[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.16' (ECDSA) to the list of known hosts. 2021/08/30 23:06:21 parsed 1 programs 2021/08/30 23:06:21 executed programs: 0 syzkaller login: [ 1582.589406][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 1582.643694][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.652336][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.660562][ T8457] device bridge_slave_0 entered promiscuous mode [ 1582.670216][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.678154][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.688042][ T8457] device bridge_slave_1 entered promiscuous mode [ 1582.708903][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.721907][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.745703][ T8457] team0: Port device team_slave_0 added [ 1582.753974][ T8457] team0: Port device team_slave_1 added [ 1582.772513][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.779601][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.806729][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.819485][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.827387][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.855787][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.885413][ T8457] device hsr_slave_0 entered promiscuous mode [ 1582.893222][ T8457] device hsr_slave_1 entered promiscuous mode [ 1582.999192][ T8457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1583.011648][ T8457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1583.023326][ T8457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1583.034660][ T8457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1583.061035][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.068519][ T8457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.077311][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.084646][ T8457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.127208][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.143886][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1583.156161][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.165645][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.174753][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1583.188182][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.201300][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1583.209758][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.217000][ T8678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1583.242471][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1583.250968][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.258125][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.267105][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1583.276655][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1583.286373][ T8678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1583.298536][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1583.314159][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1583.325514][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1583.347708][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.357865][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1583.366423][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1583.392718][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1583.409157][ T8457] device veth0_vlan entered promiscuous mode [ 1583.416461][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1583.427075][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1583.435969][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1583.449580][ T8457] device veth1_vlan entered promiscuous mode [ 1583.471575][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1583.480425][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1583.490372][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1583.501116][ T8457] device veth0_macvtap entered promiscuous mode [ 1583.512873][ T8457] device veth1_macvtap entered promiscuous mode [ 1583.530652][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.539753][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1583.550174][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1583.563372][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.570839][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1583.583099][ T8433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1583.596460][ T8457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.606104][ T8457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.615381][ T8457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.625250][ T8457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.723787][ T544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.732865][ T544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.755522][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1583.776871][ T544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.786932][ T544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.796513][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1584.412956][ T8597] Bluetooth: hci0: command 0x0409 tx timeout 2021/08/30 23:06:26 executed programs: 3 [ 1586.491741][ T8681] Bluetooth: hci0: command 0x041b tx timeout [ 1588.571224][ T8681] Bluetooth: hci0: command 0x040f tx timeout [ 1590.650972][ T8681] Bluetooth: hci0: command 0x0419 tx timeout 2021/08/30 23:06:31 executed programs: 9 2021/08/30 23:06:37 executed programs: 15 2021/08/30 23:06:42 executed programs: 21 2021/08/30 23:06:47 executed programs: 27 [ 1607.050967][ T3266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.057597][ T3266] ieee802154 phy1 wpan1: encryption failed: -22 2021/08/30 23:06:52 executed programs: 33 2021/08/30 23:06:57 executed programs: 39 2021/08/30 23:07:02 executed programs: 45 [ 1625.610549][ T8433] ================================================================== [ 1625.618768][ T8433] BUG: KASAN: use-after-free in __lock_acquire+0x3d86/0x54a0 [ 1625.626220][ T8433] Read of size 8 at addr ffff88801abd10a0 by task kworker/1:0/8433 [ 1625.634113][ T8433] [ 1625.636421][ T8433] CPU: 1 PID: 8433 Comm: kworker/1:0 Not tainted 5.14.0-rc7-syzkaller #0 [ 1625.644840][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.654996][ T8433] Workqueue: events l2cap_chan_timeout [ 1625.660626][ T8433] Call Trace: [ 1625.663998][ T8433] dump_stack_lvl+0xcd/0x134 [ 1625.668674][ T8433] print_address_description.constprop.0.cold+0x6c/0x309 [ 1625.675721][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1625.680754][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1625.685860][ T8433] kasan_report.cold+0x83/0xdf [ 1625.690616][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1625.695630][ T8433] __lock_acquire+0x3d86/0x54a0 [ 1625.700470][ T8433] ? call_rcu_zapped+0xb0/0xb0 [ 1625.705478][ T8433] ? mark_lock+0xef/0x17b0 [ 1625.709900][ T8433] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1625.715791][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.721916][ T8433] ? lock_chain_count+0x20/0x20 [ 1625.726780][ T8433] lock_acquire+0x1ab/0x510 [ 1625.731385][ T8433] ? lock_sock_nested+0x40/0x120 [ 1625.736493][ T8433] ? lock_release+0x720/0x720 [ 1625.741174][ T8433] ? del_timer+0xc5/0x110 [ 1625.745581][ T8433] _raw_spin_lock_bh+0x2f/0x40 [ 1625.750357][ T8433] ? lock_sock_nested+0x40/0x120 [ 1625.755387][ T8433] lock_sock_nested+0x40/0x120 [ 1625.760259][ T8433] l2cap_sock_teardown_cb+0xa1/0x660 [ 1625.765553][ T8433] l2cap_chan_del+0xbc/0xa80 [ 1625.770254][ T8433] l2cap_chan_close+0x1b9/0xaf0 [ 1625.775112][ T8433] ? l2cap_rx+0x1fb0/0x1fb0 [ 1625.779607][ T8433] ? lock_release+0x720/0x720 [ 1625.784368][ T8433] ? lock_downgrade+0x6e0/0x6e0 [ 1625.789216][ T8433] l2cap_chan_timeout+0x17e/0x2f0 [ 1625.794305][ T8433] process_one_work+0x98d/0x1630 [ 1625.799323][ T8433] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1625.804755][ T8433] ? rwlock_bug.part.0+0x90/0x90 [ 1625.809699][ T8433] ? _raw_spin_lock_irq+0x41/0x50 [ 1625.814730][ T8433] worker_thread+0x658/0x11f0 [ 1625.819485][ T8433] ? process_one_work+0x1630/0x1630 [ 1625.824778][ T8433] kthread+0x3e5/0x4d0 [ 1625.828861][ T8433] ? set_kthread_struct+0x130/0x130 [ 1625.834160][ T8433] ret_from_fork+0x1f/0x30 [ 1625.838818][ T8433] [ 1625.841135][ T8433] Allocated by task 8711: [ 1625.845444][ T8433] kasan_save_stack+0x1b/0x40 [ 1625.850171][ T8433] __kasan_kmalloc+0xa4/0xd0 [ 1625.854856][ T8433] sk_prot_alloc+0x110/0x290 [ 1625.859443][ T8433] sk_alloc+0x32/0xbc0 [ 1625.863518][ T8433] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1625.869319][ T8433] l2cap_sock_create+0x123/0x1f0 [ 1625.874252][ T8433] bt_sock_create+0x17c/0x340 [ 1625.878989][ T8433] __sock_create+0x353/0x790 [ 1625.883566][ T8433] __sys_socket+0xef/0x200 [ 1625.887968][ T8433] __x64_sys_socket+0x6f/0xb0 [ 1625.892634][ T8433] do_syscall_64+0x35/0xb0 [ 1625.897108][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.902993][ T8433] [ 1625.905306][ T8433] Freed by task 8711: [ 1625.909269][ T8433] kasan_save_stack+0x1b/0x40 [ 1625.913936][ T8433] kasan_set_track+0x1c/0x30 [ 1625.918512][ T8433] kasan_set_free_info+0x20/0x30 [ 1625.923514][ T8433] __kasan_slab_free+0xff/0x130 [ 1625.928359][ T8433] slab_free_freelist_hook+0xe3/0x250 [ 1625.933731][ T8433] kfree+0xe4/0x540 [ 1625.937530][ T8433] __sk_destruct+0x6a8/0x900 [ 1625.942109][ T8433] sk_destruct+0xbd/0xe0 [ 1625.946363][ T8433] __sk_free+0xef/0x3d0 [ 1625.950506][ T8433] sk_free+0x78/0xa0 [ 1625.954390][ T8433] l2cap_sock_kill+0x203/0x240 [ 1625.959145][ T8433] l2cap_sock_release+0x184/0x200 [ 1625.964247][ T8433] __sock_release+0xcd/0x280 [ 1625.968925][ T8433] sock_close+0x18/0x20 [ 1625.973066][ T8433] __fput+0x288/0x920 [ 1625.977116][ T8433] task_work_run+0xdd/0x1a0 [ 1625.981607][ T8433] get_signal+0x1b35/0x2160 [ 1625.986135][ T8433] arch_do_signal_or_restart+0x2a9/0x1c40 [ 1625.991873][ T8433] exit_to_user_mode_prepare+0x17d/0x290 [ 1625.997671][ T8433] syscall_exit_to_user_mode+0x19/0x60 [ 1626.003133][ T8433] do_syscall_64+0x42/0xb0 [ 1626.007631][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.013513][ T8433] [ 1626.015821][ T8433] The buggy address belongs to the object at ffff88801abd1000 [ 1626.015821][ T8433] which belongs to the cache kmalloc-2k of size 2048 [ 1626.029957][ T8433] The buggy address is located 160 bytes inside of [ 1626.029957][ T8433] 2048-byte region [ffff88801abd1000, ffff88801abd1800) [ 1626.043303][ T8433] The buggy address belongs to the page: [ 1626.048912][ T8433] page:ffffea00006af400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1abd0 [ 1626.059055][ T8433] head:ffffea00006af400 order:3 compound_mapcount:0 compound_pincount:0 [ 1626.067366][ T8433] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1626.075343][ T8433] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010842000 [ 1626.083914][ T8433] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 1626.092580][ T8433] page dumped because: kasan: bad access detected [ 1626.098974][ T8433] page_owner tracks the page as allocated [ 1626.104676][ T8433] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8679, ts 1585361303153, free_ts 1584742232915 [ 1626.125062][ T8433] get_page_from_freelist+0xa72/0x2f80 [ 1626.130553][ T8433] __alloc_pages+0x1b2/0x500 [ 1626.135227][ T8433] alloc_pages+0x18c/0x2a0 [ 1626.139720][ T8433] allocate_slab+0x32e/0x4b0 [ 1626.144336][ T8433] ___slab_alloc+0x4ba/0x820 [ 1626.148942][ T8433] __slab_alloc.constprop.0+0xa7/0xf0 [ 1626.154321][ T8433] __kmalloc_node_track_caller+0x2e3/0x360 [ 1626.160231][ T8433] __alloc_skb+0xde/0x340 [ 1626.164660][ T8433] alloc_skb_with_frags+0x93/0x620 [ 1626.169782][ T8433] sock_alloc_send_pskb+0x783/0x910 [ 1626.174988][ T8433] mld_newpack+0x1df/0x770 [ 1626.179495][ T8433] add_grhead+0x265/0x330 [ 1626.183828][ T8433] add_grec+0x1053/0x14e0 [ 1626.188152][ T8433] mld_send_initial_cr.part.0+0xf6/0x230 [ 1626.193783][ T8433] mld_dad_work+0x1d3/0x690 [ 1626.198281][ T8433] process_one_work+0x98d/0x1630 [ 1626.203224][ T8433] page last free stack trace: [ 1626.207884][ T8433] free_pcp_prepare+0x2c5/0x780 [ 1626.212793][ T8433] free_unref_page+0x19/0x690 [ 1626.217463][ T8433] unfreeze_partials+0x17c/0x1d0 [ 1626.222393][ T8433] put_cpu_partial+0x13d/0x230 [ 1626.227235][ T8433] qlist_free_all+0x5a/0xc0 [ 1626.231747][ T8433] kasan_quarantine_reduce+0x180/0x200 [ 1626.237216][ T8433] __kasan_slab_alloc+0x95/0xb0 [ 1626.242055][ T8433] __kmalloc+0x1f4/0x330 [ 1626.246284][ T8433] tomoyo_realpath_from_path+0xc3/0x620 [ 1626.252072][ T8433] tomoyo_path_perm+0x21b/0x400 [ 1626.256912][ T8433] security_inode_getattr+0xcf/0x140 [ 1626.262214][ T8433] vfs_statx+0x164/0x390 [ 1626.266446][ T8433] __do_sys_newlstat+0x91/0x110 [ 1626.271285][ T8433] do_syscall_64+0x35/0xb0 [ 1626.275693][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.281580][ T8433] [ 1626.283900][ T8433] Memory state around the buggy address: [ 1626.289533][ T8433] ffff88801abd0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1626.297673][ T8433] ffff88801abd1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1626.305735][ T8433] >ffff88801abd1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1626.313794][ T8433] ^ [ 1626.318891][ T8433] ffff88801abd1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1626.326944][ T8433] ffff88801abd1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1626.335008][ T8433] ================================================================== [ 1626.343137][ T8433] Disabling lock debugging due to kernel taint [ 1626.349356][ T8433] Kernel panic - not syncing: panic_on_warn set ... [ 1626.356045][ T8433] CPU: 1 PID: 8433 Comm: kworker/1:0 Tainted: G B 5.14.0-rc7-syzkaller #0 [ 1626.365853][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.375899][ T8433] Workqueue: events l2cap_chan_timeout [ 1626.381362][ T8433] Call Trace: [ 1626.384631][ T8433] dump_stack_lvl+0xcd/0x134 [ 1626.389219][ T8433] panic+0x306/0x73d [ 1626.393498][ T8433] ? __warn_printk+0xf3/0xf3 [ 1626.398102][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1626.403127][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1626.408162][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1626.413196][ T8433] end_report.cold+0x5a/0x5a [ 1626.417797][ T8433] kasan_report.cold+0x71/0xdf [ 1626.422574][ T8433] ? __lock_acquire+0x3d86/0x54a0 [ 1626.427606][ T8433] __lock_acquire+0x3d86/0x54a0 [ 1626.432467][ T8433] ? call_rcu_zapped+0xb0/0xb0 [ 1626.437408][ T8433] ? mark_lock+0xef/0x17b0 [ 1626.441820][ T8433] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1626.447637][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1626.453613][ T8433] ? lock_chain_count+0x20/0x20 [ 1626.458544][ T8433] lock_acquire+0x1ab/0x510 [ 1626.463050][ T8433] ? lock_sock_nested+0x40/0x120 [ 1626.467982][ T8433] ? lock_release+0x720/0x720 [ 1626.472652][ T8433] ? del_timer+0xc5/0x110 [ 1626.477761][ T8433] _raw_spin_lock_bh+0x2f/0x40 [ 1626.482514][ T8433] ? lock_sock_nested+0x40/0x120 [ 1626.487537][ T8433] lock_sock_nested+0x40/0x120 [ 1626.492308][ T8433] l2cap_sock_teardown_cb+0xa1/0x660 [ 1626.497595][ T8433] l2cap_chan_del+0xbc/0xa80 [ 1626.502265][ T8433] l2cap_chan_close+0x1b9/0xaf0 [ 1626.507105][ T8433] ? l2cap_rx+0x1fb0/0x1fb0 [ 1626.511772][ T8433] ? lock_release+0x720/0x720 [ 1626.516440][ T8433] ? lock_downgrade+0x6e0/0x6e0 [ 1626.521281][ T8433] l2cap_chan_timeout+0x17e/0x2f0 [ 1626.526308][ T8433] process_one_work+0x98d/0x1630 [ 1626.531244][ T8433] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1626.536612][ T8433] ? rwlock_bug.part.0+0x90/0x90 [ 1626.541539][ T8433] ? _raw_spin_lock_irq+0x41/0x50 [ 1626.546568][ T8433] worker_thread+0x658/0x11f0 [ 1626.551265][ T8433] ? process_one_work+0x1630/0x1630 [ 1626.556474][ T8433] kthread+0x3e5/0x4d0 [ 1626.560544][ T8433] ? set_kthread_struct+0x130/0x130 [ 1626.565736][ T8433] ret_from_fork+0x1f/0x30 [ 1626.571480][ T8433] Kernel Offset: disabled [ 1626.575900][ T8433] Rebooting in 86400 seconds..