program: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0/file0\x00'}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) (async) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x5975, &(0x7f0000005940)="$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") [ 58.896734][ T4676] Bluetooth: hci0: command tx timeout [ 58.896674][ T4676] Bluetooth: hci0: command tx timeout [ 58.987462][ T5331] loop0: detected capacity change from 0 to 32768 [ 59.006074][ T5331] ================================================================== [ 59.008950][ T5331] BUG: KASAN: slab-out-of-bounds in journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.012194][ T5331] Read of size 8 at addr ffff888043666000 by task syz.0.0/5331 [ 59.015095][ T5331] [ 59.016047][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 59.019938][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.023997][ T5331] Call Trace: [ 59.025312][ T5331] [ 59.026506][ T5331] dump_stack_lvl+0x241/0x360 [ 59.028408][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.030465][ T5331] ? __pfx__printk+0x10/0x10 [ 59.032275][ T5331] ? _printk+0xd5/0x120 [ 59.033926][ T5331] ? __virt_addr_valid+0x183/0x530 [ 59.035965][ T5331] ? __virt_addr_valid+0x183/0x530 [ 59.037909][ T5331] print_report+0x169/0x550 [ 59.039524][ T5331] ? __virt_addr_valid+0x183/0x530 [ 59.041469][ T5331] ? __virt_addr_valid+0x183/0x530 [ 59.043517][ T5331] ? __virt_addr_valid+0x45f/0x530 [ 59.045537][ T5331] ? __phys_addr+0xba/0x170 [ 59.047339][ T5331] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.049801][ T5331] kasan_report+0x143/0x180 [ 59.051465][ T5331] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.053967][ T5331] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.056410][ T5331] bch2_sb_clean_to_text+0x138/0x240 [ 59.058451][ T5331] bch2_sb_field_validate+0x201/0x2e0 [ 59.060566][ T5331] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 59.062878][ T5331] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 59.065377][ T5331] ? bch2_opt_validate+0x2ca/0x300 [ 59.067339][ T5331] bch2_sb_validate+0xbb1/0xf70 [ 59.069237][ T5331] ? blk_status_to_errno+0x22/0x80 [ 59.071230][ T5331] ? __pfx_bch2_sb_validate+0x10/0x10 [ 59.073368][ T5331] ? bch2_sb_compatible+0x493/0x850 [ 59.075406][ T5331] ? read_one_super+0x65a/0xf40 [ 59.077344][ T5331] ? read_one_super+0xe23/0xf40 [ 59.079221][ T5331] ? __pfx_read_one_super+0x10/0x10 [ 59.081276][ T5331] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 59.083308][ T5331] ? bdev_file_open_by_path+0x382/0x480 [ 59.085416][ T5331] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 59.087683][ T5331] ? trace_kmalloc+0x1f/0xd0 [ 59.089476][ T5331] ? __asan_memcpy+0x40/0x70 [ 59.091319][ T5331] __bch2_read_super+0xc24/0x1380 [ 59.093352][ T5331] ? stack_depot_save_flags+0x6e4/0x830 [ 59.095488][ T5331] ? __pfx___bch2_read_super+0x10/0x10 [ 59.097704][ T5331] ? rcu_is_watching+0x15/0xb0 [ 59.099305][ T5331] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.101630][ T5331] ? kfree+0x4e/0x440 [ 59.103235][ T5331] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.105603][ T5331] bch2_fs_open+0x270/0x2f80 [ 59.107439][ T5331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.109729][ T5331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.112145][ T5331] ? lockdep_hardirqs_on+0x99/0x150 [ 59.114089][ T5331] ? __pfx_bch2_fs_open+0x10/0x10 [ 59.116004][ T5331] ? stack_trace_save+0x118/0x1d0 [ 59.117748][ T5331] ? kasan_save_track+0x51/0x80 [ 59.119473][ T5331] ? kasan_save_track+0x3f/0x80 [ 59.121233][ T5331] ? kasan_save_free_info+0x40/0x50 [ 59.123061][ T5331] ? __kasan_slab_free+0x59/0x70 [ 59.124818][ T5331] ? kfree+0x1a0/0x440 [ 59.126289][ T5331] ? sget+0x2b8/0x620 [ 59.127701][ T5331] ? bch2_fs_get_tree+0x683/0x1710 [ 59.129609][ T5331] ? vfs_get_tree+0x90/0x2b0 [ 59.131277][ T5331] ? do_new_mount+0x2be/0xb40 [ 59.133112][ T5331] ? __se_sys_mount+0x2d6/0x3c0 [ 59.134947][ T5331] ? do_syscall_64+0xf3/0x230 [ 59.136752][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.138971][ T5331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.141171][ T5331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.143678][ T5331] ? kasan_quarantine_put+0xdc/0x230 [ 59.145767][ T5331] ? lockdep_hardirqs_on+0x99/0x150 [ 59.147706][ T5331] ? sget+0x2b8/0x620 [ 59.149296][ T5331] ? __pfx_bch2_test_super+0x10/0x10 [ 59.151226][ T5331] ? sget+0x2b8/0x620 [ 59.152741][ T5331] ? __pfx_bch2_noset_super+0x10/0x10 [ 59.154854][ T5331] bch2_fs_get_tree+0x738/0x1710 [ 59.156811][ T5331] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 59.158751][ T5331] ? generic_parse_monolithic+0x387/0x400 [ 59.160760][ T5331] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 59.162801][ T5331] ? apparmor_capable+0x13b/0x1b0 [ 59.164675][ T5331] vfs_get_tree+0x90/0x2b0 [ 59.166329][ T5331] do_new_mount+0x2be/0xb40 [ 59.168025][ T5331] ? __pfx_do_new_mount+0x10/0x10 [ 59.169868][ T5331] __se_sys_mount+0x2d6/0x3c0 [ 59.171615][ T5331] ? __pfx___se_sys_mount+0x10/0x10 [ 59.173584][ T5331] ? exc_page_fault+0x590/0x8c0 [ 59.175407][ T5331] ? __x64_sys_mount+0x20/0xc0 [ 59.177224][ T5331] do_syscall_64+0xf3/0x230 [ 59.178929][ T5331] ? clear_bhb_loop+0x35/0x90 [ 59.180757][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.183037][ T5331] RIP: 0033:0x7f9ea4f7feba [ 59.184722][ T5331] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.191756][ T5331] RSP: 002b:00007f9ea5e25e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.194885][ T5331] RAX: ffffffffffffffda RBX: 00007f9ea5e25ef0 RCX: 00007f9ea4f7feba [ 59.197861][ T5331] RDX: 0000000020000000 RSI: 0000000020005900 RDI: 00007f9ea5e25eb0 [ 59.200797][ T5331] RBP: 0000000020000000 R08: 00007f9ea5e25ef0 R09: 0000000000010000 [ 59.203820][ T5331] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000020005900 [ 59.206656][ T5331] R13: 00007f9ea5e25eb0 R14: 0000000000005975 R15: 0000000020000080 [ 59.209588][ T5331] [ 59.210757][ T5331] [ 59.211674][ T5331] Allocated by task 5331: [ 59.213339][ T5331] kasan_save_track+0x3f/0x80 [ 59.215193][ T5331] __kasan_kmalloc+0x98/0xb0 [ 59.216963][ T5331] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 59.219317][ T5331] krealloc_noprof+0x88/0x120 [ 59.221131][ T5331] bch2_sb_realloc+0x2d2/0x660 [ 59.223002][ T5331] read_one_super+0x73b/0xf40 [ 59.224810][ T5331] __bch2_read_super+0x87c/0x1380 [ 59.226769][ T5331] bch2_fs_open+0x270/0x2f80 [ 59.228476][ T5331] bch2_fs_get_tree+0x738/0x1710 [ 59.230364][ T5331] vfs_get_tree+0x90/0x2b0 [ 59.232111][ T5331] do_new_mount+0x2be/0xb40 [ 59.233810][ T5331] __se_sys_mount+0x2d6/0x3c0 [ 59.235580][ T5331] do_syscall_64+0xf3/0x230 [ 59.237325][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.239512][ T5331] [ 59.240466][ T5331] The buggy address belongs to the object at ffff888043664000 [ 59.240466][ T5331] which belongs to the cache kmalloc-8k of size 8192 [ 59.245641][ T5331] The buggy address is located 0 bytes to the right of [ 59.245641][ T5331] allocated 8192-byte region [ffff888043664000, ffff888043666000) [ 59.250864][ T5331] [ 59.251808][ T5331] The buggy address belongs to the physical page: [ 59.254176][ T5331] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43660 [ 59.257439][ T5331] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.260609][ T5331] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 59.263667][ T5331] page_type: f5(slab) [ 59.265191][ T5331] raw: 04fff00000000040 ffff88801ac42280 ffffea00010f5a00 0000000000000005 [ 59.268290][ T5331] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.271353][ T5331] head: 04fff00000000040 ffff88801ac42280 ffffea00010f5a00 0000000000000005 [ 59.274598][ T5331] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.277740][ T5331] head: 04fff00000000003 ffffea00010d9801 ffffffffffffffff 0000000000000000 [ 59.280900][ T5331] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.284152][ T5331] page dumped because: kasan: bad access detected [ 59.286545][ T5331] page_owner tracks the page as allocated [ 59.288582][ T5331] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5236, tgid 5236 (nohup), ts 45838261000, free_ts 45838028017 [ 59.296147][ T5331] post_alloc_hook+0x1f3/0x230 [ 59.297979][ T5331] get_page_from_freelist+0x303f/0x3190 [ 59.300098][ T5331] __alloc_pages_noprof+0x292/0x710 [ 59.302056][ T5331] alloc_pages_mpol_noprof+0x3e8/0x680 [ 59.304092][ T5331] alloc_slab_page+0x6a/0x140 [ 59.305841][ T5331] allocate_slab+0x5a/0x2f0 [ 59.307580][ T5331] ___slab_alloc+0xcd1/0x14b0 [ 59.309333][ T5331] __slab_alloc+0x58/0xa0 [ 59.310986][ T5331] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 59.313095][ T5331] tomoyo_init_log+0x11cd/0x2050 [ 59.314988][ T5331] tomoyo_supervisor+0x38a/0x11f0 [ 59.316955][ T5331] tomoyo_env_perm+0x178/0x210 [ 59.318733][ T5331] tomoyo_find_next_domain+0x146e/0x1d40 [ 59.320905][ T5331] tomoyo_bprm_check_security+0x114/0x180 [ 59.323106][ T5331] security_bprm_check+0x86/0x250 [ 59.325100][ T5331] bprm_execve+0xa56/0x1770 [ 59.326783][ T5331] page last free pid 5236 tgid 5236 stack trace: [ 59.329120][ T5331] free_unref_page+0xcfb/0xf20 [ 59.330960][ T5331] __slab_free+0x31b/0x3d0 [ 59.332699][ T5331] qlist_free_all+0x9a/0x140 [ 59.334502][ T5331] kasan_quarantine_reduce+0x14f/0x170 [ 59.336561][ T5331] __kasan_slab_alloc+0x23/0x80 [ 59.338367][ T5331] __kmalloc_noprof+0x1a6/0x400 [ 59.340169][ T5331] tomoyo_supervisor+0xe0d/0x11f0 [ 59.342052][ T5331] tomoyo_env_perm+0x178/0x210 [ 59.343850][ T5331] tomoyo_find_next_domain+0x146e/0x1d40 [ 59.345956][ T5331] tomoyo_bprm_check_security+0x114/0x180 [ 59.348080][ T5331] security_bprm_check+0x86/0x250 [ 59.349975][ T5331] bprm_execve+0xa56/0x1770 [ 59.351671][ T5331] do_execveat_common+0x55f/0x6f0 [ 59.353623][ T5331] __x64_sys_execve+0x92/0xb0 [ 59.355412][ T5331] do_syscall_64+0xf3/0x230 [ 59.357148][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.359363][ T5331] [ 59.360274][ T5331] Memory state around the buggy address: [ 59.362385][ T5331] ffff888043665f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.365290][ T5331] ffff888043665f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.368332][ T5331] >ffff888043666000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.371322][ T5331] ^ [ 59.372851][ T5331] ffff888043666080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.375827][ T5331] ffff888043666100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.378820][ T5331] ================================================================== [ 59.412820][ T5331] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.415753][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 59.419547][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.423565][ T5331] Call Trace: [ 59.424895][ T5331] [ 59.426028][ T5331] dump_stack_lvl+0x241/0x360 [ 59.427817][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.429639][ T5331] ? __pfx__printk+0x10/0x10 [ 59.431309][ T5331] ? preempt_schedule+0xe1/0xf0 [ 59.433237][ T5331] ? vscnprintf+0x5d/0x90 [ 59.434855][ T5331] panic+0x349/0x880 [ 59.436444][ T5331] ? check_panic_on_warn+0x21/0xb0 [ 59.438319][ T5331] ? __pfx_panic+0x10/0x10 [ 59.439994][ T5331] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 59.442314][ T5331] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.444608][ T5331] ? print_report+0x502/0x550 [ 59.446351][ T5331] check_panic_on_warn+0x86/0xb0 [ 59.448287][ T5331] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.450641][ T5331] end_report+0x77/0x160 [ 59.452218][ T5331] kasan_report+0x154/0x180 [ 59.453962][ T5331] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.456347][ T5331] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.458660][ T5331] bch2_sb_clean_to_text+0x138/0x240 [ 59.460610][ T5331] bch2_sb_field_validate+0x201/0x2e0 [ 59.462608][ T5331] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 59.464916][ T5331] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 59.467288][ T5331] ? bch2_opt_validate+0x2ca/0x300 [ 59.469217][ T5331] bch2_sb_validate+0xbb1/0xf70 [ 59.471067][ T5331] ? blk_status_to_errno+0x22/0x80 [ 59.473076][ T5331] ? __pfx_bch2_sb_validate+0x10/0x10 [ 59.475049][ T5331] ? bch2_sb_compatible+0x493/0x850 [ 59.477029][ T5331] ? read_one_super+0x65a/0xf40 [ 59.478877][ T5331] ? read_one_super+0xe23/0xf40 [ 59.480728][ T5331] ? __pfx_read_one_super+0x10/0x10 [ 59.482635][ T5331] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 59.484638][ T5331] ? bdev_file_open_by_path+0x382/0x480 [ 59.486789][ T5331] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 59.489035][ T5331] ? trace_kmalloc+0x1f/0xd0 [ 59.490723][ T5331] ? __asan_memcpy+0x40/0x70 [ 59.492493][ T5331] __bch2_read_super+0xc24/0x1380 [ 59.494466][ T5331] ? stack_depot_save_flags+0x6e4/0x830 [ 59.496624][ T5331] ? __pfx___bch2_read_super+0x10/0x10 [ 59.498740][ T5331] ? rcu_is_watching+0x15/0xb0 [ 59.500605][ T5331] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.502846][ T5331] ? kfree+0x4e/0x440 [ 59.504401][ T5331] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.506712][ T5331] bch2_fs_open+0x270/0x2f80 [ 59.508451][ T5331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.510700][ T5331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.513099][ T5331] ? lockdep_hardirqs_on+0x99/0x150 [ 59.515085][ T5331] ? __pfx_bch2_fs_open+0x10/0x10 [ 59.516972][ T5331] ? stack_trace_save+0x118/0x1d0 [ 59.518839][ T5331] ? kasan_save_track+0x51/0x80 [ 59.520716][ T5331] ? kasan_save_track+0x3f/0x80 [ 59.522539][ T5331] ? kasan_save_free_info+0x40/0x50 [ 59.524507][ T5331] ? __kasan_slab_free+0x59/0x70 [ 59.526359][ T5331] ? kfree+0x1a0/0x440 [ 59.527880][ T5331] ? sget+0x2b8/0x620 [ 59.529369][ T5331] ? bch2_fs_get_tree+0x683/0x1710 [ 59.531326][ T5331] ? vfs_get_tree+0x90/0x2b0 [ 59.533091][ T5331] ? do_new_mount+0x2be/0xb40 [ 59.534832][ T5331] ? __se_sys_mount+0x2d6/0x3c0 [ 59.536639][ T5331] ? do_syscall_64+0xf3/0x230 [ 59.538395][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.540720][ T5331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.542973][ T5331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.545378][ T5331] ? kasan_quarantine_put+0xdc/0x230 [ 59.547273][ T5331] ? lockdep_hardirqs_on+0x99/0x150 [ 59.549133][ T5331] ? sget+0x2b8/0x620 [ 59.550562][ T5331] ? __pfx_bch2_test_super+0x10/0x10 [ 59.552429][ T5331] ? sget+0x2b8/0x620 [ 59.553879][ T5331] ? __pfx_bch2_noset_super+0x10/0x10 [ 59.555777][ T5331] bch2_fs_get_tree+0x738/0x1710 [ 59.557521][ T5331] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 59.559365][ T5331] ? generic_parse_monolithic+0x387/0x400 [ 59.561414][ T5331] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 59.563525][ T5331] ? apparmor_capable+0x13b/0x1b0 [ 59.565543][ T5331] vfs_get_tree+0x90/0x2b0 [ 59.567293][ T5331] do_new_mount+0x2be/0xb40 [ 59.568923][ T5331] ? __pfx_do_new_mount+0x10/0x10 [ 59.570694][ T5331] __se_sys_mount+0x2d6/0x3c0 [ 59.572374][ T5331] ? __pfx___se_sys_mount+0x10/0x10 [ 59.574206][ T5331] ? exc_page_fault+0x590/0x8c0 [ 59.576129][ T5331] ? __x64_sys_mount+0x20/0xc0 [ 59.578005][ T5331] do_syscall_64+0xf3/0x230 [ 59.579774][ T5331] ? clear_bhb_loop+0x35/0x90 [ 59.581572][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.583795][ T5331] RIP: 0033:0x7f9ea4f7feba [ 59.585507][ T5331] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.592606][ T5331] RSP: 002b:00007f9ea5e25e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.595771][ T5331] RAX: ffffffffffffffda RBX: 00007f9ea5e25ef0 RCX: 00007f9ea4f7feba [ 59.598657][ T5331] RDX: 0000000020000000 RSI: 0000000020005900 RDI: 00007f9ea5e25eb0 [ 59.601575][ T5331] RBP: 0000000020000000 R08: 00007f9ea5e25ef0 R09: 0000000000010000 [ 59.604616][ T5331] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000020005900 [ 59.607595][ T5331] R13: 00007f9ea5e25eb0 R14: 0000000000005975 R15: 0000000020000080 [ 59.610675][ T5331] [ 59.612139][ T5331] Kernel Offset: disabled [ 59.613819][ T5331] Rebooting in 86400 seconds..