Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. 1970/01/01 00:00:54 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:54 parsed 1 programs [ 55.893340][ T7220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 63.045896][ T6126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.055940][ T6126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.057505][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.059054][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.060725][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.325159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.325187][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.373028][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.373053][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.399964][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 63.549215][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.549287][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.549341][ T7280] bridge_slave_0: entered allmulticast mode [ 63.549741][ T7280] bridge_slave_0: entered promiscuous mode [ 63.550625][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.550668][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.550709][ T7280] bridge_slave_1: entered allmulticast mode [ 63.551116][ T7280] bridge_slave_1: entered promiscuous mode [ 63.562821][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.563629][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.574725][ T7280] team0: Port device team_slave_0 added [ 63.575994][ T7280] team0: Port device team_slave_1 added [ 63.584156][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.584173][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.584187][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.584688][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.584695][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.584707][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.602220][ T7280] hsr_slave_0: entered promiscuous mode [ 63.603979][ T7280] hsr_slave_1: entered promiscuous mode [ 63.647064][ T7280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.649301][ T7280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.651285][ T7280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.655022][ T7280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.776860][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.776912][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.776985][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.777013][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.793436][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.798473][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.799990][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.806316][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.809083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.809117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.821034][ T7280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.822842][ T7280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.824992][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.825012][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.861865][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.912771][ T7280] veth0_vlan: entered promiscuous mode [ 63.914211][ T7280] veth1_vlan: entered promiscuous mode [ 63.920071][ T7280] veth0_macvtap: entered promiscuous mode [ 63.921376][ T7280] veth1_macvtap: entered promiscuous mode [ 63.927072][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.927945][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.931116][ T218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.933111][ T218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.935885][ T218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.936705][ T218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:03 executed programs: 0 [ 64.003682][ T6629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.004186][ T6629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.005308][ T6629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.008008][ T6629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.008893][ T6629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.024454][ T6629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.026073][ T6629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.027587][ T6629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.059614][ T6629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.059852][ T6629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.066056][ T6126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.066288][ T6126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.071635][ T7345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.073733][ T7345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.081647][ T7346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.086112][ T7346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.087337][ T7348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.089875][ T7349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.091249][ T7349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.095851][ T7349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.097785][ T7346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.098093][ T7346] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.100615][ T7345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.103775][ T7349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.105254][ T7349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.185504][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 64.438554][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.453338][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.454903][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.455000][ T7332] bridge_slave_0: entered allmulticast mode [ 64.455439][ T7332] bridge_slave_0: entered promiscuous mode [ 64.468927][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.470269][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.471637][ T7332] bridge_slave_1: entered allmulticast mode [ 64.473080][ T7332] bridge_slave_1: entered promiscuous mode [ 64.481406][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.489455][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.493076][ T24] cfg80211: failed to load regulatory.db [ 64.503006][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.503640][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503668][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.511964][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 64.514119][ T7332] team0: Port device team_slave_0 added [ 64.516039][ T7342] chnl_net:caif_netlink_parms(): no params data found [ 64.534512][ T7332] team0: Port device team_slave_1 added [ 64.560649][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.561911][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.568608][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.569220][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.569234][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.569253][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.585444][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.599852][ T7332] hsr_slave_0: entered promiscuous mode [ 64.600139][ T7332] hsr_slave_1: entered promiscuous mode [ 64.600311][ T7332] debugfs: 'hsr0' already exists in 'hsr' [ 64.600320][ T7332] Cannot create hsr debugfs directory [ 64.605333][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 64.609222][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 64.619720][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.619781][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.619844][ T7342] bridge_slave_0: entered allmulticast mode [ 64.620263][ T7342] bridge_slave_0: entered promiscuous mode [ 64.640976][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.642317][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.644665][ T7342] bridge_slave_1: entered allmulticast mode [ 64.646082][ T7342] bridge_slave_1: entered promiscuous mode [ 64.650663][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.658043][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.658092][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.658162][ T7340] bridge_slave_0: entered allmulticast mode [ 64.658755][ T7340] bridge_slave_0: entered promiscuous mode [ 64.659484][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.659502][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.659552][ T7340] bridge_slave_1: entered allmulticast mode [ 64.659960][ T7340] bridge_slave_1: entered promiscuous mode [ 64.685470][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.696044][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.699962][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.708794][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.734941][ T7342] team0: Port device team_slave_0 added [ 64.736493][ T7340] team0: Port device team_slave_0 added [ 64.737240][ T7340] team0: Port device team_slave_1 added [ 64.745021][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.745067][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.745146][ T7341] bridge_slave_0: entered allmulticast mode [ 64.745607][ T7341] bridge_slave_0: entered promiscuous mode [ 64.746323][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.746382][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.746435][ T7341] bridge_slave_1: entered allmulticast mode [ 64.746826][ T7341] bridge_slave_1: entered promiscuous mode [ 64.752447][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.755317][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.755410][ T7335] bridge_slave_0: entered allmulticast mode [ 64.755861][ T7335] bridge_slave_0: entered promiscuous mode [ 64.757125][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.757141][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.757193][ T7335] bridge_slave_1: entered allmulticast mode [ 64.757617][ T7335] bridge_slave_1: entered promiscuous mode [ 64.763544][ T7342] team0: Port device team_slave_1 added [ 64.786393][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.786418][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.786441][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.786949][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.786964][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.786981][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.787303][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.787320][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.787339][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.787642][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.787654][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.787671][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.793631][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.794604][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.809508][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.810714][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.826655][ T7341] team0: Port device team_slave_0 added [ 64.828111][ T7341] team0: Port device team_slave_1 added [ 64.839472][ T7335] team0: Port device team_slave_0 added [ 64.880118][ T7335] team0: Port device team_slave_1 added [ 64.881633][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.881658][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.881672][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.886171][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.886185][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.886199][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.888093][ T7340] hsr_slave_0: entered promiscuous mode [ 64.888411][ T7340] hsr_slave_1: entered promiscuous mode [ 64.890055][ T7340] debugfs: 'hsr0' already exists in 'hsr' [ 64.890069][ T7340] Cannot create hsr debugfs directory [ 64.896230][ T7342] hsr_slave_0: entered promiscuous mode [ 64.899782][ T7342] hsr_slave_1: entered promiscuous mode [ 64.900001][ T7342] debugfs: 'hsr0' already exists in 'hsr' [ 64.900013][ T7342] Cannot create hsr debugfs directory [ 64.946998][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.948234][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.952433][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.957632][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.958828][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.964739][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.998424][ T7341] hsr_slave_0: entered promiscuous mode [ 64.999830][ T7341] hsr_slave_1: entered promiscuous mode [ 65.001102][ T7341] debugfs: 'hsr0' already exists in 'hsr' [ 65.002155][ T7341] Cannot create hsr debugfs directory [ 65.045376][ T7335] hsr_slave_0: entered promiscuous mode [ 65.045690][ T7335] hsr_slave_1: entered promiscuous mode [ 65.045875][ T7335] debugfs: 'hsr0' already exists in 'hsr' [ 65.045887][ T7335] Cannot create hsr debugfs directory [ 65.618349][ T7340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.620694][ T7340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.625578][ T7340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.627959][ T7340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.657380][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.659995][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.675991][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.676029][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.676485][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.676500][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.682375][ T7340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.728507][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.741353][ T7340] veth0_vlan: entered promiscuous mode [ 65.746642][ T7340] veth1_vlan: entered promiscuous mode [ 65.754152][ T7340] veth0_macvtap: entered promiscuous mode [ 65.755053][ T7340] veth1_macvtap: entered promiscuous mode [ 65.760811][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.765706][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.767652][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767741][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767766][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767781][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.794158][ T5936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.794174][ T5936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.806173][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.807501][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.834805][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.834993][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.012955][ T7349] Bluetooth: hci1: command tx timeout [ 66.092617][ T7349] Bluetooth: hci2: command tx timeout [ 66.098989][ T12] bridge_slave_1: left allmulticast mode [ 66.099021][ T12] bridge_slave_1: left promiscuous mode [ 66.099096][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.101233][ T12] bridge_slave_0: left allmulticast mode [ 66.101243][ T12] bridge_slave_0: left promiscuous mode [ 66.101300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.173282][ T7349] Bluetooth: hci4: command tx timeout [ 66.173451][ T7345] Bluetooth: hci3: command tx timeout [ 66.173454][ T7349] Bluetooth: hci5: command tx timeout [ 66.241526][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.264051][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.284358][ T12] bond0 (unregistering): Released all slaves [ 66.349834][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.350036][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.647254][ T12] hsr_slave_0: left promiscuous mode [ 66.648264][ T12] hsr_slave_1: left promiscuous mode [ 66.648664][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.648679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.649907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.649918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.659590][ T12] veth1_macvtap: left promiscuous mode [ 66.660560][ T12] veth0_macvtap: left promiscuous mode [ 66.661482][ T12] veth1_vlan: left promiscuous mode [ 66.665000][ T12] veth0_vlan: left promiscuous mode [ 66.778385][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.786557][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.862328][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.868346][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.911109][ T7332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.914244][ T7332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.920878][ T7332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.926860][ T7332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.936169][ T7342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.938560][ T7342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.949618][ T7342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.952399][ T7342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.998437][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.006926][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.011278][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.011318][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.013984][ T7341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.018374][ T7341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.029931][ T7341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.032136][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.032178][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.033987][ T7341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.065001][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.078714][ T7332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.078747][ T7332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.096115][ T7342] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.204310][ T7335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.206882][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.206924][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.221260][ T7335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.224265][ T7335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.226597][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.226633][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.232787][ T7335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.249642][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.268939][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.285718][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.285760][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.287635][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.309732][ T1920] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.309772][ T1920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.330785][ T7332] veth0_vlan: entered promiscuous mode [ 67.332232][ T7332] veth1_vlan: entered promiscuous mode [ 67.342234][ T7341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.349801][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.353853][ T7332] veth0_macvtap: entered promiscuous mode [ 67.355884][ T7332] veth1_macvtap: entered promiscuous mode [ 67.362077][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.366502][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.385254][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.386939][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.387084][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.405003][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.405053][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.405074][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.405087][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.405487][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.405506][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.417892][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.427039][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.427196][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.457132][ T7335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.458847][ T7335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.466790][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.466822][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.476254][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.476279][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.488065][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.498195][ T7342] veth0_vlan: entered promiscuous mode [ 67.504820][ T7342] veth1_vlan: entered promiscuous mode [ 67.510628][ T7342] veth0_macvtap: entered promiscuous mode [ 67.520980][ T7342] veth1_macvtap: entered promiscuous mode [ 67.525839][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.528206][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.533969][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.534174][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.535140][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.535196][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.570358][ T1920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.570383][ T1920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.591588][ T1920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.591616][ T1920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.618449][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.649064][ T7335] veth0_vlan: entered promiscuous mode [ 67.654333][ T7335] veth1_vlan: entered promiscuous mode [ 67.656410][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.656979][ T7341] veth0_vlan: entered promiscuous mode [ 67.658438][ T7341] veth1_vlan: entered promiscuous mode [ 67.664419][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.679243][ T7335] veth0_macvtap: entered promiscuous mode [ 67.691621][ T7341] veth0_macvtap: entered promiscuous mode [ 67.694895][ T7341] veth1_macvtap: entered promiscuous mode [ 67.696918][ T7335] veth1_macvtap: entered promiscuous mode [ 67.700907][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.708342][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.713131][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.715558][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.715618][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.715649][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.715669][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.721672][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.725533][ T1920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725609][ T1920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725659][ T1920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725675][ T1920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.756958][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.756989][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.790554][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.790593][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.800616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.800641][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.816344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.816368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.843355][ T7706] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.851489][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.851647][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.861665][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.861832][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.896729][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.899141][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.992860][ T7706] usb 1-1: Using ep0 maxpacket: 16 [ 67.994920][ T7706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 67.994958][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 67.994968][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 68.001668][ T7706] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 68.001687][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.001694][ T7706] usb 1-1: Product: syz [ 68.001699][ T7706] usb 1-1: Manufacturer: syz [ 68.001704][ T7706] usb 1-1: SerialNumber: syz [ 68.008045][ T7706] usb 1-1: config 0 descriptor?? [ 68.012291][ T7706] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 68.012328][ T7706] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 68.092913][ T6126] Bluetooth: hci1: command tx timeout [ 68.172665][ T6126] Bluetooth: hci2: command tx timeout [ 68.184642][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.185396][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.252669][ T7345] Bluetooth: hci4: command tx timeout [ 68.252704][ T7345] Bluetooth: hci3: command tx timeout [ 68.252790][ T6126] Bluetooth: hci5: command tx timeout [ 68.264558][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 68.265630][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 68.267860][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 68.267879][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 68.267900][ T7706] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 68.335202][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 68.335586][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 68.336383][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 68.336393][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 68.363194][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.365131][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.380318][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.380466][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.405699][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.407633][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.612151][ T7706] usb 1-1: USB disconnect, device number 2 [ 68.612922][ T7706] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 68.612933][ T7706] em28xx 1-1:0.0: Disconnecting em28xx [ 68.614212][ T7706] em28xx 1-1:0.0: Freeing device [ 68.614230][ T7706] em28xx 1-1:0.0: Freeing device [ 68.701276][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.701420][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.880820][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.883066][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.889506][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.893039][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.926463][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.926620][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.032673][ T7706] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.203461][ T7706] usb 1-1: Using ep0 maxpacket: 16 [ 69.205687][ T7706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 69.207820][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 69.209962][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 69.220773][ T7706] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 69.220809][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.220827][ T7706] usb 1-1: Product: syz [ 69.220839][ T7706] usb 1-1: Manufacturer: syz [ 69.220851][ T7706] usb 1-1: SerialNumber: syz [ 69.227490][ T7706] usb 1-1: config 0 descriptor?? [ 69.229708][ T7706] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 69.232130][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.233610][ T7706] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 69.235383][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 1970/01/01 00:01:09 executed programs: 28 [ 69.401296][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.412189][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.420401][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.422023][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.440389][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.440922][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.493499][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 69.496286][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 69.497460][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 69.497466][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 69.497473][ T7706] ================================================================== [ 69.497477][ T7706] BUG: KASAN: use-after-free in __list_add_valid_or_report+0x6c/0x148 [ 69.497492][ T7706] Read of size 8 at addr ffff0000d8c1c250 by task kworker/0:6/7706 [ 69.497498][ T7706] [ 69.497502][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: kworker/0:6 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 69.497508][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 69.497512][ T7706] Workqueue: usb_hub_wq hub_event [ 69.497523][ T7706] Call trace: [ 69.497525][ T7706] show_stack+0x2c/0x3c (C) [ 69.497532][ T7706] __dump_stack+0x30/0x40 [ 69.497537][ T7706] dump_stack_lvl+0xd8/0x12c [ 69.497542][ T7706] print_address_description+0xa8/0x238 [ 69.497549][ T7706] print_report+0x68/0x84 [ 69.497555][ T7706] kasan_report+0xb0/0x110 [ 69.497563][ T7706] __asan_report_load8_noabort+0x20/0x2c [ 69.497568][ T7706] __list_add_valid_or_report+0x6c/0x148 [ 69.497573][ T7706] em28xx_init_extension+0x60/0x1b4 [ 69.497580][ T7706] em28xx_init_dev+0x80c/0x1bf4 [ 69.497586][ T7706] em28xx_usb_probe+0x10c4/0x2440 [ 69.497592][ T7706] usb_probe_interface+0x5a4/0xaac [ 69.497598][ T7706] really_probe+0x3b4/0x944 [ 69.497605][ T7706] __driver_probe_device+0x180/0x2d4 [ 69.497611][ T7706] driver_probe_device+0x78/0x330 [ 69.497617][ T7706] __device_attach_driver+0x290/0x4e0 [ 69.497624][ T7706] bus_for_each_drv+0x220/0x2b4 [ 69.497629][ T7706] __device_attach+0x26c/0x388 [ 69.497635][ T7706] device_initial_probe+0x24/0x34 [ 69.497642][ T7706] bus_probe_device+0x178/0x240 [ 69.497648][ T7706] device_add+0x71c/0xa60 [ 69.497652][ T7706] usb_set_configuration+0x1640/0x1bac [ 69.497657][ T7706] usb_generic_driver_probe+0x8c/0x144 [ 69.497663][ T7706] usb_probe_device+0x1a4/0x348 [ 69.497668][ T7706] really_probe+0x3b4/0x944 [ 69.497674][ T7706] __driver_probe_device+0x180/0x2d4 [ 69.497680][ T7706] driver_probe_device+0x78/0x330 [ 69.497686][ T7706] __device_attach_driver+0x290/0x4e0 [ 69.497693][ T7706] bus_for_each_drv+0x220/0x2b4 [ 69.497698][ T7706] __device_attach+0x26c/0x388 [ 69.497704][ T7706] device_initial_probe+0x24/0x34 [ 69.497710][ T7706] bus_probe_device+0x178/0x240 [ 69.497716][ T7706] device_add+0x71c/0xa60 [ 69.497721][ T7706] usb_new_device+0x7f0/0x123c [ 69.497726][ T7706] hub_event+0x211c/0x3c78 [ 69.497732][ T7706] process_one_work+0x7e8/0x155c [ 69.497737][ T7706] worker_thread+0x990/0xed8 [ 69.497742][ T7706] kthread+0x5fc/0x75c [ 69.497748][ T7706] ret_from_fork+0x10/0x20 [ 69.497753][ T7706] [ 69.497755][ T7706] The buggy address belongs to the physical page: [ 69.497758][ T7706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d8c1fc00 pfn:0x118c1c [ 69.497763][ T7706] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 69.497771][ T7706] raw: 05ffc00000000000 fffffdffc3cbfc08 fffffdffc35dba08 0000000000000000 [ 69.497776][ T7706] raw: ffff0000d8c1fc00 0000000000000000 00000000ffffffff 0000000000000000 [ 69.497778][ T7706] page dumped because: kasan: bad access detected [ 69.497780][ T7706] [ 69.497781][ T7706] Memory state around the buggy address: [ 69.497784][ T7706] ffff0000d8c1c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.497787][ T7706] ffff0000d8c1c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.497790][ T7706] >ffff0000d8c1c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.497793][ T7706] ^ [ 69.497796][ T7706] ffff0000d8c1c280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.497799][ T7706] ffff0000d8c1c300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.497801][ T7706] ================================================================== [ 69.497804][ T7706] Disabling lock debugging due to kernel taint [ 69.497810][ T7706] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 69.563487][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 69.563679][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 69.563862][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 69.563868][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 69.746099][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.746227][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.851875][ T7706] usb 1-1: USB disconnect, device number 3 [ 69.855226][ T7706] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 69.855248][ T7706] em28xx 1-1:0.0: Disconnecting em28xx [ 69.855618][ T7706] em28xx 1-1:0.0: Freeing device [ 69.855635][ T7706] em28xx 1-1:0.0: Freeing device [ 69.928425][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.930340][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.949369][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.949480][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.958155][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.959645][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.174996][ T6126] Bluetooth: hci1: command tx timeout [ 70.252543][ T6126] Bluetooth: hci2: command tx timeout [ 70.260328][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.262918][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.272630][ T7706] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.332534][ T7349] Bluetooth: hci3: command tx timeout [ 70.332559][ T7349] Bluetooth: hci4: command tx timeout [ 70.332610][ T6126] Bluetooth: hci5: command tx timeout [ 70.443337][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.446664][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.454532][ T7706] usb 1-1: Using ep0 maxpacket: 16 [ 70.456564][ T7706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 70.456603][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 70.456619][ T7706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 70.462037][ T7706] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 70.462051][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.462061][ T7706] usb 1-1: Product: syz [ 70.462067][ T7706] usb 1-1: Manufacturer: syz [ 70.462073][ T7706] usb 1-1: SerialNumber: syz [ 70.464545][ T7706] usb 1-1: config 0 descriptor?? [ 70.465743][ T7706] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 70.465755][ T7706] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 70.467190][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.467294][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.478224][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.478332][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.723106][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 70.723291][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 70.723450][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 70.723455][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 70.723463][ T7706] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 70.770982][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.771709][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.782718][ T7706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 70.782908][ T7706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 70.783071][ T7706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 70.783076][ T7706] em28xx 1-1:0.0: No AC97 audio processor [ 70.957264][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.957373][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.977596][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.977686][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.987136][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.987697][ T7706] usb 1-1: USB disconnect, device number 4 [ 70.987887][ T7706] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 70.987894][ T7706] em28xx 1-1:0.0: Disconnecting em28xx [ 70.988864][ T7706] em28xx 1-1:0.0: Freeing device [ 70.988883][ T7706] em28xx 1-1:0.0: Freeing device [ 70.992871][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.277357][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.277471][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.402540][ T6657] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.466339][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.467142][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.481771][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.481898][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.498148][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.499158][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.552528][ T6657] usb 1-1: Using ep0 maxpacket: 16 [ 71.554616][ T6657] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 71.554648][ T6657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 71.554660][ T6657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 71.556871][ T6657] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 71.556882][ T6657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.556888][ T6657] usb 1-1: Product: syz [ 71.556893][ T6657] usb 1-1: Manufacturer: syz [ 71.556897][ T6657] usb 1-1: SerialNumber: syz [ 71.557534][ T6657] usb 1-1: config 0 descriptor?? [ 71.559328][ T6657] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 71.559342][ T6657] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 71.781738][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.785501][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.812783][ T6657] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 71.813363][ T6657] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 71.813529][ T6657] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 71.813535][ T6657] em28xx 1-1:0.0: No AC97 audio processor [ 71.813543][ T6657] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 71.873782][ T6657] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 71.873966][ T6657] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 71.874130][ T6657] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 71.874135][ T6657] em28xx 1-1:0.0: No AC97 audio processor [ 71.975939][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.978179][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.995083][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.995194][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.004447][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.006575][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.086077][ T6657] usb 1-1: USB disconnect, device number 5 [ 72.086287][ T6657] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 72.086295][ T6657] em28xx 1-1:0.0: Disconnecting em28xx [ 72.086503][ T6657] em28xx 1-1:0.0: Freeing device [ 72.086515][ T6657] em28xx 1-1:0.0: Freeing device [ 72.252646][ T6126] Bluetooth: hci1: command tx timeout [ 72.295784][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.295894][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.332891][ T6126] Bluetooth: hci2: command tx timeout [ 72.412602][ T6126] Bluetooth: hci5: command tx timeout [ 72.412706][ T6126] Bluetooth: hci4: command tx timeout [ 72.412730][ T6126] Bluetooth: hci3: command tx timeout [ 72.483093][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.483197][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.502535][ T6679] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.507598][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.509638][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.511414][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.511714][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.662529][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 72.664411][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 72.664722][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 72.664741][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 72.665965][ T6679] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 72.665977][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.665983][ T6679] usb 1-1: Product: syz [ 72.665988][ T6679] usb 1-1: Manufacturer: syz [ 72.665992][ T6679] usb 1-1: SerialNumber: syz [ 72.668221][ T6679] usb 1-1: config 0 descriptor?? [ 72.670315][ T6679] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 72.670325][ T6679] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 72.801567][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.803867][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.922678][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 72.922869][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 72.923041][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 72.923048][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 72.923056][ T6679] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 72.982680][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 72.983763][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 72.984023][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 72.984034][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 72.994076][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.996056][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.019933][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.021836][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.022149][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.022226][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.193059][ T6679] usb 1-1: USB disconnect, device number 6 [ 73.193269][ T6679] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 73.193276][ T6679] em28xx 1-1:0.0: Disconnecting em28xx [ 73.196218][ T6679] em28xx 1-1:0.0: Freeing device [ 73.196385][ T6679] em28xx 1-1:0.0: Freeing device [ 73.308948][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.310546][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.502694][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.505971][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.526884][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.527979][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.533921][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.534019][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.612710][ T6679] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.762527][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 73.763583][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 73.763604][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 73.763618][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 73.765085][ T6679] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 73.765095][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.765102][ T6679] usb 1-1: Product: syz [ 73.765106][ T6679] usb 1-1: Manufacturer: syz [ 73.765111][ T6679] usb 1-1: SerialNumber: syz [ 73.767643][ T6679] usb 1-1: config 0 descriptor?? [ 73.769657][ T6679] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 73.769670][ T6679] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 73.817982][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.819416][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.010358][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.011403][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.022708][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 74.022899][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 74.023074][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 74.023084][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 74.023093][ T6679] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 74.032761][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.035227][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.040220][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.042204][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.083852][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 74.084037][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 74.084197][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 74.084202][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 74.287246][ T6679] usb 1-1: USB disconnect, device number 7 [ 74.287458][ T6679] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 74.287466][ T6679] em28xx 1-1:0.0: Disconnecting em28xx [ 74.291267][ T6679] em28xx 1-1:0.0: Freeing device [ 74.291299][ T6679] em28xx 1-1:0.0: Freeing device [ 74.324976][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.328405][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 1970/01/01 00:01:14 executed programs: 72 [ 74.518163][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.518266][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.539439][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.539533][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.552353][ T8234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.553874][ T8234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.712524][ T6679] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 74.833858][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.833963][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.872974][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 74.874868][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 74.874889][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 74.874900][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 74.876571][ T6679] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 74.876583][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.876591][ T6679] usb 1-1: Product: syz [ 74.876597][ T6679] usb 1-1: Manufacturer: syz [ 74.876603][ T6679] usb 1-1: SerialNumber: syz [ 74.877774][ T6679] usb 1-1: config 0 descriptor?? [ 74.880406][ T6679] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 74.880416][ T6679] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 75.026579][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.027869][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.043963][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.045216][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.060566][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.061823][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.132870][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 75.133071][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 75.133237][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 75.133245][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 75.133255][ T6679] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 75.193275][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 75.193463][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 75.193625][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 75.193630][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 75.341853][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.343773][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.400293][ T6679] usb 1-1: USB disconnect, device number 8 [ 75.400499][ T6679] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 75.400505][ T6679] em28xx 1-1:0.0: Disconnecting em28xx [ 75.402128][ T6679] em28xx 1-1:0.0: Freeing device [ 75.402143][ T6679] em28xx 1-1:0.0: Freeing device [ 75.534433][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.535550][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.549605][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.550664][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.566162][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.566278][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.832491][ T6679] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.849777][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.849895][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.982509][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 75.983486][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 75.983512][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 75.983523][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 75.984906][ T6679] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 75.984919][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.984927][ T6679] usb 1-1: Product: syz [ 75.984933][ T6679] usb 1-1: Manufacturer: syz [ 75.984937][ T6679] usb 1-1: SerialNumber: syz [ 75.985945][ T6679] usb 1-1: config 0 descriptor?? [ 75.987736][ T6679] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 75.987746][ T6679] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 76.041514][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.041631][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.057975][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.058077][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.071561][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.071665][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.242690][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 76.242882][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 76.243054][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 76.243060][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 76.243070][ T6679] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 76.303155][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 76.303328][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 76.303486][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 76.303490][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 76.354562][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.358355][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.510223][ T6679] usb 1-1: USB disconnect, device number 9 [ 76.510434][ T6679] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 76.510440][ T6679] em28xx 1-1:0.0: Disconnecting em28xx [ 76.510658][ T6679] em28xx 1-1:0.0: Freeing device [ 76.510673][ T6679] em28xx 1-1:0.0: Freeing device [ 76.546749][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.546877][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.565848][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.565948][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.578754][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.578875][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.864428][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.866099][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.922548][ T6679] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 77.056755][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.058374][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.071207][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.071303][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.072740][ T6679] usb 1-1: Using ep0 maxpacket: 16 [ 77.075858][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 77.075885][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 77.075902][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 77.077119][ T6679] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 77.077131][ T6679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.077140][ T6679] usb 1-1: Product: syz [ 77.077145][ T6679] usb 1-1: Manufacturer: syz [ 77.077150][ T6679] usb 1-1: SerialNumber: syz [ 77.077793][ T6679] usb 1-1: config 0 descriptor?? [ 77.079168][ T6679] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 77.079181][ T6679] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 77.091755][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.093418][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.332684][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 77.332876][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 77.333042][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 77.333047][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 77.333055][ T6679] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 77.371416][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.372925][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.392910][ T6679] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 77.393670][ T6679] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 77.393839][ T6679] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 77.393847][ T6679] em28xx 1-1:0.0: No AC97 audio processor [ 77.568227][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.568324][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.579087][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.580854][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.602350][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.602464][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.608835][ T6679] usb 1-1: USB disconnect, device number 10 [ 77.609047][ T6679] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 77.609053][ T6679] em28xx 1-1:0.0: Disconnecting em28xx [ 77.609287][ T6679] em28xx 1-1:0.0: Freeing device [ 77.609298][ T6679] em28xx 1-1:0.0: Freeing device [ 77.878550][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.880884][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.022540][ T6657] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 78.075584][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.077213][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.088345][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.088442][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.108179][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.109615][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.172711][ T6657] usb 1-1: Using ep0 maxpacket: 16 [ 78.175356][ T6657] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 78.175380][ T6657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 78.175390][ T6657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 78.176764][ T6657] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 78.176776][ T6657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.176784][ T6657] usb 1-1: Product: syz [ 78.176789][ T6657] usb 1-1: Manufacturer: syz [ 78.176794][ T6657] usb 1-1: SerialNumber: syz [ 78.177980][ T6657] usb 1-1: config 0 descriptor?? [ 78.178932][ T6657] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 78.178944][ T6657] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 78.386638][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.388368][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.432740][ T6657] em28xx 1-1:0.0 ** replaying previous printk message ** [ 78.432740][ T6657] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 78.432944][ T6657] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 78.433125][ T6657] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 78.433135][ T6657] em28xx 1-1:0.0: No AC97 audio processor [ 78.433146][ T6657] slab skbuff_small_head start ffff0000d3398000 pointer offset 592 size 704 [ 78.433165][ T6657] list_add corruption. prev->next should be next (ffff800091f65940), but was 0000000000000000. (prev=ffff0000d3398250). [ 78.433288][ T6657] ------------[ cut here ]------------ [ 78.433290][ T6657] kernel BUG at lib/list_debug.c:34! [ 78.433295][ T6657] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 78.444668][ T6657] Modules linked in: [ 78.445293][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: kworker/1:4 Tainted: G B 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 78.447275][ T6657] Tainted: [B]=BAD_PAGE [ 78.447954][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.449615][ T6657] Workqueue: usb_hub_wq hub_event [ 78.450458][ T6657] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 78.451791][ T6657] pc : __list_add_valid_or_report+0x144/0x148 [ 78.452754][ T6657] lr : __list_add_valid_or_report+0x144/0x148 [ 78.453692][ T6657] sp : ffff80009d0b6940 [ 78.454295][ T6657] x29: ffff80009d0b6940 x28: dfff800000000000 x27: 1fffe0001c11ebc2 [ 78.455563][ T6657] x26: 1fffe0001c11e827 x25: ffff0000c858bca0 x24: 1ffff000123ecb29 [ 78.456844][ T6657] x23: dfff800000000000 x22: 1fffe0001a67304a x21: ffff0000e08f4250 [ 78.458171][ T6657] x20: ffff0000d3398250 x19: ffff800091f65940 x18: 1fffe000337a0688 [ 78.459495][ T6657] x17: 3034393536663139 x16: ffff80008b007230 x15: 0000000000000001 [ 78.460856][ T6657] x14: 1fffe000337a06f2 x13: 0000000000000000 x12: 0000000000000000 [ 78.462127][ T6657] x11: ffff6000337a06f3 x10: 0000000000ff0100 x9 : 2ce52a3b1e4e5000 [ 78.463413][ T6657] x8 : 2ce52a3b1e4e5000 x7 : 0000000000000001 x6 : ffff800080563af4 [ 78.464773][ T6657] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de334 [ 78.466019][ T6657] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000075 [ 78.467275][ T6657] Call trace: [ 78.467868][ T6657] __list_add_valid_or_report+0x144/0x148 (P) [ 78.468878][ T6657] em28xx_init_extension+0x60/0x1b4 [ 78.469705][ T6657] em28xx_init_dev+0x80c/0x1bf4 [ 78.470551][ T6657] em28xx_usb_probe+0x10c4/0x2440 [ 78.471353][ T6657] usb_probe_interface+0x5a4/0xaac [ 78.472196][ T6657] really_probe+0x3b4/0x944 [ 78.472895][ T6657] __driver_probe_device+0x180/0x2d4 [ 78.473769][ T6657] driver_probe_device+0x78/0x330 [ 78.474600][ T6657] __device_attach_driver+0x290/0x4e0 [ 78.475522][ T6657] bus_for_each_drv+0x220/0x2b4 [ 78.476364][ T6657] __device_attach+0x26c/0x388 [ 78.477165][ T6657] device_initial_probe+0x24/0x34 [ 78.477990][ T6657] bus_probe_device+0x178/0x240 [ 78.478791][ T6657] device_add+0x71c/0xa60 [ 78.479525][ T6657] usb_set_configuration+0x1640/0x1bac [ 78.480477][ T6657] usb_generic_driver_probe+0x8c/0x144 [ 78.481369][ T6657] usb_probe_device+0x1a4/0x348 [ 78.482185][ T6657] really_probe+0x3b4/0x944 [ 78.482884][ T6657] __driver_probe_device+0x180/0x2d4 [ 78.483702][ T6657] driver_probe_device+0x78/0x330 [ 78.484414][ T6657] __device_attach_driver+0x290/0x4e0 [ 78.485313][ T6657] bus_for_each_drv+0x220/0x2b4 [ 78.486035][ T6657] __device_attach+0x26c/0x388 [ 78.486809][ T6657] device_initial_probe+0x24/0x34 [ 78.487618][ T6657] bus_probe_device+0x178/0x240 [ 78.488385][ T6657] device_add+0x71c/0xa60 [ 78.489137][ T6657] usb_new_device+0x7f0/0x123c [ 78.489922][ T6657] hub_event+0x211c/0x3c78 [ 78.490578][ T6657] process_one_work+0x7e8/0x155c [ 78.491408][ T6657] worker_thread+0x958/0xed8 [ 78.492160][ T6657] kthread+0x5fc/0x75c [ 78.492799][ T6657] ret_from_fork+0x10/0x20 [ 78.493504][ T6657] Code: 91278000 aa1303e1 aa1403e3 973f8a70 (d4210000) [ 78.494646][ T6657] ---[ end trace 0000000000000000 ]--- [ 78.717678][ T6657] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 78.718761][ T6657] SMP: stopping secondary CPUs [ 78.719541][ T6657] Kernel Offset: disabled [ 78.720173][ T6657] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 78.721258][ T6657] Memory Limit: none [ 78.947052][ T6657] Rebooting in 86400 seconds..