program: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x181000d, &(0x7f0000000380)={[{@discard}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'set_may_go_rw'}}, {@errors_continue}, {@inline_data}, {@str_hash={'str_hash', 0x3d, 'crc64'}}, {@metadata_checksum={'metadata_checksum', 0x3d, 'xxhash'}}, {@nocow}, {@btree_node_mem_ptr_optimization}, {@compression={'compression', 0x3d, 'lz4'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x34, 0x64, 0x8, 0x66, 0x36, 0x30, 0x35], 0x2d, [0x62, 0x62, 0x34, 0x38], 0x2d, [0x38, 0x30, 0x62, 0x36], 0x2d, [0x62, 0x37, 0x3490567f215ce8b6, 0x3], 0x2d, [0x32, 0x34, 0x30, 0x36, 0x39, 0x34, 0x32, 0x66]}}}]}, 0x0, 0x5967, &(0x7f000000b580)="$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") (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') (rerun: 32) read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2020) (async) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x0, 0x7f}) [ 77.166656][ T5340] syz.0.0 (5340) used greatest stack depth: 12984 bytes l[ 75.052140][ T45] Bluetooth: hci0: command tx timeout [ 75.387137][ T5340] loop0: detected capacity change from 0 to 32768 [ 75.499677][ T5340] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc64,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,read_only,nocow [ 75.499694][ T5340] allowing incompatible features above 0.0: (unknown version) [ 75.499708][ T5340] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.518352][ T5340] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.522904][ T5340] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 75.528474][ T5340] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 75.528489][ T5340] has non ptr field, deleting [ 75.541236][ T5340] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.544922][ T5340] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 75.544922][ T5340] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 75.544922][ T5340] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 75.621407][ T5340] bcachefs (loop0): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4096 type dir [ 75.621432][ T5340] dirent points to own directory, deleting [ 75.642314][ T5340] bcachefs (loop0): accounting_read... done [ 75.652515][ T5340] bcachefs (loop0): alloc_read... done [ 75.656821][ T5340] bcachefs (loop0): snapshots_read... done [ 75.659927][ T5340] bcachefs (loop0): check_allocations... [ 75.666555][ T5340] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 75.666580][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 75.684111][ T5340] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 75.684125][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 75.695444][ T5340] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 75.695458][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 75.707483][ T5340] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 75.707496][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 75.722976][ T5340] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 75.722990][ T5340] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 75.735395][ T5340] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.739876][ T5340] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.745295][ T5340] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.749454][ T5340] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.754985][ T5340] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.759267][ T5340] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.764424][ T5340] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.768625][ T5340] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.777784][ T5340] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.782025][ T5340] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.786983][ T5340] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.791347][ T5340] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.796357][ T5340] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.800585][ T5340] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.805364][ T5340] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.809494][ T5340] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 75.814028][ T5340] bcachefs (loop0): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.818287][ T5340] bcachefs (loop0): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.823241][ T5340] bcachefs (loop0): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.827506][ T5340] bcachefs (loop0): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.832247][ T5340] bcachefs (loop0): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 75.832259][ T5340] Ratelimiting new instances of previous error [ 75.839508][ T5340] bcachefs (loop0): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 75.839516][ T5340] Ratelimiting new instances of previous error [ 75.859589][ T5340] done [ 75.865082][ T5340] bcachefs (loop0): going read-write [ 76.046028][ T5340] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 76.050779][ T5340] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 76.055194][ T5340] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 76.072572][ T5340] bcachefs (loop0): unclean shutdown complete, journal seq 11 [ 76.076728][ T5340] bcachefs (loop0): error in recovery: EINTR [ 76.076741][ T5340] emergency read only at seq 11 [ 76.082289][ T5340] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 76.085531][ T5340] bcachefs (loop0): shutting down [ 76.105358][ T5340] bcachefs (loop0): shutdown complete [ 76.108239][ T4689] ================================================================== [ 76.111677][ T4689] BUG: KASAN: slab-use-after-free in bch2_get_next_dev+0x371/0x4c0 [ 76.115075][ T4689] Write of size 8 at addr ffff88803464e040 by task kworker/u5:1/4689 [ 76.118722][ T4689] [ 76.119924][ T4689] CPU: 0 UID: 0 PID: 4689 Comm: kworker/u5:1 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 76.119940][ T4689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.119949][ T4689] Workqueue: bcachefs_journal journal_write_done [ 76.119967][ T4689] Call Trace: [ 76.119974][ T4689] [ 76.119979][ T4689] dump_stack_lvl+0x189/0x250 [ 76.119994][ T4689] ? __kasan_check_byte+0x12/0x40 [ 76.120029][ T4689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.120039][ T4689] ? lock_release+0x4b/0x3e0 [ 76.120050][ T4689] ? __virt_addr_valid+0x4a5/0x5c0 [ 76.120062][ T4689] print_report+0xca/0x230 [ 76.120072][ T4689] ? bch2_get_next_dev+0x371/0x4c0 [ 76.120086][ T4689] kasan_report+0x118/0x150 [ 76.120098][ T4689] ? bch2_get_next_dev+0x371/0x4c0 [ 76.120111][ T4689] kasan_check_range+0x2b0/0x2c0 [ 76.120124][ T4689] bch2_get_next_dev+0x371/0x4c0 [ 76.120136][ T4689] ? bch2_get_next_dev+0x27/0x4c0 [ 76.120150][ T4689] bch2_do_discards+0x20/0x160 [ 76.120163][ T4689] journal_write_done+0x119a/0x13d0 [ 76.120178][ T4689] ? __pfx_journal_write_done+0x10/0x10 [ 76.120190][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.120203][ T4689] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.120257][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.120267][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.120277][ T4689] process_scheduled_works+0xae1/0x17b0 [ 76.120293][ T4689] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.120308][ T4689] worker_thread+0x8a0/0xda0 [ 76.120319][ T4689] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.120335][ T4689] ? __kthread_parkme+0x7b/0x200 [ 76.120349][ T4689] kthread+0x70e/0x8a0 [ 76.120362][ T4689] ? __pfx_worker_thread+0x10/0x10 [ 76.120372][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.120385][ T4689] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.120405][ T4689] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.120413][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.120426][ T4689] ret_from_fork+0x3fc/0x770 [ 76.120438][ T4689] ? __pfx_ret_from_fork+0x10/0x10 [ 76.120449][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.120462][ T4689] ret_from_fork_asm+0x1a/0x30 [ 76.120478][ T4689] [ 76.120481][ T4689] [ 76.214233][ T4689] Allocated by task 5340: [ 76.216068][ T4689] kasan_save_track+0x3e/0x80 [ 76.218046][ T4689] __kasan_kmalloc+0x93/0xb0 [ 76.220056][ T4689] __kmalloc_cache_noprof+0x230/0x3d0 [ 76.222360][ T4689] __bch2_dev_alloc+0xa7/0xc30 [ 76.224313][ T4689] bch2_dev_alloc+0xcd/0x180 [ 76.226196][ T4689] bch2_fs_open+0x2472/0x2600 [ 76.228268][ T4689] bch2_fs_get_tree+0x44f/0x1520 [ 76.230327][ T4689] vfs_get_tree+0x8f/0x2b0 [ 76.232252][ T4689] do_new_mount+0x24a/0xa40 [ 76.234157][ T4689] __se_sys_mount+0x317/0x410 [ 76.236207][ T4689] do_syscall_64+0xfa/0x3b0 [ 76.238107][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.240599][ T4689] [ 76.241737][ T4689] Freed by task 5340: [ 76.243528][ T4689] kasan_save_track+0x3e/0x80 [ 76.245625][ T4689] kasan_save_free_info+0x46/0x50 [ 76.247740][ T4689] __kasan_slab_free+0x62/0x70 [ 76.249855][ T4689] kfree+0x18e/0x440 [ 76.251614][ T4689] kobject_put+0x22b/0x480 [ 76.253578][ T4689] bch2_fs_free+0x440/0x5a0 [ 76.255562][ T4689] bch2_fs_get_tree+0xb6e/0x1520 [ 76.257754][ T4689] vfs_get_tree+0x8f/0x2b0 [ 76.259897][ T4689] do_new_mount+0x24a/0xa40 [ 76.262352][ T4689] __se_sys_mount+0x317/0x410 [ 76.264572][ T4689] do_syscall_64+0xfa/0x3b0 [ 76.266751][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.269616][ T4689] [ 76.270660][ T4689] The buggy address belongs to the object at ffff88803464e000 [ 76.270660][ T4689] which belongs to the cache kmalloc-4k of size 4096 [ 76.276359][ T4689] The buggy address is located 64 bytes inside of [ 76.276359][ T4689] freed 4096-byte region [ffff88803464e000, ffff88803464f000) [ 76.281920][ T4689] [ 76.282965][ T4689] The buggy address belongs to the physical page: [ 76.285653][ T4689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34648 [ 76.289039][ T4689] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.292456][ T4689] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 76.295776][ T4689] page_type: f5(slab) [ 76.297627][ T4689] raw: 04fff00000000040 ffff88801a442140 dead000000000122 0000000000000000 [ 76.301619][ T4689] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 76.305219][ T4689] head: 04fff00000000040 ffff88801a442140 dead000000000122 0000000000000000 [ 76.308693][ T4689] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 76.312368][ T4689] head: 04fff00000000003 ffffea0000d19201 00000000ffffffff 00000000ffffffff [ 76.316080][ T4689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 76.319661][ T4689] page dumped because: kasan: bad access detected [ 76.322439][ T4689] page_owner tracks the page as allocated [ 76.324811][ T4689] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4739, tgid 4739 (udevd), ts 75438638202, free_ts 75407801854 [ 76.332762][ T4689] post_alloc_hook+0x240/0x2a0 [ 76.334653][ T4689] get_page_from_freelist+0x21e4/0x22c0 [ 76.337120][ T4689] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.339654][ T4689] alloc_pages_mpol+0x232/0x4a0 [ 76.341812][ T4689] allocate_slab+0x8a/0x3b0 [ 76.343848][ T4689] ___slab_alloc+0xbfc/0x1480 [ 76.345923][ T4689] __kmalloc_noprof+0x305/0x4f0 [ 76.348082][ T4689] tomoyo_realpath_from_path+0xe3/0x5d0 [ 76.350543][ T4689] tomoyo_path_number_perm+0x1e8/0x5a0 [ 76.352957][ T4689] tomoyo_path_mknod+0x142/0x190 [ 76.355245][ T4689] security_path_mknod+0x17e/0x3a0 [ 76.357658][ T4689] path_openat+0xd56/0x3830 [ 76.359685][ T4689] do_filp_open+0x1fa/0x410 [ 76.361755][ T4689] do_sys_openat2+0x121/0x1c0 [ 76.363836][ T4689] __x64_sys_openat+0x138/0x170 [ 76.365937][ T4689] do_syscall_64+0xfa/0x3b0 [ 76.367921][ T4689] page last free pid 4739 tgid 4739 stack trace: [ 76.370536][ T4689] __free_frozen_pages+0xc71/0xe70 [ 76.372867][ T4689] __put_partials+0x161/0x1c0 [ 76.374904][ T4689] put_cpu_partial+0x17c/0x250 [ 76.376952][ T4689] __slab_free+0x2f7/0x400 [ 76.378757][ T4689] qlist_free_all+0x97/0x140 [ 76.380657][ T4689] kasan_quarantine_reduce+0x148/0x160 [ 76.382856][ T4689] __kasan_slab_alloc+0x22/0x80 [ 76.384832][ T4689] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 76.387140][ T4689] getname_flags+0xb8/0x540 [ 76.388928][ T4689] vfs_fstatat+0x43/0x170 [ 76.390742][ T4689] __x64_sys_newfstatat+0x116/0x190 [ 76.392959][ T4689] do_syscall_64+0xfa/0x3b0 [ 76.394903][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.397465][ T4689] [ 76.398490][ T4689] Memory state around the buggy address: [ 76.400931][ T4689] ffff88803464df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.404288][ T4689] ffff88803464df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.407625][ T4689] >ffff88803464e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.410929][ T4689] ^ [ 76.413487][ T4689] ffff88803464e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.416784][ T4689] ffff88803464e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.419979][ T4689] ================================================================== [ 76.445305][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.447725][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.455764][ T4689] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.458839][ T4689] CPU: 0 UID: 0 PID: 4689 Comm: kworker/u5:1 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) [ 76.463537][ T4689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.467180][ T4689] Workqueue: bcachefs_journal journal_write_done [ 76.469848][ T4689] Call Trace: [ 76.471296][ T4689] [ 76.472589][ T4689] dump_stack_lvl+0x99/0x250 [ 76.474550][ T4689] ? __asan_memcpy+0x40/0x70 [ 76.476566][ T4689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.478514][ T4689] ? __pfx__printk+0x10/0x10 [ 76.480281][ T4689] panic+0x2db/0x790 [ 76.481782][ T4689] ? __pfx_panic+0x10/0x10 [ 76.483503][ T4689] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 76.485778][ T4689] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.488205][ T4689] ? print_memory_metadata+0x314/0x400 [ 76.490519][ T4689] ? bch2_get_next_dev+0x371/0x4c0 [ 76.492685][ T4689] check_panic_on_warn+0x89/0xb0 [ 76.494635][ T4689] ? bch2_get_next_dev+0x371/0x4c0 [ 76.496811][ T4689] end_report+0x78/0x160 [ 76.498761][ T4689] kasan_report+0x129/0x150 [ 76.500811][ T4689] ? bch2_get_next_dev+0x371/0x4c0 [ 76.503031][ T4689] kasan_check_range+0x2b0/0x2c0 [ 76.505252][ T4689] bch2_get_next_dev+0x371/0x4c0 [ 76.507348][ T4689] ? bch2_get_next_dev+0x27/0x4c0 [ 76.509453][ T4689] bch2_do_discards+0x20/0x160 [ 76.511468][ T4689] journal_write_done+0x119a/0x13d0 [ 76.513611][ T4689] ? __pfx_journal_write_done+0x10/0x10 [ 76.515886][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.518329][ T4689] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.520485][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.522830][ T4689] ? process_scheduled_works+0x9ef/0x17b0 [ 76.525025][ T4689] process_scheduled_works+0xae1/0x17b0 [ 76.527310][ T4689] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.529819][ T4689] worker_thread+0x8a0/0xda0 [ 76.531761][ T4689] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.534316][ T4689] ? __kthread_parkme+0x7b/0x200 [ 76.536298][ T4689] kthread+0x70e/0x8a0 [ 76.537906][ T4689] ? __pfx_worker_thread+0x10/0x10 [ 76.540034][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.541933][ T4689] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.544228][ T4689] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.546560][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.548665][ T4689] ret_from_fork+0x3fc/0x770 [ 76.550824][ T4689] ? __pfx_ret_from_fork+0x10/0x10 [ 76.553233][ T4689] ? __pfx_kthread+0x10/0x10 [ 76.555403][ T4689] ret_from_fork_asm+0x1a/0x30 [ 76.557688][ T4689] [ 76.559586][ T4689] Kernel Offset: disabled [ 76.561594][ T4689] Rebooting in 86400 seconds..