program: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0x400, 0x24, 0x0, 0x6, 0x3}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x2) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@errors_continue}]}, 0x1, 0x5d7d, &(0x7f0000005e00)="$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") io_setup(0x81, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x10507e, 0xc4) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000340)='p', 0x300}]) (fail_nth: 7) [ 70.644129][ T5094] Bluetooth: hci0: command tx timeout [ 72.069281][ T5109] loop0: detected capacity change from 0 to 32768 [ 72.204879][ T5109] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 72.209874][ T5109] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 72.223239][ T5109] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 72.223239][ T5109] running recovery passes: check_allocations [ 72.259456][ T5109] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 72.259481][ T5109] gen 0 oldest_gen 0 data_type journal [ 72.259489][ T5109] journal_seq 1 [ 72.259495][ T5109] need_discard 1 [ 72.259501][ T5109] need_inc_gen 1 [ 72.259507][ T5109] dirty_sectors 256 [ 72.259513][ T5109] stripe_sectors 0 [ 72.259519][ T5109] cached_sectors 0 [ 72.259525][ T5109] stripe 67108864 [ 72.259531][ T5109] stripe_redundancy 0 [ 72.259536][ T5109] io_time[READ] 1 [ 72.259542][ T5109] io_time[WRITE] 1 [ 72.259547][ T5109] fragmentation 0 [ 72.259552][ T5109] bp_start 8 [ 72.259558][ T5109] [ 72.259564][ T5109] invalid data type (got 2 should be 7): delete?, fixing [ 72.326577][ T5109] bcachefs (loop0): accounting_read... done [ 72.333806][ T5109] bcachefs (loop0): alloc_read... done [ 72.336091][ T5109] bcachefs (loop0): stripes_read... done [ 72.338336][ T5109] bcachefs (loop0): snapshots_read... done [ 72.351218][ T5109] bcachefs (loop0): check_allocations... [ 72.354446][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.354470][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 72.385345][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.385362][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 72.410867][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.410883][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 72.431224][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.431239][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 72.444823][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.444841][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 72.464672][ T5109] btree ptr not marked in member info btree allocated bitmap [ 72.464690][ T5109] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 72.485774][ T5109] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 72.489476][ T5109] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 72.515208][ T5109] done [ 72.519063][ T5109] bcachefs (loop0): going read-write [ 72.526193][ T5109] bcachefs (loop0): journal_replay... [ 72.684232][ T4531] Bluetooth: hci0: command tx timeout [ 72.754085][ T5109] done [ 72.755460][ T5109] bcachefs (loop0): resume_logged_ops... done [ 72.757741][ T5109] bcachefs (loop0): delete_dead_inodes... done [ 72.761128][ T5109] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 72.781520][ T5109] bcachefs (loop0): resume_logged_ops... done [ 72.783999][ T5109] bcachefs (loop0): delete_dead_inodes... done [ 72.789590][ T5109] bcachefs (loop0): done starting filesystem [ 72.825301][ T24] audit: type=1800 audit(1727217895.347:2): pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="bus" dev="loop0" ino=4100 res=0 errno=0 [ 72.863198][ T5109] ================================================================== [ 72.865831][ T5109] BUG: KASAN: slab-use-after-free in bch2_direct_write+0x2a60/0x3140 [ 72.868325][ T5109] Read of size 8 at addr ffff8880332890a0 by task syz.0.0/5109 [ 72.870807][ T5109] [ 72.871670][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-10392-g68e5c7d4cefb #0 [ 72.875393][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.880057][ T5109] Call Trace: [ 72.881353][ T5109] [ 72.882439][ T5109] dump_stack_lvl+0x241/0x360 [ 72.884415][ T5109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.886336][ T5109] ? __pfx__printk+0x10/0x10 [ 72.887981][ T5109] ? _printk+0xd5/0x120 [ 72.889465][ T5109] ? __virt_addr_valid+0x183/0x530 [ 72.891315][ T5109] ? __virt_addr_valid+0x183/0x530 [ 72.893170][ T5109] print_report+0x169/0x550 [ 72.894776][ T5109] ? __virt_addr_valid+0x183/0x530 [ 72.896611][ T5109] ? __virt_addr_valid+0x183/0x530 [ 72.898375][ T5109] ? __virt_addr_valid+0x45f/0x530 [ 72.900372][ T5109] ? __phys_addr+0xba/0x170 [ 72.902223][ T5109] ? bch2_direct_write+0x2a60/0x3140 [ 72.904713][ T5109] kasan_report+0x143/0x180 [ 72.907149][ T5109] ? bch2_direct_write+0x2a60/0x3140 [ 72.909827][ T5109] bch2_direct_write+0x2a60/0x3140 [ 72.911772][ T5109] ? __lock_acquire+0x2011/0x2050 [ 72.913752][ T5109] ? __pfx_bch2_direct_write+0x10/0x10 [ 72.915788][ T5109] bch2_write_iter+0x18e/0x23f0 [ 72.917602][ T5109] ? __lock_acquire+0x1384/0x2050 [ 72.919534][ T5109] ? __pfx_bch2_write_iter+0x10/0x10 [ 72.921550][ T5109] ? aio_write+0x4ff/0x7c0 [ 72.923286][ T5109] ? __pfx_lock_release+0x10/0x10 [ 72.925176][ T5109] ? rcu_read_lock_any_held+0xb7/0x160 [ 72.927027][ T5109] ? rw_verify_area+0x1c3/0x6f0 [ 72.928685][ T5109] aio_write+0x56b/0x7c0 [ 72.930251][ T5109] ? __pfx_aio_write+0x10/0x10 [ 72.931859][ T5109] ? __might_fault+0xaa/0x120 [ 72.933521][ T5109] ? __pfx_lock_release+0x10/0x10 [ 72.935191][ T5109] ? __fget_files+0x3f3/0x470 [ 72.936727][ T5109] ? __might_fault+0xaa/0x120 [ 72.938345][ T5109] io_submit_one+0x8a7/0x18a0 [ 72.940102][ T5109] ? __pfx_io_submit_one+0x10/0x10 [ 72.942081][ T5109] ? __might_fault+0xaa/0x120 [ 72.943899][ T5109] ? __pfx_lock_release+0x10/0x10 [ 72.946073][ T5109] ? lookup_ioctx+0x94/0x6a0 [ 72.947969][ T5109] ? __might_fault+0xaa/0x120 [ 72.949843][ T5109] ? __might_fault+0xc6/0x120 [ 72.951565][ T5109] __se_sys_io_submit+0x179/0x2f0 [ 72.953473][ T5109] ? __pfx___se_sys_io_submit+0x10/0x10 [ 72.955460][ T5109] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.957715][ T5109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.960097][ T5109] ? do_syscall_64+0x100/0x230 [ 72.962208][ T5109] ? do_syscall_64+0xb6/0x230 [ 72.964631][ T5109] do_syscall_64+0xf3/0x230 [ 72.966966][ T5109] ? clear_bhb_loop+0x35/0x90 [ 72.968912][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.971074][ T5109] RIP: 0033:0x7faa7fd7def9 [ 72.972725][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.980200][ T5109] RSP: 002b:00007faa80b10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 72.983533][ T5109] RAX: ffffffffffffffda RBX: 00007faa7ff35f80 RCX: 00007faa7fd7def9 [ 72.986911][ T5109] RDX: 0000000020001d00 RSI: 0000000000000001 RDI: 00007faa80acc000 [ 72.990373][ T5109] RBP: 00007faa80b10090 R08: 0000000000000000 R09: 0000000000000000 [ 72.994218][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.998138][ T5109] R13: 0000000000000000 R14: 00007faa7ff35f80 R15: 00007fff53efb458 [ 73.001791][ T5109] [ 73.003273][ T5109] [ 73.004368][ T5109] Allocated by task 5109: [ 73.006349][ T5109] kasan_save_track+0x3f/0x80 [ 73.008283][ T5109] __kasan_mempool_unpoison_object+0x9e/0x160 [ 73.010977][ T5109] remove_element+0x129/0x1a0 [ 73.013399][ T5109] mempool_alloc_noprof+0x54e/0x5a0 [ 73.015991][ T5109] bio_alloc_bioset+0x26f/0x1130 [ 73.017740][ T5109] bch2_direct_write+0x5a0/0x3140 [ 73.019377][ T5109] bch2_write_iter+0x18e/0x23f0 [ 73.021152][ T5109] aio_write+0x56b/0x7c0 [ 73.022631][ T5109] io_submit_one+0x8a7/0x18a0 [ 73.024301][ T5109] __se_sys_io_submit+0x179/0x2f0 [ 73.026076][ T5109] do_syscall_64+0xf3/0x230 [ 73.027410][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.029193][ T5109] [ 73.029893][ T5109] Freed by task 5109: [ 73.031199][ T5109] kasan_save_track+0x3f/0x80 [ 73.033075][ T5109] kasan_save_free_info+0x40/0x50 [ 73.035227][ T5109] __kasan_mempool_poison_object+0xaa/0x120 [ 73.037899][ T5109] mempool_free+0x1c8/0x390 [ 73.040006][ T5109] bch2_direct_write+0x2a49/0x3140 [ 73.042201][ T5109] bch2_write_iter+0x18e/0x23f0 [ 73.044152][ T5109] aio_write+0x56b/0x7c0 [ 73.045747][ T5109] io_submit_one+0x8a7/0x18a0 [ 73.047821][ T5109] __se_sys_io_submit+0x179/0x2f0 [ 73.050525][ T5109] do_syscall_64+0xf3/0x230 [ 73.052520][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.055062][ T5109] [ 73.056049][ T5109] The buggy address belongs to the object at ffff888033288fc0 [ 73.056049][ T5109] which belongs to the cache bio-119 of size 1192 [ 73.061422][ T5109] The buggy address is located 224 bytes inside of [ 73.061422][ T5109] freed 1192-byte region [ffff888033288fc0, ffff888033289468) [ 73.067478][ T5109] [ 73.068443][ T5109] The buggy address belongs to the physical page: [ 73.070804][ T5109] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33288 [ 73.074069][ T5109] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 73.077377][ T5109] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 73.080850][ T5109] page_type: f5(slab) [ 73.082962][ T5109] raw: 04fff00000000040 ffff88803d006dc0 dead000000000122 0000000000000000 [ 73.086757][ T5109] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 73.090177][ T5109] head: 04fff00000000040 ffff88803d006dc0 dead000000000122 0000000000000000 [ 73.093686][ T5109] head: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 73.097232][ T5109] head: 04fff00000000002 ffffea0000cca201 ffffffffffffffff 0000000000000000 [ 73.101383][ T5109] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 73.105269][ T5109] page dumped because: kasan: bad access detected [ 73.107746][ T5109] page_owner tracks the page as allocated [ 73.109455][ T5109] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5109, tgid 5108 (syz.0.0), ts 72169226459, free_ts 71873280046 [ 73.117683][ T5109] post_alloc_hook+0x1f3/0x230 [ 73.119705][ T5109] get_page_from_freelist+0x3045/0x3190 [ 73.122066][ T5109] __alloc_pages_noprof+0x256/0x6c0 [ 73.124145][ T5109] alloc_pages_mpol_noprof+0x3e8/0x680 [ 73.126245][ T5109] alloc_slab_page+0x6a/0x120 [ 73.128071][ T5109] allocate_slab+0x5a/0x2f0 [ 73.129850][ T5109] ___slab_alloc+0xcd1/0x14b0 [ 73.131660][ T5109] __slab_alloc+0x58/0xa0 [ 73.133328][ T5109] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 73.135470][ T5109] mempool_init_node+0x1ee/0x4e0 [ 73.137421][ T5109] mempool_init_noprof+0x3a/0x50 [ 73.139521][ T5109] bioset_init+0x2e8/0x820 [ 73.141623][ T5109] bch2_fs_fs_io_direct_init+0x67/0x90 [ 73.143893][ T5109] bch2_fs_open+0x2d77/0x2f80 [ 73.145757][ T5109] bch2_fs_get_tree+0x738/0x1710 [ 73.147703][ T5109] vfs_get_tree+0x90/0x2b0 [ 73.149656][ T5109] page last free pid 9 tgid 9 stack trace: [ 73.152413][ T5109] free_unref_page+0xcfb/0xf20 [ 73.154809][ T5109] __put_partials+0xeb/0x130 [ 73.156876][ T5109] put_cpu_partial+0x17c/0x250 [ 73.158772][ T5109] __slab_free+0x2ea/0x3d0 [ 73.160540][ T5109] qlist_free_all+0x9a/0x140 [ 73.162517][ T5109] kasan_quarantine_reduce+0x14f/0x170 [ 73.164996][ T5109] __kasan_slab_alloc+0x23/0x80 [ 73.167224][ T5109] __kmalloc_cache_noprof+0x132/0x2c0 [ 73.169521][ T5109] nsim_fib_event_work+0xe1a/0x4130 [ 73.171664][ T5109] process_scheduled_works+0xa63/0x1850 [ 73.173849][ T5109] worker_thread+0x870/0xd30 [ 73.175650][ T5109] kthread+0x2f0/0x390 [ 73.177202][ T5109] ret_from_fork+0x4b/0x80 [ 73.178638][ T5109] ret_from_fork_asm+0x1a/0x30 [ 73.180262][ T5109] [ 73.181267][ T5109] Memory state around the buggy address: [ 73.183668][ T5109] ffff888033288f80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 73.187061][ T5109] ffff888033289000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.190155][ T5109] >ffff888033289080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.193129][ T5109] ^ [ 73.195069][ T5109] ffff888033289100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.198132][ T5109] ffff888033289180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.201228][ T5109] ================================================================== [ 73.580292][ T5109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.583964][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-10392-g68e5c7d4cefb #0 [ 73.588243][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.592254][ T5109] Call Trace: [ 73.593594][ T5109] [ 73.594718][ T5109] dump_stack_lvl+0x241/0x360 [ 73.596526][ T5109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.598501][ T5109] ? __pfx__printk+0x10/0x10 [ 73.600304][ T5109] ? preempt_schedule+0xe1/0xf0 [ 73.601955][ T5109] ? vscnprintf+0x5d/0x90 [ 73.603668][ T5109] panic+0x349/0x880 [ 73.605246][ T5109] ? check_panic_on_warn+0x21/0xb0 [ 73.607352][ T5109] ? __pfx_panic+0x10/0x10 [ 73.609185][ T5109] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 73.611645][ T5109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.614435][ T5109] ? print_report+0x502/0x550 [ 73.616340][ T5109] check_panic_on_warn+0x86/0xb0 [ 73.618411][ T5109] ? bch2_direct_write+0x2a60/0x3140 [ 73.620908][ T5109] end_report+0x77/0x160 [ 73.623047][ T5109] kasan_report+0x154/0x180 [ 73.625141][ T5109] ? bch2_direct_write+0x2a60/0x3140 [ 73.627417][ T5109] bch2_direct_write+0x2a60/0x3140 [ 73.629407][ T5109] ? __lock_acquire+0x2011/0x2050 [ 73.631411][ T5109] ? __pfx_bch2_direct_write+0x10/0x10 [ 73.633802][ T5109] bch2_write_iter+0x18e/0x23f0 [ 73.635716][ T5109] ? __lock_acquire+0x1384/0x2050 [ 73.637672][ T5109] ? __pfx_bch2_write_iter+0x10/0x10 [ 73.639972][ T5109] ? aio_write+0x4ff/0x7c0 [ 73.641838][ T5109] ? __pfx_lock_release+0x10/0x10 [ 73.644063][ T5109] ? rcu_read_lock_any_held+0xb7/0x160 [ 73.646201][ T5109] ? rw_verify_area+0x1c3/0x6f0 [ 73.648131][ T5109] aio_write+0x56b/0x7c0 [ 73.649773][ T5109] ? __pfx_aio_write+0x10/0x10 [ 73.651622][ T5109] ? __might_fault+0xaa/0x120 [ 73.653370][ T5109] ? __pfx_lock_release+0x10/0x10 [ 73.655406][ T5109] ? __fget_files+0x3f3/0x470 [ 73.657540][ T5109] ? __might_fault+0xaa/0x120 [ 73.659726][ T5109] io_submit_one+0x8a7/0x18a0 [ 73.661915][ T5109] ? __pfx_io_submit_one+0x10/0x10 [ 73.664093][ T5109] ? __might_fault+0xaa/0x120 [ 73.665956][ T5109] ? __pfx_lock_release+0x10/0x10 [ 73.667920][ T5109] ? lookup_ioctx+0x94/0x6a0 [ 73.669597][ T5109] ? __might_fault+0xaa/0x120 [ 73.671426][ T5109] ? __might_fault+0xc6/0x120 [ 73.673535][ T5109] __se_sys_io_submit+0x179/0x2f0 [ 73.675724][ T5109] ? __pfx___se_sys_io_submit+0x10/0x10 [ 73.677838][ T5109] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.680144][ T5109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.682614][ T5109] ? do_syscall_64+0x100/0x230 [ 73.684579][ T5109] ? do_syscall_64+0xb6/0x230 [ 73.686577][ T5109] do_syscall_64+0xf3/0x230 [ 73.688401][ T5109] ? clear_bhb_loop+0x35/0x90 [ 73.690304][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.692266][ T5109] RIP: 0033:0x7faa7fd7def9 [ 73.693778][ T5109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.700544][ T5109] RSP: 002b:00007faa80b10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 73.703955][ T5109] RAX: ffffffffffffffda RBX: 00007faa7ff35f80 RCX: 00007faa7fd7def9 [ 73.707303][ T5109] RDX: 0000000020001d00 RSI: 0000000000000001 RDI: 00007faa80acc000 [ 73.710309][ T5109] RBP: 00007faa80b10090 R08: 0000000000000000 R09: 0000000000000000 [ 73.713549][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.716798][ T5109] R13: 0000000000000000 R14: 00007faa7ff35f80 R15: 00007fff53efb458 [ 73.719355][ T5109] [ 73.720601][ T5109] Kernel Offset: disabled [ 73.722168][ T5109] Rebooting in 86400 seconds..