./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2276698950 <...> forked to background, child pid 4641 no interfaces have a carrier [ 27.473158][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.483236][ T4642] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. execve("./syz-executor2276698950", ["./syz-executor2276698950"], 0x7ffd46021530 /* 10 vars */) = 0 brk(NULL) = 0x55555610f000 brk(0x55555610fc40) = 0x55555610fc40 arch_prctl(ARCH_SET_FS, 0x55555610f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2276698950", 4096) = 28 brk(0x555556130c40) = 0x555556130c40 brk(0x555556131000) = 0x555556131000 mprotect(0x7fafec3c4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5062 mkdir("./syzkaller.3ewgqX", 0700) = 0 chmod("./syzkaller.3ewgqX", 0777) = 0 chdir("./syzkaller.3ewgqX") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555610f5d0) = 5063 ./strace-static-x86_64: Process 5063 attached [pid 5063] chdir("./0") = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] memfd_create("syzkaller", 0) = 3 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fafe3f07000 [pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5063] munmap(0x7fafe3f07000, 4194304) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file2", 0777) = 0 syzkaller login: [ 53.420387][ T5063] loop0: detected capacity change from 0 to 8192 [ 53.431855][ T5063] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.444934][ T5063] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.454799][ T5063] REISERFS (device loop0): using ordered data mode [ 53.461338][ T5063] reiserfs: using flush barriers [pid 5063] mount("/dev/loop0", "./file2", "reiserfs", MS_DIRSYNC|MS_REC|MS_I_VERSION, "") = 0 [pid 5063] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file2") = 0 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [pid 5063] mkdir("./file0", 000) = 0 [pid 5063] mkdir("./file1", 000) = 0 [pid 5063] rename("./file1", "./file1/../file0") = 0 [pid 5063] exit_group(0) = ? [pid 5063] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556110620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 53.467359][ T5063] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.484077][ T5063] REISERFS (device loop0): checking transaction log (loop0) [ 53.493456][ T5063] REISERFS (device loop0): Using r5 hash to sort names [ 53.501816][ T5063] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556118660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556118660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file2") = 0 getdents64(3, 0x555556110620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555610f5d0) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] chdir("./1") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] memfd_create("syzkaller", 0) = 3 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fafe3f07000 [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5066] munmap(0x7fafe3f07000, 4194304) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5066] close(3) = 0 [pid 5066] mkdir("./file2", 0777) = 0 [ 53.626560][ T5066] loop0: detected capacity change from 0 to 8192 [ 53.636404][ T5066] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 53.649708][ T5066] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 53.659134][ T5066] REISERFS (device loop0): using ordered data mode [ 53.665737][ T5066] reiserfs: using flush barriers [pid 5066] mount("/dev/loop0", "./file2", "reiserfs", MS_DIRSYNC|MS_REC|MS_I_VERSION, "") = 0 [pid 5066] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] chdir("./file2") = 0 [pid 5066] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] close(4) = 0 [pid 5066] mkdir("./file0", 000) = 0 [pid 5066] mkdir("./file1", 000) = 0 [ 53.671639][ T5066] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.688587][ T5066] REISERFS (device loop0): checking transaction log (loop0) [ 53.696998][ T5066] REISERFS (device loop0): Using r5 hash to sort names [ 53.704263][ T5066] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 53.721391][ T5066] ================================================================== [ 53.729464][ T5066] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x50c/0x750 [ 53.737675][ T5066] Read of size 14568 at addr ffff8880726120d0 by task syz-executor227/5066 [ 53.746249][ T5066] [ 53.748564][ T5066] CPU: 0 PID: 5066 Comm: syz-executor227 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 53.758605][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.768808][ T5066] Call Trace: [ 53.772064][ T5066] [ 53.774985][ T5066] dump_stack_lvl+0xd1/0x138 [ 53.779569][ T5066] print_report+0x15e/0x45d [ 53.784059][ T5066] ? __phys_addr+0xc8/0x140 [ 53.788553][ T5066] ? reiserfs_release_objectid+0x50c/0x750 [ 53.794353][ T5066] kasan_report+0xbf/0x1f0 [ 53.798749][ T5066] ? reiserfs_release_objectid+0x50c/0x750 [ 53.804538][ T5066] kasan_check_range+0x141/0x190 [ 53.809457][ T5066] memmove+0x24/0x60 [ 53.813331][ T5066] reiserfs_release_objectid+0x50c/0x750 [ 53.818943][ T5066] remove_save_link+0x220/0x3f0 [ 53.823775][ T5066] ? add_save_link+0x620/0x620 [ 53.828518][ T5066] ? wait_for_completion_io_timeout+0x20/0x20 [ 53.834578][ T5066] reiserfs_evict_inode+0x48d/0x540 [ 53.839763][ T5066] ? reiserfs_bmap+0x1b0/0x1b0 [ 53.844512][ T5066] ? rwlock_bug.part.0+0x90/0x90 [ 53.849440][ T5066] ? reiserfs_bmap+0x1b0/0x1b0 [ 53.854188][ T5066] evict+0x2ed/0x6b0 [ 53.858079][ T5066] iput.part.0+0x59b/0x880 [ 53.862488][ T5066] iput+0x5c/0x80 [ 53.866119][ T5066] dentry_unlink_inode+0x2b1/0x460 [ 53.871216][ T5066] __dentry_kill+0x3c0/0x640 [ 53.875796][ T5066] ? dput+0x39/0xdb0 [ 53.879681][ T5066] dput+0x651/0xdb0 [ 53.883478][ T5066] do_renameat2+0xb32/0xc30 [ 53.887979][ T5066] ? __ia32_sys_link+0xa0/0xa0 [ 53.892736][ T5066] ? __virt_addr_valid+0x61/0x2e0 [ 53.897749][ T5066] ? __phys_addr_symbol+0x30/0x70 [ 53.902766][ T5066] ? strncpy_from_user+0x28b/0x3c0 [ 53.907868][ T5066] __x64_sys_rename+0x81/0xa0 [ 53.912536][ T5066] do_syscall_64+0x39/0xb0 [ 53.916950][ T5066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.922831][ T5066] RIP: 0033:0x7fafec354969 [ 53.927228][ T5066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.946824][ T5066] RSP: 002b:00007ffcb5026c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 53.955222][ T5066] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fafec354969 [ 53.963178][ T5066] RDX: 00007fafec354969 RSI: 0000000020000200 RDI: 0000000020000140 [ 53.971131][ T5066] RBP: 0000000000000000 R08: 00007ffcb5026cb0 R09: 00007ffcb5026cb0 [ 53.979087][ T5066] R10: 00007ffcb5026cb0 R11: 0000000000000246 R12: 00007ffcb5026cac [ 53.987045][ T5066] R13: 00007ffcb5026ce0 R14: 00007ffcb5026cc0 R15: 0000000000000001 [ 53.995009][ T5066] [ 53.998007][ T5066] [ 54.000309][ T5066] The buggy address belongs to the physical page: [ 54.006700][ T5066] page:ffffea0001c98480 refcount:3 mapcount:0 mapping:ffff888144c7bef8 index:0x10 pfn:0x72612 [ 54.016916][ T5066] memcg:ffff888140140000 [ 54.021222][ T5066] aops:def_blk_aops ino:700000 [ 54.025975][ T5066] flags: 0xfff00000022026(referenced|uptodate|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 54.037245][ T5066] raw: 00fff00000022026 0000000000000000 dead000000000122 ffff888144c7bef8 [ 54.045816][ T5066] raw: 0000000000000010 ffff88807b93d488 00000003ffffffff ffff888140140000 [ 54.054376][ T5066] page dumped because: kasan: bad access detected [ 54.060764][ T5066] page_owner tracks the page as allocated [ 54.066456][ T5066] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5066, tgid 5066 (syz-executor227), ts 53636248254, free_ts 53566130904 [ 54.087104][ T5066] get_page_from_freelist+0x119c/0x2ce0 [ 54.092640][ T5066] __alloc_pages+0x1cb/0x5b0 [ 54.097215][ T5066] alloc_pages+0x1aa/0x270 [ 54.101613][ T5066] folio_alloc+0x20/0x70 [ 54.105839][ T5066] filemap_alloc_folio+0x362/0x450 [ 54.110939][ T5066] __filemap_get_folio+0x32c/0xd80 [ 54.116047][ T5066] pagecache_get_page+0x2e/0x280 [ 54.120968][ T5066] __getblk_slow+0x1f4/0x1030 [ 54.125629][ T5066] __bread_gfp+0x22c/0x330 [ 54.130035][ T5066] read_super_block+0x83/0x930 [ 54.134791][ T5066] reiserfs_fill_super+0x9dd/0x2e90 [ 54.139976][ T5066] mount_bdev+0x351/0x410 [ 54.144295][ T5066] legacy_get_tree+0x109/0x220 [ 54.149048][ T5066] vfs_get_tree+0x8d/0x2f0 [ 54.153451][ T5066] path_mount+0x132a/0x1e20 [ 54.157939][ T5066] __x64_sys_mount+0x283/0x300 [ 54.162714][ T5066] page last free stack trace: [ 54.167375][ T5066] free_pcp_prepare+0x65c/0xc00 [ 54.172211][ T5066] free_unref_page_list+0x176/0xcd0 [ 54.177401][ T5066] release_pages+0xcb1/0x1330 [ 54.182076][ T5066] __pagevec_release+0x77/0xe0 [ 54.186825][ T5066] shmem_undo_range+0x595/0x1340 [ 54.191837][ T5066] shmem_evict_inode+0x32f/0xb60 [ 54.196758][ T5066] evict+0x2ed/0x6b0 [ 54.200644][ T5066] iput.part.0+0x59b/0x880 [ 54.205053][ T5066] iput+0x5c/0x80 [ 54.208674][ T5066] dentry_unlink_inode+0x2b1/0x460 [ 54.213768][ T5066] __dentry_kill+0x3c0/0x640 [ 54.218606][ T5066] dput+0x80a/0xdb0 [ 54.222402][ T5066] __fput+0x3cc/0xa90 [ 54.226384][ T5066] task_work_run+0x16f/0x270 [ 54.230967][ T5066] ptrace_notify+0x118/0x140 [ 54.235544][ T5066] syscall_exit_to_user_mode_prepare+0x129/0x280 [ 54.241871][ T5066] [ 54.244174][ T5066] Memory state around the buggy address: [ 54.249868][ T5066] ffff888072614f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.257910][ T5066] ffff888072614f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.265952][ T5066] >ffff888072615000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.273992][ T5066] ^ [ 54.278040][ T5066] ffff888072615080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.286080][ T5066] ffff888072615100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.294121][ T5066] ================================================================== [ 54.303049][ T5066] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 54.310256][ T5066] CPU: 1 PID: 5066 Comm: syz-executor227 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 54.320325][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.330372][ T5066] Call Trace: [ 54.333644][ T5066] [ 54.336566][ T5066] dump_stack_lvl+0xd1/0x138 [ 54.341149][ T5066] panic+0x2cc/0x626 [ 54.345032][ T5066] ? panic_print_sys_info.part.0+0x110/0x110 [ 54.351000][ T5066] ? preempt_schedule_thunk+0x1a/0x20 [ 54.356362][ T5066] ? preempt_schedule_common+0x59/0xc0 [ 54.361811][ T5066] check_panic_on_warn.cold+0x19/0x35 [ 54.367175][ T5066] end_report.part.0+0x36/0x73 [ 54.371926][ T5066] ? reiserfs_release_objectid+0x50c/0x750 [ 54.378170][ T5066] kasan_report.cold+0xa/0xf [ 54.382776][ T5066] ? reiserfs_release_objectid+0x50c/0x750 [ 54.388576][ T5066] kasan_check_range+0x141/0x190 [ 54.393501][ T5066] memmove+0x24/0x60 [ 54.397385][ T5066] reiserfs_release_objectid+0x50c/0x750 [ 54.403022][ T5066] remove_save_link+0x220/0x3f0 [ 54.407874][ T5066] ? add_save_link+0x620/0x620 [ 54.412652][ T5066] ? wait_for_completion_io_timeout+0x20/0x20 [ 54.418713][ T5066] reiserfs_evict_inode+0x48d/0x540 [ 54.423896][ T5066] ? reiserfs_bmap+0x1b0/0x1b0 [ 54.428645][ T5066] ? rwlock_bug.part.0+0x90/0x90 [ 54.433585][ T5066] ? reiserfs_bmap+0x1b0/0x1b0 [ 54.438335][ T5066] evict+0x2ed/0x6b0 [ 54.442220][ T5066] iput.part.0+0x59b/0x880 [ 54.446888][ T5066] iput+0x5c/0x80 [ 54.450785][ T5066] dentry_unlink_inode+0x2b1/0x460 [ 54.455899][ T5066] __dentry_kill+0x3c0/0x640 [ 54.460714][ T5066] ? dput+0x39/0xdb0 [ 54.464604][ T5066] dput+0x651/0xdb0 [ 54.468416][ T5066] do_renameat2+0xb32/0xc30 [ 54.472963][ T5066] ? __ia32_sys_link+0xa0/0xa0 [ 54.477717][ T5066] ? __virt_addr_valid+0x61/0x2e0 [ 54.482740][ T5066] ? __phys_addr_symbol+0x30/0x70 [ 54.487782][ T5066] ? strncpy_from_user+0x28b/0x3c0 [ 54.492883][ T5066] __x64_sys_rename+0x81/0xa0 [ 54.497552][ T5066] do_syscall_64+0x39/0xb0 [ 54.502410][ T5066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.508308][ T5066] RIP: 0033:0x7fafec354969 [ 54.512910][ T5066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.532527][ T5066] RSP: 002b:00007ffcb5026c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 54.540935][ T5066] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fafec354969 [ 54.548897][ T5066] RDX: 00007fafec354969 RSI: 0000000020000200 RDI: 0000000020000140 [ 54.556896][ T5066] RBP: 0000000000000000 R08: 00007ffcb5026cb0 R09: 00007ffcb5026cb0 [ 54.564865][ T5066] R10: 00007ffcb5026cb0 R11: 0000000000000246 R12: 00007ffcb5026cac [ 54.572830][ T5066] R13: 00007ffcb5026ce0 R14: 00007ffcb5026cc0 R15: 0000000000000001 [ 54.580799][ T5066] [ 54.584505][ T5066] Kernel Offset: disabled [ 54.588827][ T5066] Rebooting in 86400 seconds..