./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4002131362
<...>
[ 28.893309][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.911242][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 41.255971][ T27] kauditd_printk_skb: 37 callbacks suppressed
[ 41.255987][ T27] audit: type=1400 audit(1659878006.940:73): avc: denied { transition } for pid=3483 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 41.314935][ T27] audit: type=1400 audit(1659878006.970:74): avc: denied { write } for pid=3483 comm="sh" path="pipe:[28026]" dev="pipefs" ino=28026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts.
execve("./syz-executor4002131362", ["./syz-executor4002131362"], 0x7ffe1e23bb90 /* 10 vars */) = 0
brk(NULL) = 0x5555565ae000
brk(0x5555565aec40) = 0x5555565aec40
arch_prctl(ARCH_SET_FS, 0x5555565ae300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4002131362", 4096) = 28
brk(0x5555565cfc40) = 0x5555565cfc40
brk(0x5555565d0000) = 0x5555565d0000
mprotect(0x7f4435fb3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdc620cf50) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
[ 51.389018][ T27] audit: type=1400 audit(1659878017.070:75): avc: denied { execmem } for pid=3601 comm="syz-executor400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 51.415819][ T27] audit: type=1400 audit(1659878017.070:76): avc: denied { read write } for pid=3601 comm="syz-executor400" name="raw-gadget" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 51.439818][ T27] audit: type=1400 audit(1659878017.070:77): avc: denied { open } for pid=3601 comm="syz-executor400" path="/dev/raw-gadget" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 51.463593][ T27] audit: type=1400 audit(1659878017.070:78): avc: denied { ioctl } for pid=3601 comm="syz-executor400" path="/dev/raw-gadget" dev="devtmpfs" ino=730 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 18
[ 51.664864][ T3265] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 72
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 4
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc620bf40) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93ac) = 9
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93bc) = 10
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93cc) = 12
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93dc) = 11
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93ec) = 13
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4435fb93fc) = 14
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 0
[ 52.185209][ T3265] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 52.194362][ T3265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 52.202795][ T3265] usb 1-1: Product: syz
[ 52.207283][ T3265] usb 1-1: Manufacturer: syz
[ 52.211884][ T3265] usb 1-1: SerialNumber: syz
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
[ 52.256759][ T3265] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 4096
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 1856
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc620cf50) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc620bf40) = 0
[ 52.865177][ T3265] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
[ 53.924886][ T3265] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 53.932004][ T3265] ath9k_htc: Failed to initialize the device
ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc620cf90) = 36
[ 54.074828][ C0] ==================================================================
[ 54.082918][ C0] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.090638][ C0] Read of size 4 at addr ffff88806d2042e8 by task swapper/0/0
[ 54.098076][ C0]
[ 54.100384][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0
[ 54.109753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 54.119790][ C0] Call Trace:
[ 54.123069][ C0]
[ 54.125909][ C0] dump_stack_lvl+0xcd/0x134
[ 54.130513][ C0] print_address_description.constprop.0.cold+0xeb/0x467
[ 54.137595][ C0] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.142960][ C0] kasan_report.cold+0xf4/0x1c6
[ 54.147809][ C0] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.153174][ C0] ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.158365][ C0] ? sched_numa_find_closest+0x280/0x360
[ 54.164000][ C0] ? hif_usb_start+0xa0/0xa0
[ 54.168578][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 54.173501][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 54.178863][ C0] usb_hcd_giveback_urb+0x367/0x410
[ 54.184047][ C0] dummy_timer+0x11f9/0x32b0
[ 54.188625][ C0] ? dummy_dequeue+0x500/0x500
[ 54.193393][ C0] ? dummy_dequeue+0x500/0x500
[ 54.198141][ C0] call_timer_fn+0x1a5/0x6b0
[ 54.202712][ C0] ? timer_fixup_activate+0x350/0x350
[ 54.208066][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 54.212907][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 54.218089][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 54.223270][ C0] ? dummy_dequeue+0x500/0x500
[ 54.228019][ C0] __run_timers.part.0+0x679/0xa80
[ 54.233114][ C0] ? call_timer_fn+0x6b0/0x6b0
[ 54.237858][ C0] ? __wake_up_locked_sync_key+0x20/0x20
[ 54.243474][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 54.248656][ C0] ? sched_clock_cpu+0x69/0x2b0
[ 54.253504][ C0] run_timer_softirq+0xb3/0x1d0
[ 54.258339][ C0] __do_softirq+0x29b/0x9c2
[ 54.262834][ C0] __irq_exit_rcu+0x123/0x180
[ 54.267495][ C0] irq_exit_rcu+0x5/0x20
[ 54.271721][ C0] sysvec_apic_timer_interrupt+0x93/0xc0
[ 54.277355][ C0]
[ 54.280275][ C0]
[ 54.283189][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 54.289159][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240
[ 54.294966][ C0] Code: 89 de e8 aa 43 ff f7 84 db 75 98 e8 a1 47 ff f7 e8 5c 97 05 f8 66 90 e8 95 47 ff f7 0f 00 2d ce 40 b9 00 e8 89 47 ff f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 d4 43 ff f7 48 85 db
[ 54.314579][ C0] RSP: 0018:ffffffff8ba07d38 EFLAGS: 00000293
[ 54.320640][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 54.328595][ C0] RDX: ffffffff8babc940 RSI: ffffffff897ac377 RDI: 0000000000000000
[ 54.336553][ C0] RBP: ffff8881459ff064 R08: 0000000000000001 R09: 0000000000000001
[ 54.344530][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 54.352483][ C0] R13: ffff8881459ff000 R14: ffff8881459ff064 R15: ffff88801c45e804
[ 54.360439][ C0] ? acpi_idle_do_entry+0x1c7/0x240
[ 54.365630][ C0] ? acpi_idle_do_entry+0x1c7/0x240
[ 54.370811][ C0] acpi_idle_enter+0x369/0x510
[ 54.375567][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 54.380666][ C0] cpuidle_enter+0x4a/0xa0
[ 54.385068][ C0] do_idle+0x3e8/0x590
[ 54.389122][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 54.394128][ C0] cpu_startup_entry+0x14/0x20
[ 54.398873][ C0] rest_init+0x169/0x270
[ 54.403104][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 54.409337][ C0] arch_call_rest_init+0xf/0x14
[ 54.414192][ C0] start_kernel+0x46e/0x48f
[ 54.418679][ C0] secondary_startup_64_no_verify+0xce/0xdb
[ 54.424558][ C0]
[ 54.427562][ C0]
[ 54.429867][ C0] Allocated by task 3265:
[ 54.434185][ C0] kasan_save_stack+0x1e/0x40
[ 54.438849][ C0] __kasan_kmalloc+0xa6/0xd0
[ 54.443420][ C0] __kmalloc+0x209/0x4e0
[ 54.447642][ C0] wiphy_new_nm+0x6f0/0x2080
[ 54.452215][ C0] ieee80211_alloc_hw_nm+0x373/0x2270
[ 54.457568][ C0] ath9k_htc_probe_device+0x97/0x1f30
[ 54.462936][ C0] ath9k_htc_hw_init+0x31/0x60
[ 54.467681][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530
[ 54.473295][ C0] request_firmware_work_func+0x12c/0x230
[ 54.479004][ C0] process_one_work+0x996/0x1610
[ 54.483954][ C0] worker_thread+0x665/0x1080
[ 54.488651][ C0] kthread+0x2e9/0x3a0
[ 54.492709][ C0] ret_from_fork+0x1f/0x30
[ 54.497114][ C0]
[ 54.499438][ C0] Freed by task 3265:
[ 54.503412][ C0] kasan_save_stack+0x1e/0x40
[ 54.508088][ C0] kasan_set_track+0x21/0x30
[ 54.512671][ C0] kasan_set_free_info+0x20/0x30
[ 54.517601][ C0] ____kasan_slab_free+0x13d/0x180
[ 54.522707][ C0] kfree+0x173/0x390
[ 54.526609][ C0] device_release+0x9f/0x240
[ 54.531187][ C0] kobject_put+0x1c8/0x540
[ 54.535602][ C0] put_device+0x1b/0x30
[ 54.539739][ C0] ath9k_htc_probe_device+0x1c7/0x1f30
[ 54.545182][ C0] ath9k_htc_hw_init+0x31/0x60
[ 54.549927][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530
[ 54.555541][ C0] request_firmware_work_func+0x12c/0x230
[ 54.561242][ C0] process_one_work+0x996/0x1610
[ 54.566178][ C0] worker_thread+0x665/0x1080
[ 54.570940][ C0] kthread+0x2e9/0x3a0
[ 54.574995][ C0] ret_from_fork+0x1f/0x30
[ 54.579403][ C0]
[ 54.581716][ C0] The buggy address belongs to the object at ffff88806d200000
[ 54.581716][ C0] which belongs to the cache kmalloc-32k of size 32768
[ 54.595933][ C0] The buggy address is located 17128 bytes inside of
[ 54.595933][ C0] 32768-byte region [ffff88806d200000, ffff88806d208000)
[ 54.609567][ C0]
[ 54.611895][ C0] The buggy address belongs to the physical page:
[ 54.618292][ C0] page:ffffea0001b48000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6d200
[ 54.628514][ C0] head:ffffea0001b48000 order:4 compound_mapcount:0 compound_pincount:0
[ 54.636830][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 54.644793][ C0] raw: 00fff00000010200 ffffea0001c4fc08 ffff888011841d50 ffff888011840c00
[ 54.653365][ C0] raw: 0000000000000000 ffff88806d200000 0000000100000001 0000000000000000
[ 54.661947][ C0] page dumped because: kasan: bad access detected
[ 54.668352][ C0] page_owner tracks the page as allocated
[ 54.674045][ C0] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 3265, tgid 3265 (kworker/0:3), ts 52876697223, free_ts 12509739538
[ 54.694007][ C0] get_page_from_freelist+0x1298/0x3b80
[ 54.699540][ C0] __alloc_pages+0x1c7/0x510
[ 54.704108][ C0] cache_grow_begin+0x75/0x350
[ 54.708852][ C0] cache_alloc_refill+0x27f/0x380
[ 54.713856][ C0] __kmalloc+0x3ba/0x4e0
[ 54.718080][ C0] wiphy_new_nm+0x6f0/0x2080
[ 54.722657][ C0] ieee80211_alloc_hw_nm+0x373/0x2270
[ 54.728010][ C0] ath9k_htc_probe_device+0x97/0x1f30
[ 54.733364][ C0] ath9k_htc_hw_init+0x31/0x60
[ 54.738123][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530
[ 54.743736][ C0] request_firmware_work_func+0x12c/0x230
[ 54.749437][ C0] process_one_work+0x996/0x1610
[ 54.754359][ C0] worker_thread+0x665/0x1080
[ 54.759047][ C0] kthread+0x2e9/0x3a0
[ 54.763182][ C0] ret_from_fork+0x1f/0x30
[ 54.767582][ C0] page last free stack trace:
[ 54.772231][ C0] free_pcp_prepare+0x549/0xd20
[ 54.777062][ C0] free_unref_page+0x19/0x6a0
[ 54.781728][ C0] free_contig_range+0xb1/0x180
[ 54.786572][ C0] destroy_args+0xa8/0x646
[ 54.790996][ C0] debug_vm_pgtable+0x2a03/0x2a94
[ 54.796013][ C0] do_one_initcall+0x103/0x650
[ 54.800793][ C0] kernel_init_freeable+0x6b1/0x73a
[ 54.806007][ C0] kernel_init+0x1a/0x1d0
[ 54.810330][ C0] ret_from_fork+0x1f/0x30
[ 54.814740][ C0]
[ 54.817050][ C0] Memory state around the buggy address:
[ 54.822667][ C0] ffff88806d204180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 54.830740][ C0] ffff88806d204200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 54.838795][ C0] >ffff88806d204280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 54.846839][ C0] ^
[ 54.854351][ C0] ffff88806d204300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 54.862424][ C0] ffff88806d204380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 54.870479][ C0] ==================================================================
[ 54.878518][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 54.885082][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0
[ 54.894520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 54.904558][ C0] Call Trace:
[ 54.907836][ C0]
[ 54.910679][ C0] dump_stack_lvl+0xcd/0x134
[ 54.915288][ C0] panic+0x2d7/0x636
[ 54.919184][ C0] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 54.925146][ C0] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.930502][ C0] end_report.part.0+0x3f/0x7c
[ 54.935248][ C0] kasan_report.cold+0x93/0x1c6
[ 54.940082][ C0] ? ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.945455][ C0] ath9k_hif_usb_rx_cb+0xea7/0x10d0
[ 54.950636][ C0] ? sched_numa_find_closest+0x280/0x360
[ 54.956255][ C0] ? hif_usb_start+0xa0/0xa0
[ 54.960834][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 54.965756][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 54.971116][ C0] usb_hcd_giveback_urb+0x367/0x410
[ 54.976303][ C0] dummy_timer+0x11f9/0x32b0
[ 54.980880][ C0] ? dummy_dequeue+0x500/0x500
[ 54.985630][ C0] ? dummy_dequeue+0x500/0x500
[ 54.990375][ C0] call_timer_fn+0x1a5/0x6b0
[ 54.994949][ C0] ? timer_fixup_activate+0x350/0x350
[ 55.000332][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 55.005170][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 55.010353][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 55.015532][ C0] ? dummy_dequeue+0x500/0x500
[ 55.020295][ C0] __run_timers.part.0+0x679/0xa80
[ 55.025391][ C0] ? call_timer_fn+0x6b0/0x6b0
[ 55.030136][ C0] ? __wake_up_locked_sync_key+0x20/0x20
[ 55.035752][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 55.040930][ C0] ? sched_clock_cpu+0x69/0x2b0
[ 55.045776][ C0] run_timer_softirq+0xb3/0x1d0
[ 55.050610][ C0] __do_softirq+0x29b/0x9c2
[ 55.055113][ C0] __irq_exit_rcu+0x123/0x180
[ 55.059772][ C0] irq_exit_rcu+0x5/0x20
[ 55.063995][ C0] sysvec_apic_timer_interrupt+0x93/0xc0
[ 55.069612][ C0]
[ 55.072526][ C0]
[ 55.075459][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 55.081425][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x240
[ 55.087217][ C0] Code: 89 de e8 aa 43 ff f7 84 db 75 98 e8 a1 47 ff f7 e8 5c 97 05 f8 66 90 e8 95 47 ff f7 0f 00 2d ce 40 b9 00 e8 89 47 ff f7 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 d4 43 ff f7 48 85 db
[ 55.106893][ C0] RSP: 0018:ffffffff8ba07d38 EFLAGS: 00000293
[ 55.112945][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 55.120897][ C0] RDX: ffffffff8babc940 RSI: ffffffff897ac377 RDI: 0000000000000000
[ 55.128865][ C0] RBP: ffff8881459ff064 R08: 0000000000000001 R09: 0000000000000001
[ 55.136832][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 55.144786][ C0] R13: ffff8881459ff000 R14: ffff8881459ff064 R15: ffff88801c45e804
[ 55.152741][ C0] ? acpi_idle_do_entry+0x1c7/0x240
[ 55.157923][ C0] ? acpi_idle_do_entry+0x1c7/0x240
[ 55.163104][ C0] acpi_idle_enter+0x369/0x510
[ 55.167851][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 55.172962][ C0] cpuidle_enter+0x4a/0xa0
[ 55.177368][ C0] do_idle+0x3e8/0x590
[ 55.181424][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 55.186432][ C0] cpu_startup_entry+0x14/0x20
[ 55.191178][ C0] rest_init+0x169/0x270
[ 55.195405][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 55.201634][ C0] arch_call_rest_init+0xf/0x14
[ 55.206469][ C0] start_kernel+0x46e/0x48f
[ 55.210964][ C0] secondary_startup_64_no_verify+0xce/0xdb
[ 55.216842][ C0]
[ 55.220040][ C0] Kernel Offset: disabled
[ 55.224358][ C0] Rebooting in 86400 seconds..