./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3650955004 <...> Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. execve("./syz-executor3650955004", ["./syz-executor3650955004"], 0x7ffc77001f50 /* 10 vars */) = 0 brk(NULL) = 0x5555562f7000 brk(0x5555562f7d00) = 0x5555562f7d00 arch_prctl(ARCH_SET_FS, 0x5555562f7380) = 0 set_tid_address(0x5555562f7650) = 5019 set_robust_list(0x5555562f7660, 24) = 0 rseq(0x5555562f7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3650955004", 4096) = 28 getrandom("\x85\xea\x0e\xe3\x9d\x4a\x7a\x5b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555562f7d00 brk(0x555556318d00) = 0x555556318d00 brk(0x555556319000) = 0x555556319000 mprotect(0x7f6096770000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.1maTVy", 0700) = 0 chmod("./syzkaller.1maTVy", 0777) = 0 chdir("./syzkaller.1maTVy") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562f7650) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5020] set_robust_list(0x5555562f7660, 24) = 0 [pid 5020] chdir("./0") = 0 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setpgid(0, 0) = 0 [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1000", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5020] memfd_create("syzkaller", 0) = 3 [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f608e2ab000 [ 40.035339][ T5020] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5020 'syz-executor365' [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5020] munmap(0x7f608e2ab000, 16777216) = 0 [pid 5020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5020] close(3) = 0 [pid 5020] mkdir("./file0", 0777) = 0 [ 40.163054][ T5020] loop0: detected capacity change from 0 to 32768 [ 40.175399][ T5020] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 40.183925][ T5020] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 40.196081][ T5020] gfs2: fsid=syz:syz.0: journal 0 mapped with 12 extents in 0ms [ 40.204884][ T912] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 40.211781][ T912] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5020] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_STRICTATIME|MS_LAZYTIME, "") = 0 [pid 5020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5020] chdir("./file0") = 0 [pid 5020] ioctl(4, LOOP_CLR_FD) = 0 [pid 5020] close(4) = 0 [pid 5020] fspick(AT_FDCWD, ".", 0) = 4 [ 40.235587][ T912] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 23ms [ 40.243185][ T912] gfs2: fsid=syz:syz.0: jid=0: Done [ 40.248658][ T5020] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5020] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 5020] exit_group(0) = ? [pid 5020] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555562f86f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 40.338531][ T5020] gfs2: fsid=syz:syz.0: found 1 quota changes [ 70.688903][ T7] cfg80211: failed to load regulatory.db [ 285.725208][ T27] INFO: task syz-executor365:5019 blocked for more than 143 seconds. [ 285.733484][ T27] Not tainted 6.5.0-rc2-syzkaller #0 [ 285.739392][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.748152][ T27] task:syz-executor365 state:D stack:26272 pid:5019 ppid:5016 flags:0x00004002 [ 285.757431][ T27] Call Trace: [ 285.760721][ T27] [ 285.763662][ T27] __schedule+0xee1/0x59f0 [ 285.768232][ T27] ? io_schedule_timeout+0x150/0x150 [ 285.773552][ T27] ? timer_fixup_activate+0x2b0/0x2b0 [ 285.778997][ T27] ? mark_held_locks+0x9f/0xe0 [ 285.783804][ T27] schedule+0xe7/0x1b0 [ 285.787914][ T27] schedule_timeout+0x157/0x2c0 [ 285.792808][ T27] ? usleep_range_state+0x1a0/0x1a0 [ 285.798050][ T27] ? destroy_timer_on_stack+0x20/0x20 [ 285.803458][ T27] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 285.809304][ T27] ? prepare_to_wait_event+0xcf/0x690 [ 285.814713][ T27] gfs2_gl_hash_clear+0x210/0x290 [ 285.819785][ T27] ? gfs2_gl_dq_holders+0x250/0x250 [ 285.825029][ T27] ? gfs2_jindex_free+0x3c7/0x540 [ 285.830123][ T27] ? prepare_to_swait_exclusive+0x240/0x240 [ 285.836069][ T27] ? gfs2_clear_rgrpd+0x52/0x330 [ 285.841068][ T27] gfs2_put_super+0x4f5/0x690 [ 285.845786][ T27] ? free_local_statfs_inodes+0x350/0x350 [ 285.851540][ T27] generic_shutdown_super+0x158/0x480 [ 285.857147][ T27] kill_block_super+0x64/0xb0 [ 285.861831][ T27] gfs2_kill_sb+0x361/0x410 [ 285.866403][ T27] deactivate_locked_super+0x9a/0x170 [ 285.871825][ T27] deactivate_super+0xde/0x100 [ 285.876657][ T27] cleanup_mnt+0x222/0x3d0 [ 285.881118][ T27] task_work_run+0x14d/0x240 [ 285.885749][ T27] ? task_work_cancel+0x30/0x30 [ 285.890640][ T27] ptrace_notify+0x10c/0x130 [ 285.895280][ T27] syscall_exit_to_user_mode_prepare+0x120/0x220 [ 285.901664][ T27] syscall_exit_to_user_mode+0xd/0x50 [ 285.907074][ T27] do_syscall_64+0x44/0xb0 [ 285.911518][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 285.917447][ T27] RIP: 0033:0x7f60966eb347 [ 285.921871][ T27] RSP: 002b:00007ffe5a444c18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 285.930319][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60966eb347 [ 285.938333][ T27] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe5a444cd0 [ 285.946334][ T27] RBP: 00007ffe5a444cd0 R08: 0000000000000000 R09: 0000000000000000 [ 285.954324][ T27] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffe5a445d30 [ 285.962427][ T27] R13: 00005555562f86c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 285.970442][ T27] [ 285.973458][ T27] [ 285.973458][ T27] Showing all locks held in the system: [ 285.981236][ T27] 1 lock held by rcu_tasks_kthre/13: [ 285.986557][ T27] #0: ffffffff8c9a5830 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 285.997139][ T27] 1 lock held by rcu_tasks_trace/14: [ 286.002437][ T27] #0: ffffffff8c9a5530 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 286.013435][ T27] 1 lock held by khungtaskd/27: [ 286.018316][ T27] #0: ffffffff8c9a6440 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 286.028226][ T27] 2 locks held by getty/4772: [ 286.032912][ T27] #0: ffff88802889c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.042696][ T27] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 286.052871][ T27] 1 lock held by syz-executor365/5019: [ 286.058350][ T27] #0: ffff8880797280e0 (&type->s_umount_key#42){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100 [ 286.068692][ T27] [ 286.071003][ T27] ============================================= [ 286.071003][ T27] [ 286.079432][ T27] NMI backtrace for cpu 0 [ 286.083765][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc2-syzkaller #0 [ 286.091815][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.101850][ T27] Call Trace: [ 286.105117][ T27] [ 286.108030][ T27] dump_stack_lvl+0xd9/0x1b0 [ 286.112604][ T27] nmi_cpu_backtrace+0x277/0x380 [ 286.117533][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.122725][ T27] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 286.128719][ T27] watchdog+0xf29/0x11b0 [ 286.132957][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.138935][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.144942][ T27] kthread+0x33a/0x430 [ 286.149004][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.154625][ T27] ret_from_fork+0x2c/0x70 [ 286.159038][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.164659][ T27] ret_from_fork_asm+0x11/0x20 [ 286.169417][ T27] RIP: 0000:0x0 [ 286.172868][ T27] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 286.180216][ T27] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 286.188619][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 286.196584][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.204548][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.212509][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 286.220468][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.228446][ T27] [ 286.231590][ T27] Sending NMI from CPU 0 to CPUs 1: [ 286.236842][ C1] NMI backtrace for cpu 1 [ 286.236849][ C1] CPU: 1 PID: 3255 Comm: kworker/u4:7 Not tainted 6.5.0-rc2-syzkaller #0 [ 286.236863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.236871][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.236886][ C1] RIP: 0010:__lock_acquire+0x5ee/0x5de0 [ 286.236905][ C1] Code: 83 ec 28 41 83 ff ff 0f 84 f5 0a 00 00 4d 8d 74 24 df 4c 89 e0 4c 89 e2 48 c1 e8 03 83 e2 07 42 0f b6 04 00 38 d0 7f 08 84 c0 <0f> 85 ba 2c 00 00 41 0f b6 46 21 31 c8 a8 60 74 c0 45 8d 67 01 65 [ 286.236917][ C1] RSP: 0018:ffffc9000cb0f790 EFLAGS: 00000046 [ 286.236926][ C1] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000000000 [ 286.236933][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff88802a87bb80 [ 286.236941][ C1] RBP: 0000000000000004 R08: dffffc0000000000 R09: fffffbfff23093d0 [ 286.236949][ C1] R10: ffffffff91849e87 R11: 0000000000000000 R12: ffff88802a87c691 [ 286.236956][ C1] R13: ffff88802a87c6e8 R14: ffff88802a87c670 R15: 0000000000000001 [ 286.236967][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 286.236979][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.236988][ C1] CR2: 0000561a4b7db680 CR3: 000000000c776000 CR4: 0000000000350ee0 [ 286.236996][ C1] Call Trace: [ 286.237000][ C1] [ 286.237003][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 286.237025][ C1] ? __lock_acquire+0x5ee/0x5de0 [ 286.237042][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.237060][ C1] ? nmi_handle+0x145/0x400 [ 286.237076][ C1] ? irqentry_nmi_enter+0x7f/0x90 [ 286.237092][ C1] ? __lock_acquire+0x5ee/0x5de0 [ 286.237108][ C1] ? default_do_nmi+0x69/0x160 [ 286.237121][ C1] ? exc_nmi+0x171/0x1e0 [ 286.237137][ C1] ? end_repeat_nmi+0x16/0x31 [ 286.237154][ C1] ? __lock_acquire+0x5ee/0x5de0 [ 286.237170][ C1] ? __lock_acquire+0x5ee/0x5de0 [ 286.237186][ C1] ? __lock_acquire+0x5ee/0x5de0 [ 286.237202][ C1] [ 286.237205][ C1] [ 286.237211][ C1] ? inat_get_opcode_attribute+0xc/0x50 [ 286.237231][ C1] ? insn_get_prefixes+0x67/0x1120 [ 286.237243][ C1] ? kmem_cache_alloc_node+0xda/0x3f0 [ 286.237257][ C1] ? inat_get_opcode_attribute+0xc/0x50 [ 286.237277][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.237294][ C1] ? inat_get_escape_attribute+0x149/0x1b0 [ 286.237316][ C1] lock_acquire+0x1ae/0x510 [ 286.237332][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 286.237352][ C1] ? lock_sync+0x190/0x190 [ 286.237369][ C1] ? preempt_count_sub+0x150/0x150 [ 286.237388][ C1] ? arch_jump_label_transform_queue+0xa3/0x100 [ 286.237408][ C1] __mutex_lock+0x181/0x1340 [ 286.237422][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 286.237441][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 286.237461][ C1] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.237476][ C1] ? bit_wait_timeout+0x160/0x160 [ 286.237493][ C1] ? kmem_cache_alloc_node+0xcb/0x3f0 [ 286.237509][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 286.237526][ C1] arch_jump_label_transform_queue+0x5b/0x100 [ 286.237546][ C1] __jump_label_update+0x125/0x420 [ 286.237563][ C1] jump_label_update+0x32e/0x410 [ 286.237579][ C1] static_key_disable_cpuslocked+0x154/0x1b0 [ 286.237596][ C1] static_key_disable+0x1a/0x20 [ 286.237611][ C1] toggle_allocation_gate+0x13f/0x250 [ 286.237622][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 286.237642][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 286.237654][ C1] ? preempt_schedule_common+0x45/0xc0 [ 286.237669][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 286.237689][ C1] process_one_work+0xaa2/0x16f0 [ 286.237707][ C1] ? lock_sync+0x190/0x190 [ 286.237722][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.237738][ C1] ? spin_bug+0x1d0/0x1d0 [ 286.237756][ C1] worker_thread+0x687/0x1110 [ 286.237774][ C1] ? __kthread_parkme+0x152/0x220 [ 286.237786][ C1] ? process_one_work+0x16f0/0x16f0 [ 286.237800][ C1] kthread+0x33a/0x430 [ 286.237812][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.237826][ C1] ret_from_fork+0x2c/0x70 [ 286.237840][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.237853][ C1] ret_from_fork_asm+0x11/0x20 [ 286.237870][ C1] RIP: 0000:0x0 [ 286.237883][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 286.237888][ C1] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 286.237899][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 286.237906][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.237913][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.237921][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 286.237928][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.237939][ C1] [ 286.237943][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.101 msecs [ 286.238893][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 286.720582][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc2-syzkaller #0 [ 286.728640][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.738683][ T27] Call Trace: [ 286.741949][ T27] [ 286.744866][ T27] dump_stack_lvl+0xd9/0x1b0 [ 286.749448][ T27] panic+0x6a4/0x750 [ 286.753339][ T27] ? panic_smp_self_stop+0xa0/0xa0 [ 286.758448][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.763649][ T27] ? preempt_schedule_thunk+0x1a/0x30 [ 286.769029][ T27] ? watchdog+0xce1/0x11b0 [ 286.773447][ T27] watchdog+0xcf2/0x11b0 [ 286.777687][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.783669][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.789645][ T27] kthread+0x33a/0x430 [ 286.793704][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.799344][ T27] ret_from_fork+0x2c/0x70 [ 286.803749][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.809373][ T27] ret_from_fork_asm+0x11/0x20 [ 286.814134][ T27] RIP: 0000:0x0 [ 286.817584][ T27] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 286.824929][ T27] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 286.833328][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 286.841288][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.849251][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.857210][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 286.865168][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.873132][ T27] [ 286.876805][ T27] Kernel Offset: disabled [ 286.881135][ T27] Rebooting in 86400 seconds..