program: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000071113300000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f6000000000000000000000000007672bfd3c09d1ce686200c0931af95758e77879672acb25eabcf4f25cd437cb93bfafb12ea3408818e81b7872e1de9db8225e6fca5be0b6c87f90448a804b7c9c8976140831f88a9c1eeedc7c7e2c676b9258f0e94a3bcafdc6eefda9fdd734df7f4b5381cb30df0a19d52feacaf0fd689b5a2927345298c4e7160f60644d580b52eee5272e1cae8d3c409bdd0229dc8c4891d35116ce7937aad77d443c82c7bd2af398cd984bea58a1ad96094c1ab34092439356db741c6acb3220300"/213], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000880), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) [ 87.898250][ T4708] Bluetooth: hci0: command tx timeout [ 87.913108][ T9] cfg80211: failed to load regulatory.db [ 88.033434][ T5368] ------------[ cut here ]------------ [ 88.036174][ T5368] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1) [ 88.052766][ T5368] WARNING: CPU: 0 PID: 5368 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 88.057271][ T5368] Modules linked in: [ 88.059024][ T5368] CPU: 0 UID: 0 PID: 5368 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.064192][ T5368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.069247][ T5368] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 88.072517][ T5368] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 5f 1d aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 88.081680][ T5368] RSP: 0018:ffffc9000d28ef08 EFLAGS: 00010282 [ 88.084778][ T5368] RAX: 6650f1cbe5e74f00 RBX: 000000000000001f RCX: 0000000000100000 [ 88.088376][ T5368] RDX: ffffc9000e34a000 RSI: 000000000001b756 RDI: 000000000001b757 [ 88.092092][ T5368] RBP: 000000000000001f R08: 0000000000000003 R09: 0000000000000004 [ 88.095673][ T5368] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888052fe0168 [ 88.099350][ T5368] R13: ffff888052fe0188 R14: ffff888052fe01a0 R15: 000000000000001f [ 88.103303][ T5368] FS: 00007f9ba38016c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 88.107561][ T5368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.110790][ T5368] CR2: 0000200000002000 CR3: 00000000336c5000 CR4: 0000000000352ef0 [ 88.114241][ T5368] Call Trace: [ 88.115669][ T5368] [ 88.117040][ T5368] reg_set_min_max+0x214/0x300 [ 88.119226][ T5368] check_cond_jmp_op+0x1625/0x2910 [ 88.121799][ T5368] ? kfree+0x4d/0x440 [ 88.123617][ T5368] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 88.126164][ T5368] ? push_jmp_history+0x1dd/0x6f0 [ 88.128402][ T5368] do_check+0x6751/0xe520 [ 88.130459][ T5368] ? __pfx_do_check+0x10/0x10 [ 88.132418][ T5368] ? init_func_state+0x1ddf/0x2d20 [ 88.134566][ T5368] do_check_common+0x1949/0x24f0 [ 88.137028][ T5368] bpf_check+0x1746a/0x1d2d0 [ 88.139507][ T5368] ? is_bpf_text_address+0x26/0x2b0 [ 88.142109][ T5368] ? kernel_text_address+0xa5/0xe0 [ 88.144471][ T5368] ? __kernel_text_address+0xd/0x40 [ 88.146759][ T5368] ? __lock_acquire+0xab9/0xd20 [ 88.148927][ T5368] ? __mutex_trylock_common+0x153/0x260 [ 88.151519][ T5368] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.154068][ T5368] ? css_rstat_updated+0x23a/0x4f0 [ 88.156281][ T5368] ? __lock_acquire+0xab9/0xd20 [ 88.158508][ T5368] ? __pfx_bpf_check+0x10/0x10 [ 88.160584][ T5368] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.162835][ T5368] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 88.165418][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.167565][ T5368] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.170076][ T5368] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 88.172628][ T5368] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 88.175499][ T5368] ? __asan_memset+0x22/0x50 [ 88.177572][ T5368] ? bpf_obj_name_cpy+0x194/0x1e0 [ 88.179924][ T5368] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 88.182253][ T5368] ? security_bpf_prog_load+0x7f/0x310 [ 88.184790][ T5368] bpf_prog_load+0x1318/0x1930 [ 88.187093][ T5368] ? __pfx_bpf_prog_load+0x10/0x10 [ 88.189373][ T5368] ? bpf_lsm_bpf+0x9/0x20 [ 88.191519][ T5368] ? security_bpf+0x7e/0x300 [ 88.193757][ T5368] __sys_bpf+0x528/0x870 [ 88.195725][ T5368] ? __pfx___sys_bpf+0x10/0x10 [ 88.197939][ T5368] ? rcu_is_watching+0x15/0xb0 [ 88.200769][ T5368] ? rcu_is_watching+0x15/0xb0 [ 88.203092][ T5368] __x64_sys_bpf+0x7c/0x90 [ 88.205163][ T5368] do_syscall_64+0xfa/0x3b0 [ 88.207012][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.209049][ T5368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.212229][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 88.214374][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.216991][ T5368] RIP: 0033:0x7f9ba298ebe9 [ 88.218980][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.227750][ T5368] RSP: 002b:00007f9ba3801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.231659][ T5368] RAX: ffffffffffffffda RBX: 00007f9ba2bb5fa0 RCX: 00007f9ba298ebe9 [ 88.235098][ T5368] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 88.238601][ T5368] RBP: 00007f9ba2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.242170][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.245735][ T5368] R13: 00007f9ba2bb6038 R14: 00007f9ba2bb5fa0 R15: 00007ffd41d11678 [ 88.249336][ T5368] [ 88.250913][ T5368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.254180][ T5368] CPU: 0 UID: 0 PID: 5368 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.258067][ T5368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.262668][ T5368] Call Trace: [ 88.264099][ T5368] [ 88.265392][ T5368] dump_stack_lvl+0x99/0x250 [ 88.267471][ T5368] ? __asan_memcpy+0x40/0x70 [ 88.269572][ T5368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.271961][ T5368] ? __pfx__printk+0x10/0x10 [ 88.274033][ T5368] vpanic+0x281/0x750 [ 88.275911][ T5368] ? __pfx__printk+0x10/0x10 [ 88.278041][ T5368] ? __pfx_vpanic+0x10/0x10 [ 88.280141][ T5368] ? is_bpf_text_address+0x26/0x2b0 [ 88.282489][ T5368] panic+0xb9/0xc0 [ 88.284227][ T5368] ? __pfx_panic+0x10/0x10 [ 88.286595][ T5368] __warn+0x31b/0x4b0 [ 88.288924][ T5368] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 88.292165][ T5368] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 88.294900][ T5368] report_bug+0x2be/0x4f0 [ 88.296774][ T5368] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 88.299386][ T5368] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 88.302023][ T5368] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 88.304582][ T5368] handle_bug+0x84/0x160 [ 88.306473][ T5368] exc_invalid_op+0x1a/0x50 [ 88.308616][ T5368] asm_exc_invalid_op+0x1a/0x20 [ 88.310907][ T5368] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 88.313769][ T5368] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 5f 1d aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 88.322407][ T5368] RSP: 0018:ffffc9000d28ef08 EFLAGS: 00010282 [ 88.325187][ T5368] RAX: 6650f1cbe5e74f00 RBX: 000000000000001f RCX: 0000000000100000 [ 88.328801][ T5368] RDX: ffffc9000e34a000 RSI: 000000000001b756 RDI: 000000000001b757 [ 88.332433][ T5368] RBP: 000000000000001f R08: 0000000000000003 R09: 0000000000000004 [ 88.336046][ T5368] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888052fe0168 [ 88.339536][ T5368] R13: ffff888052fe0188 R14: ffff888052fe01a0 R15: 000000000000001f [ 88.343115][ T5368] reg_set_min_max+0x214/0x300 [ 88.345435][ T5368] check_cond_jmp_op+0x1625/0x2910 [ 88.347722][ T5368] ? kfree+0x4d/0x440 [ 88.349556][ T5368] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 88.352086][ T5368] ? push_jmp_history+0x1dd/0x6f0 [ 88.354704][ T5368] do_check+0x6751/0xe520 [ 88.356928][ T5368] ? __pfx_do_check+0x10/0x10 [ 88.358973][ T5368] ? init_func_state+0x1ddf/0x2d20 [ 88.361047][ T5368] do_check_common+0x1949/0x24f0 [ 88.363159][ T5368] bpf_check+0x1746a/0x1d2d0 [ 88.365057][ T5368] ? is_bpf_text_address+0x26/0x2b0 [ 88.367344][ T5368] ? kernel_text_address+0xa5/0xe0 [ 88.369690][ T5368] ? __kernel_text_address+0xd/0x40 [ 88.372057][ T5368] ? __lock_acquire+0xab9/0xd20 [ 88.374251][ T5368] ? __mutex_trylock_common+0x153/0x260 [ 88.376631][ T5368] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.379411][ T5368] ? css_rstat_updated+0x23a/0x4f0 [ 88.381859][ T5368] ? __lock_acquire+0xab9/0xd20 [ 88.384020][ T5368] ? __pfx_bpf_check+0x10/0x10 [ 88.386234][ T5368] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.388616][ T5368] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 88.391498][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.393887][ T5368] ? ktime_get_with_offset+0x8c/0x2a0 [ 88.396299][ T5368] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 88.399191][ T5368] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 88.402359][ T5368] ? __asan_memset+0x22/0x50 [ 88.404717][ T5368] ? bpf_obj_name_cpy+0x194/0x1e0 [ 88.407095][ T5368] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 88.409671][ T5368] ? security_bpf_prog_load+0x7f/0x310 [ 88.412093][ T5368] bpf_prog_load+0x1318/0x1930 [ 88.414186][ T5368] ? __pfx_bpf_prog_load+0x10/0x10 [ 88.416474][ T5368] ? bpf_lsm_bpf+0x9/0x20 [ 88.418403][ T5368] ? security_bpf+0x7e/0x300 [ 88.420461][ T5368] __sys_bpf+0x528/0x870 [ 88.422345][ T5368] ? __pfx___sys_bpf+0x10/0x10 [ 88.424459][ T5368] ? rcu_is_watching+0x15/0xb0 [ 88.426687][ T5368] ? rcu_is_watching+0x15/0xb0 [ 88.429083][ T5368] __x64_sys_bpf+0x7c/0x90 [ 88.431188][ T5368] do_syscall_64+0xfa/0x3b0 [ 88.433197][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.435352][ T5368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.437889][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 88.439814][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.442182][ T5368] RIP: 0033:0x7f9ba298ebe9 [ 88.444018][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.451991][ T5368] RSP: 002b:00007f9ba3801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.455712][ T5368] RAX: ffffffffffffffda RBX: 00007f9ba2bb5fa0 RCX: 00007f9ba298ebe9 [ 88.459141][ T5368] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 88.462807][ T5368] RBP: 00007f9ba2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.466738][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.470384][ T5368] R13: 00007f9ba2bb6038 R14: 00007f9ba2bb5fa0 R15: 00007ffd41d11678 [ 88.474166][ T5368] [ 88.475968][ T5368] Kernel Offset: disabled [ 88.478104][ T5368] Rebooting in 86400 seconds..