program: r0 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1fcb4b20"], 0xf) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x101002, 0x19, 0x9}, 0x18) renameat2(r3, &(0x7f00000001c0)='./bus\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) dup3(r4, r0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1fcb4b20"], 0xf) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000120)='0-CONFIG=disabled\n', 0x12) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x101002, 0x19, 0x9}, 0x18) (async) renameat2(r3, &(0x7f00000001c0)='./bus\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0) (async) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) (async) dup3(r4, r0, 0x0) (async) [ 142.181835][ T4653] Bluetooth: hci0: command tx timeout [ 142.322624][ T5338] vhci_hcd vhci_hcd.0: remove, state 4 [ 142.342631][ T4653] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 142.373444][ T5338] usb usb7: USB disconnect, device number 1 [ 142.483884][ T30] vhci_hcd vhci_hcd.0: stop threads [ 142.489257][ T5338] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 142.496113][ T30] vhci_hcd vhci_hcd.0: release socket [ 142.504707][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 142.512332][ T30] vhci_hcd vhci_hcd.0: stop threads [ 142.522878][ T30] vhci_hcd vhci_hcd.0: release socket [ 142.533360][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 142.538786][ T5338] vhci_hcd vhci_hcd.0: remove, state 4 [ 142.542353][ T30] ================================================================== [ 142.546941][ T30] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 142.551326][ T30] Read of size 1 at addr ffff8880349ec6c8 by task kworker/u4:2/30 [ 142.555501][ T30] [ 142.556783][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) [ 142.556804][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.556813][ T30] Workqueue: usbip_event event_handler [ 142.556833][ T30] Call Trace: [ 142.556841][ T30] [ 142.556847][ T30] dump_stack_lvl+0xe8/0x150 [ 142.556867][ T30] print_address_description+0x55/0x1e0 [ 142.556885][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 142.556898][ T30] print_report+0x58/0x70 [ 142.556913][ T30] kasan_report+0x117/0x150 [ 142.556930][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 142.556944][ T30] ? event_handler+0x2b0/0x4b0 [ 142.556955][ T30] __kasan_check_byte+0x2a/0x40 [ 142.556969][ T30] lock_acquire+0x84/0x350 [ 142.556989][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.557001][ T30] ? rcu_is_watching+0x15/0xb0 [ 142.557014][ T30] _raw_spin_lock_irqsave+0x40/0x60 [ 142.557026][ T30] ? event_handler+0x2b0/0x4b0 [ 142.557038][ T30] event_handler+0x2b0/0x4b0 [ 142.557051][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 142.557066][ T30] process_scheduled_works+0xa8e/0x14e0 [ 142.557094][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.557110][ T30] ? assign_work+0x3cf/0x5d0 [ 142.557123][ T30] worker_thread+0xa47/0xfb0 [ 142.557145][ T30] kthread+0x388/0x470 [ 142.557163][ T30] ? __pfx_worker_thread+0x10/0x10 [ 142.557176][ T30] ? __pfx_kthread+0x10/0x10 [ 142.557192][ T30] ret_from_fork+0x514/0xb70 [ 142.557211][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 142.557229][ T30] ? __switch_to+0xc89/0x1420 [ 142.557247][ T30] ? __pfx_kthread+0x10/0x10 [ 142.557264][ T30] ret_from_fork_asm+0x1a/0x30 [ 142.557281][ T30] [ 142.557286][ T30] [ 142.645097][ T30] Allocated by task 1: [ 142.646990][ T30] kasan_save_track+0x3e/0x80 [ 142.649211][ T30] __kasan_kmalloc+0x93/0xb0 [ 142.651476][ T30] __kmalloc_noprof+0x375/0x720 [ 142.653990][ T30] __usb_create_hcd+0x67/0x900 [ 142.656335][ T30] vhci_hcd_probe+0x1e6/0x3e0 [ 142.659112][ T30] platform_probe+0xf9/0x190 [ 142.661754][ T30] really_probe+0x254/0xae0 [ 142.664377][ T30] __driver_probe_device+0x1e8/0x360 [ 142.667278][ T30] driver_probe_device+0x4f/0x240 [ 142.669770][ T30] __device_attach_driver+0x270/0x410 [ 142.672476][ T30] bus_for_each_drv+0x258/0x2f0 [ 142.674710][ T30] __device_attach+0x2c4/0x450 [ 142.676865][ T30] device_initial_probe+0xa1/0xd0 [ 142.679339][ T30] bus_probe_device+0x12a/0x220 [ 142.681788][ T30] device_add+0x7d7/0xb80 [ 142.683775][ T30] platform_device_add+0x4bd/0x860 [ 142.686560][ T30] platform_device_register_full+0x62d/0x710 [ 142.689651][ T30] vhci_hcd_init+0x227/0x360 [ 142.691920][ T30] do_one_initcall+0x250/0x870 [ 142.694165][ T30] do_initcall_level+0x10a/0x1a0 [ 142.696376][ T30] do_initcalls+0x59/0xa0 [ 142.698381][ T30] kernel_init_freeable+0x29d/0x3e0 [ 142.700885][ T30] kernel_init+0x1d/0x1d0 [ 142.702995][ T30] ret_from_fork+0x514/0xb70 [ 142.705271][ T30] ret_from_fork_asm+0x1a/0x30 [ 142.707664][ T30] [ 142.709060][ T30] Freed by task 5338: [ 142.711796][ T30] kasan_save_track+0x3e/0x80 [ 142.714847][ T30] kasan_save_free_info+0x40/0x50 [ 142.717405][ T30] __kasan_slab_free+0x5c/0x80 [ 142.719981][ T30] kfree+0x1c5/0x640 [ 142.722036][ T30] vhci_hcd_remove+0x9e/0x110 [ 142.725090][ T30] device_release_driver_internal+0x48b/0x880 [ 142.728708][ T30] unbind_store+0x1a1/0x1d0 [ 142.730792][ T30] kernfs_fop_write_iter+0x3a4/0x540 [ 142.733218][ T30] vfs_write+0x612/0xba0 [ 142.735672][ T30] ksys_write+0x150/0x270 [ 142.738774][ T30] do_syscall_64+0x174/0x580 [ 142.741261][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.743941][ T30] [ 142.745070][ T30] Last potentially related work creation: [ 142.747633][ T30] kasan_save_stack+0x3e/0x60 [ 142.750136][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 142.753275][ T30] insert_work+0x3d/0x330 [ 142.755806][ T30] __queue_work+0xcd8/0x10a0 [ 142.758100][ T30] queue_work_on+0x106/0x1d0 [ 142.760618][ T30] unlink1+0x344/0x3e0 [ 142.763058][ T30] usb_hcd_unlink_urb+0xe6/0x1e0 [ 142.766112][ T30] usb_kill_urb+0x10b/0x2f0 [ 142.769042][ T30] hub_quiesce+0x211/0x330 [ 142.771538][ T30] hub_suspend+0x904/0xad0 [ 142.773819][ T30] usb_suspend_both+0x285/0x1040 [ 142.776527][ T30] usb_runtime_suspend+0x58/0x110 [ 142.779746][ T30] __rpm_callback+0x2c7/0x950 [ 142.782605][ T30] rpm_suspend+0x8a0/0x17b0 [ 142.785023][ T30] __pm_runtime_suspend+0x12f/0x1a0 [ 142.787613][ T30] usb_new_device+0xadf/0x1620 [ 142.790313][ T30] register_root_hub+0x250/0x5c0 [ 142.793414][ T30] usb_add_hcd+0xac7/0xf80 [ 142.796080][ T30] vhci_hcd_probe+0x1fa/0x3e0 [ 142.798853][ T30] platform_probe+0xf9/0x190 [ 142.801456][ T30] really_probe+0x254/0xae0 [ 142.804289][ T30] __driver_probe_device+0x1e8/0x360 [ 142.807790][ T30] driver_probe_device+0x4f/0x240 [ 142.810770][ T30] __device_attach_driver+0x270/0x410 [ 142.813357][ T30] bus_for_each_drv+0x258/0x2f0 [ 142.816335][ T30] __device_attach+0x2c4/0x450 [ 142.819742][ T30] device_initial_probe+0xa1/0xd0 [ 142.822815][ T30] bus_probe_device+0x12a/0x220 [ 142.825248][ T30] device_add+0x7d7/0xb80 [ 142.827007][ T30] platform_device_add+0x4bd/0x860 [ 142.829727][ T30] platform_device_register_full+0x62d/0x710 [ 142.833713][ T30] vhci_hcd_init+0x227/0x360 [ 142.836577][ T30] do_one_initcall+0x250/0x870 [ 142.839003][ T30] do_initcall_level+0x10a/0x1a0 [ 142.841598][ T30] do_initcalls+0x59/0xa0 [ 142.844139][ T30] kernel_init_freeable+0x29d/0x3e0 [ 142.847245][ T30] kernel_init+0x1d/0x1d0 [ 142.849536][ T30] ret_from_fork+0x514/0xb70 [ 142.851922][ T30] ret_from_fork_asm+0x1a/0x30 [ 142.854403][ T30] [ 142.855691][ T30] Second to last potentially related work creation: [ 142.859616][ T30] kasan_save_stack+0x3e/0x60 [ 142.862079][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 142.864559][ T30] insert_work+0x3d/0x330 [ 142.866616][ T30] __queue_work+0xcd8/0x10a0 [ 142.869164][ T30] queue_work_on+0x106/0x1d0 [ 142.871755][ T30] usb_hcd_submit_urb+0xa3b/0x1b60 [ 142.874484][ T30] usb_start_wait_urb+0x13f/0x5b0 [ 142.876962][ T30] usb_control_msg+0x234/0x3e0 [ 142.879363][ T30] hub_suspend+0x891/0xad0 [ 142.882117][ T30] usb_suspend_both+0x285/0x1040 [ 142.885209][ T30] usb_runtime_suspend+0x58/0x110 [ 142.887995][ T30] __rpm_callback+0x2c7/0x950 [ 142.890105][ T30] rpm_suspend+0x8a0/0x17b0 [ 142.892221][ T30] __pm_runtime_suspend+0x12f/0x1a0 [ 142.894838][ T30] usb_new_device+0xadf/0x1620 [ 142.897596][ T30] register_root_hub+0x250/0x5c0 [ 142.900322][ T30] usb_add_hcd+0xac7/0xf80 [ 142.902544][ T30] vhci_hcd_probe+0x1fa/0x3e0 [ 142.905016][ T30] platform_probe+0xf9/0x190 [ 142.907878][ T30] really_probe+0x254/0xae0 [ 142.910920][ T30] __driver_probe_device+0x1e8/0x360 [ 142.913729][ T30] driver_probe_device+0x4f/0x240 [ 142.916396][ T30] __device_attach_driver+0x270/0x410 [ 142.919356][ T30] bus_for_each_drv+0x258/0x2f0 [ 142.922621][ T30] __device_attach+0x2c4/0x450 [ 142.925902][ T30] device_initial_probe+0xa1/0xd0 [ 142.928094][ T30] bus_probe_device+0x12a/0x220 [ 142.930501][ T30] device_add+0x7d7/0xb80 [ 142.932903][ T30] platform_device_add+0x4bd/0x860 [ 142.936178][ T30] platform_device_register_full+0x62d/0x710 [ 142.939446][ T30] vhci_hcd_init+0x227/0x360 [ 142.941732][ T30] do_one_initcall+0x250/0x870 [ 142.944429][ T30] do_initcall_level+0x10a/0x1a0 [ 142.947272][ T30] do_initcalls+0x59/0xa0 [ 142.950185][ T30] kernel_init_freeable+0x29d/0x3e0 [ 142.953013][ T30] kernel_init+0x1d/0x1d0 [ 142.955045][ T30] ret_from_fork+0x514/0xb70 [ 142.957176][ T30] ret_from_fork_asm+0x1a/0x30 [ 142.959649][ T30] [ 142.960873][ T30] The buggy address belongs to the object at ffff8880349ec000 [ 142.960873][ T30] which belongs to the cache kmalloc-8k of size 8192 [ 142.968895][ T30] The buggy address is located 1736 bytes inside of [ 142.968895][ T30] freed 8192-byte region [ffff8880349ec000, ffff8880349ee000) [ 142.975694][ T30] [ 142.977032][ T30] The buggy address belongs to the physical page: [ 142.980414][ T30] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x349e8 [ 142.984722][ T30] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.989162][ T30] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 142.993848][ T30] page_type: f5(slab) [ 142.995605][ T30] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 142.999317][ T30] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 143.004222][ T30] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 143.008149][ T30] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 143.011781][ T30] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 143.017219][ T30] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 143.020999][ T30] page dumped because: kasan: bad access detected [ 143.023829][ T30] page_owner tracks the page as allocated [ 143.027276][ T30] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20253910678, free_ts 20180925322 [ 143.038262][ T30] post_alloc_hook+0x1f9/0x250 [ 143.041327][ T30] get_page_from_freelist+0x21fa/0x2270 [ 143.044132][ T30] __alloc_frozen_pages_noprof+0x18d/0x380 [ 143.046798][ T30] allocate_slab+0x79/0x5e0 [ 143.049175][ T30] refill_objects+0x2d5/0x350 [ 143.052141][ T30] __pcs_replace_empty_main+0x2bf/0x6b0 [ 143.055810][ T30] __kmalloc_noprof+0x485/0x720 [ 143.058309][ T30] __usb_create_hcd+0x67/0x900 [ 143.060577][ T30] vhci_hcd_probe+0x1e6/0x3e0 [ 143.063374][ T30] platform_probe+0xf9/0x190 [ 143.066479][ T30] really_probe+0x254/0xae0 [ 143.069198][ T30] __driver_probe_device+0x1e8/0x360 [ 143.071850][ T30] driver_probe_device+0x4f/0x240 [ 143.074501][ T30] __device_attach_driver+0x270/0x410 [ 143.077672][ T30] bus_for_each_drv+0x258/0x2f0 [ 143.080653][ T30] __device_attach+0x2c4/0x450 [ 143.083120][ T30] page last free pid 1247 tgid 1247 stack trace: [ 143.086111][ T30] free_pages_prepare+0x960/0xa60 [ 143.088722][ T30] __free_contig_range_common+0x174/0x340 [ 143.091990][ T30] free_pages_bulk+0x48/0x120 [ 143.094438][ T30] vfree+0x224/0x4a0 [ 143.096316][ T30] delayed_vfree_work+0x55/0x80 [ 143.098676][ T30] process_scheduled_works+0xa8e/0x14e0 [ 143.101177][ T30] worker_thread+0xa47/0xfb0 [ 143.103379][ T30] kthread+0x388/0x470 [ 143.105388][ T30] ret_from_fork+0x514/0xb70 [ 143.107654][ T30] ret_from_fork_asm+0x1a/0x30 [ 143.109742][ T30] [ 143.110775][ T30] Memory state around the buggy address: [ 143.113121][ T30] ffff8880349ec580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.116867][ T30] ffff8880349ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.120258][ T30] >ffff8880349ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.123525][ T30] ^ [ 143.126532][ T30] ffff8880349ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.131471][ T30] ffff8880349ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.135471][ T30] ================================================================== [ 143.139355][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.142905][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 PREEMPT(full) [ 143.147129][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.151534][ T30] Workqueue: usbip_event event_handler [ 143.154496][ T30] Call Trace: [ 143.156184][ T30] [ 143.157623][ T30] vpanic+0x56c/0xa60 [ 143.159400][ T30] ? __pfx_vpanic+0x10/0x10 [ 143.161438][ T30] panic+0xc5/0xd0 [ 143.163173][ T30] ? __pfx_panic+0x10/0x10 [ 143.165580][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.168297][ T30] ? rcu_is_watching+0x15/0xb0 [ 143.170337][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.172696][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.174998][ T30] check_panic_on_warn+0x89/0xb0 [ 143.177133][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.179478][ T30] end_report+0x73/0x170 [ 143.181363][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.183578][ T30] kasan_report+0x128/0x150 [ 143.185341][ T30] ? _raw_spin_lock_irqsave+0x40/0x60 [ 143.187408][ T30] ? event_handler+0x2b0/0x4b0 [ 143.189226][ T30] __kasan_check_byte+0x2a/0x40 [ 143.191214][ T30] lock_acquire+0x84/0x350 [ 143.193137][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.195538][ T30] ? rcu_is_watching+0x15/0xb0 [ 143.197408][ T30] _raw_spin_lock_irqsave+0x40/0x60 [ 143.199570][ T30] ? event_handler+0x2b0/0x4b0 [ 143.201770][ T30] event_handler+0x2b0/0x4b0 [ 143.204048][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 143.206899][ T30] process_scheduled_works+0xa8e/0x14e0 [ 143.209888][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.212525][ T30] ? assign_work+0x3cf/0x5d0 [ 143.214942][ T30] worker_thread+0xa47/0xfb0 [ 143.217383][ T30] kthread+0x388/0x470 [ 143.219683][ T30] ? __pfx_worker_thread+0x10/0x10 [ 143.222213][ T30] ? __pfx_kthread+0x10/0x10 [ 143.224250][ T30] ret_from_fork+0x514/0xb70 [ 143.226171][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 143.228368][ T30] ? __switch_to+0xc89/0x1420 [ 143.230475][ T30] ? __pfx_kthread+0x10/0x10 [ 143.232490][ T30] ret_from_fork_asm+0x1a/0x30 [ 143.234654][ T30] [ 143.236563][ T30] Kernel Offset: disabled [ 143.238925][ T30] Rebooting in 86400 seconds..