program: mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d8960000101020301090220000101008032090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xc, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xc) (fail_nth: 12) [ 101.640355][ T44] Bluetooth: hci0: command tx timeout [ 101.657113][ T5330] vivid-000: unregistering video7 [ 101.669526][ T5330] vivid-000: unregistering video8 [ 101.690469][ T5330] vivid-000: unregistering vbi0 [ 101.726819][ T5330] vivid-000: unregistering vbi1 [ 101.754938][ T5330] vivid-000: unregistering swradio0 [ 101.790639][ T5330] vivid-000: unregistering radio0 [ 101.826420][ T5330] vivid-000: unregistering radio1 [ 101.875289][ T5330] vivid-000: unregistering video9 [ 101.883655][ T5330] vivid-000: unregistering video10 [ 101.895964][ T5330] vivid-000: unregistering v4l-touch0 [ 101.976684][ T5328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.008262][ T5330] vivid-001: unregistering video11 [ 102.025569][ T5330] vivid-001: unregistering video12 [ 102.044650][ T5330] vivid-001: unregistering vbi2 [ 102.076381][ T5330] vivid-001: unregistering vbi3 [ 102.123216][ T5330] vivid-001: unregistering swradio1 [ 102.159615][ T5328] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.173036][ T5330] vivid-001: unregistering radio2 [ 102.197318][ T5328] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 102.201328][ T5330] vivid-001: unregistering radio3 [ 102.208833][ T5328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.213068][ T5330] vivid-001: unregistering video13 [ 102.228337][ T5328] usb 5-1: Product: syz [ 102.231867][ T5330] vivid-001: unregistering video14 [ 102.239991][ T5328] usb 5-1: Manufacturer: syz [ 102.247903][ T5328] usb 5-1: SerialNumber: syz [ 102.250099][ T5330] vivid-001: unregistering v4l-touch1 [ 102.390459][ T5330] vivid-002: unregistering video15 [ 102.395610][ T5330] vivid-002: unregistering video16 [ 102.408065][ T5330] vivid-002: unregistering vbi4 [ 102.440676][ T5330] vivid-002: unregistering vbi5 [ 102.452133][ T5330] vivid-002: unregistering swradio2 [ 102.493059][ T5330] vivid-002: unregistering radio4 [ 102.528462][ T5330] vivid-002: unregistering radio5 [ 102.557270][ T5330] vivid-002: unregistering video17 [ 102.571560][ T5330] vivid-002: unregistering video18 [ 102.586376][ T5330] vivid-002: unregistering v4l-touch2 [ 102.739453][ T5328] hackrf 5-1:1.0: Board ID: 00 [ 102.742479][ T5330] vivid-003: unregistering video19 [ 102.745916][ T5328] hackrf 5-1:1.0: Firmware version: [ 102.755101][ T5330] vivid-003: unregistering video20 [ 102.775828][ T5330] vivid-003: unregistering vbi6 [ 102.800399][ T5328] hackrf 5-1:1.0: Registered as swradio0 [ 102.814000][ T5330] vivid-003: unregistering vbi7 [ 102.833097][ T5328] hackrf 5-1:1.0: Registered as swradio1 [ 102.850206][ T5328] hackrf 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 102.867858][ T5330] vivid-003: unregistering swradio3 [ 102.895897][ T5330] vivid-003: unregistering radio6 [ 102.916512][ T5330] vivid-003: unregistering radio7 [ 102.931140][ T5330] vivid-003: unregistering video21 [ 102.962918][ T5330] vivid-003: unregistering video22 [ 103.009460][ T5330] vivid-003: unregistering v4l-touch3 [ 103.061163][ T5337] FAULT_INJECTION: forcing a failure. [ 103.061163][ T5337] name failslab, interval 1, probability 0, space 0, times 1 [ 103.117799][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.117816][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.117822][ T5337] Call Trace: [ 103.117827][ T5337] [ 103.117832][ T5337] dump_stack_lvl+0xe8/0x150 [ 103.118109][ T5337] should_fail_ex+0x40c/0x560 [ 103.118184][ T5337] should_failslab+0xa8/0x100 [ 103.118199][ T5337] __kmalloc_noprof+0xfe/0x720 [ 103.118211][ T5337] ? __kmalloc_noprof+0x1ad/0x720 [ 103.118223][ T5337] ? usb_alloc_urb+0x46/0x150 [ 103.118235][ T5337] ? usb_alloc_urb+0x46/0x150 [ 103.118250][ T5337] usb_alloc_urb+0x46/0x150 [ 103.118264][ T5337] hackrf_start_streaming+0x722/0x1350 [ 103.118309][ T5337] ? __pfx_hackrf_urb_complete_out+0x10/0x10 [ 103.118318][ T5337] ? __pfx_hackrf_start_streaming+0x10/0x10 [ 103.118328][ T5337] vb2_start_streaming+0x11e/0x450 [ 103.118335][ T5337] ? __bitmap_weight+0xac/0x100 [ 103.118347][ T5337] vb2_core_streamon+0x2c0/0x4d0 [ 103.118355][ T5337] __video_do_ioctl+0x8af/0xc70 [ 103.118368][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.118384][ T5337] video_usercopy+0x860/0x1430 [ 103.118404][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.118416][ T5337] ? __pfx_video_usercopy+0x10/0x10 [ 103.118435][ T5337] ? __fget_files+0x2a/0x420 [ 103.118450][ T5337] ? __fget_files+0x2a/0x420 [ 103.118461][ T5337] ? __fget_files+0x3a2/0x420 [ 103.118475][ T5337] v4l2_ioctl+0x18d/0x1e0 [ 103.118483][ T5337] ? __pfx_v4l2_ioctl+0x10/0x10 [ 103.118490][ T5337] __se_sys_ioctl+0xfc/0x170 [ 103.118501][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.118509][ T5337] do_syscall_64+0x174/0x580 [ 103.118516][ T5337] ? trace_irq_disable+0x3b/0x140 [ 103.118525][ T5337] ? clear_bhb_loop+0x40/0x90 [ 103.118533][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.118541][ T5337] RIP: 0033:0x7f1b1359de99 [ 103.118549][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.118555][ T5337] RSP: 002b:00007f1b1450bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.118563][ T5337] RAX: ffffffffffffffda RBX: 00007f1b13826180 RCX: 00007f1b1359de99 [ 103.118572][ T5337] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000005 [ 103.118577][ T5337] RBP: 00007f1b1450c050 R08: 0000000000000000 R09: 0000000000000000 [ 103.118581][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.118585][ T5337] R13: 00007f1b13826218 R14: 00007f1b13826180 R15: 00007fffe6212058 [ 103.118600][ T5337] [ 103.229570][ T5337] ================================================================== [ 103.233029][ T5337] BUG: KASAN: slab-use-after-free in usb_free_urb+0x24/0x120 [ 103.236174][ T5337] Write of size 4 at addr ffff88801d3b6800 by task syz.0.0/5337 [ 103.239417][ T5337] [ 103.240464][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.240480][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.240487][ T5337] Call Trace: [ 103.240495][ T5337] [ 103.240501][ T5337] dump_stack_lvl+0xe8/0x150 [ 103.240524][ T5337] print_address_description+0x55/0x1e0 [ 103.240541][ T5337] ? usb_free_urb+0x24/0x120 [ 103.240554][ T5337] print_report+0x58/0x70 [ 103.240568][ T5337] kasan_report+0x117/0x150 [ 103.240584][ T5337] ? usb_free_urb+0x24/0x120 [ 103.240598][ T5337] kasan_check_range+0x264/0x2c0 [ 103.240614][ T5337] usb_free_urb+0x24/0x120 [ 103.240626][ T5337] hackrf_free_urbs+0x22b/0x3b0 [ 103.240643][ T5337] hackrf_start_streaming+0xe12/0x1350 [ 103.240659][ T5337] ? __pfx_hackrf_urb_complete_out+0x10/0x10 [ 103.240674][ T5337] ? __pfx_hackrf_start_streaming+0x10/0x10 [ 103.240693][ T5337] vb2_start_streaming+0x11e/0x450 [ 103.240705][ T5337] ? __bitmap_weight+0xac/0x100 [ 103.240722][ T5337] vb2_core_streamon+0x2c0/0x4d0 [ 103.240735][ T5337] __video_do_ioctl+0x8af/0xc70 [ 103.240750][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.240794][ T5337] video_usercopy+0x860/0x1430 [ 103.240807][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.240818][ T5337] ? __pfx_video_usercopy+0x10/0x10 [ 103.240830][ T5337] ? __fget_files+0x2a/0x420 [ 103.240851][ T5337] ? __fget_files+0x2a/0x420 [ 103.240861][ T5337] ? __fget_files+0x3a2/0x420 [ 103.240873][ T5337] v4l2_ioctl+0x18d/0x1e0 [ 103.240884][ T5337] ? __pfx_v4l2_ioctl+0x10/0x10 [ 103.240895][ T5337] __se_sys_ioctl+0xfc/0x170 [ 103.240910][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.240921][ T5337] do_syscall_64+0x174/0x580 [ 103.240934][ T5337] ? trace_irq_disable+0x3b/0x140 [ 103.240948][ T5337] ? clear_bhb_loop+0x40/0x90 [ 103.240960][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.240970][ T5337] RIP: 0033:0x7f1b1359de99 [ 103.240982][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.240991][ T5337] RSP: 002b:00007f1b1450bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.241004][ T5337] RAX: ffffffffffffffda RBX: 00007f1b13826180 RCX: 00007f1b1359de99 [ 103.241012][ T5337] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000005 [ 103.241019][ T5337] RBP: 00007f1b1450c050 R08: 0000000000000000 R09: 0000000000000000 [ 103.241026][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.241033][ T5337] R13: 00007f1b13826218 R14: 00007f1b13826180 R15: 00007fffe6212058 [ 103.241045][ T5337] [ 103.241049][ T5337] [ 103.345013][ T5337] Allocated by task 5337: [ 103.346726][ T5337] kasan_save_track+0x3e/0x80 [ 103.348653][ T5337] __kasan_kmalloc+0x93/0xb0 [ 103.350562][ T5337] __kmalloc_noprof+0x375/0x720 [ 103.352553][ T5337] usb_alloc_urb+0x46/0x150 [ 103.354534][ T5337] hackrf_start_streaming+0x722/0x1350 [ 103.357240][ T5337] vb2_start_streaming+0x11e/0x450 [ 103.359303][ T5337] vb2_core_streamon+0x2c0/0x4d0 [ 103.361492][ T5337] __video_do_ioctl+0x8af/0xc70 [ 103.363585][ T5337] video_usercopy+0x860/0x1430 [ 103.365467][ T5337] v4l2_ioctl+0x18d/0x1e0 [ 103.367293][ T5337] __se_sys_ioctl+0xfc/0x170 [ 103.369279][ T5337] do_syscall_64+0x174/0x580 [ 103.371176][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.373646][ T5337] [ 103.374645][ T5337] Freed by task 5337: [ 103.376401][ T5337] kasan_save_track+0x3e/0x80 [ 103.378560][ T5337] kasan_save_free_info+0x40/0x50 [ 103.380689][ T5337] __kasan_slab_free+0x5c/0x80 [ 103.382724][ T5337] kfree+0x1c5/0x640 [ 103.384340][ T5337] hackrf_start_streaming+0xa55/0x1350 [ 103.386628][ T5337] vb2_start_streaming+0x11e/0x450 [ 103.388617][ T5337] vb2_core_streamon+0x2c0/0x4d0 [ 103.390563][ T5337] __video_do_ioctl+0x8af/0xc70 [ 103.392595][ T5337] video_usercopy+0x860/0x1430 [ 103.394566][ T5337] v4l2_ioctl+0x18d/0x1e0 [ 103.396334][ T5337] __se_sys_ioctl+0xfc/0x170 [ 103.398165][ T5337] do_syscall_64+0x174/0x580 [ 103.400048][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.402526][ T5337] [ 103.403552][ T5337] The buggy address belongs to the object at ffff88801d3b6800 [ 103.403552][ T5337] which belongs to the cache kmalloc-192 of size 192 [ 103.409034][ T5337] The buggy address is located 0 bytes inside of [ 103.409034][ T5337] freed 192-byte region [ffff88801d3b6800, ffff88801d3b68c0) [ 103.414326][ T5337] [ 103.415353][ T5337] The buggy address belongs to the physical page: [ 103.418227][ T5337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d3b6 [ 103.421697][ T5337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.424235][ T5337] page_type: f5(slab) [ 103.425652][ T5337] raw: 00fff00000000000 ffff88801b0413c0 dead000000000100 dead000000000122 [ 103.428721][ T5337] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 103.432039][ T5337] page dumped because: kasan: bad access detected [ 103.434669][ T5337] page_owner tracks the page as allocated [ 103.436983][ T5337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 12217348821, free_ts 11554810146 [ 103.444007][ T5337] post_alloc_hook+0x1f9/0x250 [ 103.445863][ T5337] get_page_from_freelist+0x21fa/0x2270 [ 103.448047][ T5337] __alloc_pages_slowpath+0x383/0xcc0 [ 103.450151][ T5337] __alloc_frozen_pages_noprof+0x31f/0x380 [ 103.452481][ T5337] allocate_slab+0x79/0x5e0 [ 103.454364][ T5337] ___slab_alloc+0x16a/0x950 [ 103.456253][ T5337] __kvmalloc_node_noprof+0x341/0x860 [ 103.458391][ T5337] sbitmap_init_node+0x2bc/0x630 [ 103.460644][ T5337] blk_mq_alloc_and_init_hctx+0x4f3/0xc50 [ 103.463573][ T5337] __blk_mq_realloc_hw_ctxs+0x2b2/0x660 [ 103.465874][ T5337] blk_mq_init_allocated_queue+0x357/0x13c0 [ 103.468390][ T5337] __blk_mq_alloc_disk+0x1d2/0x390 [ 103.470542][ T5337] nbd_dev_add+0x494/0xb60 [ 103.472307][ T5337] nbd_init+0x15f/0x1e0 [ 103.474132][ T5337] do_one_initcall+0x250/0x870 [ 103.476048][ T5337] do_initcall_level+0x10a/0x1a0 [ 103.478048][ T5337] page last free pid 41 tgid 41 stack trace: [ 103.480419][ T5337] __free_frozen_pages+0xc1e/0xd10 [ 103.482599][ T5337] __slab_free+0x274/0x2c0 [ 103.484457][ T5337] qlist_free_all+0x99/0x100 [ 103.486365][ T5337] kasan_quarantine_reduce+0x148/0x160 [ 103.488597][ T5337] __kasan_slab_alloc+0x22/0x80 [ 103.490726][ T5337] kmem_cache_alloc_node_noprof+0x355/0x610 [ 103.493341][ T5337] dup_task_struct+0x52/0x8e0 [ 103.495290][ T5337] copy_process+0x820/0x4390 [ 103.497258][ T5337] kernel_clone+0x2d7/0x940 [ 103.499688][ T5337] user_mode_thread+0x110/0x180 [ 103.502092][ T5337] call_usermodehelper_exec_work+0x5c/0x230 [ 103.504553][ T5337] process_scheduled_works+0xa8e/0x14e0 [ 103.506821][ T5337] worker_thread+0xa47/0xfb0 [ 103.508790][ T5337] kthread+0x388/0x470 [ 103.510415][ T5337] ret_from_fork+0x514/0xb70 [ 103.512280][ T5337] ret_from_fork_asm+0x1a/0x30 [ 103.514372][ T5337] [ 103.515453][ T5337] Memory state around the buggy address: [ 103.517758][ T5337] ffff88801d3b6700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.521002][ T5337] ffff88801d3b6780: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.524531][ T5337] >ffff88801d3b6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.527846][ T5337] ^ [ 103.529535][ T5337] ffff88801d3b6880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 103.532736][ T5337] ffff88801d3b6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.535959][ T5337] ================================================================== [ 103.601241][ T5337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.604339][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.607931][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.611936][ T5337] Call Trace: [ 103.613265][ T5337] [ 103.614379][ T5337] vpanic+0x56c/0xa60 [ 103.615941][ T5337] ? __pfx_vpanic+0x10/0x10 [ 103.617840][ T5337] ? __pfx___schedule+0x10/0x10 [ 103.619888][ T5337] panic+0xc5/0xd0 [ 103.621512][ T5337] ? __pfx_panic+0x10/0x10 [ 103.623348][ T5337] ? preempt_schedule_common+0x82/0xd0 [ 103.625628][ T5337] ? usb_free_urb+0x24/0x120 [ 103.627587][ T5337] check_panic_on_warn+0x89/0xb0 [ 103.629764][ T5337] ? usb_free_urb+0x24/0x120 [ 103.631595][ T5337] end_report+0x73/0x170 [ 103.633484][ T5337] ? usb_free_urb+0x24/0x120 [ 103.635296][ T5337] kasan_report+0x128/0x150 [ 103.636954][ T5337] ? usb_free_urb+0x24/0x120 [ 103.638856][ T5337] kasan_check_range+0x264/0x2c0 [ 103.641018][ T5337] usb_free_urb+0x24/0x120 [ 103.642865][ T5337] hackrf_free_urbs+0x22b/0x3b0 [ 103.644825][ T5337] hackrf_start_streaming+0xe12/0x1350 [ 103.646947][ T5337] ? __pfx_hackrf_urb_complete_out+0x10/0x10 [ 103.649373][ T5337] ? __pfx_hackrf_start_streaming+0x10/0x10 [ 103.651915][ T5337] vb2_start_streaming+0x11e/0x450 [ 103.654003][ T5337] ? __bitmap_weight+0xac/0x100 [ 103.655877][ T5337] vb2_core_streamon+0x2c0/0x4d0 [ 103.658112][ T5337] __video_do_ioctl+0x8af/0xc70 [ 103.660232][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.662372][ T5337] video_usercopy+0x860/0x1430 [ 103.664359][ T5337] ? __pfx___video_do_ioctl+0x10/0x10 [ 103.666519][ T5337] ? __pfx_video_usercopy+0x10/0x10 [ 103.668648][ T5337] ? __fget_files+0x2a/0x420 [ 103.670576][ T5337] ? __fget_files+0x2a/0x420 [ 103.672584][ T5337] ? __fget_files+0x3a2/0x420 [ 103.674385][ T5337] v4l2_ioctl+0x18d/0x1e0 [ 103.676235][ T5337] ? __pfx_v4l2_ioctl+0x10/0x10 [ 103.678292][ T5337] __se_sys_ioctl+0xfc/0x170 [ 103.680183][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.682818][ T5337] do_syscall_64+0x174/0x580 [ 103.684815][ T5337] ? trace_irq_disable+0x3b/0x140 [ 103.686965][ T5337] ? clear_bhb_loop+0x40/0x90 [ 103.688987][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.691463][ T5337] RIP: 0033:0x7f1b1359de99 [ 103.693368][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.701136][ T5337] RSP: 002b:00007f1b1450bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.704625][ T5337] RAX: ffffffffffffffda RBX: 00007f1b13826180 RCX: 00007f1b1359de99 [ 103.708017][ T5337] RDX: 0000200000000600 RSI: 0000000040045612 RDI: 0000000000000005 [ 103.711276][ T5337] RBP: 00007f1b1450c050 R08: 0000000000000000 R09: 0000000000000000 [ 103.714531][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.717801][ T5337] R13: 00007f1b13826218 R14: 00007f1b13826180 R15: 00007fffe6212058 [ 103.721110][ T5337] [ 103.722786][ T5337] Kernel Offset: disabled [ 103.724557][ T5337] Rebooting in 86400 seconds..