Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. 1970/01/01 00:00:38 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:39 parsed 1 programs [ 42.145402][ T6530] cgroup: Unknown subsys name 'net' [ 42.251351][ T6530] cgroup: Unknown subsys name 'cpuset' [ 42.255131][ T6530] cgroup: Unknown subsys name 'rlimit' [ 42.490203][ T6530] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 54.615173][ T6542] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.926748][ T6092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.927483][ T6092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.927928][ T6092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.936408][ T6092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.937025][ T6092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.750134][ T2163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.750212][ T2163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.828875][ T2163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.830712][ T2163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.860587][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 56.985666][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.987967][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.989449][ T6596] bridge_slave_0: entered allmulticast mode [ 56.990775][ T6596] bridge_slave_0: entered promiscuous mode [ 56.992916][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.992965][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.993062][ T6596] bridge_slave_1: entered allmulticast mode [ 56.993945][ T6596] bridge_slave_1: entered promiscuous mode [ 57.014540][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.019509][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.036139][ T6596] team0: Port device team_slave_0 added [ 57.038009][ T6596] team0: Port device team_slave_1 added [ 57.052111][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.052177][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.052209][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.053662][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.053690][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.053720][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.153697][ T6596] hsr_slave_0: entered promiscuous mode [ 57.154300][ T6596] hsr_slave_1: entered promiscuous mode [ 57.244225][ T6596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.250087][ T6596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.260630][ T6596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.264332][ T6596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.282492][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.282606][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.282925][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.282989][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.406873][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.415982][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.418773][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.426300][ T6596] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.434314][ T2153] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.434412][ T2153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.452078][ T2153] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.452170][ T2153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.545912][ T6596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.570401][ T6596] veth0_vlan: entered promiscuous mode [ 57.573740][ T6596] veth1_vlan: entered promiscuous mode [ 57.587001][ T6596] veth0_macvtap: entered promiscuous mode [ 57.589396][ T6596] veth1_macvtap: entered promiscuous mode [ 57.596116][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.599922][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.605765][ T6596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.608289][ T6596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.608323][ T6596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.608353][ T6596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.980868][ T2153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.079860][ T2153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.150421][ T2153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.242516][ T2153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:58 executed programs: 0 [ 58.728391][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.730987][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.733698][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.737139][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.737901][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.857069][ T6636] chnl_net:caif_netlink_parms(): no params data found [ 58.901308][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.901420][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.901525][ T6636] bridge_slave_0: entered allmulticast mode [ 58.902414][ T6636] bridge_slave_0: entered promiscuous mode [ 58.904056][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.904143][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.904264][ T6636] bridge_slave_1: entered allmulticast mode [ 58.905158][ T6636] bridge_slave_1: entered promiscuous mode [ 58.926906][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.928895][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.951620][ T6636] team0: Port device team_slave_0 added [ 58.953581][ T6636] team0: Port device team_slave_1 added [ 58.967951][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.968010][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.968627][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.969783][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.969810][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.969841][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.005727][ T6636] hsr_slave_0: entered promiscuous mode [ 59.006267][ T6636] hsr_slave_1: entered promiscuous mode [ 59.006598][ T6636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.006710][ T6636] Cannot create hsr debugfs directory [ 60.768976][ T6092] Bluetooth: hci0: command tx timeout [ 60.926667][ T2153] bridge_slave_1: left allmulticast mode [ 60.926778][ T2153] bridge_slave_1: left promiscuous mode [ 60.927294][ T2153] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.935331][ T2153] bridge_slave_0: left allmulticast mode [ 60.935390][ T2153] bridge_slave_0: left promiscuous mode [ 60.935498][ T2153] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.560668][ T2153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.600723][ T2153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.639822][ T2153] bond0 (unregistering): Released all slaves [ 62.727821][ T2153] hsr_slave_0: left promiscuous mode [ 62.730673][ T2153] hsr_slave_1: left promiscuous mode [ 62.732662][ T2153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.734849][ T2153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.737919][ T2153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.742106][ T2153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.753069][ T2153] veth1_macvtap: left promiscuous mode [ 62.754902][ T2153] veth0_macvtap: left promiscuous mode [ 62.756860][ T2153] veth1_vlan: left promiscuous mode [ 62.764289][ T2153] veth0_vlan: left promiscuous mode [ 62.850348][ T6092] Bluetooth: hci0: command tx timeout [ 64.529508][ T2406] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.531220][ T2406] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.660319][ T2153] team0 (unregistering): Port device team_slave_1 removed [ 64.839666][ T2153] team0 (unregistering): Port device team_slave_0 removed [ 64.928245][ T6092] Bluetooth: hci0: command tx timeout [ 67.008266][ T6092] Bluetooth: hci0: command tx timeout [ 67.536797][ T6636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.568362][ T6636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.577619][ T6636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.582460][ T6636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.768914][ T6636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.784461][ T6636] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.787046][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.787142][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.801000][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.801085][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.821867][ T6636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.821939][ T6636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.985165][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.050482][ T6636] veth0_vlan: entered promiscuous mode [ 68.053548][ T6636] veth1_vlan: entered promiscuous mode [ 68.095311][ T6636] veth0_macvtap: entered promiscuous mode [ 68.102903][ T6636] veth1_macvtap: entered promiscuous mode [ 68.122624][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.124477][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.125905][ T6636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.125946][ T6636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.125975][ T6636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126005][ T6636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169688][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.169754][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.190574][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.190637][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:08 executed programs: 2 [ 68.256837][ T6715] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 68.411558][ T6092] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 68.750253][ T6092] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 68.752501][ T6092] ================================================================== [ 68.752526][ T6092] BUG: KASAN: null-ptr-deref in l2cap_sock_resume_cb+0xb4/0x17c [ 68.752557][ T6092] Write of size 8 at addr 0000000000000570 by task kworker/u9:1/6092 [ 68.752572][ T6092] [ 68.752583][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: kworker/u9:1 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 68.752596][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.752604][ T6092] Workqueue: hci0 hci_rx_work [ 68.752618][ T6092] Call trace: [ 68.752622][ T6092] show_stack+0x2c/0x3c (C) [ 68.752635][ T6092] __dump_stack+0x30/0x40 [ 68.752648][ T6092] dump_stack_lvl+0xd8/0x12c [ 68.752662][ T6092] print_report+0x58/0x84 [ 68.752674][ T6092] kasan_report+0xb0/0x110 [ 68.752685][ T6092] kasan_check_range+0x264/0x2a4 [ 68.752695][ T6092] __kasan_check_write+0x20/0x30 [ 68.752707][ T6092] l2cap_sock_resume_cb+0xb4/0x17c [ 68.752719][ T6092] l2cap_security_cfm+0x524/0xea0 [ 68.752731][ T6092] hci_auth_complete_evt+0x2e8/0xa4c [ 68.752742][ T6092] hci_event_packet+0x650/0xe9c [ 68.752753][ T6092] hci_rx_work+0x320/0xb18 [ 68.752766][ T6092] process_one_work+0x7e8/0x155c [ 68.752780][ T6092] worker_thread+0x958/0xed8 [ 68.752793][ T6092] kthread+0x5fc/0x75c [ 68.752805][ T6092] ret_from_fork+0x10/0x20 [ 68.752816][ T6092] ================================================================== [ 68.765939][ T6092] Disabling lock debugging due to kernel taint [ 68.765971][ T6092] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000570 [ 68.765989][ T6092] Mem abort info: [ 68.766002][ T6092] ESR = 0x0000000096000007 [ 68.766017][ T6092] EC = 0x25: DABT (current EL), IL = 32 bits [ 68.766034][ T6092] SET = 0, FnV = 0 [ 68.766049][ T6092] EA = 0, S1PTW = 0 [ 68.766064][ T6092] FSC = 0x07: level 3 translation fault [ 68.766079][ T6092] Data abort info: [ 68.766103][ T6092] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 68.766120][ T6092] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 68.766159][ T6092] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 68.766176][ T6092] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011f474000 [ 68.766195][ T6092] [0000000000000570] pgd=080000011f457403, p4d=080000011f457403, pud=080000011f456403, pmd=080000011f465403, pte=0000000000000000 [ 68.766255][ T6092] Internal error: Oops: 0000000096000007 [#1] SMP [ 68.820450][ T6092] Modules linked in: [ 68.821571][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: kworker/u9:1 Tainted: G B 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 68.825161][ T6092] Tainted: [B]=BAD_PAGE [ 68.826338][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.829166][ T6092] Workqueue: hci0 hci_rx_work [ 68.830481][ T6092] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.832757][ T6092] pc : l2cap_sock_resume_cb+0xc0/0x17c [ 68.834227][ T6092] lr : l2cap_sock_resume_cb+0xbc/0x17c [ 68.835715][ T6092] sp : ffff80009b9c75b0 [ 68.836834][ T6092] x29: ffff80009b9c75b0 x28: ffff0000ddfcd000 x27: dfff800000000000 [ 68.839185][ T6092] x26: ffff700013738ec8 x25: 0000000000000001 x24: ffff80008db6f6c0 [ 68.841452][ T6092] x23: ffff0000ddfcd480 x22: dfff800000000000 x21: 0000000000000002 [ 68.843724][ T6092] x20: 0000000000000570 x19: 0000000000000000 x18: 1fffe000337d4076 [ 68.845948][ T6092] x17: 0000000000000000 x16: ffff80008aefca08 x15: 0000000000000001 [ 68.848330][ T6092] x14: 1ffff000125d90f8 x13: 0000000000000000 x12: 0000000000000000 [ 68.850685][ T6092] x11: ffff7000125d90f9 x10: 0000000000ff0100 x9 : 0000000000000000 [ 68.852890][ T6092] x8 : 0000000000000002 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.855118][ T6092] x5 : ffff80009b9c6e18 x4 : ffff80008f766c20 x3 : ffff8000803b80e0 [ 68.857309][ T6092] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 68.859476][ T6092] Call trace: [ 68.860402][ T6092] l2cap_sock_resume_cb+0xc0/0x17c (P) [ 68.861906][ T6092] l2cap_security_cfm+0x524/0xea0 [ 68.863279][ T6092] hci_auth_complete_evt+0x2e8/0xa4c [ 68.864786][ T6092] hci_event_packet+0x650/0xe9c [ 68.866107][ T6092] hci_rx_work+0x320/0xb18 [ 68.867334][ T6092] process_one_work+0x7e8/0x155c [ 68.868789][ T6092] worker_thread+0x958/0xed8 [ 68.870058][ T6092] kthread+0x5fc/0x75c [ 68.871174][ T6092] ret_from_fork+0x10/0x20 [ 68.872406][ T6092] Code: 977fc1f2 d503201f 977fc0f7 52800048 (f828129f) [ 68.874319][ T6092] ---[ end trace 0000000000000000 ]--- [ 69.163037][ T6092] Kernel panic - not syncing: Oops: Fatal exception [ 69.164967][ T6092] SMP: stopping secondary CPUs [ 69.166397][ T6092] Kernel Offset: disabled [ 69.167623][ T6092] CPU features: 0x10000,00040e00,040008a1,04017203 [ 69.169420][ T6092] Memory Limit: none [ 69.451214][ T6092] Rebooting in 86400 seconds..