last executing test programs: 432.431865ms ago: executing program 2 (id=156): getgroups(0x0, &(0x7f0000000000)) 381.548327ms ago: executing program 2 (id=160): shmdt(0x0) 379.440061ms ago: executing program 2 (id=165): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/reclaim', 0x1, 0x0) 357.453029ms ago: executing program 2 (id=167): syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dmmidi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dmmidi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dmmidi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dmmidi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dmmidi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dmmidi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dmmidi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dmmidi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dmmidi(&(0x7f0000000500), 0x4, 0x800) 321.267152ms ago: executing program 0 (id=169): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0', 0x2, 0x0) 320.950772ms ago: executing program 2 (id=172): syz_open_dev$ircomm(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ircomm(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ircomm(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ircomm(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$ircomm(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$ircomm(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$ircomm(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$ircomm(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$ircomm(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$ircomm(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$ircomm(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$ircomm(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$ircomm(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$ircomm(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$ircomm(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$ircomm(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$ircomm(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$ircomm(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$ircomm(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$ircomm(&(0x7f0000000500), 0x4, 0x800) 320.871571ms ago: executing program 0 (id=173): mlock2(0x0, 0x0, 0x0) 282.023443ms ago: executing program 0 (id=178): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm', 0x800, 0x0) 281.877854ms ago: executing program 4 (id=179): eventfd(0x0) 281.514974ms ago: executing program 2 (id=180): socket$inet_sctp(0x2, 0x1, 0x84) 230.099548ms ago: executing program 3 (id=182): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics', 0x800, 0x0) 230.041238ms ago: executing program 4 (id=183): uselib(0x0) 229.944094ms ago: executing program 0 (id=185): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0) 229.469684ms ago: executing program 3 (id=186): name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 229.378283ms ago: executing program 1 (id=187): nanosleep(&(0x7f0000000000), 0x0) 228.038584ms ago: executing program 4 (id=188): fchmod(0xffffffffffffffff, 0x0) 215.2255ms ago: executing program 3 (id=189): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 208.754413ms ago: executing program 0 (id=190): readlink(&(0x7f0000000000), &(0x7f0000000000), 0x0) 150.159484ms ago: executing program 3 (id=191): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 149.962931ms ago: executing program 1 (id=192): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/netlabel', 0x2, 0x0) 149.759591ms ago: executing program 4 (id=193): socket$xdp(0x2c, 0x3, 0x0) 149.700629ms ago: executing program 0 (id=194): syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) 149.621105ms ago: executing program 4 (id=195): socket$inet6_tcp(0xa, 0x1, 0x0) 149.456073ms ago: executing program 1 (id=196): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0) 136.668334ms ago: executing program 3 (id=197): mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 113.67411ms ago: executing program 4 (id=198): socket$nl_audit(0x10, 0x3, 0x9) 66.195997ms ago: executing program 1 (id=199): lstat(&(0x7f0000000000), &(0x7f0000000000)) 66.074644ms ago: executing program 3 (id=200): syz_init_net_socket$rose(0xb, 0x5, 0x0) 34.003929ms ago: executing program 1 (id=203): timer_getoverrun(0x0) 0s ago: executing program 1 (id=205): syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 59.578344][ T5823] cgroup: Unknown subsys name 'net' [ 59.743066][ T5823] cgroup: Unknown subsys name 'cpuset' [ 59.750517][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.023236][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.621142][ T6039] ================================================================== [ 64.621178][ T6039] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 64.621241][ T6039] Write of size 8 at addr ffff888034485408 by task syz-executor/6039 [ 64.621265][ T6039] [ 64.621296][ T6039] CPU: 0 UID: 0 PID: 6039 Comm: syz-executor Not tainted 6.13.0-next-20250122-syzkaller #0 [ 64.621314][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.621324][ T6039] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.621331][ T6039] [ 64.621337][ T6039] dump_stack_lvl+0x241/0x360 [ 64.621357][ T6039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.621372][ T6039] ? __pfx__printk+0x10/0x10 [ 64.621388][ T6039] ? _printk+0xd5/0x120 [ 64.621402][ T6039] ? __virt_addr_valid+0x183/0x530 [ 64.621424][ T6039] ? __virt_addr_valid+0x183/0x530 [ 64.621446][ T6039] print_report+0x169/0x550 [ 64.621467][ T6039] ? __virt_addr_valid+0x183/0x530 [ 64.621487][ T6039] ? __virt_addr_valid+0x183/0x530 [ 64.621507][ T6039] ? __virt_addr_valid+0x45f/0x530 [ 64.621527][ T6039] ? __phys_addr+0xba/0x170 [ 64.621549][ T6039] ? binder_add_device+0x5f/0xa0 [ 64.621569][ T6039] kasan_report+0x143/0x180 [ 64.621592][ T6039] ? binder_add_device+0x5f/0xa0 [ 64.621622][ T6039] binder_add_device+0x5f/0xa0 [ 64.621643][ T6039] binderfs_binder_device_create+0x7bf/0x9c0 [ 64.621667][ ** replaying previous printk message ** [ 64.621667][ T6039] binderfs_fill_super+0x944/0xd90 [ 64.621691][ T6039] ? __pfx_binderfs_fill_super+0x10/0x10 [ 64.621720][ T6039] ? shrinker_register+0x160/0x230 [ 64.621740][ T6039] ? sget_fc+0x909/0x9c0 [ 64.621760][ T6039] ? __pfx_set_anon_super_fc+0x10/0x10 [ 64.621779][ T6039] ? __pfx_binderfs_fill_super+0x10/0x10 [ 64.621800][ T6039] get_tree_nodev+0xb7/0x140 [ 64.621820][ T6039] vfs_get_tree+0x90/0x2b0 [ 64.621841][ T6039] do_new_mount+0x2be/0xb40 [ 64.621858][ T6039] ? __pfx_do_new_mount+0x10/0x10 [ 64.621877][ T6039] __se_sys_mount+0x2d6/0x3c0 [ 64.621894][ T6039] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 64.621915][ T6039] ? __pfx___se_sys_mount+0x10/0x10 [ 64.621931][ T6039] ? do_syscall_64+0x100/0x230 [ 64.621949][ T6039] ? __x64_sys_mount+0x20/0xc0 [ 64.621965][ T6039] do_syscall_64+0xf3/0x230 [ 64.621981][ T6039] ? clear_bhb_loop+0x35/0x90 [ 64.622002][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.622027][ T6039] RIP: 0033:0x7f7b813874ca [ 64.622045][ T6039] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.622059][ T6039] RSP: 002b:00007ffecceb1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.622077][ T6039] RAX: ffffffffffffffda RBX: 00007f7b81401ecb RCX: 00007f7b813874ca [ 64.622089][ T6039] RDX: 00007f7b8140ec27 RSI: 00007f7b81401ecb RDI: 00007f7b8140ec27 [ 64.622101][ T6039] RBP: 00007f7b814020c3 R08: 0000000000000000 R09: 00000000000001ff [ 64.622111][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b813e41c8 [ 64.622122][ T6039] R13: 00007f7b813e41a8 R14: 0000000000000009 R15: 0000000000000000 [ 64.622139][ T6039] [ 64.622145][ T6039] [ 64.622464][ T6039] Allocated by task 5834: [ 64.622482][ T6039] kasan_save_track+0x3f/0x80 [ 64.622512][ T6039] __kasan_kmalloc+0x98/0xb0 [ 64.622541][ T6039] __kmalloc_cache_noprof+0x243/0x390 [ 64.622566][ T6039] binderfs_binder_device_create+0x16c/0x9c0 [ 64.622596][ T6039] binderfs_fill_super+0x944/0xd90 [ 64.622630][ T6039] get_tree_nodev+0xb7/0x140 [ 64.622657][ T6039] vfs_get_tree+0x90/0x2b0 [ 64.622685][ T6039] do_new_mount+0x2be/0xb40 [ 64.622708][ T6039] __se_sys_mount+0x2d6/0x3c0 [ 64.622732][ T6039] do_syscall_64+0xf3/0x230 [ 64.622756][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.622786][ T6039] [ 64.622799][ T6039] Freed by task 5834: [ 64.622816][ T6039] kasan_save_track+0x3f/0x80 [ 64.622851][ T6039] kasan_save_free_info+0x40/0x50 [ 64.622878][ T6039] __kasan_slab_free+0x59/0x70 [ 64.622907][ T6039] kfree+0x196/0x430 [ 64.622929][ T6039] evict+0x4e8/0x9a0 [ 64.622956][ T6039] __dentry_kill+0x20d/0x630 [ 64.622981][ T6039] shrink_kill+0xa9/0x2c0 [ 64.623006][ T6039] shrink_dentry_list+0x2c0/0x5b0 [ 64.623032][ T6039] shrink_dcache_parent+0xcb/0x3b0 [ 64.623058][ T6039] do_one_tree+0x23/0xe0 [ 64.623083][ T6039] shrink_dcache_for_umount+0xb4/0x180 [ 64.623110][ T6039] generic_shutdown_super+0x6a/0x2d0 [ 64.623137][ T6039] kill_litter_super+0x76/0xb0 [ 64.623164][ T6039] binderfs_kill_super+0x44/0x90 [ 64.623190][ T6039] deactivate_locked_super+0xc4/0x130 [ 64.623217][ T6039] cleanup_mnt+0x41f/0x4b0 [ 64.623242][ T6039] task_work_run+0x24f/0x310 [ 64.623272][ T6039] do_exit+0xa2a/0x28e0 [ 64.623322][ T6039] do_group_exit+0x207/0x2c0 [ 64.623350][ T6039] get_signal+0x16b2/0x1750 [ 64.623372][ T6039] arch_do_signal_or_restart+0x96/0x860 [ 64.623399][ T6039] syscall_exit_to_user_mode+0xce/0x340 [ 64.623424][ T6039] do_syscall_64+0x100/0x230 [ 64.623448][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.623476][ T6039] [ 64.623490][ T6039] The buggy address belongs to the object at ffff888034485400 [ 64.623490][ T6039] which belongs to the cache kmalloc-512 of size 512 [ 64.623513][ T6039] The buggy address is located 8 bytes inside of [ 64.623513][ T6039] freed 512-byte region [ffff888034485400, ffff888034485600) [ 64.623538][ T6039] [ 64.623557][ T6039] The buggy address belongs to the physical page: [ 64.623582][ T6039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34484 [ 64.623607][ T6039] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.623635][ T6039] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 64.623663][ T6039] page_type: f5(slab) [ 64.623685][ T6039] raw: 00fff00000000040 ffff88801ac41c80 ffffea0000c86b00 0000000000000003 [ 64.623708][ T6039] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 64.623732][ T6039] head: 00fff00000000040 ffff88801ac41c80 ffffea0000c86b00 0000000000000003 [ 64.623755][ T6039] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 64.623778][ T6039] head: 00fff00000000002 ffffea0000d12101 ffffffffffffffff 0000000000000000 [ 64.623808][ T6039] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 64.623826][ T6039] page dumped because: kasan: bad access detected [ 64.623848][ T6039] page_owner tracks the page as allocated [ 64.623865][ T6039] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5221, tgid 5221 (udevd), ts 30754515990, free_ts 29709251992 [ 64.623901][ T6039] post_alloc_hook+0x1f4/0x240 [ 64.623928][ T6039] get_page_from_freelist+0x365c/0x37a0 [ 64.623956][ T6039] __alloc_frozen_pages_noprof+0x292/0x710 [ 64.623984][ T6039] alloc_pages_mpol+0x311/0x660 [ 64.624007][ T6039] allocate_slab+0x8f/0x3a0 [ 64.624035][ T6039] ___slab_alloc+0xc27/0x14a0 [ 64.624059][ T6039] __slab_alloc+0x58/0xa0 [ 64.624084][ T6039] __kmalloc_cache_noprof+0x27b/0x390 [ 64.624107][ T6039] kernfs_fop_open+0x3e0/0xd10 [ 64.624130][ T6039] do_dentry_open+0xdec/0x1960 [ 64.624152][ T6039] vfs_open+0x3b/0x370 [ 64.624174][ T6039] path_openat+0x2c81/0x3590 [ 64.624200][ T6039] do_filp_open+0x27f/0x4e0 [ 64.624225][ T6039] do_sys_openat2+0x13e/0x1d0 [ 64.624249][ T6039] __x64_sys_openat+0x247/0x2a0 [ 64.624273][ T6039] do_syscall_64+0xf3/0x230 [ 64.624297][ T6039] page last free pid 5213 tgid 5213 stack trace: [ 64.624317][ T6039] free_frozen_pages+0xe0d/0x10e0 [ 64.624343][ T6039] __mmdrop+0xb9/0x3d0 [ 64.624365][ T6039] finish_task_switch+0x304/0x870 [ 64.624396][ T6039] __schedule+0x1916/0x4c90 [ 64.624425][ T6039] schedule+0x14b/0x320 [ 64.624453][ T6039] schedule_hrtimeout_range_clock+0x191/0x320 [ 64.624482][ T6039] do_epoll_wait+0x1db4/0x21c0 [ 64.624512][ T6039] __x64_sys_epoll_wait+0x257/0x2a0 [ 64.624540][ T6039] do_syscall_64+0xf3/0x230 [ 64.624564][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.624592][ T6039] [ 64.624606][ T6039] Memory state around the buggy address: [ 64.624632][ T6039] ffff888034485300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.624653][ T6039] ffff888034485380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.624673][ T6039] >ffff888034485400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.624689][ T6039] ^ [ 64.624705][ T6039] ffff888034485480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.624725][ T6039] ffff888034485500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.624743][ T6039] ================================================================== [ 64.759675][ T6039] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.464596][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: syz-executor Not tainted 6.13.0-next-20250122-syzkaller #0 [ 65.474570][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.484628][ T6039] Call Trace: [ 65.487916][ T6039] [ 65.490842][ T6039] dump_stack_lvl+0x241/0x360 [ 65.495525][ T6039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.500719][ T6039] ? __pfx__printk+0x10/0x10 [ 65.505310][ T6039] ? preempt_schedule+0xe1/0xf0 [ 65.510269][ T6039] ? vscnprintf+0x5d/0x90 [ 65.514605][ T6039] panic+0x349/0x880 [ 65.518496][ T6039] ? check_panic_on_warn+0x21/0xb0 [ 65.523613][ T6039] ? __pfx_panic+0x10/0x10 [ 65.528123][ T6039] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 65.534098][ T6039] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 65.540419][ T6039] ? print_report+0x502/0x550 [ 65.545191][ T6039] check_panic_on_warn+0x86/0xb0 [ 65.550123][ T6039] ? binder_add_device+0x5f/0xa0 [ 65.555122][ T6039] end_report+0x77/0x160 [ 65.559360][ T6039] kasan_report+0x154/0x180 [ 65.563859][ T6039] ? binder_add_device+0x5f/0xa0 [ 65.568793][ T6039] binder_add_device+0x5f/0xa0 [ 65.573555][ T6039] binderfs_binder_device_create+0x7bf/0x9c0 [ 65.579536][ T6039] binderfs_fill_super+0x944/0xd90 [ 65.584737][ T6039] ? __pfx_binderfs_fill_super+0x10/0x10 [ 65.590396][ T6039] ? shrinker_register+0x160/0x230 [ 65.595515][ T6039] ? sget_fc+0x909/0x9c0 [ 65.599761][ T6039] ? __pfx_set_anon_super_fc+0x10/0x10 [ 65.605310][ T6039] ? __pfx_binderfs_fill_super+0x10/0x10 [ 65.610941][ T6039] get_tree_nodev+0xb7/0x140 [ 65.615524][ T6039] vfs_get_tree+0x90/0x2b0 [ 65.619936][ T6039] do_new_mount+0x2be/0xb40 [ 65.624446][ T6039] ? __pfx_do_new_mount+0x10/0x10 [ 65.629583][ T6039] __se_sys_mount+0x2d6/0x3c0 [ 65.634274][ T6039] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.640353][ T6039] ? __pfx___se_sys_mount+0x10/0x10 [ 65.645544][ T6039] ? do_syscall_64+0x100/0x230 [ 65.650304][ T6039] ? __x64_sys_mount+0x20/0xc0 [ 65.655057][ T6039] do_syscall_64+0xf3/0x230 [ 65.659557][ T6039] ? clear_bhb_loop+0x35/0x90 [ 65.664315][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.670202][ T6039] RIP: 0033:0x7f7b813874ca [ 65.674604][ T6039] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.694196][ T6039] RSP: 002b:00007ffecceb1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.702948][ T6039] RAX: ffffffffffffffda RBX: 00007f7b81401ecb RCX: 00007f7b813874ca [ 65.710916][ T6039] RDX: 00007f7b8140ec27 RSI: 00007f7b81401ecb RDI: 00007f7b8140ec27 [ 65.718878][ T6039] RBP: 00007f7b814020c3 R08: 0000000000000000 R09: 00000000000001ff [ 65.726837][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b813e41c8 [ 65.734796][ T6039] R13: 00007f7b813e41a8 R14: 0000000000000009 R15: 0000000000000000 [ 65.742762][ T6039] [ 66.859207][ T6039] Shutting down cpus with NMI [ 66.864341][ T6039] Kernel Offset: disabled [ 66.868675][ T6039] Rebooting in 86400 seconds..