program: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0xa80000) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x5907, &(0x7f000000b240)="$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") [ 59.372362][ T5306] Bluetooth: hci0: command tx timeout [ 59.372308][ T5306] Bluetooth: hci0: command tx timeout [ 59.469389][ T5320] loop0: detected capacity change from 0 to 32768 [ 59.481300][ T5320] ================================================================== [ 59.483872][ T5320] BUG: KASAN: slab-out-of-bounds in journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.487016][ T5320] Read of size 8 at addr ffff8880438c6000 by task syz.0.0/5320 [ 59.489523][ T5320] [ 59.490250][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 59.492994][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.496796][ T5320] Call Trace: [ 59.497955][ T5320] [ 59.499149][ T5320] dump_stack_lvl+0x241/0x360 [ 59.501895][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.504135][ T5320] ? __pfx__printk+0x10/0x10 [ 59.506168][ T5320] ? _printk+0xd5/0x120 [ 59.507935][ T5320] ? __virt_addr_valid+0x183/0x530 [ 59.509962][ T5320] ? __virt_addr_valid+0x183/0x530 [ 59.511742][ T5320] print_report+0x169/0x550 [ 59.513338][ T5320] ? __virt_addr_valid+0x183/0x530 [ 59.515163][ T5320] ? __virt_addr_valid+0x183/0x530 [ 59.517108][ T5320] ? __virt_addr_valid+0x45f/0x530 [ 59.519021][ T5320] ? __phys_addr+0xba/0x170 [ 59.520711][ T5320] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.523117][ T5320] kasan_report+0x143/0x180 [ 59.524875][ T5320] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.527284][ T5320] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.529728][ T5320] bch2_sb_clean_to_text+0x138/0x240 [ 59.531811][ T5320] bch2_sb_field_validate+0x201/0x2e0 [ 59.533973][ T5320] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 59.536272][ T5320] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 59.538728][ T5320] ? bch2_opt_validate+0x2ca/0x300 [ 59.540699][ T5320] bch2_sb_validate+0xbb1/0xf70 [ 59.542453][ T5320] ? blk_status_to_errno+0x22/0x80 [ 59.544449][ T5320] ? __pfx_bch2_sb_validate+0x10/0x10 [ 59.546539][ T5320] ? bch2_sb_compatible+0x493/0x850 [ 59.548595][ T5320] ? read_one_super+0x65a/0xf40 [ 59.550564][ T5320] ? read_one_super+0xe23/0xf40 [ 59.552543][ T5320] ? __pfx_read_one_super+0x10/0x10 [ 59.554707][ T5320] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 59.559020][ T5320] ? bdev_file_open_by_path+0x382/0x480 [ 59.561279][ T5320] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 59.563620][ T5320] ? trace_kmalloc+0x1f/0xd0 [ 59.565497][ T5320] ? __asan_memcpy+0x40/0x70 [ 59.567365][ T5320] __bch2_read_super+0xc24/0x1380 [ 59.569513][ T5320] ? stack_depot_save_flags+0x6e4/0x830 [ 59.571180][ T5320] ? __pfx___bch2_read_super+0x10/0x10 [ 59.573402][ T5320] ? rcu_is_watching+0x15/0xb0 [ 59.575327][ T5320] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.577661][ T5320] ? kfree+0x4e/0x440 [ 59.579229][ T5320] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.581443][ T5320] bch2_fs_open+0x270/0x2f80 [ 59.583110][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.585136][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.587270][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 59.589170][ T5320] ? __pfx_bch2_fs_open+0x10/0x10 [ 59.591033][ T5320] ? stack_trace_save+0x118/0x1d0 [ 59.592743][ T5320] ? kasan_save_track+0x51/0x80 [ 59.594387][ T5320] ? kasan_save_track+0x3f/0x80 [ 59.596057][ T5320] ? kasan_save_free_info+0x40/0x50 [ 59.597656][ T5320] ? __kasan_slab_free+0x59/0x70 [ 59.598941][ T5320] ? kfree+0x1a0/0x440 [ 59.600345][ T5320] ? sget+0x2b8/0x620 [ 59.601746][ T5320] ? bch2_fs_get_tree+0x683/0x1710 [ 59.603524][ T5320] ? vfs_get_tree+0x90/0x2b0 [ 59.605120][ T5320] ? do_new_mount+0x2be/0xb40 [ 59.606751][ T5320] ? __se_sys_mount+0x2d6/0x3c0 [ 59.608556][ T5320] ? do_syscall_64+0xf3/0x230 [ 59.610358][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.612639][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.614920][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.617292][ T5320] ? kasan_quarantine_put+0xdc/0x230 [ 59.619295][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 59.621298][ T5320] ? sget+0x2b8/0x620 [ 59.622892][ T5320] ? __pfx_bch2_test_super+0x10/0x10 [ 59.624814][ T5320] ? sget+0x2b8/0x620 [ 59.626242][ T5320] ? __pfx_bch2_noset_super+0x10/0x10 [ 59.628267][ T5320] bch2_fs_get_tree+0x738/0x1710 [ 59.630208][ T5320] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 59.632235][ T5320] ? generic_parse_monolithic+0x387/0x400 [ 59.634462][ T5320] ? apparmor_capable+0x13b/0x1b0 [ 59.636210][ T5320] vfs_get_tree+0x90/0x2b0 [ 59.637779][ T5320] do_new_mount+0x2be/0xb40 [ 59.639545][ T5320] ? __pfx_do_new_mount+0x10/0x10 [ 59.641540][ T5320] __se_sys_mount+0x2d6/0x3c0 [ 59.643309][ T5320] ? __pfx___se_sys_mount+0x10/0x10 [ 59.645318][ T5320] ? do_syscall_64+0x100/0x230 [ 59.647022][ T5320] ? __x64_sys_mount+0x20/0xc0 [ 59.648728][ T5320] do_syscall_64+0xf3/0x230 [ 59.650394][ T5320] ? clear_bhb_loop+0x35/0x90 [ 59.652163][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.654234][ T5320] RIP: 0033:0x7fc06a57feba [ 59.656326][ T5320] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.663341][ T5320] RSP: 002b:00007fc06b2a0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.666292][ T5320] RAX: ffffffffffffffda RBX: 00007fc06b2a0ef0 RCX: 00007fc06a57feba [ 59.669182][ T5320] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007fc06b2a0eb0 [ 59.672200][ T5320] RBP: 0000000020000000 R08: 00007fc06b2a0ef0 R09: 0000000000000000 [ 59.675123][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 59.678184][ T5320] R13: 00007fc06b2a0eb0 R14: 0000000000005907 R15: 0000000020000080 [ 59.680985][ T5320] [ 59.682022][ T5320] [ 59.682878][ T5320] Allocated by task 5320: [ 59.684414][ T5320] kasan_save_track+0x3f/0x80 [ 59.686197][ T5320] __kasan_kmalloc+0x98/0xb0 [ 59.688018][ T5320] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 59.690411][ T5320] krealloc_noprof+0x88/0x120 [ 59.692268][ T5320] bch2_sb_realloc+0x2d2/0x660 [ 59.694281][ T5320] read_one_super+0x73b/0xf40 [ 59.696237][ T5320] __bch2_read_super+0x87c/0x1380 [ 59.698091][ T5320] bch2_fs_open+0x270/0x2f80 [ 59.699897][ T5320] bch2_fs_get_tree+0x738/0x1710 [ 59.701826][ T5320] vfs_get_tree+0x90/0x2b0 [ 59.703536][ T5320] do_new_mount+0x2be/0xb40 [ 59.705283][ T5320] __se_sys_mount+0x2d6/0x3c0 [ 59.706839][ T5320] do_syscall_64+0xf3/0x230 [ 59.708289][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.710408][ T5320] [ 59.711223][ T5320] The buggy address belongs to the object at ffff8880438c4000 [ 59.711223][ T5320] which belongs to the cache kmalloc-8k of size 8192 [ 59.716119][ T5320] The buggy address is located 0 bytes to the right of [ 59.716119][ T5320] allocated 8192-byte region [ffff8880438c4000, ffff8880438c6000) [ 59.721250][ T5320] [ 59.722073][ T5320] The buggy address belongs to the physical page: [ 59.727175][ T5320] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x438c0 [ 59.730630][ T5320] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.733736][ T5320] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 59.736743][ T5320] page_type: f5(slab) [ 59.738306][ T5320] raw: 04fff00000000040 ffff88801ac42280 ffffea000100e000 0000000000000003 [ 59.741413][ T5320] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.744719][ T5320] head: 04fff00000000040 ffff88801ac42280 ffffea000100e000 0000000000000003 [ 59.748006][ T5320] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 59.751275][ T5320] head: 04fff00000000003 ffffea00010e3001 ffffffffffffffff 0000000000000000 [ 59.755214][ T5320] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.759034][ T5320] page dumped because: kasan: bad access detected [ 59.762057][ T5320] page_owner tracks the page as allocated [ 59.764580][ T5320] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5299, tgid 5299 (sh), ts 56251498209, free_ts 56250868786 [ 59.772015][ T5320] post_alloc_hook+0x1f3/0x230 [ 59.773890][ T5320] get_page_from_freelist+0x3649/0x3790 [ 59.775971][ T5320] __alloc_pages_noprof+0x292/0x710 [ 59.777996][ T5320] alloc_pages_mpol_noprof+0x3e8/0x680 [ 59.780133][ T5320] alloc_slab_page+0x6a/0x140 [ 59.781960][ T5320] allocate_slab+0x5a/0x2f0 [ 59.783670][ T5320] ___slab_alloc+0xcd1/0x14b0 [ 59.785467][ T5320] __slab_alloc+0x58/0xa0 [ 59.787165][ T5320] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 59.789321][ T5320] tomoyo_init_log+0x11cd/0x2050 [ 59.791313][ T5320] tomoyo_supervisor+0x38a/0x11f0 [ 59.793403][ T5320] tomoyo_env_perm+0x178/0x210 [ 59.795316][ T5320] tomoyo_find_next_domain+0x146e/0x1d40 [ 59.797603][ T5320] tomoyo_bprm_check_security+0x114/0x180 [ 59.799915][ T5320] security_bprm_check+0x86/0x250 [ 59.801982][ T5320] bprm_execve+0xa56/0x1770 [ 59.803813][ T5320] page last free pid 5299 tgid 5299 stack trace: [ 59.806271][ T5320] free_unref_page+0xcfb/0xf20 [ 59.808230][ T5320] __put_partials+0xeb/0x130 [ 59.810204][ T5320] put_cpu_partial+0x17c/0x250 [ 59.812158][ T5320] __slab_free+0x2ea/0x3d0 [ 59.813934][ T5320] qlist_free_all+0x9a/0x140 [ 59.815796][ T5320] kasan_quarantine_reduce+0x14f/0x170 [ 59.817953][ T5320] __kasan_slab_alloc+0x23/0x80 [ 59.819834][ T5320] __kmalloc_noprof+0x1a6/0x400 [ 59.821676][ T5320] tomoyo_supervisor+0xe0d/0x11f0 [ 59.823592][ T5320] tomoyo_env_perm+0x178/0x210 [ 59.825313][ T5320] tomoyo_find_next_domain+0x146e/0x1d40 [ 59.827371][ T5320] tomoyo_bprm_check_security+0x114/0x180 [ 59.829632][ T5320] security_bprm_check+0x86/0x250 [ 59.831463][ T5320] bprm_execve+0xa56/0x1770 [ 59.833228][ T5320] do_execveat_common+0x55f/0x6f0 [ 59.835185][ T5320] __x64_sys_execve+0x92/0xb0 [ 59.836917][ T5320] [ 59.837833][ T5320] Memory state around the buggy address: [ 59.839918][ T5320] ffff8880438c5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.842883][ T5320] ffff8880438c5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 59.845828][ T5320] >ffff8880438c6000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.848847][ T5320] ^ [ 59.850382][ T5320] ffff8880438c6080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.853545][ T5320] ffff8880438c6100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.856484][ T5320] ================================================================== [ 59.899131][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.901982][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 59.905238][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.909022][ T5320] Call Trace: [ 59.910249][ T5320] [ 59.911441][ T5320] dump_stack_lvl+0x241/0x360 [ 59.913214][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.915199][ T5320] ? __pfx__printk+0x10/0x10 [ 59.916987][ T5320] ? preempt_schedule+0xe1/0xf0 [ 59.918781][ T5320] ? vscnprintf+0x5d/0x90 [ 59.920413][ T5320] panic+0x349/0x880 [ 59.921990][ T5320] ? check_panic_on_warn+0x21/0xb0 [ 59.923899][ T5320] ? __pfx_panic+0x10/0x10 [ 59.925537][ T5320] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 59.927755][ T5320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.929944][ T5320] ? print_report+0x502/0x550 [ 59.931768][ T5320] check_panic_on_warn+0x86/0xb0 [ 59.933715][ T5320] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.936118][ T5320] end_report+0x77/0x160 [ 59.937743][ T5320] kasan_report+0x154/0x180 [ 59.939554][ T5320] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.941974][ T5320] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 59.944347][ T5320] bch2_sb_clean_to_text+0x138/0x240 [ 59.946388][ T5320] bch2_sb_field_validate+0x201/0x2e0 [ 59.948664][ T5320] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 59.950822][ T5320] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 59.953263][ T5320] ? bch2_opt_validate+0x2ca/0x300 [ 59.955098][ T5320] bch2_sb_validate+0xbb1/0xf70 [ 59.956934][ T5320] ? blk_status_to_errno+0x22/0x80 [ 59.958999][ T5320] ? __pfx_bch2_sb_validate+0x10/0x10 [ 59.961088][ T5320] ? bch2_sb_compatible+0x493/0x850 [ 59.963048][ T5320] ? read_one_super+0x65a/0xf40 [ 59.964869][ T5320] ? read_one_super+0xe23/0xf40 [ 59.966655][ T5320] ? __pfx_read_one_super+0x10/0x10 [ 59.968561][ T5320] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 59.970493][ T5320] ? bdev_file_open_by_path+0x382/0x480 [ 59.972519][ T5320] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 59.974713][ T5320] ? trace_kmalloc+0x1f/0xd0 [ 59.976474][ T5320] ? __asan_memcpy+0x40/0x70 [ 59.978197][ T5320] __bch2_read_super+0xc24/0x1380 [ 59.980116][ T5320] ? stack_depot_save_flags+0x6e4/0x830 [ 59.982230][ T5320] ? __pfx___bch2_read_super+0x10/0x10 [ 59.984239][ T5320] ? rcu_is_watching+0x15/0xb0 [ 59.986030][ T5320] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.988157][ T5320] ? kfree+0x4e/0x440 [ 59.989628][ T5320] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 59.991812][ T5320] bch2_fs_open+0x270/0x2f80 [ 59.993479][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.995509][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.997684][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 59.999435][ T5320] ? __pfx_bch2_fs_open+0x10/0x10 [ 60.001107][ T5320] ? stack_trace_save+0x118/0x1d0 [ 60.002697][ T5320] ? kasan_save_track+0x51/0x80 [ 60.004339][ T5320] ? kasan_save_track+0x3f/0x80 [ 60.005976][ T5320] ? kasan_save_free_info+0x40/0x50 [ 60.007646][ T5320] ? __kasan_slab_free+0x59/0x70 [ 60.009308][ T5320] ? kfree+0x1a0/0x440 [ 60.010824][ T5320] ? sget+0x2b8/0x620 [ 60.012433][ T5320] ? bch2_fs_get_tree+0x683/0x1710 [ 60.014191][ T5320] ? vfs_get_tree+0x90/0x2b0 [ 60.015862][ T5320] ? do_new_mount+0x2be/0xb40 [ 60.017547][ T5320] ? __se_sys_mount+0x2d6/0x3c0 [ 60.019338][ T5320] ? do_syscall_64+0xf3/0x230 [ 60.021088][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.023231][ T5320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.025311][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.027580][ T5320] ? kasan_quarantine_put+0xdc/0x230 [ 60.029672][ T5320] ? lockdep_hardirqs_on+0x99/0x150 [ 60.031789][ T5320] ? sget+0x2b8/0x620 [ 60.033460][ T5320] ? __pfx_bch2_test_super+0x10/0x10 [ 60.035459][ T5320] ? sget+0x2b8/0x620 [ 60.036963][ T5320] ? __pfx_bch2_noset_super+0x10/0x10 [ 60.039100][ T5320] bch2_fs_get_tree+0x738/0x1710 [ 60.040955][ T5320] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 60.043002][ T5320] ? generic_parse_monolithic+0x387/0x400 [ 60.045201][ T5320] ? apparmor_capable+0x13b/0x1b0 [ 60.047172][ T5320] vfs_get_tree+0x90/0x2b0 [ 60.048869][ T5320] do_new_mount+0x2be/0xb40 [ 60.050632][ T5320] ? __pfx_do_new_mount+0x10/0x10 [ 60.052436][ T5320] __se_sys_mount+0x2d6/0x3c0 [ 60.054058][ T5320] ? __pfx___se_sys_mount+0x10/0x10 [ 60.055981][ T5320] ? do_syscall_64+0x100/0x230 [ 60.057758][ T5320] ? __x64_sys_mount+0x20/0xc0 [ 60.059497][ T5320] do_syscall_64+0xf3/0x230 [ 60.061283][ T5320] ? clear_bhb_loop+0x35/0x90 [ 60.062994][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.065195][ T5320] RIP: 0033:0x7fc06a57feba [ 60.067027][ T5320] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.074904][ T5320] RSP: 002b:00007fc06b2a0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.078350][ T5320] RAX: ffffffffffffffda RBX: 00007fc06b2a0ef0 RCX: 00007fc06a57feba [ 60.081775][ T5320] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007fc06b2a0eb0 [ 60.085049][ T5320] RBP: 0000000020000000 R08: 00007fc06b2a0ef0 R09: 0000000000000000 [ 60.088213][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 60.091124][ T5320] R13: 00007fc06b2a0eb0 R14: 0000000000005907 R15: 0000000020000080 [ 60.093935][ T5320] [ 60.095296][ T5320] Kernel Offset: disabled [ 60.096799][ T5320] Rebooting in 86400 seconds..