[ 69.600472][ T11] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. 1970/01/01 00:01:15 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:16 parsed 1 programs [ 78.917329][ T6538] cgroup: Unknown subsys name 'net' [ 79.004550][ T6538] cgroup: Unknown subsys name 'cpuset' [ 79.008289][ T6538] cgroup: Unknown subsys name 'rlimit' [ 79.233189][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 87.814548][ T6553] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.971636][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.972503][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.972885][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.973552][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.973999][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.598363][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 89.645464][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.645609][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.645720][ T6604] bridge_slave_0: entered allmulticast mode [ 89.646652][ T6604] bridge_slave_0: entered promiscuous mode [ 89.649141][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.649233][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.649327][ T6604] bridge_slave_1: entered allmulticast mode [ 89.650350][ T6604] bridge_slave_1: entered promiscuous mode [ 89.681759][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.683480][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.700913][ T6604] team0: Port device team_slave_0 added [ 89.702628][ T6604] team0: Port device team_slave_1 added [ 89.787902][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.787964][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.788013][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.789490][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.789518][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.789558][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.824134][ T6604] hsr_slave_0: entered promiscuous mode [ 89.826436][ T6604] hsr_slave_1: entered promiscuous mode [ 89.915705][ T6604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.920523][ T6604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.924144][ T6604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.927899][ T6604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.946856][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.946965][ T6604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.947312][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.947374][ T6604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.972869][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.981852][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.984773][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.994971][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.998635][ T864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.998746][ T864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.005880][ T864] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.005975][ T864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.098670][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.128415][ T6604] veth0_vlan: entered promiscuous mode [ 90.132271][ T6604] veth1_vlan: entered promiscuous mode [ 90.145913][ T6604] veth0_macvtap: entered promiscuous mode [ 90.147685][ T6604] veth1_macvtap: entered promiscuous mode [ 90.155540][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.157425][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.159421][ T6604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159474][ T6604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159504][ T6604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.159533][ T6604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.512135][ T162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.592449][ T162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.610929][ T864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.611020][ T864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.625016][ T864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.625070][ T864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.711613][ T162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.803745][ T162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:31 executed programs: 0 [ 91.436749][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.439916][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.442357][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.445623][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.448083][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.546773][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 91.586876][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.586986][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.587097][ T6644] bridge_slave_0: entered allmulticast mode [ 91.587984][ T6644] bridge_slave_0: entered promiscuous mode [ 91.589685][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.589758][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.589895][ T6644] bridge_slave_1: entered allmulticast mode [ 91.590765][ T6644] bridge_slave_1: entered promiscuous mode [ 91.614544][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.616423][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.637461][ T6644] team0: Port device team_slave_0 added [ 91.639940][ T6644] team0: Port device team_slave_1 added [ 91.656344][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.656395][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.656429][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.657822][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.657848][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.657878][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.695368][ T6644] hsr_slave_0: entered promiscuous mode [ 91.697722][ T6644] hsr_slave_1: entered promiscuous mode [ 91.698122][ T6644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.698236][ T6644] Cannot create hsr debugfs directory [ 93.519648][ T52] Bluetooth: hci0: command tx timeout [ 93.694070][ T162] bridge_slave_1: left allmulticast mode [ 93.696047][ T162] bridge_slave_1: left promiscuous mode [ 93.696509][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.706273][ T162] bridge_slave_0: left allmulticast mode [ 93.707948][ T162] bridge_slave_0: left promiscuous mode [ 93.713295][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.391233][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.421358][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.460527][ T162] bond0 (unregistering): Released all slaves [ 95.545637][ T162] hsr_slave_0: left promiscuous mode [ 95.547858][ T162] hsr_slave_1: left promiscuous mode [ 95.548342][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.548389][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.550726][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.550762][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.564911][ T162] veth1_macvtap: left promiscuous mode [ 95.565255][ T162] veth0_macvtap: left promiscuous mode [ 95.565362][ T162] veth1_vlan: left promiscuous mode [ 95.565454][ T162] veth0_vlan: left promiscuous mode [ 95.600121][ T52] Bluetooth: hci0: command tx timeout [ 97.630929][ T162] team0 (unregistering): Port device team_slave_1 removed [ 97.678948][ T52] Bluetooth: hci0: command tx timeout [ 97.830731][ T162] team0 (unregistering): Port device team_slave_0 removed [ 99.758958][ T52] Bluetooth: hci0: command tx timeout [ 100.378601][ T6644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.383995][ T6644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.387939][ T6644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.392100][ T6644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.577578][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.596194][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.604362][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.604456][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.608924][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.608975][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.854660][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.935800][ T6644] veth0_vlan: entered promiscuous mode [ 100.938649][ T6644] veth1_vlan: entered promiscuous mode [ 101.063774][ T6644] veth0_macvtap: entered promiscuous mode [ 101.065550][ T6644] veth1_macvtap: entered promiscuous mode [ 101.073422][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.075277][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.076723][ T6644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.076766][ T6644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.076797][ T6644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.076843][ T6644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.162264][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.162322][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.349128][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.349213][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:41 executed programs: 2 [ 101.415055][ T6750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2 [ 101.900742][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 101.900871][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 101.917910][ T6757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3 [ 102.070340][ T52] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 102.341658][ T52] ================================================================== [ 102.341698][ T52] BUG: KASAN: null-ptr-deref in l2cap_sock_resume_cb+0xb4/0x17c [ 102.341723][ T52] Write of size 8 at addr 0000000000000570 by task kworker/u9:0/52 [ 102.341738][ T52] [ 102.341749][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 102.341762][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.341769][ T52] Workqueue: hci0 hci_rx_work [ 102.341783][ T52] Call trace: [ 102.341787][ T52] show_stack+0x2c/0x3c (C) [ 102.341799][ T52] __dump_stack+0x30/0x40 [ 102.341820][ T52] dump_stack_lvl+0xd8/0x12c [ 102.341833][ T52] print_report+0x58/0x84 [ 102.341845][ T52] kasan_report+0xb0/0x110 [ 102.341856][ T52] kasan_check_range+0x264/0x2a4 [ 102.341866][ T52] __kasan_check_write+0x20/0x30 [ 102.341878][ T52] l2cap_sock_resume_cb+0xb4/0x17c [ 102.341890][ T52] l2cap_security_cfm+0x524/0xea0 [ 102.341907][ T52] hci_auth_complete_evt+0x2e8/0xa4c [ 102.341919][ T52] hci_event_packet+0x650/0xe9c [ 102.341929][ T52] hci_rx_work+0x320/0xb18 [ 102.341941][ T52] process_one_work+0x7e8/0x155c [ 102.341955][ T52] worker_thread+0x958/0xed8 [ 102.341967][ T52] kthread+0x5fc/0x75c [ 102.341979][ T52] ret_from_fork+0x10/0x20 [ 102.341990][ T52] ================================================================== [ 102.342109][ T52] Disabling lock debugging due to kernel taint [ 102.342137][ T52] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000570 [ 102.342160][ T52] Mem abort info: [ 102.342177][ T52] ESR = 0x0000000096000006 [ 102.342197][ T52] EC = 0x25: DABT (current EL), IL = 32 bits [ 102.342218][ T52] SET = 0, FnV = 0 [ 102.342237][ T52] EA = 0, S1PTW = 0 [ 102.342256][ T52] FSC = 0x06: level 2 translation fault [ 102.342276][ T52] Data abort info: [ 102.342293][ T52] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 102.342313][ T52] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 102.342335][ T52] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 102.342356][ T52] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011f831000 [ 102.342379][ T52] [0000000000000570] pgd=0800000112463403, p4d=0800000112463403, pud=080000011e311403, pmd=0000000000000000 [ 102.342450][ T52] Internal error: Oops: 0000000096000006 [#1] SMP [ 102.405939][ T52] Modules linked in: [ 102.406912][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G B 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 102.410351][ T52] Tainted: [B]=BAD_PAGE [ 102.411569][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.414421][ T52] Workqueue: hci0 hci_rx_work [ 102.415824][ T52] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 102.418104][ T52] pc : l2cap_sock_resume_cb+0xc0/0x17c [ 102.419677][ T52] lr : l2cap_sock_resume_cb+0xbc/0x17c [ 102.421224][ T52] sp : ffff8000991975b0 [ 102.422433][ T52] x29: ffff8000991975b0 x28: ffff0000d5946000 x27: dfff800000000000 [ 102.424654][ T52] x26: ffff700013232ec8 x25: 0000000000000001 x24: ffff80008db6f6c0 [ 102.427036][ T52] x23: ffff0000d5946480 x22: dfff800000000000 x21: 0000000000000002 [ 102.429383][ T52] x20: 0000000000000570 x19: 0000000000000000 x18: 1fffe000337d8876 [ 102.431730][ T52] x17: 0000000000000000 x16: ffff80008ae642c8 x15: 0000000000000001 [ 102.434093][ T52] x14: 1ffff000125d90f8 x13: 0000000000000000 x12: 0000000000000000 [ 102.436285][ T52] x11: ffff7000125d90f9 x10: 0000000000ff0100 x9 : 0000000000000000 [ 102.438387][ T52] x8 : 0000000000000002 x7 : 0000000000000001 x6 : 0000000000000001 [ 102.440619][ T52] x5 : ffff800099196e18 x4 : ffff80008f766c20 x3 : ffff8000803b80e0 [ 102.442860][ T52] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 102.444969][ T52] Call trace: [ 102.445917][ T52] l2cap_sock_resume_cb+0xc0/0x17c (P) [ 102.447473][ T52] l2cap_security_cfm+0x524/0xea0 [ 102.448778][ T52] hci_auth_complete_evt+0x2e8/0xa4c [ 102.450311][ T52] hci_event_packet+0x650/0xe9c [ 102.451596][ T52] hci_rx_work+0x320/0xb18 [ 102.452795][ T52] process_one_work+0x7e8/0x155c [ 102.454144][ T52] worker_thread+0x958/0xed8 [ 102.455525][ T52] kthread+0x5fc/0x75c [ 102.456670][ T52] ret_from_fork+0x10/0x20 [ 102.457928][ T52] Code: 977fc1f2 d503201f 977fc0f7 52800048 (f828129f) [ 102.459932][ T52] ---[ end trace 0000000000000000 ]--- [ 102.784606][ T52] Kernel panic - not syncing: Oops: Fatal exception [ 102.786509][ T52] SMP: stopping secondary CPUs [ 102.787781][ T52] Kernel Offset: disabled [ 102.788970][ T52] CPU features: 0x10000,00040e00,040008a1,04017203 [ 102.790718][ T52] Memory Limit: none [ 103.103947][ T52] Rebooting in 86400 seconds..