program: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x101101) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xfffffff7) (async, rerun: 32) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="645073636172642c00d6293f5b2f36e21adf186684dda74a466eef0b9444df0cf4bdab70c5ba55712608"], 0x1, 0x5922, &(0x7f0000005940)="$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") (rerun: 32) [ 69.981096][ T4671] Bluetooth: hci0: command tx timeout [ 70.319397][ T5325] loop0: detected capacity change from 0 to 32768 [ 70.333021][ T5325] ================================================================== [ 70.336298][ T5325] BUG: KASAN: slab-out-of-bounds in journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.339755][ T5325] Read of size 8 at addr ffff888040bce000 by task syz.0.0/5325 [ 70.342499][ T5325] [ 70.343365][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 70.346347][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.350111][ T5325] Call Trace: [ 70.351320][ T5325] [ 70.352361][ T5325] dump_stack_lvl+0x241/0x360 [ 70.354108][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.355825][ T5325] ? __pfx__printk+0x10/0x10 [ 70.357563][ T5325] ? _printk+0xd5/0x120 [ 70.359062][ T5325] ? __virt_addr_valid+0x183/0x530 [ 70.360947][ T5325] ? __virt_addr_valid+0x183/0x530 [ 70.362637][ T5325] print_report+0x169/0x550 [ 70.364137][ T5325] ? __virt_addr_valid+0x183/0x530 [ 70.365914][ T5325] ? __virt_addr_valid+0x183/0x530 [ 70.367770][ T5325] ? __virt_addr_valid+0x45f/0x530 [ 70.369608][ T5325] ? __phys_addr+0xba/0x170 [ 70.371417][ T5325] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.373742][ T5325] kasan_report+0x143/0x180 [ 70.375328][ T5325] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.377582][ T5325] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.379807][ T5325] bch2_sb_clean_to_text+0x138/0x240 [ 70.381705][ T5325] bch2_sb_field_validate+0x201/0x2e0 [ 70.383690][ T5325] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 70.385606][ T5325] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 70.387906][ T5325] ? bch2_opt_validate+0x2ca/0x300 [ 70.389708][ T5325] bch2_sb_validate+0xbb1/0xf70 [ 70.391414][ T5325] ? blk_status_to_errno+0x22/0x80 [ 70.393629][ T5325] ? __pfx_bch2_sb_validate+0x10/0x10 [ 70.395916][ T5325] ? bch2_sb_compatible+0x493/0x850 [ 70.397688][ T5325] ? read_one_super+0x65a/0xf40 [ 70.399348][ T5325] ? read_one_super+0xe23/0xf40 [ 70.401160][ T5325] ? __pfx_read_one_super+0x10/0x10 [ 70.403110][ T5325] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 70.405139][ T5325] ? bdev_file_open_by_path+0x382/0x480 [ 70.407213][ T5325] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 70.409340][ T5325] ? trace_kmalloc+0x1f/0xd0 [ 70.410923][ T5325] ? __asan_memcpy+0x40/0x70 [ 70.412458][ T5325] __bch2_read_super+0xc24/0x1380 [ 70.414010][ T5325] ? stack_depot_save_flags+0x6e4/0x830 [ 70.416289][ T5325] ? __pfx___bch2_read_super+0x10/0x10 [ 70.418448][ T5325] ? rcu_is_watching+0x15/0xb0 [ 70.420292][ T5325] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 70.422604][ T5325] ? kfree+0x4e/0x440 [ 70.424148][ T5325] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 70.426284][ T5325] bch2_fs_open+0x270/0x2f80 [ 70.428017][ T5325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.430232][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.432581][ T5325] ? lockdep_hardirqs_on+0x99/0x150 [ 70.434440][ T5325] ? __pfx_bch2_fs_open+0x10/0x10 [ 70.436259][ T5325] ? stack_trace_save+0x118/0x1d0 [ 70.437666][ T5325] ? kasan_save_track+0x51/0x80 [ 70.439428][ T5325] ? kasan_save_track+0x3f/0x80 [ 70.441319][ T5325] ? kasan_save_free_info+0x40/0x50 [ 70.443261][ T5325] ? __kasan_slab_free+0x59/0x70 [ 70.445094][ T5325] ? kfree+0x1a0/0x440 [ 70.446539][ T5325] ? sget+0x2b8/0x620 [ 70.447946][ T5325] ? bch2_fs_get_tree+0x683/0x1710 [ 70.449716][ T5325] ? vfs_get_tree+0x90/0x2b0 [ 70.451409][ T5325] ? do_new_mount+0x2be/0xb40 [ 70.453179][ T5325] ? __se_sys_mount+0x2d6/0x3c0 [ 70.455027][ T5325] ? do_syscall_64+0xf3/0x230 [ 70.456562][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.458310][ T5325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.460228][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.462473][ T5325] ? kasan_quarantine_put+0xdc/0x230 [ 70.464619][ T5325] ? lockdep_hardirqs_on+0x99/0x150 [ 70.466521][ T5325] ? sget+0x2b8/0x620 [ 70.468015][ T5325] ? __pfx_bch2_test_super+0x10/0x10 [ 70.470121][ T5325] ? sget+0x2b8/0x620 [ 70.471626][ T5325] ? __pfx_bch2_noset_super+0x10/0x10 [ 70.473567][ T5325] bch2_fs_get_tree+0x738/0x1710 [ 70.475496][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 70.477301][ T5325] ? generic_parse_monolithic+0x387/0x400 [ 70.479266][ T5325] ? apparmor_capable+0x13b/0x1b0 [ 70.481224][ T5325] vfs_get_tree+0x90/0x2b0 [ 70.482928][ T5325] do_new_mount+0x2be/0xb40 [ 70.484751][ T5325] ? __pfx_do_new_mount+0x10/0x10 [ 70.486834][ T5325] __se_sys_mount+0x2d6/0x3c0 [ 70.488607][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 70.490539][ T5325] ? do_syscall_64+0x100/0x230 [ 70.492436][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 70.494319][ T5325] do_syscall_64+0xf3/0x230 [ 70.496115][ T5325] ? clear_bhb_loop+0x35/0x90 [ 70.497969][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.500183][ T5325] RIP: 0033:0x7f9e7457feba [ 70.501841][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.507912][ T5325] RSP: 002b:00007f9e753f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.510330][ T5325] RAX: ffffffffffffffda RBX: 00007f9e753f1ef0 RCX: 00007f9e7457feba [ 70.512782][ T5325] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007f9e753f1eb0 [ 70.515311][ T5325] RBP: 00000000200058c0 R08: 00007f9e753f1ef0 R09: 0000000000000000 [ 70.517799][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005900 [ 70.520180][ T5325] R13: 00007f9e753f1eb0 R14: 0000000000005922 R15: 0000000020000040 [ 70.522951][ T5325] [ 70.523908][ T5325] [ 70.524680][ T5325] Allocated by task 5325: [ 70.526116][ T5325] kasan_save_track+0x3f/0x80 [ 70.527621][ T5325] __kasan_kmalloc+0x98/0xb0 [ 70.529179][ T5325] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 70.531484][ T5325] krealloc_noprof+0x88/0x120 [ 70.533120][ T5325] bch2_sb_realloc+0x2d2/0x660 [ 70.534870][ T5325] read_one_super+0x73b/0xf40 [ 70.536556][ T5325] __bch2_read_super+0x87c/0x1380 [ 70.538301][ T5325] bch2_fs_open+0x270/0x2f80 [ 70.540202][ T5325] bch2_fs_get_tree+0x738/0x1710 [ 70.541750][ T5325] vfs_get_tree+0x90/0x2b0 [ 70.543400][ T5325] do_new_mount+0x2be/0xb40 [ 70.544846][ T5325] __se_sys_mount+0x2d6/0x3c0 [ 70.546444][ T5325] do_syscall_64+0xf3/0x230 [ 70.548098][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.550272][ T5325] [ 70.551135][ T5325] The buggy address belongs to the object at ffff888040bcc000 [ 70.551135][ T5325] which belongs to the cache kmalloc-8k of size 8192 [ 70.556169][ T5325] The buggy address is located 0 bytes to the right of [ 70.556169][ T5325] allocated 8192-byte region [ffff888040bcc000, ffff888040bce000) [ 70.561507][ T5325] [ 70.562362][ T5325] The buggy address belongs to the physical page: [ 70.564808][ T5325] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40bc8 [ 70.568112][ T5325] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.571124][ T5325] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 70.574254][ T5325] page_type: f5(slab) [ 70.576055][ T5325] raw: 04fff00000000040 ffff88801ac42280 ffffea00010e5200 0000000000000002 [ 70.579290][ T5325] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 70.582481][ T5325] head: 04fff00000000040 ffff88801ac42280 ffffea00010e5200 0000000000000002 [ 70.585698][ T5325] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 70.588682][ T5325] head: 04fff00000000003 ffffea000102f201 ffffffffffffffff 0000000000000000 [ 70.591718][ T5325] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 70.594940][ T5325] page dumped because: kasan: bad access detected [ 70.597431][ T5325] page_owner tracks the page as allocated [ 70.599765][ T5325] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5302, tgid 5302 (sshd), ts 58882450689, free_ts 58880112637 [ 70.607421][ T5325] post_alloc_hook+0x1f3/0x230 [ 70.609304][ T5325] get_page_from_freelist+0x3649/0x3790 [ 70.611428][ T5325] __alloc_pages_noprof+0x292/0x710 [ 70.613141][ T5325] alloc_pages_mpol_noprof+0x3e8/0x680 [ 70.614925][ T5325] alloc_slab_page+0x6a/0x140 [ 70.616561][ T5325] allocate_slab+0x5a/0x2f0 [ 70.618230][ T5325] ___slab_alloc+0xcd1/0x14b0 [ 70.620066][ T5325] __slab_alloc+0x58/0xa0 [ 70.621786][ T5325] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 70.624243][ T5325] kmalloc_reserve+0x111/0x2a0 [ 70.626109][ T5325] __alloc_skb+0x1f3/0x440 [ 70.627852][ T5325] netlink_dump+0x1f7/0xd80 [ 70.629604][ T5325] netlink_recvmsg+0x6bb/0x11d0 [ 70.631397][ T5325] sock_recvmsg+0x22f/0x280 [ 70.632994][ T5325] ____sys_recvmsg+0x1c6/0x480 [ 70.634745][ T5325] __sys_recvmsg+0x2e6/0x3d0 [ 70.636209][ T5325] page last free pid 5301 tgid 5301 stack trace: [ 70.638343][ T5325] free_unref_page+0xcfb/0xf20 [ 70.640131][ T5325] __put_partials+0xeb/0x130 [ 70.641739][ T5325] put_cpu_partial+0x17c/0x250 [ 70.643468][ T5325] __slab_free+0x2ea/0x3d0 [ 70.645022][ T5325] qlist_free_all+0x9a/0x140 [ 70.646701][ T5325] kasan_quarantine_reduce+0x14f/0x170 [ 70.648757][ T5325] __kasan_slab_alloc+0x23/0x80 [ 70.650395][ T5325] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 70.652473][ T5325] sock_alloc_inode+0x28/0xc0 [ 70.654017][ T5325] alloc_inode+0x65/0x1a0 [ 70.655551][ T5325] __sock_create+0x123/0x940 [ 70.657232][ T5325] __sys_socket+0x150/0x3c0 [ 70.658847][ T5325] __x64_sys_socket+0x7a/0x90 [ 70.660445][ T5325] do_syscall_64+0xf3/0x230 [ 70.661969][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.663994][ T5325] [ 70.664843][ T5325] Memory state around the buggy address: [ 70.666787][ T5325] ffff888040bcdf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.669468][ T5325] ffff888040bcdf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.672466][ T5325] >ffff888040bce000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.675361][ T5325] ^ [ 70.676851][ T5325] ffff888040bce080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.679649][ T5325] ffff888040bce100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.682385][ T5325] ================================================================== [ 70.725451][ T5325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.728097][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 70.731401][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.735493][ T5325] Call Trace: [ 70.736778][ T5325] [ 70.737983][ T5325] dump_stack_lvl+0x241/0x360 [ 70.740115][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.742355][ T5325] ? __pfx__printk+0x10/0x10 [ 70.744337][ T5325] ? preempt_schedule+0xe1/0xf0 [ 70.746430][ T5325] ? vscnprintf+0x5d/0x90 [ 70.748331][ T5325] panic+0x349/0x880 [ 70.750138][ T5325] ? check_panic_on_warn+0x21/0xb0 [ 70.752317][ T5325] ? __pfx_panic+0x10/0x10 [ 70.754247][ T5325] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 70.756823][ T5325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 70.759505][ T5325] ? print_report+0x502/0x550 [ 70.761629][ T5325] check_panic_on_warn+0x86/0xb0 [ 70.763726][ T5325] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.766206][ T5325] end_report+0x77/0x160 [ 70.767680][ T5325] kasan_report+0x154/0x180 [ 70.769188][ T5325] ? journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.771400][ T5325] journal_entry_dev_usage_to_text+0x12d/0x1d0 [ 70.773653][ T5325] bch2_sb_clean_to_text+0x138/0x240 [ 70.775505][ T5325] bch2_sb_field_validate+0x201/0x2e0 [ 70.777456][ T5325] ? __pfx_bch2_sb_field_validate+0x10/0x10 [ 70.779610][ T5325] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80 [ 70.781803][ T5325] ? bch2_opt_validate+0x2ca/0x300 [ 70.783700][ T5325] bch2_sb_validate+0xbb1/0xf70 [ 70.785455][ T5325] ? blk_status_to_errno+0x22/0x80 [ 70.787355][ T5325] ? __pfx_bch2_sb_validate+0x10/0x10 [ 70.789150][ T5325] ? bch2_sb_compatible+0x493/0x850 [ 70.790881][ T5325] ? read_one_super+0x65a/0xf40 [ 70.792554][ T5325] ? read_one_super+0xe23/0xf40 [ 70.794209][ T5325] ? __pfx_read_one_super+0x10/0x10 [ 70.796021][ T5325] ? __pfx_bch2_sb_realloc+0x10/0x10 [ 70.797834][ T5325] ? bdev_file_open_by_path+0x382/0x480 [ 70.799880][ T5325] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 70.801791][ T5325] ? trace_kmalloc+0x1f/0xd0 [ 70.803554][ T5325] ? __asan_memcpy+0x40/0x70 [ 70.805249][ T5325] __bch2_read_super+0xc24/0x1380 [ 70.807239][ T5325] ? stack_depot_save_flags+0x6e4/0x830 [ 70.809388][ T5325] ? __pfx___bch2_read_super+0x10/0x10 [ 70.811608][ T5325] ? rcu_is_watching+0x15/0xb0 [ 70.813609][ T5325] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 70.815888][ T5325] ? kfree+0x4e/0x440 [ 70.817329][ T5325] ? __bch2_darray_resize_noprof+0x18b/0x240 [ 70.819612][ T5325] bch2_fs_open+0x270/0x2f80 [ 70.821332][ T5325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.823522][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.825654][ T5325] ? lockdep_hardirqs_on+0x99/0x150 [ 70.827406][ T5325] ? __pfx_bch2_fs_open+0x10/0x10 [ 70.828949][ T5325] ? stack_trace_save+0x118/0x1d0 [ 70.830694][ T5325] ? kasan_save_track+0x51/0x80 [ 70.832547][ T5325] ? kasan_save_track+0x3f/0x80 [ 70.834321][ T5325] ? kasan_save_free_info+0x40/0x50 [ 70.836245][ T5325] ? __kasan_slab_free+0x59/0x70 [ 70.838121][ T5325] ? kfree+0x1a0/0x440 [ 70.839662][ T5325] ? sget+0x2b8/0x620 [ 70.841175][ T5325] ? bch2_fs_get_tree+0x683/0x1710 [ 70.843135][ T5325] ? vfs_get_tree+0x90/0x2b0 [ 70.844783][ T5325] ? do_new_mount+0x2be/0xb40 [ 70.846340][ T5325] ? __se_sys_mount+0x2d6/0x3c0 [ 70.848066][ T5325] ? do_syscall_64+0xf3/0x230 [ 70.849761][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.852113][ T5325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.854370][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.856674][ T5325] ? kasan_quarantine_put+0xdc/0x230 [ 70.858799][ T5325] ? lockdep_hardirqs_on+0x99/0x150 [ 70.860907][ T5325] ? sget+0x2b8/0x620 [ 70.862477][ T5325] ? __pfx_bch2_test_super+0x10/0x10 [ 70.864475][ T5325] ? sget+0x2b8/0x620 [ 70.865942][ T5325] ? __pfx_bch2_noset_super+0x10/0x10 [ 70.867977][ T5325] bch2_fs_get_tree+0x738/0x1710 [ 70.869780][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 70.871777][ T5325] ? generic_parse_monolithic+0x387/0x400 [ 70.873799][ T5325] ? apparmor_capable+0x13b/0x1b0 [ 70.875592][ T5325] vfs_get_tree+0x90/0x2b0 [ 70.877304][ T5325] do_new_mount+0x2be/0xb40 [ 70.879032][ T5325] ? __pfx_do_new_mount+0x10/0x10 [ 70.880968][ T5325] __se_sys_mount+0x2d6/0x3c0 [ 70.882762][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 70.884675][ T5325] ? do_syscall_64+0x100/0x230 [ 70.886411][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 70.888190][ T5325] do_syscall_64+0xf3/0x230 [ 70.889817][ T5325] ? clear_bhb_loop+0x35/0x90 [ 70.891513][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.893655][ T5325] RIP: 0033:0x7f9e7457feba [ 70.895240][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.902202][ T5325] RSP: 002b:00007f9e753f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.905218][ T5325] RAX: ffffffffffffffda RBX: 00007f9e753f1ef0 RCX: 00007f9e7457feba [ 70.908176][ T5325] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007f9e753f1eb0 [ 70.911076][ T5325] RBP: 00000000200058c0 R08: 00007f9e753f1ef0 R09: 0000000000000000 [ 70.913911][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005900 [ 70.916819][ T5325] R13: 00007f9e753f1eb0 R14: 0000000000005922 R15: 0000000020000040 [ 70.919804][ T5325] [ 70.921160][ T5325] Kernel Offset: disabled [ 70.922722][ T5325] Rebooting in 86400 seconds..