program: r0 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xde, 0x180, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6240bc08, 0xb07, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0xdf, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xc, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x1, 0x5}}}}}}}]}}, 0x0) write$hidraw(r0, &(0x7f0000000240)="21dd96a8", 0x4000) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000180)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000240)={0x9, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) write$hidraw(r0, &(0x7f0000000440)="eead354ad86f842ceac613b00a83ed88cc191219ea78817abbaff843e2a2324de7819a1971bda047fdde86f6085fbb17385dba8c236d7a4b0c740424de9355c94458028e7c3cf98143da7f97cc97d2377735aef11905d4fb5f7c", 0x5a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0xffffffffffff8000, 0xa000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/112, 0x70}) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@random="219526f4e916", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @remote}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000500), &(0x7f0000000280)=ANY=[], 0x841, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r10, r10, 0x0) r11 = gettid() ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f00000000c0)=r11) sendto$unix(r8, &(0x7f00000001c0)="fa", 0x2, 0x1, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r12, &(0x7f00000000c0)={0x18}, 0xfffffdef) [ 88.366483][ T4684] Bluetooth: hci0: command tx timeout [ 88.763995][ T786] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.920512][ T786] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 88.924972][ T786] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 88.931801][ T786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.936391][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.939755][ T786] usb 5-1: Product: syz [ 88.941673][ T786] usb 5-1: Manufacturer: syz [ 88.943713][ T786] usb 5-1: SerialNumber: syz usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 89.172530][ T5340] loop0: detected capacity change from 0 to 1024 [ 89.181618][ T5340] ======================================================= [ 89.181618][ T5340] WARNING: The mand mount option has been deprecated and [ 89.181618][ T5340] and is ignored by this kernel. Remove the mand [ 89.181618][ T5340] option from the mount to silence this warning. [ 89.181618][ T5340] ======================================================= [ 89.225464][ T5340] EXT4-fs: Ignoring removed oldalloc option [ 89.228036][ T5340] EXT4-fs: Ignoring removed orlov option [ 89.249471][ T5340] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.275100][ T5340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.500378][ T2773] ================================================================== [ 89.504745][ T2773] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0 [ 89.508741][ T2773] Read of size 4 at addr ffff88800ddc4c70 by task kworker/u4:16/2773 [ 89.513275][ T2773] [ 89.514607][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: kworker/u4:16 Not tainted syzkaller #0 PREEMPT(full) [ 89.514623][ T2773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.514633][ T2773] Workqueue: writeback wb_workfn (flush-7:0) [ 89.514658][ T2773] Call Trace: [ 89.514666][ T2773] [ 89.514671][ T2773] dump_stack_lvl+0x189/0x250 [ 89.514688][ T2773] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.514704][ T2773] ? rcu_is_watching+0x15/0xb0 [ 89.514718][ T2773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.514730][ T2773] ? rcu_is_watching+0x15/0xb0 [ 89.514743][ T2773] ? lock_release+0x4b/0x3b0 [ 89.514753][ T2773] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 89.514821][ T2773] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.514836][ T2773] ? __virt_addr_valid+0x4a5/0x5c0 [ 89.514850][ T2773] print_report+0xca/0x240 [ 89.514885][ T2773] ? ext4_find_extent+0xae6/0xcc0 [ 89.514900][ T2773] kasan_report+0x118/0x150 [ 89.514912][ T2773] ? ext4_find_extent+0xae6/0xcc0 [ 89.514928][ T2773] ext4_find_extent+0xae6/0xcc0 [ 89.514944][ T2773] ext4_ext_map_blocks+0x278/0x69c0 [ 89.514968][ T2773] ? lockdep_unlock+0x89/0x120 [ 89.514984][ T2773] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 89.515003][ T2773] ? ext4_es_lookup_extent+0x6cd/0xb00 [ 89.515016][ T2773] ext4_map_blocks+0x82c/0x16f0 [ 89.515031][ T2773] ? __pfx_ext4_map_blocks+0x10/0x10 [ 89.515043][ T2773] ? rcu_is_watching+0x15/0xb0 [ 89.515056][ T2773] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 89.515068][ T2773] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 89.515083][ T2773] ? ext4_inode_journal_mode+0x193/0x470 [ 89.515097][ T2773] ext4_do_writepages+0x222f/0x4500 [ 89.515116][ T2773] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 89.515132][ T2773] ? __pfx_ext4_do_writepages+0x10/0x10 [ 89.515144][ T2773] ? __lock_acquire+0x6b6/0x2cf0 [ 89.515155][ T2773] ? filemap_get_folios_tag+0xed/0x630 [ 89.515178][ T2773] ? rcu_read_lock_any_held+0xb3/0x120 [ 89.515196][ T2773] ext4_writepages+0x203/0x350 [ 89.515211][ T2773] ? __pfx_ext4_writepages+0x10/0x10 [ 89.515229][ T2773] ? __dev_queue_xmit+0x289/0x3140 [ 89.515291][ T2773] ? __pfx_ext4_writepages+0x10/0x10 [ 89.515306][ T2773] do_writepages+0x32e/0x550 [ 89.515321][ T2773] ? reacquire_held_locks+0x121/0x1c0 [ 89.515333][ T2773] ? writeback_sb_inodes+0x3bd/0x1870 [ 89.515345][ T2773] __writeback_single_inode+0x133/0x1240 [ 89.515357][ T2773] ? do_raw_spin_unlock+0x4d/0x240 [ 89.515373][ T2773] writeback_sb_inodes+0x93a/0x1870 [ 89.515388][ T2773] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 89.515405][ T2773] ? __pfx_down_read_trylock+0x10/0x10 [ 89.515420][ T2773] ? __pfx___up_read+0x10/0x10 [ 89.515436][ T2773] __writeback_inodes_wb+0x111/0x240 [ 89.515448][ T2773] wb_writeback+0x43f/0xaa0 [ 89.515459][ T2773] ? queue_io+0x251/0x450 [ 89.515469][ T2773] ? __pfx_wb_writeback+0x10/0x10 [ 89.515488][ T2773] wb_workfn+0x8ee/0xed0 [ 89.515506][ T2773] ? __pfx_wb_workfn+0x10/0x10 [ 89.515525][ T2773] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.515540][ T2773] ? process_scheduled_works+0x9ef/0x1770 [ 89.515552][ T2773] ? process_scheduled_works+0x9ef/0x1770 [ 89.515563][ T2773] process_scheduled_works+0xad1/0x1770 [ 89.515578][ T2773] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.515593][ T2773] worker_thread+0x8a0/0xda0 [ 89.515609][ T2773] kthread+0x711/0x8a0 [ 89.515624][ T2773] ? __pfx_worker_thread+0x10/0x10 [ 89.515634][ T2773] ? __pfx_kthread+0x10/0x10 [ 89.515645][ T2773] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.515658][ T2773] ? lockdep_hardirqs_on+0x98/0x140 [ 89.515667][ T2773] ? __pfx_kthread+0x10/0x10 [ 89.515679][ T2773] ret_from_fork+0x599/0xb30 [ 89.515691][ T2773] ? __pfx_ret_from_fork+0x10/0x10 [ 89.515703][ T2773] ? __pfx_kthread+0x10/0x10 [ 89.515715][ T2773] ret_from_fork_asm+0x1a/0x30 [ 89.515733][ T2773] [ 89.515738][ T2773] [ 89.683586][ T2773] The buggy address belongs to the physical page: [ 89.686224][ T2773] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xae pfn:0xddc4 [ 89.690230][ T2773] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.693464][ T2773] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 89.697131][ T2773] raw: 00000000000000ae 0000000000000000 00000000ffffffff 0000000000000000 [ 89.701028][ T2773] page dumped because: kasan: bad access detected [ 89.703769][ T2773] page_owner tracks the page as freed [ 89.705895][ T2773] page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4716, tgid 4716 (syslogd), ts 84152818466, free_ts 88479251013 [ 89.717250][ T2773] post_alloc_hook+0x234/0x290 [ 89.719396][ T2773] get_page_from_freelist+0x2365/0x2440 [ 89.721825][ T2773] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.724368][ T2773] alloc_pages_mpol+0x232/0x4a0 [ 89.726603][ T2773] alloc_pages_noprof+0xa9/0x190 [ 89.728787][ T2773] folio_alloc_noprof+0x1e/0x30 [ 89.730873][ T2773] filemap_alloc_folio_noprof+0x112/0x490 [ 89.733374][ T2773] page_cache_ra_unbounded+0x34f/0x990 [ 89.735993][ T2773] do_sync_mmap_readahead+0x66a/0x870 [ 89.738941][ T2773] filemap_fault+0x6ac/0x1290 [ 89.741153][ T2773] __do_fault+0x138/0x390 [ 89.742958][ T2773] do_pte_missing+0x2206/0x3330 [ 89.745024][ T2773] handle_mm_fault+0x1b26/0x32b0 [ 89.747177][ T2773] do_user_addr_fault+0xa7c/0x1380 [ 89.749488][ T2773] exc_page_fault+0x82/0x100 [ 89.751717][ T2773] asm_exc_page_fault+0x26/0x30 [ 89.753901][ T2773] page last free pid 79 tgid 79 stack trace: [ 89.756543][ T2773] free_unref_folios+0xdb3/0x14f0 [ 89.759024][ T2773] shrink_folio_list+0x4800/0x5010 [ 89.761450][ T2773] evict_folios+0x473e/0x57f0 [ 89.763496][ T2773] try_to_shrink_lruvec+0x8a3/0xb50 [ 89.765743][ T2773] shrink_one+0x25c/0x720 [ 89.767665][ T2773] shrink_node+0x2f7d/0x35b0 [ 89.770136][ T2773] kswapd+0x145a/0x2820 [ 89.772035][ T2773] kthread+0x711/0x8a0 [ 89.773924][ T2773] ret_from_fork+0x599/0xb30 [ 89.776044][ T2773] ret_from_fork_asm+0x1a/0x30 [ 89.778196][ T2773] [ 89.779287][ T2773] Memory state around the buggy address: [ 89.781934][ T2773] ffff88800ddc4b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 89.785324][ T2773] ffff88800ddc4b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 89.788653][ T2773] >ffff88800ddc4c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 89.792017][ T2773] ^ [ 89.795306][ T2773] ffff88800ddc4c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 89.798514][ T2773] ffff88800ddc4d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 89.802487][ T2773] ================================================================== [ 90.010392][ T2773] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.013644][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: kworker/u4:16 Not tainted syzkaller #0 PREEMPT(full) [ 90.017827][ T2773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.022428][ T2773] Workqueue: writeback wb_workfn (flush-7:0) [ 90.024888][ T2773] Call Trace: [ 90.026319][ T2773] [ 90.027629][ T2773] dump_stack_lvl+0x99/0x250 [ 90.029573][ T2773] ? __asan_memcpy+0x40/0x70 [ 90.031601][ T2773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.033833][ T2773] ? __pfx__printk+0x10/0x10 [ 90.035783][ T2773] vpanic+0x237/0x6d0 [ 90.037397][ T2773] ? __pfx_vpanic+0x10/0x10 [ 90.039411][ T2773] ? preempt_schedule+0xae/0xc0 [ 90.041600][ T2773] ? __pfx_preempt_schedule+0x10/0x10 [ 90.043981][ T2773] panic+0xb9/0xc0 [ 90.046170][ T2773] ? __pfx_panic+0x10/0x10 [ 90.048186][ T2773] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 90.050789][ T2773] ? is_module_address+0x17/0xf0 [ 90.052969][ T2773] ? ext4_find_extent+0xae6/0xcc0 [ 90.055226][ T2773] check_panic_on_warn+0x89/0xb0 [ 90.057443][ T2773] ? ext4_find_extent+0xae6/0xcc0 [ 90.059680][ T2773] end_report+0x6f/0x140 [ 90.061547][ T2773] kasan_report+0x129/0x150 [ 90.063525][ T2773] ? ext4_find_extent+0xae6/0xcc0 [ 90.065704][ T2773] ext4_find_extent+0xae6/0xcc0 [ 90.067997][ T2773] ext4_ext_map_blocks+0x278/0x69c0 [ 90.070208][ T2773] ? lockdep_unlock+0x89/0x120 [ 90.072213][ T2773] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 90.074568][ T2773] ? ext4_es_lookup_extent+0x6cd/0xb00 [ 90.076824][ T2773] ext4_map_blocks+0x82c/0x16f0 [ 90.078829][ T2773] ? __pfx_ext4_map_blocks+0x10/0x10 [ 90.080985][ T2773] ? rcu_is_watching+0x15/0xb0 [ 90.082934][ T2773] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 90.085720][ T2773] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 90.087875][ T2773] ? ext4_inode_journal_mode+0x193/0x470 [ 90.090381][ T2773] ext4_do_writepages+0x222f/0x4500 [ 90.092647][ T2773] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 90.095095][ T2773] ? __pfx_ext4_do_writepages+0x10/0x10 [ 90.098068][ T2773] ? __lock_acquire+0x6b6/0x2cf0 [ 90.100492][ T2773] ? filemap_get_folios_tag+0xed/0x630 [ 90.102954][ T2773] ? rcu_read_lock_any_held+0xb3/0x120 [ 90.105300][ T2773] ext4_writepages+0x203/0x350 [ 90.107460][ T2773] ? __pfx_ext4_writepages+0x10/0x10 [ 90.110007][ T2773] ? __dev_queue_xmit+0x289/0x3140 [ 90.112260][ T2773] ? __pfx_ext4_writepages+0x10/0x10 [ 90.114637][ T2773] do_writepages+0x32e/0x550 [ 90.116679][ T2773] ? reacquire_held_locks+0x121/0x1c0 [ 90.119013][ T2773] ? writeback_sb_inodes+0x3bd/0x1870 [ 90.121306][ T2773] __writeback_single_inode+0x133/0x1240 [ 90.124797][ T2773] ? do_raw_spin_unlock+0x4d/0x240 [ 90.127001][ T2773] writeback_sb_inodes+0x93a/0x1870 [ 90.129154][ T2773] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 90.131540][ T2773] ? __pfx_down_read_trylock+0x10/0x10 [ 90.133870][ T2773] ? __pfx___up_read+0x10/0x10 [ 90.135962][ T2773] __writeback_inodes_wb+0x111/0x240 [ 90.138209][ T2773] wb_writeback+0x43f/0xaa0 [ 90.140103][ T2773] ? queue_io+0x251/0x450 [ 90.141904][ T2773] ? __pfx_wb_writeback+0x10/0x10 [ 90.144124][ T2773] wb_workfn+0x8ee/0xed0 [ 90.145902][ T2773] ? __pfx_wb_workfn+0x10/0x10 [ 90.148109][ T2773] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.150254][ T2773] ? process_scheduled_works+0x9ef/0x1770 [ 90.152570][ T2773] ? process_scheduled_works+0x9ef/0x1770 [ 90.154688][ T2773] process_scheduled_works+0xad1/0x1770 [ 90.156861][ T2773] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.159643][ T2773] worker_thread+0x8a0/0xda0 [ 90.161986][ T2773] kthread+0x711/0x8a0 [ 90.163780][ T2773] ? __pfx_worker_thread+0x10/0x10 [ 90.166796][ T2773] ? __pfx_kthread+0x10/0x10 [ 90.168803][ T2773] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.170999][ T2773] ? lockdep_hardirqs_on+0x98/0x140 [ 90.173256][ T2773] ? __pfx_kthread+0x10/0x10 [ 90.175310][ T2773] ret_from_fork+0x599/0xb30 [ 90.177412][ T2773] ? __pfx_ret_from_fork+0x10/0x10 [ 90.179660][ T2773] ? __pfx_kthread+0x10/0x10 [ 90.181703][ T2773] ret_from_fork_asm+0x1a/0x30 [ 90.183866][ T2773] [ 90.185517][ T2773] Kernel Offset: disabled [ 90.187668][ T2773] Rebooting in 86400 seconds..