last executing test programs: 5.593546553s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.669514332s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 4.302885334s ago: executing program 0 (id=1): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.253424076s ago: executing program 2 (id=3): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 4.044779652s ago: executing program 0 (id=5): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 3.917451636s ago: executing program 2 (id=6): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) 3.886166217s ago: executing program 0 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 3.811415369s ago: executing program 2 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.509574049s ago: executing program 3 (id=9): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x4, 0x2, 0xc, 0x11, 0x8000, 0x79, 0x3, 0x8, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xd, 0x0, 0x3, 0x7fffffff, 0x9, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xfffffffe, 0xc, 0x40, 0x0, 0xfffffff7]}) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x3, 0x0, 0xfffffe4e, 0x7fff, 0x20, 0x7, 0x4, 0x1, 0x1, 0x4, 0x100, 0x218e, 0x0, 0x0, 0x0}) 3.421105492s ago: executing program 3 (id=10): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.329697255s ago: executing program 2 (id=11): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240)=0x20, 0x4) 3.283912956s ago: executing program 1 (id=12): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300", @ANYRES8=r0, @ANYBLOB="063b"], 0x0) 3.16555912s ago: executing program 2 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.874527799s ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000d"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 2.777639872s ago: executing program 0 (id=15): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000700)=[{0xa, 0x8800, 0x0, 0x0}, {0x7, 0x200, 0x0, 0x0}], 0x2}) 1.867987671s ago: executing program 1 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) 1.753829825s ago: executing program 1 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x85, 0xe6d65e2c16ddbb6c, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x33, 0x3}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x2, 0x4, 0x4, [0x1, 0x2, 0x2, 0x0, 0x2]}, @processing_unit={0xb, 0x24, 0x8, 0x3, 0x1, [0x3, 0x1, 0x2]}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0x7, 0x8, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0xa3, 0x8, "d5e303d4b47f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x0, 0x28, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x10, 0x8000}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.194544802s ago: executing program 0 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="000322000000220157af931d2dd55f57d29299dca07ff293890379d840a796ee0239c8ace3bf38c044d7acc48146c43d3be799742bff812915667a35c236756e2fbb8a8a14e478d40a080490cb56353dc282198b43"], &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1}]}}, 0x0, 0x0}, &(0x7f0000000940)={0x84, &(0x7f0000000340)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'dg'}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001580)={0x1c, &(0x7f0000000c80)={0x40, 0x15}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 312.191751ms ago: executing program 3 (id=19): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 2 (id=20): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect$uac3(0x5, 0xf6, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x101e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x7, 0xe0, 0x61, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0xfb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x71, 0x80000001}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x304, 0x2, 0x2, 0x4, 0x6, 0xb27, 0x4, 0x101}, @power_domain={0xc, 0x24, 0x10, 0x5, 0x7, 0x3, 0xb7, "ef924a"}, @processing_unit={0x19, 0x24, 0x9, 0x5, 0x2, [0x2, 0x1, 0x0, 0x3, 0x2]}, @feature_unit={0x11, 0x24, 0x7, 0x6, 0x1, [0x3, 0x2, 0xd]}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x6, 0x3, 0x8, 0x0, 0x4, 0x6}, @multiply_unit={0xb, 0x24, 0xd, 0xd, 0x6, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x7c, 0x0, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xfb}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x13, 0x0, 0x7, {0xa, 0x25, 0x25, 0x2, 0x59, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x3, 0x1, {0xa, 0x25, 0x25, 0xfffffffc, 0x8, 0x6}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 66.230439][ T5757] cgroup: Unknown subsys name 'net' [ 66.363089][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.741825][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.833496][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.848047][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.856640][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.864685][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.887231][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.896569][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.897229][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.905549][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.918997][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.927940][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.936906][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.937395][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.944207][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.952796][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.965527][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.966481][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.977723][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.987510][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.987765][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.995629][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.002313][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.016905][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.026618][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.034540][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.399849][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.507864][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 70.527210][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 70.609388][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.617227][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.624592][ T5768] bridge_slave_0: entered allmulticast mode [ 70.632596][ T5768] bridge_slave_0: entered promiscuous mode [ 70.674919][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.682400][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.689836][ T5768] bridge_slave_1: entered allmulticast mode [ 70.696519][ T5768] bridge_slave_1: entered promiscuous mode [ 70.754573][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.761820][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.769301][ T5773] bridge_slave_0: entered allmulticast mode [ 70.775971][ T5773] bridge_slave_0: entered promiscuous mode [ 70.783287][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.790517][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.797774][ T5772] bridge_slave_0: entered allmulticast mode [ 70.804449][ T5772] bridge_slave_0: entered promiscuous mode [ 70.821301][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 70.831417][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.839184][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.847692][ T5773] bridge_slave_1: entered allmulticast mode [ 70.854619][ T5773] bridge_slave_1: entered promiscuous mode [ 70.861356][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.870209][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.877783][ T5772] bridge_slave_1: entered allmulticast mode [ 70.884487][ T5772] bridge_slave_1: entered promiscuous mode [ 70.902290][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.914939][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.989208][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.013979][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.025047][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.045486][ T5768] team0: Port device team_slave_0 added [ 71.064025][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.083934][ T5768] team0: Port device team_slave_1 added [ 71.117365][ T5772] team0: Port device team_slave_0 added [ 71.132045][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.139358][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.146542][ T5774] bridge_slave_0: entered allmulticast mode [ 71.153713][ T5774] bridge_slave_0: entered promiscuous mode [ 71.172904][ T5772] team0: Port device team_slave_1 added [ 71.188653][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.195674][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.221643][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.233591][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.241415][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.248650][ T5774] bridge_slave_1: entered allmulticast mode [ 71.255315][ T5774] bridge_slave_1: entered promiscuous mode [ 71.264559][ T5773] team0: Port device team_slave_0 added [ 71.281427][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.288527][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.314567][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.342072][ T5773] team0: Port device team_slave_1 added [ 71.348966][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.355917][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.382038][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.420643][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.427806][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.454077][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.483505][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.503200][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.510266][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.536387][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.551380][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.560321][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.586913][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.613713][ T5768] hsr_slave_0: entered promiscuous mode [ 71.620426][ T5768] hsr_slave_1: entered promiscuous mode [ 71.630673][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.637448][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.638912][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.692153][ T5772] hsr_slave_0: entered promiscuous mode [ 71.699227][ T5772] hsr_slave_1: entered promiscuous mode [ 71.705254][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.713289][ T5772] Cannot create hsr debugfs directory [ 71.786431][ T5773] hsr_slave_0: entered promiscuous mode [ 71.792842][ T5773] hsr_slave_1: entered promiscuous mode [ 71.799616][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.807315][ T5773] Cannot create hsr debugfs directory [ 71.815516][ T5774] team0: Port device team_slave_0 added [ 71.824724][ T5774] team0: Port device team_slave_1 added [ 71.919112][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.926100][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.952639][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.987095][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.994068][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.021900][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.037730][ T5777] Bluetooth: hci1: command tx timeout [ 72.107153][ T5777] Bluetooth: hci0: command tx timeout [ 72.107170][ T5782] Bluetooth: hci2: command tx timeout [ 72.107369][ T5782] Bluetooth: hci3: command tx timeout [ 72.191557][ T5774] hsr_slave_0: entered promiscuous mode [ 72.198599][ T5774] hsr_slave_1: entered promiscuous mode [ 72.204755][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.213365][ T5774] Cannot create hsr debugfs directory [ 72.289714][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.309646][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.322588][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.348832][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.450298][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.491449][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.501864][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.512168][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.542669][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.561885][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.573219][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.592771][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.672660][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.684986][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.695173][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.716197][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.808647][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.858068][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.901229][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.908543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.925391][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.935972][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.955269][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.962462][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.030425][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.042838][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.075185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.082420][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.100476][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.107686][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.135541][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.142945][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.163789][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.171010][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.214344][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.263630][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.311089][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.318281][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.334185][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.341336][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.354045][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.394570][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.564585][ T5772] veth0_vlan: entered promiscuous mode [ 73.599457][ T5772] veth1_vlan: entered promiscuous mode [ 73.673187][ T5772] veth0_macvtap: entered promiscuous mode [ 73.717797][ T5772] veth1_macvtap: entered promiscuous mode [ 73.772370][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.798655][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.813271][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.855618][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.868891][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.879934][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.889683][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.930462][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.954834][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.981489][ T5773] veth0_vlan: entered promiscuous mode [ 73.994630][ T5773] veth1_vlan: entered promiscuous mode [ 74.094796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.109464][ T5782] Bluetooth: hci1: command tx timeout [ 74.113971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.174231][ T5773] veth0_macvtap: entered promiscuous mode [ 74.184963][ T5768] veth0_vlan: entered promiscuous mode [ 74.190647][ T5782] Bluetooth: hci3: command tx timeout [ 74.192093][ T5771] Bluetooth: hci0: command tx timeout [ 74.196050][ T5782] Bluetooth: hci2: command tx timeout [ 74.213156][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.221531][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.241910][ T5773] veth1_macvtap: entered promiscuous mode [ 74.261613][ T5774] veth0_vlan: entered promiscuous mode [ 74.290499][ T5768] veth1_vlan: entered promiscuous mode [ 74.313351][ T5774] veth1_vlan: entered promiscuous mode [ 74.326994][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.343358][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.355904][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.405547][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.436109][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454456][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.485075][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.494190][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.503449][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513679][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.543469][ T5768] veth0_macvtap: entered promiscuous mode [ 74.560813][ T5774] veth0_macvtap: entered promiscuous mode [ 74.573612][ T5768] veth1_macvtap: entered promiscuous mode [ 74.588785][ T5774] veth1_macvtap: entered promiscuous mode [ 74.635323][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.649870][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.660123][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.676923][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.693131][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.707219][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.718547][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.728462][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.739268][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.747571][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.761711][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.769894][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.781061][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.791277][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.801856][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.811781][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.822245][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.833444][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.862748][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.872208][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.881196][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.891521][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.906434][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.919764][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.929325][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.936832][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.944589][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.960202][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.966905][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 74.970538][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.979270][ T5812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.992845][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.996332][ T5812] usb 2-1: config 0 has no interface number 0 [ 75.005357][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.013459][ T5812] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 75.031789][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041538][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.050278][ T5812] usb 2-1: Product: syz [ 75.054502][ T5812] usb 2-1: Manufacturer: syz [ 75.059172][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059232][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059256][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.087419][ T5812] usb 2-1: SerialNumber: syz [ 75.100669][ T5812] usb 2-1: config 0 descriptor?? [ 75.115541][ T5812] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 75.167272][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.175155][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.305961][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.336207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.364848][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.374447][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.494170][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.506972][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.524399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.563036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.144019][ T5812] gspca_spca1528: reg_w err -71 [ 76.163629][ T5812] spca1528: probe of 2-1:0.1 failed with error -71 [ 76.196643][ T5782] Bluetooth: hci1: command tx timeout [ 76.206185][ T5812] usb 2-1: USB disconnect, device number 2 [ 76.267487][ T5782] Bluetooth: hci0: command tx timeout [ 76.267825][ T5771] Bluetooth: hci3: command tx timeout [ 76.273960][ T5782] Bluetooth: hci2: command tx timeout [ 76.298923][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.343466][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 76.351226][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 76.618863][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 76.625161][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 76.927492][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.046796][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.054362][ T5849] ceph: No mds server is up or the cluster is laggy [ 77.083936][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.119791][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 77.128311][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 77.141693][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.163628][ T5871] netlink: 316 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.167215][ T8] usb 4-1: config 0 descriptor?? [ 77.193090][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 77.247801][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 77.266553][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.280558][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.294074][ T5831] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.300889][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.306634][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.315790][ T5812] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.331418][ T5831] usb 2-1: Product: syz [ 77.336058][ T5831] usb 2-1: Manufacturer: syz [ 77.337148][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.341132][ T5831] usb 2-1: SerialNumber: syz [ 77.366353][ T5812] usb 3-1: config 0 descriptor?? [ 77.572318][ T5831] usb 2-1: 0:2 : does not exist [ 77.581935][ T5831] usb 2-1: unit 6 not found! [ 77.588359][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.598319][ T8] gspca_sonixj: reg_r err -32 [ 77.604397][ T8] sonixj: probe of 4-1:0.0 failed with error -32 [ 77.635139][ T5831] usb 2-1: USB disconnect, device number 3 [ 77.635942][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 77.654533][ T5812] usbhid: probe of 3-1:0.0 failed with error -71 [ 77.665704][ T5812] usb 3-1: USB disconnect, device number 2 [ 77.699067][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.777751][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 77.784824][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.804148][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.814590][ T5830] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 77.823765][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.834464][ T5830] usb 1-1: config 0 descriptor?? [ 78.246920][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.260226][ T5830] usbhid 1-1:0.0: can't add hid device: -32 [ 78.266271][ T5830] usbhid: probe of 1-1:0.0 failed with error -32 [ 78.268402][ T5782] Bluetooth: hci1: command tx timeout [ 78.278984][ T5830] usb 1-1: USB disconnect, device number 2 [ 78.347775][ T5782] Bluetooth: hci2: command tx timeout [ 78.347802][ T5777] Bluetooth: hci0: command tx timeout [ 78.358922][ T5771] Bluetooth: hci3: command tx timeout [ 78.470501][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.476872][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.488983][ T5812] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.500575][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.511221][ T5812] usb 3-1: config 0 descriptor?? [ 78.682081][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.693273][ T5831] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.702534][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.712885][ T5831] usb 2-1: config 0 descriptor?? [ 78.928590][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 78.939246][ T5831] usbhid: probe of 2-1:0.0 failed with error -71 [ 78.948609][ T5831] usb 2-1: USB disconnect, device number 4 [ 79.110301][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.296724][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 79.307977][ T27] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 79.317708][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.325936][ T27] usb 1-1: Product: syz [ 79.330987][ T27] usb 1-1: Manufacturer: syz [ 79.335614][ T27] usb 1-1: SerialNumber: syz [ 79.347978][ T27] usb 1-1: config 0 descriptor?? [ 79.526805][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.659374][ T5155] usb 4-1: USB disconnect, device number 2 [ 79.720221][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.743209][ T5831] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 79.754416][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.765847][ T27] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 79.774235][ T27] airspy 1-1:0.0: Could not detect board [ 79.781275][ T5831] usb 2-1: config 0 descriptor?? [ 79.794621][ T27] airspy: probe of 1-1:0.0 failed with error -32 [ 79.975289][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 79.986284][ T5812] usbhid: probe of 3-1:0.0 failed with error -71 [ 80.000083][ T5812] usb 3-1: USB disconnect, device number 3 [ 80.126832][ T5155] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.306883][ T5155] usb 4-1: Using ep0 maxpacket: 16 [ 80.313834][ T5155] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 80.322111][ T5155] usb 4-1: config 0 has no interface number 0 [ 80.328300][ T5155] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 80.338379][ T5155] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 80.350584][ T5155] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 80.360087][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.369075][ T5155] usb 4-1: Product: syz [ 80.373258][ T5155] usb 4-1: Manufacturer: syz [ 80.377979][ T5155] usb 4-1: SerialNumber: syz [ 80.384088][ T5155] usb 4-1: config 0 descriptor?? [ 80.390661][ T5888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.398431][ T5888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.436834][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.611145][ T5888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.616829][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 80.618580][ T5888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.631745][ T5831] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 80.634605][ T5812] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 80.643442][ T5831] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 80.665337][ C1] ================================================================================ [ 80.668596][ T5812] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 80.674845][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 80.674866][ C1] index 259 is out of range for type 'const int[34]' [ 80.674896][ C1] CPU: 1 PID: 5831 Comm: kworker/1:6 Not tainted syzkaller #0 [ 80.674915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.674928][ C1] Workqueue: usb_hub_wq hub_event [ 80.674974][ C1] Call Trace: [ 80.674987][ C1] [ 80.674995][ C1] dump_stack_lvl+0x18c/0x250 [ 80.675028][ C1] ? show_regs_print_info+0x20/0x20 [ 80.675053][ C1] ? load_image+0x420/0x420 [ 80.675083][ C1] ubsan_epilogue+0xa/0x30 [ 80.675102][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 80.675138][ C1] aiptek_irq+0x1ea9/0x28f0 [ 80.675172][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 80.675203][ C1] ? kcov_remote_start+0x8f/0x7e0 [ 80.675237][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 80.675269][ C1] dummy_timer+0x8de/0x3320 [ 80.777023][ C1] ? dummy_free_streams+0x530/0x530 [ 80.782256][ C1] __hrtimer_run_queues+0x520/0xc40 [ 80.787466][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 80.793461][ C1] ? dummy_free_streams+0x530/0x530 [ 80.798678][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 80.803801][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 80.809876][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 80.814997][ C1] handle_softirqs+0x280/0x820 [ 80.819770][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 80.824540][ C1] ? do_softirq+0x1a0/0x1a0 [ 80.829056][ C1] __irq_exit_rcu+0xd3/0x190 [ 80.833737][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.838248][ C1] irq_exit_rcu+0x9/0x20 [ 80.842507][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 80.848147][ C1] [ 80.851073][ C1] [ 80.854011][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.860000][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 80.865297][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 80.884910][ C1] RSP: 0018:ffffc9000494e960 EFLAGS: 00000206 [ 80.890987][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 62c6443566fe4900 [ 80.898964][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20 [ 80.906945][ C1] RBP: ffffc9000494ea80 R08: dffffc0000000000 R09: 1ffffffff2239aa2 [ 80.914931][ C1] R10: dffffc0000000000 R11: fffffbfff2239aa3 R12: 1ffff92000929d38 [ 80.922904][ C1] R13: ffffffff8d2282e0 R14: 0000000000000246 R15: dffffc0000000000 [ 80.930900][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 80.936206][ C1] ? read_lock_is_recursive+0x20/0x20 [ 80.941582][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 80.947212][ C1] ? devtmpfs_create_node+0x20b/0x290 [ 80.952590][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 80.957630][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 80.962779][ C1] fs_reclaim_acquire+0x98/0x100 [ 80.967723][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 80.972843][ C1] slab_pre_alloc_hook+0x2a/0x310 [ 80.977883][ C1] ? kobject_uevent_env+0x274/0x8b0 [ 80.983089][ C1] __kmem_cache_alloc_node+0x53/0x250 [ 80.988482][ C1] ? dev_uevent_filter+0xb0/0xb0 [ 80.993431][ C1] ? kobject_uevent_env+0x274/0x8b0 [ 80.998640][ C1] kmalloc_trace+0x2a/0xe0 [ 81.003081][ C1] ? dev_uevent_filter+0xb0/0xb0 [ 81.008026][ C1] kobject_uevent_env+0x274/0x8b0 [ 81.013088][ C1] device_add+0x5e8/0xc50 [ 81.017447][ C1] cdev_device_add+0x1d6/0x390 [ 81.022227][ C1] mousedev_create+0x547/0x680 [ 81.026997][ C1] ? __bitmap_subset+0x170/0x190 [ 81.031956][ C1] mousedev_connect+0x26/0x3a0 [ 81.036728][ C1] input_register_device+0xcdc/0x1070 [ 81.042200][ C1] aiptek_probe+0x14f7/0x1b70 [ 81.046893][ C1] ? usb_acecad_irq+0x590/0x590 [ 81.051777][ C1] usb_probe_interface+0x5c9/0xb20 [ 81.056896][ C1] ? usb_register_driver+0x3d0/0x3d0 [ 81.062180][ C1] really_probe+0x25b/0xb20 [ 81.066692][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.071905][ C1] __driver_probe_device+0x1ef/0x390 [ 81.077287][ C1] driver_probe_device+0x4f/0x420 [ 81.082440][ C1] __device_attach_driver+0x2ca/0x510 [ 81.087834][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.092697][ C1] ? coredump_store+0x90/0x90 [ 81.097382][ C1] ? bus_find_device+0x300/0x300 [ 81.102327][ C1] __device_attach+0x2c2/0x420 [ 81.107115][ C1] ? device_attach+0x20/0x20 [ 81.111709][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 81.116753][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.121968][ C1] bus_probe_device+0x180/0x260 [ 81.126825][ C1] device_add+0x88e/0xc50 [ 81.131172][ C1] usb_set_configuration+0x1a79/0x20c0 [ 81.136670][ C1] usb_generic_driver_probe+0x8d/0x150 [ 81.142148][ C1] usb_probe_device+0x13d/0x270 [ 81.147021][ C1] ? usb_register_device_driver+0x230/0x230 [ 81.152942][ C1] really_probe+0x25b/0xb20 [ 81.157460][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.162660][ C1] __driver_probe_device+0x1ef/0x390 [ 81.167951][ C1] driver_probe_device+0x4f/0x420 [ 81.172977][ C1] __device_attach_driver+0x2ca/0x510 [ 81.178363][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.183223][ C1] ? coredump_store+0x90/0x90 [ 81.187911][ C1] ? bus_find_device+0x300/0x300 [ 81.192857][ C1] __device_attach+0x2c2/0x420 [ 81.197625][ C1] ? device_attach+0x20/0x20 [ 81.202305][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 81.207353][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.212566][ C1] bus_probe_device+0x180/0x260 [ 81.217426][ C1] device_add+0x88e/0xc50 [ 81.221767][ C1] usb_new_device+0xa3c/0x1660 [ 81.226541][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 81.231403][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.236611][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.241823][ C1] hub_event+0x29bf/0x49f0 [ 81.246280][ C1] ? hub_post_resume+0x120/0x120 [ 81.251220][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.256598][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.261812][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 81.267540][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 81.273270][ C1] process_scheduled_works+0xa5d/0x15d0 [ 81.278839][ C1] ? worker_attach_to_pool+0x380/0x380 [ 81.284304][ C1] ? assign_work+0x3d2/0x5d0 [ 81.288901][ C1] worker_thread+0xa55/0xfc0 [ 81.293497][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 81.299397][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.304254][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 81.310171][ C1] kthread+0x2fa/0x390 [ 81.314239][ C1] ? pr_cont_work+0x560/0x560 [ 81.318926][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.323524][ C1] ret_from_fork+0x48/0x80 [ 81.327947][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.332535][ C1] ret_from_fork_asm+0x11/0x20 [ 81.337404][ C1] [ 81.340419][ C1] ================================================================================ [ 81.349702][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 81.356978][ C1] CPU: 1 PID: 5831 Comm: kworker/1:6 Not tainted syzkaller #0 [ 81.364466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.374522][ C1] Workqueue: usb_hub_wq hub_event [ 81.379562][ C1] Call Trace: [ 81.382837][ C1] [ 81.385678][ C1] dump_stack_lvl+0x18c/0x250 [ 81.390386][ C1] ? show_regs_print_info+0x20/0x20 [ 81.395593][ C1] ? load_image+0x420/0x420 [ 81.400102][ C1] panic+0x2dc/0x730 [ 81.404014][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 81.408541][ C1] check_panic_on_warn+0x84/0xa0 [ 81.413487][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 81.419222][ C1] aiptek_irq+0x1ea9/0x28f0 [ 81.423738][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.428971][ C1] ? kcov_remote_start+0x8f/0x7e0 [ 81.434011][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 81.439402][ C1] dummy_timer+0x8de/0x3320 [ 81.443939][ C1] ? dummy_free_streams+0x530/0x530 [ 81.449151][ C1] __hrtimer_run_queues+0x520/0xc40 [ 81.454355][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 81.460423][ C1] ? dummy_free_streams+0x530/0x530 [ 81.465627][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 81.470745][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 81.476824][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 81.481950][ C1] handle_softirqs+0x280/0x820 [ 81.486715][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 81.491488][ C1] ? do_softirq+0x1a0/0x1a0 [ 81.495995][ C1] __irq_exit_rcu+0xd3/0x190 [ 81.500585][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.505095][ C1] irq_exit_rcu+0x9/0x20 [ 81.509357][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 81.515002][ C1] [ 81.517930][ C1] [ 81.520856][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.526857][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 81.532146][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 81.551752][ C1] RSP: 0018:ffffc9000494e960 EFLAGS: 00000206 [ 81.557830][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 62c6443566fe4900 [ 81.565804][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20 [ 81.573776][ C1] RBP: ffffc9000494ea80 R08: dffffc0000000000 R09: 1ffffffff2239aa2 [ 81.581755][ C1] R10: dffffc0000000000 R11: fffffbfff2239aa3 R12: 1ffff92000929d38 [ 81.589989][ C1] R13: ffffffff8d2282e0 R14: 0000000000000246 R15: dffffc0000000000 [ 81.597974][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 81.603276][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.608646][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 81.615177][ C1] ? devtmpfs_create_node+0x20b/0x290 [ 81.620572][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 81.625613][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 81.630731][ C1] fs_reclaim_acquire+0x98/0x100 [ 81.635703][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 81.640852][ C1] slab_pre_alloc_hook+0x2a/0x310 [ 81.645904][ C1] ? kobject_uevent_env+0x274/0x8b0 [ 81.651112][ C1] __kmem_cache_alloc_node+0x53/0x250 [ 81.656489][ C1] ? dev_uevent_filter+0xb0/0xb0 [ 81.661438][ C1] ? kobject_uevent_env+0x274/0x8b0 [ 81.666669][ C1] kmalloc_trace+0x2a/0xe0 [ 81.671096][ C1] ? dev_uevent_filter+0xb0/0xb0 [ 81.676035][ C1] kobject_uevent_env+0x274/0x8b0 [ 81.681169][ C1] device_add+0x5e8/0xc50 [ 81.685510][ C1] cdev_device_add+0x1d6/0x390 [ 81.690291][ C1] mousedev_create+0x547/0x680 [ 81.695059][ C1] ? __bitmap_subset+0x170/0x190 [ 81.700010][ C1] mousedev_connect+0x26/0x3a0 [ 81.704780][ C1] input_register_device+0xcdc/0x1070 [ 81.710166][ C1] aiptek_probe+0x14f7/0x1b70 [ 81.714858][ C1] ? usb_acecad_irq+0x590/0x590 [ 81.719723][ C1] usb_probe_interface+0x5c9/0xb20 [ 81.724842][ C1] ? usb_register_driver+0x3d0/0x3d0 [ 81.730125][ C1] really_probe+0x25b/0xb20 [ 81.734635][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.739845][ C1] __driver_probe_device+0x1ef/0x390 [ 81.745139][ C1] driver_probe_device+0x4f/0x420 [ 81.750167][ C1] __device_attach_driver+0x2ca/0x510 [ 81.755551][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.760399][ C1] ? coredump_store+0x90/0x90 [ 81.765075][ C1] ? bus_find_device+0x300/0x300 [ 81.770025][ C1] __device_attach+0x2c2/0x420 [ 81.774784][ C1] ? device_attach+0x20/0x20 [ 81.779378][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 81.784413][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.789620][ C1] bus_probe_device+0x180/0x260 [ 81.794471][ C1] device_add+0x88e/0xc50 [ 81.798810][ C1] usb_set_configuration+0x1a79/0x20c0 [ 81.804291][ C1] usb_generic_driver_probe+0x8d/0x150 [ 81.809758][ C1] usb_probe_device+0x13d/0x270 [ 81.814609][ C1] ? usb_register_device_driver+0x230/0x230 [ 81.820493][ C1] really_probe+0x25b/0xb20 [ 81.824994][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 81.830192][ C1] __driver_probe_device+0x1ef/0x390 [ 81.835564][ C1] driver_probe_device+0x4f/0x420 [ 81.840590][ C1] __device_attach_driver+0x2ca/0x510 [ 81.845963][ C1] bus_for_each_drv+0x252/0x2e0 [ 81.850808][ C1] ? coredump_store+0x90/0x90 [ 81.855482][ C1] ? bus_find_device+0x300/0x300 [ 81.860419][ C1] __device_attach+0x2c2/0x420 [ 81.865184][ C1] ? device_attach+0x20/0x20 [ 81.869766][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 81.874811][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 81.880036][ C1] bus_probe_device+0x180/0x260 [ 81.884889][ C1] device_add+0x88e/0xc50 [ 81.889229][ C1] usb_new_device+0xa3c/0x1660 [ 81.894010][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 81.898863][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.904065][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 81.909291][ C1] hub_event+0x29bf/0x49f0 [ 81.913744][ C1] ? hub_post_resume+0x120/0x120 [ 81.918687][ C1] ? read_lock_is_recursive+0x20/0x20 [ 81.924064][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.929264][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 81.934990][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 81.940710][ C1] process_scheduled_works+0xa5d/0x15d0 [ 81.946275][ C1] ? worker_attach_to_pool+0x380/0x380 [ 81.951740][ C1] ? assign_work+0x3d2/0x5d0 [ 81.956359][ C1] worker_thread+0xa55/0xfc0 [ 81.960957][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 81.966865][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.971728][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 81.977645][ C1] kthread+0x2fa/0x390 [ 81.981723][ C1] ? pr_cont_work+0x560/0x560 [ 81.986395][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.990977][ C1] ret_from_fork+0x48/0x80 [ 81.995390][ C1] ? kthread_blkcg+0xd0/0xd0 [ 81.999980][ C1] ret_from_fork_asm+0x11/0x20 [ 82.004751][ C1] [ 82.007909][ C1] Kernel Offset: disabled [ 82.012231][ C1] Rebooting in 86400 seconds..