program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noauto_da_alloc}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000000c0)={[{@resuid}, {@errors_continue}]}, 0x1, 0x796, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9swmYaaSaZkJqUJAVtEcCOouBB007U/6s6tP7b6X7iQlqppseJCInfmTjttZtJpmpkp5POBmznn3js55zvn/jh37mFuAHvWRPonF3EoIj5IIsay+UlEDNVSgxEn6uvd3lgvpFMSm5uv/5bU1rm1sV6IpvekDmSZ/0fE9+9GHM5tLbeyurYwWyoVl7P8VHXx/FRlde3IucXZ+eJ8cenY9MzM0ePPHT+2e7H+8dPawesfvvL0Vyf+eud/V9//IYkTcTBb1hzHbpmIiewzGUo/wnu8vNuF9VnS7wqwI+muOVDfy+NQjMVALdXGSC9rBgB0y9sRsQkA7DGJ8z8A7DGN7wFubawXGlN/v5HorRsvRcT+evyN+5v1JYPZPbv9tfugo7eSe+6MJBExvgvlT0TEZ9+8+UU6RZfuQwK0culyRJwZn9h6/E+2jFl4WM9st3BzuPYycd9sxz/onW/T/s/zrfp/uTv9n2jR/xluse/uxIP3/9y1XSimrbT/92LT2LbbTfFnxgey3L9qfb6h5Oy5UjE9tv07IiZjaDjNT9dWbT0KavLm3zfbld/c//v9o7c+T8tPX++ukbs2OHzve+Zmq7OPGnfDjcsRTwy2ij+50/5Jm/7vqQ7LePWF9z5ttyyNP423MW2Nv7s2r0Q81bL977Zlsu34xKna5jDV2Cha+PrnT0bbld/c/umUlt+4FuiFtP1Ht49/PKmP17wUpVJxufLwZfx4Zey7dsseHH/r7X9f8kYtvS+bd3G2Wl2ejtiXvLZ1/tG7723kG+un8U8+2Xr/3277T68Jz3QY/+D1X7/cefzdlcY/11n718fr7iBx9fbCQLvyO2v/mVpqMpvTyfGv0wo+ymcHAAAAAAAAAAAAAAAAAAAAAAAAAJ3KRcTBSHL5O+lcLp+vP8P7vzGaK5Ur1cNnyytLc1F7VvZ4DOUaP3U51vR7qNPZ7+E38kfvyz8bEf+JiI+HR2r5fKFcmut38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQOZA9/z/J8o3n/6d+Ge5nzQCArtrf7woAAD3n/A8Ae8/Dnf9HulYPAKB3XP8DwN7T8fn/THfrAQD0jut/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuzUyZPptPnnxnohzc9dWF1ZKF84MlesLOQXVwr5Qnn5fH6+XJ4vFfOF8mLbf3Sp/lIql8/PxNLKxalqsVKdqqyunV4sryxVT59bnJ0vni4O9SwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhcZXVtYbZUKi5LbJsYeTyq0SYx1/NCB+NxiV2iO4nmo8RI/w5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+5fwIAAP//vKcqYQ==") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x20080) ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f00000000c0)=0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) lseek(r3, 0x9, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000180)={0x8, 0x0, 0x1, 'queue1\x00', 0x3}) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0xfaeb) [ 86.711741][ T4669] Bluetooth: hci0: command tx timeout [ 86.776190][ T5331] loop0: detected capacity change from 0 to 1024 [ 86.806859][ T5331] ======================================================= [ 86.806859][ T5331] WARNING: The mand mount option has been deprecated and [ 86.806859][ T5331] and is ignored by this kernel. Remove the mand [ 86.806859][ T5331] option from the mount to silence this warning. [ 86.806859][ T5331] ======================================================= [ 86.872168][ T5331] EXT4-fs: Ignoring removed oldalloc option [ 86.875183][ T5331] EXT4-fs: Ignoring removed orlov option [ 86.887479][ T5331] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.932614][ T5331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.240985][ T5327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.394281][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.400162][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.405097][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.409866][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.416846][ T5327] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.422020][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.438367][ T5327] usb 5-1: config 0 descriptor?? [ 87.881382][ T5327] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 88.157061][ T5331] ================================================================== [ 88.161613][ T5331] BUG: KASAN: use-after-free in ext4_find_extent+0xaea/0xcc0 [ 88.164997][ T5331] Read of size 4 at addr ffff8880509b1cf4 by task syz.0.0/5331 [ 88.168901][ T5331] [ 88.170276][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.170297][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.170309][ T5331] Call Trace: [ 88.170320][ T5331] [ 88.170330][ T5331] dump_stack_lvl+0xe8/0x150 [ 88.170388][ T5331] print_report+0xba/0x230 [ 88.170429][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.170449][ T5331] kasan_report+0x117/0x150 [ 88.170486][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.170507][ T5331] ext4_find_extent+0xaea/0xcc0 [ 88.170528][ T5331] ext4_ext_map_blocks+0x283/0x58b0 [ 88.170553][ T5331] ? check_path+0x21/0x40 [ 88.170594][ T5331] ? lockdep_unlock+0x5d/0xd0 [ 88.170611][ T5331] ? __lock_acquire+0x146e/0x2cf0 [ 88.170642][ T5331] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 88.170667][ T5331] ext4_map_create_blocks+0x11d/0x540 [ 88.170691][ T5331] ext4_map_blocks+0x7cd/0x11d0 [ 88.170718][ T5331] ? __pfx_ext4_map_blocks+0x10/0x10 [ 88.170741][ T5331] ? ext4_inode_journal_mode+0x193/0x470 [ 88.170755][ T5331] ext4_do_writepages+0x22c0/0x46e0 [ 88.170773][ T5331] ? unwind_get_return_address+0x4d/0x90 [ 88.170816][ T5331] ? __pfx_ext4_do_writepages+0x10/0x10 [ 88.170837][ T5331] ? add_lock_to_list+0xc7/0x100 [ 88.170860][ T5331] ? lockdep_unlock+0x5d/0xd0 [ 88.170877][ T5331] ? __lock_acquire+0x146e/0x2cf0 [ 88.170911][ T5331] ext4_writepages+0x241/0x3b0 [ 88.170930][ T5331] ? __pfx_ext4_writepages+0x10/0x10 [ 88.170954][ T5331] ? __pfx_ext4_writepages+0x10/0x10 [ 88.170973][ T5331] do_writepages+0x32e/0x550 [ 88.171021][ T5331] ? do_raw_spin_unlock+0x4d/0x210 [ 88.171040][ T5331] filemap_write_and_wait_range+0x335/0x3f0 [ 88.171084][ T5331] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 88.171122][ T5331] ? down_read+0x272/0x2e0 [ 88.171223][ T5331] ext4_bmap+0x1ce/0x260 [ 88.171243][ T5331] ? __pfx_ext4_bmap+0x10/0x10 [ 88.171262][ T5331] bmap+0xac/0xe0 [ 88.171306][ T5331] file_ioctl+0x4ac/0x860 [ 88.171322][ T5331] ? __pfx_file_ioctl+0x10/0x10 [ 88.171339][ T5331] ? kasan_quarantine_put+0xbb/0x1f0 [ 88.171366][ T5331] ? tomoyo_path_number_perm+0x219/0x630 [ 88.171429][ T5331] ? tomoyo_path_number_perm+0x219/0x630 [ 88.171448][ T5331] do_vfs_ioctl+0xc26/0x1530 [ 88.171466][ T5331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 88.171488][ T5331] ? do_futex+0x395/0x420 [ 88.171568][ T5331] ? __fget_files+0x2a/0x420 [ 88.171591][ T5331] ? __fget_files+0x2a/0x420 [ 88.171608][ T5331] ? __fget_files+0x3a0/0x420 [ 88.171624][ T5331] ? __fget_files+0x2a/0x420 [ 88.171643][ T5331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.171660][ T5331] __se_sys_ioctl+0x82/0x170 [ 88.171677][ T5331] do_syscall_64+0x14d/0xf80 [ 88.171694][ T5331] ? trace_irq_disable+0x3b/0x150 [ 88.171758][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.171777][ T5331] ? clear_bhb_loop+0x40/0x90 [ 88.171798][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.171817][ T5331] RIP: 0033:0x7fa95639c799 [ 88.171837][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.171849][ T5331] RSP: 002b:00007fa957170fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.171887][ T5331] RAX: ffffffffffffffda RBX: 00007fa956615fa0 RCX: 00007fa95639c799 [ 88.171899][ T5331] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000006 [ 88.171909][ T5331] RBP: 00007fa956432c99 R08: 0000000000000000 R09: 0000000000000000 [ 88.171919][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.171927][ T5331] R13: 00007fa956616038 R14: 00007fa956615fa0 R15: 00007ffde04e3798 [ 88.171944][ T5331] [ 88.171950][ T5331] [ 88.340860][ T5331] The buggy address belongs to the physical page: [ 88.343711][ T5331] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x509b1 [ 88.348643][ T5331] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 88.352307][ T5331] raw: 04fff00000000000 ffffea0001426c88 ffffea0001426c08 0000000000000000 [ 88.356333][ T5331] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.361090][ T5331] page dumped because: kasan: bad access detected [ 88.364260][ T5331] page_owner info is not present (never set?) [ 88.366957][ T5331] [ 88.368134][ T5331] Memory state around the buggy address: [ 88.370814][ T5331] ffff8880509b1b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.375262][ T5331] ffff8880509b1c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.379359][ T5331] >ffff8880509b1c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.383066][ T5331] ^ [ 88.386528][ T5331] ffff8880509b1d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.391044][ T5331] ffff8880509b1d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 88.394784][ T5331] ================================================================== [ 88.469206][ T5331] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.472763][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.477139][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.481813][ T5331] Call Trace: [ 88.483276][ T5331] [ 88.484811][ T5331] vpanic+0x56c/0xa60 [ 88.486924][ T5331] ? __pfx_vpanic+0x10/0x10 [ 88.489274][ T5331] panic+0xc5/0xd0 [ 88.491147][ T5331] ? __pfx_panic+0x10/0x10 [ 88.493333][ T5331] ? preempt_schedule_thunk+0x16/0x30 [ 88.496088][ T5331] ? preempt_schedule_thunk+0x16/0x30 [ 88.499154][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.501973][ T5331] check_panic_on_warn+0x89/0xb0 [ 88.504570][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.507100][ T5331] end_report+0x73/0x180 [ 88.509284][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.512226][ T5331] kasan_report+0x128/0x150 [ 88.514654][ T5331] ? ext4_find_extent+0xaea/0xcc0 [ 88.517251][ T5331] ext4_find_extent+0xaea/0xcc0 [ 88.519562][ T5331] ext4_ext_map_blocks+0x283/0x58b0 [ 88.521893][ T5331] ? check_path+0x21/0x40 [ 88.523793][ T5331] ? lockdep_unlock+0x5d/0xd0 [ 88.526100][ T5331] ? __lock_acquire+0x146e/0x2cf0 [ 88.528523][ T5331] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 88.531278][ T5331] ext4_map_create_blocks+0x11d/0x540 [ 88.533766][ T5331] ext4_map_blocks+0x7cd/0x11d0 [ 88.535801][ T5331] ? __pfx_ext4_map_blocks+0x10/0x10 [ 88.538000][ T5331] ? ext4_inode_journal_mode+0x193/0x470 [ 88.540293][ T5331] ext4_do_writepages+0x22c0/0x46e0 [ 88.543133][ T5331] ? unwind_get_return_address+0x4d/0x90 [ 88.546301][ T5331] ? __pfx_ext4_do_writepages+0x10/0x10 [ 88.548844][ T5331] ? add_lock_to_list+0xc7/0x100 [ 88.550837][ T5331] ? lockdep_unlock+0x5d/0xd0 [ 88.552794][ T5331] ? __lock_acquire+0x146e/0x2cf0 [ 88.554917][ T5331] ext4_writepages+0x241/0x3b0 [ 88.557055][ T5331] ? __pfx_ext4_writepages+0x10/0x10 [ 88.559477][ T5331] ? __pfx_ext4_writepages+0x10/0x10 [ 88.561972][ T5331] do_writepages+0x32e/0x550 [ 88.564125][ T5331] ? do_raw_spin_unlock+0x4d/0x210 [ 88.566421][ T5331] filemap_write_and_wait_range+0x335/0x3f0 [ 88.569435][ T5331] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 88.572914][ T5331] ? down_read+0x272/0x2e0 [ 88.575558][ T5331] ext4_bmap+0x1ce/0x260 [ 88.577534][ T5331] ? __pfx_ext4_bmap+0x10/0x10 [ 88.579670][ T5331] bmap+0xac/0xe0 [ 88.581378][ T5331] file_ioctl+0x4ac/0x860 [ 88.583283][ T5331] ? __pfx_file_ioctl+0x10/0x10 [ 88.585489][ T5331] ? kasan_quarantine_put+0xbb/0x1f0 [ 88.587835][ T5331] ? tomoyo_path_number_perm+0x219/0x630 [ 88.590449][ T5331] ? tomoyo_path_number_perm+0x219/0x630 [ 88.593239][ T5331] do_vfs_ioctl+0xc26/0x1530 [ 88.595623][ T5331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 88.598331][ T5331] ? do_futex+0x395/0x420 [ 88.600451][ T5331] ? __fget_files+0x2a/0x420 [ 88.602707][ T5331] ? __fget_files+0x2a/0x420 [ 88.605010][ T5331] ? __fget_files+0x3a0/0x420 [ 88.607738][ T5331] ? __fget_files+0x2a/0x420 [ 88.610425][ T5331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.613004][ T5331] __se_sys_ioctl+0x82/0x170 [ 88.614982][ T5331] do_syscall_64+0x14d/0xf80 [ 88.616963][ T5331] ? trace_irq_disable+0x3b/0x150 [ 88.619217][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.621811][ T5331] ? clear_bhb_loop+0x40/0x90 [ 88.623914][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.626754][ T5331] RIP: 0033:0x7fa95639c799 [ 88.629563][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.638657][ T5331] RSP: 002b:00007fa957170fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.642652][ T5331] RAX: ffffffffffffffda RBX: 00007fa956615fa0 RCX: 00007fa95639c799 [ 88.646519][ T5331] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000006 [ 88.650182][ T5331] RBP: 00007fa956432c99 R08: 0000000000000000 R09: 0000000000000000 [ 88.653964][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.658151][ T5331] R13: 00007fa956616038 R14: 00007fa956615fa0 R15: 00007ffde04e3798 [ 88.661726][ T5331] [ 88.663610][ T5331] Kernel Offset: disabled [ 88.665617][ T5331] Rebooting in 86400 seconds..