Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 69.628997][ T9] cfg80211: failed to load regulatory.db 1970/01/01 00:01:09 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:10 parsed 1 programs [ 73.856904][ T6538] cgroup: Unknown subsys name 'net' [ 73.949410][ T6538] cgroup: Unknown subsys name 'cpuset' [ 73.952968][ T6538] cgroup: Unknown subsys name 'rlimit' [ 74.216808][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 88.902556][ T6554] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.059987][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 89.167795][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.169906][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.170078][ T6560] bridge_slave_0: entered allmulticast mode [ 89.171404][ T6560] bridge_slave_0: entered promiscuous mode [ 89.173161][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.173208][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.173301][ T6560] bridge_slave_1: entered allmulticast mode [ 89.174198][ T6560] bridge_slave_1: entered promiscuous mode [ 89.193624][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.197824][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.219058][ T6560] team0: Port device team_slave_0 added [ 89.222088][ T6560] team0: Port device team_slave_1 added [ 89.238309][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.238372][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.238402][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.239884][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.239923][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.239952][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.275047][ T6560] hsr_slave_0: entered promiscuous mode [ 89.275615][ T6560] hsr_slave_1: entered promiscuous mode [ 89.359595][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.364512][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.368436][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.372372][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.390511][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.390622][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.390956][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.391018][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.421957][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.429472][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.431869][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.440541][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.446796][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.446892][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.451563][ T601] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.451646][ T601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.553581][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.575650][ T6560] veth0_vlan: entered promiscuous mode [ 89.580114][ T6560] veth1_vlan: entered promiscuous mode [ 89.591709][ T6560] veth0_macvtap: entered promiscuous mode [ 89.593624][ T6560] veth1_macvtap: entered promiscuous mode [ 89.601898][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.604383][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.610009][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610103][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610167][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610204][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999420][ T306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.079590][ T306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.138864][ T6589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.139718][ T6589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.140118][ T6589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.140864][ T6589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.141299][ T6589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.158875][ T306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.256213][ T306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.670719][ T601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.671028][ T601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.687995][ T601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.688054][ T601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:32 executed programs: 0 [ 92.042771][ T6095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.045887][ T6095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.047105][ T6095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.047858][ T6095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.048681][ T6095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.142321][ T6647] chnl_net:caif_netlink_parms(): no params data found [ 92.184072][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.186300][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.188585][ T6647] bridge_slave_0: entered allmulticast mode [ 92.189487][ T6647] bridge_slave_0: entered promiscuous mode [ 92.191124][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.191197][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.191321][ T6647] bridge_slave_1: entered allmulticast mode [ 92.192280][ T6647] bridge_slave_1: entered promiscuous mode [ 92.214689][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.216504][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.233400][ T6647] team0: Port device team_slave_0 added [ 92.235273][ T6647] team0: Port device team_slave_1 added [ 92.250150][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.250203][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.250238][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.251349][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.251372][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.251402][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.285967][ T6647] hsr_slave_0: entered promiscuous mode [ 92.286907][ T6647] hsr_slave_1: entered promiscuous mode [ 92.287530][ T6647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.287637][ T6647] Cannot create hsr debugfs directory [ 92.802329][ T306] bridge_slave_1: left allmulticast mode [ 92.802417][ T306] bridge_slave_1: left promiscuous mode [ 92.802884][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.816900][ T306] bridge_slave_0: left allmulticast mode [ 92.816959][ T306] bridge_slave_0: left promiscuous mode [ 92.817094][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.097496][ T6589] Bluetooth: hci0: command tx timeout [ 94.519205][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.569688][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.628536][ T306] bond0 (unregistering): Released all slaves [ 94.724337][ T306] hsr_slave_0: left promiscuous mode [ 94.726442][ T306] hsr_slave_1: left promiscuous mode [ 94.730558][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.730641][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.735592][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.739154][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.751263][ T306] veth1_macvtap: left promiscuous mode [ 94.753012][ T306] veth0_macvtap: left promiscuous mode [ 94.754830][ T306] veth1_vlan: left promiscuous mode [ 94.756429][ T306] veth0_vlan: left promiscuous mode [ 96.177015][ T6589] Bluetooth: hci0: command tx timeout [ 96.698780][ T306] team0 (unregistering): Port device team_slave_1 removed [ 96.868645][ T306] team0 (unregistering): Port device team_slave_0 removed [ 98.267464][ T6589] Bluetooth: hci0: command tx timeout [ 99.627930][ T6647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.632365][ T6647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.638993][ T6647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.651487][ T6647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.089434][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.100553][ T6647] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.118027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.118100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.119070][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.119130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.266431][ T6647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.336768][ T6589] Bluetooth: hci0: command tx timeout [ 100.422640][ T6647] veth0_vlan: entered promiscuous mode [ 100.449687][ T6647] veth1_vlan: entered promiscuous mode [ 100.465234][ T6647] veth0_macvtap: entered promiscuous mode [ 100.469289][ T6647] veth1_macvtap: entered promiscuous mode [ 100.614062][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.620596][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.622133][ T6647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.622175][ T6647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.622205][ T6647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.622235][ T6647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.753064][ T841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.753121][ T841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.770104][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.770163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:40 executed programs: 2 [ 100.834056][ T6740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 101.000218][ T6589] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 101.262391][ T6589] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 101.288118][ T6747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 101.436220][ T6589] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 101.436280][ T6589] ================ ** replaying previous printk message ** [ 101.436280][ T6589] ================================================================== [ 101.436303][ T6589] BUG: KASAN: null-ptr-deref in l2cap_sock_resume_cb+0xb4/0x17c [ 101.436328][ T6589] Write of size 8 at addr 0000000000000570 by task kworker/u9:2/6589 [ 101.436343][ T6589] [ 101.436354][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: kworker/u9:2 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 101.436367][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.436374][ T6589] Workqueue: hci0 hci_rx_work [ 101.436388][ T6589] Call trace: [ 101.436392][ T6589] show_stack+0x2c/0x3c (C) [ 101.436405][ T6589] __dump_stack+0x30/0x40 [ 101.436418][ T6589] dump_stack_lvl+0xd8/0x12c [ 101.436431][ T6589] print_report+0x58/0x84 [ 101.436444][ T6589] kasan_report+0xb0/0x110 [ 101.436454][ T6589] kasan_check_range+0x264/0x2a4 [ 101.436465][ T6589] __kasan_check_write+0x20/0x30 [ 101.436476][ T6589] l2cap_sock_resume_cb+0xb4/0x17c [ 101.436488][ T6589] l2cap_security_cfm+0x524/0xea0 [ 101.436500][ T6589] hci_auth_complete_evt+0x2e8/0xa4c [ 101.436511][ T6589] hci_event_packet+0x650/0xe9c [ 101.436525][ T6589] hci_rx_work+0x320/0xb18 [ 101.436537][ T6589] process_one_work+0x7e8/0x155c [ 101.436551][ T6589] worker_thread+0x958/0xed8 [ 101.436564][ T6589] kthread+0x5fc/0x75c [ 101.436576][ T6589] ret_from_fork+0x10/0x20 [ 101.436587][ T6589] ================================================================== [ 101.439761][ T6589] Disabling lock debugging due to kernel taint [ 101.439793][ T6589] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000570 [ 101.439810][ T6589] Mem abort info: [ 101.439833][ T6589] ESR = 0x0000000096000004 [ 101.439848][ T6589] EC = 0x25: DABT (current EL), IL = 32 bits [ 101.439865][ T6589] SET = 0, FnV = 0 [ 101.439879][ T6589] EA = 0, S1PTW = 0 [ 101.439927][ T6589] FSC = 0x04: level 0 translation fault [ 101.439943][ T6589] Data abort info: [ 101.439956][ T6589] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 101.439972][ T6589] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 101.439989][ T6589] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 101.440007][ T6589] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001188d7000 [ 101.440025][ T6589] [0000000000000570] pgd=0000000000000000, p4d=0000000000000000 [ 101.440059][ T6589] Internal error: Oops: 0000000096000004 [#1] SMP [ 101.501996][ T6589] Modules linked in: [ 101.503078][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: kworker/u9:2 Tainted: G B 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 101.506557][ T6589] Tainted: [B]=BAD_PAGE [ 101.507648][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.510369][ T6589] Workqueue: hci0 hci_rx_work [ 101.511666][ T6589] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 101.513710][ T6589] pc : l2cap_sock_resume_cb+0xc0/0x17c [ 101.515237][ T6589] lr : l2cap_sock_resume_cb+0xbc/0x17c [ 101.516729][ T6589] sp : ffff8000a55f75b0 [ 101.517917][ T6589] x29: ffff8000a55f75b0 x28: ffff0000c71b3000 x27: dfff800000000000 [ 101.520211][ T6589] x26: ffff700014abeec8 x25: 0000000000000001 x24: ffff80008db6f6c0 [ 101.522445][ T6589] x23: ffff0000c71b3480 x22: dfff800000000000 x21: 0000000000000002 [ 101.524686][ T6589] x20: 0000000000000570 x19: 0000000000000000 x18: 1fffe000337d8876 [ 101.526970][ T6589] x17: 0000000000000000 x16: ffff80008ae642c8 x15: 0000000000000001 [ 101.529200][ T6589] x14: 1ffff000125d90f8 x13: 0000000000000000 x12: 0000000000000000 [ 101.531417][ T6589] x11: ffff7000125d90f9 x10: 0000000000ff0100 x9 : 0000000000000000 [ 101.533616][ T6589] x8 : 0000000000000002 x7 : 0000000000000001 x6 : 0000000000000001 [ 101.535804][ T6589] x5 : ffff8000a55f6e18 x4 : ffff80008f766c20 x3 : ffff8000803b80e0 [ 101.538092][ T6589] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 101.540390][ T6589] Call trace: [ 101.541282][ T6589] l2cap_sock_resume_cb+0xc0/0x17c (P) [ 101.542792][ T6589] l2cap_security_cfm+0x524/0xea0 [ 101.544289][ T6589] hci_auth_complete_evt+0x2e8/0xa4c [ 101.545738][ T6589] hci_event_packet+0x650/0xe9c [ 101.547065][ T6589] hci_rx_work+0x320/0xb18 [ 101.548265][ T6589] process_one_work+0x7e8/0x155c [ 101.549638][ T6589] worker_thread+0x958/0xed8 [ 101.550904][ T6589] kthread+0x5fc/0x75c [ 101.552055][ T6589] ret_from_fork+0x10/0x20 [ 101.553314][ T6589] Code: 977fc1f2 d503201f 977fc0f7 52800048 (f828129f) [ 101.555324][ T6589] ---[ end trace 0000000000000000 ]--- [ 101.883739][ T6589] Kernel panic - not syncing: Oops: Fatal exception [ 101.885693][ T6589] SMP: stopping secondary CPUs [ 101.887071][ T6589] Kernel Offset: disabled [ 101.888204][ T6589] CPU features: 0x10000,00040e00,040008a1,04017203 [ 101.889943][ T6589] Memory Limit: none [ 102.210355][ T6589] Rebooting in 86400 seconds..