program: r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100002a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/427], 0x0, 0x4714, &(0x7f0000003b80)="$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") r4 = syz_open_dev$mtd(&(0x7f00000082c0), 0x578000000000, 0x201) ioctl$MEMERASE64(r4, 0x40104d14, &(0x7f0000008300)={0x1, 0xd}) write$char_usb(r2, &(0x7f0000000100)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r1) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000780)='./file0\x00', 0x210008, &(0x7f0000000540)=ANY=[], 0xff, 0xc42, &(0x7f0000002f00)="$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") r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000f40)={0x3b, 0x210, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1ff}, @generic={0x5, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xfff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0xf5, 0xb7c0, [0x10, 0x0, 0x5, 0x4, 0x8, 0x7ff, 0x80000000, 0x0]}}, @enc_lim={0x4, 0x1, 0xa}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0xf, 0x5, [0x4]}}]}, 0x1090) [ 102.880261][ T5285] Bluetooth: hci0: command tx timeout [ 103.222786][ T5332] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.372797][ T5332] usb 5-1: Using ep0 maxpacket: 16 [ 103.374653][ T5332] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 103.376666][ T5332] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.376697][ T5332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.379277][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.379290][ T5332] usb 5-1: Product: syz [ 103.379297][ T5332] usb 5-1: Manufacturer: syz [ 103.379303][ T5332] usb 5-1: SerialNumber: syz [ 103.427687][ T5332] usb 5-1: config 0 descriptor?? [ 103.687781][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 103.712067][ T5332] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 103.749044][ T5332] imon:send_packet: packet tx failed (-71) [ 103.762818][ T5332] imon 5-1:0.0: panel buttons/knobs setup failed [ 103.822755][ T5332] rc_core: IR keymap rc-imon-pad not found [ 103.822773][ T5332] Registered IR keymap rc-empty [ 103.827838][ T5332] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 103.827851][ T5332] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 103.828907][ T5332] imon:send_packet: packet tx failed (-71) [ 103.843769][ T5332] imon 5-1:0.0: remote input dev register failed [ 103.843840][ T5332] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 103.886362][ T5332] imon 5-1:0.0: unable to initialize intf0, err 0 [ 103.886380][ T5332] imon:imon_probe: failed to initialize context! [ 103.886387][ T5332] imon 5-1:0.0: unable to register, err -19 [ 103.913475][ T5332] usb 5-1: USB disconnect, device number 2 [ 104.285900][ T5332] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 104.434239][ T5332] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 104.435413][ T5332] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 104.435431][ T5332] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 104.435445][ T5332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.439060][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.439076][ T5332] usb 5-1: Product: syz [ 104.439083][ T5332] usb 5-1: Manufacturer: syz [ 104.439090][ T5332] usb 5-1: SerialNumber: syz [ 104.473206][ T5332] usb 5-1: config 0 descriptor?? [ 104.475663][ T5334] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.688254][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 104.690511][ T5332] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 104.893070][ T5285] Bluetooth: hci0: command tx timeout [ 104.962685][ T5332] rc_core: IR keymap rc-imon-pad not found [ 104.962700][ T5332] Registered IR keymap rc-empty [ 104.962802][ T5332] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 104.962812][ T5332] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 105.112105][ T5332] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 105.120036][ T5332] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 105.139920][ T5332] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:3> initialized [ 106.005451][ T5335] loop0: detected capacity change from 0 to 32768 [ 106.202044][ T809] usb 5-1: USB disconnect, device number 3 [ 106.207552][ T5334] imon:send_packet: packet tx failed (-71) [ 106.224876][ T5334] imon:lcd_write: send packet failed! [ 106.540754][ T5333] ================================================================== [ 106.540763][ T5333] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 106.541027][ T5333] Read of size 8 at addr ffff888013d650e0 by task syz.0.0/5333 [ 106.541046][ T5333] [ 106.541062][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 106.541082][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.541090][ T5333] Call Trace: [ 106.541113][ T5333] [ 106.541137][ T5333] dump_stack_lvl+0xe8/0x150 [ 106.541206][ T5333] print_address_description+0x55/0x1e0 [ 106.541223][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.541234][ T5333] print_report+0x58/0x70 [ 106.541248][ T5333] kasan_report+0x117/0x150 [ 106.541300][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.541313][ T5333] dev_driver_string+0x35/0xd0 [ 106.541326][ T5333] __dynamic_dev_dbg+0x1ae/0x2e0 [ 106.541377][ T5333] ? __mutex_lock+0x30b/0x1550 [ 106.541481][ T5333] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 106.541495][ T5333] ? __pfx_ima_file_free+0x10/0x10 [ 106.541537][ T5333] ? __asan_memset+0x22/0x50 [ 106.541553][ T5333] ? __fsnotify_parent+0x267/0x620 [ 106.541566][ T5333] ? display_close+0x4b/0x240 [ 106.541642][ T5333] display_close+0x1f9/0x240 [ 106.541658][ T5333] ? __pfx_display_close+0x10/0x10 [ 106.541671][ T5333] __fput+0x40d/0xa50 [ 106.541689][ T5333] task_work_run+0x1d9/0x270 [ 106.541722][ T5333] ? __pfx_task_work_run+0x10/0x10 [ 106.541735][ T5333] exit_to_user_mode_loop+0x204/0x770 [ 106.541750][ T5333] ? rcu_is_watching+0x16/0xb0 [ 106.541764][ T5333] do_syscall_64+0x328/0x520 [ 106.541776][ T5333] ? trace_irq_disable+0x3b/0x140 [ 106.541801][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.541813][ T5333] ? clear_bhb_loop+0x70/0xc0 [ 106.541826][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.541836][ T5333] RIP: 0033:0x7fe9a559e559 [ 106.541859][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.541869][ T5333] RSP: 002b:00007fffe9de8058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.541893][ T5333] RAX: 0000000000000000 RBX: 00007fffe9de8140 RCX: 00007fe9a559e559 [ 106.541901][ T5333] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.541908][ T5333] RBP: 0000000000019196 R08: 0000000000000001 R09: 0000000000000000 [ 106.541915][ T5333] R10: 00007fe9a53ff02c R11: 0000000000000246 R12: 00007fffe9de8180 [ 106.541923][ T5333] R13: 00007fe9a5825fac R14: 0000000000019faf R15: 00007fe9a5825fa0 [ 106.541935][ T5333] [ 106.541940][ T5333] [ 106.541943][ T5333] Allocated by task 5332: [ 106.541958][ T5333] kasan_save_track+0x3e/0x80 [ 106.541970][ T5333] __kasan_kmalloc+0x93/0xb0 [ 106.541981][ T5333] __kmalloc_cache_noprof+0x321/0x600 [ 106.541991][ T5333] usb_set_configuration+0x3c5/0x2260 [ 106.542037][ T5333] usb_generic_driver_probe+0x8d/0x150 [ 106.542051][ T5333] usb_probe_device+0x1c3/0x3b0 [ 106.542064][ T5333] really_probe+0x254/0xae0 [ 106.542077][ T5333] __driver_probe_device+0x1e8/0x360 [ 106.542090][ T5333] driver_probe_device+0x4f/0x240 [ 106.542102][ T5333] __device_attach_driver+0x270/0x410 [ 106.542114][ T5333] bus_for_each_drv+0x258/0x2f0 [ 106.542123][ T5333] __device_attach+0x2c4/0x450 [ 106.542133][ T5333] device_initial_probe+0xa1/0xd0 [ 106.542145][ T5333] bus_probe_device+0x12a/0x220 [ 106.542154][ T5333] device_add+0x7d7/0xb80 [ 106.542164][ T5333] usb_new_device+0x9aa/0x1690 [ 106.542175][ T5333] hub_event+0x28e8/0x4d30 [ 106.542186][ T5333] process_scheduled_works+0xc3d/0x1630 [ 106.542199][ T5333] worker_thread+0xa47/0xfb0 [ 106.542212][ T5333] kthread+0x38b/0x480 [ 106.542221][ T5333] ret_from_fork+0x514/0xb70 [ 106.542231][ T5333] ret_from_fork_asm+0x1a/0x30 [ 106.542240][ T5333] [ 106.542243][ T5333] Freed by task 809: [ 106.542249][ T5333] kasan_save_track+0x3e/0x80 [ 106.542258][ T5333] kasan_save_free_info+0x40/0x50 [ 106.542272][ T5333] __kasan_slab_free+0x5c/0x80 [ 106.542283][ T5333] kfree+0x1c5/0x650 [ 106.542295][ T5333] device_release+0xc4/0x1f0 [ 106.542308][ T5333] kobject_put+0x222/0x550 [ 106.542320][ T5333] usb_disable_device+0x611/0x8d0 [ 106.542332][ T5333] usb_disconnect+0x346/0x9a0 [ 106.542342][ T5333] hub_event+0x1bbb/0x4d30 [ 106.542354][ T5333] process_scheduled_works+0xc3d/0x1630 [ 106.542366][ T5333] worker_thread+0xa47/0xfb0 [ 106.542378][ T5333] kthread+0x38b/0x480 [ 106.542387][ T5333] ret_from_fork+0x514/0xb70 [ 106.542395][ T5333] ret_from_fork_asm+0x1a/0x30 [ 106.542404][ T5333] [ 106.542407][ T5333] The buggy address belongs to the object at ffff888013d65000 [ 106.542407][ T5333] which belongs to the cache kmalloc-2k of size 2048 [ 106.542425][ T5333] The buggy address is located 224 bytes inside of [ 106.542425][ T5333] freed 2048-byte region [ffff888013d65000, ffff888013d65800) [ 106.542443][ T5333] [ 106.542447][ T5333] The buggy address belongs to the physical page: [ 106.542454][ T5333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13d60 [ 106.542465][ T5333] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 106.542473][ T5333] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 106.542484][ T5333] page_type: f5(slab) [ 106.542494][ T5333] raw: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122 [ 106.542504][ T5333] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 106.542513][ T5333] head: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122 [ 106.542521][ T5333] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 106.542531][ T5333] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 106.542541][ T5333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 106.542547][ T5333] page dumped because: kasan: bad access detected [ 106.542553][ T5333] page_owner tracks the page as allocated [ 106.542557][ T5333] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5284, tgid 5284 (syz-executor), ts 98932267837 [ 106.542575][ T5333] post_alloc_hook+0x1f9/0x250 [ 106.542591][ T5333] get_page_from_freelist+0x2209/0x2280 [ 106.542601][ T5333] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 106.542612][ T5333] allocate_slab+0x7d/0x620 [ 106.542624][ T5333] refill_objects+0x2d5/0x350 [ 106.542636][ T5333] __pcs_replace_empty_main+0x2c8/0x6c0 [ 106.542648][ T5333] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 106.542658][ T5333] pskb_expand_head+0x22c/0x13a0 [ 106.542712][ T5333] netlink_trim+0x1b3/0x2c0 [ 106.542732][ T5333] netlink_broadcast_filtered+0x77/0x1070 [ 106.542742][ T5333] nlmsg_notify+0xe3/0x1a0 [ 106.542752][ T5333] __dev_notify_flags+0x257/0x510 [ 106.542766][ T5333] rtnl_configure_link+0x2f5/0x510 [ 106.542778][ T5333] rtnl_newlink_create+0x343/0x7b0 [ 106.542794][ T5333] rtnl_newlink+0x166d/0x1c30 [ 106.542806][ T5333] rtnetlink_rcv_msg+0x802/0xc00 [ 106.542819][ T5333] page last free pid 4688 tgid 4688 ts 32716549540 stack trace: [ 106.542827][ T5333] __free_frozen_pages+0xc93/0xd90 [ 106.542841][ T5333] __slab_free+0x274/0x2c0 [ 106.542850][ T5333] qlist_free_all+0x99/0x100 [ 106.542859][ T5333] kasan_quarantine_reduce+0x148/0x160 [ 106.542869][ T5333] __kasan_slab_alloc+0x22/0x80 [ 106.542879][ T5333] kmem_cache_alloc_noprof+0x2b9/0x600 [ 106.542892][ T5333] vm_area_alloc+0x24/0x140 [ 106.542908][ T5333] do_brk_flags+0x4a6/0xac0 [ 106.542919][ T5333] __se_sys_brk+0xa63/0xc50 [ 106.542930][ T5333] do_syscall_64+0x166/0x520 [ 106.542940][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.542950][ T5333] [ 106.542953][ T5333] Memory state around the buggy address: [ 106.542959][ T5333] ffff888013d64f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.542967][ T5333] ffff888013d65000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.542975][ T5333] >ffff888013d65080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.542980][ T5333] ^ [ 106.542986][ T5333] ffff888013d65100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.542993][ T5333] ffff888013d65180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.542998][ T5333] ================================================================== [ 106.923566][ T5333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.926664][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 106.930537][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.934504][ T5333] Call Trace: [ 106.935901][ T5333] [ 106.937006][ T5333] vpanic+0x56d/0xa60 [ 106.938459][ T5333] ? __pfx_vpanic+0x10/0x10 [ 106.940224][ T5333] panic+0xc5/0xd0 [ 106.941869][ T5333] ? __pfx_panic+0x10/0x10 [ 106.943830][ T5333] ? preempt_schedule_thunk+0x16/0x40 [ 106.946150][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.948321][ T5333] ? preempt_schedule_thunk+0x16/0x40 [ 106.950539][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.952548][ T5333] check_panic_on_warn+0x89/0xb0 [ 106.954556][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.956617][ T5333] end_report+0x73/0x170 [ 106.958392][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.960555][ T5333] kasan_report+0x128/0x150 [ 106.962536][ T5333] ? dev_driver_string+0x35/0xd0 [ 106.964444][ T5333] dev_driver_string+0x35/0xd0 [ 106.966501][ T5333] __dynamic_dev_dbg+0x1ae/0x2e0 [ 106.968799][ T5333] ? __mutex_lock+0x30b/0x1550 [ 106.970897][ T5333] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 106.973284][ T5333] ? __pfx_ima_file_free+0x10/0x10 [ 106.975906][ T5333] ? __asan_memset+0x22/0x50 [ 106.978437][ T5333] ? __fsnotify_parent+0x267/0x620 [ 106.981292][ T5333] ? display_close+0x4b/0x240 [ 106.983504][ T5333] display_close+0x1f9/0x240 [ 106.985545][ T5333] ? __pfx_display_close+0x10/0x10 [ 106.987792][ T5333] __fput+0x40d/0xa50 [ 106.989530][ T5333] task_work_run+0x1d9/0x270 [ 106.991541][ T5333] ? __pfx_task_work_run+0x10/0x10 [ 106.993656][ T5333] exit_to_user_mode_loop+0x204/0x770 [ 106.995874][ T5333] ? rcu_is_watching+0x16/0xb0 [ 106.998001][ T5333] do_syscall_64+0x328/0x520 [ 107.000121][ T5333] ? trace_irq_disable+0x3b/0x140 [ 107.002622][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.005381][ T5333] ? clear_bhb_loop+0x70/0xc0 [ 107.007497][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.010066][ T5333] RIP: 0033:0x7fe9a559e559 [ 107.012025][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.020411][ T5333] RSP: 002b:00007fffe9de8058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 107.023888][ T5333] RAX: 0000000000000000 RBX: 00007fffe9de8140 RCX: 00007fe9a559e559 [ 107.027064][ T5333] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 107.030599][ T5333] RBP: 0000000000019196 R08: 0000000000000001 R09: 0000000000000000 [ 107.034011][ T5333] R10: 00007fe9a53ff02c R11: 0000000000000246 R12: 00007fffe9de8180 [ 107.037212][ T5333] R13: 00007fe9a5825fac R14: 0000000000019faf R15: 00007fe9a5825fa0 [ 107.040505][ T5333] [ 107.042253][ T5333] Kernel Offset: disabled [ 107.044123][ T5333] Rebooting in 86400 seconds..