program: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '+])]-'}, {0x20, 'eth'}, {0x20, '@/[#*)^-\xd0*:+--[%]/'}, {0x20, '{'}, {0x20, '}['}, {0x20, 'eth'}, {0x20, '}},\'!-^.'}, {0x20, '%[.@#@'}], 0xa, "f27bfa4a5d56eba7badabe9404e553e3aa3e5a6bb6993e08ae8ba0ce5491ac6329fb95b6f50dbf1e2c932769077019b4b0f00add658e4d9888e2b03a05e782416d5be93f53cccc95d7720bf47e98df079fe04a31ecb1956a5f7fa3117d5068885503c3e26390e7fda7e9ad9e65dbffbd23001d8acb69eabbab89a3954ae017d58004bf765ff52349dc2d3529abaf831cd2767652fe10139c3c"}, 0xda) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x8, 0x0, 0x0, 0x0}, {0x8, 0x2201, 0x0, 0x0}], 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97a9, 0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000680)={0x2, 0x0, 0x98, &(0x7f00000005c0)={0x3, 0x5, 0x7}}) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108cd, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040)) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x46, &(0x7f00000000c0)='vlan0\x00', 0x10) (async) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) (async) r8 = open(&(0x7f0000000200)='./file2\x00', 0x14100, 0x123) copy_file_range(r8, 0x0, r7, 0x0, 0x3df1, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000000}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x117af121f535ea95}, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000006c0)=""/244, &(0x7f00000007c0)=0xf4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001c3149df16ad712c01a7f30d2ef8b87d1c604b70a366243583cab20040499b1287899a87066ef97b8357ac32f40909100000000000000000000004cc649c1c99adf7046c46a03115a9186a541e71351bb1eff6c95e637898632f7109e3b3a2a4dec9652454bb9858366ab8940720db78d8ed20d603ada4e53a28314f355bb6ecf972c4008"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) unshare(0x2c030180) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) [ 154.987706][ T5283] Bluetooth: hci0: command tx timeout [ 155.491784][ T4699] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.643214][ T4699] usb 5-1: Using ep0 maxpacket: 8 [ 155.647318][ T4699] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 155.655122][ T4699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.686771][ T4699] pvrusb2: Hardware description: Terratec Grabster AV400 [ 155.690374][ T4699] pvrusb2: ********** [ 155.706944][ T4699] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.712548][ T4699] pvrusb2: Important functionality might not be entirely working. [ 155.716248][ T4699] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.721355][ T4699] pvrusb2: ********** [ 155.880182][ T2071] pvrusb2: Invalid write control endpoint [ 156.049195][ T2071] pvrusb2: Invalid write control endpoint [ 156.052625][ T2071] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.059743][ T2071] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.063987][ T2071] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.069649][ T2071] pvrusb2: Device being rendered inoperable [ 156.076941][ T2071] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 156.080899][ T2071] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 156.109446][ T2071] pvrusb2: Attached sub-driver cx25840 [ 156.113630][ T2071] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 156.123111][ T2071] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.245844][ T5320] loop0: detected capacity change from 0 to 32768 [ 156.260421][ T5320] ======================================================= [ 156.260421][ T5320] WARNING: The mand mount option has been deprecated and [ 156.260421][ T5320] and is ignored by this kernel. Remove the mand [ 156.260421][ T5320] option from the mount to silence this warning. [ 156.260421][ T5320] ======================================================= [ 156.381436][ T5330] ================================================================== [ 156.381466][ T5330] BUG: KASAN: use-after-free in diRead+0x975/0xbc0 [ 156.381552][ T5330] Read of size 4 at addr ffff8880340b0010 by task syz.0.0/5330 [ 156.381558][ T5330] [ 156.381564][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 156.381573][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.381587][ T5330] Call Trace: [ 156.381591][ T5330] [ 156.381595][ T5330] dump_stack_lvl+0xe8/0x150 [ 156.381606][ T5330] print_address_description+0x55/0x1e0 [ 156.381617][ T5330] ? diRead+0x975/0xbc0 [ 156.381623][ T5330] print_report+0x58/0x70 [ 156.381631][ T5330] kasan_report+0x117/0x150 [ 156.381639][ T5330] ? diRead+0x975/0xbc0 [ 156.381646][ T5330] diRead+0x975/0xbc0 [ 156.381653][ T5330] ? iget_locked+0x619/0x6a0 [ 156.381667][ T5330] jfs_iget+0x89/0x470 [ 156.381680][ T5330] jfs_lookup+0x220/0x420 [ 156.381694][ T5330] ? __pfx_jfs_lookup+0x10/0x10 [ 156.381714][ T5330] ? d_alloc_parallel+0x1535/0x16b0 [ 156.381732][ T5330] ? __d_lookup+0x66/0x790 [ 156.381741][ T5330] ? __pfx_d_alloc_parallel+0x10/0x10 [ 156.381751][ T5330] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 156.381759][ T5330] ? mode_strip_sgid+0xa1/0x1b0 [ 156.381777][ T5330] lookup_open+0x9e1/0x1a40 [ 156.381790][ T5330] path_openat+0x677/0x1d60 [ 156.381802][ T5330] do_file_open+0x23e/0x4a0 [ 156.381812][ T5330] ? __pfx_do_file_open+0x10/0x10 [ 156.381824][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 156.381860][ T5330] ? alloc_fd+0x651/0x6c0 [ 156.381869][ T5330] do_sys_openat2+0x115/0x200 [ 156.381877][ T5330] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.381886][ T5330] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.381893][ T5330] ? exc_page_fault+0x6a/0xc0 [ 156.381904][ T5330] ? do_user_addr_fault+0xc4c/0x1340 [ 156.381912][ T5330] __x64_sys_open+0x11e/0x150 [ 156.381920][ T5330] do_syscall_64+0x166/0x520 [ 156.381935][ T5330] ? trace_irq_disable+0x3b/0x140 [ 156.381946][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.381957][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 156.381970][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.381980][ T5330] RIP: 0033:0x7f51b079e159 [ 156.381987][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.381994][ T5330] RSP: 002b:00007f51acbf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 156.382003][ T5330] RAX: ffffffffffffffda RBX: 00007f51b0a26270 RCX: 00007f51b079e159 [ 156.382009][ T5330] RDX: 0000000000000045 RSI: 0000000000020042 RDI: 00002000000001c0 [ 156.382014][ T5330] RBP: 00007f51b083503b R08: 0000000000000000 R09: 0000000000000000 [ 156.382018][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.382023][ T5330] R13: 00007f51b0a26308 R14: 00007f51b0a26270 R15: 00007ffcadcad168 [ 156.382030][ T5330] [ 156.382032][ T5330] [ 156.382034][ T5330] The buggy address belongs to the physical page: [ 156.382039][ T5330] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880340b2000 pfn:0x340b0 [ 156.382046][ T5330] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 156.382057][ T5330] raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 156.382063][ T5330] raw: ffff8880340b2000 0000000000000000 00000000ffffffff 0000000000000000 [ 156.382066][ T5330] page dumped because: kasan: bad access detected [ 156.382069][ T5330] page_owner tracks the page as freed [ 156.382072][ T5330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5320, tgid 5318 (syz.0.0), ts 156334228362 [ 156.382084][ T5330] post_alloc_hook+0x1f9/0x250 [ 156.382093][ T5330] get_page_from_freelist+0x2209/0x2280 [ 156.382102][ T5330] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 156.382111][ T5330] alloc_pages_mpol+0x21e/0x390 [ 156.382117][ T5330] ___kmalloc_large_node+0x4f/0x120 [ 156.382129][ T5330] __kmalloc_large_noprof+0x1a/0x90 [ 156.382140][ T5330] diMount+0x29/0xd80 [ 156.382154][ T5330] jfs_mount+0x426/0x870 [ 156.382166][ T5330] jfs_fill_super+0x69f/0xda0 [ 156.382176][ T5330] get_tree_bdev_flags+0x430/0x4f0 [ 156.382189][ T5330] vfs_get_tree+0x92/0x2a0 [ 156.382203][ T5330] do_new_mount+0x319/0xdc0 [ 156.382214][ T5330] __se_sys_mount+0x31d/0x420 [ 156.382224][ T5330] do_syscall_64+0x166/0x520 [ 156.382239][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.382250][ T5330] page last free pid 5319 tgid 5318 ts 156379492825 stack trace: [ 156.382258][ T5330] __free_frozen_pages+0xc93/0xd90 [ 156.382271][ T5330] diUnmount+0xff/0x130 [ 156.382278][ T5330] jfs_mount_rw+0x2dc/0x670 [ 156.382292][ T5330] jfs_reconfigure+0x5da/0x990 [ 156.382302][ T5330] reconfigure_super+0x232/0x8f0 [ 156.382314][ T5330] path_mount+0xd4e/0x1050 [ 156.382325][ T5330] __se_sys_mount+0x31d/0x420 [ 156.382336][ T5330] do_syscall_64+0x166/0x520 [ 156.382350][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.382358][ T5330] [ 156.382361][ T5330] Memory state around the buggy address: [ 156.382366][ T5330] ffff8880340aff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.382372][ T5330] ffff8880340aff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.382379][ T5330] >ffff8880340b0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.382385][ T5330] ^ [ 156.382390][ T5330] ffff8880340b0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.382397][ T5330] ffff8880340b0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.382402][ T5330] ================================================================== [ 156.657306][ T5330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.660422][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 156.664263][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.668582][ T5330] Call Trace: [ 156.669987][ T5330] [ 156.671226][ T5330] vpanic+0x56d/0xa60 [ 156.672955][ T5330] ? __pfx_vpanic+0x10/0x10 [ 156.674869][ T5330] panic+0xc5/0xd0 [ 156.676426][ T5330] ? __pfx_panic+0x10/0x10 [ 156.678348][ T5330] ? preempt_schedule_thunk+0x16/0x40 [ 156.680494][ T5330] ? preempt_schedule_thunk+0x16/0x40 [ 156.682807][ T5330] ? diRead+0x975/0xbc0 [ 156.684641][ T5330] check_panic_on_warn+0x89/0xb0 [ 156.686890][ T5330] ? diRead+0x975/0xbc0 [ 156.688694][ T5330] end_report+0x73/0x170 [ 156.690591][ T5330] ? diRead+0x975/0xbc0 [ 156.692357][ T5330] kasan_report+0x128/0x150 [ 156.694183][ T5330] ? diRead+0x975/0xbc0 [ 156.696089][ T5330] diRead+0x975/0xbc0 [ 156.697862][ T5330] ? iget_locked+0x619/0x6a0 [ 156.699692][ T5330] jfs_iget+0x89/0x470 [ 156.701516][ T5330] jfs_lookup+0x220/0x420 [ 156.703376][ T5330] ? __pfx_jfs_lookup+0x10/0x10 [ 156.705519][ T5330] ? d_alloc_parallel+0x1535/0x16b0 [ 156.707789][ T5330] ? __d_lookup+0x66/0x790 [ 156.709686][ T5330] ? __pfx_d_alloc_parallel+0x10/0x10 [ 156.711945][ T5330] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 156.714500][ T5330] ? mode_strip_sgid+0xa1/0x1b0 [ 156.716641][ T5330] lookup_open+0x9e1/0x1a40 [ 156.718617][ T5330] path_openat+0x677/0x1d60 [ 156.720626][ T5330] do_file_open+0x23e/0x4a0 [ 156.722585][ T5330] ? __pfx_do_file_open+0x10/0x10 [ 156.724818][ T5330] ? _raw_spin_unlock+0x28/0x50 [ 156.726823][ T5330] ? alloc_fd+0x651/0x6c0 [ 156.728586][ T5330] do_sys_openat2+0x115/0x200 [ 156.730517][ T5330] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.732694][ T5330] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.734874][ T5330] ? exc_page_fault+0x6a/0xc0 [ 156.736869][ T5330] ? do_user_addr_fault+0xc4c/0x1340 [ 156.739066][ T5330] __x64_sys_open+0x11e/0x150 [ 156.741112][ T5330] do_syscall_64+0x166/0x520 [ 156.743137][ T5330] ? trace_irq_disable+0x3b/0x140 [ 156.745305][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.747835][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 156.749887][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.752436][ T5330] RIP: 0033:0x7f51b079e159 [ 156.754342][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.762283][ T5330] RSP: 002b:00007f51acbf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 156.765501][ T5330] RAX: ffffffffffffffda RBX: 00007f51b0a26270 RCX: 00007f51b079e159 [ 156.768591][ T5330] RDX: 0000000000000045 RSI: 0000000000020042 RDI: 00002000000001c0 [ 156.771864][ T5330] RBP: 00007f51b083503b R08: 0000000000000000 R09: 0000000000000000 [ 156.775282][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.778815][ T5330] R13: 00007f51b0a26308 R14: 00007f51b0a26270 R15: 00007ffcadcad168 [ 156.782080][ T5330] [ 156.783811][ T5330] Kernel Offset: disabled [ 156.785681][ T5330] Rebooting in 86400 seconds..