./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3879125501 <...> Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. execve("./syz-executor3879125501", ["./syz-executor3879125501"], 0x7ffc6186ced0 /* 10 vars */) = 0 brk(NULL) = 0x5555565db000 brk(0x5555565dbc40) = 0x5555565dbc40 arch_prctl(ARCH_SET_FS, 0x5555565db300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3879125501", 4096) = 28 brk(0x5555565fcc40) = 0x5555565fcc40 brk(0x5555565fd000) = 0x5555565fd000 mprotect(0x7f88cae0d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd233a6d00) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 18 syzkaller login: [ 43.785247][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 72 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd233a5cf0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133ac) = 9 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133bc) = 10 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133cc) = 12 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133dc) = 11 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133ec) = 13 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f88cae133fc) = 14 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 0 [ 44.305261][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.314588][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.322630][ T26] usb 1-1: Product: syz [ 44.326862][ T26] usb 1-1: Manufacturer: syz [ 44.331458][ T26] usb 1-1: SerialNumber: syz ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 [ 44.377129][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 4096 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 1856 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd233a6d00) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd233a5cf0) = 0 [ 44.965674][ T26] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 [ 46.025194][ T26] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 46.032424][ T26] ath9k_htc: Failed to initialize the device ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffd233a6d40) = 36 [ 46.185162][ C1] ================================================================== [ 46.193255][ C1] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.200978][ C1] Read of size 4 at addr ffff88807794c2e8 by task swapper/1/0 [ 46.208412][ C1] [ 46.210720][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc5-syzkaller-00049-gc1084b6c5620 #0 [ 46.220412][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 46.230468][ C1] Call Trace: [ 46.233733][ C1] [ 46.236583][ C1] dump_stack_lvl+0x1e3/0x2cb [ 46.241264][ C1] ? bfq_pos_tree_add_move+0x436/0x436 [ 46.246703][ C1] ? _printk+0xcf/0x10f [ 46.250837][ C1] ? __wake_up_klogd+0xd6/0x100 [ 46.255668][ C1] ? __wake_up_klogd+0xcd/0x100 [ 46.260505][ C1] ? panic+0x76e/0x76e [ 46.264553][ C1] ? _printk+0xcf/0x10f [ 46.268687][ C1] print_address_description+0x65/0x4b0 [ 46.274217][ C1] print_report+0xf4/0x210 [ 46.278621][ C1] ? __netdev_alloc_skb+0x103/0x4d0 [ 46.283816][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.289178][ C1] kasan_report+0xfb/0x130 [ 46.293586][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.298949][ C1] ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.304156][ C1] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 46.309880][ C1] __usb_hcd_giveback_urb+0x369/0x530 [ 46.315246][ C1] dummy_timer+0x86b/0x3110 [ 46.319757][ C1] ? dummy_free_streams+0x320/0x320 [ 46.324946][ C1] ? trace_lock_release+0x7a/0x190 [ 46.330142][ C1] ? dummy_free_streams+0x320/0x320 [ 46.335327][ C1] call_timer_fn+0xf5/0x210 [ 46.339831][ C1] ? dummy_free_streams+0x320/0x320 [ 46.345015][ C1] ? dummy_free_streams+0x320/0x320 [ 46.350198][ C1] ? __run_timers+0x980/0x980 [ 46.354876][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 46.360061][ C1] ? dummy_free_streams+0x320/0x320 [ 46.365250][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 46.370461][ C1] ? lockdep_hardirqs_on+0x95/0x140 [ 46.375645][ C1] ? dummy_free_streams+0x320/0x320 [ 46.380828][ C1] __run_timers+0x76a/0x980 [ 46.385321][ C1] ? trace_timer_cancel+0x210/0x210 [ 46.390506][ C1] ? print_irqtrace_events+0x220/0x220 [ 46.395954][ C1] run_timer_softirq+0x63/0xf0 [ 46.400702][ C1] __do_softirq+0x382/0x793 [ 46.405195][ C1] ? __irq_exit_rcu+0xec/0x170 [ 46.409965][ C1] ? __entry_text_end+0x1fec88/0x1fec88 [ 46.415498][ C1] __irq_exit_rcu+0xec/0x170 [ 46.420090][ C1] ? irq_exit_rcu+0x20/0x20 [ 46.424579][ C1] irq_exit_rcu+0x5/0x20 [ 46.428807][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 46.434427][ C1] [ 46.437345][ C1] [ 46.440264][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 46.446235][ C1] RIP: 0010:acpi_idle_enter+0x43d/0x7a0 [ 46.451766][ C1] Code: ff e8 b7 22 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 10 01 00 00 e8 f3 c9 fa fc 66 90 e8 dc 1d f4 fc 0f 00 2d 15 13 62 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 4d 09 47 fd [ 46.471360][ C1] RSP: 0018:ffffc90000177c00 EFLAGS: 000002d3 [ 46.477416][ C1] RAX: ffffffff84935fa4 RBX: 0000000000000000 RCX: ffff888011f11d80 [ 46.485374][ C1] RDX: 0000000000000000 RSI: ffffffff8a8d22c0 RDI: ffffffff8ae99700 [ 46.493332][ C1] RBP: ffffc90000177cb0 R08: ffffffff84935f89 R09: ffffed10023e23b1 [ 46.501290][ C1] R10: ffffed10023e23b1 R11: 1ffff110023e23b0 R12: ffffc90000177c40 [ 46.509258][ C1] R13: dffffc0000000000 R14: ffff888145a68800 R15: 0000000000000001 [ 46.517219][ C1] ? acpi_idle_enter+0x419/0x7a0 [ 46.522148][ C1] ? acpi_idle_enter+0x434/0x7a0 [ 46.527076][ C1] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 46.532175][ C1] cpuidle_enter_state+0x517/0xed0 [ 46.537277][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 46.542639][ C1] cpuidle_enter+0x59/0x90 [ 46.547043][ C1] do_idle+0x3d2/0x640 [ 46.551099][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 46.556283][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 46.562162][ C1] ? complete+0xb9/0x1c0 [ 46.566395][ C1] cpu_startup_entry+0x15/0x20 [ 46.571143][ C1] start_secondary+0xe4/0xf0 [ 46.575732][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 46.581617][ C1] [ 46.584620][ C1] [ 46.586929][ C1] The buggy address belongs to the physical page: [ 46.593321][ C1] page:ffffea0001de5300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7794c [ 46.603452][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.610546][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 46.619111][ C1] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.627670][ C1] page dumped because: kasan: bad access detected [ 46.634061][ C1] page_owner tracks the page as freed [ 46.639411][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), pid 26, tgid 26 (kworker/1:1), ts 44977335824, free_ts 46032396538 [ 46.656839][ C1] get_page_from_freelist+0x72b/0x7a0 [ 46.662198][ C1] __alloc_pages+0x259/0x560 [ 46.666774][ C1] kmalloc_order+0x41/0x150 [ 46.671266][ C1] kmalloc_order_trace+0x15/0x70 [ 46.676187][ C1] __kmalloc+0x26b/0x370 [ 46.680415][ C1] wiphy_new_nm+0x617/0x18f0 [ 46.684989][ C1] ieee80211_alloc_hw_nm+0x338/0x1e60 [ 46.690348][ C1] ath9k_htc_probe_device+0xaa/0x2090 [ 46.695708][ C1] ath9k_htc_hw_init+0x30/0x70 [ 46.700455][ C1] ath9k_hif_usb_firmware_cb+0x250/0x4d0 [ 46.706070][ C1] request_firmware_work_func+0x198/0x270 [ 46.711773][ C1] process_one_work+0x81c/0xd10 [ 46.716610][ C1] worker_thread+0xb14/0x1330 [ 46.721269][ C1] kthread+0x266/0x300 [ 46.725323][ C1] ret_from_fork+0x1f/0x30 [ 46.729724][ C1] page last free stack trace: [ 46.734377][ C1] free_pcp_prepare+0x812/0x900 [ 46.739219][ C1] free_unref_page+0x7d/0x390 [ 46.743876][ C1] free_large_kmalloc+0xeb/0x1a0 [ 46.748795][ C1] kfree+0x188/0x210 [ 46.752694][ C1] device_release+0x98/0x1c0 [ 46.757270][ C1] kobject_cleanup+0x235/0x470 [ 46.762020][ C1] ath9k_htc_probe_device+0xfe8/0x2090 [ 46.767466][ C1] ath9k_htc_hw_init+0x30/0x70 [ 46.772215][ C1] ath9k_hif_usb_firmware_cb+0x250/0x4d0 [ 46.777828][ C1] request_firmware_work_func+0x198/0x270 [ 46.783529][ C1] process_one_work+0x81c/0xd10 [ 46.788367][ C1] worker_thread+0xb14/0x1330 [ 46.793027][ C1] kthread+0x266/0x300 [ 46.797079][ C1] ret_from_fork+0x1f/0x30 [ 46.801482][ C1] [ 46.803788][ C1] Memory state around the buggy address: [ 46.809398][ C1] ffff88807794c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.817442][ C1] ffff88807794c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.825487][ C1] >ffff88807794c280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.833527][ C1] ^ [ 46.840974][ C1] ffff88807794c300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.849016][ C1] ffff88807794c380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.857058][ C1] ================================================================== [ 46.865097][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 46.871679][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc5-syzkaller-00049-gc1084b6c5620 #0 [ 46.881378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 46.891418][ C1] Call Trace: [ 46.894685][ C1] [ 46.897516][ C1] dump_stack_lvl+0x1e3/0x2cb [ 46.902188][ C1] ? bfq_pos_tree_add_move+0x436/0x436 [ 46.907634][ C1] ? panic+0x76e/0x76e [ 46.911692][ C1] ? vscnprintf+0x59/0x80 [ 46.916007][ C1] panic+0x312/0x76e [ 46.919888][ C1] ? fb_is_primary_device+0xcc/0xcc [ 46.925077][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 46.930959][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.936318][ C1] end_report+0x91/0xa0 [ 46.940482][ C1] kasan_report+0x108/0x130 [ 46.944998][ C1] ? ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.950371][ C1] ath9k_hif_usb_rx_cb+0xa65/0x1130 [ 46.955576][ C1] ? ath9k_hif_usb_alloc_urbs+0xe90/0xe90 [ 46.961292][ C1] __usb_hcd_giveback_urb+0x369/0x530 [ 46.966662][ C1] dummy_timer+0x86b/0x3110 [ 46.971179][ C1] ? dummy_free_streams+0x320/0x320 [ 46.976367][ C1] ? trace_lock_release+0x7a/0x190 [ 46.981474][ C1] ? dummy_free_streams+0x320/0x320 [ 46.986664][ C1] call_timer_fn+0xf5/0x210 [ 46.991158][ C1] ? dummy_free_streams+0x320/0x320 [ 46.996345][ C1] ? dummy_free_streams+0x320/0x320 [ 47.001530][ C1] ? __run_timers+0x980/0x980 [ 47.006207][ C1] ? do_raw_spin_unlock+0x134/0x8a0 [ 47.011414][ C1] ? dummy_free_streams+0x320/0x320 [ 47.016600][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 47.021782][ C1] ? lockdep_hardirqs_on+0x95/0x140 [ 47.026966][ C1] ? dummy_free_streams+0x320/0x320 [ 47.032152][ C1] __run_timers+0x76a/0x980 [ 47.036649][ C1] ? trace_timer_cancel+0x210/0x210 [ 47.041836][ C1] ? print_irqtrace_events+0x220/0x220 [ 47.047284][ C1] run_timer_softirq+0x63/0xf0 [ 47.052047][ C1] __do_softirq+0x382/0x793 [ 47.056539][ C1] ? __irq_exit_rcu+0xec/0x170 [ 47.061292][ C1] ? __entry_text_end+0x1fec88/0x1fec88 [ 47.066848][ C1] __irq_exit_rcu+0xec/0x170 [ 47.071443][ C1] ? irq_exit_rcu+0x20/0x20 [ 47.075949][ C1] irq_exit_rcu+0x5/0x20 [ 47.080184][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 47.085809][ C1] [ 47.088733][ C1] [ 47.091654][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 47.097626][ C1] RIP: 0010:acpi_idle_enter+0x43d/0x7a0 [ 47.103169][ C1] Code: ff e8 b7 22 f4 fc 48 83 e3 08 44 8b 7c 24 04 0f 85 10 01 00 00 e8 f3 c9 fa fc 66 90 e8 dc 1d f4 fc 0f 00 2d 15 13 62 06 fb f4 <4c> 89 e3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 e7 e8 4d 09 47 fd [ 47.122764][ C1] RSP: 0018:ffffc90000177c00 EFLAGS: 000002d3 [ 47.128819][ C1] RAX: ffffffff84935fa4 RBX: 0000000000000000 RCX: ffff888011f11d80 [ 47.136891][ C1] RDX: 0000000000000000 RSI: ffffffff8a8d22c0 RDI: ffffffff8ae99700 [ 47.144853][ C1] RBP: ffffc90000177cb0 R08: ffffffff84935f89 R09: ffffed10023e23b1 [ 47.152831][ C1] R10: ffffed10023e23b1 R11: 1ffff110023e23b0 R12: ffffc90000177c40 [ 47.160792][ C1] R13: dffffc0000000000 R14: ffff888145a68800 R15: 0000000000000001 [ 47.168754][ C1] ? acpi_idle_enter+0x419/0x7a0 [ 47.173681][ C1] ? acpi_idle_enter+0x434/0x7a0 [ 47.178613][ C1] ? acpi_idle_lpi_enter+0xe0/0xe0 [ 47.183715][ C1] cpuidle_enter_state+0x517/0xed0 [ 47.188817][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 47.194181][ C1] cpuidle_enter+0x59/0x90 [ 47.198585][ C1] do_idle+0x3d2/0x640 [ 47.202643][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 47.208003][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 47.213910][ C1] ? complete+0xb9/0x1c0 [ 47.218230][ C1] cpu_startup_entry+0x15/0x20 [ 47.222986][ C1] start_secondary+0xe4/0xf0 [ 47.227567][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 47.233452][ C1] [ 47.236618][ C1] Kernel Offset: disabled [ 47.240937][ C1] Rebooting in 86400 seconds..