program: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7]}, 0x8, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r9, &(0x7f0000000100)='./file0\x00', 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000c00000000000014000300776c616e3100000003000000000000000a0001000180c20000000000"], 0x40}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) [ 85.370707][ T4659] Bluetooth: hci0: command tx timeout [ 85.459791][ T5325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.492596][ T5315] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 85.496976][ T5315] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 85.523291][ T5325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.609978][ T3026] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 85.720500][ T3026] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 85.830322][ T3026] wlan1: authentication with 08:02:11:00:00:00 timed out [ 85.834308][ T3026] ================================================================== [ 85.837755][ T3026] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 85.841107][ T3026] Read of size 1 at addr ffff8880441999c8 by task kworker/u4:11/3026 [ 85.844632][ T3026] [ 85.845713][ T3026] CPU: 0 UID: 0 PID: 3026 Comm: kworker/u4:11 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 85.845727][ T3026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.845736][ T3026] Workqueue: events_unbound cfg80211_wiphy_work [ 85.845757][ T3026] Call Trace: [ 85.845764][ T3026] [ 85.845769][ T3026] dump_stack_lvl+0x189/0x250 [ 85.845787][ T3026] ? __kasan_check_byte+0x12/0x40 [ 85.845851][ T3026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.845865][ T3026] ? lock_release+0x4b/0x3e0 [ 85.845882][ T3026] ? lock_release+0x4b/0x3e0 [ 85.845897][ T3026] ? __virt_addr_valid+0x469/0x540 [ 85.845911][ T3026] print_report+0xb4/0x290 [ 85.845925][ T3026] ? _raw_spin_lock+0x2e/0x40 [ 85.845936][ T3026] kasan_report+0x118/0x150 [ 85.845950][ T3026] ? _raw_spin_lock+0x2e/0x40 [ 85.845969][ T3026] ? lockref_get+0x15/0x60 [ 85.845983][ T3026] __kasan_check_byte+0x2a/0x40 [ 85.845996][ T3026] lock_acquire+0x8d/0x360 [ 85.846011][ T3026] ? do_raw_spin_lock+0x121/0x290 [ 85.846025][ T3026] _raw_spin_lock+0x2e/0x40 [ 85.846035][ T3026] ? lockref_get+0x15/0x60 [ 85.846048][ T3026] lockref_get+0x15/0x60 [ 85.846061][ T3026] simple_recursive_removal+0x35/0x8e0 [ 85.846074][ T3026] ? mntput+0x65/0xc0 [ 85.846085][ T3026] ? __pfx_remove_one+0x10/0x10 [ 85.846098][ T3026] debugfs_remove+0x5b/0x70 [ 85.846109][ T3026] ieee80211_sta_debugfs_remove+0x40/0x70 [ 85.846124][ T3026] __sta_info_destroy_part2+0x352/0x450 [ 85.846142][ T3026] sta_info_destroy_addr+0xf5/0x140 [ 85.846158][ T3026] ieee80211_destroy_auth_data+0x12d/0x260 [ 85.846175][ T3026] ieee80211_sta_work+0x11cf/0x3600 [ 85.846195][ T3026] ? __lock_acquire+0xaac/0xd20 [ 85.846211][ T3026] ? __lock_acquire+0xaac/0xd20 [ 85.846225][ T3026] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 85.846243][ T3026] ? do_raw_spin_lock+0x121/0x290 [ 85.846256][ T3026] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 85.846268][ T3026] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.846281][ T3026] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 85.846293][ T3026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.846305][ T3026] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.846318][ T3026] ? skb_dequeue+0x10e/0x150 [ 85.846329][ T3026] ? ieee80211_iface_work+0xcdb/0xfe0 [ 85.846344][ T3026] ? ieee80211_iface_work+0xeef/0xfe0 [ 85.846358][ T3026] ? rcu_is_watching+0x15/0xb0 [ 85.846369][ T3026] cfg80211_wiphy_work+0x2dc/0x460 [ 85.846385][ T3026] ? process_scheduled_works+0x9ec/0x17a0 [ 85.846396][ T3026] process_scheduled_works+0xade/0x17a0 [ 85.846411][ T3026] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.846432][ T3026] worker_thread+0x8a0/0xda0 [ 85.846443][ T3026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.846458][ T3026] ? __kthread_parkme+0x7b/0x200 [ 85.846470][ T3026] kthread+0x711/0x8a0 [ 85.846484][ T3026] ? __pfx_worker_thread+0x10/0x10 [ 85.846494][ T3026] ? __pfx_kthread+0x10/0x10 [ 85.846506][ T3026] ? __pfx_kthread+0x10/0x10 [ 85.846518][ T3026] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.846529][ T3026] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.846541][ T3026] ? __pfx_kthread+0x10/0x10 [ 85.846553][ T3026] ret_from_fork+0x4b/0x80 [ 85.846565][ T3026] ? __pfx_kthread+0x10/0x10 [ 85.846577][ T3026] ret_from_fork_asm+0x1a/0x30 [ 85.846592][ T3026] [ 85.846595][ T3026] [ 85.983047][ T3026] Allocated by task 5315: [ 85.985002][ T3026] kasan_save_track+0x3e/0x80 [ 85.987211][ T3026] __kasan_slab_alloc+0x6c/0x80 [ 85.989552][ T3026] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 85.992066][ T3026] __d_alloc+0x31/0x6f0 [ 85.993890][ T3026] d_alloc_parallel+0xe0/0x14e0 [ 85.995997][ T3026] __lookup_slow+0x116/0x3d0 [ 85.998014][ T3026] lookup_one_len+0x1aa/0x310 [ 85.999928][ T3026] start_creating+0x18d/0x310 [ 86.001896][ T3026] debugfs_create_dir+0x28/0x420 [ 86.003920][ T3026] ieee80211_sta_debugfs_add+0x12c/0x850 [ 86.006181][ T3026] sta_info_insert_rcu+0xfac/0x1940 [ 86.008394][ T3026] sta_info_insert+0x16/0xc0 [ 86.010274][ T3026] ieee80211_prep_connection+0x10cd/0x1600 [ 86.012678][ T3026] ieee80211_mgd_auth+0xee3/0x1770 [ 86.015306][ T3026] cfg80211_mlme_auth+0x632/0x9c0 [ 86.018121][ T3026] cfg80211_conn_do_work+0x501/0xd10 [ 86.020237][ T3026] cfg80211_conn_work+0x2c0/0x440 [ 86.022344][ T3026] process_scheduled_works+0xade/0x17a0 [ 86.024847][ T3026] worker_thread+0x8a0/0xda0 [ 86.026853][ T3026] kthread+0x711/0x8a0 [ 86.028632][ T3026] ret_from_fork+0x4b/0x80 [ 86.030622][ T3026] ret_from_fork_asm+0x1a/0x30 [ 86.032595][ T3026] [ 86.033598][ T3026] Freed by task 15: [ 86.035265][ T3026] kasan_save_track+0x3e/0x80 [ 86.037087][ T3026] kasan_save_free_info+0x46/0x50 [ 86.039148][ T3026] __kasan_slab_free+0x62/0x70 [ 86.041057][ T3026] kmem_cache_free+0x192/0x3f0 [ 86.043058][ T3026] rcu_core+0xca5/0x1710 [ 86.045018][ T3026] handle_softirqs+0x283/0x870 [ 86.047103][ T3026] run_ksoftirqd+0x9b/0x100 [ 86.049131][ T3026] smpboot_thread_fn+0x53f/0xa60 [ 86.051279][ T3026] kthread+0x711/0x8a0 [ 86.053039][ T3026] ret_from_fork+0x4b/0x80 [ 86.055015][ T3026] ret_from_fork_asm+0x1a/0x30 [ 86.057093][ T3026] [ 86.058158][ T3026] Last potentially related work creation: [ 86.060588][ T3026] kasan_save_stack+0x3e/0x60 [ 86.062637][ T3026] kasan_record_aux_stack+0xbc/0xd0 [ 86.064723][ T3026] call_rcu+0x142/0x990 [ 86.066464][ T3026] __dentry_kill+0x4d2/0x660 [ 86.068283][ T3026] dput+0x19f/0x2b0 [ 86.069936][ T3026] simple_recursive_removal+0x2c2/0x8e0 [ 86.072383][ T3026] debugfs_remove+0x5b/0x70 [ 86.074440][ T3026] ieee80211_debugfs_recreate_netdev+0xbf/0x1460 [ 86.077403][ T3026] drv_remove_interface+0x1fa/0x590 [ 86.079929][ T3026] ieee80211_change_mac+0x912/0x12c0 [ 86.082804][ T3026] netif_set_mac_address+0x2fc/0x4c0 [ 86.085561][ T3026] do_setlink+0x908/0x40d0 [ 86.087515][ T3026] rtnl_setlink+0x604/0x900 [ 86.089494][ T3026] rtnetlink_rcv_msg+0x7cf/0xb70 [ 86.091668][ T3026] netlink_rcv_skb+0x219/0x490 [ 86.093621][ T3026] netlink_unicast+0x75b/0x8d0 [ 86.095856][ T3026] netlink_sendmsg+0x805/0xb30 [ 86.097749][ T3026] __sock_sendmsg+0x219/0x270 [ 86.099785][ T3026] ____sys_sendmsg+0x505/0x830 [ 86.101903][ T3026] ___sys_sendmsg+0x21f/0x2a0 [ 86.104020][ T3026] __x64_sys_sendmsg+0x19b/0x260 [ 86.106180][ T3026] do_syscall_64+0xf6/0x210 [ 86.108134][ T3026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.110604][ T3026] [ 86.111711][ T3026] The buggy address belongs to the object at ffff8880441998f8 [ 86.111711][ T3026] which belongs to the cache dentry of size 312 [ 86.117208][ T3026] The buggy address is located 208 bytes inside of [ 86.117208][ T3026] freed 312-byte region [ffff8880441998f8, ffff888044199a30) [ 86.122769][ T3026] [ 86.123875][ T3026] The buggy address belongs to the physical page: [ 86.126658][ T3026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44198 [ 86.130432][ T3026] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.133723][ T3026] memcg:ffff888036150001 [ 86.135505][ T3026] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 86.138723][ T3026] page_type: f5(slab) [ 86.140364][ T3026] raw: 04fff00000000040 ffff88801b2ce780 dead000000000122 0000000000000000 [ 86.143911][ T3026] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff888036150001 [ 86.147429][ T3026] head: 04fff00000000040 ffff88801b2ce780 dead000000000122 0000000000000000 [ 86.150768][ T3026] head: 0000000000000000 0000000000150015 00000000f5000000 ffff888036150001 [ 86.153875][ T3026] head: 04fff00000000001 ffffea0001106601 00000000ffffffff 00000000ffffffff [ 86.157598][ T3026] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 86.161350][ T3026] page dumped because: kasan: bad access detected [ 86.163900][ T3026] page_owner tracks the page as allocated [ 86.166119][ T3026] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5325, tgid 5323 (syz.0.0), ts 85405380095, free_ts 0 [ 86.174307][ T3026] post_alloc_hook+0x1d8/0x230 [ 86.176566][ T3026] get_page_from_freelist+0x21ce/0x22b0 [ 86.178924][ T3026] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.181313][ T3026] alloc_pages_mpol+0x232/0x4a0 [ 86.183448][ T3026] allocate_slab+0x8a/0x3b0 [ 86.185262][ T3026] ___slab_alloc+0xbfc/0x1480 [ 86.187039][ T3026] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 86.189341][ T3026] __d_alloc+0x31/0x6f0 [ 86.191127][ T3026] d_alloc_parallel+0xe0/0x14e0 [ 86.193281][ T3026] __lookup_slow+0x116/0x3d0 [ 86.195361][ T3026] lookup_one_len+0x1aa/0x310 [ 86.197325][ T3026] start_creating+0x18d/0x310 [ 86.199338][ T3026] __debugfs_create_file+0x79/0x4f0 [ 86.201447][ T3026] debugfs_create_file_short+0x3f/0x60 [ 86.204138][ T3026] ieee80211_debugfs_recreate_netdev+0xb6f/0x1460 [ 86.206682][ T3026] ieee80211_if_change_type+0x53a/0x990 [ 86.208981][ T3026] page_owner free stack trace missing [ 86.211339][ T3026] [ 86.212426][ T3026] Memory state around the buggy address: [ 86.214977][ T3026] ffff888044199880: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa [ 86.218475][ T3026] ffff888044199900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.221972][ T3026] >ffff888044199980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.225333][ T3026] ^ [ 86.227540][ T3026] ffff888044199a00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 86.230470][ T3026] ffff888044199a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.233917][ T3026] ================================================================== [ 86.238420][ T3026] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.241921][ T3026] CPU: 0 UID: 0 PID: 3026 Comm: kworker/u4:11 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 86.247750][ T3026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.252903][ T3026] Workqueue: events_unbound cfg80211_wiphy_work [ 86.256079][ T3026] Call Trace: [ 86.257207][ T3026] [ 86.258520][ T3026] dump_stack_lvl+0x99/0x250 [ 86.260308][ T3026] ? __asan_memcpy+0x40/0x70 [ 86.262281][ T3026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.264618][ T3026] ? __pfx__printk+0x10/0x10 [ 86.266713][ T3026] panic+0x2db/0x790 [ 86.268480][ T3026] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.270554][ T3026] ? __pfx_panic+0x10/0x10 [ 86.272449][ T3026] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 86.275214][ T3026] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.277867][ T3026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.280863][ T3026] ? _raw_spin_lock+0x2e/0x40 [ 86.283033][ T3026] check_panic_on_warn+0x89/0xb0 [ 86.285205][ T3026] ? _raw_spin_lock+0x2e/0x40 [ 86.287216][ T3026] end_report+0x78/0x160 [ 86.289150][ T3026] kasan_report+0x129/0x150 [ 86.291157][ T3026] ? _raw_spin_lock+0x2e/0x40 [ 86.293171][ T3026] ? lockref_get+0x15/0x60 [ 86.295165][ T3026] __kasan_check_byte+0x2a/0x40 [ 86.297256][ T3026] lock_acquire+0x8d/0x360 [ 86.299206][ T3026] ? do_raw_spin_lock+0x121/0x290 [ 86.301290][ T3026] _raw_spin_lock+0x2e/0x40 [ 86.303119][ T3026] ? lockref_get+0x15/0x60 [ 86.305002][ T3026] lockref_get+0x15/0x60 [ 86.306792][ T3026] simple_recursive_removal+0x35/0x8e0 [ 86.308948][ T3026] ? mntput+0x65/0xc0 [ 86.310656][ T3026] ? __pfx_remove_one+0x10/0x10 [ 86.312453][ T3026] debugfs_remove+0x5b/0x70 [ 86.314189][ T3026] ieee80211_sta_debugfs_remove+0x40/0x70 [ 86.316579][ T3026] __sta_info_destroy_part2+0x352/0x450 [ 86.319153][ T3026] sta_info_destroy_addr+0xf5/0x140 [ 86.321839][ T3026] ieee80211_destroy_auth_data+0x12d/0x260 [ 86.324917][ T3026] ieee80211_sta_work+0x11cf/0x3600 [ 86.327361][ T3026] ? __lock_acquire+0xaac/0xd20 [ 86.329326][ T3026] ? __lock_acquire+0xaac/0xd20 [ 86.331359][ T3026] ? __pfx_ieee80211_sta_work+0x10/0x10 [ 86.333568][ T3026] ? do_raw_spin_lock+0x121/0x290 [ 86.335610][ T3026] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 86.337962][ T3026] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.340032][ T3026] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.342402][ T3026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.345000][ T3026] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.347055][ T3026] ? skb_dequeue+0x10e/0x150 [ 86.349100][ T3026] ? ieee80211_iface_work+0xcdb/0xfe0 [ 86.351505][ T3026] ? ieee80211_iface_work+0xeef/0xfe0 [ 86.353892][ T3026] ? rcu_is_watching+0x15/0xb0 [ 86.355999][ T3026] cfg80211_wiphy_work+0x2dc/0x460 [ 86.358155][ T3026] ? process_scheduled_works+0x9ec/0x17a0 [ 86.360544][ T3026] process_scheduled_works+0xade/0x17a0 [ 86.362846][ T3026] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.365213][ T3026] worker_thread+0x8a0/0xda0 [ 86.367067][ T3026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.369595][ T3026] ? __kthread_parkme+0x7b/0x200 [ 86.371598][ T3026] kthread+0x711/0x8a0 [ 86.373241][ T3026] ? __pfx_worker_thread+0x10/0x10 [ 86.375321][ T3026] ? __pfx_kthread+0x10/0x10 [ 86.377238][ T3026] ? __pfx_kthread+0x10/0x10 [ 86.379252][ T3026] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.381520][ T3026] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.383871][ T3026] ? __pfx_kthread+0x10/0x10 [ 86.385937][ T3026] ret_from_fork+0x4b/0x80 [ 86.387959][ T3026] ? __pfx_kthread+0x10/0x10 [ 86.389934][ T3026] ret_from_fork_asm+0x1a/0x30 [ 86.392069][ T3026] [ 86.393729][ T3026] Kernel Offset: disabled [ 86.395668][ T3026] Rebooting in 86400 seconds..