Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. 2026/02/09 13:41:01 parsed 1 programs [ 107.669754][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 107.669772][ T30] audit: type=1400 audit(1770644461.566:105): avc: denied { node_bind } for pid=6107 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.996770][ T30] audit: type=1400 audit(1770644463.896:106): avc: denied { unlink } for pid=6113 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 111.369214][ T6113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.275297][ T30] audit: type=1400 audit(1770644467.176:107): avc: denied { unmount } for pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.325297][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.333345][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.407882][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.417469][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.641330][ T30] audit: type=1401 audit(1770644468.536:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 115.296363][ T6183] chnl_net:caif_netlink_parms(): no params data found [ 115.389852][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.397337][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.404719][ T6183] bridge_slave_0: entered allmulticast mode [ 115.411481][ T6183] bridge_slave_0: entered promiscuous mode [ 115.419758][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.427128][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.434264][ T6183] bridge_slave_1: entered allmulticast mode [ 115.442342][ T6183] bridge_slave_1: entered promiscuous mode [ 115.474672][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.487084][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.519461][ T6183] team0: Port device team_slave_0 added [ 115.527673][ T6183] team0: Port device team_slave_1 added [ 115.548343][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.555366][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.583635][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.595881][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.602826][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.629088][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.662754][ T6183] hsr_slave_0: entered promiscuous mode [ 115.669652][ T6183] hsr_slave_1: entered promiscuous mode [ 116.062753][ T6183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.072676][ T6183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.084003][ T6183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.094203][ T6183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.138289][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.145509][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.153205][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.160419][ T6183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.227717][ T6183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.252929][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.264090][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.288272][ T6183] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.310909][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.318024][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.338346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.345459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.568797][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.620118][ T6183] veth0_vlan: entered promiscuous mode [ 116.638461][ T6183] veth1_vlan: entered promiscuous mode [ 116.679420][ T6183] veth0_macvtap: entered promiscuous mode [ 116.690282][ T6183] veth1_macvtap: entered promiscuous mode [ 116.712356][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.730019][ T6183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.747776][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.766909][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.781919][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.800032][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.929811][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.942279][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.943897][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.955904][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.969891][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.978101][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.057085][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.122873][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.232328][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/09 13:41:11 executed programs: 0 [ 117.931880][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.945801][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.954734][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.962890][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.972853][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.181955][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 118.276931][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.284127][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.291646][ T6283] bridge_slave_0: entered allmulticast mode [ 118.304259][ T6283] bridge_slave_0: entered promiscuous mode [ 118.312857][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.320156][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.327487][ T6283] bridge_slave_1: entered allmulticast mode [ 118.337037][ T6283] bridge_slave_1: entered promiscuous mode [ 118.376076][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.390465][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.427456][ T6283] team0: Port device team_slave_0 added [ 118.436652][ T6283] team0: Port device team_slave_1 added [ 118.469880][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.477168][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.508041][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.521696][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.528829][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.555012][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.611647][ T6283] hsr_slave_0: entered promiscuous mode [ 118.618659][ T6283] hsr_slave_1: entered promiscuous mode [ 118.625775][ T6283] debugfs: 'hsr0' already exists in 'hsr' [ 118.631511][ T6283] Cannot create hsr debugfs directory [ 119.132398][ T76] bridge_slave_1: left allmulticast mode [ 119.141279][ T76] bridge_slave_1: left promiscuous mode [ 119.149618][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.162704][ T76] bridge_slave_0: left allmulticast mode [ 119.168513][ T76] bridge_slave_0: left promiscuous mode [ 119.174984][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.469358][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.480479][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.493735][ T76] bond0 (unregistering): Released all slaves [ 119.646433][ T76] hsr_slave_0: left promiscuous mode [ 119.652778][ T76] hsr_slave_1: left promiscuous mode [ 119.659231][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.668040][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.685673][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.693079][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.719246][ T76] veth1_macvtap: left promiscuous mode [ 119.724982][ T76] veth0_macvtap: left promiscuous mode [ 119.730623][ T76] veth1_vlan: left promiscuous mode [ 119.736093][ T76] veth0_vlan: left promiscuous mode [ 119.972965][ T76] team0 (unregistering): Port device team_slave_1 removed [ 120.001961][ T76] team0 (unregistering): Port device team_slave_0 removed [ 120.017406][ T52] Bluetooth: hci0: command tx timeout [ 120.404255][ T6283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.415597][ T6283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.426787][ T6283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.437528][ T6283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.643363][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.703320][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.736476][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.743557][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.770238][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.777415][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.042502][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.100289][ T6283] veth0_vlan: entered promiscuous mode [ 121.113618][ T6283] veth1_vlan: entered promiscuous mode [ 121.155820][ T6283] veth0_macvtap: entered promiscuous mode [ 121.176864][ T6283] veth1_macvtap: entered promiscuous mode [ 121.208979][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.220131][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.238604][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.262053][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.273456][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.283788][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.384590][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.392422][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.445550][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.453399][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.596830][ T30] audit: type=1400 audit(1770644475.486:109): avc: denied { read write } for pid=6402 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.648867][ T30] audit: type=1400 audit(1770644475.496:110): avc: denied { open } for pid=6402 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.673358][ T30] audit: type=1400 audit(1770644475.496:111): avc: denied { ioctl } for pid=6402 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.875020][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.036782][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.047966][ T794] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.057260][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.067762][ T794] usb 1-1: config 0 descriptor?? [ 122.095157][ T52] Bluetooth: hci0: command tx timeout [ 122.481747][ T794] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 122.494054][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 122.593313][ T794] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 122.687511][ T5956] [ 122.687521][ T5956] ====================================================== [ 122.687528][ T5956] WARNING: possible circular locking dependency detected [ 122.687544][ T5956] syzkaller #0 Not tainted [ 122.687554][ T5956] ------------------------------------------------------ [ 122.687561][ T5956] kworker/0:3/5956 is trying to acquire lock: [ 122.687574][ T5956] ffff88813fec10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 122.687639][ T5956] [ 122.687639][ T5956] but task is already holding lock: [ 122.687646][ T5956] ffffffff8e5cf500 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 122.687689][ T5956] [ 122.687689][ T5956] which lock already depends on the new lock. [ 122.687689][ T5956] [ 122.687696][ T5956] [ 122.687696][ T5956] the existing dependency chain (in reverse order) is: [ 122.687702][ T5956] [ 122.687702][ T5956] -> #2 (console_lock){+.+.}-{0:0}: [ 122.687732][ T5956] console_lock+0x7a/0xa0 [ 122.687754][ T5956] con_flush_chars+0x63/0x90 [ 122.687776][ T5956] n_tty_receive_buf_common+0x4e3/0x1980 [ 122.687797][ T5956] tty_ldisc_receive_buf+0xaa/0x1a0 [ 122.687821][ T5956] tty_port_default_receive_buf+0x70/0xb0 [ 122.687850][ T5956] flush_to_ldisc+0x26b/0x730 [ 122.687874][ T5956] process_one_work+0x9c2/0x1840 [ 122.687897][ T5956] worker_thread+0x5da/0xe40 [ 122.687918][ T5956] kthread+0x3b3/0x730 [ 122.687936][ T5956] ret_from_fork+0x754/0xaf0 [ 122.687956][ T5956] ret_from_fork_asm+0x1a/0x30 [ 122.687972][ T5956] [ 122.687972][ T5956] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 122.687999][ T5956] down_read+0x99/0x460 [ 122.688027][ T5956] n_tty_receive_buf_common+0x85/0x1980 [ 122.688049][ T5956] tty_ldisc_receive_buf+0xaa/0x1a0 [ 122.688070][ T5956] tty_port_default_receive_buf+0x70/0xb0 [ 122.688097][ T5956] flush_to_ldisc+0x26b/0x730 [ 122.688121][ T5956] process_one_work+0x9c2/0x1840 [ 122.688143][ T5956] worker_thread+0x5da/0xe40 [ 122.688165][ T5956] kthread+0x3b3/0x730 [ 122.688184][ T5956] ret_from_fork+0x754/0xaf0 [ 122.688205][ T5956] ret_from_fork_asm+0x1a/0x30 [ 122.688223][ T5956] [ 122.688223][ T5956] -> #0 (&buf->lock){+.+.}-{4:4}: [ 122.688251][ T5956] __lock_acquire+0x14b8/0x2630 [ 122.688270][ T5956] lock_acquire+0x17c/0x330 [ 122.688332][ T5956] __mutex_lock+0x1a2/0x1b90 [ 122.688355][ T5956] tty_buffer_flush+0x72/0x310 [ 122.688376][ T5956] tty_ldisc_flush+0x68/0xf0 [ 122.688393][ T5956] __do_SAK+0x3d3/0x520 [ 122.688415][ T5956] vc_SAK+0x7f/0x320 [ 122.688431][ T5956] process_one_work+0x9c2/0x1840 [ 122.688453][ T5956] worker_thread+0x5da/0xe40 [ 122.688479][ T5956] kthread+0x3b3/0x730 [ 122.688496][ T5956] ret_from_fork+0x754/0xaf0 [ 122.688517][ T5956] ret_from_fork_asm+0x1a/0x30 [ 122.688535][ T5956] [ 122.688535][ T5956] other info that might help us debug this: [ 122.688535][ T5956] [ 122.688541][ T5956] Chain exists of: [ 122.688541][ T5956] &buf->lock --> &tty->termios_rwsem --> console_lock [ 122.688541][ T5956] [ 122.688575][ T5956] Possible unsafe locking scenario: [ 122.688575][ T5956] [ 122.688580][ T5956] CPU0 CPU1 [ 122.688586][ T5956] ---- ---- [ 122.688592][ T5956] lock(console_lock); [ 122.688606][ T5956] lock(&tty->termios_rwsem); [ 122.688621][ T5956] lock(console_lock); [ 122.688637][ T5956] lock(&buf->lock); [ 122.688650][ T5956] [ 122.688650][ T5956] *** DEADLOCK *** [ 122.688650][ T5956] [ 122.688655][ T5956] 4 locks held by kworker/0:3/5956: [ 122.688667][ T5956] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 122.688720][ T5956] #1: ffffc900045dfc98 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 122.688770][ T5956] #2: ffffffff8e5cf500 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 122.688824][ T5956] #3: ffff88807b2460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0 [ 122.688870][ T5956] [ 122.688870][ T5956] stack backtrace: [ 122.688895][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 122.688921][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 122.688939][ T5956] Workqueue: events vc_SAK [ 122.688961][ T5956] Call Trace: [ 122.688968][ T5956] [ 122.688976][ T5956] dump_stack_lvl+0x100/0x190 [ 122.689008][ T5956] print_circular_bug.cold+0x178/0x1c7 [ 122.689042][ T5956] check_noncircular+0x146/0x160 [ 122.689079][ T5956] __lock_acquire+0x14b8/0x2630 [ 122.689103][ T5956] ? arch_stack_walk+0x94/0xf0 [ 122.689134][ T5956] lock_acquire+0x17c/0x330 [ 122.689154][ T5956] ? tty_buffer_flush+0x72/0x310 [ 122.689183][ T5956] ? __pfx___might_resched+0x10/0x10 [ 122.689209][ T5956] ? stack_trace_save+0x8e/0xc0 [ 122.689242][ T5956] __mutex_lock+0x1a2/0x1b90 [ 122.689266][ T5956] ? tty_buffer_flush+0x72/0x310 [ 122.689295][ T5956] ? tty_buffer_flush+0x72/0x310 [ 122.689325][ T5956] ? __pfx___mutex_lock+0x10/0x10 [ 122.689355][ T5956] ? tty_buffer_flush+0x72/0x310 [ 122.689380][ T5956] tty_buffer_flush+0x72/0x310 [ 122.689407][ T5956] tty_ldisc_flush+0x68/0xf0 [ 122.689431][ T5956] __do_SAK+0x3d3/0x520 [ 122.689459][ T5956] ? mark_held_locks+0x40/0x70 [ 122.689489][ T5956] vc_SAK+0x7f/0x320 [ 122.689505][ T5956] process_one_work+0x9c2/0x1840 [ 122.689531][ T5956] ? __pfx_process_one_work+0x10/0x10 [ 122.689557][ T5956] ? assign_work+0x19c/0x250 [ 122.689578][ T5956] worker_thread+0x5da/0xe40 [ 122.689604][ T5956] ? __pfx_worker_thread+0x10/0x10 [ 122.689628][ T5956] ? kthread+0x17d/0x730 [ 122.689647][ T5956] ? __pfx_worker_thread+0x10/0x10 [ 122.689672][ T5956] kthread+0x3b3/0x730 [ 122.689691][ T5956] ? __pfx_kthread+0x10/0x10 [ 122.689711][ T5956] ? ret_from_fork+0x79/0xaf0 [ 122.689731][ T5956] ? ret_from_fork+0x79/0xaf0 [ 122.689753][ T5956] ? rcu_is_watching+0x12/0xc0 [ 122.689780][ T5956] ? __pfx_kthread+0x10/0x10 [ 122.689801][ T5956] ret_from_fork+0x754/0xaf0 [ 122.689825][ T5956] ? __pfx_ret_from_fork+0x10/0x10 [ 122.689848][ T5956] ? __switch_to+0x7b9/0x10c0 [ 122.689876][ T5956] ? __pfx_kthread+0x10/0x10 [ 122.689898][ T5956] ret_from_fork_asm+0x1a/0x30 [ 122.689923][ T5956] [ 122.692396][ T5956] tty tty1: SAK: killed process 6402 (syz.0.16): by fd#3 [ 122.692448][ T5956] tty tty1: SAK: killed process 6403 (syz.0.16): by fd#3 [ 122.697851][ T43] usb 1-1: USB disconnect, device number 2 [ 122.730527][ T6405] fido_id[6405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory 2026/02/09 13:41:17 executed programs: 3 [ 123.684551][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.835818][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.846794][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.856012][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.865107][ T43] usb 1-1: config 0 descriptor?? [ 124.174554][ T52] Bluetooth: hci0: command tx timeout [ 124.272438][ T43] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 124.284164][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6 [ 124.371233][ T43] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 124.477806][ T24] tty tty1: SAK: killed process 6406 (syz.0.17): by fd#3 [ 124.477961][ T24] tty tty1: SAK: killed process 6407 (syz.0.17): by fd#3 [ 124.480266][ T9] usb 1-1: USB disconnect, device number 3 [ 124.854611][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.005869][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.016791][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.025843][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.034734][ T9] usb 1-1: config 0 descriptor?? [ 125.441943][ T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 125.453183][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7 [ 125.532171][ T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 125.647172][ T9] tty tty1: SAK: killed process 6411 (syz.0.18): by fd#3 [ 125.647357][ T9] tty tty1: SAK: killed process 6412 (syz.0.18): by fd#3 [ 125.649799][ T5961] usb 1-1: USB disconnect, device number 4 [ 125.984565][ T5961] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.145809][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.156901][ T5961] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.165966][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.175032][ T5961] usb 1-1: config 0 descriptor?? [ 126.254775][ T52] Bluetooth: hci0: command tx timeout [ 126.583470][ T5961] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 126.593186][ T5961] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input8 [ 126.670506][ T5961] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 126.788764][ T794] tty tty1: SAK: killed process 6414 (syz.0.19): by fd#3 [ 126.788946][ T794] tty tty1: SAK: killed process 6415 (syz.0.19): by fd#3 [ 126.790949][ T5956] usb 1-1: USB disconnect, device number 5 [ 127.144527][ T5956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.296220][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.307136][ T5956] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.316196][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.325446][ T5956] usb 1-1: config 0 descriptor?? [ 127.732758][ T5956] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 127.742711][ T5956] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input9 [ 127.813008][ T5956] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 127.938770][ T9] tty tty1: SAK: killed process 6418 (syz.0.20): by fd#3 [ 127.938819][ T9] tty tty1: SAK: killed process 6419 (syz.0.20): by fd#3 [ 127.941509][ T6417] usb 1-1: USB disconnect, device number 6 [ 128.314535][ T6417] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.465903][ T6417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.476827][ T6417] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.485968][ T6417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.494953][ T6417] usb 1-1: config 0 descriptor?? [ 128.902983][ T6417] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 128.912727][ T6417] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input10 [ 128.982866][ T6417] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0