program: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000380)='\v', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000380)='\v', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='snd_soc_dapm_path\x00'}, 0xffd3) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000006c0003470fbb65e1c3e4ffff06006000160000005600000025000000190064000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x1, 0x687, &(0x7f0000000fc0)="$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") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0x40000582) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x4a}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x6, &(0x7f0000001380)) (async) io_setup(0x6, &(0x7f0000001380)) [ 74.876444][ T5321] Bluetooth: hci0: command tx timeout [ 75.025954][ T5340] loop0: detected capacity change from 0 to 1024 [ 75.101602][ T5341] hfsplus: request for non-existent node 134217728 in B*Tree [ 75.105296][ T5341] hfsplus: request for non-existent node 134217728 in B*Tree [ 75.122380][ T5340] ================================================================== [ 75.125978][ T5340] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0xc0/0x2a0 [ 75.129527][ T5340] Read of size 8 at addr ffff88803275d0e0 by task syz.0.0/5340 [ 75.132769][ T5340] [ 75.133873][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 75.133888][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.133896][ T5340] Call Trace: [ 75.133903][ T5340] [ 75.133909][ T5340] dump_stack_lvl+0x189/0x250 [ 75.133928][ T5340] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.133942][ T5340] ? rcu_is_watching+0x15/0xb0 [ 75.133955][ T5340] ? __kasan_check_byte+0x12/0x40 [ 75.133969][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.133981][ T5340] ? rcu_is_watching+0x15/0xb0 [ 75.133993][ T5340] ? lock_release+0x4b/0x3e0 [ 75.134006][ T5340] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.134019][ T5340] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.134033][ T5340] print_report+0xca/0x240 [ 75.134044][ T5340] ? hfsplus_bnode_read+0xc0/0x2a0 [ 75.134062][ T5340] kasan_report+0x118/0x150 [ 75.134076][ T5340] ? hfsplus_bnode_read+0xc0/0x2a0 [ 75.134090][ T5340] hfsplus_bnode_read+0xc0/0x2a0 [ 75.134103][ T5340] hfsplus_bnode_dump+0x300/0x450 [ 75.134116][ T5340] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 75.134129][ T5340] ? hfsplus_bnode_write_u16+0x8b/0xd0 [ 75.134140][ T5340] ? hfsplus_bnode_move+0x393/0xb90 [ 75.134152][ T5340] ? __pfx___hfsplus_brec_find+0x10/0x10 [ 75.134166][ T5340] hfsplus_brec_remove+0x480/0x550 [ 75.134183][ T5340] __hfsplus_delete_attr+0x1d4/0x360 [ 75.134198][ T5340] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 75.134215][ T5340] ? hfsplus_attr_build_key+0xee/0x260 [ 75.134229][ T5340] hfsplus_delete_attr+0x231/0x2d0 [ 75.134244][ T5340] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 75.134260][ T5340] ? hfsplus_find_init+0x8c/0x1d0 [ 75.134273][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 75.134286][ T5340] __hfsplus_setxattr+0x71c/0x1f40 [ 75.134301][ T5340] ? is_bpf_text_address+0x26/0x2b0 [ 75.134314][ T5340] ? kernel_text_address+0xa5/0xe0 [ 75.134325][ T5340] ? __kernel_text_address+0xd/0x40 [ 75.134335][ T5340] ? unwind_get_return_address+0x4d/0x90 [ 75.134347][ T5340] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.134362][ T5340] ? arch_stack_walk+0xfc/0x150 [ 75.134377][ T5340] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 75.134392][ T5340] ? stack_trace_save+0x9c/0xe0 [ 75.134426][ T5340] ? __kasan_kmalloc+0x93/0xb0 [ 75.134439][ T5340] ? hfsplus_setxattr+0x102/0x180 [ 75.134455][ T5340] hfsplus_setxattr+0x11e/0x180 [ 75.134470][ T5340] hfsplus_user_setxattr+0x40/0x60 [ 75.134485][ T5340] ? __pfx_hfsplus_user_setxattr+0x10/0x10 [ 75.134499][ T5340] __vfs_removexattr+0x431/0x470 [ 75.134518][ T5340] __vfs_removexattr_locked+0x1ed/0x230 [ 75.134534][ T5340] vfs_removexattr+0x80/0x1b0 [ 75.134549][ T5340] path_removexattrat+0x35d/0x690 [ 75.134561][ T5340] ? __pfx_path_removexattrat+0x10/0x10 [ 75.134580][ T5340] ? rcu_is_watching+0x15/0xb0 [ 75.134595][ T5340] __x64_sys_removexattr+0x62/0x70 [ 75.134611][ T5340] do_syscall_64+0xfa/0x3b0 [ 75.134663][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.134674][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.134685][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 75.134698][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.134709][ T5340] RIP: 0033:0x7f715ef8e9a9 [ 75.134721][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.134731][ T5340] RSP: 002b:00007f715fded038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 75.134745][ T5340] RAX: ffffffffffffffda RBX: 00007f715f1b5fa0 RCX: 00007f715ef8e9a9 [ 75.134753][ T5340] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 75.134761][ T5340] RBP: 00007f715f010d69 R08: 0000000000000000 R09: 0000000000000000 [ 75.134768][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.134775][ T5340] R13: 0000000000000000 R14: 00007f715f1b5fa0 R15: 00007ffec85693a8 [ 75.134787][ T5340] [ 75.134791][ T5340] [ 75.308641][ T5340] Allocated by task 5340: [ 75.310591][ T5340] kasan_save_track+0x3e/0x80 [ 75.313196][ T5340] __kasan_kmalloc+0x93/0xb0 [ 75.315435][ T5340] __kmalloc_noprof+0x27a/0x4f0 [ 75.317651][ T5340] __hfs_bnode_create+0xf3/0x810 [ 75.319826][ T5340] hfsplus_bnode_find+0x224/0xd20 [ 75.322184][ T5340] hfsplus_brec_find+0x15c/0x500 [ 75.324482][ T5340] hfsplus_attr_exists+0x163/0x1d0 [ 75.326895][ T5340] __hfsplus_setxattr+0x33e/0x1f40 [ 75.329154][ T5340] hfsplus_setxattr+0x11e/0x180 [ 75.331326][ T5340] hfsplus_user_setxattr+0x40/0x60 [ 75.333658][ T5340] __vfs_setxattr+0x439/0x480 [ 75.336388][ T5340] __vfs_setxattr_noperm+0x12d/0x660 [ 75.339530][ T5340] vfs_setxattr+0x16b/0x2f0 [ 75.341602][ T5340] filename_setxattr+0x274/0x600 [ 75.343851][ T5340] path_setxattrat+0x364/0x3a0 [ 75.345959][ T5340] __x64_sys_setxattr+0xbc/0xe0 [ 75.348199][ T5340] do_syscall_64+0xfa/0x3b0 [ 75.350194][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.353070][ T5340] [ 75.354258][ T5340] The buggy address belongs to the object at ffff88803275d000 [ 75.354258][ T5340] which belongs to the cache kmalloc-192 of size 192 [ 75.360620][ T5340] The buggy address is located 72 bytes to the right of [ 75.360620][ T5340] allocated 152-byte region [ffff88803275d000, ffff88803275d098) [ 75.367031][ T5340] [ 75.368156][ T5340] The buggy address belongs to the physical page: [ 75.371217][ T5340] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3275d [ 75.375570][ T5340] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 75.378933][ T5340] page_type: f5(slab) [ 75.380734][ T5340] raw: 04fff00000000000 ffff88801a4413c0 ffffea0000c9d700 dead000000000004 [ 75.384585][ T5340] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 75.389019][ T5340] page dumped because: kasan: bad access detected [ 75.391996][ T5340] page_owner tracks the page as allocated [ 75.394425][ T5340] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 10643071232, free_ts 10461409209 [ 75.402081][ T5340] post_alloc_hook+0x240/0x2a0 [ 75.404161][ T5340] get_page_from_freelist+0x21e4/0x22c0 [ 75.406656][ T5340] __alloc_frozen_pages_noprof+0x181/0x370 [ 75.409730][ T5340] alloc_pages_mpol+0x232/0x4a0 [ 75.412360][ T5340] allocate_slab+0x8a/0x3b0 [ 75.414652][ T5340] ___slab_alloc+0xbfc/0x1480 [ 75.416794][ T5340] __kmalloc_cache_noprof+0x296/0x3d0 [ 75.419111][ T5340] virtio_gpu_plane_duplicate_state+0x72/0xb0 [ 75.421811][ T5340] drm_atomic_get_plane_state+0x25d/0x5a0 [ 75.424213][ T5340] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 75.427150][ T5340] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 75.430291][ T5340] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 75.433408][ T5340] fb_pan_display+0x39e/0x680 [ 75.435690][ T5340] bit_update_start+0x4d/0x1e0 [ 75.437727][ T5340] fbcon_switch+0x1565/0x2040 [ 75.439768][ T5340] redraw_screen+0x56d/0xe90 [ 75.441769][ T5340] page last free pid 54 tgid 54 stack trace: [ 75.444250][ T5340] __free_frozen_pages+0xc71/0xe70 [ 75.446413][ T5340] __put_partials+0x161/0x1c0 [ 75.448438][ T5340] put_cpu_partial+0x17c/0x250 [ 75.450472][ T5340] __slab_free+0x2f7/0x400 [ 75.452443][ T5340] qlist_free_all+0x97/0x140 [ 75.454595][ T5340] kasan_quarantine_reduce+0x148/0x160 [ 75.457179][ T5340] __kasan_slab_alloc+0x22/0x80 [ 75.459384][ T5340] __kmalloc_cache_noprof+0x1be/0x3d0 [ 75.461670][ T5340] drm_atomic_state_alloc+0xa9/0x100 [ 75.463856][ T5340] drm_atomic_helper_dirtyfb+0xed/0xee0 [ 75.466179][ T5340] drm_fbdev_shmem_helper_fb_dirty+0x160/0x2f0 [ 75.468758][ T5340] drm_fb_helper_damage_work+0x224/0x710 [ 75.471067][ T5340] process_scheduled_works+0xae1/0x17b0 [ 75.473477][ T5340] worker_thread+0x8a0/0xda0 [ 75.475643][ T5340] kthread+0x711/0x8a0 [ 75.477565][ T5340] ret_from_fork+0x3fc/0x770 [ 75.479597][ T5340] [ 75.480673][ T5340] Memory state around the buggy address: [ 75.483086][ T5340] ffff88803275cf80: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 75.486892][ T5340] ffff88803275d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.491083][ T5340] >ffff88803275d080: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.494989][ T5340] ^ [ 75.498087][ T5340] ffff88803275d100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.501446][ T5340] ffff88803275d180: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.504692][ T5340] ================================================================== [ 75.563687][ T5340] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.567079][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 75.571775][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.576327][ T5340] Call Trace: [ 75.577793][ T5340] [ 75.579036][ T5340] dump_stack_lvl+0x99/0x250 [ 75.581109][ T5340] ? __asan_memcpy+0x40/0x70 [ 75.583226][ T5340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.585558][ T5340] ? __pfx__printk+0x10/0x10 [ 75.587514][ T5340] panic+0x2db/0x790 [ 75.589179][ T5340] ? __pfx_preempt_schedule+0x10/0x10 [ 75.591397][ T5340] ? __pfx_panic+0x10/0x10 [ 75.593391][ T5340] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 75.596021][ T5340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.598692][ T5340] ? hfsplus_bnode_read+0xc0/0x2a0 [ 75.600691][ T5340] check_panic_on_warn+0x89/0xb0 [ 75.602785][ T5340] ? hfsplus_bnode_read+0xc0/0x2a0 [ 75.604984][ T5340] end_report+0x78/0x160 [ 75.606895][ T5340] kasan_report+0x129/0x150 [ 75.608782][ T5340] ? hfsplus_bnode_read+0xc0/0x2a0 [ 75.610902][ T5340] hfsplus_bnode_read+0xc0/0x2a0 [ 75.612852][ T5340] hfsplus_bnode_dump+0x300/0x450 [ 75.614988][ T5340] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 75.617263][ T5340] ? hfsplus_bnode_write_u16+0x8b/0xd0 [ 75.619924][ T5340] ? hfsplus_bnode_move+0x393/0xb90 [ 75.622310][ T5340] ? __pfx___hfsplus_brec_find+0x10/0x10 [ 75.624842][ T5340] hfsplus_brec_remove+0x480/0x550 [ 75.627144][ T5340] __hfsplus_delete_attr+0x1d4/0x360 [ 75.629457][ T5340] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 75.631853][ T5340] ? hfsplus_attr_build_key+0xee/0x260 [ 75.634202][ T5340] hfsplus_delete_attr+0x231/0x2d0 [ 75.636462][ T5340] ? __pfx_hfsplus_delete_attr+0x10/0x10 [ 75.639064][ T5340] ? hfsplus_find_init+0x8c/0x1d0 [ 75.641305][ T5340] ? hfsplus_find_init+0x15a/0x1d0 [ 75.643587][ T5340] __hfsplus_setxattr+0x71c/0x1f40 [ 75.645665][ T5340] ? is_bpf_text_address+0x26/0x2b0 [ 75.647907][ T5340] ? kernel_text_address+0xa5/0xe0 [ 75.650018][ T5340] ? __kernel_text_address+0xd/0x40 [ 75.652207][ T5340] ? unwind_get_return_address+0x4d/0x90 [ 75.654506][ T5340] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.657123][ T5340] ? arch_stack_walk+0xfc/0x150 [ 75.659240][ T5340] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 75.661647][ T5340] ? stack_trace_save+0x9c/0xe0 [ 75.663692][ T5340] ? __kasan_kmalloc+0x93/0xb0 [ 75.665612][ T5340] ? hfsplus_setxattr+0x102/0x180 [ 75.667689][ T5340] hfsplus_setxattr+0x11e/0x180 [ 75.669687][ T5340] hfsplus_user_setxattr+0x40/0x60 [ 75.671733][ T5340] ? __pfx_hfsplus_user_setxattr+0x10/0x10 [ 75.674131][ T5340] __vfs_removexattr+0x431/0x470 [ 75.676123][ T5340] __vfs_removexattr_locked+0x1ed/0x230 [ 75.678465][ T5340] vfs_removexattr+0x80/0x1b0 [ 75.680755][ T5340] path_removexattrat+0x35d/0x690 [ 75.683103][ T5340] ? __pfx_path_removexattrat+0x10/0x10 [ 75.685579][ T5340] ? rcu_is_watching+0x15/0xb0 [ 75.687709][ T5340] __x64_sys_removexattr+0x62/0x70 [ 75.689865][ T5340] do_syscall_64+0xfa/0x3b0 [ 75.691736][ T5340] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.693921][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.696506][ T5340] ? clear_bhb_loop+0x60/0xb0 [ 75.698509][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.700935][ T5340] RIP: 0033:0x7f715ef8e9a9 [ 75.702905][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.711810][ T5340] RSP: 002b:00007f715fded038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 75.715269][ T5340] RAX: ffffffffffffffda RBX: 00007f715f1b5fa0 RCX: 00007f715ef8e9a9 [ 75.718764][ T5340] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 75.722172][ T5340] RBP: 00007f715f010d69 R08: 0000000000000000 R09: 0000000000000000 [ 75.725629][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.729199][ T5340] R13: 0000000000000000 R14: 00007f715f1b5fa0 R15: 00007ffec85693a8 [ 75.732520][ T5340] [ 75.734292][ T5340] Kernel Offset: disabled [ 75.736188][ T5340] Rebooting in 86400 seconds..