program: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000b80)=ANY=[@ANYBLOB="3b00000000000000400101c00000000000000000000000007991d0a98a360cf3a0e61cd0fce70287428516ca621289eda89335dbe6b53a46f21830b321aba2fb956c2276a859c845bb9e05", @ANYBLOB="964697f9c85846575f0f571980022a87231c5621d1c4112a9395"]) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffe, 0x42040) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0x0) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000000a80)={0x78, 0x0, r4, {0x200, 0x6, 0x0, {0x0, 0x4, 0x0, 0x7, 0x100000000, 0xffffffffffffbe48, 0x10, 0xd, 0x25, 0xc000, 0x800, r6, r7, 0x69, 0x3}}}, 0x78) r8 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe], [0x2000005], [0x8002]], '\x00', [{0x610cfd08}, {}, {}, {0xffffffff}, {}, {0x0, 0x10001}]}) r9 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)) syz_clone3(&(0x7f0000000900)={0x120000, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000340)=0x0, {0x1e}, &(0x7f0000000380)=""/120, 0x78, &(0x7f0000000400), &(0x7f0000000440)}, 0x58) sched_setparam(r10, &(0x7f0000000980)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x40046207, 0x0) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='drrors=continue,\x00'], 0x1, 0x5e2d, &(0x7f000000bc40)="$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") r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@data_err_abort}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dax_inode}, {@inlinecrypt}, {@nodelalloc}], [{@pcr={'pcr', 0x3d, 0x2}}, {@permit_directio}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x36, 0x9eabbefdc3f6f0be, 0x38, 0xf, 0x0, 0x33, 0x31], 0x2d, [0x33, 0x32, 0x37, 0x66], 0x2d, [0x66, 0x56, 0x32, 0x61], 0x2d, [0x31, 0x36, 0xf, 0x30], 0x2d, [0x39, 0x33, 0x65, 0x33, 0x66, 0x37, 0x32, 0x38]}}}]}, 0x2, 0x431, &(0x7f00000004c0)="$eJzs3L9vG1UcAPDv2UlLf5FQyo+mhQYKIgKRNGmBDgwtAokBJCQYyhiStAp1G9QEiVYRBIYyokrsiBGJv4AJFgRMSKywo0oVytLCZHT2XeI4tokTp07x5yNd/d7ds977+u7Z793rJYCeNZz+k0Tsj4jfI2Kgml1bYLj6cmd5cerv5cWpJMrlt/9KKuVuLy9O5UXz9+3LM0vV/JEG9c5fvXZxslSauZLlxxYufTA2f/Xa87OXJi/MXJi5PHH69KmT4y+9OPFCR+JM23R76OO5o4dff/fGm1Pnbrz387dJHn9dHB0y3Org0x2urNsO1KSTvi42hLYUIyI9Xf2V/j8QxVg9eQPx2mddbRywrcrlcnl388NLZeB/LIlutwDojvyHPp3/5ttdGnrsCLfOVidAadx3sq16pC8KWZn+uvltJ6WzrXNL/3yVbrE99yEAANb4/mz1df34rxAP15Q7k60NDUbEAxFxMCIejIhDEfFQRKXsIxHxaJv11y+SrB//FG62H9XGpeO/l7O1rbXjv3z0F4PFLHegEn9/cn62NHMiIu6PiJHo353mx1vU8cOrv33R7Nhwzfgv3dL687Fg1o6bfXU36KYnFya3EnOtW59GDPU1ij9ZWQlIIuJwRAwd21wds89+c7TZsf+Ov4UOrDOVv454pnr+l6Iu/lzSen1y7L4ozZwYy6+K9X759fpbzerfUvwdkJ7/vQ2v/5X4B5Pa9dr59uu4/sfnTec0m73+dyXvVNK7sn0fTS4sXBmP2JW8ke0/s7p/YvW9eT4vn8Y/crxx/z8Yq5/EkYhIL+LHIuLxiDiWtf2JiHgyIo63iP+nV556f/Pxb680/um2zn/7ieLFH79bU+lgO/Gn5/9UJTWS7dnI999GG7jVzw8AAADuBYWI2B9JYXQlXSiMjlb/v/yh2Fsozc0vPHd+7sPL09VnBAajv5Df6RqouR86nk3r8/xEXf5kdt/4y+KeSn50aq403e3gocfta9L/U38Wu906YNt5Xgt6l/4PvUv/h96l/0PvatD/99TlW/yNAOBe1uj3/5MutAO4+4z/oXfp/9C79H/oXfo/9KStPNffs4lyeUc0o7uJKOyIZkhsU6Lb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//wW859o=") mkdirat(r9, &(0x7f0000000400)='./bus\x00', 0xa) [ 89.790909][ T5105] Bluetooth: hci0: command tx timeout [ 91.197869][ T5119] loop0: detected capacity change from 0 to 32768 [ 91.429049][ T5119] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 91.433774][ T5119] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 91.437110][ T5119] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 91.437110][ T5119] running recovery passes: check_allocations [ 91.457950][ T5119] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 7 [ 91.461394][ T5119] bcachefs (loop0): flagging btree dirents lost data [ 91.466605][ T5119] error reading btree root dirents l=0: btree_node_read_error, shutting down [ 91.469551][ T5119] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 91.472117][ T5119] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 91.475198][ T5119] bcachefs (loop0): shutting down [ 91.490864][ T5119] bcachefs (loop0): shutdown complete [ 91.494546][ T1083] ================================================================== [ 91.497374][ T1083] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 91.500186][ T1083] Read of size 8 at addr ffff88803c6a40b0 by task kworker/u4:9/1083 [ 91.502689][ T1083] [ 91.503377][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: kworker/u4:9 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 91.506781][ T1083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.510436][ T1083] Workqueue: loop0 loop_rootcg_workfn [ 91.512332][ T1083] Call Trace: [ 91.513509][ T1083] [ 91.514679][ T1083] dump_stack_lvl+0x241/0x360 [ 91.516466][ T1083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.518271][ T1083] ? __pfx__printk+0x10/0x10 [ 91.520044][ T1083] ? _printk+0xd5/0x120 [ 91.521687][ T1083] ? __virt_addr_valid+0x183/0x530 [ 91.523622][ T1083] ? __virt_addr_valid+0x183/0x530 [ 91.525519][ T1083] print_report+0x169/0x550 [ 91.527358][ T1083] ? __virt_addr_valid+0x183/0x530 [ 91.529285][ T1083] ? __virt_addr_valid+0x183/0x530 [ 91.531274][ T1083] ? __virt_addr_valid+0x45f/0x530 [ 91.533086][ T1083] ? __phys_addr+0xba/0x170 [ 91.534920][ T1083] ? percpu_ref_put+0xda/0x250 [ 91.536542][ T1083] kasan_report+0x143/0x180 [ 91.538233][ T1083] ? percpu_ref_put+0xda/0x250 [ 91.540035][ T1083] ? percpu_ref_put+0x1f/0x250 [ 91.541828][ T1083] percpu_ref_put+0xda/0x250 [ 91.543523][ T1083] blk_update_request+0x5e5/0x1160 [ 91.545315][ T1083] blk_mq_end_request+0x3e/0x70 [ 91.547130][ T1083] loop_process_work+0x1c10/0x2170 [ 91.549086][ T1083] ? __pfx_loop_process_work+0x10/0x10 [ 91.551171][ T1083] ? register_lock_class+0x102/0x980 [ 91.553224][ T1083] ? __pfx_register_lock_class+0x10/0x10 [ 91.555430][ T1083] ? mark_lock+0x9a/0x360 [ 91.556941][ T1083] ? debug_object_deactivate+0x2d5/0x390 [ 91.558892][ T1083] ? __pfx_lock_acquire+0x10/0x10 [ 91.560625][ T1083] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.562305][ T1083] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.564107][ T1083] ? process_scheduled_works+0x976/0x1850 [ 91.565752][ T1083] process_scheduled_works+0xa63/0x1850 [ 91.567504][ T1083] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.569252][ T1083] ? assign_work+0x364/0x3d0 [ 91.570586][ T1083] worker_thread+0x870/0xd30 [ 91.572082][ T1083] ? __kthread_parkme+0x169/0x1d0 [ 91.573825][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 91.575620][ T1083] kthread+0x2f0/0x390 [ 91.576892][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 91.578661][ T1083] ? __pfx_kthread+0x10/0x10 [ 91.580316][ T1083] ret_from_fork+0x4b/0x80 [ 91.581926][ T1083] ? __pfx_kthread+0x10/0x10 [ 91.583607][ T1083] ret_from_fork_asm+0x1a/0x30 [ 91.585357][ T1083] [ 91.586524][ T1083] [ 91.587439][ T1083] Allocated by task 5119: [ 91.589085][ T1083] kasan_save_track+0x3f/0x80 [ 91.590769][ T1083] __kasan_kmalloc+0x98/0xb0 [ 91.592380][ T1083] __kmalloc_cache_noprof+0x19c/0x2c0 [ 91.594413][ T1083] __bch2_dev_alloc+0x57/0xa60 [ 91.596284][ T1083] bch2_dev_alloc+0xd4/0x170 [ 91.597837][ T1083] bch2_fs_open+0x2e3f/0x2f80 [ 91.599392][ T1083] bch2_fs_get_tree+0x738/0x1710 [ 91.600854][ T1083] vfs_get_tree+0x90/0x2b0 [ 91.602234][ T1083] do_new_mount+0x2be/0xb40 [ 91.603845][ T1083] __se_sys_mount+0x2d6/0x3c0 [ 91.605543][ T1083] do_syscall_64+0xf3/0x230 [ 91.607151][ T1083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.609243][ T1083] [ 91.610002][ T1083] Freed by task 5119: [ 91.611477][ T1083] kasan_save_track+0x3f/0x80 [ 91.613154][ T1083] kasan_save_free_info+0x40/0x50 [ 91.614905][ T1083] __kasan_slab_free+0x59/0x70 [ 91.616526][ T1083] kfree+0x1a0/0x440 [ 91.617875][ T1083] kobject_put+0x22f/0x480 [ 91.619516][ T1083] bch2_fs_free+0x27b/0x3c0 [ 91.621189][ T1083] bch2_fs_get_tree+0xd9f/0x1710 [ 91.623024][ T1083] vfs_get_tree+0x90/0x2b0 [ 91.624678][ T1083] do_new_mount+0x2be/0xb40 [ 91.626325][ T1083] __se_sys_mount+0x2d6/0x3c0 [ 91.628056][ T1083] do_syscall_64+0xf3/0x230 [ 91.629518][ T1083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.631420][ T1083] [ 91.632227][ T1083] The buggy address belongs to the object at ffff88803c6a4000 [ 91.632227][ T1083] which belongs to the cache kmalloc-4k of size 4096 [ 91.636946][ T1083] The buggy address is located 176 bytes inside of [ 91.636946][ T1083] freed 4096-byte region [ffff88803c6a4000, ffff88803c6a5000) [ 91.641647][ T1083] [ 91.642498][ T1083] The buggy address belongs to the physical page: [ 91.644692][ T1083] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c6a0 [ 91.647828][ T1083] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 91.650952][ T1083] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 91.653729][ T1083] page_type: f5(slab) [ 91.655209][ T1083] raw: 04fff00000000040 ffff88801ac42140 ffffea000048d400 0000000000000003 [ 91.658225][ T1083] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 91.661310][ T1083] head: 04fff00000000040 ffff88801ac42140 ffffea000048d400 0000000000000003 [ 91.664274][ T1083] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 91.667148][ T1083] head: 04fff00000000003 ffffea0000f1a801 ffffffffffffffff 0000000000000000 [ 91.669733][ T1083] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 91.672191][ T1083] page dumped because: kasan: bad access detected [ 91.674260][ T1083] page_owner tracks the page as allocated [ 91.676056][ T1083] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5103, tgid 5103 (syz-executor), ts 86110642126, free_ts 86038444174 [ 91.682740][ T1083] post_alloc_hook+0x1f3/0x230 [ 91.684533][ T1083] get_page_from_freelist+0x3045/0x3190 [ 91.686529][ T1083] __alloc_pages_noprof+0x256/0x6c0 [ 91.688494][ T1083] alloc_pages_mpol_noprof+0x3e8/0x680 [ 91.690330][ T1083] alloc_slab_page+0x6a/0x120 [ 91.692103][ T1083] allocate_slab+0x5a/0x2f0 [ 91.693651][ T1083] ___slab_alloc+0xcd1/0x14b0 [ 91.695323][ T1083] __slab_alloc+0x58/0xa0 [ 91.696826][ T1083] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 91.698776][ T1083] kobject_uevent_env+0x28b/0x8e0 [ 91.700602][ T1083] net_rx_queue_update_kobjects+0x304/0x5b0 [ 91.702688][ T1083] netdev_register_kobject+0x224/0x310 [ 91.704735][ T1083] register_netdevice+0x12c5/0x1b00 [ 91.706397][ T1083] ipcaif_newlink+0x1f0/0x4d0 [ 91.708052][ T1083] rtnl_newlink+0x1591/0x20a0 [ 91.709639][ T1083] rtnetlink_rcv_msg+0x73f/0xcf0 [ 91.711409][ T1083] page last free pid 5103 tgid 5103 stack trace: [ 91.713628][ T1083] free_unref_page+0xcfb/0xf20 [ 91.715381][ T1083] __slab_free+0x31b/0x3d0 [ 91.717002][ T1083] qlist_free_all+0x9a/0x140 [ 91.718670][ T1083] kasan_quarantine_reduce+0x14f/0x170 [ 91.720655][ T1083] __kasan_slab_alloc+0x23/0x80 [ 91.722500][ T1083] __kmalloc_cache_noprof+0x132/0x2c0 [ 91.724561][ T1083] ref_tracker_alloc+0x14b/0x490 [ 91.726543][ T1083] net_rx_queue_update_kobjects+0x16b/0x5b0 [ 91.728776][ T1083] netdev_register_kobject+0x224/0x310 [ 91.730868][ T1083] register_netdevice+0x12c5/0x1b00 [ 91.732853][ T1083] team_newlink+0x10a/0x170 [ 91.734615][ T1083] rtnl_newlink+0x1591/0x20a0 [ 91.736422][ T1083] rtnetlink_rcv_msg+0x73f/0xcf0 [ 91.738318][ T1083] netlink_rcv_skb+0x1e3/0x430 [ 91.740088][ T1083] netlink_unicast+0x7f6/0x990 [ 91.741915][ T1083] netlink_sendmsg+0x8e4/0xcb0 [ 91.743768][ T1083] [ 91.744697][ T1083] Memory state around the buggy address: [ 91.746854][ T1083] ffff88803c6a3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.749800][ T1083] ffff88803c6a4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.752962][ T1083] >ffff88803c6a4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.756008][ T1083] ^ [ 91.757931][ T1083] ffff88803c6a4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.760714][ T1083] ffff88803c6a4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.763495][ T1083] ================================================================== [ 91.855893][ T9] cfg80211: failed to load regulatory.db [ 91.895773][ T4531] Bluetooth: hci0: command tx timeout [ 92.086017][ T1083] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.088898][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: kworker/u4:9 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 92.092731][ T1083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.096628][ T1083] Workqueue: loop0 loop_rootcg_workfn [ 92.098615][ T1083] Call Trace: [ 92.099777][ T1083] [ 92.100865][ T1083] dump_stack_lvl+0x241/0x360 [ 92.102600][ T1083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.104425][ T1083] ? __pfx__printk+0x10/0x10 [ 92.106073][ T1083] ? preempt_schedule+0xe1/0xf0 [ 92.107993][ T1083] ? vscnprintf+0x5d/0x90 [ 92.109711][ T1083] panic+0x349/0x880 [ 92.111186][ T1083] ? check_panic_on_warn+0x21/0xb0 [ 92.113093][ T1083] ? __pfx_panic+0x10/0x10 [ 92.114799][ T1083] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 92.116991][ T1083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 92.119293][ T1083] ? print_report+0x502/0x550 [ 92.121085][ T1083] check_panic_on_warn+0x86/0xb0 [ 92.122998][ T1083] ? percpu_ref_put+0xda/0x250 [ 92.124516][ T1083] end_report+0x77/0x160 [ 92.126076][ T1083] kasan_report+0x154/0x180 [ 92.127764][ T1083] ? percpu_ref_put+0xda/0x250 [ 92.129560][ T1083] ? percpu_ref_put+0x1f/0x250 [ 92.131386][ T1083] percpu_ref_put+0xda/0x250 [ 92.133070][ T1083] blk_update_request+0x5e5/0x1160 [ 92.134960][ T1083] blk_mq_end_request+0x3e/0x70 [ 92.136798][ T1083] loop_process_work+0x1c10/0x2170 [ 92.139745][ T1083] ? __pfx_loop_process_work+0x10/0x10 [ 92.141770][ T1083] ? register_lock_class+0x102/0x980 [ 92.143681][ T1083] ? __pfx_register_lock_class+0x10/0x10 [ 92.145713][ T1083] ? mark_lock+0x9a/0x360 [ 92.147312][ T1083] ? debug_object_deactivate+0x2d5/0x390 [ 92.149428][ T1083] ? __pfx_lock_acquire+0x10/0x10 [ 92.151322][ T1083] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.153508][ T1083] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.155854][ T1083] ? process_scheduled_works+0x976/0x1850 [ 92.158083][ T1083] process_scheduled_works+0xa63/0x1850 [ 92.160263][ T1083] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.162511][ T1083] ? assign_work+0x364/0x3d0 [ 92.164141][ T1083] worker_thread+0x870/0xd30 [ 92.165786][ T1083] ? __kthread_parkme+0x169/0x1d0 [ 92.167574][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 92.169459][ T1083] kthread+0x2f0/0x390 [ 92.170978][ T1083] ? __pfx_worker_thread+0x10/0x10 [ 92.172805][ T1083] ? __pfx_kthread+0x10/0x10 [ 92.174310][ T1083] ret_from_fork+0x4b/0x80 [ 92.176073][ T1083] ? __pfx_kthread+0x10/0x10 [ 92.177858][ T1083] ret_from_fork_asm+0x1a/0x30 [ 92.179650][ T1083] [ 92.180998][ T1083] Kernel Offset: disabled [ 92.182632][ T1083] Rebooting in 86400 seconds..