Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. 2025/09/11 21:55:14 parsed 1 programs [ 104.463084][ T30] audit: type=1400 audit(1757627716.789:116): avc: denied { unlink } for pid=6166 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.785951][ T6166] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.613107][ T6181] chnl_net:caif_netlink_parms(): no params data found [ 107.666185][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.673566][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.680647][ T6181] bridge_slave_0: entered allmulticast mode [ 107.687848][ T6181] bridge_slave_0: entered promiscuous mode [ 107.695334][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.702549][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.709655][ T6181] bridge_slave_1: entered allmulticast mode [ 107.716476][ T6181] bridge_slave_1: entered promiscuous mode [ 107.738989][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.750413][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.775590][ T6181] team0: Port device team_slave_0 added [ 107.783796][ T6181] team0: Port device team_slave_1 added [ 107.804447][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.811757][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.837778][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.849937][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.857564][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.883720][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.917493][ T6181] hsr_slave_0: entered promiscuous mode [ 107.923766][ T6181] hsr_slave_1: entered promiscuous mode [ 108.346705][ T6181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.358851][ T6181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.371017][ T6181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.383883][ T6181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.414531][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.422131][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.429554][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.436718][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.508516][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.525974][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.536045][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.554635][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.569931][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.577081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.594308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.601526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.836170][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.887931][ T6181] veth0_vlan: entered promiscuous mode [ 108.900526][ T6181] veth1_vlan: entered promiscuous mode [ 108.934405][ T6181] veth0_macvtap: entered promiscuous mode [ 108.947620][ T6181] veth1_macvtap: entered promiscuous mode [ 108.970712][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.988106][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.005290][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.043199][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.073788][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.088186][ T30] audit: type=1400 audit(1757627721.409:117): avc: denied { mount } for pid=6181 comm="syz-executor" name="/" dev="gadgetfs" ino=8785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.112499][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.206258][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.288620][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.367741][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.470976][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.264713][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.274705][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.307108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.315519][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.429774][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.446250][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.455692][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.465325][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.474025][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.614211][ T12] bridge_slave_1: left allmulticast mode [ 111.620144][ T12] bridge_slave_1: left promiscuous mode [ 111.626631][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.637381][ T12] bridge_slave_0: left allmulticast mode [ 111.643314][ T12] bridge_slave_0: left promiscuous mode [ 111.649024][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.887259][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.898589][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.908892][ T12] bond0 (unregistering): Released all slaves [ 112.004669][ T12] hsr_slave_0: left promiscuous mode [ 112.022143][ T12] hsr_slave_1: left promiscuous mode [ 112.030817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.052819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.075851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.092032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.119917][ T12] veth1_macvtap: left promiscuous mode [ 112.141399][ T12] veth0_macvtap: left promiscuous mode [ 112.147030][ T12] veth1_vlan: left promiscuous mode [ 112.161432][ T12] veth0_vlan: left promiscuous mode [ 112.605699][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.636878][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.286738][ T30] audit: type=1401 audit(1757627725.609:118): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/09/11 21:55:27 executed programs: 0 [ 114.974755][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.985577][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.993466][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.001722][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.009558][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.237662][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 115.324879][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.332076][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.339193][ T6451] bridge_slave_0: entered allmulticast mode [ 115.347235][ T6451] bridge_slave_0: entered promiscuous mode [ 115.355883][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.364066][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.371184][ T6451] bridge_slave_1: entered allmulticast mode [ 115.378499][ T6451] bridge_slave_1: entered promiscuous mode [ 115.415094][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.427606][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.465954][ T6451] team0: Port device team_slave_0 added [ 115.474133][ T6451] team0: Port device team_slave_1 added [ 115.501242][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.508209][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.534666][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.547394][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.554408][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.580352][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.620524][ T6451] hsr_slave_0: entered promiscuous mode [ 115.626768][ T6451] hsr_slave_1: entered promiscuous mode [ 116.015037][ T6451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.024468][ T6451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.035251][ T6451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.046909][ T6451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.074851][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.081994][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.089360][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.096504][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.109888][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.119022][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.183273][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.207070][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.219620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.226757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.241632][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.248742][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.466793][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.529397][ T6451] veth0_vlan: entered promiscuous mode [ 116.558403][ T6451] veth1_vlan: entered promiscuous mode [ 116.604163][ T6451] veth0_macvtap: entered promiscuous mode [ 116.624275][ T6451] veth1_macvtap: entered promiscuous mode [ 116.670178][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.687005][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.700739][ T1051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.712428][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.727577][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.766282][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.849194][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.869490][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.906680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.916005][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.996414][ T30] audit: type=1400 audit(1757627729.319:119): avc: denied { read write } for pid=6523 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.030236][ T30] audit: type=1400 audit(1757627729.319:120): avc: denied { open } for pid=6523 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.070643][ T30] audit: type=1400 audit(1757627729.319:121): avc: denied { ioctl } for pid=6523 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.111552][ T5932] Bluetooth: hci0: command tx timeout [ 117.232194][ T6011] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.404085][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.415148][ T6011] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.424215][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.435906][ T6011] usb 1-1: config 0 descriptor?? [ 117.848524][ T6011] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 117.860418][ T6011] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 117.957496][ T30] audit: type=1400 audit(1757627730.279:122): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.980781][ T30] audit: type=1400 audit(1757627730.279:123): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.983560][ T6011] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 118.018121][ T30] audit: type=1400 audit(1757627730.279:124): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2791 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.059663][ T6011] [ 118.059672][ T6011] ====================================================== [ 118.059679][ T6011] WARNING: possible circular locking dependency detected [ 118.059692][ T6011] syzkaller #0 Not tainted [ 118.059702][ T6011] ------------------------------------------------------ [ 118.059709][ T6011] kworker/1:5/6011 is trying to acquire lock: [ 118.059721][ T6011] ffff88801b8990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 118.059772][ T6011] [ 118.059772][ T6011] but task is already holding lock: [ 118.059778][ T6011] ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 118.059817][ T6011] [ 118.059817][ T6011] which lock already depends on the new lock. [ 118.059817][ T6011] [ 118.059823][ T6011] [ 118.059823][ T6011] the existing dependency chain (in reverse order) is: [ 118.059829][ T6011] [ 118.059829][ T6011] -> #2 (console_lock){+.+.}-{0:0}: [ 118.059870][ T6011] console_lock+0x7a/0xa0 [ 118.059890][ T6011] con_flush_chars+0x5e/0x80 [ 118.059908][ T6011] n_tty_receive_buf_common+0xa97/0x1980 [ 118.059937][ T6011] tty_ldisc_receive_buf+0xaa/0x1a0 [ 118.059956][ T6011] tty_port_default_receive_buf+0x70/0xb0 [ 118.059979][ T6011] flush_to_ldisc+0x26b/0x730 [ 118.059999][ T6011] process_one_work+0x9cc/0x1b70 [ 118.060019][ T6011] worker_thread+0x6c8/0xf10 [ 118.060039][ T6011] kthread+0x3c2/0x780 [ 118.060056][ T6011] ret_from_fork+0x56a/0x730 [ 118.060073][ T6011] ret_from_fork_asm+0x1a/0x30 [ 118.060096][ T6011] [ 118.060096][ T6011] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 118.060123][ T6011] down_read+0x9b/0x480 [ 118.060149][ T6011] n_tty_receive_buf_common+0x85/0x1980 [ 118.060176][ T6011] tty_ldisc_receive_buf+0xaa/0x1a0 [ 118.060197][ T6011] tty_port_default_receive_buf+0x70/0xb0 [ 118.060221][ T6011] flush_to_ldisc+0x26b/0x730 [ 118.060242][ T6011] process_one_work+0x9cc/0x1b70 [ 118.060262][ T6011] worker_thread+0x6c8/0xf10 [ 118.060281][ T6011] kthread+0x3c2/0x780 [ 118.060296][ T6011] ret_from_fork+0x56a/0x730 [ 118.060313][ T6011] ret_from_fork_asm+0x1a/0x30 [ 118.060335][ T6011] [ 118.060335][ T6011] -> #0 (&buf->lock){+.+.}-{4:4}: [ 118.060359][ T6011] __lock_acquire+0x12a6/0x1ce0 [ 118.060386][ T6011] lock_acquire+0x179/0x350 [ 118.060401][ T6011] __mutex_lock+0x193/0x1060 [ 118.060424][ T6011] tty_buffer_flush+0x72/0x310 [ 118.060445][ T6011] tty_ldisc_flush+0x64/0xe0 [ 118.060463][ T6011] __do_SAK+0x713/0x880 [ 118.060485][ T6011] vc_SAK+0x7f/0x310 [ 118.060500][ T6011] process_one_work+0x9cc/0x1b70 [ 118.060520][ T6011] worker_thread+0x6c8/0xf10 [ 118.060539][ T6011] kthread+0x3c2/0x780 [ 118.060555][ T6011] ret_from_fork+0x56a/0x730 [ 118.060572][ T6011] ret_from_fork_asm+0x1a/0x30 [ 118.060594][ T6011] [ 118.060594][ T6011] other info that might help us debug this: [ 118.060594][ T6011] [ 118.060600][ T6011] Chain exists of: [ 118.060600][ T6011] &buf->lock --> &tty->termios_rwsem --> console_lock [ 118.060600][ T6011] [ 118.060631][ T6011] Possible unsafe locking scenario: [ 118.060631][ T6011] [ 118.060636][ T6011] CPU0 CPU1 [ 118.060642][ T6011] ---- ---- [ 118.060647][ T6011] lock(console_lock); [ 118.060660][ T6011] lock(&tty->termios_rwsem); [ 118.060674][ T6011] lock(console_lock); [ 118.060688][ T6011] lock(&buf->lock); [ 118.060699][ T6011] [ 118.060699][ T6011] *** DEADLOCK *** [ 118.060699][ T6011] [ 118.060703][ T6011] 4 locks held by kworker/1:5/6011: [ 118.060714][ T6011] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 118.060763][ T6011] #1: ffffc90003377d10 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 118.060813][ T6011] #2: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 118.060862][ T6011] #3: ffff88802b02a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 118.060908][ T6011] [ 118.060908][ T6011] stack backtrace: [ 118.060927][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 118.060949][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.060961][ T6011] Workqueue: events vc_SAK [ 118.060984][ T6011] Call Trace: [ 118.060990][ T6011] [ 118.060997][ T6011] dump_stack_lvl+0x116/0x1f0 [ 118.061026][ T6011] print_circular_bug+0x275/0x350 [ 118.061054][ T6011] check_noncircular+0x14c/0x170 [ 118.061085][ T6011] __lock_acquire+0x12a6/0x1ce0 [ 118.061119][ T6011] lock_acquire+0x179/0x350 [ 118.061136][ T6011] ? tty_buffer_flush+0x72/0x310 [ 118.061159][ T6011] ? __pfx___might_resched+0x10/0x10 [ 118.061186][ T6011] ? tty_buffer_flush+0x72/0x310 [ 118.061209][ T6011] __mutex_lock+0x193/0x1060 [ 118.061232][ T6011] ? tty_buffer_flush+0x72/0x310 [ 118.061258][ T6011] ? __pfx___mutex_lock+0x10/0x10 [ 118.061285][ T6011] ? tty_buffer_flush+0x72/0x310 [ 118.061306][ T6011] tty_buffer_flush+0x72/0x310 [ 118.061327][ T6011] tty_ldisc_flush+0x64/0xe0 [ 118.061345][ T6011] __do_SAK+0x713/0x880 [ 118.061366][ T6011] ? mark_held_locks+0x49/0x80 [ 118.061393][ T6011] vc_SAK+0x7f/0x310 [ 118.061407][ T6011] process_one_work+0x9cc/0x1b70 [ 118.061431][ T6011] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 118.061458][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 118.061483][ T6011] ? assign_work+0x1a0/0x250 [ 118.061503][ T6011] worker_thread+0x6c8/0xf10 [ 118.061528][ T6011] ? __kthread_parkme+0x19e/0x250 [ 118.061555][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 118.061576][ T6011] kthread+0x3c2/0x780 [ 118.061595][ T6011] ? __pfx_kthread+0x10/0x10 [ 118.061611][ T6011] ? rcu_is_watching+0x12/0xc0 [ 118.061634][ T6011] ? __pfx_kthread+0x10/0x10 [ 118.061653][ T6011] ret_from_fork+0x56a/0x730 [ 118.061671][ T6011] ? __pfx_kthread+0x10/0x10 [ 118.061690][ T6011] ret_from_fork_asm+0x1a/0x30 [ 118.061719][ T6011] [ 118.066484][ T6011] tty tty1: SAK: killed process 6523 (syz.0.16): by fd#3 [ 118.066522][ T6011] tty tty1: SAK: killed process 6524 (syz.0.16): by fd#3 [ 118.082718][ T5897] usb 1-1: USB disconnect, device number 2 [ 118.119411][ T6538] fido_id[6538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 118.961397][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.112844][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.123807][ T5897] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.132857][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.141907][ T5897] usb 1-1: config 0 descriptor?? [ 119.191465][ T5932] Bluetooth: hci0: command tx timeout [ 119.549065][ T5897] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 119.560517][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6 [ 119.639657][ T5897] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 119.754361][ T5897] tty tty1: SAK: killed process 6539 (syz.0.17): by fd#3 [ 119.754404][ T5897] tty tty1: SAK: killed process 6540 (syz.0.17): by fd#3 [ 119.765692][ T942] usb 1-1: USB disconnect, device number 3 [ 120.091398][ T942] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.242393][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.253643][ T942] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.262760][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.272240][ T942] usb 1-1: config 0 descriptor?? [ 120.679386][ T942] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 120.689232][ T942] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 120.760307][ T942] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0