last executing test programs: 588.825582ms ago: executing program 4 (id=42): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 582.009652ms ago: executing program 3 (id=44): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwbinder', 0x800, 0x0) 581.723802ms ago: executing program 4 (id=45): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0) 569.704382ms ago: executing program 2 (id=46): utime(&(0x7f0000000000), &(0x7f0000000000)) 521.165282ms ago: executing program 3 (id=48): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg', 0x800, 0x0) 521.065042ms ago: executing program 4 (id=50): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 520.936292ms ago: executing program 1 (id=51): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0) 520.856542ms ago: executing program 2 (id=52): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 520.034942ms ago: executing program 1 (id=53): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0) 517.310262ms ago: executing program 3 (id=54): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 511.892412ms ago: executing program 4 (id=55): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0) 461.093272ms ago: executing program 1 (id=57): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0) 461.053322ms ago: executing program 2 (id=58): symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 460.986562ms ago: executing program 3 (id=59): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp', 0x800, 0x0) 460.943222ms ago: executing program 1 (id=60): lstat(&(0x7f0000000000), &(0x7f0000000000)) 460.817792ms ago: executing program 4 (id=61): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0) 460.739802ms ago: executing program 2 (id=62): pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 448.165142ms ago: executing program 3 (id=63): statfs(&(0x7f0000000000), &(0x7f0000000000)) 445.471162ms ago: executing program 1 (id=64): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/reclaim', 0x1, 0x0) 389.209892ms ago: executing program 2 (id=65): writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 389.116302ms ago: executing program 4 (id=66): fstatfs(0xffffffffffffffff, &(0x7f0000000000)) 389.003461ms ago: executing program 3 (id=67): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec', 0x2, 0x0) 388.917032ms ago: executing program 1 (id=68): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1', 0x800, 0x0) 362.493612ms ago: executing program 2 (id=71): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000), 0x0) 37.14771ms ago: executing program 0 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec', 0x2, 0x0) 36.96659ms ago: executing program 0 (id=81): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full', 0x800, 0x0) 36.91691ms ago: executing program 0 (id=82): lchown(&(0x7f0000000000), 0x0, 0x0) 36.86433ms ago: executing program 0 (id=83): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dma_heap/system', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dma_heap/system', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dma_heap/system', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dma_heap/system', 0x800, 0x0) 19.4164ms ago: executing program 0 (id=84): fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0) 0s ago: executing program 0 (id=85): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/unconfined', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 58.477788][ T5809] cgroup: Unknown subsys name 'net' [ 58.591454][ T5809] cgroup: Unknown subsys name 'cpuset' [ 58.600111][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.875146][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.235604][ T5905] ================================================================== [ 68.243711][ T5905] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 68.251463][ T5905] Write of size 8 at addr ffff888143774808 by task syz-executor/5905 [ 68.259604][ T5905] [ 68.261934][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 68.261949][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.261960][ T5905] Call Trace: [ 68.261967][ T5905] [ 68.261973][ T5905] dump_stack_lvl+0x241/0x360 [ 68.261990][ T5905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.262002][ T5905] ? __pfx__printk+0x10/0x10 [ 68.262019][ T5905] ? _printk+0xd5/0x120 [ 68.262035][ T5905] ? __virt_addr_valid+0x183/0x530 [ 68.262052][ T5905] ? __virt_addr_valid+0x183/0x530 [ 68.262068][ T5905] print_report+0x169/0x550 [ 68.262083][ T5905] ? __virt_addr_valid+0x183/0x530 [ 68.262098][ T5905] ? __virt_addr_valid+0x183/0x530 [ 68.262113][ T5905] ? __virt_addr_valid+0x45f/0x530 [ 68.262128][ T5905] ? __phys_addr+0xba/0x170 [ 68.262144][ T5905] ? binder_add_device+0x5f/0xa0 [ 68.262160][ T5905] kasan_report+0x143/0x180 [ 68.262174][ T5905] ? binder_add_device+0x5f/0xa0 [ 68.262190][ T5905] binder_add_device+0x5f/0xa0 [ 68.262205][ T5905] binderfs_binder_device_create+0x7bf/0x9c0 [ 68.262223][ T5905] binderfs_fill_super+0x944/0xd90 [ 68.262239][ T5905] ? __pfx_binderfs_fill_super+0x10/0x10 [ 68.262260][ T5905] ? shrinker_register+0x160/0x230 [ 68.262279][ T5905] ? sget_fc+0x909/0x9c0 [ 68.262296][ T5905] ? __pfx_set_anon_super_fc+0x10/0x10 [ 68.262307][ T5905] ? __pfx_binderfs_fill_super+0x10/0x10 [ 68.262322][ T5905] get_tree_nodev+0xb7/0x140 [ 68.262334][ T5905] vfs_get_tree+0x90/0x2b0 [ 68.262348][ T5905] do_new_mount+0x2be/0xb40 [ 68.262364][ T5905] ? __pfx_do_new_mount+0x10/0x10 [ 68.262381][ T5905] __se_sys_mount+0x2d6/0x3c0 [ 68.262396][ T5905] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.262412][ T5905] ? __pfx___se_sys_mount+0x10/0x10 [ 68.262427][ T5905] ? do_syscall_64+0x100/0x230 [ 68.262445][ T5905] ? __x64_sys_mount+0x20/0xc0 [ 68.262460][ T5905] do_syscall_64+0xf3/0x230 [ 68.262476][ T5905] ? clear_bhb_loop+0x35/0x90 [ 68.262494][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.262510][ T5905] RIP: 0033:0x7f53e638e4ca [ 68.262528][ T5905] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.262539][ T5905] RSP: 002b:00007ffcce439978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.262553][ T5905] RAX: ffffffffffffffda RBX: 00007f53e640e663 RCX: 00007f53e638e4ca [ 68.262563][ T5905] RDX: 00007f53e641dd57 RSI: 00007f53e640e663 RDI: 00007f53e641dd57 [ 68.262572][ T5905] RBP: 00007f53e640e85b R08: 0000000000000000 R09: 00000000000001ff [ 68.262580][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53e63eb1c8 [ 68.262588][ T5905] R13: 00007f53e63eb1a8 R14: 0000000000000009 R15: 0000000000000000 [ 68.262601][ T5905] [ 68.262606][ T5905] [ 68.535943][ T5905] Allocated by task 5824: [ 68.540259][ T5905] kasan_save_track+0x3f/0x80 [ 68.544930][ T5905] __kasan_kmalloc+0x98/0xb0 [ 68.549505][ T5905] __kmalloc_cache_noprof+0x243/0x390 [ 68.554957][ T5905] binderfs_binder_device_create+0x16c/0x9c0 [ 68.560938][ T5905] binderfs_fill_super+0x944/0xd90 [ 68.566035][ T5905] get_tree_nodev+0xb7/0x140 [ 68.570631][ T5905] vfs_get_tree+0x90/0x2b0 [ 68.575034][ T5905] do_new_mount+0x2be/0xb40 [ 68.579525][ T5905] __se_sys_mount+0x2d6/0x3c0 [ 68.584291][ T5905] do_syscall_64+0xf3/0x230 [ 68.588802][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.594816][ T5905] [ 68.597135][ T5905] Freed by task 5824: [ 68.601104][ T5905] kasan_save_track+0x3f/0x80 [ 68.605770][ T5905] kasan_save_free_info+0x40/0x50 [ 68.610873][ T5905] __kasan_slab_free+0x59/0x70 [ 68.615627][ T5905] kfree+0x196/0x430 [ 68.619524][ T5905] evict+0x4e8/0x9a0 [ 68.623407][ T5905] __dentry_kill+0x20d/0x630 [ 68.627984][ T5905] shrink_kill+0xa9/0x2c0 [ 68.632307][ T5905] shrink_dentry_list+0x2c0/0x5b0 [ 68.637328][ T5905] shrink_dcache_parent+0xcb/0x3b0 [ 68.642443][ T5905] do_one_tree+0x23/0xe0 [ 68.646682][ T5905] shrink_dcache_for_umount+0xb4/0x180 [ 68.652131][ T5905] generic_shutdown_super+0x6a/0x2d0 [ 68.657496][ T5905] kill_litter_super+0x76/0xb0 [ 68.662246][ T5905] binderfs_kill_super+0x44/0x90 [ 68.667170][ T5905] deactivate_locked_super+0xc4/0x130 [ 68.672534][ T5905] cleanup_mnt+0x41f/0x4b0 [ 68.677118][ T5905] task_work_run+0x24f/0x310 [ 68.681700][ T5905] do_exit+0xa2a/0x28e0 [ 68.685936][ T5905] do_group_exit+0x207/0x2c0 [ 68.690515][ T5905] get_signal+0x16b2/0x1750 [ 68.695005][ T5905] arch_do_signal_or_restart+0x96/0x860 [ 68.700537][ T5905] syscall_exit_to_user_mode+0xce/0x340 [ 68.706073][ T5905] do_syscall_64+0x100/0x230 [ 68.710656][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.716541][ T5905] [ 68.718859][ T5905] The buggy address belongs to the object at ffff888143774800 [ 68.718859][ T5905] which belongs to the cache kmalloc-512 of size 512 [ 68.732898][ T5905] The buggy address is located 8 bytes inside of [ 68.732898][ T5905] freed 512-byte region [ffff888143774800, ffff888143774a00) [ 68.746505][ T5905] [ 68.748831][ T5905] The buggy address belongs to the physical page: [ 68.755324][ T5905] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143774 [ 68.764156][ T5905] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 68.772671][ T5905] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 68.780297][ T5905] page_type: f5(slab) [ 68.784271][ T5905] raw: 057ff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 68.792854][ T5905] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 68.801425][ T5905] head: 057ff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 68.810081][ T5905] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 68.818739][ T5905] head: 057ff00000000002 ffffea00050ddd01 ffffffffffffffff 0000000000000000 [ 68.827394][ T5905] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 68.836485][ T5905] page dumped because: kasan: bad access detected [ 68.842895][ T5905] page_owner tracks the page as allocated [ 68.848623][ T5905] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6927743119, free_ts 0 [ 68.868238][ T5905] post_alloc_hook+0x1f4/0x240 [ 68.872997][ T5905] get_page_from_freelist+0x3651/0x37a0 [ 68.878535][ T5905] __alloc_frozen_pages_noprof+0x292/0x710 [ 68.884327][ T5905] alloc_pages_mpol+0x311/0x660 [ 68.889168][ T5905] allocate_slab+0x8f/0x3a0 [ 68.893668][ T5905] ___slab_alloc+0xc27/0x14a0 [ 68.898347][ T5905] __slab_alloc+0x58/0xa0 [ 68.902673][ T5905] __kmalloc_cache_noprof+0x27b/0x390 [ 68.908347][ T5905] device_add+0xc1/0xbf0 [ 68.912669][ T5905] device_create_with_groups+0x258/0x2e0 [ 68.918312][ T5905] do_take_over_console+0x55c/0x750 [ 68.923588][ T5905] do_fbcon_takeover+0x11a/0x200 [ 68.928605][ T5905] fbcon_fb_registered+0x364/0x620 [ 68.933714][ T5905] register_framebuffer+0x654/0x810 [ 68.938920][ T5905] __drm_fb_helper_initial_config_and_unlock+0x1697/0x1cc0 [ 68.946285][ T5905] drm_fbdev_client_hotplug+0x16e/0x230 [ 68.951823][ T5905] page_owner free stack trace missing [ 68.957175][ T5905] [ 68.959500][ T5905] Memory state around the buggy address: [ 68.965122][ T5905] ffff888143774700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.973174][ T5905] ffff888143774780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.981222][ T5905] >ffff888143774800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 68.989266][ T5905] ^ [ 68.993583][ T5905] ffff888143774880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.001648][ T5905] ffff888143774900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.009692][ T5905] ================================================================== [ 69.041369][ T5905] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.048628][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 69.059313][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.069381][ T5905] Call Trace: [ 69.072668][ T5905] [ 69.075614][ T5905] dump_stack_lvl+0x241/0x360 [ 69.080308][ T5905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.085523][ T5905] ? __pfx__printk+0x10/0x10 [ 69.090224][ T5905] ? preempt_schedule+0xe1/0xf0 [ 69.095096][ T5905] ? vscnprintf+0x5d/0x90 [ 69.099460][ T5905] panic+0x349/0x880 [ 69.103389][ T5905] ? check_panic_on_warn+0x21/0xb0 [ 69.108530][ T5905] ? __pfx_panic+0x10/0x10 [ 69.112981][ T5905] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.119014][ T5905] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.125366][ T5905] ? print_report+0x502/0x550 [ 69.130072][ T5905] check_panic_on_warn+0x86/0xb0 [ 69.135032][ T5905] ? binder_add_device+0x5f/0xa0 [ 69.140002][ T5905] end_report+0x77/0x160 [ 69.144268][ T5905] kasan_report+0x154/0x180 [ 69.148879][ T5905] ? binder_add_device+0x5f/0xa0 [ 69.153845][ T5905] binder_add_device+0x5f/0xa0 [ 69.158635][ T5905] binderfs_binder_device_create+0x7bf/0x9c0 [ 69.164730][ T5905] binderfs_fill_super+0x944/0xd90 [ 69.169869][ T5905] ? __pfx_binderfs_fill_super+0x10/0x10 [ 69.175718][ T5905] ? shrinker_register+0x160/0x230 [ 69.180866][ T5905] ? sget_fc+0x909/0x9c0 [ 69.185135][ T5905] ? __pfx_set_anon_super_fc+0x10/0x10 [ 69.190650][ T5905] ? __pfx_binderfs_fill_super+0x10/0x10 [ 69.196486][ T5905] get_tree_nodev+0xb7/0x140 [ 69.201104][ T5905] vfs_get_tree+0x90/0x2b0 [ 69.205561][ T5905] do_new_mount+0x2be/0xb40 [ 69.210089][ T5905] ? __pfx_do_new_mount+0x10/0x10 [ 69.215138][ T5905] __se_sys_mount+0x2d6/0x3c0 [ 69.219930][ T5905] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.225940][ T5905] ? __pfx___se_sys_mount+0x10/0x10 [ 69.231169][ T5905] ? do_syscall_64+0x100/0x230 [ 69.235961][ T5905] ? __x64_sys_mount+0x20/0xc0 [ 69.240751][ T5905] do_syscall_64+0xf3/0x230 [ 69.245289][ T5905] ? clear_bhb_loop+0x35/0x90 [ 69.249989][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.255897][ T5905] RIP: 0033:0x7f53e638e4ca [ 69.260328][ T5905] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.279949][ T5905] RSP: 002b:00007ffcce439978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.288383][ T5905] RAX: ffffffffffffffda RBX: 00007f53e640e663 RCX: 00007f53e638e4ca [ 69.296374][ T5905] RDX: 00007f53e641dd57 RSI: 00007f53e640e663 RDI: 00007f53e641dd57 [ 69.304457][ T5905] RBP: 00007f53e640e85b R08: 0000000000000000 R09: 00000000000001ff [ 69.312456][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53e63eb1c8 [ 69.320566][ T5905] R13: 00007f53e63eb1a8 R14: 0000000000000009 R15: 0000000000000000 [ 69.328601][ T5905] [ 69.331904][ T5905] Kernel Offset: disabled [ 69.336223][ T5905] Rebooting in 86400 seconds..