program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5f4d736bb767b568fc581ff8e99c27d82508d89e9ae2f3cfade00568ea9dc4554dfcba7939192db87f04e87274894451d39177e8f5f802da73188537ecb3fa8562c91db4555823cd9400b329888f25675b5d0456289c4abacc0064180e88dd59b7cf11156ef401d4e93e9bd3ed64cceacca06494e8513dc3c8526c364bac4eae8c1f4742eba009e756f10178a7a375ac6688a5e68bd75e66bac279dd8b99aa27ed4faeb1cb998440ee5ba749c6ba78992c5d277481c5450f8b79f7365c3b530d547e07f1e8b12c9e07478ff45f0b4fba5769a21678282764df0d93037969300", @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX], 0x1, 0x19c, &(0x7f0000000000)="$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") r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000540)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000400)={0x2}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x841, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000a40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x4, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x17, 0x2, 0x7f, 0x5}, {0x0, 0x8, 0x17, 0x109}, {0xffff, 0xff, 0x6}]}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x66}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0x2, 0x20000000}, [@RTA_FLOW={0x8, 0xb, 0x7ffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000240)={'geneve1\x00', 0x5, 0xfffffff9}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r10, &(0x7f00000000c0)={0x18}, 0xfffffdef) [ 85.828341][ T5297] Bluetooth: hci0: command tx timeout [ 85.959743][ T5318] loop0: detected capacity change from 0 to 1024 [ 85.998231][ T5318] ======================================================= [ 85.998231][ T5318] WARNING: The mand mount option has been deprecated and [ 85.998231][ T5318] and is ignored by this kernel. Remove the mand [ 85.998231][ T5318] option from the mount to silence this warning. [ 85.998231][ T5318] ======================================================= [ 86.055593][ T5318] EXT4-fs: Ignoring removed oldalloc option [ 86.058308][ T5318] EXT4-fs: Ignoring removed orlov option [ 86.100117][ T5318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.143593][ T5318] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.0: ES cache extent failed: add [0,32764,18446744073709551615,0x8] conflict with existing [0,1,113,0x2] [ 86.143593][ T5318] [ 86.155285][ T5318] ================================================================== [ 86.158555][ T5318] BUG: KASAN: use-after-free in ext4_ext_insert_extent+0x26da/0x4b50 [ 86.162226][ T5318] Read of size 111168 at addr ffff88805561b40c by task syz.0.0/5318 [ 86.165819][ T5318] [ 86.166948][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.166964][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.166971][ T5318] Call Trace: [ 86.166981][ T5318] [ 86.167032][ T5318] dump_stack_lvl+0xe8/0x150 [ 86.167057][ T5318] print_report+0xba/0x230 [ 86.167074][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.167142][ T5318] kasan_report+0x117/0x150 [ 86.167213][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.167228][ T5318] kasan_check_range+0x264/0x2c0 [ 86.167239][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.167250][ T5318] __asan_memmove+0x29/0x70 [ 86.167260][ T5318] ext4_ext_insert_extent+0x26da/0x4b50 [ 86.167277][ T5318] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 86.167289][ T5318] ext4_ext_map_blocks+0x1696/0x58b0 [ 86.167303][ T5318] ? lockdep_unlock+0x5d/0xd0 [ 86.167347][ T5318] ? __lock_acquire+0x146e/0x2cf0 [ 86.167363][ T5318] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 86.167380][ T5318] ext4_map_create_blocks+0x11d/0x540 [ 86.167396][ T5318] ext4_map_blocks+0x7cd/0x11d0 [ 86.167413][ T5318] ? __pfx_ext4_map_blocks+0x10/0x10 [ 86.167427][ T5318] ? __bfs+0x153/0x290 [ 86.167440][ T5318] ? __pfx_hlock_conflict+0x10/0x10 [ 86.167456][ T5318] _ext4_get_block+0x1e3/0x470 [ 86.167471][ T5318] ? __pfx__ext4_get_block+0x10/0x10 [ 86.167485][ T5318] ? filemap_get_entry+0xca/0x320 [ 86.167502][ T5318] ext4_get_block_unwritten+0x2e/0x100 [ 86.167517][ T5318] ext4_block_write_begin+0xb14/0x1950 [ 86.167535][ T5318] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 86.167550][ T5318] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 86.167574][ T5318] ? folio_mapping+0x16f/0x1f0 [ 86.167589][ T5318] ? ext4_inode_journal_mode+0x193/0x470 [ 86.167609][ T5318] ext4_write_begin+0xb40/0x18c0 [ 86.167628][ T5318] ? __pfx_ext4_write_begin+0x10/0x10 [ 86.167639][ T5318] ? __ext4_handle_dirty_metadata+0x2fd/0x810 [ 86.167652][ T5318] ext4_da_write_begin+0x355/0xd80 [ 86.167668][ T5318] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 86.167683][ T5318] generic_perform_write+0x2e2/0x8f0 [ 86.167697][ T5318] ? __pfx_generic_perform_write+0x10/0x10 [ 86.167708][ T5318] ? file_update_time_flags+0x400/0x4a0 [ 86.167726][ T5318] ? ext4_write_checks+0x24b/0x2c0 [ 86.167741][ T5318] ext4_buffered_write_iter+0xce/0x3a0 [ 86.167757][ T5318] ext4_file_write_iter+0x298/0x1bf0 [ 86.167774][ T5318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.167793][ T5318] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 86.167811][ T5318] vfs_write+0x61d/0xb90 [ 86.167828][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 86.167845][ T5318] ? __fget_files+0x2a/0x420 [ 86.167860][ T5318] ksys_write+0x150/0x270 [ 86.167875][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 86.167892][ T5318] do_syscall_64+0x14d/0xf80 [ 86.168073][ T5318] ? trace_irq_disable+0x3b/0x150 [ 86.168090][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.168101][ T5318] ? clear_bhb_loop+0x40/0x90 [ 86.168113][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.168125][ T5318] RIP: 0033:0x7f864119c629 [ 86.168140][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.168151][ T5318] RSP: 002b:00007f863d5f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.168165][ T5318] RAX: ffffffffffffffda RBX: 00007f8641415fa0 RCX: 00007f864119c629 [ 86.168174][ T5318] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 000000000000000c [ 86.168182][ T5318] RBP: 00007f8641232b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.168189][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.168196][ T5318] R13: 00007f8641416038 R14: 00007f8641415fa0 R15: 00007ffd6b156c98 [ 86.168208][ T5318] [ 86.168212][ T5318] [ 86.333082][ T5318] The buggy address belongs to the physical page: [ 86.335580][ T5318] page: refcount:1 mapcount:1 mapping:0000000000000000 index:0x7ffffffee pfn:0x5561b [ 86.339650][ T5318] memcg:ffff88801c2e1a80 [ 86.341499][ T5318] anon flags: 0x4fff60000020828(uptodate|lru|owner_2|swapbacked|node=1|zone=1|lastcpupid=0x7ff) [ 86.346061][ T5318] raw: 04fff60000020828 ffffea0001558608 ffffea0001557648 ffff888012483dd1 [ 86.349619][ T5318] raw: 00000007ffffffee 0000000000000000 0000000100000000 ffff88801c2e1a80 [ 86.353666][ T5318] page dumped because: kasan: bad access detected [ 86.357102][ T5318] page_owner tracks the page as allocated [ 86.359514][ T5318] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5009, tgid 5009 (dhcpcd), ts 86040597857, free_ts 85976598156 [ 86.366814][ T5318] post_alloc_hook+0x231/0x280 [ 86.369073][ T5318] get_page_from_freelist+0x24dc/0x2580 [ 86.371598][ T5318] __alloc_frozen_pages_noprof+0x18d/0x380 [ 86.374177][ T5318] alloc_pages_mpol+0x232/0x4a0 [ 86.376367][ T5318] vma_alloc_folio_noprof+0xea/0x210 [ 86.378726][ T5318] do_wp_page+0x1204/0x5a00 [ 86.380698][ T5318] handle_mm_fault+0x1520/0x3310 [ 86.382844][ T5318] do_user_addr_fault+0xa73/0x1340 [ 86.385161][ T5318] exc_page_fault+0x6a/0xc0 [ 86.387130][ T5318] asm_exc_page_fault+0x26/0x30 [ 86.389109][ T5318] page last free pid 5321 tgid 5321 stack trace: [ 86.391738][ T5318] free_unref_folios+0xed5/0x16d0 [ 86.394084][ T5318] folios_put_refs+0x789/0x8d0 [ 86.396328][ T5318] free_pages_and_swap_cache+0x2e7/0x5b0 [ 86.398777][ T5318] tlb_flush_mmu+0x6d3/0xa30 [ 86.400846][ T5318] tlb_finish_mmu+0xf9/0x230 [ 86.402909][ T5318] exit_mmap+0x498/0xa10 [ 86.404811][ T5318] __mmput+0x118/0x430 [ 86.406641][ T5318] exit_mm+0x168/0x220 [ 86.408492][ T5318] do_exit+0x62e/0x2320 [ 86.410445][ T5318] do_group_exit+0x21b/0x2d0 [ 86.412560][ T5318] __x64_sys_exit_group+0x3f/0x40 [ 86.414834][ T5318] x64_sys_call+0x221a/0x2240 [ 86.416950][ T5318] do_syscall_64+0x14d/0xf80 [ 86.419005][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.421619][ T5318] [ 86.422740][ T5318] Memory state around the buggy address: [ 86.425228][ T5318] ffff888055625f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.428670][ T5318] ffff888055625f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.432616][ T5318] >ffff888055626000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.437021][ T5318] ^ [ 86.439265][ T5318] ffff888055626080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.443429][ T5318] ffff888055626100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.447224][ T5318] ================================================================== [ 86.471153][ T5318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.474368][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.478327][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.482683][ T5318] Call Trace: [ 86.484354][ T5318] [ 86.485657][ T5318] vpanic+0x56c/0xa60 [ 86.487466][ T5318] ? __pfx_vpanic+0x10/0x10 [ 86.489506][ T5318] panic+0xc5/0xd0 [ 86.491232][ T5318] ? __pfx_panic+0x10/0x10 [ 86.493242][ T5318] ? preempt_schedule_thunk+0x16/0x30 [ 86.495675][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.498099][ T5318] ? preempt_schedule_thunk+0x16/0x30 [ 86.500496][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.502991][ T5318] check_panic_on_warn+0x89/0xb0 [ 86.505062][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.507424][ T5318] end_report+0x73/0x180 [ 86.509115][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.511202][ T5318] kasan_report+0x128/0x150 [ 86.512864][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.514970][ T5318] kasan_check_range+0x264/0x2c0 [ 86.516813][ T5318] ? ext4_ext_insert_extent+0x26da/0x4b50 [ 86.519030][ T5318] __asan_memmove+0x29/0x70 [ 86.520900][ T5318] ext4_ext_insert_extent+0x26da/0x4b50 [ 86.523218][ T5318] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 86.525880][ T5318] ext4_ext_map_blocks+0x1696/0x58b0 [ 86.528339][ T5318] ? lockdep_unlock+0x5d/0xd0 [ 86.530430][ T5318] ? __lock_acquire+0x146e/0x2cf0 [ 86.532679][ T5318] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 86.535121][ T5318] ext4_map_create_blocks+0x11d/0x540 [ 86.537381][ T5318] ext4_map_blocks+0x7cd/0x11d0 [ 86.539567][ T5318] ? __pfx_ext4_map_blocks+0x10/0x10 [ 86.541894][ T5318] ? __bfs+0x153/0x290 [ 86.543746][ T5318] ? __pfx_hlock_conflict+0x10/0x10 [ 86.546212][ T5318] _ext4_get_block+0x1e3/0x470 [ 86.548175][ T5318] ? __pfx__ext4_get_block+0x10/0x10 [ 86.550512][ T5318] ? filemap_get_entry+0xca/0x320 [ 86.552633][ T5318] ext4_get_block_unwritten+0x2e/0x100 [ 86.555077][ T5318] ext4_block_write_begin+0xb14/0x1950 [ 86.557508][ T5318] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 86.560093][ T5318] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 86.562722][ T5318] ? folio_mapping+0x16f/0x1f0 [ 86.564954][ T5318] ? ext4_inode_journal_mode+0x193/0x470 [ 86.567388][ T5318] ext4_write_begin+0xb40/0x18c0 [ 86.569511][ T5318] ? __pfx_ext4_write_begin+0x10/0x10 [ 86.571832][ T5318] ? __ext4_handle_dirty_metadata+0x2fd/0x810 [ 86.574494][ T5318] ext4_da_write_begin+0x355/0xd80 [ 86.576801][ T5318] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 86.579442][ T5318] generic_perform_write+0x2e2/0x8f0 [ 86.581997][ T5318] ? __pfx_generic_perform_write+0x10/0x10 [ 86.584563][ T5318] ? file_update_time_flags+0x400/0x4a0 [ 86.587068][ T5318] ? ext4_write_checks+0x24b/0x2c0 [ 86.589363][ T5318] ext4_buffered_write_iter+0xce/0x3a0 [ 86.591710][ T5318] ext4_file_write_iter+0x298/0x1bf0 [ 86.594222][ T5318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.596830][ T5318] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 86.599257][ T5318] vfs_write+0x61d/0xb90 [ 86.601112][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 86.603244][ T5318] ? __fget_files+0x2a/0x420 [ 86.605203][ T5318] ksys_write+0x150/0x270 [ 86.607097][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 86.609214][ T5318] do_syscall_64+0x14d/0xf80 [ 86.611289][ T5318] ? trace_irq_disable+0x3b/0x150 [ 86.613788][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.616437][ T5318] ? clear_bhb_loop+0x40/0x90 [ 86.619026][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.621625][ T5318] RIP: 0033:0x7f864119c629 [ 86.623663][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.631867][ T5318] RSP: 002b:00007f863d5f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.635502][ T5318] RAX: ffffffffffffffda RBX: 00007f8641415fa0 RCX: 00007f864119c629 [ 86.638931][ T5318] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 000000000000000c [ 86.642545][ T5318] RBP: 00007f8641232b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.645991][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.649350][ T5318] R13: 00007f8641416038 R14: 00007f8641415fa0 R15: 00007ffd6b156c98 [ 86.652936][ T5318] [ 86.654629][ T5318] Kernel Offset: disabled [ 86.656593][ T5318] Rebooting in 86400 seconds..