program: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001f80)='./debug\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) mount(0x0, &(0x7f0000001fc0)='./debug\x00', &(0x7f0000002000)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./debug/dynamic_debug/control\x00', 0x2, 0x80) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000b40)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r5, &(0x7f0000000b80)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000900)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10000, @remote, 0xffffb7af}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @private2, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r7, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f00000009c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, r7, 0x10, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}, 0xa0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000a80)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r7}}, 0x18) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r8, &(0x7f0000000340)="0bcde56ca9a62cbf", 0x8) syz_usb_disconnect(r3) write(r1, &(0x7f0000002080)='+p', 0x2) [ 104.197764][ T5285] Bluetooth: hci0: command tx timeout [ 104.606447][ T5327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.756397][ T5327] usb 5-1: Using ep0 maxpacket: 16 [ 104.760912][ T5327] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 104.762469][ T5327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.762483][ T5327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.765552][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.765564][ T5327] usb 5-1: Product: syz [ 104.765570][ T5327] usb 5-1: Manufacturer: syz [ 104.765575][ T5327] usb 5-1: SerialNumber: syz [ 104.801404][ T5327] usb 5-1: config 0 descriptor?? [ 105.033865][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 105.045894][ T5327] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 105.095607][ T5327] imon:send_packet: packet tx failed (-71) [ 105.106657][ T5327] imon 5-1:0.0: panel buttons/knobs setup failed [ 105.166501][ T5327] rc_core: IR keymap rc-imon-pad not found [ 105.166517][ T5327] Registered IR keymap rc-empty [ 105.166578][ T5327] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 105.166588][ T5327] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 105.167595][ T5327] imon:send_packet: packet tx failed (-71) [ 105.192519][ T5327] imon 5-1:0.0: remote input dev register failed [ 105.193429][ T5327] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 105.229268][ T5327] imon 5-1:0.0: unable to initialize intf0, err 0 [ 105.229279][ T5327] imon:imon_probe: failed to initialize context! [ 105.229284][ T5327] imon 5-1:0.0: unable to register, err -19 [ 105.247031][ T5327] usb 5-1: USB disconnect, device number 2 [ 105.597972][ T5327] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.749748][ T5327] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 105.754056][ T5327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.754083][ T5327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 105.754099][ T5327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.773288][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.773301][ T5327] usb 5-1: Product: syz [ 105.773307][ T5327] usb 5-1: Manufacturer: syz [ 105.773312][ T5327] usb 5-1: SerialNumber: syz [ 105.775464][ T5327] usb 5-1: config 0 descriptor?? [ 105.777214][ T5331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.985436][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 105.990718][ T5327] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 106.186622][ T5331] dyndbg: bad flag-op , at start of  [ 106.186709][ T5331] dyndbg: flags parse failed [ 106.236731][ T5285] Bluetooth: hci0: command tx timeout [ 106.256489][ T5327] rc_core: IR keymap rc-imon-pad not found [ 106.256504][ T5327] Registered IR keymap rc-empty [ 106.256564][ T5327] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 106.256574][ T5327] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 106.408228][ T5327] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 106.410663][ T5327] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 106.427823][ T5327] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:3> initialized [ 106.646515][ T5331] imon:send_packet: packet tx failed (-71) [ 106.649887][ T5327] usb 5-1: USB disconnect, device number 3 [ 106.666650][ T5331] imon:lcd_write: send packet failed! [ 107.116084][ T5330] ================================================================== [ 107.117523][ T5330] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 107.117738][ T5330] Read of size 8 at addr ffff8880130860e0 by task syz.0.0/5330 [ 107.117757][ T5330] [ 107.117781][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.117805][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.117812][ T5330] Call Trace: [ 107.117844][ T5330] [ 107.117865][ T5330] dump_stack_lvl+0xe8/0x150 [ 107.117960][ T5330] print_address_description+0x55/0x1e0 [ 107.117977][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.117991][ T5330] print_report+0x58/0x70 [ 107.118005][ T5330] kasan_report+0x117/0x150 [ 107.118063][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.118078][ T5330] dev_driver_string+0x35/0xd0 [ 107.118091][ T5330] __dynamic_dev_dbg+0x1ae/0x2e0 [ 107.118158][ T5330] ? __mutex_lock+0x305/0x15a0 [ 107.118328][ T5330] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 107.118343][ T5330] ? __pfx_ima_file_free+0x10/0x10 [ 107.118374][ T5330] ? __asan_memset+0x22/0x50 [ 107.118388][ T5330] ? __fsnotify_parent+0x267/0x620 [ 107.118407][ T5330] ? display_close+0x4b/0x240 [ 107.118472][ T5330] display_close+0x1f9/0x240 [ 107.118483][ T5330] ? __pfx_display_close+0x10/0x10 [ 107.118494][ T5330] __fput+0x408/0xa40 [ 107.118509][ T5330] fput_close_sync+0x11f/0x240 [ 107.118522][ T5330] ? __pfx_fput_close_sync+0x10/0x10 [ 107.118536][ T5330] filp_close_sync+0x6e/0xa0 [ 107.118550][ T5330] __se_sys_close_range+0xa77/0xef0 [ 107.118570][ T5330] ? __pfx___se_sys_close_range+0x10/0x10 [ 107.118585][ T5330] do_syscall_64+0x166/0x520 [ 107.118600][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.118620][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 107.118632][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.118644][ T5330] RIP: 0033:0x7fc9f5b9f559 [ 107.118656][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.118665][ T5330] RSP: 002b:00007ffd0aaa5df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 107.118694][ T5330] RAX: ffffffffffffffda RBX: 00007ffd0aaa5ee0 RCX: 00007fc9f5b9f559 [ 107.118702][ T5330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 107.118710][ T5330] RBP: 0000000000019651 R08: 0000000000000001 R09: 0000000000000000 [ 107.118717][ T5330] R10: 00007fc9f59ff030 R11: 0000000000000246 R12: 00007ffd0aaa5f20 [ 107.118724][ T5330] R13: 00007fc9f5e25fac R14: 000000000001a1e4 R15: 00007fc9f5e25fa0 [ 107.118737][ T5330] [ 107.118741][ T5330] [ 107.118744][ T5330] Allocated by task 5327: [ 107.118760][ T5330] kasan_save_track+0x3e/0x80 [ 107.118776][ T5330] __kasan_kmalloc+0x93/0xb0 [ 107.118786][ T5330] __kmalloc_cache_noprof+0x31c/0x600 [ 107.118801][ T5330] usb_set_configuration+0x3c5/0x2260 [ 107.118837][ T5330] usb_generic_driver_probe+0x8d/0x150 [ 107.118852][ T5330] usb_probe_device+0x1c3/0x3b0 [ 107.118862][ T5330] really_probe+0x254/0xae0 [ 107.118877][ T5330] __driver_probe_device+0x1e8/0x360 [ 107.118891][ T5330] driver_probe_device+0x4f/0x240 [ 107.118906][ T5330] __device_attach_driver+0x270/0x410 [ 107.118920][ T5330] bus_for_each_drv+0x258/0x2f0 [ 107.118931][ T5330] __device_attach+0x2c4/0x450 [ 107.118944][ T5330] device_initial_probe+0xa1/0xd0 [ 107.118958][ T5330] bus_probe_device+0x12a/0x220 [ 107.118969][ T5330] device_add+0x7d7/0xb80 [ 107.118981][ T5330] usb_new_device+0x9aa/0x1690 [ 107.118994][ T5330] hub_event+0x28e8/0x4d30 [ 107.119008][ T5330] process_scheduled_works+0xc3d/0x1630 [ 107.119054][ T5330] worker_thread+0xa47/0xfb0 [ 107.119066][ T5330] kthread+0x38b/0x480 [ 107.119080][ T5330] ret_from_fork+0x514/0xb70 [ 107.119091][ T5330] ret_from_fork_asm+0x1a/0x30 [ 107.119100][ T5330] [ 107.119102][ T5330] Freed by task 5327: [ 107.119108][ T5330] kasan_save_track+0x3e/0x80 [ 107.119122][ T5330] kasan_save_free_info+0x40/0x50 [ 107.119134][ T5330] __kasan_slab_free+0x5c/0x80 [ 107.119143][ T5330] kfree+0x1c5/0x650 [ 107.119155][ T5330] device_release+0xc4/0x1f0 [ 107.119164][ T5330] kobject_put+0x222/0x550 [ 107.119178][ T5330] usb_disable_device+0x611/0x8d0 [ 107.119192][ T5330] usb_disconnect+0x346/0x9a0 [ 107.119204][ T5330] hub_event+0x1bbb/0x4d30 [ 107.119217][ T5330] process_scheduled_works+0xc3d/0x1630 [ 107.119229][ T5330] worker_thread+0xa47/0xfb0 [ 107.119240][ T5330] kthread+0x38b/0x480 [ 107.119253][ T5330] ret_from_fork+0x514/0xb70 [ 107.119262][ T5330] ret_from_fork_asm+0x1a/0x30 [ 107.119278][ T5330] [ 107.119281][ T5330] The buggy address belongs to the object at ffff888013086000 [ 107.119281][ T5330] which belongs to the cache kmalloc-2k of size 2048 [ 107.119290][ T5330] The buggy address is located 224 bytes inside of [ 107.119290][ T5330] freed 2048-byte region [ffff888013086000, ffff888013086800) [ 107.119301][ T5330] [ 107.119304][ T5330] The buggy address belongs to the physical page: [ 107.119312][ T5330] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13080 [ 107.119323][ T5330] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 107.119333][ T5330] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 107.119344][ T5330] page_type: f5(slab) [ 107.119356][ T5330] raw: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122 [ 107.119365][ T5330] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 107.119375][ T5330] head: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122 [ 107.119384][ T5330] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 107.119394][ T5330] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 107.119403][ T5330] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 107.119408][ T5330] page dumped because: kasan: bad access detected [ 107.119415][ T5330] page_owner tracks the page as allocated [ 107.119420][ T5330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5284, tgid 5284 (syz-executor), ts 100473120488 [ 107.119438][ T5330] post_alloc_hook+0x1f9/0x250 [ 107.119453][ T5330] get_page_from_freelist+0x2209/0x2280 [ 107.119468][ T5330] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 107.119483][ T5330] allocate_slab+0x7d/0x620 [ 107.119494][ T5330] refill_objects+0x2d5/0x350 [ 107.119505][ T5330] __pcs_replace_empty_main+0x2c8/0x6c0 [ 107.119516][ T5330] __kmalloc_cache_noprof+0x396/0x600 [ 107.119530][ T5330] rtnl_newlink+0x143/0x1c30 [ 107.119590][ T5330] rtnetlink_rcv_msg+0x802/0xc00 [ 107.119605][ T5330] netlink_rcv_skb+0x226/0x4a0 [ 107.119655][ T5330] netlink_unicast+0x8ef/0xa80 [ 107.119666][ T5330] netlink_sendmsg+0x7f0/0xb20 [ 107.119679][ T5330] sock_sendmsg_nosec+0x13a/0x180 [ 107.119693][ T5330] __sys_sendto+0x408/0x5a0 [ 107.119708][ T5330] __x64_sys_sendto+0xde/0x100 [ 107.119724][ T5330] do_syscall_64+0x166/0x520 [ 107.119736][ T5330] page last free pid 4711 tgid 4711 ts 41873477939 stack trace: [ 107.119745][ T5330] __free_frozen_pages+0xc93/0xd90 [ 107.119759][ T5330] __slab_free+0x274/0x2c0 [ 107.119774][ T5330] qlist_free_all+0x99/0x100 [ 107.119788][ T5330] kasan_quarantine_reduce+0x148/0x160 [ 107.119803][ T5330] __kasan_slab_alloc+0x22/0x80 [ 107.119813][ T5330] kmem_cache_alloc_noprof+0x2b4/0x600 [ 107.119827][ T5330] do_getname+0x2e/0x250 [ 107.119838][ T5330] vfs_fstatat+0x45/0x170 [ 107.119848][ T5330] __se_sys_newfstatat+0x118/0x3a0 [ 107.119860][ T5330] do_syscall_64+0x166/0x520 [ 107.119872][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.119883][ T5330] [ 107.119885][ T5330] Memory state around the buggy address: [ 107.119891][ T5330] ffff888013085f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.119899][ T5330] ffff888013086000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.119907][ T5330] >ffff888013086080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.119913][ T5330] ^ [ 107.119919][ T5330] ffff888013086100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.119926][ T5330] ffff888013086180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.119931][ T5330] ================================================================== [ 107.186820][ T1184] Added buffer head 0 to ffff888035e39400 [ 107.186863][ T1184] Added buffer head 1 to ffff888035e39400 [ 107.193095][ C0] virtqueue callback for ffff888035e39400 (ffffffff86315160) [ 107.224418][ T1184] No more buffers in queue [ 107.375941][ T5327] Added buffer head 1 to ffff888035e39400 [ 107.376012][ T5327] Added buffer head 0 to ffff888035e39400 [ 107.380777][ C0] virtqueue callback for ffff888035e39400 (ffffffff86315160) [ 107.437249][ C0] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 107.482377][ T5330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.523127][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.527214][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.531357][ T5330] Call Trace: [ 107.532795][ T5330] [ 107.534073][ T5330] vpanic+0x56d/0xa60 [ 107.535616][ T5330] ? __pfx_vpanic+0x10/0x10 [ 107.537344][ T5330] panic+0xc5/0xd0 [ 107.538911][ T5330] ? __pfx_panic+0x10/0x10 [ 107.540790][ T5330] ? preempt_schedule_thunk+0x16/0x40 [ 107.543531][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.545846][ T5330] ? preempt_schedule_thunk+0x16/0x40 [ 107.548428][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.551173][ T5330] check_panic_on_warn+0x89/0xb0 [ 107.553746][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.555939][ T5330] end_report+0x73/0x170 [ 107.557859][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.560082][ T5330] kasan_report+0x128/0x150 [ 107.562341][ T5330] ? dev_driver_string+0x35/0xd0 [ 107.564764][ T5330] dev_driver_string+0x35/0xd0 [ 107.566792][ T5330] __dynamic_dev_dbg+0x1ae/0x2e0 [ 107.568884][ T5330] ? __mutex_lock+0x305/0x15a0 [ 107.570918][ T5330] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 107.573257][ T5330] ? __pfx_ima_file_free+0x10/0x10 [ 107.575525][ T5330] ? __asan_memset+0x22/0x50 [ 107.577523][ T5330] ? __fsnotify_parent+0x267/0x620 [ 107.579802][ T5330] ? display_close+0x4b/0x240 [ 107.581787][ T5330] display_close+0x1f9/0x240 [ 107.583768][ T5330] ? __pfx_display_close+0x10/0x10 [ 107.585995][ T5330] __fput+0x408/0xa40 [ 107.587783][ T5330] fput_close_sync+0x11f/0x240 [ 107.589830][ T5330] ? __pfx_fput_close_sync+0x10/0x10 [ 107.592025][ T5330] filp_close_sync+0x6e/0xa0 [ 107.594038][ T5330] __se_sys_close_range+0xa77/0xef0 [ 107.596340][ T5330] ? __pfx___se_sys_close_range+0x10/0x10 [ 107.598913][ T5330] do_syscall_64+0x166/0x520 [ 107.601468][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.604215][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 107.606233][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.608724][ T5330] RIP: 0033:0x7fc9f5b9f559 [ 107.610608][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.618522][ T5330] RSP: 002b:00007ffd0aaa5df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 107.622079][ T5330] RAX: ffffffffffffffda RBX: 00007ffd0aaa5ee0 RCX: 00007fc9f5b9f559 [ 107.625481][ T5330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 107.628851][ T5330] RBP: 0000000000019651 R08: 0000000000000001 R09: 0000000000000000 [ 107.632143][ T5330] R10: 00007fc9f59ff030 R11: 0000000000000246 R12: 00007ffd0aaa5f20 [ 107.635489][ T5330] R13: 00007fc9f5e25fac R14: 000000000001a1e4 R15: 00007fc9f5e25fa0 [ 107.638904][ T5330] [ 107.640571][ T5330] Kernel Offset: disabled [ 107.642396][ T5330] Rebooting in 86400 seconds..