program: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001"], 0x3c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00, 0x3080}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) [ 86.334598][ T4657] Bluetooth: hci0: command tx timeout [ 86.475452][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.506451][ T1372] wlan1: No basic rates, using min rate instead [ 86.510503][ T1372] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 86.515498][ T1372] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 86.537164][ T1033] wlan1: authenticated [ 86.539301][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.544295][ T1372] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 86.548719][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.554096][ T1033] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 86.663984][ T3066] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 86.674856][ T10] cfg80211: failed to load regulatory.db [ 86.773704][ T3066] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 86.883859][ T3066] wlan1: association with 08:02:11:00:00:00 timed out [ 86.887533][ T3066] ================================================================== [ 86.890831][ T3066] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 86.893978][ T3066] Read of size 1 at addr ffff888043d42e08 by task kworker/u4:9/3066 [ 86.897173][ T3066] [ 86.898259][ T3066] CPU: 0 UID: 0 PID: 3066 Comm: kworker/u4:9 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 86.898271][ T3066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.898279][ T3066] Workqueue: events_unbound cfg80211_wiphy_work [ 86.898298][ T3066] Call Trace: [ 86.898304][ T3066] [ 86.898310][ T3066] dump_stack_lvl+0x189/0x250 [ 86.898325][ T3066] ? __kasan_check_byte+0x12/0x40 [ 86.898379][ T3066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.898392][ T3066] ? lock_release+0x4b/0x3e0 [ 86.898405][ T3066] ? lock_release+0x4b/0x3e0 [ 86.898418][ T3066] ? __virt_addr_valid+0x469/0x540 [ 86.898431][ T3066] print_report+0xb4/0x290 [ 86.898442][ T3066] ? _raw_spin_lock+0x2e/0x40 [ 86.898452][ T3066] kasan_report+0x118/0x150 [ 86.898464][ T3066] ? _raw_spin_lock+0x2e/0x40 [ 86.898473][ T3066] ? lockref_get+0x15/0x60 [ 86.898483][ T3066] __kasan_check_byte+0x2a/0x40 [ 86.898493][ T3066] lock_acquire+0x8d/0x360 [ 86.898505][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 86.898517][ T3066] _raw_spin_lock+0x2e/0x40 [ 86.898526][ T3066] ? lockref_get+0x15/0x60 [ 86.898536][ T3066] lockref_get+0x15/0x60 [ 86.898546][ T3066] simple_recursive_removal+0x35/0x8e0 [ 86.898556][ T3066] ? mntput+0x65/0xc0 [ 86.898564][ T3066] ? __pfx_remove_one+0x10/0x10 [ 86.898571][ T3066] debugfs_remove+0x5b/0x70 [ 86.898577][ T3066] ieee80211_sta_debugfs_remove+0x40/0x70 [ 86.898585][ T3066] __sta_info_destroy_part2+0x352/0x450 [ 86.898595][ T3066] sta_info_destroy_addr+0xf5/0x140 [ 86.898603][ T3066] ieee80211_destroy_assoc_data+0x1bf/0x680 [ 86.898617][ T3066] ? __pfx_ieee80211_destroy_assoc_data+0x10/0x10 [ 86.898629][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 86.898639][ T3066] ? __local_bh_enable_ip+0x12d/0x1c0 [ 86.898654][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.898666][ T3066] ? __local_bh_enable_ip+0x12d/0x1c0 [ 86.898679][ T3066] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 86.898692][ T3066] ? ieee80211_sta_work+0xe86/0x3600 [ 86.898705][ T3066] ieee80211_sta_work+0xe93/0x3600 [ 86.898729][ T3066] ? __lock_acquire+0xaac/0xd20 [ 86.898741][ T3066] ? __lock_acquire+0xaac/0xd20 [ 86.898752][ T3066] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 86.898766][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 86.898778][ T3066] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 86.898788][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.898798][ T3066] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.898808][ T3066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.898817][ T3066] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.898825][ T3066] ? ieee80211_iface_work+0xeef/0xfe0 [ 86.898835][ T3066] ? rcu_is_watching+0x15/0xb0 [ 86.898845][ T3066] cfg80211_wiphy_work+0x2dc/0x460 [ 86.898855][ T3066] ? process_scheduled_works+0x9ec/0x17a0 [ 86.898864][ T3066] process_scheduled_works+0xadb/0x17a0 [ 86.898877][ T3066] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.898889][ T3066] worker_thread+0x8a0/0xda0 [ 86.898898][ T3066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.898908][ T3066] ? __kthread_parkme+0x7b/0x200 [ 86.898919][ T3066] kthread+0x70e/0x8a0 [ 86.898930][ T3066] ? __pfx_worker_thread+0x10/0x10 [ 86.898939][ T3066] ? __pfx_kthread+0x10/0x10 [ 86.898949][ T3066] ? __pfx_kthread+0x10/0x10 [ 86.898959][ T3066] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.898968][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.898978][ T3066] ? __pfx_kthread+0x10/0x10 [ 86.898984][ T3066] ret_from_fork+0x4b/0x80 [ 86.898991][ T3066] ? __pfx_kthread+0x10/0x10 [ 86.898997][ T3066] ret_from_fork_asm+0x1a/0x30 [ 86.899005][ T3066] [ 86.899008][ T3066] [ 87.039563][ T3066] Allocated by task 1372: [ 87.041366][ T3066] kasan_save_track+0x3e/0x80 [ 87.043290][ T3066] __kasan_slab_alloc+0x6c/0x80 [ 87.045296][ T3066] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 87.047618][ T3066] __d_alloc+0x31/0x6f0 [ 87.049396][ T3066] d_alloc_parallel+0xe0/0x14e0 [ 87.051421][ T3066] __lookup_slow+0x116/0x3d0 [ 87.053304][ T3066] lookup_one_len+0x1aa/0x310 [ 87.055209][ T3066] start_creating+0x18d/0x310 [ 87.057149][ T3066] debugfs_create_dir+0x28/0x420 [ 87.059199][ T3066] ieee80211_sta_debugfs_add+0x12c/0x850 [ 87.061598][ T3066] sta_info_insert_rcu+0xfac/0x1940 [ 87.063772][ T3066] sta_info_insert+0x16/0xc0 [ 87.065682][ T3066] ieee80211_prep_connection+0x10cd/0x1600 [ 87.068108][ T3066] ieee80211_mgd_auth+0xee3/0x1770 [ 87.070284][ T3066] cfg80211_mlme_auth+0x62f/0x9c0 [ 87.072313][ T3066] cfg80211_conn_do_work+0x501/0xd10 [ 87.074417][ T3066] cfg80211_conn_work+0x2c0/0x440 [ 87.076430][ T3066] process_scheduled_works+0xadb/0x17a0 [ 87.078646][ T3066] worker_thread+0x8a0/0xda0 [ 87.080437][ T3066] kthread+0x70e/0x8a0 [ 87.082129][ T3066] ret_from_fork+0x4b/0x80 [ 87.083901][ T3066] ret_from_fork_asm+0x1a/0x30 [ 87.085869][ T3066] [ 87.087067][ T3066] Freed by task 15: [ 87.088893][ T3066] kasan_save_track+0x3e/0x80 [ 87.091157][ T3066] kasan_save_free_info+0x46/0x50 [ 87.093389][ T3066] __kasan_slab_free+0x62/0x70 [ 87.095432][ T3066] kmem_cache_free+0x192/0x3f0 [ 87.097489][ T3066] rcu_core+0xca5/0x1710 [ 87.099345][ T3066] handle_softirqs+0x283/0x870 [ 87.101416][ T3066] run_ksoftirqd+0x9b/0x100 [ 87.103411][ T3066] smpboot_thread_fn+0x53f/0xa60 [ 87.105653][ T3066] kthread+0x70e/0x8a0 [ 87.107400][ T3066] ret_from_fork+0x4b/0x80 [ 87.109200][ T3066] ret_from_fork_asm+0x1a/0x30 [ 87.111245][ T3066] [ 87.112347][ T3066] Last potentially related work creation: [ 87.114910][ T3066] kasan_save_stack+0x3e/0x60 [ 87.116965][ T3066] kasan_record_aux_stack+0xbc/0xd0 [ 87.119339][ T3066] call_rcu+0x142/0x990 [ 87.121244][ T3066] __dentry_kill+0x4d2/0x660 [ 87.123227][ T3066] dput+0x19f/0x2b0 [ 87.124947][ T3066] simple_recursive_removal+0x2c2/0x8e0 [ 87.127340][ T3066] debugfs_remove+0x5b/0x70 [ 87.129311][ T3066] ieee80211_debugfs_recreate_netdev+0xbf/0x1460 [ 87.132026][ T3066] drv_remove_interface+0x1fa/0x590 [ 87.134273][ T3066] ieee80211_change_mac+0x912/0x12c0 [ 87.136500][ T3066] netif_set_mac_address+0x2f9/0x4c0 [ 87.138608][ T3066] do_setlink+0x908/0x40d0 [ 87.140489][ T3066] rtnl_setlink+0x604/0x900 [ 87.142321][ T3066] rtnetlink_rcv_msg+0x7cc/0xb70 [ 87.144257][ T3066] netlink_rcv_skb+0x219/0x490 [ 87.146031][ T3066] netlink_unicast+0x758/0x8d0 [ 87.147947][ T3066] netlink_sendmsg+0x805/0xb30 [ 87.149888][ T3066] __sock_sendmsg+0x219/0x270 [ 87.151827][ T3066] ____sys_sendmsg+0x505/0x830 [ 87.153868][ T3066] ___sys_sendmsg+0x21f/0x2a0 [ 87.155761][ T3066] __x64_sys_sendmsg+0x19b/0x260 [ 87.157678][ T3066] do_syscall_64+0xf6/0x210 [ 87.159626][ T3066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.161999][ T3066] [ 87.163067][ T3066] The buggy address belongs to the object at ffff888043d42d38 [ 87.163067][ T3066] which belongs to the cache dentry of size 312 [ 87.168584][ T3066] The buggy address is located 208 bytes inside of [ 87.168584][ T3066] freed 312-byte region [ffff888043d42d38, ffff888043d42e70) [ 87.174156][ T3066] [ 87.175171][ T3066] The buggy address belongs to the physical page: [ 87.177565][ T3066] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43d42 [ 87.181093][ T3066] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.184439][ T3066] memcg:ffff888035b3c901 [ 87.186150][ T3066] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 87.189330][ T3066] page_type: f5(slab) [ 87.190999][ T3066] raw: 04fff00000000040 ffff88801b2a1780 dead000000000122 0000000000000000 [ 87.194339][ T3066] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff888035b3c901 [ 87.197855][ T3066] head: 04fff00000000040 ffff88801b2a1780 dead000000000122 0000000000000000 [ 87.201346][ T3066] head: 0000000000000000 0000000000150015 00000000f5000000 ffff888035b3c901 [ 87.204828][ T3066] head: 04fff00000000001 ffffea00010f5081 00000000ffffffff 00000000ffffffff [ 87.208411][ T3066] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 87.212243][ T3066] page dumped because: kasan: bad access detected [ 87.215091][ T3066] page_owner tracks the page as allocated [ 87.217499][ T3066] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5320, tgid 5319 (syz.0.0), ts 86456751365, free_ts 0 [ 87.226409][ T3066] post_alloc_hook+0x1d8/0x230 [ 87.228549][ T3066] get_page_from_freelist+0x21ce/0x22b0 [ 87.231120][ T3066] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.233584][ T3066] alloc_pages_mpol+0x232/0x4a0 [ 87.235608][ T3066] allocate_slab+0x8a/0x3b0 [ 87.237496][ T3066] ___slab_alloc+0xbfc/0x1480 [ 87.239452][ T3066] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 87.241898][ T3066] __d_alloc+0x31/0x6f0 [ 87.243646][ T3066] d_alloc_parallel+0xe0/0x14e0 [ 87.245749][ T3066] __lookup_slow+0x116/0x3d0 [ 87.247817][ T3066] lookup_one_len+0x1aa/0x310 [ 87.249896][ T3066] start_creating+0x18d/0x310 [ 87.251934][ T3066] __debugfs_create_file+0x79/0x4f0 [ 87.254332][ T3066] debugfs_create_file_unsafe+0x3a/0x50 [ 87.256779][ T3066] ieee80211_debugfs_recreate_netdev+0xca1/0x1460 [ 87.259633][ T3066] ieee80211_if_change_type+0x53a/0x990 [ 87.262060][ T3066] page_owner free stack trace missing [ 87.264315][ T3066] [ 87.265388][ T3066] Memory state around the buggy address: [ 87.267912][ T3066] ffff888043d42d00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 87.271459][ T3066] ffff888043d42d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.274963][ T3066] >ffff888043d42e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 87.278373][ T3066] ^ [ 87.280243][ T3066] ffff888043d42e80: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 87.283665][ T3066] ffff888043d42f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.287329][ T3066] ================================================================== [ 87.291407][ T3066] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.294521][ T3066] CPU: 0 UID: 0 PID: 3066 Comm: kworker/u4:9 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 87.299785][ T3066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.304413][ T3066] Workqueue: events_unbound cfg80211_wiphy_work [ 87.307159][ T3066] Call Trace: [ 87.308668][ T3066] [ 87.310143][ T3066] dump_stack_lvl+0x99/0x250 [ 87.312338][ T3066] ? __asan_memcpy+0x40/0x70 [ 87.314502][ T3066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.316968][ T3066] ? __pfx__printk+0x10/0x10 [ 87.318957][ T3066] panic+0x2db/0x790 [ 87.320686][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.323000][ T3066] ? __pfx_panic+0x10/0x10 [ 87.324894][ T3066] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 87.327450][ T3066] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.330048][ T3066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.332708][ T3066] ? _raw_spin_lock+0x2e/0x40 [ 87.334738][ T3066] check_panic_on_warn+0x89/0xb0 [ 87.336842][ T3066] ? _raw_spin_lock+0x2e/0x40 [ 87.338857][ T3066] end_report+0x78/0x160 [ 87.340714][ T3066] kasan_report+0x129/0x150 [ 87.342647][ T3066] ? _raw_spin_lock+0x2e/0x40 [ 87.344720][ T3066] ? lockref_get+0x15/0x60 [ 87.346745][ T3066] __kasan_check_byte+0x2a/0x40 [ 87.348888][ T3066] lock_acquire+0x8d/0x360 [ 87.350917][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 87.353133][ T3066] _raw_spin_lock+0x2e/0x40 [ 87.355128][ T3066] ? lockref_get+0x15/0x60 [ 87.357123][ T3066] lockref_get+0x15/0x60 [ 87.359011][ T3066] simple_recursive_removal+0x35/0x8e0 [ 87.361408][ T3066] ? mntput+0x65/0xc0 [ 87.363461][ T3066] ? __pfx_remove_one+0x10/0x10 [ 87.365772][ T3066] debugfs_remove+0x5b/0x70 [ 87.367841][ T3066] ieee80211_sta_debugfs_remove+0x40/0x70 [ 87.370140][ T3066] __sta_info_destroy_part2+0x352/0x450 [ 87.372621][ T3066] sta_info_destroy_addr+0xf5/0x140 [ 87.375007][ T3066] ieee80211_destroy_assoc_data+0x1bf/0x680 [ 87.377737][ T3066] ? __pfx_ieee80211_destroy_assoc_data+0x10/0x10 [ 87.380538][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 87.382937][ T3066] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.385325][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.387587][ T3066] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.390001][ T3066] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.392594][ T3066] ? ieee80211_sta_work+0xe86/0x3600 [ 87.394854][ T3066] ieee80211_sta_work+0xe93/0x3600 [ 87.397061][ T3066] ? __lock_acquire+0xaac/0xd20 [ 87.399100][ T3066] ? __lock_acquire+0xaac/0xd20 [ 87.401271][ T3066] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 87.403656][ T3066] ? do_raw_spin_lock+0x121/0x290 [ 87.405790][ T3066] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 87.408350][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.410686][ T3066] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.413282][ T3066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.415968][ T3066] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.418269][ T3066] ? ieee80211_iface_work+0xeef/0xfe0 [ 87.420643][ T3066] ? rcu_is_watching+0x15/0xb0 [ 87.422691][ T3066] cfg80211_wiphy_work+0x2dc/0x460 [ 87.424913][ T3066] ? process_scheduled_works+0x9ec/0x17a0 [ 87.427331][ T3066] process_scheduled_works+0xadb/0x17a0 [ 87.429696][ T3066] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.432209][ T3066] worker_thread+0x8a0/0xda0 [ 87.434131][ T3066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.436825][ T3066] ? __kthread_parkme+0x7b/0x200 [ 87.438972][ T3066] kthread+0x70e/0x8a0 [ 87.440778][ T3066] ? __pfx_worker_thread+0x10/0x10 [ 87.442816][ T3066] ? __pfx_kthread+0x10/0x10 [ 87.444774][ T3066] ? __pfx_kthread+0x10/0x10 [ 87.446679][ T3066] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.448859][ T3066] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.451026][ T3066] ? __pfx_kthread+0x10/0x10 [ 87.452882][ T3066] ret_from_fork+0x4b/0x80 [ 87.454815][ T3066] ? __pfx_kthread+0x10/0x10 [ 87.456782][ T3066] ret_from_fork_asm+0x1a/0x30 [ 87.458877][ T3066] [ 87.460688][ T3066] Kernel Offset: disabled [ 87.462577][ T3066] Rebooting in 86400 seconds..