Warning: Permanently added '10.128.1.252' (ED25519) to the list of known hosts. 1970/01/01 00:00:37 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:38 parsed 1 programs [ 41.571276][ T6534] cgroup: Unknown subsys name 'net' [ 41.661863][ T6534] cgroup: Unknown subsys name 'cpuset' [ 41.665641][ T6534] cgroup: Unknown subsys name 'rlimit' [ 41.870931][ T6534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 58.922389][ T6546] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.911373][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.912196][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.912562][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.913241][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.913689][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.422064][ T350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.422164][ T350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.443871][ T350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.443928][ T350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.044703][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 61.241865][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.241999][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.242107][ T6612] bridge_slave_0: entered allmulticast mode [ 61.243029][ T6612] bridge_slave_0: entered promiscuous mode [ 61.245064][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.245135][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.245228][ T6612] bridge_slave_1: entered allmulticast mode [ 61.246029][ T6612] bridge_slave_1: entered promiscuous mode [ 61.264334][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.265890][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.360630][ T6612] team0: Port device team_slave_0 added [ 61.362303][ T6612] team0: Port device team_slave_1 added [ 61.376084][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.376138][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.376169][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.377774][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.377801][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.377830][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.545862][ T6612] hsr_slave_0: entered promiscuous mode [ 61.546775][ T6612] hsr_slave_1: entered promiscuous mode [ 61.812790][ T6612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.818604][ T6612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.822288][ T6612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.826767][ T6612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.872543][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.881628][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.886737][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.886881][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.926225][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.926318][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.069738][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.091878][ T6612] veth0_vlan: entered promiscuous mode [ 62.094937][ T6612] veth1_vlan: entered promiscuous mode [ 62.109247][ T6612] veth0_macvtap: entered promiscuous mode [ 62.111138][ T6612] veth1_macvtap: entered promiscuous mode [ 62.120108][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.122430][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.130682][ T6612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.133304][ T6612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.135800][ T6612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.137779][ T6612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.560202][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.639059][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.708934][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.809884][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:02 executed programs: 0 [ 62.849809][ T6096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.850413][ T6096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.851014][ T6096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.851631][ T6096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.852190][ T6096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.944339][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 62.983754][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.986085][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.986252][ T6637] bridge_slave_0: entered allmulticast mode [ 62.987450][ T6637] bridge_slave_0: entered promiscuous mode [ 62.992009][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.992064][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.992175][ T6637] bridge_slave_1: entered allmulticast mode [ 62.993052][ T6637] bridge_slave_1: entered promiscuous mode [ 63.010271][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.011876][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.027933][ T6637] team0: Port device team_slave_0 added [ 63.029573][ T6637] team0: Port device team_slave_1 added [ 63.042923][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.042969][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.043002][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.044518][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.044544][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.044575][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.084070][ T6637] hsr_slave_0: entered promiscuous mode [ 63.084592][ T6637] hsr_slave_1: entered promiscuous mode [ 63.084950][ T6637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.085051][ T6637] Cannot create hsr debugfs directory [ 64.498256][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498384][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.907339][ T52] Bluetooth: hci0: command tx timeout [ 65.521412][ T13] bridge_slave_1: left allmulticast mode [ 65.521511][ T13] bridge_slave_1: left promiscuous mode [ 65.521986][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.531325][ T13] bridge_slave_0: left allmulticast mode [ 65.531378][ T13] bridge_slave_0: left promiscuous mode [ 65.531731][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.976594][ T52] Bluetooth: hci0: command tx timeout [ 67.169819][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.208989][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.258150][ T13] bond0 (unregistering): Released all slaves [ 67.334179][ T13] hsr_slave_0: left promiscuous mode [ 67.334643][ T13] hsr_slave_1: left promiscuous mode [ 67.335072][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.335126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.336570][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.336604][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.349944][ T13] veth1_macvtap: left promiscuous mode [ 67.350081][ T13] veth0_macvtap: left promiscuous mode [ 67.350182][ T13] veth1_vlan: left promiscuous mode [ 67.350274][ T13] veth0_vlan: left promiscuous mode [ 69.066597][ T52] Bluetooth: hci0: command tx timeout [ 69.258832][ T13] team0 (unregistering): Port device team_slave_1 removed [ 69.427582][ T13] team0 (unregistering): Port device team_slave_0 removed [ 69.619397][ T2331] cfg80211: failed to load regulatory.db [ 71.137153][ T52] Bluetooth: hci0: command tx timeout [ 72.184381][ T6637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.191900][ T6637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.195805][ T6637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.202845][ T6637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.267550][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.275723][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.282358][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.282448][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.287251][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.287329][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.425852][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.533439][ T6637] veth0_vlan: entered promiscuous mode [ 72.536825][ T6637] veth1_vlan: entered promiscuous mode [ 72.551897][ T6637] veth0_macvtap: entered promiscuous mode [ 72.553651][ T6637] veth1_macvtap: entered promiscuous mode [ 72.560336][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.562095][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.563514][ T6637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563554][ T6637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563584][ T6637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563613][ T6637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.612530][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.612595][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.625659][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.625725][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:12 executed programs: 2 [ 72.698359][ T6684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 72.881898][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 73.178577][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 73.199800][ T6691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 73.369682 ** replaying previous printk message ** [ 73.369682][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 73.369765][ T52] ================================================================== [ 73.369790][ T52] BUG: KASAN: null-ptr-deref in l2cap_sock_resume_cb+0xb4/0x17c [ 73.369813][ T52] Write of size 8 at addr 0000000000000570 by task kworker/u9:0/52 [ 73.369829][ T52] [ 73.369839][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 73.369852][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.369859][ T52] Workqueue: hci0 hci_rx_work [ 73.369873][ T52] Call trace: [ 73.369876][ T52] show_stack+0x2c/0x3c (C) [ 73.369889][ T52] __dump_stack+0x30/0x40 [ 73.369904][ T52] dump_stack_lvl+0xd8/0x12c [ 73.369918][ T52] print_report+0x58/0x84 [ 73.369931][ T52] kasan_report+0xb0/0x110 [ 73.369943][ T52] kasan_check_range+0x264/0x2a4 [ 73.369954][ T52] __kasan_check_write+0x20/0x30 [ 73.369966][ T52] l2cap_sock_resume_cb+0xb4/0x17c [ 73.369979][ T52] l2cap_security_cfm+0x524/0xea0 [ 73.369992][ T52] hci_auth_complete_evt+0x2e8/0xa4c [ 73.370004][ T52] hci_event_packet+0x650/0xe9c [ 73.370015][ T52] hci_rx_work+0x320/0xb18 [ 73.370028][ T52] process_one_work+0x7e8/0x155c [ 73.370043][ T52] worker_thread+0x958/0xed8 [ 73.370056][ T52] kthread+0x5fc/0x75c [ 73.370069][ T52] ret_from_fork+0x10/0x20 [ 73.370081][ T52] ================================================================== [ 73.370198][ T52] Disabling lock debugging due to kernel taint [ 73.370222][ T52] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000570 [ 73.370240][ T52] Mem abort info: [ 73.370254][ T52] ESR = 0x0000000096000006 [ 73.370286][ T52] EC = 0x25: DABT (current EL), IL = 32 bits [ 73.370304][ T52] SET = 0, FnV = 0 [ 73.370320][ T52] EA = 0, S1PTW = 0 [ 73.370336][ T52] FSC = 0x06: level 2 translation fault [ 73.370352][ T52] Data abort info: [ 73.370366][ T52] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 73.370382][ T52] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 73.370400][ T52] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 73.370419][ T52] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000121d3b000 [ 73.370438][ T52] [0000000000000570] pgd=0800000121d58403, p4d=0800000121d58403, pud=0800000121d81403, pmd=0000000000000000 [ 73.370492][ T52] Internal error: Oops: 0000000096000006 [#1] SMP [ 73.435165][ T52] Modules linked in: [ 73.436229][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G B 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 73.439569][ T52] Tainted: [B]=BAD_PAGE [ 73.440682][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.443494][ T52] Workqueue: hci0 hci_rx_work [ 73.444816][ T52] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.446943][ T52] pc : l2cap_sock_resume_cb+0xc0/0x17c [ 73.448556][ T52] lr : l2cap_sock_resume_cb+0xbc/0x17c [ 73.450067][ T52] sp : ffff8000991975b0 [ 73.451204][ T52] x29: ffff8000991975b0 x28: ffff0000d89f6000 x27: dfff800000000000 [ 73.453408][ T52] x26: ffff700013232ec8 x25: 0000000000000001 x24: ffff80008db6f6c0 [ 73.455634][ T52] x23: ffff0000d89f6480 x22: dfff800000000000 x21: 0000000000000002 [ 73.457797][ T52] x20: 0000000000000570 x19: 0000000000000000 x18: 1fffe000337d8876 [ 73.459986][ T52] x17: 0000000000000000 x16: ffff80008ae642c8 x15: 0000000000000001 [ 73.462264][ T52] x14: 1ffff000125d90f8 x13: 0000000000000000 x12: 0000000000000000 [ 73.464607][ T52] x11: ffff7000125d90f9 x10: 0000000000ff0100 x9 : 0000000000000000 [ 73.466848][ T52] x8 : 0000000000000002 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.469037][ T52] x5 : ffff800099196e18 x4 : ffff80008f766c20 x3 : ffff8000803b80e0 [ 73.471249][ T52] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 73.473552][ T52] Call trace: [ 73.474555][ T52] l2cap_sock_resume_cb+0xc0/0x17c (P) [ 73.476206][ T52] l2cap_security_cfm+0x524/0xea0 [ 73.477638][ T52] hci_auth_complete_evt+0x2e8/0xa4c [ 73.479165][ T52] hci_event_packet+0x650/0xe9c [ 73.480513][ T52] hci_rx_work+0x320/0xb18 [ 73.481789][ T52] process_one_work+0x7e8/0x155c [ 73.483183][ T52] worker_thread+0x958/0xed8 [ 73.484437][ T52] kthread+0x5fc/0x75c [ 73.485617][ T52] ret_from_fork+0x10/0x20 [ 73.486860][ T52] Code: 977fc1f2 d503201f 977fc0f7 52800048 (f828129f) [ 73.488785][ T52] ---[ end trace 0000000000000000 ]--- [ 73.824235][ T52] Kernel panic - not syncing: Oops: Fatal exception [ 73.826115][ T52] SMP: stopping secondary CPUs [ 73.827425][ T52] Kernel Offset: disabled [ 73.828634][ T52] CPU features: 0x10000,00040e00,040008a1,04017203 [ 73.830520][ T52] Memory Limit: none [ 74.119376][ T52] Rebooting in 86400 seconds..