program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000007c0)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@nolazytime}, {@nombcache}, {@abort}, {@errors_remount}]}, 0x3, 0x448, &(0x7f0000000340)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) utime(&(0x7f0000006a80)='./file1\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000005d40)={[{@file_umask={'file_umask', 0x3d, 0x80004}}, {@file_umask={'file_umask', 0x3d, 0xa2c}}, {@codepage={'codepage', 0x3d, 'cp437'}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x8}}]}, 0xfd, 0x2fe, &(0x7f0000001100)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000880)='./file2\x00', 0x228180, 0x2) truncate(&(0x7f00000002c0)='./file1\x00', 0x7fffffffffffffff) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20ad0c1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc881}, 0xc0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b00), r1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000a80)='GPL\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='net_dev_start_xmit\x00', r6}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r7}, 0x8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="d0187f00ffffffffffff08021100018f505050505050200004"], 0x26) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="252fe553e3b93dae330cf1ef6a6ad164bdc845f9daa24b3d09c5b8c85e48d199dc216da4968d138dac5d4ffe839750c2f44fcc0a63b1a61d38b9c7d7a69db9d801a607ab0c298e9e62cd19e45129a2f5ae05f542c39942475ae911ab8ea8f865aa1c17687a83911667ff41cf5174a6c18b6eb87cea31ffb1cf42e0552c5829f8d6f7790900"/148], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x800) [ 118.098104][ T4672] Bluetooth: hci0: command tx timeout [ 118.112344][ T5345] loop0: detected capacity change from 0 to 512 [ 118.156885][ T5345] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.163782][ T5345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.176421][ T5345] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.184650][ T5345] EXT4-fs (loop0): 1 truncate cleaned up [ 118.189721][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.211229][ T5345] ================================================================== [ 118.214760][ T5345] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.218325][ T5345] Read of size 18446744073709551572 at addr ffff888011984850 by task syz.0.0/5345 [ 118.222314][ T5345] [ 118.223471][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 118.223486][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.223495][ T5345] Call Trace: [ 118.223503][ T5345] [ 118.223509][ T5345] dump_stack_lvl+0x189/0x250 [ 118.223529][ T5345] ? __virt_addr_valid+0x1c8/0x5c0 [ 118.223542][ T5345] ? rcu_is_watching+0x15/0xb0 [ 118.223560][ T5345] ? __kasan_check_byte+0x12/0x40 [ 118.223572][ T5345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.223589][ T5345] ? rcu_is_watching+0x15/0xb0 [ 118.223606][ T5345] ? lock_release+0x4b/0x3e0 [ 118.223622][ T5345] ? __virt_addr_valid+0x1c8/0x5c0 [ 118.223633][ T5345] ? __virt_addr_valid+0x4a5/0x5c0 [ 118.223645][ T5345] print_report+0xd2/0x2b0 [ 118.223662][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.223678][ T5345] kasan_report+0x118/0x150 [ 118.223690][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.223707][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.223723][ T5345] kasan_check_range+0x2b0/0x2c0 [ 118.223734][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.223750][ T5345] __asan_memmove+0x29/0x70 [ 118.223765][ T5345] ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.223787][ T5345] ext4_xattr_block_set+0x872/0x2ac0 [ 118.223810][ T5345] ? __pfx_check_xattrs+0x10/0x10 [ 118.223826][ T5345] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 118.223844][ T5345] ? ext4_xattr_block_find+0x2d4/0x350 [ 118.223861][ T5345] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 118.223886][ T5345] __ext4_expand_extra_isize+0x30d/0x400 [ 118.223900][ T5345] __ext4_mark_inode_dirty+0x46c/0x700 [ 118.223918][ T5345] ext4_dirty_inode+0xd0/0x110 [ 118.223928][ T5345] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 118.223939][ T5345] __mark_inode_dirty+0x2d1/0xdf0 [ 118.223954][ T5345] ? i_gid_needs_update+0x51/0x160 [ 118.223965][ T5345] ext4_setattr+0xabc/0x1bc0 [ 118.223976][ T5345] ? __pfx_current_time+0x10/0x10 [ 118.223992][ T5345] ? try_break_deleg+0x79/0x130 [ 118.224007][ T5345] ? __pfx_ext4_setattr+0x10/0x10 [ 118.224017][ T5345] notify_change+0xb33/0xe40 [ 118.224036][ T5345] vfs_utimes+0x3fb/0x570 [ 118.224051][ T5345] ? __pfx_vfs_utimes+0x10/0x10 [ 118.224067][ T5345] ? user_path_at+0x44/0x60 [ 118.224081][ T5345] ? kmem_cache_free+0x18f/0x400 [ 118.224095][ T5345] do_utimes+0x1bd/0x2a0 [ 118.224109][ T5345] ? __pfx_do_utimes+0x10/0x10 [ 118.224121][ T5345] ? rcu_is_watching+0x15/0xb0 [ 118.224145][ T5345] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 118.224162][ T5345] __x64_sys_utime+0x13e/0x200 [ 118.224178][ T5345] ? __pfx___x64_sys_utime+0x10/0x10 [ 118.224191][ T5345] ? do_syscall_64+0xbe/0x3b0 [ 118.224243][ T5345] do_syscall_64+0xfa/0x3b0 [ 118.224253][ T5345] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.224270][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.224282][ T5345] ? clear_bhb_loop+0x60/0xb0 [ 118.224296][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.224308][ T5345] RIP: 0033:0x7f4fffb8e929 [ 118.224319][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.224329][ T5345] RSP: 002b:00007f500094b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 118.224342][ T5345] RAX: ffffffffffffffda RBX: 00007f4fffdb5fa0 RCX: 00007f4fffb8e929 [ 118.224351][ T5345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000006a80 [ 118.224360][ T5345] RBP: 00007f4fffc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.224367][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.224373][ T5345] R13: 0000000000000000 R14: 00007f4fffdb5fa0 R15: 00007ffef7997748 [ 118.224383][ T5345] [ 118.224387][ T5345] [ 118.377614][ T5345] Allocated by task 5345: [ 118.379516][ T5345] kasan_save_track+0x3e/0x80 [ 118.381550][ T5345] __kasan_kmalloc+0x93/0xb0 [ 118.383555][ T5345] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 118.386280][ T5345] kmemdup_noprof+0x2b/0x70 [ 118.388264][ T5345] ext4_xattr_block_set+0x781/0x2ac0 [ 118.390561][ T5345] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 118.393118][ T5345] __ext4_expand_extra_isize+0x30d/0x400 [ 118.395540][ T5345] __ext4_mark_inode_dirty+0x46c/0x700 [ 118.397932][ T5345] ext4_dirty_inode+0xd0/0x110 [ 118.400074][ T5345] __mark_inode_dirty+0x2d1/0xdf0 [ 118.402327][ T5345] ext4_setattr+0xabc/0x1bc0 [ 118.404412][ T5345] notify_change+0xb33/0xe40 [ 118.406512][ T5345] vfs_utimes+0x3fb/0x570 [ 118.408495][ T5345] do_utimes+0x1bd/0x2a0 [ 118.410467][ T5345] __x64_sys_utime+0x13e/0x200 [ 118.412600][ T5345] do_syscall_64+0xfa/0x3b0 [ 118.414664][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.417305][ T5345] [ 118.418473][ T5345] The buggy address belongs to the object at ffff888011984800 [ 118.418473][ T5345] which belongs to the cache kmalloc-1k of size 1024 [ 118.424442][ T5345] The buggy address is located 80 bytes inside of [ 118.424442][ T5345] 1024-byte region [ffff888011984800, ffff888011984c00) [ 118.430228][ T5345] [ 118.431306][ T5345] The buggy address belongs to the physical page: [ 118.434199][ T5345] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11984 [ 118.437869][ T5345] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.441519][ T5345] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.444838][ T5345] page_type: f5(slab) [ 118.446621][ T5345] raw: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 118.450407][ T5345] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 118.454206][ T5345] head: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 118.457902][ T5345] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 118.461630][ T5345] head: 00fff00000000002 ffffea0000466101 00000000ffffffff 00000000ffffffff [ 118.465503][ T5345] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 118.469353][ T5345] page dumped because: kasan: bad access detected [ 118.472124][ T5345] page_owner tracks the page as allocated [ 118.474587][ T5345] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5345, tgid 5344 (syz.0.0), ts 118195168482, free_ts 29073372064 [ 118.482753][ T5345] post_alloc_hook+0x240/0x2a0 [ 118.484937][ T5345] get_page_from_freelist+0x21e4/0x22c0 [ 118.487272][ T5345] __alloc_pages_slowpath+0x2fe/0xce0 [ 118.489485][ T5345] __alloc_frozen_pages_noprof+0x319/0x370 [ 118.491520][ T5345] allocate_slab+0x65/0x3b0 [ 118.493089][ T5345] ___slab_alloc+0xbfc/0x1480 [ 118.494805][ T5345] __kmalloc_node_noprof+0x2fd/0x4e0 [ 118.496969][ T5345] alloc_slab_obj_exts+0x39/0xa0 [ 118.498980][ T5345] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 118.501478][ T5345] __kmalloc_node_track_caller_noprof+0x335/0x4e0 [ 118.504210][ T5345] kstrdup+0x42/0x100 [ 118.505890][ T5345] alloc_vfsmnt+0xeb/0x4e0 [ 118.507908][ T5345] vfs_create_mount+0x6c/0x3d0 [ 118.510095][ T5345] do_new_mount+0x35a/0xa40 [ 118.512127][ T5345] __se_sys_mount+0x317/0x410 [ 118.514247][ T5345] do_syscall_64+0xfa/0x3b0 [ 118.516290][ T5345] page last free pid 4723 tgid 4723 stack trace: [ 118.519004][ T5345] __free_frozen_pages+0xc71/0xe70 [ 118.521344][ T5345] __put_partials+0x161/0x1c0 [ 118.523505][ T5345] put_cpu_partial+0x17c/0x250 [ 118.525702][ T5345] __slab_free+0x2f7/0x400 [ 118.527650][ T5345] qlist_free_all+0x97/0x140 [ 118.529732][ T5345] kasan_quarantine_reduce+0x148/0x160 [ 118.532170][ T5345] __kasan_slab_alloc+0x22/0x80 [ 118.534265][ T5345] __kmalloc_cache_noprof+0x1be/0x3d0 [ 118.536640][ T5345] kernfs_fop_open+0x397/0xca0 [ 118.538848][ T5345] do_dentry_open+0xdf0/0x1970 [ 118.541070][ T5345] vfs_open+0x3b/0x340 [ 118.542871][ T5345] path_openat+0x2ee5/0x3830 [ 118.544969][ T5345] do_filp_open+0x1fa/0x410 [ 118.547094][ T5345] do_sys_openat2+0x121/0x1c0 [ 118.549256][ T5345] __x64_sys_openat+0x138/0x170 [ 118.551354][ T5345] do_syscall_64+0xfa/0x3b0 [ 118.553423][ T5345] [ 118.554531][ T5345] Memory state around the buggy address: [ 118.557125][ T5345] ffff888011984700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.560694][ T5345] ffff888011984780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.564150][ T5345] >ffff888011984800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.567715][ T5345] ^ [ 118.570671][ T5345] ffff888011984880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.574216][ T5345] ffff888011984900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.577703][ T5345] ================================================================== [ 118.610899][ T5345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.614179][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 118.619373][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.623834][ T5345] Call Trace: [ 118.625120][ T5345] [ 118.626403][ T5345] dump_stack_lvl+0x99/0x250 [ 118.628520][ T5345] ? __asan_memcpy+0x40/0x70 [ 118.630629][ T5345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.632820][ T5345] ? __pfx__printk+0x10/0x10 [ 118.634705][ T5345] panic+0x2db/0x790 [ 118.636315][ T5345] ? __pfx_panic+0x10/0x10 [ 118.638173][ T5345] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 118.640554][ T5345] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.643151][ T5345] ? print_memory_metadata+0x314/0x400 [ 118.645397][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.647688][ T5345] check_panic_on_warn+0x89/0xb0 [ 118.649873][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.652267][ T5345] end_report+0x78/0x160 [ 118.654138][ T5345] kasan_report+0x129/0x150 [ 118.656244][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.658741][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.661228][ T5345] kasan_check_range+0x2b0/0x2c0 [ 118.663392][ T5345] ? ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.665808][ T5345] __asan_memmove+0x29/0x70 [ 118.667869][ T5345] ext4_xattr_set_entry+0x8e9/0x1e20 [ 118.670251][ T5345] ext4_xattr_block_set+0x872/0x2ac0 [ 118.672653][ T5345] ? __pfx_check_xattrs+0x10/0x10 [ 118.674901][ T5345] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 118.677448][ T5345] ? ext4_xattr_block_find+0x2d4/0x350 [ 118.679774][ T5345] ext4_expand_extra_isize_ea+0x12d5/0x1ea0 [ 118.682390][ T5345] __ext4_expand_extra_isize+0x30d/0x400 [ 118.684876][ T5345] __ext4_mark_inode_dirty+0x46c/0x700 [ 118.687296][ T5345] ext4_dirty_inode+0xd0/0x110 [ 118.689506][ T5345] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 118.691897][ T5345] __mark_inode_dirty+0x2d1/0xdf0 [ 118.694098][ T5345] ? i_gid_needs_update+0x51/0x160 [ 118.696360][ T5345] ext4_setattr+0xabc/0x1bc0 [ 118.698456][ T5345] ? __pfx_current_time+0x10/0x10 [ 118.700704][ T5345] ? try_break_deleg+0x79/0x130 [ 118.702936][ T5345] ? __pfx_ext4_setattr+0x10/0x10 [ 118.705183][ T5345] notify_change+0xb33/0xe40 [ 118.707271][ T5345] vfs_utimes+0x3fb/0x570 [ 118.709195][ T5345] ? __pfx_vfs_utimes+0x10/0x10 [ 118.711357][ T5345] ? user_path_at+0x44/0x60 [ 118.713397][ T5345] ? kmem_cache_free+0x18f/0x400 [ 118.715592][ T5345] do_utimes+0x1bd/0x2a0 [ 118.717526][ T5345] ? __pfx_do_utimes+0x10/0x10 [ 118.719667][ T5345] ? rcu_is_watching+0x15/0xb0 [ 118.721886][ T5345] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 118.724642][ T5345] __x64_sys_utime+0x13e/0x200 [ 118.726810][ T5345] ? __pfx___x64_sys_utime+0x10/0x10 [ 118.729224][ T5345] ? do_syscall_64+0xbe/0x3b0 [ 118.731375][ T5345] do_syscall_64+0xfa/0x3b0 [ 118.733364][ T5345] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.735482][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.737955][ T5345] ? clear_bhb_loop+0x60/0xb0 [ 118.739873][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.742300][ T5345] RIP: 0033:0x7f4fffb8e929 [ 118.744137][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.752163][ T5345] RSP: 002b:00007f500094b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 118.755703][ T5345] RAX: ffffffffffffffda RBX: 00007f4fffdb5fa0 RCX: 00007f4fffb8e929 [ 118.759159][ T5345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000006a80 [ 118.762508][ T5345] RBP: 00007f4fffc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.765993][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.769459][ T5345] R13: 0000000000000000 R14: 00007f4fffdb5fa0 R15: 00007ffef7997748 [ 118.772861][ T5345] [ 118.774493][ T5345] Kernel Offset: disabled [ 118.776398][ T5345] Rebooting in 86400 seconds..