./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1258329065 <...> Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. execve("./syz-executor1258329065", ["./syz-executor1258329065"], 0x7ffc3b0bdbf0 /* 10 vars */) = 0 brk(NULL) = 0x555555cd2000 brk(0x555555cd2c40) = 0x555555cd2c40 arch_prctl(ARCH_SET_FS, 0x555555cd2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1258329065", 4096) = 28 brk(0x555555cf3c40) = 0x555555cf3c40 brk(0x555555cf4000) = 0x555555cf4000 mprotect(0x7f6899075000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x555555cd25d0) = 5061 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5061] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = 0 [pid 5061] exit_group(0) = ? [pid 5061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd25d0) = 5063 ./strace-static-x86_64: Process 5063 attached [ 60.148707][ T26] audit: type=1400 audit(1671445521.812:75): avc: denied { execmem } for pid=5060 comm="syz-executor125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.174100][ T26] audit: type=1400 audit(1671445521.842:76): avc: denied { create } for pid=5061 comm="syz-executor125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5063] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = 0 [pid 5063] exit_group(0) = ? [pid 5063] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5063, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5065 attached , child_tidptr=0x555555cd25d0) = 5065 [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] setpgid(0, 0) = 0 [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] write(3, "1000", 4) = 4 [pid 5065] close(3) = 0 [pid 5065] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5065] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = -1 EADDRINUSE (Address already in use) [pid 5065] exit_group(0) = ? [pid 5065] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd25d0) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5066] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = -1 EADDRINUSE (Address already in use) [pid 5066] exit_group(0) = ? [pid 5066] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd25d0) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5067] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = -1 EADDRINUSE (Address already in use) [pid 5067] exit_group(0) = ? [pid 5067] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd25d0) = 5068 ./strace-static-x86_64: Process 5068 attached [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [pid 5068] bind(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(20004), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}}}, 36) = -1 EADDRINUSE (Address already in use) [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cd25d0) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [ 60.194114][ T26] audit: type=1400 audit(1671445521.842:77): avc: denied { bind } for pid=5061 comm="syz-executor125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [pid 5069] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3 [ 60.259680][ T5069] ================================================================== [ 60.267775][ T5069] BUG: KASAN: use-after-free in rxrpc_lookup_local+0xdcf/0xfb0 [ 60.275339][ T5069] Read of size 2 at addr ffff888027108a1c by task syz-executor125/5069 [ 60.283557][ T5069] [ 60.285867][ T5069] CPU: 1 PID: 5069 Comm: syz-executor125 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 60.295911][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.305962][ T5069] Call Trace: [ 60.309241][ T5069] [ 60.312158][ T5069] dump_stack_lvl+0xd1/0x138 [ 60.316746][ T5069] print_report+0x15e/0x461 [ 60.321240][ T5069] ? __phys_addr+0xc8/0x140 [ 60.325737][ T5069] ? rxrpc_lookup_local+0xdcf/0xfb0 [ 60.330925][ T5069] kasan_report+0xbf/0x1f0 [ 60.335336][ T5069] ? rxrpc_lookup_local+0xdcf/0xfb0 [ 60.340532][ T5069] rxrpc_lookup_local+0xdcf/0xfb0 [ 60.345561][ T5069] rxrpc_bind+0x35e/0x5c0 [ 60.349880][ T5069] __sys_bind+0x1ed/0x260 [ 60.354206][ T5069] ? __ia32_sys_socketpair+0x100/0x100 [ 60.359670][ T5069] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.364878][ T5069] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.370514][ T5069] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.375722][ T5069] __x64_sys_bind+0x73/0xb0 [ 60.380226][ T5069] do_syscall_64+0x39/0xb0 [ 60.384640][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.390539][ T5069] RIP: 0033:0x7f6899008d59 [ 60.394948][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.414553][ T5069] RSP: 002b:00007ffc72e65428 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 60.422963][ T5069] RAX: ffffffffffffffda RBX: 000000000000eb32 RCX: 00007f6899008d59 [ 60.430945][ T5069] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000003 [ 60.438911][ T5069] RBP: 0000000000000000 R08: 00007ffc72e655c8 R09: 00007ffc72e655c8 [ 60.446879][ T5069] R10: 00007ffc72e64ea0 R11: 0000000000000246 R12: 00007ffc72e6543c [ 60.454846][ T5069] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 60.462816][ T5069] [ 60.465830][ T5069] [ 60.468145][ T5069] Allocated by task 5063: [ 60.472462][ T5069] kasan_save_stack+0x22/0x40 [ 60.477148][ T5069] kasan_set_track+0x25/0x30 [ 60.481741][ T5069] __kasan_kmalloc+0xa3/0xb0 [ 60.486331][ T5069] rxrpc_lookup_local+0x4d9/0xfb0 [ 60.491351][ T5069] rxrpc_bind+0x35e/0x5c0 [ 60.495681][ T5069] __sys_bind+0x1ed/0x260 [ 60.500012][ T5069] __x64_sys_bind+0x73/0xb0 [ 60.504517][ T5069] do_syscall_64+0x39/0xb0 [ 60.509396][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.515323][ T5069] [ 60.517649][ T5069] Freed by task 5055: [ 60.521625][ T5069] kasan_save_stack+0x22/0x40 [ 60.526309][ T5069] kasan_set_track+0x25/0x30 [ 60.530908][ T5069] kasan_save_free_info+0x2b/0x40 [ 60.535939][ T5069] ____kasan_slab_free+0x13b/0x1a0 [ 60.541052][ T5069] __kmem_cache_free+0xcd/0x3b0 [ 60.545903][ T5069] rcu_core+0x81f/0x1980 [ 60.550149][ T5069] __do_softirq+0x1fb/0xadc [ 60.554657][ T5069] [ 60.556971][ T5069] Last potentially related work creation: [ 60.562674][ T5069] kasan_save_stack+0x22/0x40 [ 60.567364][ T5069] __kasan_record_aux_stack+0x7b/0x90 [ 60.572738][ T5069] __call_rcu_common.constprop.0+0x99/0x820 [ 60.578631][ T5069] rxrpc_put_local.part.0+0x128/0x170 [ 60.583998][ T5069] rxrpc_put_local+0x25/0x30 [ 60.588588][ T5069] rxrpc_release+0x237/0x550 [ 60.593178][ T5069] __sock_release+0xcd/0x280 [ 60.597767][ T5069] sock_close+0x1c/0x20 [ 60.601922][ T5069] __fput+0x27c/0xa90 [ 60.605911][ T5069] task_work_run+0x16f/0x270 [ 60.610503][ T5069] do_exit+0xaa8/0x2950 [ 60.614661][ T5069] do_group_exit+0xd4/0x2a0 [ 60.619168][ T5069] __x64_sys_exit_group+0x3e/0x50 [ 60.624196][ T5069] do_syscall_64+0x39/0xb0 [ 60.628615][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.634510][ T5069] [ 60.636837][ T5069] The buggy address belongs to the object at ffff888027108800 [ 60.636837][ T5069] which belongs to the cache kmalloc-1k of size 1024 [ 60.650903][ T5069] The buggy address is located 540 bytes inside of [ 60.650903][ T5069] 1024-byte region [ffff888027108800, ffff888027108c00) [ 60.664273][ T5069] [ 60.666592][ T5069] The buggy address belongs to the physical page: [ 60.672994][ T5069] page:ffffea00009c4200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27108 [ 60.683150][ T5069] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 60.690712][ T5069] raw: 00fff00000000200 ffff888012040700 ffffea000087c310 ffffea0000a8dc10 [ 60.699301][ T5069] raw: 0000000000000000 ffff888027108000 0000000100000002 0000000000000000 [ 60.707878][ T5069] page dumped because: kasan: bad access detected [ 60.714281][ T5069] page_owner tracks the page as allocated [ 60.720022][ T5069] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 5063, tgid 5063 (syz-executor125), ts 60210339987, free_ts 57623248343 [ 60.740347][ T5069] get_page_from_freelist+0x119c/0x2ce0 [ 60.745898][ T5069] __alloc_pages+0x1cb/0x5b0 [ 60.750484][ T5069] cache_grow_begin+0x94/0x390 [ 60.755248][ T5069] cache_alloc_refill+0x27f/0x380 [ 60.760272][ T5069] __kmem_cache_alloc_node+0x44f/0x510 [ 60.765746][ T5069] kmalloc_trace+0x26/0x60 [ 60.770186][ T5069] rxrpc_lookup_local+0x4d9/0xfb0 [ 60.775214][ T5069] rxrpc_bind+0x35e/0x5c0 [ 60.779546][ T5069] __sys_bind+0x1ed/0x260 [ 60.783894][ T5069] __x64_sys_bind+0x73/0xb0 [ 60.788409][ T5069] do_syscall_64+0x39/0xb0 [ 60.792832][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.798731][ T5069] page last free stack trace: [ 60.803393][ T5069] free_pcp_prepare+0x65c/0xc00 [ 60.808249][ T5069] free_unref_page+0x1d/0x490 [ 60.812917][ T5069] slabs_destroy+0x85/0xc0 [ 60.817335][ T5069] drain_array+0x93/0xa0 [ 60.821575][ T5069] cache_reap+0x14e/0x2e0 [ 60.825903][ T5069] process_one_work+0x9bf/0x1710 [ 60.830849][ T5069] worker_thread+0x669/0x1090 [ 60.835541][ T5069] kthread+0x2e8/0x3a0 [ 60.839615][ T5069] ret_from_fork+0x1f/0x30 [ 60.844040][ T5069] [ 60.846359][ T5069] Memory state around the buggy address: [ 60.851990][ T5069] ffff888027108900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.860063][ T5069] ffff888027108980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.868397][ T5069] >ffff888027108a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.876454][ T5069] ^ [ 60.881295][ T5069] ffff888027108a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.889355][ T5069] ffff888027108b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.897405][ T5069] ================================================================== [ 60.905639][ T5069] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.912852][ T5069] CPU: 0 PID: 5069 Comm: syz-executor125 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 60.922928][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.932980][ T5069] Call Trace: [ 60.936253][ T5069] [ 60.939179][ T5069] dump_stack_lvl+0xd1/0x138 [ 60.943781][ T5069] panic+0x2cc/0x626 [ 60.947681][ T5069] ? panic_print_sys_info.part.0+0x110/0x110 [ 60.953661][ T5069] ? preempt_schedule_thunk+0x1a/0x20 [ 60.959051][ T5069] ? preempt_schedule_common+0x59/0xc0 [ 60.964509][ T5069] check_panic_on_warn.cold+0x19/0x35 [ 60.969968][ T5069] end_report.part.0+0x36/0x73 [ 60.974732][ T5069] ? rxrpc_lookup_local+0xdcf/0xfb0 [ 60.979925][ T5069] kasan_report.cold+0xa/0xf [ 60.984517][ T5069] ? rxrpc_lookup_local+0xdcf/0xfb0 [ 60.989714][ T5069] rxrpc_lookup_local+0xdcf/0xfb0 [ 60.994739][ T5069] rxrpc_bind+0x35e/0x5c0 [ 60.999069][ T5069] __sys_bind+0x1ed/0x260 [ 61.003399][ T5069] ? __ia32_sys_socketpair+0x100/0x100 [ 61.008861][ T5069] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.014067][ T5069] ? lockdep_hardirqs_on+0x7d/0x100 [ 61.019270][ T5069] ? _raw_spin_unlock_irq+0x2e/0x50 [ 61.024473][ T5069] __x64_sys_bind+0x73/0xb0 [ 61.028979][ T5069] do_syscall_64+0x39/0xb0 [ 61.033392][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.039292][ T5069] RIP: 0033:0x7f6899008d59 [ 61.043700][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.063303][ T5069] RSP: 002b:00007ffc72e65428 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 61.071714][ T5069] RAX: ffffffffffffffda RBX: 000000000000eb32 RCX: 00007f6899008d59 [ 61.079682][ T5069] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000003 [ 61.087651][ T5069] RBP: 0000000000000000 R08: 00007ffc72e655c8 R09: 00007ffc72e655c8 [ 61.095617][ T5069] R10: 00007ffc72e64ea0 R11: 0000000000000246 R12: 00007ffc72e6543c [ 61.103589][ T5069] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 61.111557][ T5069] [ 61.114724][ T5069] Kernel Offset: disabled [ 61.119042][ T5069] Rebooting in 86400 seconds..