./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2407242926 <...> [ 30.489150][ T4675] dhcpcd-run-hook (4675) used greatest stack depth: 22320 bytes left forked to background, child pid 4671 [ 32.002257][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.012471][ T4672] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. execve("./syz-executor2407242926", ["./syz-executor2407242926"], 0x7fffc9070d60 /* 10 vars */) = 0 brk(NULL) = 0x55555634f000 brk(0x55555634fc40) = 0x55555634fc40 arch_prctl(ARCH_SET_FS, 0x55555634f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2407242926", 4096) = 28 brk(0x555556370c40) = 0x555556370c40 brk(0x555556371000) = 0x555556371000 mprotect(0x7f15d478e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5002 mkdir("./syzkaller.C2gcHq", 0700) = 0 chmod("./syzkaller.C2gcHq", 0777) = 0 chdir("./syzkaller.C2gcHq") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555634f5d0) = 5003 ./strace-static-x86_64: Process 5003 attached [pid 5003] chdir("./0") = 0 [pid 5003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] setpgid(0, 0) = 0 [pid 5003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5003] write(3, "1000", 4) = 4 [pid 5003] close(3) = 0 [pid 5003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] memfd_create("syzkaller", 0) = 3 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15cc2d2000 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5003] munmap(0x7f15cc2d2000, 1048576) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5003] close(3) = 0 [pid 5003] mkdir("./file0", 0777) = 0 syzkaller login: [ 57.406716][ T5003] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5003 'syz-executor240' [ 57.433953][ T5003] loop0: detected capacity change from 0 to 2048 [pid 5003] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_NODIRATIME, "") = 0 [pid 5003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] chdir("./file0") = 0 [pid 5003] ioctl(4, LOOP_CLR_FD) = 0 [pid 5003] close(4) = 0 [pid 5003] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5003] mkdirat(4, "./bus", 000) = 0 [pid 5003] renameat2(4, "./file0", 4, "./bus", 0) = 0 [pid 5003] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5003] fcntl(5, F_SETFL, O_RDONLY|O_NOFOLLOW|O_DIRECTORY) = 0 [pid 5003] dup(5) = 6 [pid 5003] pwritev2(6, [{iov_base="\xda\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=131072}], 1, 16777216, 0) = 131072 [ 57.454043][ T5005] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] sendfile(6, 5, NULL, 142606240) = 16908288 [pid 5003] exit_group(0) = ? [pid 5003] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5003, si_uid=0, si_status=0, si_utime=0, si_stime=182 /* 1.82 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556350620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 59.500424][ T5002] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 64.511304][ C0] ================================================================== [ 64.519419][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x41b9/0x5f30 [ 64.527234][ C0] Read of size 8 at addr ffff888027246340 by task swapper/0/0 [ 64.534682][ C0] [ 64.536994][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 64.546180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 64.556241][ C0] Call Trace: [ 64.559522][ C0] [ 64.562372][ C0] dump_stack_lvl+0xd9/0x150 [ 64.566980][ C0] print_address_description.constprop.0+0x2c/0x3c0 [ 64.573559][ C0] ? __lock_acquire+0x41b9/0x5f30 [ 64.578575][ C0] kasan_report+0x11c/0x130 [ 64.583063][ C0] ? __lock_acquire+0x41b9/0x5f30 [ 64.588076][ C0] __lock_acquire+0x41b9/0x5f30 [ 64.592927][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 64.598893][ C0] ? lockdep_unlock+0x11b/0x290 [ 64.603734][ C0] ? __lock_acquire+0x28bf/0x5f30 [ 64.608745][ C0] lock_acquire.part.0+0x11c/0x370 [ 64.613844][ C0] ? try_to_wake_up+0xab/0x1a50 [ 64.618680][ C0] ? lock_sync+0x190/0x190 [ 64.623086][ C0] ? rcu_is_watching+0x12/0xb0 [ 64.627835][ C0] ? trace_lock_acquire+0x12d/0x180 [ 64.633014][ C0] ? __lock_acquire+0x1987/0x5f30 [ 64.638024][ C0] ? try_to_wake_up+0xab/0x1a50 [ 64.642859][ C0] ? lock_acquire+0x32/0xc0 [ 64.647350][ C0] ? try_to_wake_up+0xab/0x1a50 [ 64.652183][ C0] _raw_spin_lock_irqsave+0x3d/0x60 [ 64.657373][ C0] ? try_to_wake_up+0xab/0x1a50 [ 64.662296][ C0] try_to_wake_up+0xab/0x1a50 [ 64.667131][ C0] ? lock_sync+0x190/0x190 [ 64.671534][ C0] ? rcu_is_watching+0x12/0xb0 [ 64.676282][ C0] ? sched_ttwu_pending+0x550/0x550 [ 64.681554][ C0] ? call_timer_fn+0xd5/0x580 [ 64.686219][ C0] ? lock_acquire+0x32/0xc0 [ 64.690711][ C0] ? call_timer_fn+0xd5/0x580 [ 64.695372][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 64.701430][ C0] call_timer_fn+0x1a0/0x580 [ 64.706004][ C0] ? enqueue_timer+0x520/0x520 [ 64.710749][ C0] ? lock_downgrade+0x690/0x690 [ 64.715675][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 64.721734][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.726922][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 64.732976][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 64.739031][ C0] expire_timers+0x234/0x330 [ 64.743783][ C0] run_timer_softirq+0x326/0x910 [ 64.748707][ C0] ? expire_timers+0x330/0x330 [ 64.753462][ C0] ? kvm_clock_read+0x14/0x30 [ 64.758127][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 64.763311][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 64.768165][ C0] ? tick_program_event+0xb8/0x140 [ 64.773297][ C0] __do_softirq+0x1d4/0x905 [ 64.777811][ C0] irq_exit_rcu+0xb7/0x120 [ 64.782234][ C0] sysvec_apic_timer_interrupt+0x97/0xc0 [ 64.787882][ C0] [ 64.790804][ C0] [ 64.793728][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 64.799707][ C0] RIP: 0010:acpi_safe_halt+0x40/0x50 [ 64.804979][ C0] Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 66 90 0f 1f 44 00 00 0f 00 2d 57 4e a1 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f [ 64.824570][ C0] RSP: 0018:ffffffff8c407d18 EFLAGS: 00000246 [ 64.830618][ C0] RAX: ffffffff8c495780 RBX: 0000000000000000 RCX: ffffffff8a10cd15 [ 64.838575][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.846532][ C0] RBP: ffff8880146fa864 R08: 0000000000000001 R09: ffffed1017306d9d [ 64.854487][ C0] R10: ffff8880b9836ceb R11: 0000000000000000 R12: 0000000000000001 [ 64.862442][ C0] R13: ffff8880146fa800 R14: ffff8880146fa864 R15: 0000000000000000 [ 64.870398][ C0] ? ct_kernel_exit+0x1d5/0x240 [ 64.875239][ C0] acpi_idle_do_entry+0x53/0x70 [ 64.880075][ C0] acpi_idle_enter+0x173/0x290 [ 64.884845][ C0] ? cpuidle_enter+0x4e/0xa0 [ 64.889419][ C0] cpuidle_enter_state+0xd3/0x6f0 [ 64.894433][ C0] cpuidle_enter+0x4e/0xa0 [ 64.898834][ C0] do_idle+0x2fe/0x3c0 [ 64.902888][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 64.907897][ C0] cpu_startup_entry+0x18/0x20 [ 64.912646][ C0] rest_init+0x16f/0x2b0 [ 64.916875][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 64.922932][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 64.929338][ C0] arch_call_rest_init+0x13/0x30 [ 64.934260][ C0] start_kernel+0x3b6/0x490 [ 64.938747][ C0] x86_64_start_reservations+0x18/0x30 [ 64.944194][ C0] x86_64_start_kernel+0xb3/0xc0 [ 64.949123][ C0] secondary_startup_64_no_verify+0xf4/0xfb [ 64.955007][ C0] [ 64.958007][ C0] [ 64.960311][ C0] Allocated by task 2: [ 64.964356][ C0] kasan_save_stack+0x22/0x40 [ 64.969095][ C0] kasan_set_track+0x25/0x30 [ 64.973695][ C0] __kasan_slab_alloc+0x7f/0x90 [ 64.978533][ C0] kmem_cache_alloc_node+0x185/0x3e0 [ 64.983826][ C0] copy_process+0x3c0/0x7600 [ 64.988439][ C0] kernel_clone+0xeb/0x890 [ 64.992877][ C0] kernel_thread+0xc0/0x100 [ 64.997377][ C0] kthreadd+0x50c/0x790 [ 65.001575][ C0] ret_from_fork+0x1f/0x30 [ 65.006082][ C0] [ 65.008436][ C0] Freed by task 0: [ 65.012139][ C0] kasan_save_stack+0x22/0x40 [ 65.016823][ C0] kasan_set_track+0x25/0x30 [ 65.021415][ C0] kasan_save_free_info+0x2e/0x40 [ 65.026441][ C0] ____kasan_slab_free+0x160/0x1c0 [ 65.031725][ C0] slab_free_freelist_hook+0x8b/0x1c0 [ 65.037100][ C0] kmem_cache_free+0xe9/0x480 [ 65.041853][ C0] delayed_put_task_struct+0x1f5/0x280 [ 65.047301][ C0] rcu_core+0x802/0x1bc0 [ 65.051529][ C0] __do_softirq+0x1d4/0x905 [ 65.056021][ C0] [ 65.058328][ C0] Last potentially related work creation: [ 65.064032][ C0] kasan_save_stack+0x22/0x40 [ 65.068690][ C0] __kasan_record_aux_stack+0xbc/0xd0 [ 65.074045][ C0] __call_rcu_common.constprop.0+0x99/0x790 [ 65.079923][ C0] put_task_struct_rcu_user+0x87/0xc0 [ 65.085282][ C0] __schedule+0x1d1d/0x5790 [ 65.089768][ C0] schedule_idle+0x5b/0x80 [ 65.094190][ C0] do_idle+0x273/0x3c0 [ 65.098272][ C0] cpu_startup_entry+0x18/0x20 [ 65.103061][ C0] start_secondary+0x221/0x2b0 [ 65.107821][ C0] secondary_startup_64_no_verify+0xf4/0xfb [ 65.113793][ C0] [ 65.116099][ C0] Second to last potentially related work creation: [ 65.122660][ C0] kasan_save_stack+0x22/0x40 [ 65.127319][ C0] __kasan_record_aux_stack+0xbc/0xd0 [ 65.132673][ C0] __call_rcu_common.constprop.0+0x99/0x790 [ 65.138549][ C0] put_task_struct_rcu_user+0x87/0xc0 [ 65.143905][ C0] __schedule+0x1d1d/0x5790 [ 65.148391][ C0] schedule_idle+0x5b/0x80 [ 65.152789][ C0] do_idle+0x273/0x3c0 [ 65.156838][ C0] cpu_startup_entry+0x18/0x20 [ 65.161607][ C0] rest_init+0x16f/0x2b0 [ 65.165856][ C0] arch_call_rest_init+0x13/0x30 [ 65.170779][ C0] start_kernel+0x3b6/0x490 [ 65.175264][ C0] x86_64_start_reservations+0x18/0x30 [ 65.180716][ C0] x86_64_start_kernel+0xb3/0xc0 [ 65.185638][ C0] secondary_startup_64_no_verify+0xf4/0xfb [ 65.191525][ C0] [ 65.193829][ C0] The buggy address belongs to the object at ffff888027245940 [ 65.193829][ C0] which belongs to the cache task_struct of size 7360 [ 65.207950][ C0] The buggy address is located 2560 bytes inside of [ 65.207950][ C0] freed 7360-byte region [ffff888027245940, ffff888027247600) [ 65.221901][ C0] [ 65.224208][ C0] The buggy address belongs to the physical page: [ 65.230600][ C0] page:ffffea00009c9000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27240 [ 65.240731][ C0] head:ffffea00009c9000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 65.249644][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 65.257602][ C0] page_type: 0xffffffff() [ 65.261915][ C0] raw: 00fff00000010200 ffff888140007500 ffffea0000802800 dead000000000002 [ 65.270566][ C0] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 65.279228][ C0] page dumped because: kasan: bad access detected [ 65.285632][ C0] page_owner tracks the page as allocated [ 65.291335][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 11223047801, free_ts 0 [ 65.310953][ C0] post_alloc_hook+0x2db/0x350 [ 65.315710][ C0] get_page_from_freelist+0xf67/0x2a80 [ 65.321154][ C0] __alloc_pages+0x1cb/0x4a0 [ 65.325727][ C0] alloc_pages+0x1aa/0x270 [ 65.330124][ C0] allocate_slab+0x28e/0x380 [ 65.334708][ C0] ___slab_alloc+0xa91/0x1400 [ 65.339389][ C0] __slab_alloc.constprop.0+0x56/0xa0 [ 65.344751][ C0] kmem_cache_alloc_node+0x138/0x3e0 [ 65.350027][ C0] copy_process+0x3c0/0x7600 [ 65.354605][ C0] kernel_clone+0xeb/0x890 [ 65.359022][ C0] kernel_thread+0xc0/0x100 [ 65.363527][ C0] kthreadd+0x50c/0x790 [ 65.367682][ C0] ret_from_fork+0x1f/0x30 [ 65.372088][ C0] page_owner free stack trace missing [ 65.377435][ C0] [ 65.379741][ C0] Memory state around the buggy address: [ 65.385348][ C0] ffff888027246200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.393388][ C0] ffff888027246280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.401429][ C0] >ffff888027246300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.409467][ C0] ^ [ 65.415597][ C0] ffff888027246380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.423643][ C0] ffff888027246400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.431682][ C0] ================================================================== [ 65.439721][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.446901][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 65.456019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 65.466064][ C0] Call Trace: [ 65.469421][ C0] [ 65.472249][ C0] dump_stack_lvl+0xd9/0x150 [ 65.476833][ C0] panic+0x686/0x730 [ 65.480716][ C0] ? panic_smp_self_stop+0xa0/0xa0 [ 65.485822][ C0] ? lock_downgrade+0x690/0x690 [ 65.490663][ C0] check_panic_on_warn+0xb1/0xc0 [ 65.495588][ C0] end_report+0xe9/0x120 [ 65.499816][ C0] ? __lock_acquire+0x41b9/0x5f30 [ 65.504826][ C0] kasan_report+0xf9/0x130 [ 65.509229][ C0] ? __lock_acquire+0x41b9/0x5f30 [ 65.514246][ C0] __lock_acquire+0x41b9/0x5f30 [ 65.519088][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 65.525059][ C0] ? lockdep_unlock+0x11b/0x290 [ 65.529897][ C0] ? __lock_acquire+0x28bf/0x5f30 [ 65.534909][ C0] lock_acquire.part.0+0x11c/0x370 [ 65.540029][ C0] ? try_to_wake_up+0xab/0x1a50 [ 65.544870][ C0] ? lock_sync+0x190/0x190 [ 65.549278][ C0] ? rcu_is_watching+0x12/0xb0 [ 65.554025][ C0] ? trace_lock_acquire+0x12d/0x180 [ 65.559212][ C0] ? __lock_acquire+0x1987/0x5f30 [ 65.564239][ C0] ? try_to_wake_up+0xab/0x1a50 [ 65.569106][ C0] ? lock_acquire+0x32/0xc0 [ 65.573696][ C0] ? try_to_wake_up+0xab/0x1a50 [ 65.578569][ C0] _raw_spin_lock_irqsave+0x3d/0x60 [ 65.583759][ C0] ? try_to_wake_up+0xab/0x1a50 [ 65.588703][ C0] try_to_wake_up+0xab/0x1a50 [ 65.593383][ C0] ? lock_sync+0x190/0x190 [ 65.598499][ C0] ? rcu_is_watching+0x12/0xb0 [ 65.603373][ C0] ? sched_ttwu_pending+0x550/0x550 [ 65.608553][ C0] ? call_timer_fn+0xd5/0x580 [ 65.613215][ C0] ? lock_acquire+0x32/0xc0 [ 65.617702][ C0] ? call_timer_fn+0xd5/0x580 [ 65.622363][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 65.628417][ C0] call_timer_fn+0x1a0/0x580 [ 65.632995][ C0] ? enqueue_timer+0x520/0x520 [ 65.637743][ C0] ? lock_downgrade+0x690/0x690 [ 65.642590][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 65.648646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.653855][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 65.659908][ C0] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 65.665990][ C0] expire_timers+0x234/0x330 [ 65.670570][ C0] run_timer_softirq+0x326/0x910 [ 65.675516][ C0] ? expire_timers+0x330/0x330 [ 65.680267][ C0] ? kvm_clock_read+0x14/0x30 [ 65.684937][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 65.690066][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 65.694912][ C0] ? tick_program_event+0xb8/0x140 [ 65.700025][ C0] __do_softirq+0x1d4/0x905 [ 65.704523][ C0] irq_exit_rcu+0xb7/0x120 [ 65.708928][ C0] sysvec_apic_timer_interrupt+0x97/0xc0 [ 65.714548][ C0] [ 65.717460][ C0] [ 65.720371][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 65.726353][ C0] RIP: 0010:acpi_safe_halt+0x40/0x50 [ 65.731724][ C0] Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 66 90 0f 1f 44 00 00 0f 00 2d 57 4e a1 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f [ 65.751332][ C0] RSP: 0018:ffffffff8c407d18 EFLAGS: 00000246 [ 65.757398][ C0] RAX: ffffffff8c495780 RBX: 0000000000000000 RCX: ffffffff8a10cd15 [ 65.765358][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.773311][ C0] RBP: ffff8880146fa864 R08: 0000000000000001 R09: ffffed1017306d9d [ 65.781266][ C0] R10: ffff8880b9836ceb R11: 0000000000000000 R12: 0000000000000001 [ 65.789220][ C0] R13: ffff8880146fa800 R14: ffff8880146fa864 R15: 0000000000000000 [ 65.797182][ C0] ? ct_kernel_exit+0x1d5/0x240 [ 65.802028][ C0] acpi_idle_do_entry+0x53/0x70 [ 65.806866][ C0] acpi_idle_enter+0x173/0x290 [ 65.811617][ C0] ? cpuidle_enter+0x4e/0xa0 [ 65.816193][ C0] cpuidle_enter_state+0xd3/0x6f0 [ 65.821207][ C0] cpuidle_enter+0x4e/0xa0 [ 65.825606][ C0] do_idle+0x2fe/0x3c0 [ 65.829660][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 65.834684][ C0] cpu_startup_entry+0x18/0x20 [ 65.839431][ C0] rest_init+0x16f/0x2b0 [ 65.843661][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 65.849632][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 65.856045][ C0] arch_call_rest_init+0x13/0x30 [ 65.860977][ C0] start_kernel+0x3b6/0x490 [ 65.865462][ C0] x86_64_start_reservations+0x18/0x30 [ 65.870905][ C0] x86_64_start_kernel+0xb3/0xc0 [ 65.875832][ C0] secondary_startup_64_no_verify+0xf4/0xfb [ 65.881717][ C0] [ 65.884909][ C0] Kernel Offset: disabled [ 65.889222][ C0] Rebooting in 86400 seconds..