program:
r0 = socket$nl_route(0x10, 0x3, 0x0)
kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}, {0x0, 0x0, 0x3e0000}], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='mem_connect\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000000)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0xf}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r8, 0x40047454, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6578636c2c646973636172642c6e6f7265636f766572792c6673636b2c7265636f766572795f706173735f6c6173743d7265636f6e7374727563745f736e617073686f74732c6e6f7265636f766572792c6669785f6572726f72733d61736b2c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c73686172645f696e6f64655f6e756d040072732c6669785f6572726f72733d7965732c00"], 0x1, 0x59a5, &(0x7f0000006040)="$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")
[ 88.406132][ T5310] Bluetooth: hci0: command tx timeout
[ 88.534335][ T5337] netlink: 'syz.0.0': attribute type 4 has an invalid length.
[ 88.883097][ T5331] loop0: detected capacity change from 0 to 32768
[ 89.174366][ T5331] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl
[ 89.174379][ T5331] allowing incompatible features above 0.0: (unknown version)
[ 89.174385][ T5331] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 89.194193][ T5331] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 89.199306][ T5331] bcachefs (loop0): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key U64_MAX:0:0 durability: 0 ptr: 0:32:10 gen 0 cached unwritten
[ 89.199343][ T5331] pointer spans multiple buckets (10 + 256 > 256), deleting
[ 89.213600][ T5331] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 89.217017][ T5331] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[ 89.217017][ T5331] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 89.228893][ T5331] bcachefs (loop0): invalid btree id 251 (max 63), fix?
[ 89.298949][ T5331] bcachefs (loop0): error validating btree node at btree xattrs level 0/0
[ 89.298986][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 89.298997][ T5331] loop0 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 89.321987][ T5331] bcachefs (loop0): btree node read error at btree xattrs level 0/0
[ 89.322005][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 89.322015][ T5331] running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 89.322023][ T5331] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 89.322031][ T5331] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 89.322040][ T5331] ret btree_node_read_validate_error
[ 89.349812][ T5331] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing
[ 89.356031][ T5331] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0
[ 89.356055][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 89.356065][ T5331] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[ 89.384953][ T5331] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree lru level 0/0
[ 89.384969][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[ 89.384979][ T5331] node offset 0/16 bset u64s 0: bset version 19 older than superblock version_min 24, fix?
[ 89.405081][ T5331] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree lru level 0/0
[ 89.405096][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[ 89.405106][ T5331] node offset 0/16 bset u64s 0: bset version 19 older than superblock version_min 24, fix?
[ 89.405113][ T5331] Unable to continue, halting
[ 89.422757][ T5331] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[ 89.429841][ T5331] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0
[ 89.429857][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[ 89.429867][ T5331] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix?
[ 89.447658][ T5331] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0
[ 89.447672][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[ 89.447682][ T5331] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix?
[ 89.447690][ T5331] Unable to continue, halting
[ 89.465163][ T5331] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[ 89.469920][ T5331] bcachefs (loop0): error validating btree node at btree backpointers level 0/0
[ 89.469929][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 89.469935][ T5331] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295
[ 89.469941][ T5331] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0, btree topology error:
[ 89.496609][ T5331] bcachefs (loop0): btree node read error at btree backpointers level 0/0
[ 89.496623][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 89.496631][ T5331] flagging btree backpointers lost data
[ 89.496638][ T5331] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0)
[ 89.496649][ T5331] ret btree_node_read_validate_error
[ 89.518730][ T5331] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[ 89.526085][ T5331] ------------[ cut here ]------------
[ 89.528853][ T5331] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:212:18
[ 89.532156][ T5331] shift exponent 251 is too large for 64-bit type 'unsigned long long'
[ 89.537926][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full)
[ 89.537945][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 89.537952][ T5331] Call Trace:
[ 89.537958][ T5331]
[ 89.537963][ T5331] dump_stack_lvl+0x189/0x250
[ 89.538063][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10
[ 89.538082][ T5331] ? __pfx__printk+0x10/0x10
[ 89.538103][ T5331] ubsan_epilogue+0xa/0x40
[ 89.538117][ T5331] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 89.538180][ T5331] __bch2_btree_node_hash_insert+0x184d/0x1ab0
[ 89.538205][ T5331] ? __bch2_btree_node_hash_insert+0x200/0x1ab0
[ 89.538225][ T5331] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 89.538259][ T5331] bch2_btree_node_hash_insert+0x7e/0xc0
[ 89.538280][ T5331] bch2_btree_root_read+0x59e/0x760
[ 89.538300][ T5331] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 89.538323][ T5331] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 89.538339][ T5331] read_btree_roots+0x2c6/0x840
[ 89.538363][ T5331] ? __pfx_read_btree_roots+0x10/0x10
[ 89.538391][ T5331] bch2_fs_recovery+0x261f/0x3a50
[ 89.538407][ T5331] ? check_noncircular+0xe0/0x160
[ 89.538430][ T5331] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 89.538457][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.538484][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.538506][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.538538][ T5331] ? bch2_fs_start+0x9fe/0xd90
[ 89.538549][ T5331] ? up_write+0x1c4/0x420
[ 89.538555][ T5331] ? bch2_fs_start+0x5c4/0xd90
[ 89.538564][ T5331] bch2_fs_start+0xa99/0xd90
[ 89.538572][ T5331] ? bch2_fs_start+0x5c4/0xd90
[ 89.538580][ T5331] ? __pfx_bch2_fs_start+0x10/0x10
[ 89.538596][ T5331] ? sget+0x267/0x620
[ 89.538608][ T5331] bch2_fs_get_tree+0xafc/0x14f0
[ 89.538630][ T5331] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 89.538649][ T5331] ? aa_get_newest_label+0xf7/0x5d0
[ 89.538658][ T5331] ? vfs_parse_monolithic_sep+0x2df/0x310
[ 89.538671][ T5331] ? apparmor_capable+0x137/0x1b0
[ 89.538688][ T5331] vfs_get_tree+0x92/0x2b0
[ 89.538700][ T5331] do_new_mount+0x24a/0xa40
[ 89.538718][ T5331] __se_sys_mount+0x317/0x410
[ 89.538735][ T5331] ? __pfx___se_sys_mount+0x10/0x10
[ 89.538750][ T5331] ? do_syscall_64+0xbe/0x3b0
[ 89.538797][ T5331] ? __x64_sys_mount+0x20/0xc0
[ 89.538811][ T5331] do_syscall_64+0xfa/0x3b0
[ 89.538827][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.538842][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.538853][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 89.538865][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.538875][ T5331] RIP: 0033:0x7f8ece7900ca
[ 89.538887][ T5331] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 89.538897][ T5331] RSP: 002b:00007f8ecf56fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 89.538910][ T5331] RAX: ffffffffffffffda RBX: 00007f8ecf56fef0 RCX: 00007f8ece7900ca
[ 89.538918][ T5331] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f8ecf56feb0
[ 89.538926][ T5331] RBP: 0000200000000180 R08: 00007f8ecf56fef0 R09: 0000000000800000
[ 89.538933][ T5331] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540
[ 89.538940][ T5331] R13: 00007f8ecf56feb0 R14: 00000000000059a5 R15: 00002000000000c0
[ 89.538959][ T5331]
[ 89.538963][ T5331] ---[ end trace ]---
[ 89.716524][ T5331] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 89.719957][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full)
[ 89.724917][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 89.729487][ T5331] Call Trace:
[ 89.730853][ T5331]
[ 89.731878][ T5331] dump_stack_lvl+0x99/0x250
[ 89.734038][ T5331] ? __asan_memcpy+0x40/0x70
[ 89.735957][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10
[ 89.738026][ T5331] ? __pfx__printk+0x10/0x10
[ 89.739872][ T5331] panic+0x2db/0x790
[ 89.741357][ T5331] ? __pfx_panic+0x10/0x10
[ 89.743125][ T5331] ? _printk+0xcf/0x120
[ 89.744775][ T5331] ? __pfx__printk+0x10/0x10
[ 89.746635][ T5331] check_panic_on_warn+0x89/0xb0
[ 89.748733][ T5331] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 89.751544][ T5331] __bch2_btree_node_hash_insert+0x184d/0x1ab0
[ 89.754394][ T5331] ? __bch2_btree_node_hash_insert+0x200/0x1ab0
[ 89.757103][ T5331] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 89.759885][ T5331] bch2_btree_node_hash_insert+0x7e/0xc0
[ 89.762447][ T5331] bch2_btree_root_read+0x59e/0x760
[ 89.764744][ T5331] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 89.767333][ T5331] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 89.770059][ T5331] read_btree_roots+0x2c6/0x840
[ 89.772282][ T5331] ? __pfx_read_btree_roots+0x10/0x10
[ 89.774846][ T5331] bch2_fs_recovery+0x261f/0x3a50
[ 89.777125][ T5331] ? check_noncircular+0xe0/0x160
[ 89.779432][ T5331] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 89.781850][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.784121][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.786365][ T5331] ? __lock_acquire+0xab9/0xd20
[ 89.788588][ T5331] ? bch2_fs_start+0x9fe/0xd90
[ 89.790702][ T5331] ? up_write+0x1c4/0x420
[ 89.792635][ T5331] ? bch2_fs_start+0x5c4/0xd90
[ 89.794806][ T5331] bch2_fs_start+0xa99/0xd90
[ 89.796901][ T5331] ? bch2_fs_start+0x5c4/0xd90
[ 89.799108][ T5331] ? __pfx_bch2_fs_start+0x10/0x10
[ 89.801344][ T5331] ? sget+0x267/0x620
[ 89.803141][ T5331] bch2_fs_get_tree+0xafc/0x14f0
[ 89.805413][ T5331] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 89.807262][ T5331] ? aa_get_newest_label+0xf7/0x5d0
[ 89.809137][ T5331] ? vfs_parse_monolithic_sep+0x2df/0x310
[ 89.811198][ T5331] ? apparmor_capable+0x137/0x1b0
[ 89.813085][ T5331] vfs_get_tree+0x92/0x2b0
[ 89.814920][ T5331] do_new_mount+0x24a/0xa40
[ 89.816907][ T5331] __se_sys_mount+0x317/0x410
[ 89.819085][ T5331] ? __pfx___se_sys_mount+0x10/0x10
[ 89.821060][ T5331] ? do_syscall_64+0xbe/0x3b0
[ 89.823066][ T5331] ? __x64_sys_mount+0x20/0xc0
[ 89.825009][ T5331] do_syscall_64+0xfa/0x3b0
[ 89.826663][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.828478][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.830712][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 89.832676][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.835069][ T5331] RIP: 0033:0x7f8ece7900ca
[ 89.836826][ T5331] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 89.844659][ T5331] RSP: 002b:00007f8ecf56fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 89.847992][ T5331] RAX: ffffffffffffffda RBX: 00007f8ecf56fef0 RCX: 00007f8ece7900ca
[ 89.850782][ T5331] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f8ecf56feb0
[ 89.853630][ T5331] RBP: 0000200000000180 R08: 00007f8ecf56fef0 R09: 0000000000800000
[ 89.856838][ T5331] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540
[ 89.859790][ T5331] R13: 00007f8ecf56feb0 R14: 00000000000059a5 R15: 00002000000000c0
[ 89.862908][ T5331]
[ 89.864481][ T5331] Kernel Offset: disabled
[ 89.866302][ T5331] Rebooting in 86400 seconds..