[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. 2021/08/11 06:35:57 parsed 1 programs 2021/08/11 06:35:57 executed programs: 0 syzkaller login: [ 1580.855871][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 1580.913727][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.923878][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.932385][ T8560] device bridge_slave_0 entered promiscuous mode [ 1580.943243][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.952456][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.960524][ T8560] device bridge_slave_1 entered promiscuous mode [ 1580.978684][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.994360][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.020117][ T8560] team0: Port device team_slave_0 added [ 1581.029711][ T8560] team0: Port device team_slave_1 added [ 1581.046008][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.054081][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.081231][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.093691][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.100775][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.126703][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.149919][ T8560] device hsr_slave_0 entered promiscuous mode [ 1581.156355][ T8560] device hsr_slave_1 entered promiscuous mode [ 1581.235980][ T8560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1581.245805][ T8560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1581.257441][ T8560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1581.266176][ T8560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1581.287011][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.294245][ T8560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.302227][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.309359][ T8560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.343741][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.356909][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1581.368807][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.376707][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.386136][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1581.398259][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.409915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1581.420352][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.427538][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.448551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1581.457077][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.464382][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.474114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1581.483491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1581.494707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1581.504154][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1581.517801][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1581.527868][ T8560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1581.548175][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.555751][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1581.564764][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1581.583514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1581.602295][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1581.611358][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1581.619549][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1581.629433][ T8560] device veth0_vlan entered promiscuous mode [ 1581.642093][ T8560] device veth1_vlan entered promiscuous mode [ 1581.659939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1581.668142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1581.676056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1581.687786][ T8560] device veth0_macvtap entered promiscuous mode [ 1581.699734][ T8560] device veth1_macvtap entered promiscuous mode [ 1581.718773][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.727903][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1581.738827][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1581.750898][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.759107][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1581.771175][ T8560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.781478][ T8560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.791020][ T8560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.800471][ T8560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.866479][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.875922][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.901853][ T8784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1581.915838][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.924649][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.935166][ T8784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1582.768607][ T8481] Bluetooth: hci0: command 0x0409 tx timeout 2021/08/11 06:36:02 executed programs: 96 [ 1584.847576][ T8781] Bluetooth: hci0: command 0x041b tx timeout [ 1586.926939][ T8781] Bluetooth: hci0: command 0x040f tx timeout [ 1589.006982][ T8481] Bluetooth: hci0: command 0x0419 tx timeout 2021/08/11 06:36:07 executed programs: 283 [ 1591.087074][ T8481] Bluetooth: hci0: command 0x0405 tx timeout 2021/08/11 06:36:12 executed programs: 466 2021/08/11 06:36:17 executed programs: 656 2021/08/11 06:36:22 executed programs: 843 [ 1606.607942][ T3263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.615672][ T3263] ieee802154 phy1 wpan1: encryption failed: -22 2021/08/11 06:36:27 executed programs: 1026 2021/08/11 06:36:32 executed programs: 1207 2021/08/11 06:36:37 executed programs: 1381 [ 1623.253764][ T8632] ================================================================== [ 1623.261859][ T8632] BUG: KASAN: use-after-free in __lock_acquire+0x3d86/0x54a0 [ 1623.269409][ T8632] Read of size 8 at addr ffff88803475a0a0 by task kworker/1:1/8632 [ 1623.277448][ T8632] [ 1623.279761][ T8632] CPU: 1 PID: 8632 Comm: kworker/1:1 Not tainted 5.14.0-rc5-syzkaller #0 [ 1623.288294][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.298330][ T8632] Workqueue: events l2cap_chan_timeout [ 1623.303789][ T8632] Call Trace: [ 1623.307155][ T8632] dump_stack_lvl+0xcd/0x134 [ 1623.311733][ T8632] print_address_description.constprop.0.cold+0x6c/0x309 [ 1623.318738][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1623.323757][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1623.328848][ T8632] kasan_report.cold+0x83/0xdf [ 1623.333680][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1623.338682][ T8632] __lock_acquire+0x3d86/0x54a0 [ 1623.343511][ T8632] ? call_rcu_zapped+0xb0/0xb0 [ 1623.348258][ T8632] ? mark_lock+0xef/0x17b0 [ 1623.352653][ T8632] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1623.358439][ T8632] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1623.364572][ T8632] ? lock_chain_count+0x20/0x20 [ 1623.369410][ T8632] lock_acquire+0x1ab/0x510 [ 1623.373910][ T8632] ? lock_sock_nested+0x40/0x120 [ 1623.378838][ T8632] ? lock_release+0x720/0x720 [ 1623.383499][ T8632] ? del_timer+0xc5/0x110 [ 1623.387815][ T8632] _raw_spin_lock_bh+0x2f/0x40 [ 1623.392647][ T8632] ? lock_sock_nested+0x40/0x120 [ 1623.397567][ T8632] lock_sock_nested+0x40/0x120 [ 1623.402336][ T8632] l2cap_sock_teardown_cb+0xa1/0x660 [ 1623.407800][ T8632] l2cap_chan_del+0xbc/0xa80 [ 1623.412633][ T8632] l2cap_chan_close+0x1b9/0xaf0 [ 1623.417554][ T8632] ? l2cap_rx+0x1fb0/0x1fb0 [ 1623.422049][ T8632] ? lock_release+0x720/0x720 [ 1623.426703][ T8632] ? lock_downgrade+0x6e0/0x6e0 [ 1623.431528][ T8632] ? do_raw_spin_lock+0x120/0x2b0 [ 1623.436533][ T8632] l2cap_chan_timeout+0x17e/0x2f0 [ 1623.441538][ T8632] process_one_work+0x98d/0x1630 [ 1623.446632][ T8632] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1623.451984][ T8632] ? rwlock_bug.part.0+0x90/0x90 [ 1623.457014][ T8632] ? _raw_spin_lock_irq+0x41/0x50 [ 1623.462052][ T8632] worker_thread+0x658/0x11f0 [ 1623.466891][ T8632] ? process_one_work+0x1630/0x1630 [ 1623.472332][ T8632] kthread+0x3e5/0x4d0 [ 1623.476401][ T8632] ? set_kthread_struct+0x130/0x130 [ 1623.481581][ T8632] ret_from_fork+0x1f/0x30 [ 1623.485987][ T8632] [ 1623.488288][ T8632] Allocated by task 13557: [ 1623.492675][ T8632] kasan_save_stack+0x1b/0x40 [ 1623.497333][ T8632] __kasan_kmalloc+0x9b/0xd0 [ 1623.501937][ T8632] sk_prot_alloc+0x110/0x290 [ 1623.506505][ T8632] sk_alloc+0x32/0xbc0 [ 1623.510550][ T8632] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1623.516336][ T8632] l2cap_sock_create+0x123/0x1f0 [ 1623.521355][ T8632] bt_sock_create+0x17c/0x340 [ 1623.526012][ T8632] __sock_create+0x353/0x790 [ 1623.530576][ T8632] __sys_socket+0xef/0x200 [ 1623.534970][ T8632] __x64_sys_socket+0x6f/0xb0 [ 1623.539645][ T8632] do_syscall_64+0x35/0xb0 [ 1623.544127][ T8632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.550012][ T8632] [ 1623.552314][ T8632] Freed by task 13555: [ 1623.556352][ T8632] kasan_save_stack+0x1b/0x40 [ 1623.561185][ T8632] kasan_set_track+0x1c/0x30 [ 1623.565788][ T8632] kasan_set_free_info+0x20/0x30 [ 1623.571329][ T8632] __kasan_slab_free+0xfb/0x130 [ 1623.576247][ T8632] slab_free_freelist_hook+0xdf/0x240 [ 1623.581601][ T8632] kfree+0xe4/0x530 [ 1623.585530][ T8632] __sk_destruct+0x6a8/0x900 [ 1623.590098][ T8632] sk_destruct+0xbd/0xe0 [ 1623.594347][ T8632] __sk_free+0xef/0x3d0 [ 1623.598503][ T8632] sk_free+0x78/0xa0 [ 1623.602381][ T8632] l2cap_sock_kill+0x203/0x240 [ 1623.607142][ T8632] l2cap_sock_release+0x184/0x200 [ 1623.612254][ T8632] __sock_release+0xcd/0x280 [ 1623.616820][ T8632] sock_close+0x18/0x20 [ 1623.620958][ T8632] __fput+0x288/0x920 [ 1623.624917][ T8632] task_work_run+0xdd/0x1a0 [ 1623.629414][ T8632] exit_to_user_mode_prepare+0x27e/0x290 [ 1623.635544][ T8632] syscall_exit_to_user_mode+0x19/0x60 [ 1623.640982][ T8632] do_syscall_64+0x42/0xb0 [ 1623.645570][ T8632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.651440][ T8632] [ 1623.653742][ T8632] The buggy address belongs to the object at ffff88803475a000 [ 1623.653742][ T8632] which belongs to the cache kmalloc-2k of size 2048 [ 1623.667769][ T8632] The buggy address is located 160 bytes inside of [ 1623.667769][ T8632] 2048-byte region [ffff88803475a000, ffff88803475a800) [ 1623.681105][ T8632] The buggy address belongs to the page: [ 1623.686709][ T8632] page:ffffea0000d1d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34758 [ 1623.696834][ T8632] head:ffffea0000d1d600 order:3 compound_mapcount:0 compound_pincount:0 [ 1623.705142][ T8632] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1623.713109][ T8632] raw: 00fff00000010200 0000000000000000 0000000700000001 ffff888010842000 [ 1623.721673][ T8632] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 1623.730229][ T8632] page dumped because: kasan: bad access detected [ 1623.736786][ T8632] page_owner tracks the page as allocated [ 1623.743094][ T8632] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8913, ts 1582835437585, free_ts 1582828742119 [ 1623.760434][ T8632] get_page_from_freelist+0xa72/0x2f80 [ 1623.766050][ T8632] __alloc_pages+0x1b2/0x500 [ 1623.771480][ T8632] alloc_pages+0x18c/0x2a0 [ 1623.776758][ T8632] allocate_slab+0x32e/0x4b0 [ 1623.781414][ T8632] ___slab_alloc+0x4ba/0x820 [ 1623.786242][ T8632] __slab_alloc.constprop.0+0xa7/0xf0 [ 1623.791866][ T8632] __kmalloc+0x312/0x330 [ 1623.796083][ T8632] sk_prot_alloc+0x110/0x290 [ 1623.800721][ T8632] sk_alloc+0x32/0xbc0 [ 1623.804770][ T8632] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1623.810642][ T8632] l2cap_sock_create+0x123/0x1f0 [ 1623.815573][ T8632] bt_sock_create+0x17c/0x340 [ 1623.820248][ T8632] __sock_create+0x353/0x790 [ 1623.824818][ T8632] __sys_socket+0xef/0x200 [ 1623.829219][ T8632] __x64_sys_socket+0x6f/0xb0 [ 1623.833875][ T8632] do_syscall_64+0x35/0xb0 [ 1623.838403][ T8632] page last free stack trace: [ 1623.843071][ T8632] free_pcp_prepare+0x2c5/0x780 [ 1623.847903][ T8632] free_unref_page+0x19/0x690 [ 1623.852563][ T8632] unfreeze_partials+0x17c/0x1d0 [ 1623.857478][ T8632] put_cpu_partial+0x13d/0x230 [ 1623.862232][ T8632] qlist_free_all+0x5a/0xc0 [ 1623.866733][ T8632] kasan_quarantine_reduce+0x180/0x200 [ 1623.872188][ T8632] __kasan_slab_alloc+0x8e/0xa0 [ 1623.877018][ T8632] kmem_cache_alloc_trace+0x26d/0x3c0 [ 1623.882385][ T8632] apparmor_sk_alloc_security+0x84/0x150 [ 1623.888001][ T8632] security_sk_alloc+0x50/0xb0 [ 1623.892743][ T8632] sk_prot_alloc+0x1e5/0x290 [ 1623.898066][ T8632] sk_alloc+0x32/0xbc0 [ 1623.902220][ T8632] inet6_create+0x36f/0x1030 [ 1623.906878][ T8632] __sock_create+0x353/0x790 [ 1623.911457][ T8632] __sys_socket+0xef/0x200 [ 1623.915851][ T8632] __x64_sys_socket+0x6f/0xb0 [ 1623.920505][ T8632] [ 1623.922806][ T8632] Memory state around the buggy address: [ 1623.928498][ T8632] ffff888034759f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1623.936887][ T8632] ffff88803475a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1623.945106][ T8632] >ffff88803475a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1623.953138][ T8632] ^ [ 1623.958224][ T8632] ffff88803475a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1623.966368][ T8632] ffff88803475a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1623.974490][ T8632] ================================================================== [ 1623.982527][ T8632] Disabling lock debugging due to kernel taint [ 1623.988653][ T8632] Kernel panic - not syncing: panic_on_warn set ... [ 1623.995299][ T8632] CPU: 1 PID: 8632 Comm: kworker/1:1 Tainted: G B 5.14.0-rc5-syzkaller #0 [ 1624.005075][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.015112][ T8632] Workqueue: events l2cap_chan_timeout [ 1624.020561][ T8632] Call Trace: [ 1624.023821][ T8632] dump_stack_lvl+0xcd/0x134 [ 1624.028396][ T8632] panic+0x306/0x73d [ 1624.032269][ T8632] ? __warn_printk+0xf3/0xf3 [ 1624.036836][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1624.041848][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1624.046851][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1624.051856][ T8632] end_report.cold+0x5a/0x5a [ 1624.056423][ T8632] kasan_report.cold+0x71/0xdf [ 1624.061165][ T8632] ? __lock_acquire+0x3d86/0x54a0 [ 1624.066166][ T8632] __lock_acquire+0x3d86/0x54a0 [ 1624.070993][ T8632] ? call_rcu_zapped+0xb0/0xb0 [ 1624.075740][ T8632] ? mark_lock+0xef/0x17b0 [ 1624.080131][ T8632] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1624.085914][ T8632] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1624.091905][ T8632] ? lock_chain_count+0x20/0x20 [ 1624.096999][ T8632] lock_acquire+0x1ab/0x510 [ 1624.101492][ T8632] ? lock_sock_nested+0x40/0x120 [ 1624.106410][ T8632] ? lock_release+0x720/0x720 [ 1624.111062][ T8632] ? del_timer+0xc5/0x110 [ 1624.115378][ T8632] _raw_spin_lock_bh+0x2f/0x40 [ 1624.120117][ T8632] ? lock_sock_nested+0x40/0x120 [ 1624.125037][ T8632] lock_sock_nested+0x40/0x120 [ 1624.129779][ T8632] l2cap_sock_teardown_cb+0xa1/0x660 [ 1624.135048][ T8632] l2cap_chan_del+0xbc/0xa80 [ 1624.139791][ T8632] l2cap_chan_close+0x1b9/0xaf0 [ 1624.144729][ T8632] ? l2cap_rx+0x1fb0/0x1fb0 [ 1624.149232][ T8632] ? lock_release+0x720/0x720 [ 1624.153931][ T8632] ? lock_downgrade+0x6e0/0x6e0 [ 1624.159012][ T8632] ? do_raw_spin_lock+0x120/0x2b0 [ 1624.164453][ T8632] l2cap_chan_timeout+0x17e/0x2f0 [ 1624.169462][ T8632] process_one_work+0x98d/0x1630 [ 1624.174408][ T8632] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1624.180015][ T8632] ? rwlock_bug.part.0+0x90/0x90 [ 1624.184930][ T8632] ? _raw_spin_lock_irq+0x41/0x50 [ 1624.189934][ T8632] worker_thread+0x658/0x11f0 [ 1624.194817][ T8632] ? process_one_work+0x1630/0x1630 [ 1624.199994][ T8632] kthread+0x3e5/0x4d0 [ 1624.204044][ T8632] ? set_kthread_struct+0x130/0x130 [ 1624.209221][ T8632] ret_from_fork+0x1f/0x30 [ 1624.220706][ T8632] Kernel Offset: disabled [ 1624.225195][ T8632] Rebooting in 86400 seconds..