no interfaces have a carrier [ 46.520728][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.554342][ T5271] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. 2026/10/16 03:20:34 parsed 1 programs 2026/10/16 03:20:34 serving rpc on tcp://42959 syzkaller login: [ 76.526575][ T5621] cgroup: Unknown subsys name 'net' [ 76.656576][ T5621] cgroup: Unknown subsys name 'cpuset' [ 76.665559][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.066706][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.974716][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.399588][ T5661] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.402908][ T5661] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.404482][ T5661] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.572969][ T5661] infiniband rxe0: set active [ 82.573726][ T1224] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.574188][ T5661] infiniband rxe0: added rxe_eth0 [ 82.589946][ T5661] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 82.589978][ T5661] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 82.590012][ T5661] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 82.627722][ T5661] RDS/IB: rxe0: added [ 82.631807][ T5661] smc: adding ib device rxe0 with port count 1 [ 82.631902][ T5661] smc: ib device rxe0 port 1 has no pnetid [ 82.633639][ T2255] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.661221][ T5661] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.914454][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.915102][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.915225][ T5661] bridge_slave_0: entered allmulticast mode [ 82.916218][ T5661] bridge_slave_0: entered promiscuous mode [ 82.920431][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.920585][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.920713][ T5661] bridge_slave_1: entered allmulticast mode [ 82.922467][ T5661] bridge_slave_1: entered promiscuous mode [ 82.953752][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.956933][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.988097][ T5661] team0: Port device team_slave_0 added [ 82.991116][ T5661] team0: Port device team_slave_1 added [ 83.014327][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.014339][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.014357][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.016089][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.016103][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.016126][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.059837][ T5661] hsr_slave_0: entered promiscuous mode [ 83.060864][ T5661] hsr_slave_1: entered promiscuous mode [ 83.212897][ T5661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.223729][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.224874][ T5661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.227277][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.229177][ T5661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.231967][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.232745][ T5661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.236750][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.283229][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.283312][ T5661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.283676][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.283739][ T5661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.345905][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.361103][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.361852][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.385547][ T5661] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.392490][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.392594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.404472][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.404572][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.701408][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.741831][ T5661] veth0_vlan: entered promiscuous mode [ 83.749318][ T5661] veth1_vlan: entered promiscuous mode [ 83.775735][ T5661] veth0_macvtap: entered promiscuous mode [ 83.780119][ T5661] veth1_macvtap: entered promiscuous mode [ 83.806650][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.812746][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.855029][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.876101][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.876560][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.883499][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.979742][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.050472][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.077177][ T5704] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.118834][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.189265][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.387927][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.390786][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.391328][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.392919][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.409379][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.507808][ T5709] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.815675][ T5717] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.073110][ T5722] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.332043][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.542634][ T5732] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.754270][ T5737] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.916328][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.916353][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.951361][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.951381][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.099433][ T5742] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.357780][ T5747] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.611353][ T45] bridge_slave_1: left allmulticast mode [ 86.611381][ T45] bridge_slave_1: left promiscuous mode [ 86.612218][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.632503][ T45] bridge_slave_0: left allmulticast mode [ 86.632521][ T45] bridge_slave_0: left promiscuous mode [ 86.633072][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.757380][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.759836][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.760893][ T45] bond0 (unregistering): Released all slaves [ 86.817269][ T10] cfg80211: failed to load regulatory.db [ 87.229819][ T45] hsr_slave_0: left promiscuous mode [ 87.230553][ T45] hsr_slave_1: left promiscuous mode [ 87.231537][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.231566][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.234698][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.234716][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.292887][ T45] veth1_macvtap: left promiscuous mode [ 87.292936][ T45] veth0_macvtap: left promiscuous mode [ 87.293038][ T45] veth1_vlan: left promiscuous mode [ 87.293124][ T45] veth0_vlan: left promiscuous mode 2026/10/16 03:20:48 executed programs: 0 [ 87.680051][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.681803][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.682358][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.707311][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.709137][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.709847][ T45] team0 (unregistering): Port device team_slave_1 removed [ 87.743720][ T45] team0 (unregistering): Port device team_slave_0 removed [ 87.859789][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 88.192210][ T5765] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.720972][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.380823][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.380976][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.381118][ T5765] bridge_slave_0: entered allmulticast mode [ 89.382780][ T5765] bridge_slave_0: entered promiscuous mode [ 89.389252][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.391109][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.391241][ T5765] bridge_slave_1: entered allmulticast mode [ 89.392867][ T5765] bridge_slave_1: entered promiscuous mode [ 89.491147][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.500488][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.538545][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 89.577793][ T5765] team0: Port device team_slave_0 added [ 89.582931][ T5765] team0: Port device team_slave_1 added [ 89.697436][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.697449][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.697462][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.704485][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.704500][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.704523][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.764519][ T4927] Bluetooth: hci0: command tx timeout [ 89.881510][ T5765] hsr_slave_0: entered promiscuous mode [ 89.885187][ T5765] hsr_slave_1: entered promiscuous mode [ 91.035145][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.041135][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.042340][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.075596][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.077311][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.100264][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.101582][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.121298][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.246619][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.280844][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.302879][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.303002][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.324601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.324739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.843793][ T4927] Bluetooth: hci0: command tx timeout [ 92.170449][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.269249][ T5765] veth0_vlan: entered promiscuous mode [ 92.284885][ T5765] veth1_vlan: entered promiscuous mode [ 92.374871][ T5765] veth0_macvtap: entered promiscuous mode [ 92.387443][ T5765] veth1_macvtap: entered promiscuous mode [ 92.445631][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.459636][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.513790][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514631][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514666][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.543697][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598904][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.598925][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.639052][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/10/16 03:20:53 executed programs: 2 [ 92.639073][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.797114][ T32] [ 93.799489][ T32] ====================================================== [ 93.806536][ T32] WARNING: possible circular locking dependency detected [ 93.813608][ T32] syzkaller #0 Not tainted [ 93.818040][ T32] ------------------------------------------------------ [ 93.826195][ T32] kworker/1:1/32 is trying to acquire lock: [ 93.832120][ T32] ffff8880348602c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x30/0x230 [ 93.841911][ T32] [ 93.841911][ T32] but task is already holding lock: [ 93.849370][ T32] ffff88813fe720b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 93.858209][ T32] [ 93.858209][ T32] which lock already depends on the new lock. [ 93.858209][ T32] [ 93.868719][ T32] [ 93.868719][ T32] the existing dependency chain (in reverse order) is: [ 93.877748][ T32] [ 93.877748][ T32] -> #3 (&buf->lock){+.+.}-{4:4}: [ 93.884979][ T32] __mutex_lock+0x197/0x15a0 [ 93.890109][ T32] tty_buffer_flush+0x74/0x2b0 [ 93.895414][ T32] __do_SAK+0x25e/0x680 [ 93.900116][ T32] vc_SAK+0x78/0x220 [ 93.904546][ T32] process_scheduled_works+0xc3d/0x1630 [ 93.910625][ T32] worker_thread+0xa47/0xfb0 [ 93.915777][ T32] kthread+0x38b/0x480 [ 93.920394][ T32] ret_from_fork+0x514/0xb70 [ 93.925532][ T32] ret_from_fork_asm+0x1a/0x30 [ 93.930932][ T32] [ 93.930932][ T32] -> #2 (console_lock){+.+.}-{0:0}: [ 93.938355][ T32] console_lock+0x71/0x90 [ 93.943422][ T32] serial_core_register_port+0xe23/0x2b80 [ 93.949680][ T32] serial8250_register_8250_port+0x1a2c/0x2400 [ 93.956375][ T32] serial_pnp_probe+0x576/0x7d0 [ 93.961775][ T32] pnp_device_probe+0x313/0x4d0 [ 93.968038][ T32] really_probe+0x254/0xae0 [ 93.973080][ T32] __driver_probe_device+0x1e8/0x360 [ 93.978905][ T32] driver_probe_device+0x4f/0x240 [ 93.984467][ T32] __driver_attach+0x339/0x600 [ 93.989773][ T32] bus_for_each_dev+0x23b/0x2c0 [ 93.995172][ T32] bus_add_driver+0x38f/0x6e0 [ 94.000390][ T32] driver_register+0x23a/0x320 [ 94.005700][ T32] serial8250_init+0x8f/0x160 [ 94.011106][ T32] do_one_initcall+0x250/0x870 [ 94.016387][ T32] do_initcall_level+0x10a/0x1a0 [ 94.022020][ T32] do_initcalls+0x59/0xa0 [ 94.026931][ T32] kernel_init_freeable+0x29d/0x3e0 [ 94.032654][ T32] kernel_init+0x22/0x1d0 [ 94.037679][ T32] ret_from_fork+0x514/0xb70 [ 94.042789][ T32] ret_from_fork_asm+0x1a/0x30 [ 94.048066][ T32] [ 94.048066][ T32] -> #1 (&port->mutex){+.+.}-{4:4}: [ 94.055527][ T32] __mutex_lock+0x197/0x15a0 [ 94.060680][ T32] uart_set_termios+0x83/0x1330 [ 94.066121][ T32] tty_set_termios+0xcaf/0x1800 [ 94.071493][ T32] set_termios+0x538/0x6c0 [ 94.076430][ T32] tty_mode_ioctl+0x49c/0x7c0 [ 94.081635][ T32] tty_ioctl+0x9bd/0xde0 [ 94.086405][ T32] __se_sys_ioctl+0xfc/0x170 [ 94.091510][ T32] do_syscall_64+0x166/0x520 [ 94.096620][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.103025][ T32] [ 94.103025][ T32] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 94.112221][ T32] __lock_acquire+0x164c/0x2de0 [ 94.117704][ T32] lock_acquire+0x115/0x350 [ 94.122747][ T32] down_write+0x91/0x200 [ 94.127614][ T32] n_tty_flush_buffer+0x30/0x230 [ 94.133209][ T32] tty_buffer_flush+0x1ec/0x2b0 [ 94.138584][ T32] tty_ldisc_flush+0x6b/0xc0 [ 94.143679][ T32] __do_SAK+0x25e/0x680 [ 94.148353][ T32] vc_SAK+0x78/0x220 [ 94.152859][ T32] process_scheduled_works+0xc3d/0x1630 [ 94.159019][ T32] worker_thread+0xa47/0xfb0 [ 94.164118][ T32] kthread+0x38b/0x480 [ 94.168694][ T32] ret_from_fork+0x514/0xb70 [ 94.173878][ T32] ret_from_fork_asm+0x1a/0x30 [ 94.179151][ T32] [ 94.179151][ T32] other info that might help us debug this: [ 94.179151][ T32] [ 94.189391][ T32] Chain exists of: [ 94.189391][ T32] &tty->termios_rwsem --> console_lock --> &buf->lock [ 94.189391][ T32] [ 94.202169][ T32] Possible unsafe locking scenario: [ 94.202169][ T32] [ 94.210046][ T32] CPU0 CPU1 [ 94.215483][ T32] ---- ---- [ 94.220880][ T32] lock(&buf->lock); [ 94.224843][ T32] lock(console_lock); [ 94.231502][ T32] lock(&buf->lock); [ 94.237992][ T32] lock(&tty->termios_rwsem); [ 94.242826][ T32] [ 94.242826][ T32] *** DEADLOCK *** [ 94.242826][ T32] [ 94.250972][ T32] locks held by kworker/1:1/32: 5, last CPU#1: [ 94.257783][ T32] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 94.269175][ T32] #1: ffffc90000a77c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 94.282588][ T32] #2: ffffffff9014c560 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 94.291544][ T32] #3: ffff8880348600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 94.301015][ T32] #4: ffff88813fe720b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 94.311187][ T32] [ 94.311187][ T32] stack backtrace: [ 94.317257][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 94.326615][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.336688][ T32] Workqueue: events vc_SAK [ 94.341136][ T32] Call Trace: [ 94.344415][ T32] [ 94.347354][ T32] dump_stack_lvl+0xe8/0x150 [ 94.351958][ T32] print_circular_bug+0x2e2/0x300 [ 94.357070][ T32] check_noncircular+0x12f/0x150 [ 94.362096][ T32] __lock_acquire+0x164c/0x2de0 [ 94.366933][ T32] ? __pfx___mutex_trylock_common+0x10/0x10 [ 94.372964][ T32] ? rcu_is_watching+0x16/0xb0 [ 94.377731][ T32] ? trace_contention_end+0x3d/0x140 [ 94.383003][ T32] lock_acquire+0x115/0x350 [ 94.387506][ T32] ? n_tty_flush_buffer+0x30/0x230 [ 94.392602][ T32] down_write+0x91/0x200 [ 94.396941][ T32] ? n_tty_flush_buffer+0x30/0x230 [ 94.402050][ T32] ? __pfx_down_write+0x10/0x10 [ 94.406905][ T32] ? __pfx_n_tty_flush_buffer+0x10/0x10 [ 94.412531][ T32] n_tty_flush_buffer+0x30/0x230 [ 94.417452][ T32] ? tty_buffer_flush+0x1df/0x2b0 [ 94.422466][ T32] ? __pfx_n_tty_flush_buffer+0x10/0x10 [ 94.428085][ T32] tty_buffer_flush+0x1ec/0x2b0 [ 94.433220][ T32] tty_ldisc_flush+0x6b/0xc0 [ 94.437916][ T32] __do_SAK+0x25e/0x680 [ 94.442077][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.447962][ T32] vc_SAK+0x78/0x220 [ 94.451857][ T32] ? process_scheduled_works+0x97a/0x1630 [ 94.457562][ T32] process_scheduled_works+0xc3d/0x1630 [ 94.463103][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.469111][ T32] ? assign_work+0x3cf/0x5d0 [ 94.473695][ T32] worker_thread+0xa47/0xfb0 [ 94.478281][ T32] kthread+0x38b/0x480 [ 94.482542][ T32] ? __pfx_worker_thread+0x10/0x10 [ 94.487738][ T32] ? __pfx_kthread+0x10/0x10 [ 94.492324][ T32] ret_from_fork+0x514/0xb70 [ 94.496904][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 94.502085][ T32] ? __switch_to+0xc78/0x1410 [ 94.506769][ T32] ? __pfx_kthread+0x10/0x10 [ 94.511469][ T32] ret_from_fork_asm+0x1a/0x30 [ 94.516320][ T32] [ 94.522595][ T4927] Bluetooth: hci0: command tx timeout [ 96.045940][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.563646][ T4927] Bluetooth: hci0: command tx timeout