Warning: Permanently added '[localhost]:7381' (ED25519) to the list of known hosts. 2024/08/08 20:05:35 ignoring optional flag "sandboxArg"="0" 2024/08/08 20:05:36 parsed 1 programs [ 189.584399][ T39] audit: type=1400 audit(1723147541.108:142): avc: denied { unlink } for pid=5622 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 193.012081][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.805277][ T5380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.821665][ T5380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.827236][ T5380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.831633][ T5380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.902705][ T5380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.915993][ T5380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.136223][ T39] audit: type=1401 audit(1723147556.668:143): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 206.482935][ T5678] chnl_net:caif_netlink_parms(): no params data found [ 206.781934][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.803713][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.823285][ T5678] bridge_slave_0: entered allmulticast mode [ 206.828168][ T5678] bridge_slave_0: entered promiscuous mode [ 206.835667][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.838466][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.841194][ T5678] bridge_slave_1: entered allmulticast mode [ 206.847599][ T5678] bridge_slave_1: entered promiscuous mode [ 206.978639][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.999563][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.190078][ T5678] team0: Port device team_slave_0 added [ 207.215586][ T5678] team0: Port device team_slave_1 added [ 207.457260][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.460435][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.505624][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.531382][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.536817][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.554624][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.761884][ T5678] hsr_slave_0: entered promiscuous mode [ 207.784865][ T5678] hsr_slave_1: entered promiscuous mode [ 209.625976][ T5678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.655032][ T5678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.668398][ T5678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.687544][ T5678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.874683][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.898555][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.908436][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.912065][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.968253][ T834] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.973759][ T834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.109115][ T5678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.635886][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.729082][ T5678] veth0_vlan: entered promiscuous mode [ 210.756577][ T5678] veth1_vlan: entered promiscuous mode [ 210.786443][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.789032][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.828982][ T5678] veth0_macvtap: entered promiscuous mode [ 210.836093][ T5678] veth1_macvtap: entered promiscuous mode [ 210.856508][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.880272][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.894402][ T5678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.907638][ T5678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.919459][ T5678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.936373][ T5678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.500628][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.215410][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.219030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.432703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.442331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/08/08 20:06:04 executed programs: 0 [ 212.877638][ T5380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.932787][ T5380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.937914][ T5380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.942457][ T5380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.964300][ T5380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.969249][ T5380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.289822][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 213.656279][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.661032][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.669198][ T5769] bridge_slave_0: entered allmulticast mode [ 213.676885][ T5769] bridge_slave_0: entered promiscuous mode [ 213.694987][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.698289][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.701407][ T5769] bridge_slave_1: entered allmulticast mode [ 213.709207][ T5769] bridge_slave_1: entered promiscuous mode [ 213.881813][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.907006][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.109288][ T5769] team0: Port device team_slave_0 added [ 214.182846][ T5769] team0: Port device team_slave_1 added [ 214.475542][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.478702][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.504707][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.511006][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.513807][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.532663][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.827115][ T5769] hsr_slave_0: entered promiscuous mode [ 214.898790][ T5769] hsr_slave_1: entered promiscuous mode [ 214.970185][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.973355][ T5769] Cannot create hsr debugfs directory [ 215.018357][ T5380] Bluetooth: hci0: command tx timeout [ 215.099516][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.833437][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.074383][ T5380] Bluetooth: hci0: command tx timeout [ 217.219021][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.547232][ T1109] bridge_slave_1: left allmulticast mode [ 217.549839][ T1109] bridge_slave_1: left promiscuous mode [ 217.552610][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.599724][ T1109] bridge_slave_0: left allmulticast mode [ 217.602347][ T1109] bridge_slave_0: left promiscuous mode [ 217.613172][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.374662][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.397052][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.408689][ T1109] bond0 (unregistering): Released all slaves [ 218.862267][ T1109] hsr_slave_0: left promiscuous mode [ 218.868285][ T1109] hsr_slave_1: left promiscuous mode [ 218.871581][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.884532][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.897043][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.900156][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.004719][ T1109] veth1_macvtap: left promiscuous mode [ 219.007200][ T1109] veth0_macvtap: left promiscuous mode [ 219.009809][ T1109] veth1_vlan: left promiscuous mode [ 219.012367][ T1109] veth0_vlan: left promiscuous mode [ 219.202177][ T5380] Bluetooth: hci0: command tx timeout [ 220.928293][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 221.147258][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 221.254317][ T5380] Bluetooth: hci0: command tx timeout [ 222.919356][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.941161][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.949135][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.978316][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.168849][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.196165][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.219421][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.223826][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.238664][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.247093][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.985055][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.185063][ T5769] veth0_vlan: entered promiscuous mode [ 224.194895][ T5769] veth1_vlan: entered promiscuous mode [ 224.257307][ T5769] veth0_macvtap: entered promiscuous mode [ 224.279191][ T5769] veth1_macvtap: entered promiscuous mode [ 224.325897][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.349109][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.373590][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.406972][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.417888][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.421856][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.582467][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.586829][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.658332][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.667743][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/08/08 20:06:16 executed programs: 2 [ 224.865729][ T39] audit: type=1400 audit(1723147576.388:144): avc: denied { read write } for pid=5867 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.922412][ T39] audit: type=1400 audit(1723147576.388:145): avc: denied { open } for pid=5867 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.974785][ T39] audit: type=1400 audit(1723147576.388:146): avc: denied { ioctl } for pid=5867 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=763 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.154386][ T5402] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.348566][ T5402] usb 5-1: config 0 has an invalid interface number: 10 but max is 0 [ 225.353234][ T5402] usb 5-1: config 0 has no interface number 0 [ 225.357800][ T5402] usb 5-1: config 0 interface 10 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.363737][ T5402] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 225.415804][ T5402] usb 5-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 225.421985][ T5402] usb 5-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.492079][ T5402] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 225.496320][ T5402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.516930][ T5402] usb 5-1: Product: syz [ 225.518844][ T5402] usb 5-1: Manufacturer: syz [ 225.520992][ T5402] usb 5-1: SerialNumber: syz [ 225.555920][ T5402] usb 5-1: config 0 descriptor?? [ 225.571021][ T5868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.679241][ T5402] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.10/input/input5 [ 225.724410][ T39] audit: type=1400 audit(1723147577.238:147): avc: denied { read } for pid=4808 comm="acpid" name="mouse2" dev="devtmpfs" ino=2394 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.753604][ T39] audit: type=1400 audit(1723147577.238:148): avc: denied { open } for pid=4808 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2394 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.032711][ T4808] ------------[ cut here ]------------ [ 226.040093][ T4808] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 226.049803][ T4808] WARNING: CPU: 0 PID: 4808 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 226.053598][ T4808] Modules linked in: [ 226.060204][ T4808] CPU: 0 UID: 0 PID: 4808 Comm: acpid Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 226.090077][ T4808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.100972][ T4808] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 226.107358][ T4808] Code: 84 3c 02 00 00 e8 55 91 c2 fa 4c 89 ef e8 2d f1 db fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 60 f1 0b 8c e8 76 d8 84 fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 27 91 c2 fa 49 81 c4 c8 05 00 00 e9 [ 226.154853][ T4808] RSP: 0018:ffffc900036af7c0 EFLAGS: 00010286 [ 226.157438][ T4808] RAX: 0000000000000000 RBX: ffff88802af1a200 RCX: ffffffff814cc379 [ 226.187884][ T4808] RDX: ffff888029c78000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 226.191172][ T4808] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 226.206594][ T4808] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 226.210611][ T4808] R13: ffff8880212120a8 R14: ffff888023048520 R15: ffff88802af1a27c [ 226.232743][ T4808] FS: 00007f0cadd0a740(0000) GS:ffff88806b000000(0000) knlGS:0000000000000000 [ 226.247011][ T4808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.250621][ T4808] CR2: 0000563d955fd848 CR3: 0000000022b60000 CR4: 0000000000350ef0 [ 226.277366][ T4808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.281554][ T4808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.325880][ T4808] Call Trace: [ 226.327535][ T4808] [ 226.328951][ T4808] ? show_regs+0x8c/0xa0 [ 226.331483][ T4808] ? __warn+0xe5/0x3c0 [ 226.343602][ T4808] ? usb_submit_urb+0xe4b/0x1730 [ 226.348696][ T4808] ? report_bug+0x3c0/0x580 [ 226.352446][ T4808] ? handle_bug+0x3d/0x70 [ 226.363738][ T4808] ? exc_invalid_op+0x17/0x50 [ 226.382133][ T4808] ? asm_exc_invalid_op+0x1a/0x20 [ 226.391552][ T4808] ? __warn_printk+0x199/0x350 [ 226.402876][ T4808] ? __warn_printk+0x1a6/0x350 [ 226.405054][ T4808] ? usb_submit_urb+0xe4b/0x1730 [ 226.407358][ T4808] bcm5974_start_traffic+0xb8/0x180 [ 226.409772][ T4808] bcm5974_open+0xa2/0x170 [ 226.411816][ T4808] input_open_device+0x1c9/0x320 [ 226.423710][ T4808] ? __pfx_bcm5974_open+0x10/0x10 [ 226.436087][ T4808] mousedev_open_device+0xe0/0x140 [ 226.439661][ T4808] mousedev_open+0x2ff/0x590 [ 226.442540][ T4808] ? __pfx_mousedev_open+0x10/0x10 [ 226.450398][ T4808] chrdev_open+0x26d/0x6f0 [ 226.453247][ T4808] ? __pfx_chrdev_open+0x10/0x10 [ 226.457662][ T4808] ? security_file_open+0x9d/0x8b0 [ 226.460714][ T4808] do_dentry_open+0x91f/0x15f0 [ 226.463284][ T4808] ? __pfx_chrdev_open+0x10/0x10 [ 226.468961][ T4808] ? inode_permission+0xdd/0x5f0 [ 226.488731][ T4808] vfs_open+0x82/0x3f0 [ 226.491591][ T4808] ? may_open+0x1f2/0x400 [ 226.496154][ T4808] path_openat+0x2141/0x2d20 [ 226.499327][ T4808] ? __pfx_path_openat+0x10/0x10 [ 226.502873][ T4808] ? __pfx___lock_acquire+0x10/0x10 [ 226.507925][ T4808] ? find_held_lock+0x2d/0x110 [ 226.511209][ T4808] do_filp_open+0x1dc/0x430 [ 226.515896][ T4808] ? __pfx_do_filp_open+0x10/0x10 [ 226.519410][ T4808] ? find_held_lock+0x2d/0x110 [ 226.521832][ T4808] ? _raw_spin_unlock+0x28/0x50 [ 226.524658][ T4808] ? alloc_fd+0x2d7/0x6c0 [ 226.527171][ T4808] do_sys_openat2+0x17a/0x1e0 [ 226.529813][ T4808] ? __pfx_do_sys_openat2+0x10/0x10 [ 226.532727][ T4808] ? sigprocmask+0xf0/0x330 [ 226.536889][ T4808] __x64_sys_openat+0x175/0x210 [ 226.540217][ T4808] ? __pfx___x64_sys_openat+0x10/0x10 [ 226.558090][ T4808] ? ksys_read+0x1ab/0x260 [ 226.561291][ T4808] do_syscall_64+0xcd/0x250 [ 226.564539][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.568069][ T4808] RIP: 0033:0x7f0caddd49a4 [ 226.570453][ T4808] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 226.599133][ T4808] RSP: 002b:00007ffec91c8fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.605535][ T4808] RAX: ffffffffffffffda RBX: 00007ffec91c9298 RCX: 00007f0caddd49a4 [ 226.610868][ T4808] RDX: 0000000000080800 RSI: 00007ffec91c9198 RDI: 00000000ffffff9c [ 226.617148][ T4808] RBP: 00007ffec91c9198 R08: 00000000000000f4 R09: 00007ffec91c9198 [ 226.622930][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 226.629317][ T4808] R13: 0000000000000040 R14: 00007ffec91c9298 R15: 00007ffec91c9198 [ 226.645098][ T4808] [ 226.654779][ T4808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 226.659731][ T4808] CPU: 0 UID: 0 PID: 4808 Comm: acpid Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 226.679495][ T4808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.686777][ T4808] Call Trace: [ 226.688889][ T4808] [ 226.695400][ T4808] dump_stack_lvl+0x3d/0x1f0 [ 226.698024][ T4808] panic+0x6f5/0x7a0 [ 226.700789][ T4808] ? __pfx_panic+0x10/0x10 [ 226.707918][ T4808] ? show_trace_log_lvl+0x363/0x500 [ 226.716050][ T4808] ? check_panic_on_warn+0x1f/0xb0 [ 226.718471][ T4808] ? usb_submit_urb+0xe4b/0x1730 [ 226.720495][ T4808] check_panic_on_warn+0xab/0xb0 [ 226.736661][ T4808] __warn+0xf1/0x3c0 [ 226.739043][ T4808] ? usb_submit_urb+0xe4b/0x1730 [ 226.741775][ T4808] report_bug+0x3c0/0x580 [ 226.744164][ T4808] handle_bug+0x3d/0x70 [ 226.749010][ T4808] exc_invalid_op+0x17/0x50 [ 226.756223][ T4808] asm_exc_invalid_op+0x1a/0x20 [ 226.758567][ T4808] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 226.766028][ T4808] Code: 84 3c 02 00 00 e8 55 91 c2 fa 4c 89 ef e8 2d f1 db fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 60 f1 0b 8c e8 76 d8 84 fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 27 91 c2 fa 49 81 c4 c8 05 00 00 e9 [ 226.790526][ T4808] RSP: 0018:ffffc900036af7c0 EFLAGS: 00010286 [ 226.794409][ T4808] RAX: 0000000000000000 RBX: ffff88802af1a200 RCX: ffffffff814cc379 [ 226.799403][ T4808] RDX: ffff888029c78000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 226.804717][ T4808] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 226.809088][ T4808] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 226.813136][ T4808] R13: ffff8880212120a8 R14: ffff888023048520 R15: ffff88802af1a27c [ 226.816686][ T4808] ? __warn_printk+0x199/0x350 [ 226.835058][ T4808] ? __warn_printk+0x1a6/0x350 [ 226.837529][ T4808] bcm5974_start_traffic+0xb8/0x180 [ 226.840209][ T4808] bcm5974_open+0xa2/0x170 [ 226.842476][ T4808] input_open_device+0x1c9/0x320 [ 226.845028][ T4808] ? __pfx_bcm5974_open+0x10/0x10 [ 226.847577][ T4808] mousedev_open_device+0xe0/0x140 [ 226.850233][ T4808] mousedev_open+0x2ff/0x590 [ 226.852611][ T4808] ? __pfx_mousedev_open+0x10/0x10 [ 226.855251][ T4808] chrdev_open+0x26d/0x6f0 [ 226.871842][ T4808] ? __pfx_chrdev_open+0x10/0x10 [ 226.874419][ T4808] ? security_file_open+0x9d/0x8b0 [ 226.876993][ T4808] do_dentry_open+0x91f/0x15f0 [ 226.879379][ T4808] ? __pfx_chrdev_open+0x10/0x10 [ 226.881962][ T4808] ? inode_permission+0xdd/0x5f0 [ 226.884552][ T4808] vfs_open+0x82/0x3f0 [ 226.886730][ T4808] ? may_open+0x1f2/0x400 [ 226.902182][ T4808] path_openat+0x2141/0x2d20 [ 226.904645][ T4808] ? __pfx_path_openat+0x10/0x10 [ 226.907250][ T4808] ? __pfx___lock_acquire+0x10/0x10 [ 226.909959][ T4808] ? find_held_lock+0x2d/0x110 [ 226.912437][ T4808] do_filp_open+0x1dc/0x430 [ 226.914786][ T4808] ? __pfx_do_filp_open+0x10/0x10 [ 226.917351][ T4808] ? find_held_lock+0x2d/0x110 [ 226.926994][ T4808] ? _raw_spin_unlock+0x28/0x50 [ 226.929248][ T4808] ? alloc_fd+0x2d7/0x6c0 [ 226.931288][ T4808] do_sys_openat2+0x17a/0x1e0 [ 226.942212][ T4808] ? __pfx_do_sys_openat2+0x10/0x10 [ 226.945002][ T4808] ? sigprocmask+0xf0/0x330 [ 226.947209][ T4808] __x64_sys_openat+0x175/0x210 [ 226.949478][ T4808] ? __pfx___x64_sys_openat+0x10/0x10 [ 226.952144][ T4808] ? ksys_read+0x1ab/0x260 [ 226.954136][ T4808] do_syscall_64+0xcd/0x250 [ 226.955987][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.958354][ T4808] RIP: 0033:0x7f0caddd49a4 [ 226.960211][ T4808] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 226.984463][ T4808] RSP: 002b:00007ffec91c8fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.987814][ T4808] RAX: ffffffffffffffda RBX: 00007ffec91c9298 RCX: 00007f0caddd49a4 [ 226.990999][ T4808] RDX: 0000000000080800 RSI: 00007ffec91c9198 RDI: 00000000ffffff9c [ 227.010591][ T4808] RBP: 00007ffec91c9198 R08: 00000000000000f4 R09: 00007ffec91c9198 [ 227.028101][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 227.032162][ T4808] R13: 0000000000000040 R14: 00007ffec91c9298 R15: 00007ffec91c9198 [ 227.035467][ T4808] [ 227.051529][ T4808] Kernel Offset: disabled [ 227.053541][ T4808] Rebooting in 86400 seconds..