./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2644204304 <...> DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d forked to background, child pid 4650 [ 35.526836][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.555745][ T4651] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. execve("./syz-executor2644204304", ["./syz-executor2644204304"], 0x7ffe988f5d70 /* 10 vars */) = 0 brk(NULL) = 0x55555719c000 brk(0x55555719cc40) = 0x55555719cc40 arch_prctl(ARCH_SET_FS, 0x55555719c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2644204304", 4096) = 28 brk(0x5555571bdc40) = 0x5555571bdc40 brk(0x5555571be000) = 0x5555571be000 mprotect(0x7f802138c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached , child_tidptr=0x55555719c5d0) = 5075 [pid 5075] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setsid() = 1 [pid 5075] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5075] unshare(CLONE_NEWNS) = 0 [pid 5075] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5075] unshare(CLONE_NEWIPC) = 0 [pid 5075] unshare(CLONE_NEWCGROUP) = 0 [pid 5075] unshare(CLONE_NEWUTS) = 0 [pid 5075] unshare(CLONE_SYSVSEM) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "16777216", 8) = 8 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "536870912", 9) = 9 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "8192", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5075] close(3) = 0 [pid 5075] getpid() = 1 [pid 5075] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 57.271844][ T22] dump_stack_lvl+0xd1/0x138 [ 57.276476][ T22] print_report+0x15e/0x45d [ 57.280997][ T22] ? __phys_addr+0xc8/0x140 [ 57.285534][ T22] ? io_fallback_req_func+0xc7/0x204 [ 57.290855][ T22] kasan_report+0xc0/0xf0 [ 57.295212][ T22] ? io_fallback_req_func+0xc7/0x204 [ 57.300536][ T22] io_fallback_req_func+0xc7/0x204 [ 57.305676][ T22] ? __io_commit_cqring_flush.cold+0x42/0x42 [ 57.311683][ T22] process_one_work+0x9bf/0x1750 [ 57.316644][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 57.322045][ T22] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.327604][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 57.332566][ T22] ? lock_acquire+0x32/0xc0 [ 57.337075][ T22] ? worker_thread+0x16d/0x1090 [ 57.341942][ T22] worker_thread+0x669/0x1090 [ 57.346635][ T22] ? process_one_work+0x1750/0x1750 [ 57.351853][ T22] kthread+0x2e8/0x3a0 [ 57.355932][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 57.361588][ T22] ret_from_fork+0x1f/0x30 [ 57.366027][ T22] [ 57.369045][ T22] [ 57.371366][ T22] Allocated by task 5077: [ 57.375690][ T22] kasan_save_stack+0x22/0x40 [ 57.380411][ T22] kasan_set_track+0x25/0x30 [ 57.385023][ T22] __kasan_slab_alloc+0x7f/0x90 [ 57.389884][ T22] kmem_cache_alloc_bulk+0x3aa/0x730 [ 57.395177][ T22] __io_alloc_req_refill+0xcc/0x40b [ 57.400389][ T22] io_submit_sqes.cold+0x7c/0xc2 [ 57.405335][ T22] __do_sys_io_uring_enter+0x9e4/0x2c10 [ 57.410893][ T22] do_syscall_64+0x39/0xb0 [ 57.415320][ T22] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.421236][ T22] [ 57.423561][ T22] Freed by task 11: [ 57.427361][ T22] kasan_save_stack+0x22/0x40 [ 57.432050][ T22] kasan_set_track+0x25/0x30 [ 57.436746][ T22] kasan_save_free_info+0x2e/0x40 [ 57.441784][ T22] ____kasan_slab_free+0x160/0x1c0 [ 57.446913][ T22] slab_free_freelist_hook+0x8b/0x1c0 [ 57.452292][ T22] kmem_cache_free+0xec/0x4e0 [ 57.456983][ T22] io_req_caches_free+0x1a9/0x1e6 [ 57.462017][ T22] io_ring_exit_work+0x2e7/0xc80 [ 57.466974][ T22] process_one_work+0x9bf/0x1750 [ 57.471925][ T22] worker_thread+0x669/0x1090 [ 57.476611][ T22] kthread+0x2e8/0x3a0 [ 57.480685][ T22] ret_from_fork+0x1f/0x30 [ 57.485113][ T22] [ 57.487437][ T22] The buggy address belongs to the object at ffff88801d9f88c0 [ 57.487437][ T22] which belongs to the cache io_kiocb of size 216 [ 57.501234][ T22] The buggy address is located 136 bytes inside of [ 57.501234][ T22] 216-byte region [ffff88801d9f88c0, ffff88801d9f8998) [ 57.514525][ T22] [ 57.516858][ T22] The buggy address belongs to the physical page: [ 57.523268][ T22] page:ffffea0000767e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d9f8 [ 57.533424][ T22] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 57.540980][ T22] raw: 00fff00000000200 ffff888146627c80 dead000000000122 0000000000000000 [ 57.549594][ T22] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 57.558172][ T22] page dumped because: kasan: bad access detected [ 57.564579][ T22] page_owner tracks the page as allocated [ 57.570291][ T22] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5077, tgid 5077 (syz-executor264), ts 57180354418, free_ts 51894563345 [ 57.588880][ T22] get_page_from_freelist+0x11bb/0x2d50 [ 57.594444][ T22] __alloc_pages+0x1cb/0x5c0 [ 57.599047][ T22] alloc_pages+0x1aa/0x270 [ 57.603475][ T22] allocate_slab+0x25f/0x350 [ 57.608077][ T22] ___slab_alloc+0xa91/0x1400 [ 57.612845][ T22] kmem_cache_alloc_bulk+0x23d/0x730 [ 57.618140][ T22] __io_alloc_req_refill+0xcc/0x40b [ 57.623436][ T22] io_submit_sqes.cold+0x7c/0xc2 [ 57.628384][ T22] __do_sys_io_uring_enter+0x9e4/0x2c10 [ 57.633943][ T22] do_syscall_64+0x39/0xb0 [ 57.638366][ T22] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.644290][ T22] page last free stack trace: [ 57.648958][ T22] free_pcp_prepare+0x4d0/0x910 [ 57.653819][ T22] free_unref_page_list+0x176/0xcd0 [ 57.659030][ T22] release_pages+0xcb1/0x1330 [ 57.663718][ T22] tlb_batch_pages_flush+0xa8/0x1a0 [ 57.668965][ T22] tlb_finish_mmu+0x14b/0x7e0 [ 57.673654][ T22] exit_mmap+0x202/0x7c0 [ 57.677909][ T22] __mmput+0x128/0x4c0 [ 57.681985][ T22] mmput+0x60/0x70 [ 57.685714][ T22] do_exit+0x9ac/0x2a90 [ 57.689894][ T22] do_group_exit+0xd4/0x2a0 [ 57.694417][ T22] __x64_sys_exit_group+0x3e/0x50 [ 57.699449][ T22] do_syscall_64+0x39/0xb0 [ 57.703875][ T22] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.709880][ T22] [ 57.712202][ T22] Memory state around the buggy address: [ 57.717829][ T22] ffff88801d9f8800: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 57.725894][ T22] ffff88801d9f8880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 57.733955][ T22] >ffff88801d9f8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.742010][ T22] ^ [ 57.748419][ T22] ffff88801d9f8980: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.756480][ T22] ffff88801d9f8a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [pid 5078] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=53 /* 0.53 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555719c5d0) = 4 ./strace-static-x86_64: Process 5079 attached [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] io_uring_setup(1486, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=2048, cq_entries=4096, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=65856}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5079] mmap(0x20ffb000, 74048, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ffb000 [pid 5079] mmap(0x20eee000, 131072, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20eee000 [pid 5079] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5079] fanotify_init(FAN_CLASS_NOTIF|FAN_REPORT_FID, O_RDONLY) = 5 [pid 5079] fanotify_mark(5, FAN_MARK_ADD, FAN_MODIFY|FAN_ATTRIB|FAN_CLOSE_WRITE|FAN_CLOSE_NOWRITE|FAN_OPEN|FAN_ONDIR|FAN_EVENT_ON_CHILD, 4, NULL) = 0 [pid 5079] io_uring_enter(3, 17678, 0, 0, NULL, 0) = 1 [pid 5079] close(3) = 0 [pid 5079] close(4) = 0 [pid 5079] close(5) = 0 [pid 5079] close(6) = -1 EBADF (Bad file descriptor) [pid 5079] close(7) = -1 EBADF (Bad file descriptor) [pid 5079] close(8) = -1 EBADF (Bad file descriptor) [pid 5079] close(9) = -1 EBADF (Bad file descriptor) [pid 5079] close(10) = -1 EBADF (Bad file descriptor) [pid 5079] close(11) = -1 EBADF (Bad file descriptor) [pid 5079] close(12) = -1 EBADF (Bad file descriptor) [ 57.764626][ T22] ================================================================== [ 57.785809][ T22] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.793048][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.2.0-rc3-next-20230112-syzkaller #0 [ 57.802448][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.812550][ T22] Workqueue: events io_fallback_req_func [ 57.818229][ T22] Call Trace: [ 57.821523][ T22] [ 57.824466][ T22] dump_stack_lvl+0xd1/0x138 [ 57.829090][ T22] panic+0x2cc/0x626 [ 57.833202][ T22] ? panic_print_sys_info.part.0+0x112/0x112 [ 57.839244][ T22] ? preempt_schedule_thunk+0x1a/0x20 [ 57.844225][ T899] general protection fault, probably for non-canonical address 0xe0a8fc2e20000008: 0000 [#1] PREEMPT SMP KASAN [ 57.844252][ T899] KASAN: maybe wild-memory-access in range [0x0548017100000040-0x0548017100000047] [ 57.844271][ T899] CPU: 0 PID: 899 Comm: kworker/0:2 Not tainted 6.2.0-rc3-next-20230112-syzkaller #0 [ 57.844298][ T899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.844312][ T899] Workqueue: events io_fallback_req_func [ 57.844344][ T899] RIP: 0010:__lock_acquire+0xd83/0x5660 [ 57.844373][ T899] Code: 3d 0f 41 bf 01 00 00 00 0f 86 c8 00 00 00 89 05 53 f6 3d 0f e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 e6 30 00 00 49 81 3e 60 b6 f8 8f 0f 84 4c f3 ff [ 57.844397][ T899] RSP: 0018:ffffc90004b8f8f8 EFLAGS: 00010003 [ 57.844417][ T899] RAX: dffffc0000000000 RBX: 1ffff92000971f4d RCX: 0000000000000000 [ 57.844433][ T899] RDX: 00a9002e20000008 RSI: 0000000000000000 RDI: 0000000000000001 [ 57.844450][ T899] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 57.844465][ T899] R10: fffffbfff1ce78da R11: 0000000000000000 R12: 0000000000000000 [ 57.844480][ T899] R13: ffff88801eb11d40 R14: 0548017100000046 R15: 0000000000000000 [ 57.844497][ T899] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.844523][ T899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.844540][ T899] CR2: 00007f8021390140 CR3: 0000000028b5a000 CR4: 00000000003506f0 [ 57.844557][ T899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.844572][ T899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.844588][ T899] Call Trace: [ 57.844594][ T899] [ 57.844608][ T899] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 57.844635][ T899] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 57.844668][ T899] lock_acquire.part.0+0x11a/0x350 [ 57.844694][ T899] ? io_poll_remove_entries.part.0+0x15e/0x810 [ 57.844731][ T899] ? lock_release+0x810/0x810 [ 57.844755][ T899] ? io_poll_remove_entries.part.0+0x15e/0x810 [ 57.844782][ T899] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.844807][ T899] ? trace_lock_acquire+0x1f1/0x290 [ 57.844833][ T899] ? io_poll_remove_entries.part.0+0x15e/0x810 [ 57.844860][ T899] ? lock_acquire+0x32/0xc0 [ 57.844884][ T899] ? io_poll_remove_entries.part.0+0x15e/0x810 [ 57.844913][ T899] _raw_spin_lock_irq+0x36/0x50 [ 57.844951][ T899] ? io_poll_remove_entries.part.0+0x15e/0x810 [ 57.844981][ T899] io_poll_remove_entries.part.0+0x15e/0x810 [ 57.845011][ T899] io_poll_task_func+0x56c/0x1220 [ 57.845038][ T899] ? io_poll_remove_entries.part.0+0x810/0x810 [ 57.845065][ T899] ? lock_acquire+0x32/0xc0 [ 57.845094][ T899] io_fallback_req_func+0xfd/0x204 [ 57.845123][ T899] ? __io_commit_cqring_flush.cold+0x42/0x42 [ 57.845158][ T899] process_one_work+0x9bf/0x1750 [ 57.845193][ T899] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 57.845223][ T899] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.845250][ T899] ? rwlock_bug.part.0+0x90/0x90 [ 57.845277][ T899] ? lock_acquire+0x32/0xc0 [ 57.845301][ T899] ? worker_thread+0x16d/0x1090 [ 57.845333][ T899] worker_thread+0x669/0x1090 [ 57.845366][ T899] ? __kthread_parkme+0x163/0x220 [ 57.845391][ T899] ? process_one_work+0x1750/0x1750 [ 57.845422][ T899] kthread+0x2e8/0x3a0 [ 57.845446][ T899] ? kthread_complete_and_exit+0x40/0x40 [ 57.845475][ T899] ret_from_fork+0x1f/0x30 [ 57.845514][ T899] [ 57.845521][ T899] Modules linked in: [ 57.845532][ T899] ---[ end trace 0000000000000000 ]--- [ 57.845541][ T899] RIP: 0010:__lock_acquire+0xd83/0x5660 [ 57.845568][ T899] Code: 3d 0f 41 bf 01 00 00 00 0f 86 c8 00 00 00 89 05 53 f6 3d 0f e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 e6 30 00 00 49 81 3e 60 b6 f8 8f 0f 84 4c f3 ff [ 57.845591][ T899] RSP: 0018:ffffc90004b8f8f8 EFLAGS: 00010003 [ 57.845610][ T899] RAX: dffffc0000000000 RBX: 1ffff92000971f4d RCX: 0000000000000000 [ 57.845626][ T899] RDX: 00a9002e20000008 RSI: 0000000000000000 RDI: 0000000000000001 [ 57.845642][ T899] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 57.845657][ T899] R10: fffffbfff1ce78da R11: 0000000000000000 R12: 0000000000000000 [ 57.845673][ T899] R13: ffff88801eb11d40 R14: 0548017100000046 R15: 0000000000000000 [ 57.845689][ T899] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.845713][ T899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.845738][ T899] CR2: 00007f8021390140 CR3: 0000000028b5a000 CR4: 00000000003506f0 [ 57.845754][ T899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.845769][ T899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.293664][ T22] ? preempt_schedule_common+0x59/0xc0 [ 58.299141][ T22] check_panic_on_warn.cold+0x19/0x35 [ 58.304534][ T22] end_report.part.0+0x36/0x73 [ 58.309299][ T22] ? io_fallback_req_func+0xc7/0x204 [ 58.314590][ T22] kasan_report.cold+0xa/0xf [ 58.319187][ T22] ? io_fallback_req_func+0xc7/0x204 [ 58.324482][ T22] io_fallback_req_func+0xc7/0x204 [ 58.329598][ T22] ? __io_commit_cqring_flush.cold+0x42/0x42 [ 58.335588][ T22] process_one_work+0x9bf/0x1750 [ 58.340536][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 58.345914][ T22] ? rcu_read_lock_sched_held+0x3e/0x70 [ 58.351462][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 58.356403][ T22] ? lock_acquire+0x32/0xc0 [ 58.360908][ T22] ? worker_thread+0x16d/0x1090 [ 58.365765][ T22] worker_thread+0x669/0x1090 [ 58.370452][ T22] ? process_one_work+0x1750/0x1750 [ 58.375678][ T22] kthread+0x2e8/0x3a0 [ 58.379753][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 58.385388][ T22] ret_from_fork+0x1f/0x30 [ 58.389818][ T22] [ 59.480225][ T22] Shutting down cpus with NMI [ 59.485161][ T22] Kernel Offset: disabled [ 59.489485][ T22] Rebooting in 86400 seconds..