program: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a00000308000000", @ANYRES32=0x0, @ANYBLOB="d447c8ed4c66000cea0069d9e341b2846df9b89836c7b143b2385ed5aec69e13a4d26028c49f175c6747c16d68145da295985113df81ed9483f12ac366db87a065cd416881ccef8540eabaf5780c3919161354d20f5193bc5c3d8bf1907434cf81f26bc862d95e"], 0x1c}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0xffffffff}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="fcf47e6bb4", 0x5}], 0x1, 0x0, 0x0, 0x900}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000005c0)=0x37) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4}, &(0x7f0000000200)=0xc) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0x5986, &(0x7f0000000140)="$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") [ 68.245954][ T4674] Bluetooth: hci0: command tx timeout [ 68.614410][ T5326] loop0: detected capacity change from 0 to 32768 [ 68.633241][ T5326] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 68.805415][ T5326] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 68.805441][ T5326] allowing incompatible features above 0.0: (unknown version) [ 68.805453][ T5326] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 68.827665][ T5326] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 68.832305][ T5326] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 68.837366][ T5326] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 68.837366][ T5326] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 68.916200][ T5326] bcachefs (loop0): invalid bkey in btree_node btree=freespace level=0: u64s 5 type set 0:26:0 len 3003121665 ver 0 [ 68.916229][ T5326] size greater than offset (3003121665 > 26), deleting [ 68.929378][ T5326] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 68.937240][ T5326] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 68.937262][ T5326] u64s 11 type btree_ptr_v2 POS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 68.937268][ T5326] loop0 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX [ 68.937272][ T5326] flagging btree backpointers lost data [ 68.937276][ T5326] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 68.937280][ T5326] ret btree_node_read_validate_error [ 68.961951][ T5326] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 68.968828][ T5326] bcachefs (loop0): check_topology... done [ 68.972363][ T5326] bcachefs (loop0): accounting_read... done [ 68.977469][ T5326] bcachefs (loop0): alloc_read... done [ 68.980680][ T5326] bcachefs (loop0): snapshots_read... done [ 68.984007][ T5326] bcachefs (loop0): check_allocations... [ 68.987229][ T5326] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 68.987253][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.003455][ T5326] bcachefs (loop0): bucket 0:26 gen 128 data type btree: ptr gen 0 too stale [ 69.003469][ T5326] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.016888][ T5326] bcachefs (loop0): bucket 0:26 data type btree stale dirty ptr: 0 < 128 [ 69.016923][ T5326] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.030365][ T5326] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.030379][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.042889][ T5326] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.042906][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 69.056424][ T5326] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.056437][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 69.067895][ T5326] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 69.067908][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 69.081260][ T5326] bcachefs (loop0): bucket 0:29 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 69.086305][ T5326] bcachefs (loop0): bucket 0:29 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 69.092468][ T5326] bcachefs (loop0): bucket 0:37 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 69.098723][ T5326] bcachefs (loop0): bucket 0:37 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 69.105797][ T5326] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 69.110245][ T5326] bcachefs (loop0): bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 69.118647][ T5326] done [ 69.122268][ T5326] bcachefs (loop0): going read-write [ 69.248025][ T1045] ================================================================== [ 69.251629][ T1045] BUG: KASAN: slab-out-of-bounds in __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.255034][ T1045] Read of size 64 at addr ffff88805496c328 by task kworker/u4:9/1045 [ 69.258508][ T1045] [ 69.259656][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u4:9 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 69.259678][ T1045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.259686][ T1045] Workqueue: btree_update btree_interior_update_work [ 69.259703][ T1045] Call Trace: [ 69.259710][ T1045] [ 69.259716][ T1045] dump_stack_lvl+0x189/0x250 [ 69.259732][ T1045] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.259741][ T1045] ? rcu_is_watching+0x15/0xb0 [ 69.259756][ T1045] ? __kasan_check_byte+0x12/0x40 [ 69.259766][ T1045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.259779][ T1045] ? rcu_is_watching+0x15/0xb0 [ 69.259792][ T1045] ? lock_release+0x4b/0x3e0 [ 69.259807][ T1045] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.259815][ T1045] ? __virt_addr_valid+0x4a5/0x5c0 [ 69.259824][ T1045] print_report+0xd2/0x2b0 [ 69.259837][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.259846][ T1045] kasan_report+0x118/0x150 [ 69.259857][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.259867][ T1045] kasan_check_range+0x2b0/0x2c0 [ 69.259876][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.259885][ T1045] __asan_memcpy+0x29/0x70 [ 69.259898][ T1045] __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.259908][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.259920][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.259930][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.259942][ T1045] bch2_trigger_alloc+0x323/0x4090 [ 69.259953][ T1045] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 69.259963][ T1045] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 69.259977][ T1045] ? __pfx_bch2_journal_keys_peek_slot+0x10/0x10 [ 69.259989][ T1045] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 69.259998][ T1045] ? __bch2_btree_node_relock+0x18a/0x990 [ 69.260013][ T1045] ? verify_update_old_key+0x34f/0x790 [ 69.260027][ T1045] ? __pfx_verify_update_old_key+0x10/0x10 [ 69.260041][ T1045] ? __bch2_trans_commit+0x421/0x8870 [ 69.260051][ T1045] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 69.260060][ T1045] __bch2_trans_commit+0xa84/0x8870 [ 69.260074][ T1045] ? bch2_bkey_sectors_need_rebalance+0x6cb/0xee0 [ 69.260089][ T1045] ? bch2_trigger_extent+0x764/0x960 [ 69.260101][ T1045] ? btree_interior_update_work+0x1082/0x27d0 [ 69.260112][ T1045] ? __pfx___bch2_trans_commit+0x10/0x10 [ 69.260126][ T1045] ? __bch2_trans_subbuf_alloc+0x2d9/0x590 [ 69.260145][ T1045] ? btree_interior_update_work+0xe71/0x27d0 [ 69.260156][ T1045] btree_interior_update_work+0x1082/0x27d0 [ 69.260173][ T1045] ? __pfx_btree_interior_update_work+0x10/0x10 [ 69.260186][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.260243][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 69.260258][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 69.260271][ T1045] process_scheduled_works+0xade/0x17b0 [ 69.260289][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.260304][ T1045] worker_thread+0x8a0/0xda0 [ 69.260323][ T1045] kthread+0x70e/0x8a0 [ 69.260335][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 69.260348][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.260358][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.260370][ T1045] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.260383][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.260393][ T1045] ret_from_fork+0x3fc/0x770 [ 69.260408][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 69.260423][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.260433][ T1045] ret_from_fork_asm+0x1a/0x30 [ 69.260446][ T1045] [ 69.260449][ T1045] [ 69.404288][ T1045] Allocated by task 5326: [ 69.406215][ T1045] kasan_save_track+0x3e/0x80 [ 69.408238][ T1045] __kasan_kmalloc+0x93/0xb0 [ 69.410197][ T1045] __kmalloc_noprof+0x27a/0x4f0 [ 69.412426][ T1045] bch2_journal_key_insert+0x50/0x140 [ 69.414823][ T1045] do_bch2_trans_commit_to_journal_replay+0x127/0xd70 [ 69.417671][ T1045] __bch2_trans_commit+0x1b67/0x8870 [ 69.422040][ T1045] bch2_check_allocations+0x2ee0/0x57b0 [ 69.424429][ T1045] __bch2_run_recovery_passes+0x392/0x1010 [ 69.427089][ T1045] bch2_run_recovery_passes+0x184/0x210 [ 69.429577][ T1045] bch2_fs_recovery+0x2690/0x3a50 [ 69.431853][ T1045] bch2_fs_start+0xa99/0xd90 [ 69.433897][ T1045] bch2_fs_get_tree+0xafc/0x14f0 [ 69.436012][ T1045] vfs_get_tree+0x92/0x2b0 [ 69.437962][ T1045] do_new_mount+0x24a/0xa40 [ 69.439939][ T1045] __se_sys_mount+0x317/0x410 [ 69.441904][ T1045] do_syscall_64+0xfa/0x3b0 [ 69.443731][ T1045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.446213][ T1045] [ 69.447209][ T1045] The buggy address belongs to the object at ffff88805496c300 [ 69.447209][ T1045] which belongs to the cache kmalloc-96 of size 96 [ 69.452776][ T1045] The buggy address is located 40 bytes inside of [ 69.452776][ T1045] allocated 88-byte region [ffff88805496c300, ffff88805496c358) [ 69.458819][ T1045] [ 69.459900][ T1045] The buggy address belongs to the physical page: [ 69.462559][ T1045] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5496c [ 69.466293][ T1045] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.469084][ T1045] page_type: f5(slab) [ 69.470788][ T1045] raw: 04fff00000000000 ffff88801a441280 dead000000000100 dead000000000122 [ 69.474141][ T1045] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 69.477350][ T1045] page dumped because: kasan: bad access detected [ 69.479807][ T1045] page_owner tracks the page as allocated [ 69.481986][ T1045] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5326, tgid 5325 (syz.0.0), ts 69081213980, free_ts 0 [ 69.488994][ T1045] post_alloc_hook+0x240/0x2a0 [ 69.491110][ T1045] get_page_from_freelist+0x21e4/0x22c0 [ 69.493589][ T1045] __alloc_frozen_pages_noprof+0x181/0x370 [ 69.496086][ T1045] alloc_pages_mpol+0x232/0x4a0 [ 69.498205][ T1045] allocate_slab+0x8a/0x3b0 [ 69.500205][ T1045] ___slab_alloc+0xbfc/0x1480 [ 69.502261][ T1045] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 69.505289][ T1045] kstrdup+0x42/0x100 [ 69.507092][ T1045] count_fsck_err_locked+0x3c5/0x630 [ 69.509395][ T1045] __bch2_fsck_err+0x3e0/0xff0 [ 69.511444][ T1045] bch2_check_allocations+0x43be/0x57b0 [ 69.513741][ T1045] __bch2_run_recovery_passes+0x392/0x1010 [ 69.516209][ T1045] bch2_run_recovery_passes+0x184/0x210 [ 69.518674][ T1045] bch2_fs_recovery+0x2690/0x3a50 [ 69.520894][ T1045] bch2_fs_start+0xa99/0xd90 [ 69.522928][ T1045] bch2_fs_get_tree+0xafc/0x14f0 [ 69.524946][ T1045] page_owner free stack trace missing [ 69.527242][ T1045] [ 69.528292][ T1045] Memory state around the buggy address: [ 69.530727][ T1045] ffff88805496c200: 00 00 00 00 00 00 00 00 00 00 03 fc fc fc fc fc [ 69.534275][ T1045] ffff88805496c280: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 69.537825][ T1045] >ffff88805496c300: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 69.541190][ T1045] ^ [ 69.544086][ T1045] ffff88805496c380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 69.548214][ T1045] ffff88805496c400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 69.552229][ T1045] ================================================================== [ 69.557655][ T5326] bcachefs (loop0): journal_replay... [ 69.600110][ T1045] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.605507][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u4:9 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 69.610578][ T1045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.615112][ T1045] Workqueue: btree_update btree_interior_update_work [ 69.618098][ T1045] Call Trace: [ 69.619501][ T1045] [ 69.620766][ T1045] dump_stack_lvl+0x99/0x250 [ 69.622683][ T1045] ? __asan_memcpy+0x40/0x70 [ 69.624486][ T1045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.626552][ T1045] ? __pfx__printk+0x10/0x10 [ 69.628325][ T1045] panic+0x2db/0x790 [ 69.629864][ T1045] ? __pfx_panic+0x10/0x10 [ 69.631710][ T1045] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 69.634163][ T1045] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.636874][ T1045] ? print_memory_metadata+0x314/0x400 [ 69.639278][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.641495][ T1045] check_panic_on_warn+0x89/0xb0 [ 69.643652][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.646010][ T1045] end_report+0x78/0x160 [ 69.647882][ T1045] kasan_report+0x129/0x150 [ 69.649847][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.652009][ T1045] kasan_check_range+0x2b0/0x2c0 [ 69.654213][ T1045] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.656473][ T1045] __asan_memcpy+0x29/0x70 [ 69.658390][ T1045] __bch2_alloc_to_v4+0x7b/0x8b0 [ 69.660578][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.662944][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.665433][ T1045] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 69.667820][ T1045] bch2_trigger_alloc+0x323/0x4090 [ 69.670083][ T1045] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 69.672549][ T1045] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 69.675221][ T1045] ? __pfx_bch2_journal_keys_peek_slot+0x10/0x10 [ 69.678008][ T1045] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 69.680447][ T1045] ? __bch2_btree_node_relock+0x18a/0x990 [ 69.683046][ T1045] ? verify_update_old_key+0x34f/0x790 [ 69.685476][ T1045] ? __pfx_verify_update_old_key+0x10/0x10 [ 69.687965][ T1045] ? __bch2_trans_commit+0x421/0x8870 [ 69.690213][ T1045] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 69.693025][ T1045] __bch2_trans_commit+0xa84/0x8870 [ 69.696094][ T1045] ? bch2_bkey_sectors_need_rebalance+0x6cb/0xee0 [ 69.699235][ T1045] ? bch2_trigger_extent+0x764/0x960 [ 69.701527][ T1045] ? btree_interior_update_work+0x1082/0x27d0 [ 69.704161][ T1045] ? __pfx___bch2_trans_commit+0x10/0x10 [ 69.706539][ T1045] ? __bch2_trans_subbuf_alloc+0x2d9/0x590 [ 69.709034][ T1045] ? btree_interior_update_work+0xe71/0x27d0 [ 69.711951][ T1045] btree_interior_update_work+0x1082/0x27d0 [ 69.714546][ T1045] ? __pfx_btree_interior_update_work+0x10/0x10 [ 69.717253][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.719509][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 69.721952][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 69.724373][ T1045] process_scheduled_works+0xade/0x17b0 [ 69.726768][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.729460][ T1045] worker_thread+0x8a0/0xda0 [ 69.731565][ T1045] kthread+0x70e/0x8a0 [ 69.733314][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 69.735558][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.737560][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.739722][ T1045] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.741930][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.743942][ T1045] ret_from_fork+0x3fc/0x770 [ 69.745844][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 69.748166][ T1045] ? __pfx_kthread+0x10/0x10 [ 69.750135][ T1045] ret_from_fork_asm+0x1a/0x30 [ 69.752194][ T1045] [ 69.753836][ T1045] Kernel Offset: disabled [ 69.755744][ T1045] Rebooting in 86400 seconds..