Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts.
2025/08/23 07:05:31 parsed 1 programs
syzkaller login: [ 76.843383][ T4270] cgroup: Unknown subsys name 'net'
[ 76.989357][ T4270] cgroup: Unknown subsys name 'rlimit'
[ 78.485095][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 81.797949][ T4320] chnl_net:caif_netlink_parms(): no params data found
[ 81.912776][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.921242][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.930799][ T4320] device bridge_slave_0 entered promiscuous mode
[ 81.941032][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.949646][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.958097][ T4320] device bridge_slave_1 entered promiscuous mode
[ 81.991112][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.002779][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.036548][ T4320] team0: Port device team_slave_0 added
[ 82.047249][ T4320] team0: Port device team_slave_1 added
[ 82.074281][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.081272][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.108651][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.122239][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.129318][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.156139][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.225152][ T4320] device hsr_slave_0 entered promiscuous mode
[ 82.231997][ T4320] device hsr_slave_1 entered promiscuous mode
[ 82.328639][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.338512][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.347695][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.357366][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.381652][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.388913][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.397127][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.404283][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.458865][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.480468][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 82.492227][ T75] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.504227][ T75] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.514372][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 82.531798][ T4320] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.552339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 82.561477][ T75] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.568627][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.586394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 82.595396][ T75] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.602511][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.625785][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 82.634891][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 82.648682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 82.667691][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.681119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.888856][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.897185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.910496][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.933632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.942698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.962074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.971145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.984525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.993267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 83.001613][ T4320] device veth0_vlan entered promiscuous mode
[ 83.016259][ T4320] device veth1_vlan entered promiscuous mode
[ 83.041941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 83.050855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 83.061539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 83.070625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 83.082000][ T4320] device veth0_macvtap entered promiscuous mode
[ 83.092643][ T4320] device veth1_macvtap entered promiscuous mode
[ 83.109585][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.118443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 83.126855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 83.136499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 83.145188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 83.157810][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.166519][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 83.175542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 83.190457][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.199512][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.208314][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.218084][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.349625][ T4351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.349855][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.359512][ T4351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.377058][ T4351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.390323][ T4351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.399004][ T4351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 83.406631][ T4351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.605337][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.613805][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.637039][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.649799][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.658326][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.667019][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/08/23 07:05:41 executed programs: 0
[ 84.820773][ T4351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.830031][ T4351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.838096][ T4351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.847807][ T4351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.855630][ T4351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 84.862918][ T4351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.001905][ T4376] chnl_net:caif_netlink_parms(): no params data found
[ 85.049456][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.057091][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.065557][ T4376] device bridge_slave_0 entered promiscuous mode
[ 85.074240][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.081352][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.089776][ T4376] device bridge_slave_1 entered promiscuous mode
[ 85.115304][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.126888][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.154845][ T4376] team0: Port device team_slave_0 added
[ 85.162674][ T4376] team0: Port device team_slave_1 added
[ 85.182187][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.189278][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.216296][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.228391][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.235435][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.261371][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.296257][ T4376] device hsr_slave_0 entered promiscuous mode
[ 85.303355][ T4376] device hsr_slave_1 entered promiscuous mode
[ 85.309923][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 85.318276][ T4376] Cannot create hsr debugfs directory
[ 85.684129][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.655511][ T26] cfg80211: failed to load regulatory.db
[ 86.894132][ T4351] Bluetooth: hci0: command 0x0409 tx timeout
[ 87.864724][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.954661][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.786209][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.809662][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.820607][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.830906][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.847748][ T11] device hsr_slave_0 left promiscuous mode
[ 88.857570][ T11] device hsr_slave_1 left promiscuous mode
[ 88.864752][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 88.872244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 88.881152][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 88.888951][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 88.897715][ T11] device bridge_slave_1 left promiscuous mode
[ 88.905267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.917418][ T11] device bridge_slave_0 left promiscuous mode
[ 88.924750][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.953861][ T11] device veth1_macvtap left promiscuous mode
[ 88.960281][ T11] device veth0_macvtap left promiscuous mode
[ 88.969211][ T11] device veth1_vlan left promiscuous mode
[ 88.973667][ T4351] Bluetooth: hci0: command 0x041b tx timeout
[ 88.975409][ T11] device veth0_vlan left promiscuous mode
[ 89.322801][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 89.349207][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 89.376131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 89.407325][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 89.654095][ T11] bond0 (unregistering): Released all slaves
[ 89.792866][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.811244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 89.820242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 89.835294][ T4376] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.847376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 89.856142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 89.866251][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.873407][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.881798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 89.897331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 89.906780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 89.916163][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.923372][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.944539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 89.956786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 89.968209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 89.977233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 89.987687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 90.008840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 90.018423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 90.030618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 90.039477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 90.056097][ T4376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 90.067423][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 90.075603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 90.085654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 90.338877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 90.347778][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 90.359910][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.388271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 90.397258][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 90.417028][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 90.425493][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 90.434737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 90.442480][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 90.452444][ T4376] device veth0_vlan entered promiscuous mode
[ 90.465066][ T4376] device veth1_vlan entered promiscuous mode
[ 90.483655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 90.491707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 90.500348][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 90.509230][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 90.520723][ T4376] device veth0_macvtap entered promiscuous mode
[ 90.543348][ T4376] device veth1_macvtap entered promiscuous mode
[ 90.560304][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.568183][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 90.576951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 90.586105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 90.595745][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 90.607696][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.628904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 90.638246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 90.649648][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.658949][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.667761][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.676593][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.761018][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.776931][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.786502][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 90.813244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.821867][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.832113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 91.053321][ T4351] Bluetooth: hci0: command 0x040f tx timeout
[ 91.153206][ T4422] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 91.368740][ T4422] usb 1-1: config 0 has an invalid interface number: 10 but max is 0
[ 91.377193][ T4422] usb 1-1: config 0 has no interface number 0
[ 91.385328][ T4422] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 91.396203][ T4422] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024
[ 91.408944][ T4422] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 91.421539][ T4422] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 91.442239][ T4422] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7
[ 91.451499][ T4422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 91.459671][ T4422] usb 1-1: Product: syz
[ 91.463978][ T4422] usb 1-1: Manufacturer: syz
[ 91.468592][ T4422] usb 1-1: SerialNumber: syz
[ 91.483612][ T4422] usb 1-1: config 0 descriptor??
[ 91.490885][ T4424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 91.513640][ T4422] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input5
[ 91.900120][ T3622] ------------[ cut here ]------------
[ 91.905993][ T3622] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 91.912473][ T3622] WARNING: CPU: 0 PID: 3622 at drivers/usb/core/urb.c:505 usb_submit_urb+0xc74/0x1970
[ 91.922142][ T3622] Modules linked in:
[ 91.926217][ T3622] CPU: 0 PID: 3622 Comm: acpid Not tainted 6.1.148-syzkaller #0
[ 91.934005][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 91.944167][ T3622] RIP: 0010:usb_submit_urb+0xc74/0x1970
[ 91.950008][ T3622] Code: 8b 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0b 09 00 00 45 8b 06 48 c7 c7 80 32 2e 8b 48 89 ee 4c 89 e2 e8 7c f5 37 fb <0f> 0b 44 8b 64 24 34 44 0f b6 74 24 10 4c 89 f7 48 c7 c6 30 b0 67
[ 91.969824][ T3622] RSP: 0018:ffffc90003297630 EFLAGS: 00010246
[ 91.975978][ T3622] RAX: 2573530e5ba6af00 RBX: ffff8881447f4100 RCX: ffff88807d738000
[ 91.984020][ T3622] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 91.992024][ T3622] RBP: ffffffff8b2e9d80 R08: dffffc0000000000 R09: ffffed10171e4f34
[ 92.000093][ T3622] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffff888019e8b870
[ 92.008145][ T3622] R13: dffffc0000000000 R14: ffffffff8b2e3068 R15: ffff888019ed80f8
[ 92.016176][ T3622] FS: 00007fc72bbd1740(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 92.025188][ T3622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.031799][ T3622] CR2: 0000001b2e363fff CR3: 000000007fa15000 CR4: 00000000003506f0
[ 92.039823][ T3622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 92.047861][ T3622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 92.055892][ T3622] Call Trace:
[ 92.059187][ T3622]
[ 92.062180][ T3622] bcm5974_start_traffic+0xd7/0x140
[ 92.067450][ T3622] bcm5974_open+0x8e/0x120
[ 92.071910][ T3622] input_open_device+0x16c/0x2e0
[ 92.076936][ T3622] mousedev_open_device+0xc3/0x150
[ 92.082132][ T3622] mousedev_open+0x2e5/0x4a0
[ 92.086806][ T3622] chrdev_open+0x597/0x670
[ 92.091261][ T3622] ? cd_forget+0x160/0x160
[ 92.095747][ T3622] ? tomoyo_file_open+0xe9/0x170
[ 92.100745][ T3622] ? fsnotify_perm+0x39b/0x550
[ 92.105607][ T3622] ? cd_forget+0x160/0x160
[ 92.110135][ T3622] do_dentry_open+0x7e9/0x10d0
[ 92.115069][ T3622] path_openat+0x25c6/0x2e70
[ 92.119731][ T3622] ? do_sys_openat2+0xcf/0x490
[ 92.124958][ T3622] ? __x64_sys_openat+0x135/0x160
[ 92.130031][ T3622] ? do_syscall_64+0x4c/0xa0
[ 92.134784][ T3622] ? do_filp_open+0x3c0/0x3c0
[ 92.139522][ T3622] do_filp_open+0x1c1/0x3c0
[ 92.144110][ T3622] ? vfs_tmpfile+0x480/0x480
[ 92.148788][ T3622] ? _raw_spin_unlock+0x24/0x40
[ 92.153718][ T3622] ? alloc_fd+0x58f/0x630
[ 92.158084][ T3622] do_sys_openat2+0x142/0x490
[ 92.162765][ T3622] ? _raw_spin_unlock_irq+0x1f/0x40
[ 92.168020][ T3622] ? lockdep_hardirqs_on+0x94/0x140
[ 92.173328][ T3622] ? do_sys_open+0xe0/0xe0
[ 92.177771][ T3622] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 92.183816][ T3622] ? lock_chain_count+0x20/0x20
[ 92.188696][ T3622] __x64_sys_openat+0x135/0x160
[ 92.193635][ T3622] do_syscall_64+0x4c/0xa0
[ 92.198075][ T3622] ? clear_bhb_loop+0x60/0xb0
[ 92.202774][ T3622] ? clear_bhb_loop+0x60/0xb0
[ 92.207505][ T3622] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.213456][ T3622] RIP: 0033:0x7fc72bc5b407
[ 92.217887][ T3622] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 92.237551][ T3622] RSP: 002b:00007ffcddab56e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 92.246070][ T3622] RAX: ffffffffffffffda RBX: 00007fc72bbd1740 RCX: 00007fc72bc5b407
[ 92.254137][ T3622] RDX: 0000000000080800 RSI: 00007ffcddab58f0 RDI: ffffffffffffff9c
[ 92.262158][ T3622] RBP: 00007ffcddab58f0 R08: 0000000000000000 R09: 0000000000000000
[ 92.270301][ T3622] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[ 92.278334][ T3622] R13: 00007ffcddab59f0 R14: 0000562d94fff7fe R15: 00007ffcddab59f0
[ 92.286380][ T3622]
[ 92.289458][ T3622] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.296736][ T3622] CPU: 0 PID: 3622 Comm: acpid Not tainted 6.1.148-syzkaller #0
[ 92.304365][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 92.314416][ T3622] Call Trace:
[ 92.317701][ T3622]
[ 92.320633][ T3622] dump_stack_lvl+0x168/0x22e
[ 92.325327][ T3622] ? memcpy+0x3c/0x60
[ 92.329322][ T3622] ? show_regs_print_info+0x12/0x12
[ 92.334519][ T3622] ? load_image+0x3b0/0x3b0
[ 92.339046][ T3622] panic+0x2c9/0x710
[ 92.342953][ T3622] ? bpf_jit_dump+0xd0/0xd0
[ 92.347486][ T3622] __warn+0x2f8/0x4f0
[ 92.351471][ T3622] ? usb_submit_urb+0xc74/0x1970
[ 92.356409][ T3622] ? usb_submit_urb+0xc74/0x1970
[ 92.361348][ T3622] report_bug+0x2ba/0x4f0
[ 92.365679][ T3622] ? usb_submit_urb+0xc74/0x1970
[ 92.370624][ T3622] handle_bug+0x3a/0x70
[ 92.374780][ T3622] exc_invalid_op+0x16/0x40
[ 92.379300][ T3622] asm_exc_invalid_op+0x16/0x20
[ 92.384211][ T3622] RIP: 0010:usb_submit_urb+0xc74/0x1970
[ 92.389755][ T3622] Code: 8b 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0b 09 00 00 45 8b 06 48 c7 c7 80 32 2e 8b 48 89 ee 4c 89 e2 e8 7c f5 37 fb <0f> 0b 44 8b 64 24 34 44 0f b6 74 24 10 4c 89 f7 48 c7 c6 30 b0 67
[ 92.409388][ T3622] RSP: 0018:ffffc90003297630 EFLAGS: 00010246
[ 92.415468][ T3622] RAX: 2573530e5ba6af00 RBX: ffff8881447f4100 RCX: ffff88807d738000
[ 92.423450][ T3622] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 92.431438][ T3622] RBP: ffffffff8b2e9d80 R08: dffffc0000000000 R09: ffffed10171e4f34
[ 92.439438][ T3622] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffff888019e8b870
[ 92.447422][ T3622] R13: dffffc0000000000 R14: ffffffff8b2e3068 R15: ffff888019ed80f8
[ 92.455433][ T3622] bcm5974_start_traffic+0xd7/0x140
[ 92.460663][ T3622] bcm5974_open+0x8e/0x120
[ 92.465101][ T3622] input_open_device+0x16c/0x2e0
[ 92.470057][ T3622] mousedev_open_device+0xc3/0x150
[ 92.475193][ T3622] mousedev_open+0x2e5/0x4a0
[ 92.479898][ T3622] chrdev_open+0x597/0x670
[ 92.484334][ T3622] ? cd_forget+0x160/0x160
[ 92.488761][ T3622] ? tomoyo_file_open+0xe9/0x170
[ 92.493713][ T3622] ? fsnotify_perm+0x39b/0x550
[ 92.498484][ T3622] ? cd_forget+0x160/0x160
[ 92.502905][ T3622] do_dentry_open+0x7e9/0x10d0
[ 92.507688][ T3622] path_openat+0x25c6/0x2e70
[ 92.512309][ T3622] ? do_sys_openat2+0xcf/0x490
[ 92.517085][ T3622] ? __x64_sys_openat+0x135/0x160
[ 92.522118][ T3622] ? do_syscall_64+0x4c/0xa0
[ 92.526748][ T3622] ? do_filp_open+0x3c0/0x3c0
[ 92.531456][ T3622] do_filp_open+0x1c1/0x3c0
[ 92.535977][ T3622] ? vfs_tmpfile+0x480/0x480
[ 92.540630][ T3622] ? _raw_spin_unlock+0x24/0x40
[ 92.545495][ T3622] ? alloc_fd+0x58f/0x630
[ 92.549839][ T3622] do_sys_openat2+0x142/0x490
[ 92.554524][ T3622] ? _raw_spin_unlock_irq+0x1f/0x40
[ 92.559754][ T3622] ? lockdep_hardirqs_on+0x94/0x140
[ 92.564993][ T3622] ? do_sys_open+0xe0/0xe0
[ 92.569426][ T3622] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 92.575428][ T3622] ? lock_chain_count+0x20/0x20
[ 92.580297][ T3622] __x64_sys_openat+0x135/0x160
[ 92.585165][ T3622] do_syscall_64+0x4c/0xa0
[ 92.589611][ T3622] ? clear_bhb_loop+0x60/0xb0
[ 92.594291][ T3622] ? clear_bhb_loop+0x60/0xb0
[ 92.598980][ T3622] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.604891][ T3622] RIP: 0033:0x7fc72bc5b407
[ 92.609330][ T3622] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 92.628937][ T3622] RSP: 002b:00007ffcddab56e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 92.637358][ T3622] RAX: ffffffffffffffda RBX: 00007fc72bbd1740 RCX: 00007fc72bc5b407
[ 92.645350][ T3622] RDX: 0000000000080800 RSI: 00007ffcddab58f0 RDI: ffffffffffffff9c
[ 92.653333][ T3622] RBP: 00007ffcddab58f0 R08: 0000000000000000 R09: 0000000000000000
[ 92.661314][ T3622] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020
[ 92.669309][ T3622] R13: 00007ffcddab59f0 R14: 0000562d94fff7fe R15: 00007ffcddab59f0
[ 92.677315][ T3622]
[ 92.680693][ T3622] Kernel Offset: disabled
[ 92.685064][ T3622] Rebooting in 86400 seconds..