program: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x210090, &(0x7f0000000c80)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@data_err_ignore}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0x3, 0x59a, &(0x7f0000001600)="$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") syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1010003, &(0x7f0000000140)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRES8=0x0, @ANYRES32=0x0], 0x0, 0x61fb, &(0x7f0000009680)="$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") mount$nfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1c0030, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x800) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000500)=""/177) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x18, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x100000008]}) mkdir(&(0x7f0000001200)='./control\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00cd131a0001f200000000000000000a00000000000040ff800000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x6ef, 0xfffffff7, {{0x1a, 0x4, 0x2, 0x13, 0x68, 0x65, 0x0, 0x2d, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0x34, 0x44, 0x1, 0x6, [{@broadcast, 0x6}, {@multicast2}, {@rand_addr=0x64010101, 0xfff}, {@local, 0x7}, {@private=0xa010101, 0x256f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x9, [0xb, 0x4]}, @timestamp={0x44, 0xc, 0xff, 0x0, 0x1, [0x3c, 0x5]}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x2, 0x2, 0x7, 0xb, 0x50, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}, @alu={0x7, 0x0, 0x3, 0x5, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x76}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x6, 0x17, &(0x7f0000000700)=""/23, 0x40f00, 0x10, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r0, r3, r3, r3, r0, r2, r2, r0], &(0x7f0000000880)=[{0x0, 0x5, 0xd, 0x5}, {0x3, 0x1, 0xd, 0xc}, {0x3, 0x4, 0x8, 0x2}], 0x10, 0x26}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@XFRMA_SET_MARK_MASK={0x8, 0x22, 0x7}]}, 0x100}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x802217, 0xde73, 0xe1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 94.832301][ T5309] usb 5-1: USB disconnect, device number 2 [ 94.016648][ T4648] Bluetooth: hci0: command tx timeout [ 94.105557][ T5324] loop0: detected capacity change from 0 to 1024 [ 94.769290][ T5324] loop0: detected capacity change from 0 to 32768 [ 94.919747][ T5325] loop0: detected capacity change from 32768 to 64 [ 94.927375][ T5324] syz.0.0: attempt to access beyond end of device [ 94.927375][ T5324] loop0: rw=2049, sector=30728, nr_sectors = 8 limit=64 [ 94.947981][ T5324] lbmIODone: I/O error in JFS log [ 94.951117][ T5324] ================================================================== [ 94.954300][ T5324] BUG: KASAN: slab-use-after-free in lmLogInit+0x1111/0x1a00 [ 94.957176][ T5324] Read of size 8 at addr ffff888032a76318 by task syz.0.0/5324 [ 94.960358][ T5324] [ 94.961382][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.961398][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.961405][ T5324] Call Trace: [ 94.961413][ T5324] [ 94.961417][ T5324] dump_stack_lvl+0xe8/0x150 [ 94.961431][ T5324] print_address_description+0x55/0x1e0 [ 94.961442][ T5324] ? lmLogInit+0x1111/0x1a00 [ 94.961451][ T5324] print_report+0x58/0x70 [ 94.961463][ T5324] kasan_report+0x117/0x150 [ 94.961479][ T5324] ? lmLogInit+0x1111/0x1a00 [ 94.961489][ T5324] lmLogInit+0x1111/0x1a00 [ 94.961502][ T5324] ? __pfx_lmLogInit+0x10/0x10 [ 94.961512][ T5324] ? __raw_spin_lock_init+0x45/0x100 [ 94.961534][ T5324] ? __init_waitqueue_head+0xa8/0x150 [ 94.961546][ T5324] lmLogOpen+0x4e3/0xf90 [ 94.961557][ T5324] jfs_mount_rw+0xf3/0x670 [ 94.961575][ T5324] ? __pfx_jfs_mount_rw+0x10/0x10 [ 94.961591][ T5324] ? list_lru_count_node+0x52/0x80 [ 94.961606][ T5324] ? shrink_dcache_sb+0x37c/0x3d0 [ 94.961621][ T5324] ? sync_filesystem+0x10b/0x230 [ 94.961630][ T5324] jfs_reconfigure+0x5da/0x990 [ 94.961639][ T5324] reconfigure_super+0x232/0x8f0 [ 94.961649][ T5324] path_mount+0xd4b/0x1040 [ 94.961660][ T5324] ? user_path_at+0xd4/0x160 [ 94.961673][ T5324] __se_sys_mount+0x31d/0x420 [ 94.961686][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 94.961700][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 94.961712][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.961725][ T5324] do_syscall_64+0x174/0x580 [ 94.961778][ T5324] ? trace_irq_disable+0x3b/0x140 [ 94.961789][ T5324] ? clear_bhb_loop+0x40/0x90 [ 94.961802][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.961814][ T5324] RIP: 0033:0x7fc055f9de99 [ 94.961826][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.961836][ T5324] RSP: 002b:00007fc056e3dfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.961850][ T5324] RAX: ffffffffffffffda RBX: 00007fc056225fa0 RCX: 00007fc055f9de99 [ 94.961858][ T5324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 94.961865][ T5324] RBP: 00007fc056033eaf R08: 0000000000000000 R09: 0000000000000000 [ 94.961872][ T5324] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000 [ 94.961880][ T5324] R13: 00007fc056226038 R14: 00007fc056225fa0 R15: 00007ffe5fd93278 [ 94.961890][ T5324] [ 94.961892][ T5324] [ 95.058395][ T5324] Allocated by task 5324: [ 95.060306][ T5324] kasan_save_track+0x3e/0x80 [ 95.062224][ T5324] __kasan_kmalloc+0x93/0xb0 [ 95.064135][ T5324] __kmalloc_cache_noprof+0x32d/0x660 [ 95.066407][ T5324] lmLogInit+0x3d5/0x1a00 [ 95.068279][ T5324] lmLogOpen+0x4e3/0xf90 [ 95.070043][ T5324] jfs_mount_rw+0xf3/0x670 [ 95.071875][ T5324] jfs_reconfigure+0x5da/0x990 [ 95.073899][ T5324] reconfigure_super+0x232/0x8f0 [ 95.076043][ T5324] path_mount+0xd4b/0x1040 [ 95.077888][ T5324] __se_sys_mount+0x31d/0x420 [ 95.079863][ T5324] do_syscall_64+0x174/0x580 [ 95.081847][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.084321][ T5324] [ 95.085301][ T5324] Freed by task 5324: [ 95.087021][ T5324] kasan_save_track+0x3e/0x80 [ 95.089042][ T5324] kasan_save_free_info+0x40/0x50 [ 95.091119][ T5324] __kasan_slab_free+0x5c/0x80 [ 95.093149][ T5324] kfree+0x1c5/0x640 [ 95.094839][ T5324] lmLogInit+0x113f/0x1a00 [ 95.096702][ T5324] lmLogOpen+0x4e3/0xf90 [ 95.098518][ T5324] jfs_mount_rw+0xf3/0x670 [ 95.100451][ T5324] jfs_reconfigure+0x5da/0x990 [ 95.102475][ T5324] reconfigure_super+0x232/0x8f0 [ 95.104554][ T5324] path_mount+0xd4b/0x1040 [ 95.106459][ T5324] __se_sys_mount+0x31d/0x420 [ 95.108499][ T5324] do_syscall_64+0x174/0x580 [ 95.110476][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.112831][ T5324] [ 95.113833][ T5324] The buggy address belongs to the object at ffff888032a76300 [ 95.113833][ T5324] which belongs to the cache kmalloc-192 of size 192 [ 95.119784][ T5324] The buggy address is located 24 bytes inside of [ 95.119784][ T5324] freed 192-byte region [ffff888032a76300, ffff888032a763c0) [ 95.125556][ T5324] [ 95.126666][ T5324] The buggy address belongs to the physical page: [ 95.129388][ T5324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a76 [ 95.133103][ T5324] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 95.136180][ T5324] page_type: f5(slab) [ 95.137865][ T5324] raw: 04fff00000000000 ffff88801b0413c0 dead000000000100 dead000000000122 [ 95.141392][ T5324] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 95.144986][ T5324] page dumped because: kasan: bad access detected [ 95.147647][ T5324] page_owner tracks the page as allocated [ 95.150074][ T5324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9253211521, free_ts 0 [ 95.157932][ T5324] post_alloc_hook+0x1f9/0x250 [ 95.160086][ T5324] get_page_from_freelist+0x21fa/0x2270 [ 95.162485][ T5324] __alloc_frozen_pages_noprof+0x18d/0x380 [ 95.165294][ T5324] allocate_slab+0x79/0x5e0 [ 95.167493][ T5324] refill_objects+0x2d5/0x350 [ 95.169488][ T5324] __pcs_replace_empty_main+0x2bf/0x6b0 [ 95.171825][ T5324] __kmalloc_cache_noprof+0x3a7/0x660 [ 95.174348][ T5324] call_usermodehelper_setup+0x8e/0x270 [ 95.176778][ T5324] kobject_uevent_env+0x662/0x9e0 [ 95.179020][ T5324] driver_register+0x2d4/0x320 [ 95.181067][ T5324] do_one_initcall+0x250/0x870 [ 95.183216][ T5324] do_initcall_level+0x10a/0x1a0 [ 95.185400][ T5324] do_initcalls+0x59/0xa0 [ 95.187204][ T5324] kernel_init_freeable+0x29d/0x3e0 [ 95.189484][ T5324] kernel_init+0x1d/0x1d0 [ 95.191379][ T5324] ret_from_fork+0x514/0xb70 [ 95.193310][ T5324] page_owner free stack trace missing [ 95.195519][ T5324] [ 95.196626][ T5324] Memory state around the buggy address: [ 95.199122][ T5324] ffff888032a76200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.202471][ T5324] ffff888032a76280: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.205815][ T5324] >ffff888032a76300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.209082][ T5324] ^ [ 95.211190][ T5324] ffff888032a76380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 95.214599][ T5324] ffff888032a76400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.218099][ T5324] ================================================================== [ 95.300537][ T5324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.303457][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.307072][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.311233][ T5324] Call Trace: [ 95.312607][ T5324] [ 95.313760][ T5324] vpanic+0x56c/0xa60 [ 95.315423][ T5324] ? __pfx_vpanic+0x10/0x10 [ 95.317496][ T5324] panic+0xc5/0xd0 [ 95.319157][ T5324] ? __pfx_panic+0x10/0x10 [ 95.321115][ T5324] ? preempt_schedule_thunk+0x16/0x40 [ 95.323352][ T5324] ? lmLogInit+0x1111/0x1a00 [ 95.325350][ T5324] ? preempt_schedule_thunk+0x16/0x40 [ 95.327603][ T5324] ? lmLogInit+0x1111/0x1a00 [ 95.329523][ T5324] check_panic_on_warn+0x89/0xb0 [ 95.331689][ T5324] ? lmLogInit+0x1111/0x1a00 [ 95.333721][ T5324] end_report+0x73/0x170 [ 95.335566][ T5324] ? lmLogInit+0x1111/0x1a00 [ 95.337647][ T5324] kasan_report+0x128/0x150 [ 95.339649][ T5324] ? lmLogInit+0x1111/0x1a00 [ 95.341668][ T5324] lmLogInit+0x1111/0x1a00 [ 95.343675][ T5324] ? __pfx_lmLogInit+0x10/0x10 [ 95.345664][ T5324] ? __raw_spin_lock_init+0x45/0x100 [ 95.347986][ T5324] ? __init_waitqueue_head+0xa8/0x150 [ 95.350251][ T5324] lmLogOpen+0x4e3/0xf90 [ 95.352073][ T5324] jfs_mount_rw+0xf3/0x670 [ 95.354041][ T5324] ? __pfx_jfs_mount_rw+0x10/0x10 [ 95.356278][ T5324] ? list_lru_count_node+0x52/0x80 [ 95.358572][ T5324] ? shrink_dcache_sb+0x37c/0x3d0 [ 95.360702][ T5324] ? sync_filesystem+0x10b/0x230 [ 95.362841][ T5324] jfs_reconfigure+0x5da/0x990 [ 95.364915][ T5324] reconfigure_super+0x232/0x8f0 [ 95.367168][ T5324] path_mount+0xd4b/0x1040 [ 95.369122][ T5324] ? user_path_at+0xd4/0x160 [ 95.371173][ T5324] __se_sys_mount+0x31d/0x420 [ 95.373225][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 95.375512][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 95.377647][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.380236][ T5324] do_syscall_64+0x174/0x580 [ 95.382225][ T5324] ? trace_irq_disable+0x3b/0x140 [ 95.384440][ T5324] ? clear_bhb_loop+0x40/0x90 [ 95.386556][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.389148][ T5324] RIP: 0033:0x7fc055f9de99 [ 95.391110][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.399423][ T5324] RSP: 002b:00007fc056e3dfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.403072][ T5324] RAX: ffffffffffffffda RBX: 00007fc056225fa0 RCX: 00007fc055f9de99 [ 95.406512][ T5324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 95.409931][ T5324] RBP: 00007fc056033eaf R08: 0000000000000000 R09: 0000000000000000 [ 95.413344][ T5324] R10: 00000000001c0030 R11: 0000000000000246 R12: 0000000000000000 [ 95.416824][ T5324] R13: 00007fc056226038 R14: 00007fc056225fa0 R15: 00007ffe5fd93278 [ 95.420192][ T5324] [ 95.421940][ T5324] Kernel Offset: disabled [ 95.423860][ T5324] Rebooting in 86400 seconds..