./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1824740513 <...> DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d forked to background, child pid 3188 [ 27.501948][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.514961][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. execve("./syz-executor1824740513", ["./syz-executor1824740513"], 0x7fff911472c0 /* 10 vars */) = 0 brk(NULL) = 0x5555556aa000 brk(0x5555556aad40) = 0x5555556aad40 arch_prctl(ARCH_SET_FS, 0x5555556aa400) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555556aa6d0) = 3616 set_robust_list(0x5555556aa6e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f13bfe909e0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f13bfe8ff30}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f13bfe90a80, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f13bfe8ff30}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1824740513", 4096) = 28 brk(0x5555556cbd40) = 0x5555556cbd40 brk(0x5555556cc000) = 0x5555556cc000 mprotect(0x7f13bff51000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f13bfe8b2b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f13bfe8ff30}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f13bfe8b2b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f13bfe8ff30}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3617 attached , child_tidptr=0x5555556aa6d0) = 3617 [pid 3617] set_robust_list(0x5555556aa6e0, 24) = 0 [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setpgid(0, 0) = 0 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1000", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13bfe60000 [pid 3617] mprotect(0x7f13bfe61000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3617] clone(child_stack=0x7f13bfe802f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3618], tls=0x7f13bfe80700, child_tidptr=0x7f13bfe809d0) = 3618 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3618 attached [pid 3618] set_robust_list(0x7f13bfe809e0, 24) = 0 [pid 3618] io_uring_setup(9063, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 3618] mmap(0x205a1000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x205a1000 [pid 3618] mmap(0x20b13000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20b13000 [pid 3618] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = 0 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3618] <... futex resumed>) = 1 [pid 3618] mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 [pid 3618] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] <... futex resumed>) = 0 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC [pid 3617] <... futex resumed>) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3618] <... userfaultfd resumed>) = 4 [pid 3618] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] <... futex resumed>) = 0 [pid 3618] ioctl(4, UFFDIO_API, 0x20000000 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3618] <... ioctl resumed>) = 0 [pid 3618] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = 0 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3618] <... futex resumed>) = 1 [pid 3618] ioctl(4, UFFDIO_REGISTER, 0x20000080) = 0 [pid 3618] futex(0x7f13bff5740c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] <... futex resumed>) = 0 [pid 3617] futex(0x7f13bff57408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3617] futex(0x7f13bff5740c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3617] futex(0x7f13bff5741c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f13bfe3f000 [pid 3617] mprotect(0x7f13bfe40000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3617] clone(child_stack=0x7f13bfe5f2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3619 attached , parent_tid=[3619], tls=0x7f13bfe5f700, child_tidptr=0x7f13bfe5f9d0) = 3619 [pid 3617] futex(0x7f13bff57418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f13bff5741c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] set_robust_list(0x7f13bfe5f9e0, 24) = 0 syzkaller login: [ 50.664771][ T3619] ================================================================== [ 50.664780][ T3619] BUG: KASAN: use-after-free in mas_next_nentry+0x9e4/0xab0 [ 50.664813][ T3619] Read of size 8 at addr ffff88807b281420 by task syz-executor182/3619 [ 50.664824][ T3619] [ 50.664827][ T3619] CPU: 0 PID: 3619 Comm: syz-executor182 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0 [ 50.664841][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.664848][ T3619] Call Trace: [ 50.664852][ T3619] [ 50.664856][ T3619] dump_stack_lvl+0xcd/0x134 [ 50.664870][ T3619] print_address_description.constprop.0.cold+0xeb/0x495 [ 50.664887][ T3619] ? mas_next_nentry+0x9e4/0xab0 [ 50.664903][ T3619] kasan_report.cold+0xf4/0x1c6 [ 50.664915][ T3619] ? mas_next_nentry+0x9e4/0xab0 [ 50.664932][ T3619] mas_next_nentry+0x9e4/0xab0 [ 50.664952][ T3619] mas_next+0x1fb/0xc90 [ 50.664971][ T3619] userfaultfd_ioctl+0x344c/0x41f0 [ 50.664987][ T3619] ? userfaultfd_read+0x1900/0x1900 [ 50.665002][ T3619] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 50.665019][ T3619] ? lockdep_hardirqs_on+0x79/0x100 [ 50.665038][ T3619] ? llsec_iter_devs+0x700/0x740 [ 50.665059][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.665079][ T3619] ? userfaultfd_read+0x1900/0x1900 [ 50.665090][ T3619] __x64_sys_ioctl+0x193/0x200 [ 50.665109][ T3619] do_syscall_64+0x35/0xb0 [ 50.665125][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.665139][ T3619] RIP: 0033:0x7f13bfecee99 [ 50.665149][ T3619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.665161][ T3619] RSP: 002b:00007f13bfe5f208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.665174][ T3619] RAX: ffffffffffffffda RBX: 00007f13bff57418 RCX: 00007f13bfecee99 [ 50.665182][ T3619] RDX: 00000000200000c0 RSI: 000000008010aa01 RDI: 0000000000000004 [ 50.665190][ T3619] RBP: 00007f13bff57410 R08: 00007f13bfe5f700 R09: 00007f13bff57418 [ 50.665198][ T3619] R10: 00007f13bfe5f700 R11: 0000000000000246 R12: 00007f13bff5741c [ 50.665215][ T3619] R13: 00007fffe9d11aef R14: 00007f13bfe5f300 R15: 0000000000022000 [ 50.665234][ T3619] [ 50.665240][ T3619] [ 50.665242][ T3619] Allocated by task 3616: [ 50.665250][ T3619] kasan_save_stack+0x1e/0x40 [ 50.665269][ T3619] __kasan_slab_alloc+0x90/0xc0 [ 50.665286][ T3619] kmem_cache_alloc_bulk+0x39f/0x720 [ 50.665306][ T3619] mas_alloc_nodes+0x1df/0x6b0 [ 50.665321][ T3619] mas_node_count+0x101/0x130 [ 50.665335][ T3619] mas_wr_modify+0x24a1/0x5a50 [ 50.665351][ T3619] mas_wr_store_entry.isra.0+0x5c3/0xf90 [ 50.665368][ T3619] mas_store+0xac/0xf0 [ 50.665383][ T3619] dup_mmap+0x88a/0x1090 [ 50.665396][ T3619] dup_mm+0x91/0x370 [ 50.665407][ T3619] copy_process+0x3c95/0x7080 [ 50.665419][ T3619] kernel_clone+0xe7/0xab0 [ 50.665432][ T3619] __do_sys_clone+0xba/0x100 [ 50.665444][ T3619] do_syscall_64+0x35/0xb0 [ 50.665458][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.665470][ T3619] [ 50.665472][ T3619] Freed by task 3619: [ 50.665477][ T3619] kasan_save_stack+0x1e/0x40 [ 50.665487][ T3619] kasan_set_track+0x21/0x30 [ 50.665496][ T3619] kasan_set_free_info+0x20/0x30 [ 50.665509][ T3619] ____kasan_slab_free+0x166/0x1a0 [ 50.665519][ T3619] slab_free_freelist_hook+0x8b/0x1c0 [ 50.665536][ T3619] kmem_cache_free_bulk+0x2c0/0xb60 [ 50.665546][ T3619] mas_destroy+0x394/0x5c0 [ 50.665562][ T3619] mas_store_prealloc+0xec/0x150 [ 50.665578][ T3619] __vma_adjust+0x6d7/0x1900 [ 50.665590][ T3619] __split_vma+0x443/0x530 [ 50.665601][ T3619] split_vma+0x9f/0xe0 [ 50.665612][ T3619] userfaultfd_ioctl+0x3896/0x41f0 [ 50.665622][ T3619] __x64_sys_ioctl+0x193/0x200 [ 50.665638][ T3619] do_syscall_64+0x35/0xb0 [ 50.665651][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.665664][ T3619] [ 50.665666][ T3619] The buggy address belongs to the object at ffff88807b281400 [ 50.665666][ T3619] which belongs to the cache maple_node of size 256 [ 50.665675][ T3619] The buggy address is located 32 bytes inside of [ 50.665675][ T3619] 256-byte region [ffff88807b281400, ffff88807b281500) [ 50.665685][ T3619] [ 50.665687][ T3619] The buggy address belongs to the physical page: [ 50.665691][ T3619] page:ffffea0001eca000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b280 [ 50.665706][ T3619] head:ffffea0001eca000 order:1 compound_mapcount:0 compound_pincount:0 [ 50.665715][ T3619] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 50.665732][ T3619] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801184fdc0 [ 50.665743][ T3619] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 50.665748][ T3619] page dumped because: kasan: bad access detected [ 50.665753][ T3619] page_owner tracks the page as allocated [ 50.665756][ T3619] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3616, tgid 3616 (syz-executor182), ts 50584920245, free_ts 50521645564 [ 50.665779][ T3619] get_page_from_freelist+0xa64/0x3d10 [ 50.665794][ T3619] __alloc_pages+0x1c7/0x510 [ 50.665806][ T3619] alloc_pages+0x1aa/0x310 [ 50.665817][ T3619] allocate_slab+0x26c/0x3c0 [ 50.665832][ T3619] ___slab_alloc+0x985/0xd90 [ 50.665849][ T3619] __slab_alloc.constprop.0+0x4d/0xa0 [ 50.665866][ T3619] kmem_cache_alloc+0x360/0x3b0 [ 50.665884][ T3619] mas_alloc_nodes+0x377/0x6b0 [ 50.665898][ T3619] mas_preallocate+0xfb/0x270 [ 50.665914][ T3619] mmap_region+0xcfc/0x1bf0 [ 50.665926][ T3619] do_mmap+0x825/0xf60 [ 50.665937][ T3619] vm_mmap_pgoff+0x1b7/0x290 [ 50.665952][ T3619] ksys_mmap_pgoff+0x79/0x5a0 [ 50.665963][ T3619] do_syscall_64+0x35/0xb0 [ 50.665977][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.665989][ T3619] page last free stack trace: [ 50.665992][ T3619] free_pcp_prepare+0x549/0xd20 [ 50.666004][ T3619] free_unref_page+0x19/0x7b0 [ 50.666016][ T3619] __unfreeze_partials+0x17c/0x1a0 [ 50.666033][ T3619] qlist_free_all+0x6a/0x170 [ 50.666046][ T3619] kasan_quarantine_reduce+0x180/0x200 [ 50.666061][ T3619] __kasan_slab_alloc+0xa2/0xc0 [ 50.666071][ T3619] __kmalloc+0x200/0x350 [ 50.666088][ T3619] tomoyo_supervisor+0xb57/0xf00 [ 50.666104][ T3619] tomoyo_env_perm+0x17f/0x1f0 [ 50.666121][ T3619] tomoyo_find_next_domain+0x13ce/0x1f80 [ 50.666138][ T3619] tomoyo_bprm_check_security+0x121/0x1a0 [ 50.666151][ T3619] security_bprm_check+0x45/0xa0 [ 50.666169][ T3619] bprm_execve+0x732/0x1970 [ 50.666187][ T3619] do_execveat_common+0x724/0x890 [ 50.666209][ T3619] __x64_sys_execve+0x8f/0xc0 [ 50.666219][ T3619] do_syscall_64+0x35/0xb0 [ 50.666232][ T3619] [ 50.666234][ T3619] Memory state around the buggy address: [ 50.666238][ T3619] ffff88807b281300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.666246][ T3619] ffff88807b281380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.666253][ T3619] >ffff88807b281400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.666259][ T3619] ^ [ 50.666264][ T3619] ffff88807b281480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.666271][ T3619] ffff88807b281500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.666276][ T3619] ================================================================== [ 50.666281][ T3619] Kernel panic - not syncing: panic_on_warn set ... [ 51.372947][ T3619] CPU: 0 PID: 3619 Comm: syz-executor182 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0 [ 51.382938][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.393001][ T3619] Call Trace: [ 51.396287][ T3619] [ 51.399208][ T3619] dump_stack_lvl+0xcd/0x134 [ 51.403789][ T3619] panic+0x2d7/0x636 [ 51.407682][ T3619] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.413657][ T3619] ? mark_held_locks+0x9f/0xe0 [ 51.418417][ T3619] ? mas_next_nentry+0x9e4/0xab0 [ 51.423347][ T3619] ? mas_next_nentry+0x9e4/0xab0 [ 51.428308][ T3619] end_report.part.0+0x3f/0x7c [ 51.433060][ T3619] kasan_report.cold+0x93/0x1c6 [ 51.437907][ T3619] ? mas_next_nentry+0x9e4/0xab0 [ 51.442869][ T3619] mas_next_nentry+0x9e4/0xab0 [ 51.447638][ T3619] mas_next+0x1fb/0xc90 [ 51.451826][ T3619] userfaultfd_ioctl+0x344c/0x41f0 [ 51.456942][ T3619] ? userfaultfd_read+0x1900/0x1900 [ 51.462130][ T3619] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 51.468273][ T3619] ? lockdep_hardirqs_on+0x79/0x100 [ 51.473469][ T3619] ? llsec_iter_devs+0x700/0x740 [ 51.478410][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10 [ 51.483371][ T3619] ? userfaultfd_read+0x1900/0x1900 [ 51.488573][ T3619] __x64_sys_ioctl+0x193/0x200 [ 51.493357][ T3619] do_syscall_64+0x35/0xb0 [ 51.497777][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.503662][ T3619] RIP: 0033:0x7f13bfecee99 [ 51.508072][ T3619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.528556][ T3619] RSP: 002b:00007f13bfe5f208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.536956][ T3619] RAX: ffffffffffffffda RBX: 00007f13bff57418 RCX: 00007f13bfecee99 [ 51.544922][ T3619] RDX: 00000000200000c0 RSI: 000000008010aa01 RDI: 0000000000000004 [ 51.552896][ T3619] RBP: 00007f13bff57410 R08: 00007f13bfe5f700 R09: 00007f13bff57418 [ 51.560853][ T3619] R10: 00007f13bfe5f700 R11: 0000000000000246 R12: 00007f13bff5741c [ 51.568817][ T3619] R13: 00007fffe9d11aef R14: 00007f13bfe5f300 R15: 0000000000022000 [ 51.576814][ T3619] [ 51.579977][ T3619] Kernel Offset: disabled [ 51.584292][ T3619] Rebooting in 86400 seconds..