Warning: Permanently added '[localhost]:62008' (ED25519) to the list of known hosts. 2026/10/16 20:37:05 parsed 1 programs 2026/10/16 20:37:05 serving rpc on tcp://37407 syzkaller login: [ 92.070501][ T9] cfg80211: failed to load regulatory.db [ 93.925777][ T5281] cgroup: Unknown subsys name 'net' [ 93.984620][ T5281] cgroup: Unknown subsys name 'cpuset' [ 93.993167][ T5281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.633248][ T5281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.495015][ T5298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.497241][ T5298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.497688][ T5298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.498309][ T5298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.513972][ T5298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.063503][ T5297] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.122869][ T5321] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.133206][ T5321] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.149939][ T5321] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.363854][ T5321] infiniband rxe0: set active [ 103.364651][ T1368] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.364730][ T5321] infiniband rxe0: added rxe_eth0 [ 103.387147][ T5321] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 103.387166][ T5321] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 103.387180][ T5321] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 103.434805][ T5321] RDS/IB: rxe0: added [ 103.436722][ T5321] smc: adding ib device rxe0 with port count 1 [ 103.436761][ T5321] smc: ib device rxe0 port 1 has no pnetid [ 103.437477][ T1368] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.473492][ T5321] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.991677][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.993340][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.995081][ T5321] bridge_slave_0: entered allmulticast mode [ 104.015319][ T5321] bridge_slave_0: entered promiscuous mode [ 104.041273][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.041353][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.041468][ T5321] bridge_slave_1: entered allmulticast mode [ 104.046296][ T5321] bridge_slave_1: entered promiscuous mode [ 104.180023][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.190382][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.229926][ T5321] team0: Port device team_slave_0 added [ 104.244558][ T5321] team0: Port device team_slave_1 added [ 104.295953][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.295968][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.295984][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.297817][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.297826][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.297842][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.409782][ T5321] hsr_slave_0: entered promiscuous mode [ 104.410564][ T5321] hsr_slave_1: entered promiscuous mode [ 104.725119][ T5321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.739162][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.742067][ T5321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.746225][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.747027][ T5321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.767377][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.774722][ T5321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.777746][ T5321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.976311][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.021591][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.042089][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.042450][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.067885][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.067959][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.893712][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.009920][ T5321] veth0_vlan: entered promiscuous mode [ 106.034500][ T5321] veth1_vlan: entered promiscuous mode [ 106.088086][ T5321] veth0_macvtap: entered promiscuous mode [ 106.098101][ T5321] veth1_macvtap: entered promiscuous mode [ 106.143692][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.164628][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.261314][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.261351][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.261373][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.261392][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.444365][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.483956][ T5362] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.231842][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.291195][ T5367] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.822287][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.367451][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.533961][ T5372] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.716354][ T13] bridge_slave_1: left allmulticast mode [ 108.716386][ T13] bridge_slave_1: left promiscuous mode [ 108.717362][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.757452][ T13] bridge_slave_0: left allmulticast mode [ 108.757474][ T13] bridge_slave_0: left promiscuous mode [ 108.757632][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.041854][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.044535][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.045633][ T13] bond0 (unregistering): Released all slaves [ 109.588578][ T13] hsr_slave_0: left promiscuous mode [ 109.589130][ T13] hsr_slave_1: left promiscuous mode [ 109.590748][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.590770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.595367][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.595383][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.629891][ T13] veth1_macvtap: left promiscuous mode [ 109.629957][ T13] veth0_macvtap: left promiscuous mode [ 109.630936][ T13] veth1_vlan: left promiscuous mode [ 109.631006][ T13] veth0_vlan: left promiscuous mode [ 109.972231][ T13] team0 (unregistering): Port device team_slave_1 removed [ 109.987998][ T13] team0 (unregistering): Port device team_slave_0 removed [ 110.106419][ T4987] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.135988][ T5381] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.834077][ T4987] 8021q: adding VLAN 0 to HW filter on device eth3 [ 111.332801][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.332818][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.517029][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.517046][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.792753][ T4987] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.437050][ T5404] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.860420][ T4987] 8021q: adding VLAN 0 to HW filter on device eth5 [ 114.157636][ T5417] rxe_eth0 speed is unknown, defaulting to 1000 [ 114.784912][ T5423] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.265274][ T5427] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.363361][ T1368] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.006620][ T5438] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.758823][ T5443] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.428051][ T5448] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/16 20:37:33 executed programs: 0 [ 118.440851][ T4640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.444282][ T4640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.444925][ T4640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.446185][ T4640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.446658][ T4640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.995981][ T5453] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.355213][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.355338][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.355429][ T5453] bridge_slave_0: entered allmulticast mode [ 119.356698][ T5453] bridge_slave_0: entered promiscuous mode [ 119.372290][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.372434][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.372533][ T5453] bridge_slave_1: entered allmulticast mode [ 119.373846][ T5453] bridge_slave_1: entered promiscuous mode [ 119.412414][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.415750][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.444124][ T5453] team0: Port device team_slave_0 added [ 119.446342][ T5453] team0: Port device team_slave_1 added [ 119.477483][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.477498][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.477512][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.499799][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.499812][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.499827][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.572806][ T5453] hsr_slave_0: entered promiscuous mode [ 119.582659][ T5453] hsr_slave_1: entered promiscuous mode [ 120.459826][ T5453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.492312][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.493838][ T5453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.509783][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.510604][ T5453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.516017][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.523576][ T4640] Bluetooth: hci0: command tx timeout [ 120.550936][ T5453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.556027][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.799951][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.829709][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.845771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.845821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.867685][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.867754][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.642055][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.712823][ T5453] veth0_vlan: entered promiscuous mode [ 121.730363][ T5453] veth1_vlan: entered promiscuous mode [ 121.791153][ T5453] veth0_macvtap: entered promiscuous mode [ 121.802961][ T5453] veth1_macvtap: entered promiscuous mode [ 121.834934][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.852172][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.929738][ T178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.929934][ T178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.969951][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.970554][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.093284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.093302][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.147025][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.147043][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.578532][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.598497][ T4640] Bluetooth: hci0: command tx timeout [ 122.740169][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 122.743705][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 122.743726][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 122.746631][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.746647][ T10] usb 5-1: Product: syz [ 122.746655][ T10] usb 5-1: Manufacturer: syz [ 122.746663][ T10] usb 5-1: SerialNumber: syz [ 122.803907][ T5520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.001733][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 124.213707][ T13] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 124.213772][ T13] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 124.213892][ T180] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 124.213905][ T180] greybus 1-svc: failed to get rail count: -71 [ 124.215338][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 124.412794][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 124.412833][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 124.412846][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 124.412857][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 124.412867][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 124.412877][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 124.415222][ T4702] usb 5-1: USB disconnect, device number 2 [ 124.455961][ T4702] usb 5-1: failed to send ARPC request 4: -19 [ 124.456015][ T4702] usb 5-1: failed to execute ARPC: -19 [ 124.456023][ T4702] usb 5-1: failed to flush cport 0: -19 [ 124.456032][ T4702] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 124.457465][ T4702] usb 5-1: failed to send ARPC request 2: -19 [ 124.457517][ T4702] usb 5-1: failed to execute ARPC: -19 [ 124.457525][ T4702] usb 5-1: failed to quiesce cport 0: -19 (0) [ 124.457536][ T4702] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 124.457702][ T4702] usb 5-1: failed to send ARPC request 3: -19 [ 124.457745][ T4702] usb 5-1: failed to execute ARPC: -19 [ 124.457753][ T4702] usb 5-1: failed to clear cport 0: -19 [ 124.457761][ T4702] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 124.678515][ T4640] Bluetooth: hci0: command tx timeout 2026/10/16 20:37:39 executed programs: 3 [ 125.208461][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.359209][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 125.360331][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 125.360344][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 125.362730][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.362745][ T10] usb 5-1: Product: syz [ 125.362752][ T10] usb 5-1: Manufacturer: syz [ 125.362760][ T10] usb 5-1: SerialNumber: syz [ 125.410271][ T5536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.461455][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 126.672295][ T180] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 126.672348][ T180] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 126.673385][ T37] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 126.673445][ T37] greybus 1-svc: failed to get rail count: -71 [ 126.673956][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 126.759675][ T4640] Bluetooth: hci0: command tx timeout [ 126.875576][ T10] usb 5-1: USB disconnect, device number 3 [ 126.876171][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 126.876203][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 126.876216][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 126.876228][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 126.876240][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 126.876251][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 126.913963][ T10] usb 5-1: failed to send ARPC request 4: -19 [ 126.914015][ T10] usb 5-1: failed to execute ARPC: -19 [ 126.914023][ T10] usb 5-1: failed to flush cport 0: -19 [ 126.914032][ T10] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 126.914827][ T10] usb 5-1: failed to send ARPC request 2: -19 [ 126.914872][ T10] usb 5-1: failed to execute ARPC: -19 [ 126.914879][ T10] usb 5-1: failed to quiesce cport 0: -19 (0) [ 126.914890][ T10] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 126.914976][ T10] usb 5-1: failed to send ARPC request 3: -19 [ 126.915016][ T10] usb 5-1: failed to execute ARPC: -19 [ 126.915023][ T10] usb 5-1: failed to clear cport 0: -19 [ 126.915031][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 127.668320][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.819112][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 127.820461][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 127.820480][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.824827][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.824843][ T10] usb 5-1: Product: syz [ 127.824850][ T10] usb 5-1: Manufacturer: syz [ 127.824859][ T10] usb 5-1: SerialNumber: syz [ 127.867855][ T5537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.879109][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 129.095225][ T13] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 129.095283][ T13] greybus 1-svc: failed to get rail count: -71 [ 129.095819][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 129.095845][ T37] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 129.095898][ T37] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 129.332648][ T10] usb 5-1: USB disconnect, device number 4 [ 129.333264][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 129.333308][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 129.333333][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 129.333356][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 129.333371][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 129.333383][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 129.367849][ T10] usb 5-1: failed to send ARPC request 4: -19 [ 129.372636][ T10] usb 5-1: failed to execute ARPC: -19 [ 129.372651][ T10] usb 5-1: failed to flush cport 0: -19 [ 129.372660][ T10] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 129.372751][ T10] usb 5-1: failed to send ARPC request 2: -19 [ 129.372792][ T10] usb 5-1: failed to execute ARPC: -19 [ 129.372799][ T10] usb 5-1: failed to quiesce cport 0: -19 (0) [ 129.372809][ T10] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 129.372888][ T10] usb 5-1: failed to send ARPC request 3: -19 [ 129.372929][ T10] usb 5-1: failed to execute ARPC: -19 [ 129.372937][ T10] usb 5-1: failed to clear cport 0: -19 [ 129.372945][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 130.088773][ T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.240283][ T55] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 130.241533][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 130.241553][ T55] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 130.243806][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.243820][ T55] usb 5-1: Product: syz [ 130.243827][ T55] usb 5-1: Manufacturer: syz [ 130.243835][ T55] usb 5-1: SerialNumber: syz [ 130.275567][ T5541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.295927][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 131.504722][ T37] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 131.504798][ T37] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 131.505127][ T178] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 131.505195][ T178] greybus 1-svc: failed to get rail count: -71 [ 131.505700][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 131.727816][ T55] usb 5-1: USB disconnect, device number 5 [ 131.727941][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 131.727966][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 131.727989][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 131.728005][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 131.728017][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 131.728029][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 131.759495][ T55] usb 5-1: failed to send ARPC request 4: -19 [ 131.759526][ T55] usb 5-1: failed to execute ARPC: -19 [ 131.759531][ T55] usb 5-1: failed to flush cport 0: -19 [ 131.759537][ T55] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 131.759594][ T55] usb 5-1: failed to send ARPC request 2: -19 [ 131.759618][ T55] usb 5-1: failed to execute ARPC: -19 [ 131.759623][ T55] usb 5-1: failed to quiesce cport 0: -19 (0) [ 131.759630][ T55] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 131.759711][ T55] usb 5-1: failed to send ARPC request 3: -19 [ 131.759736][ T55] usb 5-1: failed to execute ARPC: -19 [ 131.759740][ T55] usb 5-1: failed to clear cport 0: -19 [ 131.759746][ T55] greybus greybus1: 0/0:0: failed to clear host cport: -19 2026/10/16 20:37:47 executed programs: 6 [ 132.488362][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.639351][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 132.640652][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 132.640670][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 132.642988][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.643004][ T10] usb 5-1: Product: syz [ 132.643012][ T10] usb 5-1: Manufacturer: syz [ 132.643021][ T10] usb 5-1: SerialNumber: syz [ 132.647382][ T5547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.686131][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 133.906971][ T178] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 133.907151][ T180] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 133.907215][ T180] greybus 1-svc: failed to get rail count: -71 [ 133.907838][ T178] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 133.907922][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 134.118090][ T10] usb 5-1: USB disconnect, device number 6 [ 134.118178][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 134.118193][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 134.118204][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 134.118215][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 134.118226][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 134.118237][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 134.161275][ T10] usb 5-1: failed to send ARPC request 4: -19 [ 134.161350][ T10] usb 5-1: failed to execute ARPC: -19 [ 134.161358][ T10] usb 5-1: failed to flush cport 0: -19 [ 134.161367][ T10] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 134.161479][ T10] usb 5-1: failed to send ARPC request 2: -19 [ 134.161521][ T10] usb 5-1: failed to execute ARPC: -19 [ 134.161528][ T10] usb 5-1: failed to quiesce cport 0: -19 (0) [ 134.161537][ T10] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 134.161639][ T10] usb 5-1: failed to send ARPC request 3: -19 [ 134.161691][ T10] usb 5-1: failed to execute ARPC: -19 [ 134.161700][ T10] usb 5-1: failed to clear cport 0: -19 [ 134.161708][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 134.868321][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.019944][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 135.021510][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 135.021529][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 135.023833][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.023846][ T10] usb 5-1: Product: syz [ 135.023851][ T10] usb 5-1: Manufacturer: syz [ 135.023855][ T10] usb 5-1: SerialNumber: syz [ 135.057921][ T5548] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.070777][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 136.283603][ T180] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x10 failed: -71 [ 136.283665][ T180] greybus 1-svc: power mode change failed on AP to switch link: -71 [ 136.283795][ T13] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 136.283844][ T13] greybus 1-svc: failed to get rail count: -71 [ 136.284657][ C0] greybus greybus1: 0/0:0: error sending response 0x02: -71 [ 136.482957][ T10] usb 5-1: USB disconnect, device number 7 [ 136.483602][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 136.483645][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 136.483669][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 136.483689][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 136.483711][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 136.483732][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 136.519138][ T10] usb 5-1: failed to send ARPC request 4: -19 [ 136.519190][ T10] usb 5-1: failed to execute ARPC: -19 [ 136.519199][ T10] usb 5-1: failed to flush cport 0: -19 [ 136.519208][ T10] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 136.519663][ T10] usb 5-1: failed to send ARPC request 2: -19 [ 136.519706][ T10] usb 5-1: failed to execute ARPC: -19 [ 136.519714][ T10] usb 5-1: failed to quiesce cport 0: -19 (0) [ 136.519723][ T10] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 136.519805][ T10] usb 5-1: failed to send ARPC request 3: -19 [ 136.519846][ T10] usb 5-1: failed to execute ARPC: -19 [ 136.519854][ T10] usb 5-1: failed to clear cport 0: -19 [ 136.519862][ T10] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 137.238376][ T5358] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.389089][ T5358] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 137.390410][ T5358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 137.390429][ T5358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 137.393257][ T5358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.393272][ T5358] usb 5-1: Product: syz [ 137.393280][ T5358] usb 5-1: Manufacturer: syz [ 137.393288][ T5358] usb 5-1: SerialNumber: syz [ 137.407852][ T5549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.122874][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.123012][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.439727][ C0] greybus greybus1: 0/0:0: error sending response 0x01: -71 [ 138.653031][ T180] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x14 failed: -71 [ 138.653324][ T180] ------------[ cut here ]------------ [ 138.653331][ T180] ODEBUG: free active (active state 0) object: ffff8880353040d0 object type: timer_list hint: gb_operation_timeout+0x0/0x110 [ 138.653697][ T180] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/u4:7/180 [ 138.671845][ T180] Modules linked in: [ 138.673746][ T180] CPU: 0 UID: 0 PID: 180 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 138.677801][ T180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.682294][ T180] Workqueue: greybus1:0 gb_operation_work [ 138.684801][ T180] RIP: 0010:debug_print_object+0x18a/0x230 [ 138.687551][ T180] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 cd 97 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 bf 8c 0c 48 83 c4 10 5b 41 5c [ 138.695634][ T180] RSP: 0018:ffffc90001a2f780 EFLAGS: 00010246 [ 138.699218][ T180] RAX: 1ffffffff181f08c RBX: dffffc0000000000 RCX: 0000000000000000 [ 138.702382][ T180] RDX: ffffffff8c6df740 RSI: ffffffff8c6df1c0 RDI: ffffffff9185c030 [ 138.705685][ T180] RBP: ffffffff8c6df740 R08: ffff8880353040d0 R09: ffffffff8c0f97c0 [ 138.708977][ T180] R10: dffffc0000000000 R11: ffffffff81b3f760 R12: 0000000000000000 [ 138.712548][ T180] R13: ffffffff9185c030 R14: ffff8880353040d0 R15: ffffffff8c0f8460 [ 138.716014][ T180] FS: 0000000000000000(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 138.720011][ T180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.722911][ T180] CR2: 00007f5280b524c0 CR3: 000000000fb48000 CR4: 0000000000352ef0 [ 138.726801][ T180] Call Trace: [ 138.728698][ T180] [ 138.730044][ T180] ? __pfx_gb_operation_timeout+0x10/0x10 [ 138.732612][ T180] ? __pfx_gb_operation_timeout+0x10/0x10 [ 138.735235][ T180] debug_check_no_obj_freed+0x2e3/0x450 [ 138.737785][ T180] ? gb_operation_sync_timeout+0x1c7/0x270 [ 138.740599][ T180] kmem_cache_free+0xfd/0x650 [ 138.742693][ T180] gb_operation_sync_timeout+0x1c7/0x270 [ 138.745109][ T180] gb_svc_request_handler+0x902/0x1300 [ 138.747527][ T180] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.749882][ T180] ? __pfx_gb_svc_request_handler+0x10/0x10 [ 138.752389][ T180] ? lock_acquire+0x115/0x350 [ 138.754343][ T180] ? __pfx_gb_svc_request_handler+0x10/0x10 [ 138.756644][ T180] gb_operation_work+0xe1/0x960 [ 138.759077][ T180] ? process_scheduled_works+0x97a/0x1630 [ 138.761560][ T180] process_scheduled_works+0xc3d/0x1630 [ 138.763995][ T180] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.766759][ T180] ? assign_work+0x3cf/0x5d0 [ 138.768985][ T180] worker_thread+0xa47/0xfb0 [ 138.771107][ T180] ? __kthread_parkme+0x71/0x1f0 [ 138.773350][ T180] kthread+0x38b/0x480 [ 138.775242][ T180] ? __pfx_worker_thread+0x10/0x10 [ 138.777438][ T180] ? __pfx_kthread+0x10/0x10 [ 138.779483][ T180] ret_from_fork+0x514/0xb70 [ 138.781535][ T180] ? __pfx_ret_from_fork+0x10/0x10 [ 138.783557][ T180] ? __switch_to+0xc89/0x1420 [ 138.785476][ T180] ? __pfx_kthread+0x10/0x10 [ 138.787497][ T180] ret_from_fork_asm+0x1a/0x30 [ 138.789680][ T180] [ 138.791091][ T180] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.794265][ T180] CPU: 0 UID: 0 PID: 180 Comm: kworker/u4:7 Not tainted syzkaller #0 PREEMPT(full) [ 138.798281][ T180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.802530][ T180] Workqueue: greybus1:0 gb_operation_work [ 138.805127][ T180] Call Trace: [ 138.806656][ T180] [ 138.808040][ T180] vpanic+0x56d/0xa60 [ 138.809910][ T180] ? __pfx__printk+0x10/0x10 [ 138.811913][ T180] ? __pfx_vpanic+0x10/0x10 [ 138.813899][ T180] ? is_bpf_text_address+0x292/0x2b0 [ 138.816312][ T180] ? is_bpf_text_address+0x26/0x2b0 [ 138.818626][ T180] panic+0xc5/0xd0 [ 138.820351][ T180] ? __pfx_panic+0x10/0x10 [ 138.822340][ T180] ? ret_from_fork_asm+0x1a/0x30 [ 138.824566][ T180] __warn+0x315/0x4c0 [ 138.826307][ T180] ? debug_print_object+0xec/0x230 [ 138.828520][ T180] ? debug_print_object+0xec/0x230 [ 138.830781][ T180] __report_bug+0x276/0x570 [ 138.832910][ T180] ? debug_print_object+0xec/0x230 [ 138.835171][ T180] ? __pfx___report_bug+0x10/0x10 [ 138.837440][ T180] ? __lock_acquire+0x747/0x2de0 [ 138.839600][ T180] ? gb_operation_work+0xe1/0x960 [ 138.841579][ T180] ? process_scheduled_works+0xc3d/0x1630 [ 138.844051][ T180] ? worker_thread+0xa47/0xfb0 [ 138.846226][ T180] report_bug_entry+0x19b/0x290 [ 138.848433][ T180] ? debug_print_object+0x18a/0x230 [ 138.850694][ T180] ? debug_print_object+0x18f/0x230 [ 138.852933][ T180] handle_bug+0xce/0x200 [ 138.854875][ T180] exc_invalid_op+0x1a/0x50 [ 138.856931][ T180] asm_exc_invalid_op+0x1a/0x20 [ 138.859101][ T180] RIP: 0010:debug_print_object+0x18a/0x230 [ 138.861711][ T180] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 cd 97 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 bf 8c 0c 48 83 c4 10 5b 41 5c [ 138.870275][ T180] RSP: 0018:ffffc90001a2f780 EFLAGS: 00010246 [ 138.873030][ T180] RAX: 1ffffffff181f08c RBX: dffffc0000000000 RCX: 0000000000000000 [ 138.876570][ T180] RDX: ffffffff8c6df740 RSI: ffffffff8c6df1c0 RDI: ffffffff9185c030 [ 138.880091][ T180] RBP: ffffffff8c6df740 R08: ffff8880353040d0 R09: ffffffff8c0f97c0 [ 138.883352][ T180] R10: dffffc0000000000 R11: ffffffff81b3f760 R12: 0000000000000000 [ 138.886609][ T180] R13: ffffffff9185c030 R14: ffff8880353040d0 R15: ffffffff8c0f8460 [ 138.889872][ T180] ? __pfx_timer_debug_hint+0x10/0x10 [ 138.892113][ T180] ? __pfx_gb_operation_timeout+0x10/0x10 [ 138.894518][ T180] ? __pfx_gb_operation_timeout+0x10/0x10 [ 138.896925][ T180] debug_check_no_obj_freed+0x2e3/0x450 [ 138.899273][ T180] ? gb_operation_sync_timeout+0x1c7/0x270 [ 138.901851][ T180] kmem_cache_free+0xfd/0x650 [ 138.903975][ T180] gb_operation_sync_timeout+0x1c7/0x270 [ 138.906649][ T180] gb_svc_request_handler+0x902/0x1300 [ 138.909028][ T180] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.911264][ T180] ? __pfx_gb_svc_request_handler+0x10/0x10 [ 138.913926][ T180] ? lock_acquire+0x115/0x350 [ 138.916038][ T180] ? __pfx_gb_svc_request_handler+0x10/0x10 [ 138.918623][ T180] gb_operation_work+0xe1/0x960 [ 138.920622][ T180] ? process_scheduled_works+0x97a/0x1630 [ 138.922810][ T180] process_scheduled_works+0xc3d/0x1630 [ 138.925066][ T180] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.927489][ T180] ? assign_work+0x3cf/0x5d0 [ 138.929481][ T180] worker_thread+0xa47/0xfb0 [ 138.931397][ T180] ? __kthread_parkme+0x71/0x1f0 [ 138.933529][ T180] kthread+0x38b/0x480 [ 138.935257][ T180] ? __pfx_worker_thread+0x10/0x10 [ 138.937356][ T180] ? __pfx_kthread+0x10/0x10 [ 138.939326][ T180] ret_from_fork+0x514/0xb70 [ 138.941383][ T180] ? __pfx_ret_from_fork+0x10/0x10 [ 138.943660][ T180] ? __switch_to+0xc89/0x1420 [ 138.945747][ T180] ? __pfx_kthread+0x10/0x10 [ 138.947854][ T180] ret_from_fork_asm+0x1a/0x30 [ 138.949978][ T180] [ 138.951969][ T180] Kernel Offset: disabled [ 138.953925][ T180] Rebooting in 86400 seconds..