Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. 2026/04/12 00:29:40 ignoring optional flag "type"="gce" 2026/04/12 00:29:40 parsed 1 programs [ 104.584350][ T6119] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.027640][ T6128] chnl_net:caif_netlink_parms(): no params data found [ 107.086794][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.094013][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.101298][ T6128] bridge_slave_0: entered allmulticast mode [ 107.108236][ T6128] bridge_slave_0: entered promiscuous mode [ 107.115577][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.123090][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.130419][ T6128] bridge_slave_1: entered allmulticast mode [ 107.137842][ T6128] bridge_slave_1: entered promiscuous mode [ 107.163279][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.174872][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.202237][ T6128] team0: Port device team_slave_0 added [ 107.209491][ T6128] team0: Port device team_slave_1 added [ 107.232394][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.240062][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.265988][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.277876][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.284826][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.310772][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.349755][ T6128] hsr_slave_0: entered promiscuous mode [ 107.355905][ T6128] hsr_slave_1: entered promiscuous mode [ 107.840542][ T6128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.851678][ T6128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.861963][ T6128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.872489][ T6128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.902033][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.909235][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.916769][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.923923][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.981167][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.003429][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.012100][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.028975][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.048036][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.055136][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.071218][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.078397][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.284488][ T6128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.334370][ T6128] veth0_vlan: entered promiscuous mode [ 108.350506][ T6128] veth1_vlan: entered promiscuous mode [ 108.384948][ T6128] veth0_macvtap: entered promiscuous mode [ 108.395586][ T6128] veth1_macvtap: entered promiscuous mode [ 108.420205][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.435543][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.452291][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.472853][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.498577][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.509033][ T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.633864][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.737621][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.805197][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.843193][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.876660][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.909433][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.936126][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.944371][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.832055][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.842103][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.849863][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.857815][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.865882][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.957654][ T49] bridge_slave_1: left allmulticast mode [ 110.963505][ T49] bridge_slave_1: left promiscuous mode [ 110.970650][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.981860][ T49] bridge_slave_0: left allmulticast mode [ 111.010503][ T49] bridge_slave_0: left promiscuous mode [ 111.016583][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.236426][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.247683][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.257896][ T49] bond0 (unregistering): Released all slaves [ 111.364434][ T49] hsr_slave_0: left promiscuous mode [ 111.371101][ T49] hsr_slave_1: left promiscuous mode [ 111.377529][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.384924][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.395084][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.402911][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.428067][ T49] veth1_macvtap: left promiscuous mode [ 111.433664][ T49] veth0_macvtap: left promiscuous mode [ 111.443968][ T49] veth1_vlan: left promiscuous mode [ 111.449668][ T49] veth0_vlan: left promiscuous mode [ 111.688194][ T49] team0 (unregistering): Port device team_slave_1 removed [ 111.716062][ T49] team0 (unregistering): Port device team_slave_0 removed 2026/04/12 00:29:51 executed programs: 0 [ 112.191747][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.200477][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.211767][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.222180][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.239644][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.479537][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 113.163909][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.174104][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.188343][ T6342] bridge_slave_0: entered allmulticast mode [ 113.195900][ T6342] bridge_slave_0: entered promiscuous mode [ 113.210443][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.229088][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.236861][ T6342] bridge_slave_1: entered allmulticast mode [ 113.244506][ T6342] bridge_slave_1: entered promiscuous mode [ 113.418100][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.459425][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.590584][ T6342] team0: Port device team_slave_0 added [ 113.664056][ T6342] team0: Port device team_slave_1 added [ 113.705373][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.712442][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.738807][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.751340][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.758310][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.784640][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.838315][ T6342] hsr_slave_0: entered promiscuous mode [ 113.844791][ T6342] hsr_slave_1: entered promiscuous mode [ 114.266578][ T5892] Bluetooth: hci0: command tx timeout [ 114.330043][ T6342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.354965][ T6342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.371889][ T6342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.390769][ T6342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.514390][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.538303][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.553663][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.560835][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.576360][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.583504][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.757543][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.800176][ T6342] veth0_vlan: entered promiscuous mode [ 114.811534][ T6342] veth1_vlan: entered promiscuous mode [ 114.837931][ T6342] veth0_macvtap: entered promiscuous mode [ 114.847452][ T6342] veth1_macvtap: entered promiscuous mode [ 114.862743][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.876164][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.890425][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.899529][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.921236][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.930487][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.964816][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.976720][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.998143][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.006014][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.286862][ T1613] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.446764][ T1613] usb 1-1: Using ep0 maxpacket: 16 [ 115.458513][ T1613] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 115.468225][ T1613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.476224][ T1613] usb 1-1: Product: syz [ 115.480551][ T1613] usb 1-1: Manufacturer: syz [ 115.485151][ T1613] usb 1-1: SerialNumber: syz [ 115.492852][ T1613] usb 1-1: config 0 descriptor?? [ 115.700746][ T1613] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 115.752493][ T1613] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 115.760775][ T1613] dib0700: firmware download failed at 7 with -22 [ 116.065556][ T6433] FAULT_INJECTION: forcing a failure. [ 116.065556][ T6433] name failslab, interval 1, probability 0, space 0, times 1 [ 116.078369][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 116.078385][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.078396][ T6433] Call Trace: [ 116.078400][ T6433] [ 116.078405][ T6433] dump_stack_lvl+0xe8/0x150 [ 116.078429][ T6433] should_fail_ex+0x412/0x560 [ 116.078447][ T6433] should_failslab+0xa8/0x100 [ 116.078461][ T6433] __kmalloc_cache_noprof+0x88/0x660 [ 116.078474][ T6433] ? async_schedule_node_domain+0x5b/0x120 [ 116.078488][ T6433] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 116.078502][ T6433] async_schedule_node_domain+0x5b/0x120 [ 116.078516][ T6433] dev_cache_fw_image+0x36c/0x3f0 [ 116.078530][ T6433] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 116.078542][ T6433] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.078555][ T6433] ? enable_work+0x1fd/0x230 [ 116.078570][ T6433] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 116.078582][ T6433] dpm_for_each_dev+0x56/0xb0 [ 116.078594][ T6433] fw_pm_notify+0x20c/0x2d0 [ 116.078605][ T6433] ? __pfx_fw_pm_notify+0x10/0x10 [ 116.078615][ T6433] ? __pfx_autoremove_wake_function+0x10/0x10 [ 116.078633][ T6433] notifier_call_chain+0x1be/0x400 [ 116.078653][ T6433] blocking_notifier_call_chain_robust+0x85/0x100 [ 116.078665][ T6433] pm_notifier_call_chain_robust+0x2c/0x60 [ 116.078679][ T6433] snapshot_open+0x19c/0x280 [ 116.078692][ T6433] ? __pfx_snapshot_open+0x10/0x10 [ 116.078703][ T6433] misc_open+0x2d5/0x350 [ 116.078720][ T6433] chrdev_open+0x4cd/0x5e0 [ 116.078734][ T6433] ? __pfx_chrdev_open+0x10/0x10 [ 116.078745][ T6433] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 116.078760][ T6433] ? __pfx_chrdev_open+0x10/0x10 [ 116.078771][ T6433] do_dentry_open+0x785/0x14e0 [ 116.078792][ T6433] vfs_open+0x3b/0x340 [ 116.078803][ T6433] ? path_openat+0x2df0/0x3860 [ 116.078815][ T6433] path_openat+0x2e08/0x3860 [ 116.078834][ T6433] ? __pfx_stack_trace_save+0x10/0x10 [ 116.078846][ T6433] ? stack_depot_save_flags+0x33/0x810 [ 116.078865][ T6433] ? __pfx_path_openat+0x10/0x10 [ 116.078874][ T6433] ? __x64_sys_openat+0x138/0x170 [ 116.078887][ T6433] ? do_syscall_64+0x14d/0xf80 [ 116.078899][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.078913][ T6433] ? __lock_acquire+0x6b5/0x2cf0 [ 116.078929][ T6433] do_file_open+0x23e/0x4a0 [ 116.078943][ T6433] ? __pfx_do_file_open+0x10/0x10 [ 116.078964][ T6433] ? _raw_spin_unlock+0x28/0x50 [ 116.078975][ T6433] ? alloc_fd+0x64b/0x6c0 [ 116.078995][ T6433] do_sys_openat2+0x113/0x200 [ 116.079010][ T6433] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.079024][ T6433] ? ksys_write+0x242/0x270 [ 116.079035][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 116.079048][ T6433] __x64_sys_openat+0x138/0x170 [ 116.079064][ T6433] do_syscall_64+0x14d/0xf80 [ 116.079076][ T6433] ? trace_irq_disable+0x3b/0x150 [ 116.079084][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.079133][ T6433] ? clear_bhb_loop+0x40/0x90 [ 116.079145][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.079155][ T6433] RIP: 0033:0x7fbfa2d80949 [ 116.079169][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.079176][ T6433] RSP: 002b:00007fbfa3b0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.079193][ T6433] RAX: ffffffffffffffda RBX: 00007fbfa2f16038 RCX: 00007fbfa2d80949 [ 116.079199][ T6433] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 116.079206][ T6433] RBP: 00007fbfa3b0a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.079211][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.079216][ T6433] R13: 000000000000006e R14: 00007fbfa2f16038 R15: 00007ffc17c5e8e8 [ 116.079232][ T6433] [ 116.080662][ T6433] [ 116.441086][ T6433] ============================================ [ 116.447216][ T6433] WARNING: possible recursive locking detected [ 116.453438][ T6433] syzkaller #0 Not tainted [ 116.457833][ T6433] -------------------------------------------- [ 116.463962][ T6433] syz.0.15/6433 is trying to acquire lock: [ 116.469741][ T6433] ffffffff8f1945e8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x8d0 [ 116.477641][ T6433] [ 116.477641][ T6433] but task is already holding lock: [ 116.484980][ T6433] ffffffff8f1945e8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1f4/0x2d0 [ 116.493254][ T6433] [ 116.493254][ T6433] other info that might help us debug this: [ 116.501325][ T6433] Possible unsafe locking scenario: [ 116.501325][ T6433] [ 116.508764][ T6433] CPU0 [ 116.512030][ T6433] ---- [ 116.515324][ T6433] lock(fw_lock); [ 116.519034][ T6433] lock(fw_lock); [ 116.522747][ T6433] [ 116.522747][ T6433] *** DEADLOCK *** [ 116.522747][ T6433] [ 116.530867][ T6433] May be due to missing lock nesting notation [ 116.530867][ T6433] [ 116.539161][ T6433] 5 locks held by syz.0.15/6433: [ 116.544094][ T6433] #0: ffffffff8f01a888 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 116.552533][ T6433] #1: ffffffff8e607ea8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x49/0x70 [ 116.562883][ T6433] #2: ffffffff8e62f510 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 116.574701][ T6433] #3: ffffffff8f1945e8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1f4/0x2d0 [ 116.583393][ T6433] #4: ffffffff8f18f468 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0 [ 116.592865][ T6433] [ 116.592865][ T6433] stack backtrace: [ 116.598736][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 116.598751][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.598758][ T6433] Call Trace: [ 116.598764][ T6433] [ 116.598770][ T6433] dump_stack_lvl+0xe8/0x150 [ 116.598789][ T6433] print_deadlock_bug+0x279/0x290 [ 116.598807][ T6433] __lock_acquire+0x253f/0x2cf0 [ 116.598825][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.598840][ T6433] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.598855][ T6433] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 116.598869][ T6433] ? stack_depot_save_flags+0x3f3/0x810 [ 116.598888][ T6433] lock_acquire+0xf0/0x2e0 [ 116.598902][ T6433] ? assign_fw+0x52/0x8d0 [ 116.598917][ T6433] __mutex_lock+0x19f/0x1300 [ 116.598933][ T6433] ? assign_fw+0x52/0x8d0 [ 116.598943][ T6433] ? path_openat+0x2e08/0x3860 [ 116.598956][ T6433] ? do_sys_openat2+0x113/0x200 [ 116.598972][ T6433] ? __x64_sys_openat+0x138/0x170 [ 116.598988][ T6433] ? do_syscall_64+0x14d/0xf80 [ 116.599002][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.599017][ T6433] ? assign_fw+0x52/0x8d0 [ 116.599029][ T6433] ? __pfx___mutex_lock+0x10/0x10 [ 116.599047][ T6433] ? kasan_quarantine_put+0xbb/0x1f0 [ 116.599060][ T6433] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.599075][ T6433] assign_fw+0x52/0x8d0 [ 116.599088][ T6433] ? kfree+0x1c1/0x630 [ 116.599099][ T6433] ? _request_firmware+0xf11/0x1780 [ 116.599110][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.599126][ T6433] _request_firmware+0xfb6/0x1780 [ 116.599143][ T6433] ? __pfx__request_firmware+0x10/0x10 [ 116.599155][ T6433] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.599170][ T6433] __async_dev_cache_fw_image+0x7f/0x2d0 [ 116.599184][ T6433] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 116.599198][ T6433] async_schedule_node_domain+0xe1/0x120 [ 116.599215][ T6433] dev_cache_fw_image+0x36c/0x3f0 [ 116.599230][ T6433] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 116.599243][ T6433] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.599258][ T6433] ? enable_work+0x1fd/0x230 [ 116.599275][ T6433] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 116.599288][ T6433] dpm_for_each_dev+0x56/0xb0 [ 116.599302][ T6433] fw_pm_notify+0x20c/0x2d0 [ 116.599315][ T6433] ? __pfx_fw_pm_notify+0x10/0x10 [ 116.599327][ T6433] ? __pfx_autoremove_wake_function+0x10/0x10 [ 116.599349][ T6433] notifier_call_chain+0x1be/0x400 [ 116.599369][ T6433] blocking_notifier_call_chain_robust+0x85/0x100 [ 116.599383][ T6433] pm_notifier_call_chain_robust+0x2c/0x60 [ 116.599398][ T6433] snapshot_open+0x19c/0x280 [ 116.599413][ T6433] ? __pfx_snapshot_open+0x10/0x10 [ 116.599428][ T6433] misc_open+0x2d5/0x350 [ 116.599446][ T6433] chrdev_open+0x4cd/0x5e0 [ 116.599461][ T6433] ? __pfx_chrdev_open+0x10/0x10 [ 116.599475][ T6433] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 116.599489][ T6433] ? __pfx_chrdev_open+0x10/0x10 [ 116.599503][ T6433] do_dentry_open+0x785/0x14e0 [ 116.599523][ T6433] vfs_open+0x3b/0x340 [ 116.599537][ T6433] ? path_openat+0x2df0/0x3860 [ 116.599551][ T6433] path_openat+0x2e08/0x3860 [ 116.599567][ T6433] ? __pfx_stack_trace_save+0x10/0x10 [ 116.599581][ T6433] ? stack_depot_save_flags+0x33/0x810 [ 116.599600][ T6433] ? __pfx_path_openat+0x10/0x10 [ 116.599612][ T6433] ? __x64_sys_openat+0x138/0x170 [ 116.599628][ T6433] ? do_syscall_64+0x14d/0xf80 [ 116.599642][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.599656][ T6433] ? __lock_acquire+0x6b5/0x2cf0 [ 116.599672][ T6433] do_file_open+0x23e/0x4a0 [ 116.599686][ T6433] ? __pfx_do_file_open+0x10/0x10 [ 116.599704][ T6433] ? _raw_spin_unlock+0x28/0x50 [ 116.599716][ T6433] ? alloc_fd+0x64b/0x6c0 [ 116.599735][ T6433] do_sys_openat2+0x113/0x200 [ 116.599752][ T6433] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.599769][ T6433] ? ksys_write+0x242/0x270 [ 116.599782][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 116.599795][ T6433] __x64_sys_openat+0x138/0x170 [ 116.599813][ T6433] do_syscall_64+0x14d/0xf80 [ 116.599828][ T6433] ? trace_irq_disable+0x3b/0x150 [ 116.599838][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.599860][ T6433] ? clear_bhb_loop+0x40/0x90 [ 116.599874][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.599886][ T6433] RIP: 0033:0x7fbfa2d80949 [ 116.599898][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.599908][ T6433] RSP: 002b:00007fbfa3b0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.599920][ T6433] RAX: ffffffffffffffda RBX: 00007fbfa2f16038 RCX: 00007fbfa2d80949 [ 116.599929][ T6433] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 116.599937][ T6433] RBP: 00007fbfa3b0a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.599945][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.599952][ T6433] R13: 000000000000006e R14: 00007fbfa2f16038 R15: 00007ffc17c5e8e8 [ 116.599964][ T6433] [ 116.606051][ T5892] Bluetooth: hci0: command tx timeout [ 119.136506][ T5892] Bluetooth: hci0: command tx timeout [ 121.216467][ T5892] Bluetooth: hci0: command tx timeout