ess=08:02:11:00:00:01)
[ 467.871727][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 467.979945][ T3441] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 468.099994][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 468.209936][ T3441] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 468.342488][ T7910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 468.381152][ T10] wlan1: No basic rates, using min rate instead
[ 468.388344][ T10] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 468.397473][ T10] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 468.509903][ T3441] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 468.619980][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 468.729934][ T60] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 468.869034][ T7912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 468.901507][ T7741] wlan1: No basic rates, using min rate instead
[ 468.910054][ T7741] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 468.919025][ T7741] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 469.029937][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 469.140035][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 469.250052][ T3441] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 469.395826][ T7914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 469.431358][ T7741] wlan1: No basic rates, using min rate instead
[ 469.439180][ T7741] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 469.448791][ T7741] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 469.560114][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 469.670013][ T7763] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 469.779990][ T50] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 469.953829][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 470.001041][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 470.070689][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 470.123681][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 470.243653][ T60] bridge_slave_1: left allmulticast mode
[ 470.249598][ T60] bridge_slave_1: left promiscuous mode
[ 470.255879][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 470.264960][ T60] bridge_slave_0: left allmulticast mode
[ 470.270827][ T60] bridge_slave_0: left promiscuous mode
[ 470.276506][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 470.506294][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 470.517954][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 470.527857][ T60] bond0 (unregistering): Released all slaves
[ 470.779359][ T60] hsr_slave_0: left promiscuous mode
[ 470.785778][ T60] hsr_slave_1: left promiscuous mode
[ 470.797148][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 470.805079][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 470.816161][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 470.824212][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 470.844387][ T60] veth1_macvtap: left promiscuous mode
[ 470.850070][ T60] veth0_macvtap: left promiscuous mode
[ 470.856099][ T60] veth1_vlan: left promiscuous mode
[ 470.862154][ T60] veth0_vlan: left promiscuous mode
[ 471.190674][ T60] team0 (unregistering): Port device team_slave_1 removed
[ 471.217921][ T60] team0 (unregistering): Port device team_slave_0 removed
Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts.
executing program
[ 473.530582][ T7763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 473.538622][ T7763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 473.558512][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 473.566663][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 473.601030][ T7985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.622049][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.633493][ T7741] wlan1: No basic rates, using min rate instead
[ 473.642587][ T7741] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
executing program
executing program
[ 473.651705][ T7741] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 473.676743][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
executing program
[ 473.698114][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.722099][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
executing program
[ 473.743930][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.761155][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 473.768676][ T7992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.792520][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
executing program
executing program
[ 473.816523][ T7994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.841041][ T7995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
executing program
[ 473.864943][ T7996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.870197][ T60] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 473.892622][ T7997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
executing program
[ 473.916736][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.937586][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
executing program
[ 473.958913][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.982919][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 473.990137][ T60] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 474.000538][ T60] ==================================================================
[ 474.008705][ T60] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40
[ 474.016351][ T60] Read of size 1 at addr ffff8880772c06b0 by task kworker/u8:4/60
[ 474.024148][ T60]
[ 474.026485][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full)
[ 474.026498][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 474.026506][ T60] Workqueue: events_unbound cfg80211_wiphy_work
[ 474.026536][ T60] Call Trace:
[ 474.026542][ T60]
[ 474.026548][ T60] dump_stack_lvl+0x189/0x250
[ 474.026561][ T60] ? __virt_addr_valid+0x1c8/0x5c0
[ 474.026574][ T60] ? rcu_is_watching+0x15/0xb0
[ 474.026585][ T60] ? __pfx_dump_stack_lvl+0x10/0x10
[ 474.026596][ T60] ? rcu_is_watching+0x15/0xb0
[ 474.026606][ T60] ? lock_release+0x4b/0x3e0
[ 474.026615][ T60] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 474.026628][ T60] ? __virt_addr_valid+0x1c8/0x5c0
[ 474.026639][ T60] ? __virt_addr_valid+0x4a5/0x5c0
[ 474.026651][ T60] print_report+0xca/0x240
[ 474.026663][ T60] ? _raw_spin_lock+0x2e/0x40
[ 474.026673][ T60] kasan_report+0x118/0x150
[ 474.026684][ T60] ? _raw_spin_lock+0x2e/0x40
[ 474.026695][ T60] ? lockref_get+0x15/0x60
[ 474.026706][ T60] __kasan_check_byte+0x2a/0x40
[ 474.026715][ T60] lock_acquire+0x8d/0x360
[ 474.026724][ T60] ? do_raw_spin_lock+0x121/0x290
[ 474.026737][ T60] _raw_spin_lock+0x2e/0x40
[ 474.026747][ T60] ? lockref_get+0x15/0x60
[ 474.026757][ T60] lockref_get+0x15/0x60
[ 474.026766][ T60] __simple_recursive_removal+0x33/0x510
[ 474.026779][ T60] ? mntput+0x65/0xc0
[ 474.026790][ T60] ? __pfx_remove_one+0x10/0x10
[ 474.026805][ T60] debugfs_remove+0x5b/0x70
[ 474.026817][ T60] ieee80211_sta_debugfs_remove+0x40/0x70
[ 474.026830][ T60] __sta_info_destroy_part2+0x352/0x450
[ 474.026846][ T60] sta_info_destroy_addr+0xf5/0x140
[ 474.026859][ T60] ieee80211_destroy_auth_data+0x12d/0x260
[ 474.026870][ T60] ieee80211_sta_work+0x11cf/0x3600
[ 474.026883][ T60] ? __lock_acquire+0xab9/0xd20
[ 474.026893][ T60] ? __lock_acquire+0xab9/0xd20
[ 474.026902][ T60] ? __pfx_ieee80211_sta_work+0x10/0x10
[ 474.026912][ T60] ? do_raw_spin_lock+0x121/0x290
[ 474.026925][ T60] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 474.026937][ T60] ? lockdep_hardirqs_on+0x9c/0x150
[ 474.026949][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 474.026961][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 474.026972][ T60] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 474.026985][ T60] ? skb_dequeue+0x10e/0x150
[ 474.026996][ T60] ? ieee80211_iface_work+0xfc4/0x12d0
[ 474.027010][ T60] ? ieee80211_iface_work+0x11d6/0x12d0
[ 474.027022][ T60] ? rcu_is_watching+0x15/0xb0
[ 474.027032][ T60] cfg80211_wiphy_work+0x2bb/0x470
[ 474.027045][ T60] ? process_scheduled_works+0x9ef/0x17b0
[ 474.027056][ T60] process_scheduled_works+0xae1/0x17b0
[ 474.027071][ T60] ? __pfx_process_scheduled_works+0x10/0x10
[ 474.027084][ T60] worker_thread+0x8a0/0xda0
[ 474.027095][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 474.027108][ T60] ? __kthread_parkme+0x7b/0x200
[ 474.027125][ T60] kthread+0x711/0x8a0
[ 474.027137][ T60] ? __pfx_worker_thread+0x10/0x10
[ 474.027147][ T60] ? __pfx_kthread+0x10/0x10
[ 474.027160][ T60] ? _raw_spin_unlock_irq+0x23/0x50
[ 474.027172][ T60] ? lockdep_hardirqs_on+0x9c/0x150
[ 474.027183][ T60] ? __pfx_kthread+0x10/0x10
[ 474.027197][ T60] ret_from_fork+0x4bc/0x870
[ 474.027208][ T60] ? __pfx_ret_from_fork+0x10/0x10
[ 474.027218][ T60] ? __switch_to_asm+0x39/0x70
[ 474.027226][ T60] ? __switch_to_asm+0x33/0x70
[ 474.027233][ T60] ? __pfx_kthread+0x10/0x10
[ 474.027244][ T60] ret_from_fork_asm+0x1a/0x30
[ 474.027256][ T60]
[ 474.027259][ T60]
[ 474.369924][ T60] Allocated by task 7741:
[ 474.374317][ T60] kasan_save_track+0x3e/0x80
[ 474.378992][ T60] __kasan_slab_alloc+0x6c/0x80
[ 474.383862][ T60] kmem_cache_alloc_lru_noprof+0x35d/0x6d0
[ 474.389691][ T60] __d_alloc+0x36/0x7a0
[ 474.393831][ T60] d_alloc_parallel+0xe1/0x1610
[ 474.398666][ T60] __lookup_slow+0x116/0x3d0
[ 474.403302][ T60] simple_start_creating+0xfd/0x1e0
[ 474.408493][ T60] debugfs_start_creating+0x10f/0x180
[ 474.413855][ T60] debugfs_create_dir+0x28/0x420
[ 474.418885][ T60] ieee80211_sta_debugfs_add+0x12c/0x850
[ 474.424603][ T60] sta_info_insert_rcu+0x1c54/0x2840
[ 474.429891][ T60] sta_info_insert+0x16/0xc0
[ 474.434485][ T60] ieee80211_prep_connection+0xfce/0x13f0
[ 474.440208][ T60] ieee80211_mgd_auth+0xee6/0x1770
[ 474.445353][ T60] cfg80211_mlme_auth+0x632/0x9c0
[ 474.450364][ T60] cfg80211_conn_do_work+0x501/0xd10
[ 474.455687][ T60] cfg80211_conn_work+0x2c0/0x460
[ 474.460693][ T60] process_scheduled_works+0xae1/0x17b0
[ 474.466220][ T60] worker_thread+0x8a0/0xda0
[ 474.470790][ T60] kthread+0x711/0x8a0
[ 474.474839][ T60] ret_from_fork+0x4bc/0x870
[ 474.479478][ T60] ret_from_fork_asm+0x1a/0x30
[ 474.484255][ T60]
[ 474.486564][ T60] Freed by task 15:
[ 474.490347][ T60] kasan_save_track+0x3e/0x80
[ 474.495195][ T60] __kasan_save_free_info+0x46/0x50
[ 474.500376][ T60] __kasan_slab_free+0x5c/0x80
[ 474.505170][ T60] kmem_cache_free+0x19b/0x690
[ 474.509927][ T60] rcu_core+0xcab/0x1770
[ 474.514153][ T60] handle_softirqs+0x286/0x870
[ 474.518902][ T60] run_ksoftirqd+0x9b/0x100
[ 474.523441][ T60] smpboot_thread_fn+0x542/0xa60
[ 474.528451][ T60] kthread+0x711/0x8a0
[ 474.532780][ T60] ret_from_fork+0x4bc/0x870
[ 474.537352][ T60] ret_from_fork_asm+0x1a/0x30
[ 474.542118][ T60]
[ 474.544423][ T60] Last potentially related work creation:
[ 474.550205][ T60] kasan_save_stack+0x3e/0x60
[ 474.554893][ T60] kasan_record_aux_stack+0xbd/0xd0
[ 474.560160][ T60] call_rcu+0x157/0x9c0
[ 474.564743][ T60] __dentry_kill+0x4d2/0x660
[ 474.569449][ T60] dput+0x19f/0x2b0
[ 474.573332][ T60] find_next_child+0x1e5/0x250
[ 474.578089][ T60] __simple_recursive_removal+0x10b/0x510
[ 474.583799][ T60] debugfs_remove+0x5b/0x70
[ 474.588298][ T60] ieee80211_debugfs_recreate_netdev+0xbf/0x1460
[ 474.594785][ T60] drv_remove_interface+0x1fa/0x590
[ 474.599997][ T60] ieee80211_change_mac+0x912/0x12d0
[ 474.605286][ T60] netif_set_mac_address+0x2fc/0x4c0
[ 474.610570][ T60] dev_set_mac_address_user+0x137/0x270
[ 474.616103][ T60] dev_ioctl+0x7b4/0x1150
[ 474.620456][ T60] sock_do_ioctl+0x22c/0x300
[ 474.625030][ T60] sock_ioctl+0x576/0x790
[ 474.629342][ T60] __se_sys_ioctl+0xfc/0x170
[ 474.634007][ T60] do_syscall_64+0xfa/0xfa0
[ 474.638495][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 474.644369][ T60]
[ 474.646681][ T60] The buggy address belongs to the object at ffff8880772c05e0
[ 474.646681][ T60] which belongs to the cache dentry of size 312
[ 474.660349][ T60] The buggy address is located 208 bytes inside of
[ 474.660349][ T60] freed 312-byte region [ffff8880772c05e0, ffff8880772c0718)
[ 474.674511][ T60]
[ 474.676825][ T60] The buggy address belongs to the physical page:
[ 474.683317][ T60] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x772c0
[ 474.692111][ T60] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 474.700684][ T60] memcg:ffff888025f3bc01
[ 474.704912][ T60] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 474.712452][ T60] page_type: f5(slab)
[ 474.716424][ T60] raw: 00fff00000000040 ffff88801b2fd780 dead000000000100 dead000000000122
[ 474.724995][ T60] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff888025f3bc01
[ 474.733654][ T60] head: 00fff00000000040 ffff88801b2fd780 dead000000000100 dead000000000122
[ 474.742316][ T60] head: 0000000000000000 0000000000150015 00000000f5000000 ffff888025f3bc01
[ 474.750974][ T60] head: 00fff00000000001 ffffea0001dcb001 00000000ffffffff 00000000ffffffff
[ 474.759639][ T60] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 474.768298][ T60] page dumped because: kasan: bad access detected
[ 474.774720][ T60] page_owner tracks the page as allocated
[ 474.780435][ T60] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 80522058076, free_ts 22838938194
[ 474.803523][ T60] post_alloc_hook+0x240/0x2a0
[ 474.808285][ T60] get_page_from_freelist+0x2365/0x2440
[ 474.813809][ T60] __alloc_frozen_pages_noprof+0x181/0x370
[ 474.819596][ T60] alloc_pages_mpol+0x232/0x4a0
[ 474.824432][ T60] allocate_slab+0x96/0x350
[ 474.828930][ T60] ___slab_alloc+0xe94/0x18a0
[ 474.833595][ T60] __slab_alloc+0x65/0x100
[ 474.838009][ T60] kmem_cache_alloc_lru_noprof+0x3ef/0x6d0
[ 474.843898][ T60] __d_alloc+0x36/0x7a0
[ 474.848066][ T60] d_alloc_name+0xb2/0x240
[ 474.852473][ T60] binderfs_fill_super+0x8b1/0xec0
[ 474.857784][ T60] get_tree_nodev+0xbb/0x150
[ 474.862366][ T60] vfs_get_tree+0x92/0x2b0
[ 474.866858][ T60] do_new_mount+0x302/0xa10
[ 474.871346][ T60] __se_sys_mount+0x313/0x410
[ 474.876003][ T60] do_syscall_64+0xfa/0xfa0
[ 474.880499][ T60] page last free pid 1 tgid 1 stack trace:
[ 474.886387][ T60] __free_frozen_pages+0xbc4/0xd30
[ 474.891572][ T60] free_contig_range+0x1bd/0x4a0
[ 474.896581][ T60] destroy_args+0x69/0x660
[ 474.900980][ T60] debug_vm_pgtable+0x39f/0x3b0
[ 474.905818][ T60] do_one_initcall+0x236/0x820
[ 474.910666][ T60] do_initcall_level+0x104/0x190
[ 474.915585][ T60] do_initcalls+0x59/0xa0
[ 474.919911][ T60] kernel_init_freeable+0x334/0x4b0
[ 474.925187][ T60] kernel_init+0x1d/0x1d0
[ 474.929500][ T60] ret_from_fork+0x4bc/0x870
[ 474.934083][ T60] ret_from_fork_asm+0x1a/0x30
[ 474.938871][ T60]
[ 474.941266][ T60] Memory state around the buggy address:
[ 474.946876][ T60] ffff8880772c0580: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[ 474.954917][ T60] ffff8880772c0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 474.962965][ T60] >ffff8880772c0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 474.971356][ T60] ^
[ 474.977093][ T60] ffff8880772c0700: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb
[ 474.985231][ T60] ffff8880772c0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 474.993275][ T60] ==================================================================
[ 475.001784][ T60] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 475.009083][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full)
[ 475.018356][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 475.028404][ T60] Workqueue: events_unbound cfg80211_wiphy_work
[ 475.034834][ T60] Call Trace:
[ 475.038392][ T60]
[ 475.041329][ T60] dump_stack_lvl+0x99/0x250
[ 475.045974][ T60] ? __asan_memcpy+0x40/0x70
[ 475.050563][ T60] ? __pfx_dump_stack_lvl+0x10/0x10
[ 475.055927][ T60] ? __pfx__printk+0x10/0x10
[ 475.060523][ T60] vpanic+0x237/0x6d0
[ 475.064497][ T60] ? __pfx_vpanic+0x10/0x10
[ 475.068994][ T60] panic+0xb9/0xc0
[ 475.072753][ T60] ? __pfx_panic+0x10/0x10
[ 475.077163][ T60] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 475.083567][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 475.089450][ T60] ? is_module_address+0x17/0xf0
[ 475.094380][ T60] ? _raw_spin_lock+0x2e/0x40
[ 475.099075][ T60] check_panic_on_warn+0x89/0xb0
[ 475.104098][ T60] ? _raw_spin_lock+0x2e/0x40
[ 475.108852][ T60] end_report+0x78/0x160
[ 475.113343][ T60] kasan_report+0x129/0x150
[ 475.117833][ T60] ? _raw_spin_lock+0x2e/0x40
[ 475.122497][ T60] ? lockref_get+0x15/0x60
[ 475.126904][ T60] __kasan_check_byte+0x2a/0x40
[ 475.131825][ T60] lock_acquire+0x8d/0x360
[ 475.136258][ T60] ? do_raw_spin_lock+0x121/0x290
[ 475.141362][ T60] _raw_spin_lock+0x2e/0x40
[ 475.145857][ T60] ? lockref_get+0x15/0x60
[ 475.150320][ T60] lockref_get+0x15/0x60
[ 475.154638][ T60] __simple_recursive_removal+0x33/0x510
[ 475.160347][ T60] ? mntput+0x65/0xc0
[ 475.164319][ T60] ? __pfx_remove_one+0x10/0x10
[ 475.169165][ T60] debugfs_remove+0x5b/0x70
[ 475.173658][ T60] ieee80211_sta_debugfs_remove+0x40/0x70
[ 475.179369][ T60] __sta_info_destroy_part2+0x352/0x450
[ 475.184998][ T60] sta_info_destroy_addr+0xf5/0x140
[ 475.190246][ T60] ieee80211_destroy_auth_data+0x12d/0x260
[ 475.196169][ T60] ieee80211_sta_work+0x11cf/0x3600
[ 475.201547][ T60] ? __lock_acquire+0xab9/0xd20
[ 475.206391][ T60] ? __lock_acquire+0xab9/0xd20
[ 475.211228][ T60] ? __pfx_ieee80211_sta_work+0x10/0x10
[ 475.216799][ T60] ? do_raw_spin_lock+0x121/0x290
[ 475.221908][ T60] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 475.227804][ T60] ? lockdep_hardirqs_on+0x9c/0x150
[ 475.232992][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 475.238882][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 475.245375][ T60] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 475.250833][ T60] ? skb_dequeue+0x10e/0x150
[ 475.255628][ T60] ? ieee80211_iface_work+0xfc4/0x12d0
[ 475.261100][ T60] ? ieee80211_iface_work+0x11d6/0x12d0
[ 475.266641][ T60] ? rcu_is_watching+0x15/0xb0
[ 475.271458][ T60] cfg80211_wiphy_work+0x2bb/0x470
[ 475.276567][ T60] ? process_scheduled_works+0x9ef/0x17b0
[ 475.282278][ T60] process_scheduled_works+0xae1/0x17b0
[ 475.287821][ T60] ? __pfx_process_scheduled_works+0x10/0x10
[ 475.293805][ T60] worker_thread+0x8a0/0xda0
[ 475.298394][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 475.304715][ T60] ? __kthread_parkme+0x7b/0x200
[ 475.309643][ T60] kthread+0x711/0x8a0
[ 475.313719][ T60] ? __pfx_worker_thread+0x10/0x10
[ 475.318821][ T60] ? __pfx_kthread+0x10/0x10
[ 475.323491][ T60] ? _raw_spin_unlock_irq+0x23/0x50
[ 475.328680][ T60] ? lockdep_hardirqs_on+0x9c/0x150
[ 475.333865][ T60] ? __pfx_kthread+0x10/0x10
[ 475.338444][ T60] ret_from_fork+0x4bc/0x870
[ 475.343024][ T60] ? __pfx_ret_from_fork+0x10/0x10
[ 475.348124][ T60] ? __switch_to_asm+0x39/0x70
[ 475.352902][ T60] ? __switch_to_asm+0x33/0x70
[ 475.357654][ T60] ? __pfx_kthread+0x10/0x10
[ 475.362270][ T60] ret_from_fork_asm+0x1a/0x30
[ 475.367024][ T60]
[ 475.370399][ T60] Kernel Offset: disabled
[ 475.374765][ T60] Rebooting in 86400 seconds..