Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. 2025/11/22 17:31:39 ignoring optional flag "type"="gce" 2025/11/22 17:31:40 parsed 1 programs [ 213.569143][ T6151] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 215.123251][ T6186] chnl_net:caif_netlink_parms(): no params data found [ 215.399854][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.409084][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.416633][ T6186] bridge_slave_0: entered allmulticast mode [ 215.424901][ T6186] bridge_slave_0: entered promiscuous mode [ 215.437041][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.444579][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.451942][ T6186] bridge_slave_1: entered allmulticast mode [ 215.460871][ T6186] bridge_slave_1: entered promiscuous mode [ 215.525474][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.541593][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.604215][ T6186] team0: Port device team_slave_0 added [ 215.619957][ T6186] team0: Port device team_slave_1 added [ 215.680849][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.688301][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.715771][ T6186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.731214][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.738478][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.767496][ T6186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.852444][ T6186] hsr_slave_0: entered promiscuous mode [ 215.860743][ T6186] hsr_slave_1: entered promiscuous mode [ 216.478430][ T6186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.508770][ T6186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.538807][ T6186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.560543][ T6186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.910530][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.974673][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.005434][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.012987][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.108738][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.116302][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.642776][ T6186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.798067][ T6186] veth0_vlan: entered promiscuous mode [ 217.838243][ T6186] veth1_vlan: entered promiscuous mode [ 217.943098][ T6186] veth0_macvtap: entered promiscuous mode [ 217.973889][ T6186] veth1_macvtap: entered promiscuous mode [ 218.038753][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.072839][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.113243][ T4399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.140987][ T4399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.167147][ T4399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.196720][ T5013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.277630][ T134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.769944][ T134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.827294][ T5013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.835366][ T5013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.943110][ T134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.975055][ T3936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.983169][ T3936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.039797][ T134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.394625][ T134] bridge_slave_1: left allmulticast mode [ 221.400566][ T134] bridge_slave_1: left promiscuous mode [ 221.407833][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.504610][ T134] bridge_slave_0: left allmulticast mode [ 221.510534][ T134] bridge_slave_0: left promiscuous mode [ 221.519355][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.930561][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.949443][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.973211][ T134] bond0 (unregistering): Released all slaves [ 222.263007][ T134] hsr_slave_0: left promiscuous mode [ 222.274924][ T134] hsr_slave_1: left promiscuous mode [ 222.282760][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.297603][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.316530][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.325479][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.374387][ T134] veth1_macvtap: left promiscuous mode [ 222.380192][ T134] veth0_macvtap: left promiscuous mode [ 222.386312][ T134] veth1_vlan: left promiscuous mode [ 222.392003][ T134] veth0_vlan: left promiscuous mode [ 222.929096][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.957480][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.967064][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.980508][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.993671][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.077599][ T134] team0 (unregistering): Port device team_slave_1 removed [ 223.209069][ T134] team0 (unregistering): Port device team_slave_0 removed [ 224.527839][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.536118][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/22 17:32:03 executed programs: 0 [ 228.947654][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.958259][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.969880][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.991706][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.005414][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.694231][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 230.104843][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.112596][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.123085][ T6384] bridge_slave_0: entered allmulticast mode [ 230.132484][ T6384] bridge_slave_0: entered promiscuous mode [ 230.146045][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.153805][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.161333][ T6384] bridge_slave_1: entered allmulticast mode [ 230.170592][ T6384] bridge_slave_1: entered promiscuous mode [ 230.258290][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.280887][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.374966][ T6384] team0: Port device team_slave_0 added [ 230.400944][ T6384] team0: Port device team_slave_1 added [ 230.499602][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.506844][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.533233][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.560789][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.568754][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.595393][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.715407][ T6384] hsr_slave_0: entered promiscuous mode [ 230.724944][ T6384] hsr_slave_1: entered promiscuous mode [ 231.063612][ T5105] Bluetooth: hci0: command tx timeout [ 231.449928][ T6384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.471330][ T6384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.492970][ T6384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.514291][ T6384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.855964][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.910889][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.940649][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.948372][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.981850][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.989545][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.582481][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.745723][ T6384] veth0_vlan: entered promiscuous mode [ 232.781711][ T6384] veth1_vlan: entered promiscuous mode [ 232.871885][ T6384] veth0_macvtap: entered promiscuous mode [ 232.918139][ T6384] veth1_macvtap: entered promiscuous mode [ 232.972144][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.007941][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.050596][ T4399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.091490][ T3936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.111894][ T3936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.123071][ T3936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.144664][ T5105] Bluetooth: hci0: command tx timeout [ 234.317885][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.326190][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.390283][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.398547][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.011247][ T6468] loop0: detected capacity change from 0 to 32768 [ 235.025829][ T6468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor (6468) [ 235.050566][ T6468] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 235.062288][ T6468] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 235.158894][ T6468] BTRFS info (device loop0): enabling ssd optimizations [ 235.166447][ T6468] BTRFS info (device loop0): turning on async discard [ 235.173659][ T6468] BTRFS info (device loop0): enabling free space tree [ 235.195720][ T30] audit: type=1804 audit(1763832729.861:2): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/root/syzkaller-testdir3676191547/syzkaller.341pc8/0/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 235.225586][ T5105] Bluetooth: hci0: command tx timeout [ 235.231439][ T6468] ===================================================== [ 235.241207][ T6468] BUG: KMSAN: uninit-value in iov_iter_alignment_iovec+0x19e/0x470 [ 235.252649][ T6468] iov_iter_alignment_iovec+0x19e/0x470 [ 235.258658][ T6468] iov_iter_alignment+0x174/0x2d0 [ 235.263986][ T6468] btrfs_direct_read+0x2eb/0xcb0 [ 235.269190][ T6468] btrfs_file_read_iter+0xce/0x310 [ 235.274917][ T6468] aio_read+0x493/0x6b0 [ 235.279262][ T6468] io_submit_one+0x25d6/0x3450 [ 235.284543][ T6468] __se_sys_io_submit+0x27c/0x6a0 [ 235.289818][ T6468] __x64_sys_io_submit+0x97/0xe0 [ 235.295073][ T6468] x64_sys_call+0x39c4/0x3e30 [ 235.300008][ T6468] do_syscall_64+0xd9/0xfa0 [ 235.304893][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.310954][ T6468] [ 235.313462][ T6468] Local variable inline_vecs created at: [ 235.319597][ T6468] aio_read+0x4f/0x6b0 [ 235.323950][ T6468] io_submit_one+0x25d6/0x3450 [ 235.328859][ T6468] [ 235.331300][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 235.343228][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.353627][ T6468] ===================================================== [ 235.360643][ T6468] Disabling lock debugging due to kernel taint [ 235.367106][ T6468] Kernel panic - not syncing: kmsan.panic set ... [ 235.373647][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 235.385030][ T6468] Tainted: [B]=BAD_PAGE [ 235.389356][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.399534][ T6468] Call Trace: [ 235.402914][ T6468] [ 235.405929][ T6468] __dump_stack+0x26/0x30 [ 235.410442][ T6468] dump_stack_lvl+0x53/0x270 [ 235.415192][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.421171][ T6468] dump_stack+0x1e/0x25 [ 235.425506][ T6468] vpanic+0x435/0xd30 [ 235.429682][ T6468] panic+0x15d/0x160 [ 235.433883][ T6468] kmsan_report+0x31c/0x320 [ 235.438556][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.444619][ T6468] ? __msan_warning+0x1b/0x30 [ 235.449454][ T6468] ? iov_iter_alignment_iovec+0x19e/0x470 [ 235.455402][ T6468] ? iov_iter_alignment+0x174/0x2d0 [ 235.460875][ T6468] ? btrfs_direct_read+0x2eb/0xcb0 [ 235.466354][ T6468] ? btrfs_file_read_iter+0xce/0x310 [ 235.471845][ T6468] ? aio_read+0x493/0x6b0 [ 235.476317][ T6468] ? io_submit_one+0x25d6/0x3450 [ 235.481582][ T6468] ? __se_sys_io_submit+0x27c/0x6a0 [ 235.487092][ T6468] ? __x64_sys_io_submit+0x97/0xe0 [ 235.492392][ T6468] ? x64_sys_call+0x39c4/0x3e30 [ 235.497429][ T6468] ? do_syscall_64+0xd9/0xfa0 [ 235.502282][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.508516][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.514501][ T6468] ? __rcu_read_unlock+0x6d/0xd0 [ 235.519799][ T6468] ? is_module_text_address+0x1f4/0x240 [ 235.525653][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.530982][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.536265][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.542258][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.547555][ T6468] __msan_warning+0x1b/0x30 [ 235.552217][ T6468] iov_iter_alignment_iovec+0x19e/0x470 [ 235.557969][ T6468] iov_iter_alignment+0x174/0x2d0 [ 235.563178][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.569183][ T6468] btrfs_direct_read+0x2eb/0xcb0 [ 235.574347][ T6468] ? common_file_perm+0x1fa/0x490 [ 235.579703][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.585015][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.591111][ T6468] btrfs_file_read_iter+0xce/0x310 [ 235.596420][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.601786][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.607877][ T6468] aio_read+0x493/0x6b0 [ 235.612263][ T6468] ? __pfx_btrfs_file_read_iter+0x10/0x10 [ 235.618299][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.623576][ T6468] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 235.630228][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.635606][ T6468] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.641696][ T6468] io_submit_one+0x25d6/0x3450 [ 235.646629][ T6468] ? kmsan_get_metadata+0xfb/0x160 [ 235.651947][ T6468] __se_sys_io_submit+0x27c/0x6a0 [ 235.657173][ T6468] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 235.663478][ T6468] __x64_sys_io_submit+0x97/0xe0 [ 235.668630][ T6468] x64_sys_call+0x39c4/0x3e30 [ 235.673596][ T6468] do_syscall_64+0xd9/0xfa0 [ 235.678379][ T6468] ? irqentry_exit+0x16/0x60 [ 235.683166][ T6468] ? clear_bhb_loop+0x40/0x90 [ 235.688093][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.694152][ T6468] RIP: 0033:0x7f4dcb67cf69 [ 235.698693][ T6468] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 235.718555][ T6468] RSP: 002b:00007f4dcc3b40c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 235.727318][ T6468] RAX: ffffffffffffffda RBX: 00007f4dcb7b3f80 RCX: 00007f4dcb67cf69 [ 235.735511][ T6468] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007f4dcc393000 [ 235.743604][ T6468] RBP: 00007f4dcb6da6fe R08: 0000000000000000 R09: 0000000000000000 [ 235.751706][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.759885][ T6468] R13: 000000000000000b R14: 00007f4dcb7b3f80 R15: 00007ffe0cebe188 [ 235.768203][ T6468] [ 235.772109][ T6468] Kernel Offset: disabled [ 235.776678][ T6468] Rebooting in 86400 seconds..