./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2640785644 <...> Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. execve("./syz-executor2640785644", ["./syz-executor2640785644"], 0x7ffe9fefae20 /* 10 vars */) = 0 brk(NULL) = 0x555555575000 brk(0x555555575c40) = 0x555555575c40 arch_prctl(ARCH_SET_FS, 0x555555575300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2640785644", 4096) = 28 brk(0x555555596c40) = 0x555555596c40 brk(0x555555597000) = 0x555555597000 mprotect(0x7f889efa6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555755d0) = 3637 ./strace-static-x86_64: Process 3637 attached [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [pid 3637] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 3637] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [ 60.930745][ T26] audit: type=1400 audit(1668964374.500:75): avc: denied { execmem } for pid=3636 comm="syz-executor264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.951424][ T26] audit: type=1400 audit(1668964374.510:76): avc: denied { read write } for pid=3637 comm="syz-executor264" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.986249][ T26] audit: type=1400 audit(1668964374.510:77): avc: denied { open } for pid=3637 comm="syz-executor264" path="/dev/raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.010448][ T26] audit: type=1400 audit(1668964374.520:78): avc: denied { ioctl } for pid=3637 comm="syz-executor264" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 18 [ 61.214008][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [ 61.493954][ T25] usb 1-1: Using ep0 maxpacket: 16 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 18 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 9 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 36 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 4 [ 61.644112][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 8 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 8 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff2f86b4c0) = 8 [ 61.854081][ T25] usb 1-1: New USB device found, idVendor=1435, idProduct=0826, bcdDevice=1c.50 [ 61.863138][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.871365][ T25] usb 1-1: Product: syz [ 61.875865][ T25] usb 1-1: Manufacturer: syz [ 61.880495][ T25] usb 1-1: SerialNumber: syz [ 61.890419][ T25] usb 1-1: config 0 descriptor?? [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff2f86c4d0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f889efac46c) = -1 EINVAL (Invalid argument) [pid 3637] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f889efac47c) = 9 [pid 3637] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff2f86b4c0) = 0 [ 61.927250][ T3637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.983938][ C1] usb 1-1: RX USB error -71. [ 62.003942][ C1] usb 1-1: RX USB error -71. [ 62.023946][ C1] usb 1-1: RX USB error -71. [ 62.053945][ C1] usb 1-1: RX USB error -71. [ 62.083951][ C1] usb 1-1: RX USB error -71. [ 62.103973][ C1] usb 1-1: RX USB error -71. [ 62.123972][ C1] usb 1-1: RX USB error -71. [ 62.153990][ C1] usb 1-1: RX USB error -71. [ 62.183942][ C1] usb 1-1: RX USB error -71. [ 62.213978][ C1] usb 1-1: RX USB error -71. [ 62.234004][ C1] usb 1-1: RX USB error -71. [ 62.264036][ C1] usb 1-1: RX USB error -71. [ 62.294018][ C1] usb 1-1: RX USB error -71. [ 62.323947][ C1] usb 1-1: RX USB error -71. [ 62.353942][ C1] usb 1-1: RX USB error -71. [ 62.384017][ C1] usb 1-1: RX USB error -71. [ 62.413936][ C1] usb 1-1: RX USB error -71. [ 62.433974][ C1] usb 1-1: RX USB error -71. [ 62.453979][ C1] usb 1-1: RX USB error -71. [ 62.473954][ C1] usb 1-1: RX USB error -71. [ 62.503942][ C1] usb 1-1: RX USB error -71. [ 62.523955][ C1] usb 1-1: RX USB error -71. [ 62.553962][ C1] usb 1-1: RX USB error -71. [ 62.573970][ C1] usb 1-1: RX USB error -71. [ 62.603946][ C1] usb 1-1: RX USB error -71. [ 62.633939][ C1] usb 1-1: RX USB error -71. [ 62.663942][ C1] usb 1-1: RX USB error -71. [ 62.693941][ C1] usb 1-1: RX USB error -71. [ 62.723975][ C1] usb 1-1: RX USB error -71. [ 62.753964][ C1] usb 1-1: RX USB error -71. [ 62.783935][ C1] usb 1-1: RX USB error -71. [ 62.813941][ C1] usb 1-1: RX USB error -71. [ 62.843933][ C1] usb 1-1: RX USB error -71. [ 62.873944][ C1] usb 1-1: RX USB error -71. [ 62.903940][ C1] usb 1-1: RX USB error -71. [ 62.933936][ C1] usb 1-1: RX USB error -71. [ 62.963935][ C1] usb 1-1: RX USB error -71. [ 62.993953][ C1] usb 1-1: RX USB error -71. [ 63.023945][ C1] usb 1-1: RX USB error -71. [ 63.053957][ C1] usb 1-1: RX USB error -71. [ 63.083935][ C1] usb 1-1: RX USB error -71. [ 63.113973][ C1] usb 1-1: RX USB error -71. [ 63.143941][ C1] usb 1-1: RX USB error -71. [ 63.173930][ C1] usb 1-1: RX USB error -71. [ 63.203937][ C1] usb 1-1: RX USB error -71. [ 63.233936][ C1] usb 1-1: RX USB error -71. [ 63.263931][ C1] usb 1-1: RX USB error -71. [ 63.293980][ C1] usb 1-1: RX USB error -71. [ 63.323944][ C1] usb 1-1: RX USB error -71. [ 63.353934][ C1] usb 1-1: RX USB error -71. [ 63.383944][ C1] usb 1-1: RX USB error -71. [ 63.403938][ C1] usb 1-1: RX USB error -71. [ 63.423949][ C1] usb 1-1: RX USB error -71. [ 63.444000][ C1] usb 1-1: RX USB error -71. [ 63.463937][ C1] usb 1-1: RX USB error -71. [ 63.493984][ C1] usb 1-1: RX USB error -71. [ 63.523928][ C1] usb 1-1: RX USB error -71. [ 63.543932][ C1] usb 1-1: RX USB error -71. [ 63.574008][ C1] usb 1-1: RX USB error -71. [ 63.603947][ C1] usb 1-1: RX USB error -71. [ 63.623939][ C1] usb 1-1: RX USB error -71. [ 63.643929][ C1] usb 1-1: RX USB error -71. [ 63.673960][ C1] usb 1-1: RX USB error -71. [ 63.704010][ C1] usb 1-1: RX USB error -71. [ 63.733940][ C1] usb 1-1: RX USB error -71. [ 63.763972][ C1] usb 1-1: RX USB error -71. [ 63.793935][ C1] usb 1-1: RX USB error -71. [ 63.823942][ C1] usb 1-1: RX USB error -71. [ 63.853955][ C1] usb 1-1: RX USB error -71. [ 63.874010][ C1] usb 1-1: RX USB error -71. [ 63.903959][ C1] usb 1-1: RX USB error -71. [ 63.923967][ C1] usb 1-1: RX USB error -71. [ 63.953950][ C1] usb 1-1: RX USB error -71. [ 63.983956][ C1] usb 1-1: RX USB error -71. [ 64.013943][ C1] usb 1-1: RX USB error -71. [ 64.033947][ C1] usb 1-1: RX USB error -71. [ 64.038704][ T25] usb 1-1: timeout waiting for command 01 reply [ 64.045093][ T25] usb 1-1: could not initialize adapter [ 64.053983][ C1] usb 1-1: RX USB error -2. [ 64.058981][ C1] usb 1-1: error -1 when submitting rx urb [ 64.066172][ T25] ar5523: probe of 1-1:0.0 failed with error -110 [pid 3637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 3636] kill(-3637, SIGKILL) = 0 [pid 3637] <... ioctl resumed> ) = ? [pid 3636] kill(3637, SIGKILL [pid 3637] +++ killed by SIGKILL +++ <... kill resumed>) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3637, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555755d0) = 3642 ./strace-static-x86_64: Process 3642 attached [ 65.942379][ T3300] usb 1-1: USB disconnect, device number 2 [ 65.953923][ C1] ================================================================== [ 65.962009][ C1] BUG: KASAN: use-after-free in ar5523_cmd_tx_cb+0x224/0x240 [ 65.969388][ C1] Read of size 8 at addr ffff888020ecb450 by task swapper/1/0 [ 65.976826][ C1] [ 65.979136][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.0-rc5-syzkaller-00320-gb6e7fdfd6f6a #0 [ 65.988747][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.998796][ C1] Call Trace: [ 66.002058][ C1] [ 66.004890][ C1] dump_stack_lvl+0xd1/0x138 [ 66.009475][ C1] print_report+0x15e/0x461 [ 66.013967][ C1] ? __phys_addr+0xc8/0x140 [ 66.018458][ C1] ? ar5523_cmd_tx_cb+0x224/0x240 [ 66.023473][ C1] kasan_report+0xbf/0x1f0 [ 66.027876][ C1] ? ar5523_cmd_tx_cb+0x224/0x240 [ 66.032891][ C1] ar5523_cmd_tx_cb+0x224/0x240 [ 66.037734][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 66.043094][ C1] usb_hcd_giveback_urb+0x384/0x430 [ 66.048277][ C1] dummy_timer+0x1203/0x32d0 [ 66.052856][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 66.058830][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 66.063671][ C1] ? dummy_dequeue+0x500/0x500 [ 66.068428][ C1] call_timer_fn+0x1da/0x7c0 [ 66.073025][ C1] ? dummy_dequeue+0x500/0x500 [ 66.077779][ C1] ? timer_fixup_activate+0x3e0/0x3e0 [ 66.083134][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 66.087974][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.093158][ C1] ? dummy_dequeue+0x500/0x500 [ 66.097907][ C1] __run_timers.part.0+0x6a2/0xaf0 [ 66.103003][ C1] ? call_timer_fn+0x7c0/0x7c0 [ 66.107757][ C1] ? prepare_to_wait+0x380/0x380 [ 66.112693][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 66.117892][ C1] run_timer_softirq+0xb7/0x1d0 [ 66.122728][ C1] __do_softirq+0x1fb/0xadc [ 66.127221][ C1] __irq_exit_rcu+0x123/0x180 [ 66.131888][ C1] irq_exit_rcu+0x9/0x20 [ 66.136148][ C1] sysvec_apic_timer_interrupt+0x97/0xc0 [ 66.141773][ C1] [ 66.144691][ C1] [ 66.147606][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.153571][ C1] RIP: 0010:acpi_idle_do_entry+0x1fd/0x2a0 [ 66.159367][ C1] Code: 89 de e8 d6 08 8b f7 84 db 75 ac e8 5d 0c 8b f7 e8 e8 8c 91 f7 66 90 e8 51 0c 8b f7 0f 00 2d 4a 8f be 00 e8 45 0c 8b f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 00 09 8b f7 48 85 db [ 66.178956][ C1] RSP: 0018:ffffc9000037fd10 EFLAGS: 00000293 [ 66.185007][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.193048][ C1] RDX: ffff888012958180 RSI: ffffffff89f42fdb RDI: 0000000000000000 [ 66.201004][ C1] RBP: ffff888145a02864 R08: 0000000000000001 R09: 0000000000000001 [ 66.208959][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 66.216966][ C1] R13: ffff888145a02800 R14: ffff888145a02864 R15: ffff888146ad6004 [ 66.224923][ C1] ? acpi_idle_do_entry+0x1fb/0x2a0 [ 66.230136][ C1] acpi_idle_enter+0x368/0x510 [ 66.234887][ C1] cpuidle_enter_state+0x1af/0xd40 [ 66.239982][ C1] cpuidle_enter+0x4e/0xa0 [ 66.244380][ C1] do_idle+0x3f7/0x590 [ 66.248450][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 66.253479][ C1] cpu_startup_entry+0x18/0x20 [ 66.258246][ C1] start_secondary+0x256/0x300 [ 66.262997][ C1] ? set_cpu_sibling_map+0x24f0/0x24f0 [ 66.268441][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 66.274324][ C1] [ 66.277329][ C1] [ 66.279633][ C1] The buggy address belongs to the physical page: [ 66.286021][ C1] page:ffffea000083b2c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20ecb [ 66.296152][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 66.303254][ C1] raw: 00fff00000000000 0000000000000000 ffffffff00830101 0000000000000000 [ 66.311821][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 66.320384][ C1] page dumped because: kasan: bad access detected [ 66.326782][ C1] page_owner tracks the page as freed [ 66.332135][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x2800(GFP_NOWAIT|__GFP_NOWARN), pid 25, tgid 25 (kworker/1:1), ts 64072837958, free_ts 64072840490 [ 66.348704][ C1] get_page_from_freelist+0x10b5/0x2d50 [ 66.354241][ C1] __alloc_pages+0x1cb/0x5b0 [ 66.358819][ C1] alloc_pages+0x1aa/0x270 [ 66.363231][ C1] __stack_depot_save+0x3ed/0x560 [ 66.368250][ C1] kasan_save_stack+0x35/0x40 [ 66.372931][ C1] kasan_set_track+0x25/0x30 [ 66.377522][ C1] kasan_save_free_info+0x2b/0x40 [ 66.382542][ C1] ____kasan_slab_free+0x13b/0x1a0 [ 66.387660][ C1] kmem_cache_free+0x108/0x4c0 [ 66.392425][ C1] kernfs_put.part.0+0x2c4/0x540 [ 66.397351][ C1] kernfs_put+0x46/0x50 [ 66.401490][ C1] kernfs_remove_by_name_ns+0xbc/0x120 [ 66.406936][ C1] really_probe+0x4f7/0xb90 [ 66.411446][ C1] __driver_probe_device+0x1df/0x4d0 [ 66.416730][ C1] driver_probe_device+0x4c/0x1a0 [ 66.421768][ C1] __device_attach_driver+0x1d4/0x2e0 [ 66.427129][ C1] page last free stack trace: [ 66.431788][ C1] free_pcp_prepare+0x65c/0xd90 [ 66.436622][ C1] free_unref_page+0x1d/0x4d0 [ 66.441292][ C1] __stack_depot_save+0x16d/0x560 [ 66.446307][ C1] kasan_save_stack+0x35/0x40 [ 66.450993][ C1] kasan_set_track+0x25/0x30 [ 66.455587][ C1] kasan_save_free_info+0x2b/0x40 [ 66.460605][ C1] ____kasan_slab_free+0x13b/0x1a0 [ 66.465713][ C1] kmem_cache_free+0x108/0x4c0 [ 66.470483][ C1] kernfs_put.part.0+0x2c4/0x540 [ 66.476385][ C1] kernfs_put+0x46/0x50 [ 66.480538][ C1] kernfs_remove_by_name_ns+0xbc/0x120 [ 66.485985][ C1] really_probe+0x4f7/0xb90 [ 66.490481][ C1] __driver_probe_device+0x1df/0x4d0 [ 66.495789][ C1] driver_probe_device+0x4c/0x1a0 [ 66.500805][ C1] __device_attach_driver+0x1d4/0x2e0 [ 66.506156][ C1] bus_for_each_drv+0x163/0x1e0 [ 66.510994][ C1] [ 66.513303][ C1] Memory state around the buggy address: [ 66.518931][ C1] ffff888020ecb300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.527234][ C1] ffff888020ecb380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.535293][ C1] >ffff888020ecb400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.543331][ C1] ^ [ 66.549981][ C1] ffff888020ecb480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.558027][ C1] ffff888020ecb500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.566069][ C1] ================================================================== [ 66.574109][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 66.580678][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.0-rc5-syzkaller-00320-gb6e7fdfd6f6a #0 [ 66.590287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 66.600325][ C1] Call Trace: [ 66.603589][ C1] [ 66.606420][ C1] dump_stack_lvl+0xd1/0x138 [ 66.611001][ C1] panic+0x2cc/0x626 [ 66.614878][ C1] ? panic_print_sys_info.part.0+0x110/0x110 [ 66.620843][ C1] end_report.part.0+0x3f/0x7c [ 66.625593][ C1] ? ar5523_cmd_tx_cb+0x224/0x240 [ 66.630607][ C1] kasan_report.cold+0xa/0xf [ 66.635179][ C1] ? ar5523_cmd_tx_cb+0x224/0x240 [ 66.640193][ C1] ar5523_cmd_tx_cb+0x224/0x240 [ 66.645034][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 66.650415][ C1] usb_hcd_giveback_urb+0x384/0x430 [ 66.655609][ C1] dummy_timer+0x1203/0x32d0 [ 66.660204][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 66.666193][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 66.671041][ C1] ? dummy_dequeue+0x500/0x500 [ 66.675831][ C1] call_timer_fn+0x1da/0x7c0 [ 66.680436][ C1] ? dummy_dequeue+0x500/0x500 [ 66.685200][ C1] ? timer_fixup_activate+0x3e0/0x3e0 [ 66.690586][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 66.695445][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.700710][ C1] ? dummy_dequeue+0x500/0x500 [ 66.705648][ C1] __run_timers.part.0+0x6a2/0xaf0 [ 66.710748][ C1] ? call_timer_fn+0x7c0/0x7c0 [ 66.715506][ C1] ? prepare_to_wait+0x380/0x380 [ 66.720448][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 66.725645][ C1] run_timer_softirq+0xb7/0x1d0 [ 66.730487][ C1] __do_softirq+0x1fb/0xadc [ 66.734984][ C1] __irq_exit_rcu+0x123/0x180 [ 66.739671][ C1] irq_exit_rcu+0x9/0x20 [ 66.744156][ C1] sysvec_apic_timer_interrupt+0x97/0xc0 [ 66.749780][ C1] [ 66.752693][ C1] [ 66.755606][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.761570][ C1] RIP: 0010:acpi_idle_do_entry+0x1fd/0x2a0 [ 66.767367][ C1] Code: 89 de e8 d6 08 8b f7 84 db 75 ac e8 5d 0c 8b f7 e8 e8 8c 91 f7 66 90 e8 51 0c 8b f7 0f 00 2d 4a 8f be 00 e8 45 0c 8b f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 00 09 8b f7 48 85 db [ 66.786959][ C1] RSP: 0018:ffffc9000037fd10 EFLAGS: 00000293 [ 66.793010][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.800965][ C1] RDX: ffff888012958180 RSI: ffffffff89f42fdb RDI: 0000000000000000 [ 66.808938][ C1] RBP: ffff888145a02864 R08: 0000000000000001 R09: 0000000000000001 [ 66.816903][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 66.824865][ C1] R13: ffff888145a02800 R14: ffff888145a02864 R15: ffff888146ad6004 [ 66.832822][ C1] ? acpi_idle_do_entry+0x1fb/0x2a0 [ 66.838016][ C1] acpi_idle_enter+0x368/0x510 [ 66.842772][ C1] cpuidle_enter_state+0x1af/0xd40 [ 66.847876][ C1] cpuidle_enter+0x4e/0xa0 [ 66.852276][ C1] do_idle+0x3f7/0x590 [ 66.856505][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 66.861513][ C1] cpu_startup_entry+0x18/0x20 [ 66.866260][ C1] start_secondary+0x256/0x300 [ 66.871012][ C1] ? set_cpu_sibling_map+0x24f0/0x24f0 [ 66.876464][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 66.882347][ C1] [ 66.885422][ C1] Kernel Offset: disabled [ 66.889736][ C1] Rebooting in 86400 seconds..