program: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}]}}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x2e40, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xb, 0xffec}, {0x0, 0xfff1}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x24041080) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}]}}) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x2e40, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2e, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xb, 0xffec}, {0x0, 0xfff1}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x24041080) (async) [ 85.942022][ T5307] vhci_hcd vhci_hcd.0: remove, state 4 [ 85.950626][ T5307] usb usb7: USB disconnect, device number 1 [ 86.124515][ T5272] Bluetooth: hci0: command tx timeout [ 86.177907][ T181] vhci_hcd vhci_hcd.0: stop threads [ 86.180788][ T181] vhci_hcd vhci_hcd.0: release socket [ 86.182834][ T181] vhci_hcd vhci_hcd.0: disconnect device [ 86.187970][ T181] vhci_hcd vhci_hcd.0: stop threads [ 86.191208][ T181] vhci_hcd vhci_hcd.0: release socket [ 86.195459][ T5307] vhci_hcd vhci_hcd.0: USB bus 7 deregistered [ 86.198691][ T181] vhci_hcd vhci_hcd.0: disconnect device [ 86.206002][ T181] vhci_hcd vhci_hcd.0: stop threads [ 86.211823][ T181] vhci_hcd vhci_hcd.0: release socket [ 86.219707][ T181] vhci_hcd vhci_hcd.0: disconnect device [ 86.223290][ T5307] vhci_hcd vhci_hcd.0: remove, state 4 [ 86.233059][ T181] ================================================================== [ 86.236465][ T181] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 86.239603][ T181] Read of size 1 at addr ffff888034dd0918 by task kworker/u4:6/181 [ 86.242807][ T181] [ 86.243790][ T181] CPU: 0 UID: 0 PID: 181 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) [ 86.243804][ T181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.243812][ T181] Workqueue: usbip_event event_handler [ 86.243827][ T181] Call Trace: [ 86.243834][ T181] [ 86.243838][ T181] dump_stack_lvl+0xe8/0x150 [ 86.243854][ T181] print_address_description+0x55/0x1e0 [ 86.243868][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.243879][ T181] print_report+0x58/0x70 [ 86.243891][ T181] kasan_report+0x117/0x150 [ 86.243904][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.243915][ T181] ? event_handler+0x2b0/0x4b0 [ 86.243924][ T181] __kasan_check_byte+0x2a/0x40 [ 86.243943][ T181] lock_acquire+0x84/0x350 [ 86.243957][ T181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.243968][ T181] ? rcu_is_watching+0x16/0xb0 [ 86.243979][ T181] _raw_spin_lock_irqsave+0x40/0x60 [ 86.243988][ T181] ? event_handler+0x2b0/0x4b0 [ 86.243997][ T181] event_handler+0x2b0/0x4b0 [ 86.244007][ T181] ? process_scheduled_works+0x97a/0x1630 [ 86.244019][ T181] process_scheduled_works+0xc3d/0x1630 [ 86.244037][ T181] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.244048][ T181] ? assign_work+0x3cf/0x5d0 [ 86.244060][ T181] worker_thread+0xa47/0xfb0 [ 86.244074][ T181] ? __kthread_parkme+0x71/0x1f0 [ 86.244089][ T181] kthread+0x38b/0x480 [ 86.244102][ T181] ? __pfx_worker_thread+0x10/0x10 [ 86.244112][ T181] ? __pfx_kthread+0x10/0x10 [ 86.244126][ T181] ret_from_fork+0x514/0xb70 [ 86.244140][ T181] ? __pfx_ret_from_fork+0x10/0x10 [ 86.244153][ T181] ? __switch_to+0xc89/0x1420 [ 86.244165][ T181] ? __pfx_kthread+0x10/0x10 [ 86.244179][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.244196][ T181] [ 86.244200][ T181] [ 86.314231][ T181] Allocated by task 1: [ 86.315857][ T181] kasan_save_track+0x3e/0x80 [ 86.317782][ T181] __kasan_kmalloc+0x93/0xb0 [ 86.319668][ T181] __kmalloc_noprof+0x379/0x720 [ 86.321587][ T181] __usb_create_hcd+0x67/0x900 [ 86.323489][ T181] vhci_hcd_probe+0x1e6/0x3e0 [ 86.325335][ T181] platform_probe+0xf9/0x190 [ 86.327137][ T181] really_probe+0x254/0xae0 [ 86.328912][ T181] __driver_probe_device+0x1e8/0x360 [ 86.330930][ T181] driver_probe_device+0x4f/0x240 [ 86.332703][ T181] __device_attach_driver+0x270/0x410 [ 86.334769][ T181] bus_for_each_drv+0x258/0x2f0 [ 86.336733][ T181] __device_attach+0x2c4/0x450 [ 86.338611][ T181] device_initial_probe+0xa1/0xd0 [ 86.340548][ T181] bus_probe_device+0x12a/0x220 [ 86.342206][ T181] device_add+0x7d7/0xb80 [ 86.343658][ T181] platform_device_add+0x4bd/0x860 [ 86.345392][ T181] platform_device_register_full+0x53a/0x620 [ 86.347425][ T181] vhci_hcd_init+0x227/0x360 [ 86.349030][ T181] do_one_initcall+0x250/0x870 [ 86.350765][ T181] do_initcall_level+0x10a/0x1a0 [ 86.352658][ T181] do_initcalls+0x59/0xa0 [ 86.354177][ T181] kernel_init_freeable+0x29d/0x3e0 [ 86.355896][ T181] kernel_init+0x22/0x1d0 [ 86.357601][ T181] ret_from_fork+0x514/0xb70 [ 86.359396][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.361304][ T181] [ 86.362293][ T181] Freed by task 5307: [ 86.363897][ T181] kasan_save_track+0x3e/0x80 [ 86.365767][ T181] kasan_save_free_info+0x40/0x50 [ 86.367889][ T181] __kasan_slab_free+0x5c/0x80 [ 86.369884][ T181] kfree+0x1c5/0x640 [ 86.371542][ T181] vhci_hcd_remove+0x9e/0x110 [ 86.373515][ T181] device_release_driver_internal+0x48b/0x880 [ 86.375978][ T181] unbind_store+0x1a1/0x1d0 [ 86.378155][ T181] kernfs_fop_write_iter+0x3a4/0x540 [ 86.380781][ T181] vfs_write+0x612/0xba0 [ 86.382923][ T181] ksys_write+0x150/0x270 [ 86.385157][ T181] do_syscall_64+0x166/0x520 [ 86.387175][ T181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.389641][ T181] [ 86.390695][ T181] Last potentially related work creation: [ 86.393088][ T181] kasan_save_stack+0x3e/0x60 [ 86.395043][ T181] kasan_record_aux_stack+0xbd/0xd0 [ 86.397165][ T181] insert_work+0x3d/0x330 [ 86.398933][ T181] __queue_work+0xd07/0x10d0 [ 86.400825][ T181] queue_work_on+0x106/0x1d0 [ 86.402742][ T181] unlink1+0x344/0x3e0 [ 86.404476][ T181] usb_hcd_unlink_urb+0xe6/0x1e0 [ 86.406854][ T181] usb_kill_urb+0x10b/0x2f0 [ 86.408957][ T181] hub_quiesce+0x211/0x330 [ 86.410846][ T181] hub_suspend+0x904/0xad0 [ 86.412678][ T181] usb_suspend_both+0x285/0x1040 [ 86.414755][ T181] usb_runtime_suspend+0x58/0x110 [ 86.416838][ T181] __rpm_callback+0x2c7/0x950 [ 86.418801][ T181] rpm_suspend+0x89d/0x17a0 [ 86.420699][ T181] __pm_runtime_suspend+0x12f/0x1a0 [ 86.422890][ T181] usb_runtime_idle+0x76/0x90 [ 86.424842][ T181] rpm_idle+0x5b4/0x980 [ 86.426584][ T181] pm_runtime_work+0x11e/0x1b0 [ 86.428239][ T181] process_scheduled_works+0xc3d/0x1630 [ 86.430479][ T181] worker_thread+0xa47/0xfb0 [ 86.432419][ T181] kthread+0x38b/0x480 [ 86.434151][ T181] ret_from_fork+0x514/0xb70 [ 86.436113][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.438191][ T181] [ 86.439220][ T181] Second to last potentially related work creation: [ 86.441906][ T181] kasan_save_stack+0x3e/0x60 [ 86.443871][ T181] kasan_record_aux_stack+0xbd/0xd0 [ 86.446132][ T181] insert_work+0x3d/0x330 [ 86.447986][ T181] __queue_work+0xd07/0x10d0 [ 86.449965][ T181] queue_work_on+0x106/0x1d0 [ 86.451936][ T181] usb_hcd_submit_urb+0xa3b/0x1b60 [ 86.454099][ T181] usb_start_wait_urb+0x13f/0x5b0 [ 86.456238][ T181] usb_control_msg+0x234/0x3e0 [ 86.458122][ T181] hub_suspend+0x891/0xad0 [ 86.459650][ T181] usb_suspend_both+0x285/0x1040 [ 86.461465][ T181] usb_runtime_suspend+0x58/0x110 [ 86.463236][ T181] __rpm_callback+0x2c7/0x950 [ 86.464852][ T181] rpm_suspend+0x89d/0x17a0 [ 86.466478][ T181] __pm_runtime_suspend+0x12f/0x1a0 [ 86.468301][ T181] usb_runtime_idle+0x76/0x90 [ 86.469947][ T181] rpm_idle+0x5b4/0x980 [ 86.471428][ T181] pm_runtime_work+0x11e/0x1b0 [ 86.473096][ T181] process_scheduled_works+0xc3d/0x1630 [ 86.475030][ T181] worker_thread+0xa47/0xfb0 [ 86.476647][ T181] kthread+0x38b/0x480 [ 86.478108][ T181] ret_from_fork+0x514/0xb70 [ 86.479700][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.481379][ T181] [ 86.482229][ T181] The buggy address belongs to the object at ffff888034dd0000 [ 86.482229][ T181] which belongs to the cache kmalloc-8k of size 8192 [ 86.487003][ T181] The buggy address is located 2328 bytes inside of [ 86.487003][ T181] freed 8192-byte region [ffff888034dd0000, ffff888034dd2000) [ 86.491465][ T181] [ 86.492312][ T181] The buggy address belongs to the physical page: [ 86.494510][ T181] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34dd0 [ 86.497665][ T181] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.500460][ T181] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 86.503210][ T181] page_type: f5(slab) [ 86.504790][ T181] raw: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 86.508309][ T181] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.511335][ T181] head: 04fff00000000040 ffff88801b042280 dead000000000122 0000000000000000 [ 86.515268][ T181] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.519073][ T181] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 86.522666][ T181] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.526193][ T181] page dumped because: kasan: bad access detected [ 86.528848][ T181] page_owner tracks the page as allocated [ 86.531060][ T181] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16308458748 [ 86.538121][ T181] post_alloc_hook+0x1f9/0x250 [ 86.539967][ T181] get_page_from_freelist+0x2209/0x2280 [ 86.542176][ T181] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 86.544431][ T181] allocate_slab+0x7c/0x5e0 [ 86.546170][ T181] refill_objects+0x2d5/0x350 [ 86.548037][ T181] __pcs_replace_empty_main+0x2c3/0x6b0 [ 86.550086][ T181] __kmalloc_noprof+0x489/0x720 [ 86.551936][ T181] __usb_create_hcd+0x67/0x900 [ 86.553702][ T181] vhci_hcd_probe+0x104/0x3e0 [ 86.555689][ T181] platform_probe+0xf9/0x190 [ 86.557406][ T181] really_probe+0x254/0xae0 [ 86.559149][ T181] __driver_probe_device+0x1e8/0x360 [ 86.561280][ T181] driver_probe_device+0x4f/0x240 [ 86.563123][ T181] __device_attach_driver+0x270/0x410 [ 86.565319][ T181] bus_for_each_drv+0x258/0x2f0 [ 86.567151][ T181] __device_attach+0x2c4/0x450 [ 86.569029][ T181] page last free pid 804 tgid 804 ts 16284690941 stack trace: [ 86.571873][ T181] free_pages_prepare+0x9eb/0xaf0 [ 86.573668][ T181] __free_contig_range_common+0x174/0x340 [ 86.575737][ T181] free_pages_bulk+0x48/0x120 [ 86.577341][ T181] vfree+0x226/0x4a0 [ 86.578865][ T181] delayed_vfree_work+0x55/0x80 [ 86.580840][ T181] process_scheduled_works+0xc3d/0x1630 [ 86.583130][ T181] worker_thread+0xa47/0xfb0 [ 86.585007][ T181] kthread+0x38b/0x480 [ 86.586725][ T181] ret_from_fork+0x514/0xb70 [ 86.588675][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.590647][ T181] [ 86.591681][ T181] Memory state around the buggy address: [ 86.593961][ T181] ffff888034dd0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.597262][ T181] ffff888034dd0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.600368][ T181] >ffff888034dd0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.603358][ T181] ^ [ 86.605011][ T181] ffff888034dd0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.608014][ T181] ffff888034dd0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.610632][ T181] ================================================================== [ 86.613376][ T181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.615753][ T181] CPU: 0 UID: 0 PID: 181 Comm: kworker/u4:6 Not tainted syzkaller #0 PREEMPT(full) [ 86.618892][ T181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.622161][ T181] Workqueue: usbip_event event_handler [ 86.623921][ T181] Call Trace: [ 86.625056][ T181] [ 86.626070][ T181] vpanic+0x56d/0xa60 [ 86.627430][ T181] ? __pfx_vpanic+0x10/0x10 [ 86.628926][ T181] panic+0xc5/0xd0 [ 86.630194][ T181] ? __pfx_panic+0x10/0x10 [ 86.631652][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.633373][ T181] ? rcu_is_watching+0x16/0xb0 [ 86.634989][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.636793][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.638660][ T181] check_panic_on_warn+0x89/0xb0 [ 86.640286][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.642090][ T181] end_report+0x73/0x170 [ 86.643540][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.645313][ T181] kasan_report+0x128/0x150 [ 86.646900][ T181] ? _raw_spin_lock_irqsave+0x40/0x60 [ 86.648650][ T181] ? event_handler+0x2b0/0x4b0 [ 86.650251][ T181] __kasan_check_byte+0x2a/0x40 [ 86.651814][ T181] lock_acquire+0x84/0x350 [ 86.653293][ T181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.655200][ T181] ? rcu_is_watching+0x16/0xb0 [ 86.656836][ T181] _raw_spin_lock_irqsave+0x40/0x60 [ 86.658633][ T181] ? event_handler+0x2b0/0x4b0 [ 86.660200][ T181] event_handler+0x2b0/0x4b0 [ 86.661976][ T181] ? process_scheduled_works+0x97a/0x1630 [ 86.663807][ T181] process_scheduled_works+0xc3d/0x1630 [ 86.665631][ T181] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.667605][ T181] ? assign_work+0x3cf/0x5d0 [ 86.669163][ T181] worker_thread+0xa47/0xfb0 [ 86.670772][ T181] ? __kthread_parkme+0x71/0x1f0 [ 86.672344][ T181] kthread+0x38b/0x480 [ 86.673651][ T181] ? __pfx_worker_thread+0x10/0x10 [ 86.675271][ T181] ? __pfx_kthread+0x10/0x10 [ 86.676783][ T181] ret_from_fork+0x514/0xb70 [ 86.678250][ T181] ? __pfx_ret_from_fork+0x10/0x10 [ 86.679814][ T181] ? __switch_to+0xc89/0x1420 [ 86.681271][ T181] ? __pfx_kthread+0x10/0x10 [ 86.682757][ T181] ret_from_fork_asm+0x1a/0x30 [ 86.684345][ T181] [ 86.685742][ T181] Kernel Offset: disabled [ 86.687194][ T181] Rebooting in 86400 seconds..