[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. 2021/09/18 16:26:10 parsed 1 programs 2021/09/18 16:26:11 executed programs: 0 syzkaller login: [ 1579.818730][ T25] audit: type=1400 audit(1631982371.387:8): avc: denied { execmem } for pid=6600 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1581.166645][ T6601] chnl_net:caif_netlink_parms(): no params data found [ 1581.261289][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.270288][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.280794][ T6601] device bridge_slave_0 entered promiscuous mode [ 1581.291109][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.298753][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.307601][ T6601] device bridge_slave_1 entered promiscuous mode [ 1581.340856][ T6601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.352182][ T6601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.388463][ T6601] team0: Port device team_slave_0 added [ 1581.396441][ T6601] team0: Port device team_slave_1 added [ 1581.424174][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.431146][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.460969][ T6601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.475066][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.482021][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.509171][ T6601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.548871][ T6601] device hsr_slave_0 entered promiscuous mode [ 1581.555650][ T6601] device hsr_slave_1 entered promiscuous mode [ 1581.695596][ T6601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1581.710563][ T6601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1581.719801][ T6601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1581.732837][ T6601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1581.760711][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.767915][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.776097][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.783272][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.834794][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.848773][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1581.860986][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.870413][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.879478][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1581.895509][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.907206][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1581.916649][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.923894][ T6934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.943963][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1581.952432][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.959575][ T6934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.972927][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1581.981903][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1581.993351][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1582.010799][ T6601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1582.021814][ T6601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.036633][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1582.045855][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1582.054617][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1582.073893][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1582.081352][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1582.097287][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.117882][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1582.142213][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1582.151440][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1582.160723][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1582.172296][ T6601] device veth0_vlan entered promiscuous mode [ 1582.185193][ T6601] device veth1_vlan entered promiscuous mode [ 1582.208834][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1582.220082][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1582.231893][ T6601] device veth0_macvtap entered promiscuous mode [ 1582.246520][ T6601] device veth1_macvtap entered promiscuous mode [ 1582.266165][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.273971][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1582.281987][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1582.291849][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1582.301226][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1582.316347][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.324154][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1582.332690][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1582.346486][ T6601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.355562][ T6601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.364772][ T6601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.373927][ T6601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.493836][ T6650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.501869][ T6650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.540003][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1582.552929][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.561569][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.572418][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1582.944933][ T6937] Bluetooth: hci0: command 0x0409 tx timeout [ 1585.033526][ T6574] Bluetooth: hci0: command 0x041b tx timeout 2021/09/18 16:26:16 executed programs: 3 [ 1587.113295][ T6574] Bluetooth: hci0: command 0x040f tx timeout [ 1589.182619][ T6574] Bluetooth: hci0: command 0x0419 tx timeout 2021/09/18 16:26:21 executed programs: 9 [ 1591.262590][ T6766] Bluetooth: hci0: command 0x0405 tx timeout 2021/09/18 16:26:27 executed programs: 15 2021/09/18 16:26:32 executed programs: 21 2021/09/18 16:26:37 executed programs: 27 [ 1607.022979][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.029493][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/09/18 16:26:42 executed programs: 33 2021/09/18 16:26:47 executed programs: 39 2021/09/18 16:26:52 executed programs: 45 [ 1623.661369][ T6935] ================================================================== [ 1623.669567][ T6935] BUG: KASAN: use-after-free in __lock_acquire+0x3d86/0x54a0 [ 1623.677034][ T6935] Read of size 8 at addr ffff888073c970a0 by task kworker/0:3/6935 [ 1623.684929][ T6935] [ 1623.687244][ T6935] CPU: 0 PID: 6935 Comm: kworker/0:3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1623.695641][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.705680][ T6935] Workqueue: events l2cap_chan_timeout [ 1623.711203][ T6935] Call Trace: [ 1623.714470][ T6935] dump_stack_lvl+0xcd/0x134 [ 1623.719065][ T6935] print_address_description.constprop.0.cold+0x6c/0x2d6 [ 1623.726098][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1623.731109][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1623.736115][ T6935] kasan_report.cold+0x83/0xdf [ 1623.740870][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1623.745894][ T6935] __lock_acquire+0x3d86/0x54a0 [ 1623.750727][ T6935] ? mark_lock+0xef/0x17b0 [ 1623.755125][ T6935] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1623.760979][ T6935] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1623.766946][ T6935] ? lock_chain_count+0x20/0x20 [ 1623.771783][ T6935] lock_acquire+0x1ab/0x510 [ 1623.776271][ T6935] ? lock_sock_nested+0x40/0x120 [ 1623.781244][ T6935] ? lock_release+0x720/0x720 [ 1623.785913][ T6935] ? del_timer+0xc5/0x110 [ 1623.790314][ T6935] _raw_spin_lock_bh+0x2f/0x40 [ 1623.795086][ T6935] ? lock_sock_nested+0x40/0x120 [ 1623.800012][ T6935] lock_sock_nested+0x40/0x120 [ 1623.804777][ T6935] l2cap_sock_teardown_cb+0xa1/0x660 [ 1623.810051][ T6935] ? __mutex_lock+0x21c/0x12f0 [ 1623.814799][ T6935] l2cap_chan_del+0xbc/0xa80 [ 1623.819374][ T6935] l2cap_chan_close+0x1b9/0xaf0 [ 1623.824216][ T6935] ? l2cap_rx+0x1fb0/0x1fb0 [ 1623.828702][ T6935] ? lock_release+0x720/0x720 [ 1623.833363][ T6935] ? lock_downgrade+0x6e0/0x6e0 [ 1623.838194][ T6935] l2cap_chan_timeout+0x17e/0x2f0 [ 1623.843226][ T6935] process_one_work+0x9bf/0x16b0 [ 1623.848217][ T6935] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1623.853578][ T6935] ? rwlock_bug.part.0+0x90/0x90 [ 1623.858515][ T6935] ? _raw_spin_lock_irq+0x41/0x50 [ 1623.863530][ T6935] worker_thread+0x658/0x11f0 [ 1623.868192][ T6935] ? process_one_work+0x16b0/0x16b0 [ 1623.873376][ T6935] kthread+0x3e5/0x4d0 [ 1623.877478][ T6935] ? set_kthread_struct+0x130/0x130 [ 1623.882663][ T6935] ret_from_fork+0x1f/0x30 [ 1623.887103][ T6935] [ 1623.889405][ T6935] Allocated by task 6961: [ 1623.893709][ T6935] kasan_save_stack+0x1b/0x40 [ 1623.898432][ T6935] __kasan_kmalloc+0xa1/0xd0 [ 1623.903010][ T6935] __kmalloc+0x214/0x4d0 [ 1623.907236][ T6935] sk_prot_alloc+0x110/0x290 [ 1623.911864][ T6935] sk_alloc+0x30/0xa60 [ 1623.915920][ T6935] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1623.921722][ T6935] l2cap_sock_create+0x123/0x1f0 [ 1623.926643][ T6935] bt_sock_create+0x17c/0x340 [ 1623.931356][ T6935] __sock_create+0x353/0x790 [ 1623.935931][ T6935] __sys_socket+0xef/0x200 [ 1623.940330][ T6935] __x64_sys_socket+0x6f/0xb0 [ 1623.944991][ T6935] do_syscall_64+0x35/0xb0 [ 1623.949414][ T6935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.955290][ T6935] [ 1623.957594][ T6935] Freed by task 6961: [ 1623.961602][ T6935] kasan_save_stack+0x1b/0x40 [ 1623.966264][ T6935] kasan_set_track+0x1c/0x30 [ 1623.970854][ T6935] kasan_set_free_info+0x20/0x30 [ 1623.975772][ T6935] __kasan_slab_free+0xd1/0x110 [ 1623.980607][ T6935] kfree+0x10a/0x2c0 [ 1623.984487][ T6935] __sk_destruct+0x6a8/0x900 [ 1623.989064][ T6935] sk_destruct+0xbd/0xe0 [ 1623.993287][ T6935] __sk_free+0xef/0x3d0 [ 1623.997424][ T6935] sk_free+0x78/0xa0 [ 1624.001299][ T6935] l2cap_sock_kill+0x203/0x240 [ 1624.006046][ T6935] l2cap_sock_release+0x184/0x200 [ 1624.011054][ T6935] __sock_release+0xcd/0x280 [ 1624.015733][ T6935] sock_close+0x18/0x20 [ 1624.019870][ T6935] __fput+0x288/0x9f0 [ 1624.023932][ T6935] task_work_run+0xdd/0x1a0 [ 1624.028416][ T6935] get_signal+0x1b35/0x2160 [ 1624.032938][ T6935] arch_do_signal_or_restart+0x2a9/0x1c40 [ 1624.038686][ T6935] exit_to_user_mode_prepare+0x17d/0x290 [ 1624.044323][ T6935] syscall_exit_to_user_mode+0x19/0x60 [ 1624.049794][ T6935] do_syscall_64+0x42/0xb0 [ 1624.054250][ T6935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.060136][ T6935] [ 1624.062443][ T6935] The buggy address belongs to the object at ffff888073c97000 [ 1624.062443][ T6935] which belongs to the cache kmalloc-2k of size 2048 [ 1624.076525][ T6935] The buggy address is located 160 bytes inside of [ 1624.076525][ T6935] 2048-byte region [ffff888073c97000, ffff888073c97800) [ 1624.089874][ T6935] The buggy address belongs to the page: [ 1624.095486][ T6935] page:ffffea0001cf25c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73c97 [ 1624.105635][ T6935] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1624.113211][ T6935] raw: 00fff00000000200 ffffea0001e89a08 ffffea000084e008 ffff888010c40800 [ 1624.121833][ T6935] raw: 0000000000000000 ffff888073c97000 0000000100000001 0000000000000000 [ 1624.130397][ T6935] page dumped because: kasan: bad access detected [ 1624.136838][ T6935] page_owner tracks the page as allocated [ 1624.142576][ T6935] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x242220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 6961, ts 1583451995388, free_ts 78015950690 [ 1624.161055][ T6935] get_page_from_freelist+0xa72/0x2f80 [ 1624.166592][ T6935] __alloc_pages+0x1b2/0x500 [ 1624.171165][ T6935] cache_grow_begin+0x75/0x460 [ 1624.175964][ T6935] cache_alloc_refill+0x27f/0x380 [ 1624.180972][ T6935] __kmalloc+0x3d5/0x4d0 [ 1624.185198][ T6935] sk_prot_alloc+0x110/0x290 [ 1624.189778][ T6935] sk_alloc+0x30/0xa60 [ 1624.193834][ T6935] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1624.199629][ T6935] l2cap_sock_create+0x123/0x1f0 [ 1624.204554][ T6935] bt_sock_create+0x17c/0x340 [ 1624.209235][ T6935] __sock_create+0x353/0x790 [ 1624.213837][ T6935] __sys_socket+0xef/0x200 [ 1624.218245][ T6935] __x64_sys_socket+0x6f/0xb0 [ 1624.222914][ T6935] do_syscall_64+0x35/0xb0 [ 1624.227319][ T6935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.233200][ T6935] page last free stack trace: [ 1624.237849][ T6935] free_pcp_prepare+0x2c5/0x780 [ 1624.242690][ T6935] free_unref_page+0x19/0x690 [ 1624.247363][ T6935] slabs_destroy+0x89/0xc0 [ 1624.251761][ T6935] ___cache_free+0x4c6/0x610 [ 1624.256332][ T6935] qlist_free_all+0x4e/0x110 [ 1624.260903][ T6935] kasan_quarantine_reduce+0x180/0x200 [ 1624.266348][ T6935] __kasan_slab_alloc+0x92/0xa0 [ 1624.271184][ T6935] kmem_cache_alloc+0x25f/0x540 [ 1624.276019][ T6935] vm_area_dup+0x88/0x2b0 [ 1624.280402][ T6935] dup_mm+0x5fa/0x13e0 [ 1624.284460][ T6935] copy_process+0x6fcf/0x7580 [ 1624.289125][ T6935] kernel_clone+0xe7/0xac0 [ 1624.293543][ T6935] __do_sys_clone+0xc8/0x110 [ 1624.298117][ T6935] do_syscall_64+0x35/0xb0 [ 1624.302517][ T6935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.308392][ T6935] [ 1624.310699][ T6935] Memory state around the buggy address: [ 1624.316324][ T6935] ffff888073c96f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1624.324389][ T6935] ffff888073c97000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.332453][ T6935] >ffff888073c97080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.340498][ T6935] ^ [ 1624.345596][ T6935] ffff888073c97100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.353636][ T6935] ffff888073c97180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.361676][ T6935] ================================================================== [ 1624.369719][ T6935] Disabling lock debugging due to kernel taint [ 1624.375849][ T6935] Kernel panic - not syncing: panic_on_warn set ... [ 1624.382414][ T6935] CPU: 0 PID: 6935 Comm: kworker/0:3 Tainted: G B 5.15.0-rc1-syzkaller #0 [ 1624.392215][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.402262][ T6935] Workqueue: events l2cap_chan_timeout [ 1624.407718][ T6935] Call Trace: [ 1624.410986][ T6935] dump_stack_lvl+0xcd/0x134 [ 1624.415567][ T6935] panic+0x2b0/0x6dd [ 1624.419496][ T6935] ? __warn_printk+0xf3/0xf3 [ 1624.424122][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1624.429134][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1624.434139][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1624.439146][ T6935] end_report.cold+0x63/0x6f [ 1624.443724][ T6935] kasan_report.cold+0x71/0xdf [ 1624.448533][ T6935] ? __lock_acquire+0x3d86/0x54a0 [ 1624.453542][ T6935] __lock_acquire+0x3d86/0x54a0 [ 1624.458372][ T6935] ? mark_lock+0xef/0x17b0 [ 1624.462771][ T6935] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1624.468748][ T6935] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1624.474745][ T6935] ? lock_chain_count+0x20/0x20 [ 1624.479581][ T6935] lock_acquire+0x1ab/0x510 [ 1624.484186][ T6935] ? lock_sock_nested+0x40/0x120 [ 1624.489118][ T6935] ? lock_release+0x720/0x720 [ 1624.493785][ T6935] ? del_timer+0xc5/0x110 [ 1624.498108][ T6935] _raw_spin_lock_bh+0x2f/0x40 [ 1624.502862][ T6935] ? lock_sock_nested+0x40/0x120 [ 1624.507797][ T6935] lock_sock_nested+0x40/0x120 [ 1624.512543][ T6935] l2cap_sock_teardown_cb+0xa1/0x660 [ 1624.517812][ T6935] ? __mutex_lock+0x21c/0x12f0 [ 1624.522559][ T6935] l2cap_chan_del+0xbc/0xa80 [ 1624.527131][ T6935] l2cap_chan_close+0x1b9/0xaf0 [ 1624.531964][ T6935] ? l2cap_rx+0x1fb0/0x1fb0 [ 1624.536454][ T6935] ? lock_release+0x720/0x720 [ 1624.541112][ T6935] ? lock_downgrade+0x6e0/0x6e0 [ 1624.545944][ T6935] l2cap_chan_timeout+0x17e/0x2f0 [ 1624.550956][ T6935] process_one_work+0x9bf/0x16b0 [ 1624.555886][ T6935] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1624.561287][ T6935] ? rwlock_bug.part.0+0x90/0x90 [ 1624.566207][ T6935] ? _raw_spin_lock_irq+0x41/0x50 [ 1624.571215][ T6935] worker_thread+0x658/0x11f0 [ 1624.575902][ T6935] ? process_one_work+0x16b0/0x16b0 [ 1624.581084][ T6935] kthread+0x3e5/0x4d0 [ 1624.585155][ T6935] ? set_kthread_struct+0x130/0x130 [ 1624.590336][ T6935] ret_from_fork+0x1f/0x30 [ 1624.594997][ T6935] Kernel Offset: disabled [ 1624.599330][ T6935] Rebooting in 86400 seconds..