./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1460354088 <...> DUID 00:04:48:2f:83:80:5e:82:2f:af:2e:03:8c:bf:d4:14:8e:03 forked to background, child pid 3180 [ 26.212473][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.220907][ T3181] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. execve("./syz-executor1460354088", ["./syz-executor1460354088"], 0x7ffc9dd6a9b0 /* 10 vars */) = 0 brk(NULL) = 0x5555559a2000 brk(0x5555559a2c40) = 0x5555559a2c40 arch_prctl(ARCH_SET_FS, 0x5555559a2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1460354088", 4096) = 28 brk(0x5555559c3c40) = 0x5555559c3c40 brk(0x5555559c4000) = 0x5555559c4000 mprotect(0x7f285361b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd11575ac0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 18 syzkaller login: [ 43.654401][ T3266] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 72 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd11574ab0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213ac) = 9 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213bc) = 10 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213cc) = 12 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213dc) = 11 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213ec) = 13 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f28536213fc) = 14 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 0 [ 44.174499][ T3266] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.174517][ T3266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.174526][ T3266] usb 1-1: Product: syz [ 44.174533][ T3266] usb 1-1: Manufacturer: syz [ 44.174540][ T3266] usb 1-1: SerialNumber: syz ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 [ 44.227023][ T3266] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 1856 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd11575ac0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd11574ab0) = 0 [ 44.834391][ T3266] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 [ 45.894344][ T3266] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 45.894651][ T3266] ath9k_htc: Failed to initialize the device ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd11575b00) = 32 [ 46.054292][ C0] ================================================================== [ 46.054307][ C0] BUG: KASAN: slab-out-of-bounds in ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.054347][ C0] Read of size 4 at addr ffff888026a84374 by task swapper/0/0 [ 46.054358][ C0] [ 46.054362][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.18.0-syzkaller-10037-g7e284070abe5 #0 [ 46.054377][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.054385][ C0] Call Trace: [ 46.054391][ C0] [ 46.054397][ C0] dump_stack_lvl+0x1e3/0x2cb [ 46.054421][ C0] ? bfq_pos_tree_add_move+0x436/0x436 [ 46.054435][ C0] ? _printk+0xcf/0x10f [ 46.054450][ C0] ? __wake_up_klogd+0xd6/0x100 [ 46.054462][ C0] ? __wake_up_klogd+0xcd/0x100 [ 46.054470][ C0] ? panic+0x76e/0x76e [ 46.054479][ C0] ? _printk+0xcf/0x10f [ 46.054488][ C0] print_address_description+0x65/0x4b0 [ 46.054500][ C0] print_report+0xf4/0x210 [ 46.054508][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 46.054517][ C0] ? do_raw_spin_lock+0x148/0x360 [ 46.054527][ C0] ? ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.054536][ C0] kasan_report+0xfb/0x130 [ 46.054545][ C0] ? ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.054554][ C0] ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.054564][ C0] ? do_raw_spin_lock+0x148/0x360 [ 46.054573][ C0] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 46.054586][ C0] __usb_hcd_giveback_urb+0x369/0x530 [ 46.054600][ C0] dummy_timer+0x86b/0x3110 [ 46.054622][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054630][ C0] ? trace_lock_release+0x7a/0x190 [ 46.054641][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054649][ C0] call_timer_fn+0xf5/0x210 [ 46.054657][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054665][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054673][ C0] ? __run_timers+0x980/0x980 [ 46.054682][ C0] ? do_raw_spin_unlock+0x134/0x8a0 [ 46.054691][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054699][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 46.054709][ C0] ? lockdep_hardirqs_on+0x95/0x140 [ 46.054719][ C0] ? dummy_free_streams+0x320/0x320 [ 46.054728][ C0] __run_timers+0x76a/0x980 [ 46.054739][ C0] ? trace_timer_cancel+0x210/0x210 [ 46.054750][ C0] run_timer_softirq+0x63/0xf0 [ 46.054761][ C0] __do_softirq+0x382/0x793 [ 46.054771][ C0] ? __irq_exit_rcu+0xec/0x170 [ 46.054781][ C0] ? __entry_text_end+0x1fec88/0x1fec88 [ 46.054793][ C0] __irq_exit_rcu+0xec/0x170 [ 46.054801][ C0] ? irq_exit_rcu+0x20/0x20 [ 46.054811][ C0] irq_exit_rcu+0x5/0x20 [ 46.054818][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 46.054827][ C0] [ 46.054830][ C0] [ 46.054832][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 46.054842][ C0] RIP: 0010:acpi_idle_enter+0x43d/0x7c0 [ 46.054854][ C0] Code: ff e8 f7 f7 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 21 01 00 00 e8 23 9a fb fc eb 0c e8 1c f3 f4 fc 0f 00 2d 95 e8 62 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 4d c4 47 fd [ 46.054861][ C0] RSP: 0018:ffffffff8c807ba0 EFLAGS: 00000286 [ 46.054871][ C0] RAX: d9e1d6cf7137a300 RBX: 0000000000000000 RCX: ffffffff90bc3603 [ 46.054878][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8d2180 RDI: ffffffff8ae99260 [ 46.054884][ C0] RBP: ffffffff8c807c50 R08: ffffffff818e1610 R09: fffffbfff1917701 [ 46.054890][ C0] R10: fffffbfff1917701 R11: 1ffffffff1917700 R12: ffffffff8c807be0 [ 46.054896][ C0] R13: dffffc0000000000 R14: ffff888016ceb800 R15: 0000000000000001 [ 46.054904][ C0] ? trace_hardirqs_on+0x30/0x80 [ 46.054917][ C0] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 46.054928][ C0] cpuidle_enter_state+0x517/0xed0 [ 46.054941][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 46.054958][ C0] cpuidle_enter+0x59/0x90 [ 46.054968][ C0] do_idle+0x3d2/0x640 [ 46.054978][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 46.054987][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 46.054999][ C0] cpu_startup_entry+0x15/0x20 [ 46.055007][ C0] rest_init+0x24f/0x270 [ 46.055015][ C0] ? time_init+0x33/0x33 [ 46.055024][ C0] arch_call_rest_init+0xa/0xa [ 46.055035][ C0] start_kernel+0x4ac/0x55b [ 46.055045][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 46.055059][ C0] [ 46.055062][ C0] [ 46.055064][ C0] Allocated by task 0: [ 46.055068][ C0] (stack is not available) [ 46.055070][ C0] [ 46.055071][ C0] The buggy address belongs to the object at ffff888026a84000 [ 46.055071][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 46.055078][ C0] The buggy address is located 884 bytes inside of [ 46.055078][ C0] 4096-byte region [ffff888026a84000, ffff888026a85000) [ 46.055086][ C0] [ 46.055088][ C0] The buggy address belongs to the physical page: [ 46.055094][ C0] page:ffffea00009aa000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26a80 [ 46.055103][ C0] head:ffffea00009aa000 order:3 compound_mapcount:0 compound_pincount:0 [ 46.055110][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 46.055124][ C0] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888011442140 [ 46.055131][ C0] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 46.055135][ C0] page dumped because: kasan: bad access detected [ 46.055139][ C0] page_owner tracks the page as allocated [ 46.055142][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2952, tgid 2952 (syslogd), ts 45904957462, free_ts 45894622294 [ 46.055157][ C0] get_page_from_freelist+0x72b/0x7a0 [ 46.055168][ C0] __alloc_pages+0x259/0x560 [ 46.055175][ C0] alloc_slab_page+0x70/0xf0 [ 46.055182][ C0] allocate_slab+0x5e/0x520 [ 46.055189][ C0] ___slab_alloc+0x41e/0xcd0 [ 46.055195][ C0] __kmalloc+0x2ba/0x370 [ 46.055201][ C0] tomoyo_realpath_from_path+0xd8/0x5f0 [ 46.055218][ C0] tomoyo_path_perm+0x270/0x6b0 [ 46.055226][ C0] security_inode_getattr+0xc0/0x140 [ 46.055235][ C0] vfs_getattr+0x26/0x360 [ 46.055244][ C0] vfs_statx+0x183/0x3f0 [ 46.055252][ C0] __se_sys_newfstatat+0xf6/0x790 [ 46.055259][ C0] do_syscall_64+0x2b/0x70 [ 46.055266][ C0] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 46.055275][ C0] page last free stack trace: [ 46.055278][ C0] free_pcp_prepare+0x812/0x900 [ 46.055288][ C0] free_unref_page+0x7d/0x390 [ 46.055294][ C0] free_large_kmalloc+0xeb/0x1a0 [ 46.055301][ C0] kfree+0x188/0x210 [ 46.055307][ C0] device_release+0x98/0x1c0 [ 46.055315][ C0] kobject_cleanup+0x235/0x470 [ 46.055325][ C0] ath9k_htc_probe_device+0xfe8/0x2090 [ 46.055334][ C0] ath9k_htc_hw_init+0x30/0x70 [ 46.055340][ C0] ath9k_hif_usb_firmware_cb+0x250/0x4e0 [ 46.055347][ C0] request_firmware_work_func+0x198/0x270 [ 46.055356][ C0] process_one_work+0x81c/0xd10 [ 46.055364][ C0] worker_thread+0xb14/0x1330 [ 46.055372][ C0] kthread+0x266/0x300 [ 46.055379][ C0] ret_from_fork+0x1f/0x30 [ 46.055387][ C0] [ 46.055388][ C0] Memory state around the buggy address: [ 46.055392][ C0] ffff888026a84200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.055398][ C0] ffff888026a84280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.055403][ C0] >ffff888026a84300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.055406][ C0] ^ [ 46.055411][ C0] ffff888026a84380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.055415][ C0] ffff888026a84400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.055419][ C0] ================================================================== [ 46.055423][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 46.800652][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.18.0-syzkaller-10037-g7e284070abe5 #0 [ 46.810513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.820558][ C0] Call Trace: [ 46.823832][ C0] [ 46.826665][ C0] dump_stack_lvl+0x1e3/0x2cb [ 46.831338][ C0] ? bfq_pos_tree_add_move+0x436/0x436 [ 46.836780][ C0] ? panic+0x76e/0x76e [ 46.840833][ C0] ? vscnprintf+0x59/0x80 [ 46.845146][ C0] panic+0x312/0x76e [ 46.849024][ C0] ? fb_is_primary_device+0xcc/0xcc [ 46.854213][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 46.860105][ C0] ? ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.865551][ C0] end_report+0x91/0xa0 [ 46.869695][ C0] kasan_report+0x108/0x130 [ 46.874191][ C0] ? ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.879644][ C0] ath9k_hif_usb_rx_cb+0x1120/0x1130 [ 46.884916][ C0] ? do_raw_spin_lock+0x148/0x360 [ 46.890119][ C0] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 46.895828][ C0] __usb_hcd_giveback_urb+0x369/0x530 [ 46.901202][ C0] dummy_timer+0x86b/0x3110 [ 46.905714][ C0] ? dummy_free_streams+0x320/0x320 [ 46.910892][ C0] ? trace_lock_release+0x7a/0x190 [ 46.916083][ C0] ? dummy_free_streams+0x320/0x320 [ 46.921264][ C0] call_timer_fn+0xf5/0x210 [ 46.925751][ C0] ? dummy_free_streams+0x320/0x320 [ 46.931064][ C0] ? dummy_free_streams+0x320/0x320 [ 46.936282][ C0] ? __run_timers+0x980/0x980 [ 46.940949][ C0] ? do_raw_spin_unlock+0x134/0x8a0 [ 46.946220][ C0] ? dummy_free_streams+0x320/0x320 [ 46.951412][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 46.956682][ C0] ? lockdep_hardirqs_on+0x95/0x140 [ 46.961981][ C0] ? dummy_free_streams+0x320/0x320 [ 46.967164][ C0] __run_timers+0x76a/0x980 [ 46.971656][ C0] ? trace_timer_cancel+0x210/0x210 [ 46.976840][ C0] run_timer_softirq+0x63/0xf0 [ 46.981593][ C0] __do_softirq+0x382/0x793 [ 46.986087][ C0] ? __irq_exit_rcu+0xec/0x170 [ 46.990843][ C0] ? __entry_text_end+0x1fec88/0x1fec88 [ 46.996474][ C0] __irq_exit_rcu+0xec/0x170 [ 47.001048][ C0] ? irq_exit_rcu+0x20/0x20 [ 47.005538][ C0] irq_exit_rcu+0x5/0x20 [ 47.009765][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 47.015385][ C0] [ 47.018313][ C0] [ 47.021333][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 47.027391][ C0] RIP: 0010:acpi_idle_enter+0x43d/0x7c0 [ 47.032925][ C0] Code: ff e8 f7 f7 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 21 01 00 00 e8 23 9a fb fc eb 0c e8 1c f3 f4 fc 0f 00 2d 95 e8 62 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 4d c4 47 fd [ 47.052518][ C0] RSP: 0018:ffffffff8c807ba0 EFLAGS: 00000286 [ 47.058572][ C0] RAX: d9e1d6cf7137a300 RBX: 0000000000000000 RCX: ffffffff90bc3603 [ 47.066616][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8d2180 RDI: ffffffff8ae99260 [ 47.074579][ C0] RBP: ffffffff8c807c50 R08: ffffffff818e1610 R09: fffffbfff1917701 [ 47.082536][ C0] R10: fffffbfff1917701 R11: 1ffffffff1917700 R12: ffffffff8c807be0 [ 47.090514][ C0] R13: dffffc0000000000 R14: ffff888016ceb800 R15: 0000000000000001 [ 47.098573][ C0] ? trace_hardirqs_on+0x30/0x80 [ 47.103508][ C0] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 47.108611][ C0] cpuidle_enter_state+0x517/0xed0 [ 47.113711][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 47.119072][ C0] cpuidle_enter+0x59/0x90 [ 47.123485][ C0] do_idle+0x3d2/0x640 [ 47.127552][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 47.132829][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 47.138814][ C0] cpu_startup_entry+0x15/0x20 [ 47.143580][ C0] rest_init+0x24f/0x270 [ 47.147809][ C0] ? time_init+0x33/0x33 [ 47.152040][ C0] arch_call_rest_init+0xa/0xa [ 47.156793][ C0] start_kernel+0x4ac/0x55b [ 47.161287][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 47.167206][ C0] [ 47.170626][ C0] Kernel Offset: disabled [ 47.174958][ C0] Rebooting in 86400 seconds..