./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2265563796 <...> Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. execve("./syz-executor2265563796", ["./syz-executor2265563796"], 0x7ffeceb385f0 /* 10 vars */) = 0 brk(NULL) = 0x555557224000 brk(0x555557224c40) = 0x555557224c40 arch_prctl(ARCH_SET_FS, 0x555557224300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2265563796", 4096) = 28 brk(0x555557245c40) = 0x555557245c40 brk(0x555557246000) = 0x555557246000 mprotect(0x7f31ae0ad000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe6e7d98a0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 18 syzkaller login: [ 49.474879][ T3272] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 72 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6e7d8890) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33ac) = 9 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33bc) = 10 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33cc) = 12 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33dc) = 11 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33ec) = 13 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f31ae0b33fc) = 14 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 0 [ 49.995520][ T3272] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.004659][ T3272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.012716][ T3272] usb 1-1: Product: syz [ 50.016937][ T3272] usb 1-1: Manufacturer: syz [ 50.021528][ T3272] usb 1-1: SerialNumber: syz ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 [ 50.066514][ T3272] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 1856 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6e7d98a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6e7d8890) = 0 [ 50.644932][ T3272] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 [ 51.734856][ T3272] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 51.741979][ T3272] ath9k_htc: Failed to initialize the device ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffe6e7d98e0) = 8 [ 51.864770][ C1] ================================================================== [ 51.872843][ C1] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 51.880557][ C1] Read of size 4 at addr ffff888021b3c2e8 by task swapper/1/0 [ 51.887990][ C1] [ 51.890310][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc7-syzkaller-00139-g4ba1329cbb94 #0 [ 51.900004][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 51.910038][ C1] Call Trace: [ 51.913297][ C1] [ 51.916121][ C1] dump_stack_lvl+0x1e3/0x2cb [ 51.920784][ C1] ? bfq_pos_tree_add_move+0x436/0x436 [ 51.926217][ C1] ? _printk+0xcf/0x10f [ 51.930349][ C1] ? __wake_up_klogd+0xd6/0x100 [ 51.935175][ C1] ? __wake_up_klogd+0xcd/0x100 [ 51.940003][ C1] ? panic+0x76e/0x76e [ 51.944050][ C1] ? _printk+0xcf/0x10f [ 51.948182][ C1] print_address_description+0x65/0x4b0 [ 51.953722][ C1] print_report+0xf4/0x210 [ 51.958116][ C1] ? __netdev_alloc_skb+0x103/0x4d0 [ 51.963304][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 51.968659][ C1] kasan_report+0xfb/0x130 [ 51.973067][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 51.978425][ C1] ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 51.983614][ C1] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 51.989328][ C1] __usb_hcd_giveback_urb+0x369/0x530 [ 51.994685][ C1] dummy_timer+0x86b/0x3110 [ 51.999205][ C1] ? dummy_free_streams+0x320/0x320 [ 52.004385][ C1] ? trace_lock_release+0x7a/0x190 [ 52.009483][ C1] ? dummy_free_streams+0x320/0x320 [ 52.014663][ C1] call_timer_fn+0xf5/0x210 [ 52.019148][ C1] ? dummy_free_streams+0x320/0x320 [ 52.024329][ C1] ? dummy_free_streams+0x320/0x320 [ 52.029526][ C1] ? __run_timers+0x980/0x980 [ 52.034187][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.039369][ C1] ? dummy_free_streams+0x320/0x320 [ 52.044563][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.049743][ C1] ? lockdep_hardirqs_on+0x95/0x140 [ 52.054926][ C1] ? dummy_free_streams+0x320/0x320 [ 52.060197][ C1] __run_timers+0x76a/0x980 [ 52.064704][ C1] ? trace_timer_cancel+0x210/0x210 [ 52.069893][ C1] ? print_irqtrace_events+0x220/0x220 [ 52.075341][ C1] run_timer_softirq+0x63/0xf0 [ 52.080087][ C1] __do_softirq+0x382/0x793 [ 52.084580][ C1] ? __irq_exit_rcu+0xec/0x170 [ 52.089330][ C1] ? __entry_text_end+0x1feacb/0x1feacb [ 52.094860][ C1] __irq_exit_rcu+0xec/0x170 [ 52.099434][ C1] ? irq_exit_rcu+0x20/0x20 [ 52.103923][ C1] irq_exit_rcu+0x5/0x20 [ 52.108234][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 52.113855][ C1] [ 52.116769][ C1] [ 52.119684][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 52.125661][ C1] RIP: 0010:acpi_idle_enter+0x43d/0x7a0 [ 52.131208][ C1] Code: ff e8 77 14 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 10 01 00 00 e8 83 bc fa fc 66 90 e8 9c 0f f4 fc 0f 00 2d 85 ff 61 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 5d e5 46 fd [ 52.150809][ C1] RSP: 0018:ffffc90000177c00 EFLAGS: 000002d3 [ 52.156869][ C1] RAX: ffffffff849384d4 RBX: 0000000000000000 RCX: ffff888011fe1d80 [ 52.164832][ C1] RDX: 0000000000000000 RSI: ffffffff8a8d2bc0 RDI: ffffffff8ae9a840 [ 52.172792][ C1] RBP: ffffc90000177cb0 R08: ffffffff849384b9 R09: ffffed10023fc3b1 [ 52.180761][ C1] R10: ffffed10023fc3b1 R11: 1ffff110023fc3b0 R12: ffffc90000177c40 [ 52.188829][ C1] R13: dffffc0000000000 R14: ffff888017829000 R15: 0000000000000001 [ 52.196796][ C1] ? acpi_idle_enter+0x419/0x7a0 [ 52.201731][ C1] ? acpi_idle_enter+0x434/0x7a0 [ 52.206661][ C1] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 52.211761][ C1] cpuidle_enter_state+0x517/0xed0 [ 52.217127][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 52.222485][ C1] ? menu_enable_device+0x370/0x370 [ 52.227669][ C1] cpuidle_enter+0x59/0x90 [ 52.232084][ C1] do_idle+0x3d2/0x640 [ 52.236139][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 52.241322][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 52.247201][ C1] ? complete+0xb9/0x1c0 [ 52.251430][ C1] cpu_startup_entry+0x15/0x20 [ 52.256176][ C1] start_secondary+0xe4/0xf0 [ 52.260749][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 52.266630][ C1] [ 52.269648][ C1] [ 52.271952][ C1] The buggy address belongs to the physical page: [ 52.278340][ C1] page:ffffea000086cf00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21b3c [ 52.288472][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.295653][ C1] raw: 00fff00000000000 0000000000000000 ffffea000086cf08 0000000000000000 [ 52.304216][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 52.312776][ C1] page dumped because: kasan: bad access detected [ 52.319183][ C1] page_owner tracks the page as freed [ 52.324536][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 3272, tgid 3272 (kworker/1:3), ts 50656542347, free_ts 51741953337 [ 52.342327][ C1] get_page_from_freelist+0x72b/0x7a0 [ 52.347695][ C1] __alloc_pages+0x259/0x560 [ 52.352282][ C1] kmalloc_order+0x41/0x150 [ 52.356791][ C1] kmalloc_order_trace+0x15/0x70 [ 52.361729][ C1] __kmalloc+0x26b/0x370 [ 52.365967][ C1] wiphy_new_nm+0x617/0x18f0 [ 52.370553][ C1] ieee80211_alloc_hw_nm+0x338/0x1e60 [ 52.375914][ C1] ath9k_htc_probe_device+0xaa/0x2090 [ 52.381283][ C1] ath9k_htc_hw_init+0x30/0x70 [ 52.386038][ C1] ath9k_hif_usb_firmware_cb+0x250/0x4d0 [ 52.391654][ C1] request_firmware_work_func+0x198/0x270 [ 52.397358][ C1] process_one_work+0x81c/0xd10 [ 52.402207][ C1] worker_thread+0xb14/0x1330 [ 52.406877][ C1] kthread+0x266/0x300 [ 52.410941][ C1] ret_from_fork+0x1f/0x30 [ 52.415352][ C1] page last free stack trace: [ 52.420006][ C1] free_pcp_prepare+0x812/0x900 [ 52.424847][ C1] free_unref_page+0x7d/0x390 [ 52.429511][ C1] free_large_kmalloc+0xeb/0x1a0 [ 52.434443][ C1] kfree+0x188/0x210 [ 52.438328][ C1] device_release+0x98/0x1c0 [ 52.442907][ C1] kobject_cleanup+0x235/0x470 [ 52.447662][ C1] ath9k_htc_probe_device+0xfe8/0x2090 [ 52.453125][ C1] ath9k_htc_hw_init+0x30/0x70 [ 52.457894][ C1] ath9k_hif_usb_firmware_cb+0x250/0x4d0 [ 52.463518][ C1] request_firmware_work_func+0x198/0x270 [ 52.469231][ C1] process_one_work+0x81c/0xd10 [ 52.474070][ C1] worker_thread+0xb14/0x1330 [ 52.478730][ C1] kthread+0x266/0x300 [ 52.482784][ C1] ret_from_fork+0x1f/0x30 [ 52.487186][ C1] [ 52.489494][ C1] Memory state around the buggy address: [ 52.495108][ C1] ffff888021b3c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.503151][ C1] ffff888021b3c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.511196][ C1] >ffff888021b3c280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.519237][ C1] ^ [ 52.526677][ C1] ffff888021b3c300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.534722][ C1] ffff888021b3c380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.542764][ C1] ================================================================== [ 52.550821][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 52.557413][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc7-syzkaller-00139-g4ba1329cbb94 #0 [ 52.567118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 52.577157][ C1] Call Trace: [ 52.580425][ C1] [ 52.583262][ C1] dump_stack_lvl+0x1e3/0x2cb [ 52.587955][ C1] ? bfq_pos_tree_add_move+0x436/0x436 [ 52.593414][ C1] ? panic+0x76e/0x76e [ 52.597478][ C1] ? vscnprintf+0x59/0x80 [ 52.601800][ C1] panic+0x312/0x76e [ 52.605687][ C1] ? fb_is_primary_device+0xcc/0xcc [ 52.610878][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 52.616766][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 52.622128][ C1] end_report+0x91/0xa0 [ 52.626272][ C1] kasan_report+0x108/0x130 [ 52.630763][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 52.636118][ C1] ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 52.641306][ C1] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 52.647028][ C1] __usb_hcd_giveback_urb+0x369/0x530 [ 52.652386][ C1] dummy_timer+0x86b/0x3110 [ 52.656892][ C1] ? dummy_free_streams+0x320/0x320 [ 52.662073][ C1] ? trace_lock_release+0x7a/0x190 [ 52.667184][ C1] ? dummy_free_streams+0x320/0x320 [ 52.672364][ C1] call_timer_fn+0xf5/0x210 [ 52.676851][ C1] ? dummy_free_streams+0x320/0x320 [ 52.682033][ C1] ? dummy_free_streams+0x320/0x320 [ 52.687216][ C1] ? __run_timers+0x980/0x980 [ 52.691875][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.697070][ C1] ? dummy_free_streams+0x320/0x320 [ 52.702252][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.707431][ C1] ? lockdep_hardirqs_on+0x95/0x140 [ 52.712620][ C1] ? dummy_free_streams+0x320/0x320 [ 52.718326][ C1] __run_timers+0x76a/0x980 [ 52.722818][ C1] ? trace_timer_cancel+0x210/0x210 [ 52.728009][ C1] ? print_irqtrace_events+0x220/0x220 [ 52.733466][ C1] run_timer_softirq+0x63/0xf0 [ 52.738213][ C1] __do_softirq+0x382/0x793 [ 52.742703][ C1] ? __irq_exit_rcu+0xec/0x170 [ 52.747452][ C1] ? __entry_text_end+0x1feacb/0x1feacb [ 52.752984][ C1] __irq_exit_rcu+0xec/0x170 [ 52.757556][ C1] ? irq_exit_rcu+0x20/0x20 [ 52.762045][ C1] irq_exit_rcu+0x5/0x20 [ 52.766286][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 52.771906][ C1] [ 52.774820][ C1] [ 52.777735][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 52.783699][ C1] RIP: 0010:acpi_idle_enter+0x43d/0x7a0 [ 52.789228][ C1] Code: ff e8 77 14 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 10 01 00 00 e8 83 bc fa fc 66 90 e8 9c 0f f4 fc 0f 00 2d 85 ff 61 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 5d e5 46 fd [ 52.808817][ C1] RSP: 0018:ffffc90000177c00 EFLAGS: 000002d3 [ 52.815306][ C1] RAX: ffffffff849384d4 RBX: 0000000000000000 RCX: ffff888011fe1d80 [ 52.823260][ C1] RDX: 0000000000000000 RSI: ffffffff8a8d2bc0 RDI: ffffffff8ae9a840 [ 52.831213][ C1] RBP: ffffc90000177cb0 R08: ffffffff849384b9 R09: ffffed10023fc3b1 [ 52.839169][ C1] R10: ffffed10023fc3b1 R11: 1ffff110023fc3b0 R12: ffffc90000177c40 [ 52.847123][ C1] R13: dffffc0000000000 R14: ffff888017829000 R15: 0000000000000001 [ 52.855081][ C1] ? acpi_idle_enter+0x419/0x7a0 [ 52.860002][ C1] ? acpi_idle_enter+0x434/0x7a0 [ 52.864927][ C1] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 52.870040][ C1] cpuidle_enter_state+0x517/0xed0 [ 52.875142][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 52.880500][ C1] ? menu_enable_device+0x370/0x370 [ 52.885685][ C1] cpuidle_enter+0x59/0x90 [ 52.890087][ C1] do_idle+0x3d2/0x640 [ 52.894144][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 52.899326][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 52.905203][ C1] ? complete+0xb9/0x1c0 [ 52.909432][ C1] cpu_startup_entry+0x15/0x20 [ 52.914181][ C1] start_secondary+0xe4/0xf0 [ 52.918756][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 52.924638][ C1] [ 52.927886][ C1] Kernel Offset: disabled [ 52.932198][ C1] Rebooting in 86400 seconds..