./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2156244098 <...> [ 25.898143][ T3184] dhcpcd-run-hook (3184) used greatest stack depth: 22432 bytes left forked to background, child pid 3180 [ 27.383905][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.397904][ T3181] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. execve("./syz-executor2156244098", ["./syz-executor2156244098"], 0x7fffffa4ccc0 /* 10 vars */) = 0 brk(NULL) = 0x555556e90000 brk(0x555556e90c40) = 0x555556e90c40 arch_prctl(ARCH_SET_FS, 0x555556e90300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2156244098", 4096) = 28 brk(0x555556eb1c40) = 0x555556eb1c40 brk(0x555556eb2000) = 0x555556eb2000 mprotect(0x7f35ffc5d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff22a3cfe0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 18 syzkaller login: [ 44.691783][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 72 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff22a3bfd0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633ac) = 9 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633bc) = 10 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633cc) = 12 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633dc) = 11 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633ec) = 13 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f35ffc633fc) = 14 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 0 [ 45.212495][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 45.221757][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.229747][ T26] usb 1-1: Product: syz [ 45.233945][ T26] usb 1-1: Manufacturer: syz [ 45.238538][ T26] usb 1-1: SerialNumber: syz ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 [ 45.294985][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 1856 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff22a3cfe0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff22a3bfd0) = 0 [ 45.881939][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 46.101901][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 46.301959][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 46.501789][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 46.701845][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 46.901779][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 46.941762][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 46.948894][ T26] ath9k_htc: Failed to initialize the device ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7fff22a3d020) = 44 [ 47.101692][ C1] ================================================================== [ 47.109769][ C1] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.117507][ C1] Read of size 4 at addr ffff888078ccc448 by task swapper/1/0 [ 47.124950][ C1] [ 47.127259][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 47.136438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 47.146477][ C1] Call Trace: [ 47.149766][ C1] [ 47.152598][ C1] dump_stack_lvl+0xcd/0x134 [ 47.157197][ C1] print_report.cold+0x2ba/0x719 [ 47.162142][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.167497][ C1] kasan_report+0xbe/0x1f0 [ 47.171989][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.177341][ C1] ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.182522][ C1] ? perf_trace_contention_begin+0x360/0x3a0 [ 47.188507][ C1] ? hif_usb_start+0xa0/0xa0 [ 47.193078][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 47.198006][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 47.203368][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 47.208554][ C1] dummy_timer+0x11ff/0x32c0 [ 47.213135][ C1] ? dummy_dequeue+0x500/0x500 [ 47.217880][ C1] ? dummy_dequeue+0x500/0x500 [ 47.222624][ C1] call_timer_fn+0x1a0/0x6b0 [ 47.227232][ C1] ? timer_fixup_activate+0x350/0x350 [ 47.232603][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 47.237455][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.242656][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.247849][ C1] ? dummy_dequeue+0x500/0x500 [ 47.252604][ C1] __run_timers.part.0+0x674/0xa80 [ 47.257717][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 47.262475][ C1] ? set_next_task_stop+0x140/0x140 [ 47.267672][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 47.272866][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 47.277709][ C1] run_timer_softirq+0xb3/0x1d0 [ 47.282569][ C1] __do_softirq+0x29b/0x9c2 [ 47.287063][ C1] __irq_exit_rcu+0x123/0x180 [ 47.291732][ C1] irq_exit_rcu+0x5/0x20 [ 47.295989][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 47.301622][ C1] [ 47.304547][ C1] [ 47.307476][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 47.313445][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240 [ 47.319253][ C1] Code: 89 de e8 9a 7a fe f7 84 db 75 98 e8 01 7e fe f7 e8 ec cc 04 f8 66 90 e8 f5 7d fe f7 0f 00 2d 7e 28 b8 00 e8 e9 7d fe f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 7a fe f7 48 85 db [ 47.338859][ C1] RSP: 0018:ffffc90000177d20 EFLAGS: 00000293 [ 47.344910][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 47.352865][ C1] RDX: ffff888011aa1d40 RSI: ffffffff897c3927 RDI: 0000000000000000 [ 47.360820][ C1] RBP: ffff888145ae1864 R08: 0000000000000001 R09: 0000000000000001 [ 47.368772][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 47.376726][ C1] R13: ffff888145ae1800 R14: ffff888145ae1864 R15: ffff888017d96004 [ 47.384771][ C1] ? acpi_idle_do_entry+0x1c7/0x240 [ 47.389979][ C1] acpi_idle_enter+0x364/0x500 [ 47.394754][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 47.399883][ C1] cpuidle_enter+0x4a/0xa0 [ 47.404293][ C1] do_idle+0x3e8/0x590 [ 47.408358][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 47.413369][ C1] ? _raw_spin_unlock_irq+0x11/0x40 [ 47.418562][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 47.423750][ C1] cpu_startup_entry+0x14/0x20 [ 47.428501][ C1] start_secondary+0x21d/0x2b0 [ 47.433254][ C1] ? set_cpu_sibling_map+0x1ef0/0x1ef0 [ 47.438705][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 47.444599][ C1] [ 47.447602][ C1] [ 47.449909][ C1] The buggy address belongs to the physical page: [ 47.456318][ C1] page:ffffea0001e33300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x78ccc [ 47.466448][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 47.473555][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 47.482120][ C1] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 47.490679][ C1] page dumped because: kasan: bad access detected [ 47.497073][ C1] page_owner tracks the page as freed [ 47.502434][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 26, tgid 26 (kworker/1:1), ts 45893434366, free_ts 46948871196 [ 47.519949][ C1] get_page_from_freelist+0x210d/0x3a30 [ 47.525486][ C1] __alloc_pages+0x1c7/0x510 [ 47.530060][ C1] alloc_pages+0x1aa/0x310 [ 47.534573][ C1] kmalloc_order+0x34/0xf0 [ 47.538988][ C1] kmalloc_order_trace+0x13/0x120 [ 47.544010][ C1] wiphy_new_nm+0x6fc/0x2090 [ 47.548603][ C1] ieee80211_alloc_hw_nm+0x428/0x2330 [ 47.553973][ C1] ath9k_htc_probe_device+0x97/0x1f00 [ 47.559335][ C1] ath9k_htc_hw_init+0x31/0x60 [ 47.564077][ C1] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 47.569710][ C1] request_firmware_work_func+0x12c/0x230 [ 47.575433][ C1] process_one_work+0x991/0x1610 [ 47.580369][ C1] worker_thread+0x665/0x1080 [ 47.585028][ C1] kthread+0x2e9/0x3a0 [ 47.589078][ C1] ret_from_fork+0x1f/0x30 [ 47.593479][ C1] page last free stack trace: [ 47.598128][ C1] free_pcp_prepare+0x5e4/0xd20 [ 47.602960][ C1] free_unref_page+0x19/0x4d0 [ 47.607617][ C1] device_release+0x9f/0x240 [ 47.612199][ C1] kobject_put+0x1be/0x4c0 [ 47.616596][ C1] put_device+0x1b/0x30 [ 47.620731][ C1] ath9k_htc_probe_device+0x1c7/0x1f00 [ 47.626172][ C1] ath9k_htc_hw_init+0x31/0x60 [ 47.630918][ C1] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 47.636531][ C1] request_firmware_work_func+0x12c/0x230 [ 47.642251][ C1] process_one_work+0x991/0x1610 [ 47.647172][ C1] worker_thread+0x665/0x1080 [ 47.651830][ C1] kthread+0x2e9/0x3a0 [ 47.655880][ C1] ret_from_fork+0x1f/0x30 [ 47.660280][ C1] [ 47.662582][ C1] Memory state around the buggy address: [ 47.668189][ C1] ffff888078ccc300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.676230][ C1] ffff888078ccc380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.684268][ C1] >ffff888078ccc400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.692305][ C1] ^ [ 47.698691][ C1] ffff888078ccc480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.706735][ C1] ffff888078ccc500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.714783][ C1] ================================================================== [ 47.722821][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 47.729384][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 47.738581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 47.748619][ C1] Call Trace: [ 47.751896][ C1] [ 47.754724][ C1] dump_stack_lvl+0xcd/0x134 [ 47.759394][ C1] panic+0x2d7/0x636 [ 47.763285][ C1] ? panic_print_sys_info.part.0+0x10b/0x10b [ 47.769254][ C1] ? print_report.cold+0x4f6/0x719 [ 47.774357][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.779710][ C1] end_report.part.0+0x3f/0x7c [ 47.784461][ C1] kasan_report.cold+0x8/0x12 [ 47.789128][ C1] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.794484][ C1] ath9k_hif_usb_rx_cb+0xea7/0x10d0 [ 47.799665][ C1] ? perf_trace_contention_begin+0x360/0x3a0 [ 47.805639][ C1] ? hif_usb_start+0xa0/0xa0 [ 47.810212][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 47.815141][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 47.820502][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 47.825692][ C1] dummy_timer+0x11ff/0x32c0 [ 47.830272][ C1] ? dummy_dequeue+0x500/0x500 [ 47.835021][ C1] ? dummy_dequeue+0x500/0x500 [ 47.839765][ C1] call_timer_fn+0x1a0/0x6b0 [ 47.844340][ C1] ? timer_fixup_activate+0x350/0x350 [ 47.849702][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 47.854537][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.859723][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.864910][ C1] ? dummy_dequeue+0x500/0x500 [ 47.869656][ C1] __run_timers.part.0+0x674/0xa80 [ 47.874755][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 47.879514][ C1] ? set_next_task_stop+0x140/0x140 [ 47.884694][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 47.889876][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 47.894708][ C1] run_timer_softirq+0xb3/0x1d0 [ 47.899544][ C1] __do_softirq+0x29b/0x9c2 [ 47.904047][ C1] __irq_exit_rcu+0x123/0x180 [ 47.908706][ C1] irq_exit_rcu+0x5/0x20 [ 47.912930][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 47.918555][ C1] [ 47.921468][ C1] [ 47.924380][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 47.930348][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240 [ 47.936142][ C1] Code: 89 de e8 9a 7a fe f7 84 db 75 98 e8 01 7e fe f7 e8 ec cc 04 f8 66 90 e8 f5 7d fe f7 0f 00 2d 7e 28 b8 00 e8 e9 7d fe f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 7a fe f7 48 85 db [ 47.955731][ C1] RSP: 0018:ffffc90000177d20 EFLAGS: 00000293 [ 47.961800][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 47.969751][ C1] RDX: ffff888011aa1d40 RSI: ffffffff897c3927 RDI: 0000000000000000 [ 47.977704][ C1] RBP: ffff888145ae1864 R08: 0000000000000001 R09: 0000000000000001 [ 47.985656][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 47.993607][ C1] R13: ffff888145ae1800 R14: ffff888145ae1864 R15: ffff888017d96004 [ 48.001561][ C1] ? acpi_idle_do_entry+0x1c7/0x240 [ 48.006756][ C1] acpi_idle_enter+0x364/0x500 [ 48.011507][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 48.016608][ C1] cpuidle_enter+0x4a/0xa0 [ 48.021009][ C1] do_idle+0x3e8/0x590 [ 48.025064][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 48.030074][ C1] ? _raw_spin_unlock_irq+0x11/0x40 [ 48.035261][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 48.040447][ C1] cpu_startup_entry+0x14/0x20 [ 48.045195][ C1] start_secondary+0x21d/0x2b0 [ 48.049949][ C1] ? set_cpu_sibling_map+0x1ef0/0x1ef0 [ 48.055401][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 48.061286][ C1] [ 48.064465][ C1] Kernel Offset: disabled [ 48.068780][ C1] Rebooting in 86400 seconds..