program: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) sendfile(r0, r0, 0x0, 0x5) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x32, 0x1, 0x0, "3a649f5edf27acce030e1f60ae2726d20fb09634b50b865066c27811ca55e21f"}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0xf, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x64, r3, 0xd8a88e4542785bc5, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x51}}, {0x8, 0x73}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0) flock(r2, 0x5) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x100, 0x2, 0x2, "2695a15481e53960b3249f1635ef3f29a8d581cdf98ad5cd52d0695758bddb63", 0x73770604}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{r0}, 0x2, &(0x7f0000000000)=[0x5, 0x401], 0x4, 0x3}) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0x5983, &(0x7f0000009180)="$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") [ 85.202953][ T5324] Bluetooth: hci0: command tx timeout [ 85.335592][ T5349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.0'. [ 85.650926][ T5349] loop0: detected capacity change from 0 to 32768 [ 85.709188][ T5349] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 85.926761][ T5349] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 85.926780][ T5349] allowing incompatible features above 0.0: (unknown version) [ 85.926787][ T5349] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.015903][ T5349] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 86.022217][ T5349] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.044705][ T5349] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 86.044705][ T5349] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 86.187845][ T5349] bcachefs (loop0): invalid bkey in btree_node btree=freespace level=0: u64s 5 type set 0:26:0 len 3003121665 ver 0 [ 86.187886][ T5349] size greater than offset (3003121665 > 26), deleting [ 86.202340][ T5349] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 86.211819][ T5349] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 86.211853][ T5349] u64s 11 type btree_ptr_v2 POS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.211863][ T5349] loop0 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX [ 86.211869][ T5349] flagging btree backpointers lost data [ 86.211876][ T5349] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 86.211882][ T5349] ret btree_node_read_validate_error [ 86.363067][ T5349] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 86.369788][ T5349] bcachefs (loop0): check_topology... done [ 86.394860][ T5349] bcachefs (loop0): accounting_read... done [ 86.400285][ T5349] bcachefs (loop0): alloc_read... done [ 86.405035][ T5349] bcachefs (loop0): snapshots_read... done [ 86.638965][ T5349] bcachefs (loop0): check_allocations... [ 86.755187][ T54] cfg80211: failed to load regulatory.db [ 86.786854][ T5349] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 86.786884][ T5349] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 86.828325][ T5349] bcachefs (loop0): bucket 0:26 gen 128 data type btree: ptr gen 0 too stale [ 86.828343][ T5349] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 86.856308][ T5349] bcachefs (loop0): bucket 0:26 data type btree stale dirty ptr: 0 < 128 [ 86.856336][ T5349] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 86.898983][ T5349] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 86.899003][ T5349] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 86.923587][ T5349] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 86.923604][ T5349] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 86.958919][ T5349] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 86.958936][ T5349] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 86.971638][ T5349] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 86.971653][ T5349] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 87.019496][ T5349] bcachefs (loop0): bucket 0:29 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 87.042074][ T5349] bcachefs (loop0): bucket 0:29 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 87.086142][ T5349] bcachefs (loop0): bucket 0:37 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 87.090461][ T5349] bcachefs (loop0): bucket 0:37 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 87.115478][ T5349] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 87.137134][ T5349] bcachefs (loop0): bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 87.156627][ T5349] done [ 87.160258][ T5349] bcachefs (loop0): going read-write [ 87.263601][ T5349] bcachefs (loop0): journal_replay... [ 87.278694][ T1037] ================================================================== [ 87.289965][ T1037] BUG: KASAN: slab-out-of-bounds in __bch2_alloc_to_v4+0x7b/0x8b0 [ 87.293514][ T1037] Read of size 64 at addr ffff8880528c7728 by task kworker/u4:5/1037 [ 87.313102][ T1037] [ 87.322033][ T1037] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u4:5 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 87.322050][ T1037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.322058][ T1037] Workqueue: btree_update btree_interior_update_work [ 87.322079][ T1037] Call Trace: [ 87.322087][ T1037] [ 87.322093][ T1037] dump_stack_lvl+0x189/0x250 [ 87.322108][ T1037] ? __virt_addr_valid+0x1c8/0x5c0 [ 87.322122][ T1037] ? rcu_is_watching+0x15/0xb0 [ 87.322134][ T1037] ? __kasan_check_byte+0x12/0x40 [ 87.322147][ T1037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.322158][ T1037] ? rcu_is_watching+0x15/0xb0 [ 87.322170][ T1037] ? lock_release+0x4b/0x3e0 [ 87.322180][ T1037] ? __virt_addr_valid+0x1c8/0x5c0 [ 87.322193][ T1037] ? __virt_addr_valid+0x4a5/0x5c0 [ 87.322205][ T1037] print_report+0xd2/0x2b0 [ 87.322215][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 87.322228][ T1037] kasan_report+0x118/0x150 [ 87.322242][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 87.322255][ T1037] kasan_check_range+0x2b0/0x2c0 [ 87.322280][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 87.322292][ T1037] __asan_memcpy+0x29/0x70 [ 87.322303][ T1037] __bch2_alloc_to_v4+0x7b/0x8b0 [ 87.322316][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 87.322325][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 87.322334][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 87.322343][ T1037] bch2_trigger_alloc+0x323/0x4090 [ 87.322359][ T1037] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 87.322374][ T1037] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 87.322386][ T1037] ? __pfx_bch2_journal_keys_peek_slot+0x10/0x10 [ 87.322395][ T1037] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 87.322409][ T1037] ? __bch2_btree_node_relock+0x18a/0x990 [ 87.322421][ T1037] ? verify_update_old_key+0x34f/0x790 [ 87.322438][ T1037] ? __pfx_verify_update_old_key+0x10/0x10 [ 87.322454][ T1037] ? __bch2_trans_commit+0x421/0x8870 [ 87.322468][ T1037] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 87.322481][ T1037] __bch2_trans_commit+0xa81/0x8870 [ 87.322498][ T1037] ? bch2_bkey_sectors_need_rebalance+0x72b/0xee0 [ 87.322511][ T1037] ? bch2_trigger_extent+0x764/0x960 [ 87.322519][ T1037] ? btree_interior_update_work+0x1082/0x27d0 [ 87.322534][ T1037] ? __pfx___bch2_trans_commit+0x10/0x10 [ 87.322587][ T1037] ? __bch2_trans_subbuf_alloc+0x2d9/0x590 [ 87.322598][ T1037] ? btree_interior_update_work+0xe71/0x27d0 [ 87.322612][ T1037] btree_interior_update_work+0x1082/0x27d0 [ 87.322631][ T1037] ? __pfx_btree_interior_update_work+0x10/0x10 [ 87.322648][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.322711][ T1037] ? process_scheduled_works+0x9ef/0x17b0 [ 87.322724][ T1037] ? process_scheduled_works+0x9ef/0x17b0 [ 87.322736][ T1037] process_scheduled_works+0xade/0x17b0 [ 87.322754][ T1037] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.322767][ T1037] worker_thread+0x8a0/0xda0 [ 87.322784][ T1037] kthread+0x70e/0x8a0 [ 87.322799][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 87.322810][ T1037] ? __pfx_kthread+0x10/0x10 [ 87.322824][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.322837][ T1037] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.322851][ T1037] ? __pfx_kthread+0x10/0x10 [ 87.322864][ T1037] ret_from_fork+0x3fc/0x770 [ 87.322876][ T1037] ? __pfx_ret_from_fork+0x10/0x10 [ 87.322887][ T1037] ? __pfx_kthread+0x10/0x10 [ 87.322901][ T1037] ret_from_fork_asm+0x1a/0x30 [ 87.322918][ T1037] [ 87.322922][ T1037] [ 87.553849][ T1037] Allocated by task 5349: [ 87.555836][ T1037] kasan_save_track+0x3e/0x80 [ 87.557889][ T1037] __kasan_kmalloc+0x93/0xb0 [ 87.559949][ T1037] __kmalloc_noprof+0x27a/0x4f0 [ 87.562446][ T1037] bch2_journal_key_insert+0x50/0x140 [ 87.565458][ T1037] do_bch2_trans_commit_to_journal_replay+0x127/0xd70 [ 87.568949][ T1037] __bch2_trans_commit+0x1b67/0x8870 [ 87.571432][ T1037] bch2_check_allocations+0x2ee0/0x57b0 [ 87.574709][ T1037] __bch2_run_recovery_passes+0x395/0x1010 [ 87.578890][ T1037] bch2_run_recovery_passes+0x184/0x210 [ 87.582965][ T1037] bch2_fs_recovery+0x2690/0x3a50 [ 87.585404][ T1037] bch2_fs_start+0xa99/0xd90 [ 87.587673][ T1037] bch2_fs_get_tree+0xafc/0x14f0 [ 87.590123][ T1037] vfs_get_tree+0x92/0x2b0 [ 87.592473][ T1037] do_new_mount+0x24a/0xa40 [ 87.595701][ T1037] __se_sys_mount+0x317/0x410 [ 87.598652][ T1037] do_syscall_64+0xfa/0x3b0 [ 87.600822][ T1037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.603431][ T1037] [ 87.604705][ T1037] The buggy address belongs to the object at ffff8880528c7700 [ 87.604705][ T1037] which belongs to the cache kmalloc-96 of size 96 [ 87.615263][ T1037] The buggy address is located 40 bytes inside of [ 87.615263][ T1037] allocated 88-byte region [ffff8880528c7700, ffff8880528c7758) [ 87.621902][ T1037] [ 87.623007][ T1037] The buggy address belongs to the physical page: [ 87.627794][ T1037] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x528c7 [ 87.631501][ T1037] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 87.634447][ T1037] page_type: f5(slab) [ 87.636212][ T1037] raw: 04fff00000000000 ffff88801a441280 dead000000000100 dead000000000122 [ 87.639600][ T1037] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 87.643336][ T1037] page dumped because: kasan: bad access detected [ 87.648078][ T1037] page_owner tracks the page as allocated [ 87.652145][ T1037] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 54, tgid 54 (kworker/0:2), ts 87058127042, free_ts 0 [ 87.666104][ T1037] post_alloc_hook+0x240/0x2a0 [ 87.669224][ T1037] get_page_from_freelist+0x21e4/0x22c0 [ 87.688150][ T1037] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.690789][ T1037] alloc_pages_mpol+0x232/0x4a0 [ 87.696801][ T1037] allocate_slab+0x8a/0x3b0 [ 87.700643][ T1037] ___slab_alloc+0xbfc/0x1480 [ 87.719675][ T1037] __kmalloc_cache_noprof+0x296/0x3d0 [ 87.735576][ T1037] dst_cow_metrics_generic+0x56/0x1c0 [ 87.738293][ T1037] icmp6_dst_alloc+0x261/0x420 [ 87.740479][ T1037] mld_sendpack+0x678/0xd80 [ 87.752933][ T1037] mld_dad_work+0x45/0x520 [ 87.765958][ T1037] process_scheduled_works+0xade/0x17b0 [ 87.768692][ T1037] worker_thread+0x8a0/0xda0 [ 87.771181][ T1037] kthread+0x70e/0x8a0 [ 87.773552][ T1037] ret_from_fork+0x3fc/0x770 [ 87.777883][ T1037] ret_from_fork_asm+0x1a/0x30 [ 87.782733][ T1037] page_owner free stack trace missing [ 87.787262][ T1037] [ 87.788475][ T1037] Memory state around the buggy address: [ 87.796375][ T1037] ffff8880528c7600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 87.799830][ T1037] ffff8880528c7680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 87.805740][ T1037] >ffff8880528c7700: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 87.815529][ T1037] ^ [ 87.818531][ T1037] ffff8880528c7780: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 87.822155][ T1037] ffff8880528c7800: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 87.842319][ T1037] ================================================================== [ 87.949608][ T5324] Bluetooth: hci0: command tx timeout [ 87.961965][ T1037] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.969495][ T1037] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u4:5 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 87.992373][ T1037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.003059][ T1037] Workqueue: btree_update btree_interior_update_work [ 88.017586][ T1037] Call Trace: [ 88.021375][ T1037] [ 88.036321][ T1037] dump_stack_lvl+0x99/0x250 [ 88.038940][ T1037] ? __asan_memcpy+0x40/0x70 [ 88.042131][ T1037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.056359][ T1037] ? __pfx__printk+0x10/0x10 [ 88.059808][ T1037] panic+0x2db/0x790 [ 88.062834][ T1037] ? __pfx_panic+0x10/0x10 [ 88.065052][ T1037] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 88.068349][ T1037] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.071292][ T1037] ? print_memory_metadata+0x314/0x400 [ 88.100479][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 88.103149][ T1037] check_panic_on_warn+0x89/0xb0 [ 88.116222][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 88.120246][ T1037] end_report+0x78/0x160 [ 88.125488][ T1037] kasan_report+0x129/0x150 [ 88.136488][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 88.139380][ T1037] kasan_check_range+0x2b0/0x2c0 [ 88.142166][ T1037] ? __bch2_alloc_to_v4+0x7b/0x8b0 [ 88.155286][ T1037] __asan_memcpy+0x29/0x70 [ 88.157631][ T1037] __bch2_alloc_to_v4+0x7b/0x8b0 [ 88.160256][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 88.177396][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 88.179870][ T1037] ? bch2_dev_tryget_noerror+0x1e/0x340 [ 88.182323][ T1037] bch2_trigger_alloc+0x323/0x4090 [ 88.197773][ T1037] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 88.200446][ T1037] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 88.220476][ T1037] ? __pfx_bch2_journal_keys_peek_slot+0x10/0x10 [ 88.234440][ T1037] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 88.237255][ T1037] ? __bch2_btree_node_relock+0x18a/0x990 [ 88.240357][ T1037] ? verify_update_old_key+0x34f/0x790 [ 88.243606][ T1037] ? __pfx_verify_update_old_key+0x10/0x10 [ 88.256274][ T1037] ? __bch2_trans_commit+0x421/0x8870 [ 88.258532][ T1037] ? __pfx_bch2_trigger_alloc+0x10/0x10 [ 88.261323][ T1037] __bch2_trans_commit+0xa81/0x8870 [ 88.276342][ T1037] ? bch2_bkey_sectors_need_rebalance+0x72b/0xee0 [ 88.279735][ T1037] ? bch2_trigger_extent+0x764/0x960 [ 88.282475][ T1037] ? btree_interior_update_work+0x1082/0x27d0 [ 88.298297][ T1037] ? __pfx___bch2_trans_commit+0x10/0x10 [ 88.301543][ T1037] ? __bch2_trans_subbuf_alloc+0x2d9/0x590 [ 88.304587][ T1037] ? btree_interior_update_work+0xe71/0x27d0 [ 88.307461][ T1037] btree_interior_update_work+0x1082/0x27d0 [ 88.310172][ T1037] ? __pfx_btree_interior_update_work+0x10/0x10 [ 88.313046][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.315654][ T1037] ? process_scheduled_works+0x9ef/0x17b0 [ 88.318264][ T1037] ? process_scheduled_works+0x9ef/0x17b0 [ 88.321009][ T1037] process_scheduled_works+0xade/0x17b0 [ 88.324269][ T1037] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.327939][ T1037] worker_thread+0x8a0/0xda0 [ 88.331215][ T1037] kthread+0x70e/0x8a0 [ 88.333128][ T1037] ? __pfx_worker_thread+0x10/0x10 [ 88.335898][ T1037] ? __pfx_kthread+0x10/0x10 [ 88.338334][ T1037] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.368300][ T1037] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.370800][ T1037] ? __pfx_kthread+0x10/0x10 [ 88.382824][ T1037] ret_from_fork+0x3fc/0x770 [ 88.385372][ T1037] ? __pfx_ret_from_fork+0x10/0x10 [ 88.394506][ T1037] ? __pfx_kthread+0x10/0x10 [ 88.397747][ T1037] ret_from_fork_asm+0x1a/0x30 [ 88.400295][ T1037] [ 88.402252][ T1037] Kernel Offset: disabled [ 88.417741][ T1037] Rebooting in 86400 seconds..