./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1062539014 <...> Warning: Permanently added '10.128.1.245' (ED25519) to the list of known hosts. execve("./syz-executor1062539014", ["./syz-executor1062539014"], 0x7ffc8e778ab0 /* 10 vars */) = 0 brk(NULL) = 0x555568631000 brk(0x555568631d40) = 0x555568631d40 arch_prctl(ARCH_SET_FS, 0x5555686313c0) = 0 set_tid_address(0x555568631690) = 5100 set_robust_list(0x5555686316a0, 24) = 0 rseq(0x555568631ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1062539014", 4096) = 28 getrandom("\x0e\x37\x0f\xab\x98\xfb\x47\x80", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568631d40 brk(0x555568652d40) = 0x555568652d40 brk(0x555568653000) = 0x555568653000 mprotect(0x7f12a6b66000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 futex(0x7f12a6b6c30c, FUTEX_WAKE_PRIVATE, 1000000) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f12a6b08c60, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f12a6afa2e0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f12a6a7e000 mprotect(0x7f12a6a7f000, 131072, PROT_READ|PROT_WRITE) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f12a6a9e990, parent_tid=0x7f12a6a9e990, exit_signal=0, stack=0x7f12a6a7e000, stack_size=0x20300, tls=0x7f12a6a9e6c0}./strace-static-x86_64: Process 5101 attached [pid 5101] rseq(0x7f12a6a9efe0, 0x20, 0, 0x53053053) = 0 [pid 5100] <... clone3 resumed> => {parent_tid=[5101]}, 88) = 5101 [pid 5101] set_robust_list(0x7f12a6a9e9a0, 24 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] <... set_robust_list resumed>) = 0 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], [pid 5100] futex(0x7f12a6b6c308, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5100] <... futex resumed>) = 0 [pid 5101] userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC [pid 5100] futex(0x7f12a6b6c30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... userfaultfd resumed>) = 3 [pid 5101] futex(0x7f12a6b6c30c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f12a6b6c308, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5101] ioctl(3, UFFDIO_API, {api=0xaa, features=0 [pid 5100] futex(0x7f12a6b6c30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... ioctl resumed> => features=UFFD_FEATURE_PAGEFAULT_FLAG_WP|UFFD_FEATURE_EVENT_FORK|UFFD_FEATURE_EVENT_REMAP|UFFD_FEATURE_EVENT_REMOVE|UFFD_FEATURE_MISSING_HUGETLBFS|UFFD_FEATURE_MISSING_SHMEM|UFFD_FEATURE_EVENT_UNMAP|UFFD_FEATURE_SIGBUS|UFFD_FEATURE_THREAD_ID|UFFD_FEATURE_MINOR_HUGETLBFS|UFFD_FEATURE_MINOR_SHMEM|UFFD_FEATURE_EXACT_ADDRESS|0x14000, ioctls=1<<_UFFDIO_REGISTER|1<<_UFFDIO_UNREGISTER|1<<_UFFDIO_API}) = 0 [pid 5101] futex(0x7f12a6b6c30c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5101] futex(0x7f12a6b6c308, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] futex(0x7f12a6b6c308, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] <... futex resumed>) = 0 [pid 5100] futex(0x7f12a6b6c30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] ioctl(3, UFFDIO_REGISTER, {range={start=0x200e2000, len=0xc00000}, mode=UFFDIO_REGISTER_MODE_MISSING|UFFDIO_REGISTER_MODE_WP, ioctls=1<<_UFFDIO_WAKE|1<<_UFFDIO_COPY|1<<_UFFDIO_ZEROPAGE|1<<_UFFDIO_WRITEPROTECT|0x120}) = 0 [pid 5101] futex(0x7f12a6b6c30c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5101] <... futex resumed>) = 1 [pid 5100] futex(0x7f12a6b6c308, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] io_uring_setup(0, {flags=0, sq_thread_cpu=0, sq_thread_idle=0 [pid 5100] <... futex resumed>) = 0 [pid 5101] <... io_uring_setup resumed>}) = -1 EINVAL (Invalid argument) [pid 5100] futex(0x7f12a6b6c30c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] mmap(NULL, 0, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5100] futex(0x7f12a6b6c31c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f12a6a5d000 [pid 5100] mprotect(0x7f12a6a5e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f12a6a7d990, parent_tid=0x7f12a6a7d990, exit_signal=0, stack=0x7f12a6a5d000, stack_size=0x20300, tls=0x7f12a6a7d6c0}./strace-static-x86_64: Process 5102 attached [pid 5102] rseq(0x7f12a6a7dfe0, 0x20, 0, 0x53053053 [pid 5100] <... clone3 resumed> => {parent_tid=[5102]}, 88) = 5102 [pid 5102] <... rseq resumed>) = 0 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5102] set_robust_list(0x7f12a6a7d9a0, 24 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5100] futex(0x7f12a6b6c318, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5100] futex(0x7f12a6b6c31c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5102] mmap(0x20000000, 16732160, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|MAP_POPULATE|MAP_DENYWRITE|MAP_HUGETLB, -1, 0) = 0x20000000 [pid 5102] futex(0x7f12a6b6c31c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] futex(0x7f12a6b6c318, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] <... futex resumed>) = 0 [pid 5100] exit_group(0) = ? [ 52.765210][ T5101] ================================================================== [ 52.773305][ T5101] BUG: KASAN: slab-use-after-free in handle_mm_fault+0x14f0/0x19a0 [ 52.781189][ T5101] Read of size 8 at addr ffff888028cdb118 by task syz-executor106/5101 [ 52.789429][ T5101] [ 52.791746][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz-executor106 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 52.802321][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.812367][ T5101] Call Trace: [ 52.815635][ T5101] [ 52.818567][ T5101] dump_stack_lvl+0x241/0x360 [ 52.823253][ T5101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 52.828447][ T5101] ? __pfx__printk+0x10/0x10 [ 52.833040][ T5101] ? _printk+0xd5/0x120 [ 52.837195][ T5101] ? __virt_addr_valid+0x183/0x530 [ 52.842299][ T5101] ? __virt_addr_valid+0x183/0x530 [ 52.847407][ T5101] print_report+0x169/0x550 [ 52.851902][ T5101] ? __virt_addr_valid+0x183/0x530 [ 52.857003][ T5101] ? __virt_addr_valid+0x183/0x530 [ 52.862103][ T5101] ? __virt_addr_valid+0x45f/0x530 [ 52.867200][ T5101] ? __phys_addr+0xba/0x170 [ 52.871689][ T5101] ? handle_mm_fault+0x14f0/0x19a0 [ 52.876783][ T5101] kasan_report+0x143/0x180 [ 52.881275][ T5101] ? handle_mm_fault+0x14f0/0x19a0 [ 52.886370][ T5101] handle_mm_fault+0x14f0/0x19a0 [ 52.891298][ T5101] ? __pfx_handle_mm_fault+0x10/0x10 [ 52.896567][ T5101] ? lock_vma_under_rcu+0x592/0x6e0 [ 52.901753][ T5101] ? rcu_is_watching+0x15/0xb0 [ 52.906501][ T5101] exc_page_fault+0x459/0x8c0 [ 52.911168][ T5101] asm_exc_page_fault+0x26/0x30 [ 52.916003][ T5101] RIP: 0033:0x7f12a6aafb90 [ 52.920400][ T5101] Code: ba 03 00 00 00 31 ff 89 c6 e8 6c 32 03 00 41 b9 00 00 00 10 45 89 e8 31 ff 8b 34 25 00 00 00 20 b9 01 80 00 00 ba 03 00 00 00 <48> 89 04 25 00 70 c5 20 c1 e6 06 e8 40 32 03 00 48 89 04 25 00 00 [ 52.939994][ T5101] RSP: 002b:00007f12a6a9e230 EFLAGS: 00010246 [ 52.946051][ T5101] RAX: ffffffffffffffff RBX: 00007f12a6b6c308 RCX: 0000000000008001 [ 52.954005][ T5101] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.961955][ T5101] RBP: 00007f12a6b6c300 R08: 00000000ffffffff R09: 0000000010000000 [ 52.969908][ T5101] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f12a6b3a004 [ 52.977870][ T5101] R13: ffffffffffffffff R14: 00007fff5b0ad610 R15: 00007fff5b0ad6f8 [ 52.985832][ T5101] [ 52.988834][ T5101] [ 52.991137][ T5101] Allocated by task 5100: [ 52.995441][ T5101] kasan_save_track+0x3f/0x80 [ 53.000108][ T5101] __kasan_slab_alloc+0x66/0x80 [ 53.004941][ T5101] kmem_cache_alloc_noprof+0x135/0x2a0 [ 53.010381][ T5101] vm_area_alloc+0x24/0x1d0 [ 53.014869][ T5101] mmap_region+0xc3d/0x2090 [ 53.019354][ T5101] do_mmap+0x8f9/0x1010 [ 53.023495][ T5101] vm_mmap_pgoff+0x1dd/0x3d0 [ 53.028070][ T5101] do_syscall_64+0xf3/0x230 [ 53.032562][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.038435][ T5101] [ 53.040740][ T5101] Freed by task 0: [ 53.044437][ T5101] kasan_save_track+0x3f/0x80 [ 53.049100][ T5101] kasan_save_free_info+0x40/0x50 [ 53.054110][ T5101] poison_slab_object+0xe0/0x150 [ 53.059030][ T5101] __kasan_slab_free+0x37/0x60 [ 53.063903][ T5101] kmem_cache_free+0x145/0x350 [ 53.068669][ T5101] rcu_core+0xafd/0x1830 [ 53.072905][ T5101] handle_softirqs+0x2c4/0x970 [ 53.077661][ T5101] __irq_exit_rcu+0xf4/0x1c0 [ 53.082246][ T5101] irq_exit_rcu+0x9/0x30 [ 53.086482][ T5101] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 53.092107][ T5101] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.098071][ T5101] [ 53.100380][ T5101] Last potentially related work creation: [ 53.106075][ T5101] kasan_save_stack+0x3f/0x60 [ 53.110740][ T5101] __kasan_record_aux_stack+0xac/0xc0 [ 53.116096][ T5101] call_rcu+0x167/0xa70 [ 53.120233][ T5101] do_vmi_align_munmap+0x155c/0x18c0 [ 53.125513][ T5101] do_vmi_munmap+0x261/0x2f0 [ 53.130085][ T5101] mmap_region+0x72f/0x2090 [ 53.134577][ T5101] do_mmap+0x8f9/0x1010 [ 53.138716][ T5101] vm_mmap_pgoff+0x1dd/0x3d0 [ 53.143286][ T5101] ksys_mmap_pgoff+0x544/0x720 [ 53.148030][ T5101] do_syscall_64+0xf3/0x230 [ 53.152518][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.158396][ T5101] [ 53.160702][ T5101] The buggy address belongs to the object at ffff888028cdb0f8 [ 53.160702][ T5101] which belongs to the cache vm_area_struct of size 184 [ 53.174995][ T5101] The buggy address is located 32 bytes inside of [ 53.174995][ T5101] freed 184-byte region [ffff888028cdb0f8, ffff888028cdb1b0) [ 53.188683][ T5101] [ 53.191004][ T5101] The buggy address belongs to the physical page: [ 53.197413][ T5101] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28cdb [ 53.206192][ T5101] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.213290][ T5101] page_type: 0xfdffffff(slab) [ 53.217950][ T5101] raw: 00fff00000000000 ffff888015eefb40 ffffea0000ba26c0 0000000000000008 [ 53.226519][ T5101] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 53.235079][ T5101] page dumped because: kasan: bad access detected [ 53.241474][ T5101] page_owner tracks the page as allocated [ 53.247169][ T5101] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4765, tgid 4765 (sh), ts 28976697325, free_ts 27352914602 [ 53.265642][ T5101] post_alloc_hook+0x1f3/0x230 [ 53.270400][ T5101] get_page_from_freelist+0x2ccb/0x2d80 [ 53.275926][ T5101] __alloc_pages_noprof+0x256/0x6c0 [ 53.281104][ T5101] alloc_slab_page+0x5f/0x120 [ 53.285766][ T5101] allocate_slab+0x5a/0x2f0 [ 53.290254][ T5101] ___slab_alloc+0xcd1/0x14b0 [ 53.294916][ T5101] __slab_alloc+0x58/0xa0 [ 53.299232][ T5101] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 53.305021][ T5101] vm_area_alloc+0x24/0x1d0 [ 53.309868][ T5101] mmap_region+0xc3d/0x2090 [ 53.314355][ T5101] do_mmap+0x8f9/0x1010 [ 53.318489][ T5101] vm_mmap_pgoff+0x1dd/0x3d0 [ 53.323091][ T5101] ksys_mmap_pgoff+0x4f1/0x720 [ 53.327848][ T5101] do_syscall_64+0xf3/0x230 [ 53.332341][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.338321][ T5101] page last free pid 4563 tgid 4563 stack trace: [ 53.344635][ T5101] free_unref_page+0xd22/0xea0 [ 53.349396][ T5101] __slab_free+0x31b/0x3d0 [ 53.353804][ T5101] qlist_free_all+0x9e/0x140 [ 53.358384][ T5101] kasan_quarantine_reduce+0x14f/0x170 [ 53.363835][ T5101] __kasan_slab_alloc+0x23/0x80 [ 53.368672][ T5101] kmem_cache_alloc_noprof+0x135/0x2a0 [ 53.374124][ T5101] getname_flags+0xb7/0x540 [ 53.378611][ T5101] vfs_fstatat+0x12c/0x190 [ 53.383022][ T5101] __x64_sys_newfstatat+0x11d/0x1a0 [ 53.388227][ T5101] do_syscall_64+0xf3/0x230 [ 53.392727][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.398638][ T5101] [ 53.400948][ T5101] Memory state around the buggy address: [ 53.406563][ T5101] ffff888028cdb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [pid 5102] <... futex resumed>) = ? [pid 5102] +++ exited with 0 +++ [ 53.414605][ T5101] ffff888028cdb080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fa [ 53.422648][ T5101] >ffff888028cdb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.430685][ T5101] ^ [ 53.435513][ T5101] ffff888028cdb180: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 53.443553][ T5101] ffff888028cdb200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.451589][ T5101] ================================================================== [ 53.466271][ T5101] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.473499][ T5101] CPU: 0 UID: 0 PID: 5101 Comm: syz-executor106 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 53.484060][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 53.494096][ T5101] Call Trace: [ 53.497355][ T5101] [ 53.500269][ T5101] dump_stack_lvl+0x241/0x360 [ 53.504933][ T5101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 53.510109][ T5101] ? __pfx__printk+0x10/0x10 [ 53.514677][ T5101] ? rcu_is_watching+0x15/0xb0 [ 53.519415][ T5101] ? preempt_schedule+0xe1/0xf0 [ 53.524244][ T5101] ? vscnprintf+0x5d/0x90 [ 53.528553][ T5101] panic+0x349/0x870 [ 53.532432][ T5101] ? check_panic_on_warn+0x21/0xb0 [ 53.537521][ T5101] ? __pfx_panic+0x10/0x10 [ 53.541920][ T5101] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 53.547973][ T5101] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 53.554365][ T5101] ? print_report+0x502/0x550 [ 53.559019][ T5101] check_panic_on_warn+0x86/0xb0 [ 53.563973][ T5101] ? handle_mm_fault+0x14f0/0x19a0 [ 53.569101][ T5101] end_report+0x77/0x160 [ 53.573342][ T5101] kasan_report+0x154/0x180 [ 53.577841][ T5101] ? handle_mm_fault+0x14f0/0x19a0 [ 53.582939][ T5101] handle_mm_fault+0x14f0/0x19a0 [ 53.587952][ T5101] ? __pfx_handle_mm_fault+0x10/0x10 [ 53.593225][ T5101] ? lock_vma_under_rcu+0x592/0x6e0 [ 53.598434][ T5101] ? rcu_is_watching+0x15/0xb0 [ 53.603183][ T5101] exc_page_fault+0x459/0x8c0 [ 53.607876][ T5101] asm_exc_page_fault+0x26/0x30 [ 53.612715][ T5101] RIP: 0033:0x7f12a6aafb90 [ 53.617111][ T5101] Code: ba 03 00 00 00 31 ff 89 c6 e8 6c 32 03 00 41 b9 00 00 00 10 45 89 e8 31 ff 8b 34 25 00 00 00 20 b9 01 80 00 00 ba 03 00 00 00 <48> 89 04 25 00 70 c5 20 c1 e6 06 e8 40 32 03 00 48 89 04 25 00 00 [ 53.636702][ T5101] RSP: 002b:00007f12a6a9e230 EFLAGS: 00010246 [ 53.642749][ T5101] RAX: ffffffffffffffff RBX: 00007f12a6b6c308 RCX: 0000000000008001 [ 53.650696][ T5101] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.658653][ T5101] RBP: 00007f12a6b6c300 R08: 00000000ffffffff R09: 0000000010000000 [ 53.666602][ T5101] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f12a6b3a004 [ 53.674551][ T5101] R13: ffffffffffffffff R14: 00007fff5b0ad610 R15: 00007fff5b0ad6f8 [ 53.682503][ T5101] [ 53.685724][ T5101] Kernel Offset: disabled [ 53.690035][ T5101] Rebooting in 86400 seconds..