Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
2025/10/10 11:18:05 ignoring optional flag "type"="gce"
2025/10/10 11:18:05 parsed 1 programs
[ 115.235630][ T6141] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 118.212696][ T6164] chnl_net:caif_netlink_parms(): no params data found
[ 118.296781][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.304096][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.311663][ T6164] bridge_slave_0: entered allmulticast mode
[ 118.318657][ T6164] bridge_slave_0: entered promiscuous mode
[ 118.327088][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.334227][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.341481][ T6164] bridge_slave_1: entered allmulticast mode
[ 118.348601][ T6164] bridge_slave_1: entered promiscuous mode
[ 118.381116][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.393851][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.431390][ T6164] team0: Port device team_slave_0 added
[ 118.438941][ T6164] team0: Port device team_slave_1 added
[ 118.463130][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.470996][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.496983][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.509099][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.516102][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.542187][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.580061][ T6164] hsr_slave_0: entered promiscuous mode
[ 118.587209][ T6164] hsr_slave_1: entered promiscuous mode
[ 119.090457][ T6164] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.101776][ T6164] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.113850][ T6164] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.124898][ T6164] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.169255][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.176561][ T6164] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.184753][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.192019][ T6164] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.228465][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.238043][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.309336][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.333776][ T6164] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.348828][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.356034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.387831][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.395008][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.641660][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 119.697619][ T6164] veth0_vlan: entered promiscuous mode
[ 119.711983][ T6164] veth1_vlan: entered promiscuous mode
[ 119.752227][ T6164] veth0_macvtap: entered promiscuous mode
[ 119.763149][ T6164] veth1_macvtap: entered promiscuous mode
[ 119.788295][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.805273][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.824314][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.852987][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.888904][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.912269][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.024827][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.131562][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.213928][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.288729][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.156603][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.164811][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.207724][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.215579][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.107506][ T1158] bridge_slave_1: left allmulticast mode
[ 122.113209][ T1158] bridge_slave_1: left promiscuous mode
[ 122.121460][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.150974][ T1158] bridge_slave_0: left allmulticast mode
[ 122.169122][ T1158] bridge_slave_0: left promiscuous mode
[ 122.175663][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.270277][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.279973][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.288833][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 122.306400][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 122.319114][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.576952][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 122.587437][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 122.597211][ T1158] bond0 (unregistering): Released all slaves
[ 122.696323][ T1158] hsr_slave_0: left promiscuous mode
[ 122.702416][ T1158] hsr_slave_1: left promiscuous mode
[ 122.710514][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 122.718162][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 122.727212][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 122.734622][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 122.754671][ T1158] veth1_macvtap: left promiscuous mode
[ 122.760729][ T1158] veth0_macvtap: left promiscuous mode
[ 122.767098][ T1158] veth1_vlan: left promiscuous mode
[ 122.772444][ T1158] veth0_vlan: left promiscuous mode
[ 123.192467][ T1158] team0 (unregistering): Port device team_slave_1 removed
[ 123.234065][ T1158] team0 (unregistering): Port device team_slave_0 removed
2025/10/10 11:18:19 executed programs: 0
[ 125.496649][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 125.506177][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 125.513844][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 125.522375][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 125.531348][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 125.923849][ T6390] chnl_net:caif_netlink_parms(): no params data found
[ 126.069391][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.076980][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 126.084241][ T6390] bridge_slave_0: entered allmulticast mode
[ 126.092936][ T6390] bridge_slave_0: entered promiscuous mode
[ 126.102543][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.111422][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 126.118992][ T6390] bridge_slave_1: entered allmulticast mode
[ 126.127159][ T6390] bridge_slave_1: entered promiscuous mode
[ 126.171300][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 126.184654][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 126.231281][ T6390] team0: Port device team_slave_0 added
[ 126.240167][ T6390] team0: Port device team_slave_1 added
[ 126.281863][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 126.292050][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 126.318717][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 126.331453][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 126.338647][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 126.364607][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 126.412823][ T6390] hsr_slave_0: entered promiscuous mode
[ 126.419196][ T6390] hsr_slave_1: entered promiscuous mode
[ 126.888272][ T6390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.900285][ T6390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.914186][ T6390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.924455][ T6390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.022875][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.052591][ T6390] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.066800][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.073946][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.100431][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.107631][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.361885][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.413599][ T6390] veth0_vlan: entered promiscuous mode
[ 127.430476][ T6390] veth1_vlan: entered promiscuous mode
[ 127.472643][ T6390] veth0_macvtap: entered promiscuous mode
[ 127.481612][ T6390] veth1_macvtap: entered promiscuous mode
[ 127.500091][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.515045][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.528261][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.538304][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.547957][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.557858][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.608259][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.616359][ T52] Bluetooth: hci0: command tx timeout
[ 127.623010][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.646656][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.654540][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.956654][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 128.116052][ T5879] usb 1-1: Using ep0 maxpacket: 16
[ 128.125667][ T5879] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1
[ 128.134918][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 128.143219][ T5879] usb 1-1: Product: syz
[ 128.147746][ T5879] usb 1-1: Manufacturer: syz
[ 128.152430][ T5879] usb 1-1: SerialNumber: syz
[ 128.159999][ T5879] usb 1-1: config 0 descriptor??
[ 128.371303][ T5879] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware
[ 128.432286][ T5879] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 128.440510][ T5879] dib0700: firmware download failed at 7 with -22
[ 128.725140][ T6457] FAULT_INJECTION: forcing a failure.
[ 128.725140][ T6457] name failslab, interval 1, probability 0, space 0, times 1
[ 128.737923][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full)
[ 128.737939][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.737950][ T6457] Call Trace:
[ 128.737956][ T6457]
[ 128.737961][ T6457] dump_stack_lvl+0x189/0x250
[ 128.737983][ T6457] ? __pfx____ratelimit+0x10/0x10
[ 128.737996][ T6457] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.738007][ T6457] ? __pfx__printk+0x10/0x10
[ 128.738025][ T6457] should_fail_ex+0x414/0x560
[ 128.738047][ T6457] should_failslab+0xa8/0x100
[ 128.738058][ T6457] __kmalloc_cache_noprof+0x6f/0x6f0
[ 128.738073][ T6457] ? dev_create_fw_entry+0x74/0x190
[ 128.738088][ T6457] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 128.738102][ T6457] ? __pfx_fw_name_devm_release+0x10/0x10
[ 128.738114][ T6457] dev_create_fw_entry+0x74/0x190
[ 128.738128][ T6457] ? __pfx_fw_name_devm_release+0x10/0x10
[ 128.738140][ T6457] devres_for_each_res+0x12d/0x190
[ 128.738151][ T6457] ? __pfx_dev_create_fw_entry+0x10/0x10
[ 128.738164][ T6457] ? __pfx_devm_name_match+0x10/0x10
[ 128.738178][ T6457] dev_cache_fw_image+0xe7/0x3e0
[ 128.738191][ T6457] ? __pfx___mutex_lock+0x10/0x10
[ 128.738206][ T6457] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 128.738222][ T6457] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 128.738236][ T6457] dpm_for_each_dev+0x56/0xb0
[ 128.738250][ T6457] fw_pm_notify+0x200/0x2a0
[ 128.738263][ T6457] ? __pfx_fw_pm_notify+0x10/0x10
[ 128.738275][ T6457] ? __pfx_autoremove_wake_function+0x10/0x10
[ 128.738293][ T6457] ? blocking_notifier_call_chain_robust+0x65/0x100
[ 128.738311][ T6457] notifier_call_chain+0x1b6/0x3e0
[ 128.738327][ T6457] blocking_notifier_call_chain_robust+0x85/0x100
[ 128.738343][ T6457] pm_notifier_call_chain_robust+0x2c/0x60
[ 128.738354][ T6457] snapshot_open+0x19c/0x280
[ 128.738365][ T6457] ? __pfx_snapshot_open+0x10/0x10
[ 128.738379][ T6457] misc_open+0x2d5/0x350
[ 128.738397][ T6457] chrdev_open+0x4c9/0x5e0
[ 128.738408][ T6457] ? __pfx_chrdev_open+0x10/0x10
[ 128.738419][ T6457] ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 128.738433][ T6457] ? __pfx_chrdev_open+0x10/0x10
[ 128.738441][ T6457] do_dentry_open+0x950/0x13f0
[ 128.738461][ T6457] vfs_open+0x3b/0x340
[ 128.738470][ T6457] ? path_openat+0x2ecd/0x3830
[ 128.738485][ T6457] path_openat+0x2ee5/0x3830
[ 128.738517][ T6457] ? __pfx_path_openat+0x10/0x10
[ 128.738540][ T6457] do_filp_open+0x1fa/0x410
[ 128.738552][ T6457] ? __lock_acquire+0xab9/0xd20
[ 128.738563][ T6457] ? __pfx_do_filp_open+0x10/0x10
[ 128.738588][ T6457] ? _raw_spin_unlock+0x28/0x50
[ 128.738598][ T6457] ? alloc_fd+0x64c/0x6c0
[ 128.738619][ T6457] do_sys_openat2+0x121/0x1c0
[ 128.738632][ T6457] ? __pfx_do_sys_openat2+0x10/0x10
[ 128.738646][ T6457] ? ksys_write+0x22a/0x250
[ 128.738661][ T6457] ? __pfx_ksys_write+0x10/0x10
[ 128.738676][ T6457] __x64_sys_openat+0x138/0x170
[ 128.738690][ T6457] do_syscall_64+0xfa/0xfa0
[ 128.738703][ T6457] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.738715][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.738725][ T6457] ? clear_bhb_loop+0x60/0xb0
[ 128.738737][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.738747][ T6457] RIP: 0033:0x7f5909175b59
[ 128.738762][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.738771][ T6457] RSP: 002b:00007f5909e8c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 128.738787][ T6457] RAX: ffffffffffffffda RBX: 00007f5909306038 RCX: 00007f5909175b59
[ 128.738795][ T6457] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 128.738801][ T6457] RBP: 00007f5909e8c0a0 R08: 0000000000000000 R09: 0000000000000000
[ 128.738808][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 128.738814][ T6457] R13: 000000000000006e R14: 00007f5909306038 R15: 00007fffe5b95908
[ 128.738830][ T6457]
2025/10/10 11:18:25 executed programs: 3
[ 130.691330][ T6457] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 130.697706][ T6457] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 130.706744][ T6457] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 130.719461][ T10] usb 1-1: USB disconnect, device number 2
[ 131.075952][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 131.216513][ T52] Bluetooth: hci0: command 0x040f tx timeout
[ 131.225924][ T10] usb 1-1: Using ep0 maxpacket: 16
[ 131.234489][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1
[ 131.243930][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 131.252013][ T10] usb 1-1: Product: syz
[ 131.256218][ T10] usb 1-1: Manufacturer: syz
[ 131.260802][ T10] usb 1-1: SerialNumber: syz
[ 131.267185][ T10] usb 1-1: config 0 descriptor??
[ 131.473782][ T10] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware
[ 131.484996][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 131.493165][ T10] dib0700: firmware download failed at 7 with -22
[ 131.827041][ T6462] FAULT_INJECTION: forcing a failure.
[ 131.827041][ T6462] name failslab, interval 1, probability 0, space 0, times 0
[ 131.839839][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full)
[ 131.839860][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 131.839866][ T6462] Call Trace:
[ 131.839872][ T6462]
[ 131.839878][ T6462] dump_stack_lvl+0x189/0x250
[ 131.839894][ T6462] ? __pfx____ratelimit+0x10/0x10
[ 131.839908][ T6462] ? __pfx_dump_stack_lvl+0x10/0x10
[ 131.839920][ T6462] ? __pfx__printk+0x10/0x10
[ 131.839938][ T6462] should_fail_ex+0x414/0x560
[ 131.839954][ T6462] should_failslab+0xa8/0x100
[ 131.839966][ T6462] __kmalloc_cache_noprof+0x6f/0x6f0
[ 131.839981][ T6462] ? async_schedule_node_domain+0x5b/0x120
[ 131.839993][ T6462] ? __pfx___async_dev_cache_fw_image+0x10/0x10
[ 131.840009][ T6462] async_schedule_node_domain+0x5b/0x120
[ 131.840022][ T6462] dev_cache_fw_image+0x364/0x3e0
[ 131.840039][ T6462] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 131.840056][ T6462] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 131.840070][ T6462] dpm_for_each_dev+0x56/0xb0
[ 131.840085][ T6462] fw_pm_notify+0x200/0x2a0
[ 131.840097][ T6462] ? __pfx_fw_pm_notify+0x10/0x10
[ 131.840110][ T6462] ? __pfx_autoremove_wake_function+0x10/0x10
[ 131.840125][ T6462] ? blocking_notifier_call_chain_robust+0x65/0x100
[ 131.840144][ T6462] notifier_call_chain+0x1b6/0x3e0
[ 131.840160][ T6462] blocking_notifier_call_chain_robust+0x85/0x100
[ 131.840176][ T6462] pm_notifier_call_chain_robust+0x2c/0x60
[ 131.840187][ T6462] snapshot_open+0x19c/0x280
[ 131.840199][ T6462] ? __pfx_snapshot_open+0x10/0x10
[ 131.840208][ T6462] misc_open+0x2d5/0x350
[ 131.840225][ T6462] chrdev_open+0x4c9/0x5e0
[ 131.840237][ T6462] ? __pfx_chrdev_open+0x10/0x10
[ 131.840248][ T6462] ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 131.840262][ T6462] ? __pfx_chrdev_open+0x10/0x10
[ 131.840270][ T6462] do_dentry_open+0x950/0x13f0
[ 131.840290][ T6462] vfs_open+0x3b/0x340
[ 131.840300][ T6462] ? path_openat+0x2ecd/0x3830
[ 131.840314][ T6462] path_openat+0x2ee5/0x3830
[ 131.840347][ T6462] ? __pfx_path_openat+0x10/0x10
[ 131.840371][ T6462] do_filp_open+0x1fa/0x410
[ 131.840383][ T6462] ? __lock_acquire+0xab9/0xd20
[ 131.840394][ T6462] ? __pfx_do_filp_open+0x10/0x10
[ 131.840420][ T6462] ? _raw_spin_unlock+0x28/0x50
[ 131.840431][ T6462] ? alloc_fd+0x64c/0x6c0
[ 131.840454][ T6462] do_sys_openat2+0x121/0x1c0
[ 131.840467][ T6462] ? __pfx_do_sys_openat2+0x10/0x10
[ 131.840480][ T6462] ? ksys_write+0x22a/0x250
[ 131.840495][ T6462] ? __pfx_ksys_write+0x10/0x10
[ 131.840510][ T6462] __x64_sys_openat+0x138/0x170
[ 131.840525][ T6462] do_syscall_64+0xfa/0xfa0
[ 131.840538][ T6462] ? lockdep_hardirqs_on+0x9c/0x150
[ 131.840550][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.840560][ T6462] ? clear_bhb_loop+0x60/0xb0
[ 131.840573][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.840583][ T6462] RIP: 0033:0x7f5909175b59
[ 131.840593][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 131.840602][ T6462] RSP: 002b:00007f5909e8c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 131.840613][ T6462] RAX: ffffffffffffffda RBX: 00007f5909306038 RCX: 00007f5909175b59
[ 131.840621][ T6462] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 131.840627][ T6462] RBP: 00007f5909e8c0a0 R08: 0000000000000000 R09: 0000000000000000
[ 131.840634][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 131.840639][ T6462] R13: 000000000000006e R14: 00007f5909306038 R15: 00007fffe5b95908
[ 131.840719][ T6462]
[ 131.842323][ T6462]
[ 132.188317][ T6462] ============================================
[ 132.194453][ T6462] WARNING: possible recursive locking detected
[ 132.200609][ T6462] syzkaller #0 Not tainted
[ 132.205093][ T6462] --------------------------------------------
[ 132.211223][ T6462] syz.0.16/6462 is trying to acquire lock:
[ 132.217008][ T6462] ffffffff8eae1508 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x890
[ 132.225010][ T6462]
[ 132.225010][ T6462] but task is already holding lock:
[ 132.232505][ T6462] ffffffff8eae1508 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0
[ 132.240771][ T6462]
[ 132.240771][ T6462] other info that might help us debug this:
[ 132.248814][ T6462] Possible unsafe locking scenario:
[ 132.248814][ T6462]
[ 132.256248][ T6462] CPU0
[ 132.259537][ T6462] ----
[ 132.262801][ T6462] lock(fw_lock);
[ 132.266518][ T6462] lock(fw_lock);
[ 132.270238][ T6462]
[ 132.270238][ T6462] *** DEADLOCK ***
[ 132.270238][ T6462]
[ 132.278364][ T6462] May be due to missing lock nesting notation
[ 132.278364][ T6462]
[ 132.286668][ T6462] 5 locks held by syz.0.16/6462:
[ 132.291667][ T6462] #0: ffffffff8e98af68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[ 132.300114][ T6462] #1: ffffffff8dfed0e8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x4a/0x70
[ 132.310471][ T6462] #2: ffffffff8e0107f0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100
[ 132.322299][ T6462] #3: ffffffff8eae1508 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0
[ 132.330999][ T6462] #4: ffffffff8eadc588 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0
[ 132.340309][ T6462]
[ 132.340309][ T6462] stack backtrace:
[ 132.346184][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full)
[ 132.346202][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 132.346213][ T6462] Call Trace:
[ 132.346220][ T6462]
[ 132.346228][ T6462] dump_stack_lvl+0x189/0x250
[ 132.346247][ T6462] ? __pfx_dump_stack_lvl+0x10/0x10
[ 132.346263][ T6462] ? __pfx__printk+0x10/0x10
[ 132.346279][ T6462] ? print_lock_name+0xde/0x100
[ 132.346294][ T6462] print_deadlock_bug+0x28b/0x2a0
[ 132.346314][ T6462] validate_chain+0x1a3f/0x2140
[ 132.346335][ T6462] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 132.346353][ T6462] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.346376][ T6462] __lock_acquire+0xab9/0xd20
[ 132.346393][ T6462] ? assign_fw+0x52/0x890
[ 132.346410][ T6462] lock_acquire+0x120/0x360
[ 132.346424][ T6462] ? assign_fw+0x52/0x890
[ 132.346442][ T6462] ? __kasan_save_free_info+0x46/0x50
[ 132.346460][ T6462] ? kmem_cache_free+0x19b/0x690
[ 132.346482][ T6462] ? __async_dev_cache_fw_image+0x7f/0x280
[ 132.346504][ T6462] __mutex_lock+0x187/0x1350
[ 132.346524][ T6462] ? assign_fw+0x52/0x890
[ 132.346540][ T6462] ? path_openat+0x2ee5/0x3830
[ 132.346559][ T6462] ? do_filp_open+0x1fa/0x410
[ 132.346585][ T6462] ? __x64_sys_openat+0x138/0x170
[ 132.346602][ T6462] ? do_syscall_64+0xfa/0xfa0
[ 132.346620][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.346638][ T6462] ? assign_fw+0x52/0x890
[ 132.346656][ T6462] ? __pfx___mutex_lock+0x10/0x10
[ 132.346680][ T6462] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.346700][ T6462] assign_fw+0x52/0x890
[ 132.346717][ T6462] ? _request_firmware+0xe57/0x15b0
[ 132.346734][ T6462] ? kmem_cache_free+0x19b/0x690
[ 132.346758][ T6462] _request_firmware+0xeea/0x15b0
[ 132.346776][ T6462] ? __lock_acquire+0xab9/0xd20
[ 132.346797][ T6462] ? __pfx__request_firmware+0x10/0x10
[ 132.346814][ T6462] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 132.346832][ T6462] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.346850][ T6462] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 132.346867][ T6462] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 132.346886][ T6462] __async_dev_cache_fw_image+0x7f/0x280
[ 132.346907][ T6462] ? __pfx___async_dev_cache_fw_image+0x10/0x10
[ 132.346929][ T6462] async_schedule_node_domain+0xde/0x120
[ 132.346946][ T6462] dev_cache_fw_image+0x364/0x3e0
[ 132.346968][ T6462] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 132.346989][ T6462] ? __pfx_dev_cache_fw_image+0x10/0x10
[ 132.347009][ T6462] dpm_for_each_dev+0x56/0xb0
[ 132.347029][ T6462] fw_pm_notify+0x200/0x2a0
[ 132.347048][ T6462] ? __pfx_fw_pm_notify+0x10/0x10
[ 132.347067][ T6462] ? __pfx_autoremove_wake_function+0x10/0x10
[ 132.347088][ T6462] ? blocking_notifier_call_chain_robust+0x65/0x100
[ 132.347111][ T6462] notifier_call_chain+0x1b6/0x3e0
[ 132.347131][ T6462] blocking_notifier_call_chain_robust+0x85/0x100
[ 132.347152][ T6462] pm_notifier_call_chain_robust+0x2c/0x60
[ 132.347168][ T6462] snapshot_open+0x19c/0x280
[ 132.347184][ T6462] ? __pfx_snapshot_open+0x10/0x10
[ 132.347198][ T6462] misc_open+0x2d5/0x350
[ 132.347221][ T6462] chrdev_open+0x4c9/0x5e0
[ 132.347236][ T6462] ? __pfx_chrdev_open+0x10/0x10
[ 132.347250][ T6462] ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 132.347268][ T6462] ? __pfx_chrdev_open+0x10/0x10
[ 132.347281][ T6462] do_dentry_open+0x950/0x13f0
[ 132.347302][ T6462] vfs_open+0x3b/0x340
[ 132.347317][ T6462] ? path_openat+0x2ecd/0x3830
[ 132.347336][ T6462] path_openat+0x2ee5/0x3830
[ 132.347366][ T6462] ? __pfx_path_openat+0x10/0x10
[ 132.347391][ T6462] do_filp_open+0x1fa/0x410
[ 132.347409][ T6462] ? __lock_acquire+0xab9/0xd20
[ 132.347424][ T6462] ? __pfx_do_filp_open+0x10/0x10
[ 132.347449][ T6462] ? _raw_spin_unlock+0x28/0x50
[ 132.347465][ T6462] ? alloc_fd+0x64c/0x6c0
[ 132.347491][ T6462] do_sys_openat2+0x121/0x1c0
[ 132.347509][ T6462] ? __pfx_do_sys_openat2+0x10/0x10
[ 132.347527][ T6462] ? ksys_write+0x22a/0x250
[ 132.347548][ T6462] ? __pfx_ksys_write+0x10/0x10
[ 132.347569][ T6462] __x64_sys_openat+0x138/0x170
[ 132.347594][ T6462] do_syscall_64+0xfa/0xfa0
[ 132.347612][ T6462] ? lockdep_hardirqs_on+0x9c/0x150
[ 132.347630][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.347645][ T6462] ? clear_bhb_loop+0x60/0xb0
[ 132.347662][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.347677][ T6462] RIP: 0033:0x7f5909175b59
[ 132.347693][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 132.347707][ T6462] RSP: 002b:00007f5909e8c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 132.347724][ T6462] RAX: ffffffffffffffda RBX: 00007f5909306038 RCX: 00007f5909175b59
[ 132.347736][ T6462] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 132.347747][ T6462] RBP: 00007f5909e8c0a0 R08: 0000000000000000 R09: 0000000000000000
[ 132.347756][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 132.347766][ T6462] R13: 000000000000006e R14: 00007f5909306038 R15: 00007fffe5b95908
[ 132.347782][ T6462]
[ 132.897368][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.903752][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.295901][ T52] Bluetooth: hci0: command 0x040f tx timeout
[ 135.375937][ T52] Bluetooth: hci0: command 0x040f tx timeout
[ 137.456021][ T52] Bluetooth: hci0: command 0x040f tx timeout
[ 139.535959][ T52] Bluetooth: hci0: command 0x040f tx timeout