0 [ 33.638836][ C0] new_slab+0x98/0x3d0 [ 33.642900][ C0] ___slab_alloc+0x6f6/0xb50 [ 33.647501][ C0] __slab_alloc+0x5e/0xa0 [ 33.651841][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 33.657301][ C0] __kmalloc_node+0xa1/0x1e0 [ 33.661893][ C0] kvmalloc_node+0x294/0x480 [ 33.666495][ C0] sbitmap_init_node+0x43b/0x580 [ 33.671438][ C0] scsi_realloc_sdev_budget_map+0x24e/0x3a0 [ 33.677426][ C0] scsi_alloc_sdev+0x7ee/0xac0 [ 33.682289][ C0] scsi_probe_and_add_lun+0x192/0x3bb0 [ 33.687744][ C0] __scsi_scan_target+0x1e8/0xbb0 [ 33.692773][ C0] page_owner free stack trace missing [ 33.698158][ C0] [ 33.700480][ C0] Memory state around the buggy address: [ 33.706104][ C0] ffff88810da40900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.714181][ C0] ffff88810da40980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.722327][ C0] >ffff88810da40a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.730635][ C0] ^ [ 33.734710][ C0] ffff88810da40a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.742789][ C0] ffff88810da40b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.750855][ C0] ================================================================== [ 33.758994][ C0] Disabling lock debugging due to kernel taint [ 33.765250][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 33.777149][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 33.785648][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 33.796569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.806798][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 33.812082][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 50 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c 2b 6d 00 49 8b 7d 00 e8 33 c2 [ 33.831810][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 33.837887][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 33.845950][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 33.854024][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 33.862111][ C0] R10: ffffed1021b48139 R11: 1ffff11021b48139 R12: dffffc0000000000 [ 33.870175][ C0] R13: 0000000000000000 R14: ffff88810da409c8 R15: 0000000000000008 [ 33.878148][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.887069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.893653][ C0] CR2: 00007f7068269492 CR3: 0000000110283000 CR4: 00000000003506b0 [ 33.901632][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.909685][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.917656][ C0] Call Trace: [ 33.920964][ C0] [ 33.923934][ C0] delayed_work_timer_fn+0x61/0x80 [ 33.929059][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 33.934889][ C0] call_timer_fn+0x46/0x2a0 [ 33.939488][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 33.945300][ C0] __run_timers+0x667/0x9a0 [ 33.949803][ C0] ? calc_index+0x200/0x200 [ 33.954307][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 33.959513][ C0] run_timer_softirq+0x6a/0xf0 [ 33.964282][ C0] handle_softirqs+0x1d7/0x600 [ 33.969120][ C0] ? irqtime_account_irq+0xc4/0x240 [ 33.974309][ C0] __irq_exit_rcu+0x52/0xf0 [ 33.978815][ C0] irq_exit_rcu+0x9/0x10 [ 33.983042][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 33.988670][ C0] [ 33.991597][ C0] [ 33.994513][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 34.000479][ C0] RIP: 0010:default_idle+0xf/0x20 [ 34.005508][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 43 79 56 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 34.025275][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257 [ 34.031622][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: 873ebb97e84cbc00 [ 34.039682][ C0] RDX: 0000000000000001 RSI: ffffffff85a9f800 RDI: ffffffff85a9f7c0 [ 34.047647][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917 [ 34.055618][ C0] R10: 0000000000000000 R11: ffffffff84efba30 R12: 0000000000000000 [ 34.063590][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000 [ 34.071641][ C0] ? __cfi_default_idle+0x10/0x10 [ 34.076659][ C0] arch_cpu_idle+0x1c/0x20 [ 34.081162][ C0] default_idle_call+0x71/0x1d0 [ 34.083596][ T303] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 34.086002][ C0] do_idle+0x1a7/0x520 [ 34.096215][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 34.101498][ C0] ? debug_smp_processor_id+0x17/0x20 [ 34.107048][ C0] cpu_startup_entry+0x43/0x60 [ 34.111886][ C0] rest_init+0x10a/0x130 [ 34.116124][ C0] ? __cfi_x86_late_time_init+0x8/0x8 [ 34.121588][ C0] arch_call_rest_init+0xe/0x10 [ 34.126609][ C0] start_kernel+0x482/0x4f0 [ 34.131100][ C0] x86_64_start_reservations+0x2a/0x2c [ 34.136650][ C0] x86_64_start_kernel+0x7c/0x81 [ 34.141577][ C0] secondary_startup_64_no_verify+0xce/0xdb [ 34.147543][ C0] [ 34.150550][ C0] Modules linked in: [ 34.154446][ C0] ---[ end trace 0000000000000000 ]--- [ 34.159971][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 34.165271][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 d2 28 00 4c 89 ff e8 50 c6 a8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 0c 2b 6d 00 49 8b 7d 00 e8 33 c2 [ 34.184872][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 34.191456][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500 [ 34.199485][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 34.207467][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 34.215630][ C0] R10: ffffed1021b48139 R11: 1ffff11021b48139 R12: dffffc0000000000 [ 34.223692][ C0] R13: 0000000000000000 R14: ffff88810da409c8 R15: 0000000000000008 [ 34.231669][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.240671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.247341][ C0] CR2: 00007f7068269492 CR3: 0000000110283000 CR4: 00000000003506b0 [ 34.255328][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.263371][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.271333][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 34.278865][ C0] Kernel Offset: disabled [ 34.283195][ C0] Rebooting in 86400 seconds..