./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1853795519 <...> Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. execve("./syz-executor1853795519", ["./syz-executor1853795519"], 0x7fff2b5a1610 /* 10 vars */) = 0 brk(NULL) = 0x555585161000 brk(0x555585161d40) = 0x555585161d40 arch_prctl(ARCH_SET_FS, 0x5555851613c0) = 0 set_tid_address(0x555585161690) = 288 set_robust_list(0x5555851616a0, 24) = 0 rseq(0x555585161ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1853795519", 4096) = 28 getrandom("\x79\x87\x2e\x51\x79\xa9\xdb\xec", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585161d40 brk(0x555585182d40) = 0x555585182d40 brk(0x555585183000) = 0x555585183000 mprotect(0x7f1f2c4cb000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 futex(0x7f1f2c4d13cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f1f2c467670, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1f2c458cf0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1f2c3e0000 mprotect(0x7f1f2c3e1000, 131072, PROT_READ|PROT_WRITE) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1f2c400990, parent_tid=0x7f1f2c400990, exit_signal=0, stack=0x7f1f2c3e0000, stack_size=0x20300, tls=0x7f1f2c4006c0} => {parent_tid=[289]}, 88) = 289 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 futex(0x7f1f2c4d13c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 futex(0x7f1f2c4d13cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 289 attached [pid 289] set_robust_list(0x7f1f2c4009a0, 24) = 0 [pid 289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 289] openat(AT_FDCWD, "/dev/fuse", O_RDWR) = 3 [pid 289] futex(0x7f1f2c4d13cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... futex resumed>) = 0 [pid 288] futex(0x7f1f2c4d13c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7f1f2c4d13cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] <... futex resumed>) = 1 [pid 289] mkdir("./file0", 0777) = 0 [pid 289] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"...) = 0 [ 25.206164][ T30] audit: type=1400 audit(1752889493.822:64): avc: denied { execmem } for pid=288 comm="syz-executor185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.226011][ T30] audit: type=1400 audit(1752889493.842:65): avc: denied { read write } for pid=288 comm="syz-executor185" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [pid 289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 288] futex(0x7f1f2c4d13cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 288] futex(0x7f1f2c4d13cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 288] futex(0x7f1f2c4d13dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1f2c3bf000 [pid 288] mprotect(0x7f1f2c3c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 288] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1f2c3df990, parent_tid=0x7f1f2c3df990, exit_signal=0, stack=0x7f1f2c3bf000, stack_size=0x20300, tls=0x7f1f2c3df6c0} => {parent_tid=[291]}, 88) = 291 [pid 288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 288] futex(0x7f1f2c4d13d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7f1f2c4d13dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 291 attached [pid 291] set_robust_list(0x7f1f2c3df9a0, 24) = 0 [pid 291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 291] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 104 [pid 291] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x2b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 291] futex(0x7f1f2c4d13dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... futex resumed>) = 0 [pid 288] futex(0x7f1f2c4d13d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7f1f2c4d13dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... futex resumed>) = 1 [pid 291] read(3, "\x30\x00\x00\x00\x1b\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x21\x01\x00\x00\x00\x00\x00\x00\x00\x80\x01\x00\x00\x00\x00\x00", 8192) = 48 [pid 291] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 289] <... openat resumed>) = 4 [pid 289] chdir("./file0" [pid 291] <... write resumed>) = 32 [pid 291] futex(0x7f1f2c4d13dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... futex resumed>) = 0 [pid 288] futex(0x7f1f2c4d13d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7f1f2c4d13dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... futex resumed>) = 1 [pid 291] read(3, "\x30\x00\x00\x00\x22\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x21\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 291] write(3, "\x10\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00", 16 [pid 289] <... chdir resumed>) = 0 [pid 289] futex(0x7f1f2c4d13cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7f1f2c4d13c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] <... write resumed>) = 16 [pid 291] futex(0x7f1f2c4d13dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... futex resumed>) = 0 [pid 288] futex(0x7f1f2c4d13c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 288] futex(0x7f1f2c4d13cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] read(3, [pid 291] <... futex resumed>) = 1 [ 25.249920][ T30] audit: type=1400 audit(1752889493.842:66): avc: denied { open } for pid=288 comm="syz-executor185" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.273333][ T30] audit: type=1400 audit(1752889493.842:67): avc: denied { mounton } for pid=288 comm="syz-executor185" path="/root/file0" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 291] futex(0x7f1f2c4d13d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 288] futex(0x7f1f2c4d13d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] futex(0x7f1f2c4d13dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... futex resumed>) = 0 [pid 291] openat(AT_FDCWD, "./file0", O_RDONLY|O_CREAT|O_APPEND|O_NOATIME|O_CLOEXEC|O_DIRECTORY, 0573 [pid 289] <... read resumed>"\x2e\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x23\x01\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46 [pid 289] write(3, "\x95\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 149) = 149 [pid 289] futex(0x7f1f2c4d13cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.296753][ T30] audit: type=1400 audit(1752889493.852:68): avc: denied { mount } for pid=288 comm="syz-executor185" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 25.336652][ T291] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 25.348504][ T291] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 25.357172][ T291] CPU: 0 PID: 291 Comm: syz-executor185 Not tainted 5.15.188-syzkaller-android13-5.15.188_r00 #0 [ 25.367663][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 25.377803][ T291] RIP: 0010:fuse_atomic_open+0x238/0x2140 [ 25.383545][ T291] Code: 89 de 83 e6 40 31 ff e8 06 fd 71 ff 89 d8 83 e0 40 75 07 e8 4a f9 71 ff eb 2e 48 8b 44 24 58 48 8d 58 30 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 39 70 b0 ff 48 83 3b 00 0f 84 9c [ 25.403143][ T291] RSP: 0018:ffffc900009a7380 EFLAGS: 00010207 [ 25.409207][ T291] RAX: 0000000000000006 RBX: 0000000000000035 RCX: ffff8881230913c0 [ 25.417169][ T291] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 25.425135][ T291] RBP: ffffc900009a79b0 R08: ffff8881230913c0 R09: 0000000000000002 [ 25.433099][ T291] R10: 00000000fffffffe R11: 0000000000000000 R12: dffffc0000000000 [ 25.441076][ T291] R13: ffff88811b582000 R14: 1ffff92000134e88 R15: 0000000000000005 [ 25.449071][ T291] FS: 00007f1f2c3df6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.457996][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.464573][ T291] CR2: 0000000026dcc258 CR3: 0000000122ab0000 CR4: 00000000003506b0 [ 25.472539][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.480501][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.488460][ T291] Call Trace: [ 25.491833][ T291] [ 25.494768][ T291] ? avc_alloc_node+0x8f/0x4c0 [ 25.499524][ T291] ? kmem_cache_alloc+0xf7/0x260 [ 25.504454][ T291] ? fuse_rename2+0x25f0/0x25f0 [ 25.509299][ T291] ? __kasan_check_write+0x14/0x20 [ 25.514399][ T291] ? avc_alloc_node+0x433/0x4c0 [ 25.519245][ T291] ? __kasan_check_write+0x14/0x20 [ 25.524344][ T291] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 25.529798][ T291] ? _raw_spin_lock+0xe0/0xe0 [ 25.534479][ T291] ? avc_xperms_populate+0x4d3/0x590 [ 25.539759][ T291] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 25.545559][ T291] ? avc_compute_av+0x4fd/0x830 [ 25.550423][ T291] ? avc_has_perm_noaudit+0x2f4/0x460 [ 25.555880][ T291] ? avc_denied+0x1b0/0x1b0 [ 25.560378][ T291] ? avc_has_perm+0x158/0x240 [ 25.565067][ T291] ? avc_has_perm_noaudit+0x460/0x460 [ 25.570437][ T291] ? selinux_determine_inode_label+0x290/0x3e0 [ 25.576585][ T291] ? may_create+0x377/0x460 [ 25.581079][ T291] ? selinux_determine_inode_label+0x3e0/0x3e0 [ 25.587245][ T291] ? make_kgid+0x640/0x640 [ 25.591658][ T291] ? selinux_inode_create+0x22/0x30 [ 25.596855][ T291] ? security_inode_create+0xbd/0x110 [ 25.602217][ T291] ? fuse_rename2+0x25f0/0x25f0 [ 25.607071][ T291] path_openat+0xe31/0x2f10 [ 25.611572][ T291] ? do_filp_open+0x3e0/0x3e0 [ 25.616242][ T291] do_filp_open+0x1b3/0x3e0 [ 25.620737][ T291] ? vfs_tmpfile+0x2d0/0x2d0 [ 25.625322][ T291] do_sys_openat2+0x14c/0x7b0 [ 25.630000][ T291] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.635204][ T291] ? do_sys_open+0xe0/0xe0 [ 25.639643][ T291] ? do_notify_parent+0x800/0x800 [ 25.644669][ T291] __x64_sys_openat+0x136/0x160 [ 25.649549][ T291] x64_sys_call+0x219/0x9a0 [ 25.654044][ T291] do_syscall_64+0x4c/0xa0 [ 25.658625][ T291] ? clear_bhb_loop+0x50/0xa0 [ 25.663297][ T291] ? clear_bhb_loop+0x50/0xa0 [ 25.667982][ T291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.673867][ T291] RIP: 0033:0x7f1f2c441799 [ 25.678277][ T291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.698219][ T291] RSP: 002b:00007f1f2c3df218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [pid 289] futex(0x7f1f2c4d13c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 25.706621][ T291] RAX: ffffffffffffffda RBX: 00007f1f2c4d13d8 RCX: 00007f1f2c441799 [ 25.714604][ T291] RDX: 00000000000d0440 RSI: 0000200000000100 RDI: 00000000ffffff9c [ 25.722565][ T291] RBP: 00007f1f2c4d13d0 R08: 0000000000000000 R09: 0000000000000000 [ 25.730528][ T291] R10: 000000000000017b R11: 0000000000000246 R12: 00007f1f2c49e11c [ 25.738679][ T291] R13: 0000200000000100 R14: 0000000000000000 R15: 0030656c69662f2e [ 25.746769][ T291] [ 25.749785][ T291] Modules linked in: [ 25.754586][ T291] ---[ end trace 346ed0de32341fa4 ]--- [ 25.755598][ T30] audit: type=1400 audit(1752889494.372:69): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.760651][ T291] RIP: 0010:fuse_atomic_open+0x238/0x2140 [ 25.782078][ T30] audit: type=1400 audit(1752889494.372:70): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.787958][ T291] Code: 89 de 83 e6 40 31 ff e8 06 fd 71 ff 89 d8 83 e0 40 75 07 e8 4a f9 71 ff eb 2e 48 8b 44 24 58 48 8d 58 30 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 39 70 b0 ff 48 83 3b 00 0f 84 9c [ 25.809079][ T30] audit: type=1400 audit(1752889494.372:71): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.828508][ T291] RSP: 0018:ffffc900009a7380 EFLAGS: 00010207 [ 25.851893][ T30] audit: type=1400 audit(1752889494.372:72): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.855999][ T291] RAX: 0000000000000006 RBX: 0000000000000035 RCX: ffff8881230913c0 [ 25.876777][ T30] audit: type=1400 audit(1752889494.372:73): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.884697][ T291] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 25.912950][ T291] RBP: ffffc900009a79b0 R08: ffff8881230913c0 R09: 0000000000000002 [ 25.920951][ T291] R10: 00000000fffffffe R11: 0000000000000000 R12: dffffc0000000000 [ 25.929044][ T291] R13: ffff88811b582000 R14: 1ffff92000134e88 R15: 0000000000000005 [ 25.937053][ T291] FS: 00007f1f2c3df6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 25.946101][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.952725][ T291] CR2: 000056161c8b9898 CR3: 0000000122ab0000 CR4: 00000000003506a0 [ 25.960743][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.968852][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.976863][ T291] Kernel panic - not syncing: Fatal exception [ 25.983120][ T291] Kernel Offset: disabled [ 25.987455][ T291] Rebooting in 86400 seconds..