Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. 2025/08/21 05:07:26 parsed 1 programs [ 271.144201][ T6292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 278.499163][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.509494][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.519127][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.559320][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.574188][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.151791][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.159949][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.217394][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.226302][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.491594][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 280.826790][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.834759][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.844180][ T6355] bridge_slave_0: entered allmulticast mode [ 280.852539][ T6355] bridge_slave_0: entered promiscuous mode [ 280.864926][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.872725][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.880512][ T6355] bridge_slave_1: entered allmulticast mode [ 280.889367][ T6355] bridge_slave_1: entered promiscuous mode [ 280.951946][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.970291][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.035520][ T6355] team0: Port device team_slave_0 added [ 281.051121][ T6355] team0: Port device team_slave_1 added [ 281.109631][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.116750][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.143223][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.158063][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.165252][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.192768][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.293686][ T6355] hsr_slave_0: entered promiscuous mode [ 281.301975][ T6355] hsr_slave_1: entered promiscuous mode [ 281.959209][ T6355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.986138][ T6355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.008469][ T6355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.029506][ T6355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.382794][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.436639][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.465592][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.473149][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.512515][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.520116][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.162499][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.353197][ T6355] veth0_vlan: entered promiscuous mode [ 283.392115][ T6355] veth1_vlan: entered promiscuous mode [ 283.491554][ T6355] veth0_macvtap: entered promiscuous mode [ 283.513506][ T6355] veth1_macvtap: entered promiscuous mode [ 283.581227][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.628764][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.674430][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.697372][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.709506][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.742004][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.792484][ T5060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.029222][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.035836][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.113554][ T5060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.205694][ T5060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.349369][ T5060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.688413][ T5060] bridge_slave_1: left allmulticast mode [ 286.694257][ T5060] bridge_slave_1: left promiscuous mode [ 286.701072][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.778372][ T5060] bridge_slave_0: left allmulticast mode [ 286.784216][ T5060] bridge_slave_0: left promiscuous mode [ 286.791374][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.406368][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.437206][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.459829][ T5060] bond0 (unregistering): Released all slaves [ 287.765856][ T5060] hsr_slave_0: left promiscuous mode [ 287.778746][ T5060] hsr_slave_1: left promiscuous mode [ 287.786497][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.794379][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.806638][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.815032][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.838621][ T5060] veth1_macvtap: left promiscuous mode [ 287.844348][ T5060] veth0_macvtap: left promiscuous mode [ 287.851202][ T5060] veth1_vlan: left promiscuous mode [ 287.856723][ T5060] veth0_vlan: left promiscuous mode [ 288.604181][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 288.629452][ T5060] team0 (unregistering): Port device team_slave_0 removed 2025/08/21 05:08:06 executed programs: 0 [ 290.990015][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.006788][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.016799][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.043827][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.056327][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.590626][ T6502] chnl_net:caif_netlink_parms(): no params data found [ 292.012058][ T6502] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.019793][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.027338][ T6502] bridge_slave_0: entered allmulticast mode [ 292.036812][ T6502] bridge_slave_0: entered promiscuous mode [ 292.051507][ T6502] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.061262][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.069122][ T6502] bridge_slave_1: entered allmulticast mode [ 292.078433][ T6502] bridge_slave_1: entered promiscuous mode [ 292.172602][ T6502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.192874][ T6502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.290809][ T6502] team0: Port device team_slave_0 added [ 292.310891][ T6502] team0: Port device team_slave_1 added [ 292.398807][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.405951][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.433672][ T6502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.451305][ T6502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.458862][ T6502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.485301][ T6502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.628867][ T6502] hsr_slave_0: entered promiscuous mode [ 292.638519][ T6502] hsr_slave_1: entered promiscuous mode [ 293.130074][ T49] Bluetooth: hci0: command tx timeout [ 293.364910][ T6502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.386822][ T6502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.409030][ T6502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.431809][ T6502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.771474][ T6502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.836951][ T6502] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.868186][ T1792] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.875660][ T1792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.908543][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.915997][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.539529][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.716738][ T6502] veth0_vlan: entered promiscuous mode [ 294.765849][ T6502] veth1_vlan: entered promiscuous mode [ 294.865306][ T6502] veth0_macvtap: entered promiscuous mode [ 294.889514][ T6502] veth1_macvtap: entered promiscuous mode [ 294.943742][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.984113][ T6502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.031617][ T4117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.063352][ T4117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.075592][ T5060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.106148][ T5060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.210173][ T49] Bluetooth: hci0: command tx timeout [ 297.011578][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.019760][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.088519][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.096616][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/21 05:08:12 executed programs: 2 [ 297.258280][ T6609] loop0: detected capacity change from 0 to 64 [ 297.293019][ T49] Bluetooth: hci0: command tx timeout [ 297.336313][ T6609] ===================================================== [ 297.343992][ T6609] BUG: KMSAN: use-after-free in hfs_cat_keycmp+0x130/0x220 [ 297.352674][ T6609] hfs_cat_keycmp+0x130/0x220 [ 297.358454][ T6609] __hfs_brec_find+0x263/0x8b0 [ 297.363376][ T6609] hfs_brec_find+0x4c4/0x9f0 [ 297.368384][ T6609] hfs_brec_read+0x3f/0x1f0 [ 297.373047][ T6609] hfs_cat_find_brec+0xe9/0x430 [ 297.378285][ T6609] hfs_fill_super+0x536/0xb70 [ 297.383099][ T6609] get_tree_bdev_flags+0x6e3/0x920 [ 297.388649][ T6609] get_tree_bdev+0x38/0x50 [ 297.393237][ T6609] hfs_get_tree+0x35/0x40 [ 297.397955][ T6609] vfs_get_tree+0xb0/0x5c0 [ 297.402540][ T6609] do_new_mount+0x733/0x1420 [ 297.407315][ T6609] path_mount+0x6db/0x1e90 [ 297.412131][ T6609] __se_sys_mount+0x6eb/0x7d0 [ 297.416970][ T6609] __x64_sys_mount+0xe4/0x150 [ 297.421992][ T6609] x64_sys_call+0x3604/0x3e20 [ 297.426848][ T6609] do_syscall_64+0xd9/0x210 [ 297.431762][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.437990][ T6609] [ 297.440383][ T6609] Uninit was created at: [ 297.444869][ T6609] kmem_cache_free_bulk+0x341/0xf80 [ 297.451530][ T6609] kvfree_rcu_bulk+0x12d/0x570 [ 297.456440][ T6609] kfree_rcu_monitor+0x134d/0x14a0 [ 297.462044][ T6609] process_scheduled_works+0xb8e/0x1d80 [ 297.467961][ T6609] worker_thread+0xedf/0x1590 [ 297.472917][ T6609] kthread+0xd59/0xf00 [ 297.477122][ T6609] ret_from_fork+0x1e3/0x310 [ 297.482344][ T6609] ret_from_fork_asm+0x1a/0x30 [ 297.487291][ T6609] [ 297.489890][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(none) [ 297.499436][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.509822][ T6609] ===================================================== [ 297.516841][ T6609] Disabling lock debugging due to kernel taint [ 297.523304][ T6609] Kernel panic - not syncing: kmsan.panic set ... [ 297.529842][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.0.16 Tainted: G B syzkaller #0 PREEMPT(none) [ 297.540705][ T6609] Tainted: [B]=BAD_PAGE [ 297.544942][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.555117][ T6609] Call Trace: [ 297.558503][ T6609] [ 297.561516][ T6609] __dump_stack+0x26/0x30 [ 297.566020][ T6609] dump_stack_lvl+0x53/0x270 [ 297.570788][ T6609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.576774][ T6609] dump_stack+0x1e/0x25 [ 297.581190][ T6609] vpanic+0x361/0xc50 [ 297.585353][ T6609] panic+0x15d/0x160 [ 297.589455][ T6609] kmsan_report+0x31c/0x320 [ 297.594350][ T6609] ? __msan_warning+0x1b/0x30 [ 297.599156][ T6609] ? hfs_cat_keycmp+0x130/0x220 [ 297.604276][ T6609] ? __hfs_brec_find+0x263/0x8b0 [ 297.609376][ T6609] ? hfs_brec_find+0x4c4/0x9f0 [ 297.614319][ T6609] ? hfs_brec_read+0x3f/0x1f0 [ 297.619247][ T6609] ? hfs_cat_find_brec+0xe9/0x430 [ 297.624461][ T6609] ? hfs_fill_super+0x536/0xb70 [ 297.629461][ T6609] ? get_tree_bdev_flags+0x6e3/0x920 [ 297.634952][ T6609] ? get_tree_bdev+0x38/0x50 [ 297.639889][ T6609] ? hfs_get_tree+0x35/0x40 [ 297.644560][ T6609] ? vfs_get_tree+0xb0/0x5c0 [ 297.649319][ T6609] ? do_new_mount+0x733/0x1420 [ 297.654253][ T6609] ? path_mount+0x6db/0x1e90 [ 297.659101][ T6609] ? __se_sys_mount+0x6eb/0x7d0 [ 297.664206][ T6609] ? __x64_sys_mount+0xe4/0x150 [ 297.669231][ T6609] ? x64_sys_call+0x3604/0x3e20 [ 297.674434][ T6609] ? do_syscall_64+0xd9/0x210 [ 297.679296][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.685521][ T6609] ? kmsan_get_metadata+0xfb/0x160 [ 297.690798][ T6609] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 297.697314][ T6609] ? kmsan_get_metadata+0xfb/0x160 [ 297.702677][ T6609] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 297.709104][ T6609] ? __msan_memcpy+0x108/0x1c0 [ 297.714019][ T6609] ? kmsan_get_metadata+0xfb/0x160 [ 297.719412][ T6609] __msan_warning+0x1b/0x30 [ 297.724073][ T6609] hfs_cat_keycmp+0x130/0x220 [ 297.728945][ T6609] ? __pfx_hfs_cat_keycmp+0x10/0x10 [ 297.734347][ T6609] __hfs_brec_find+0x263/0x8b0 [ 297.739309][ T6609] hfs_brec_find+0x4c4/0x9f0 [ 297.744089][ T6609] hfs_brec_read+0x3f/0x1f0 [ 297.748749][ T6609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.754747][ T6609] hfs_cat_find_brec+0xe9/0x430 [ 297.759884][ T6609] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.765981][ T6609] ? mutex_lock+0x38/0x60 [ 297.770651][ T6609] ? hfs_find_init+0x25b/0x290 [ 297.775582][ T6609] hfs_fill_super+0x536/0xb70 [ 297.780423][ T6609] ? sb_set_blocksize+0x200/0x250 [ 297.785650][ T6609] get_tree_bdev_flags+0x6e3/0x920 [ 297.791116][ T6609] ? __pfx_hfs_fill_super+0x10/0x10 [ 297.796476][ T6609] ? __pfx_hfs_fill_super+0x10/0x10 [ 297.801812][ T6609] ? __pfx_hfs_get_tree+0x10/0x10 [ 297.807075][ T6609] get_tree_bdev+0x38/0x50 [ 297.811663][ T6609] hfs_get_tree+0x35/0x40 [ 297.816143][ T6609] vfs_get_tree+0xb0/0x5c0 [ 297.820775][ T6609] ? mount_capable+0x99/0x100 [ 297.825611][ T6609] do_new_mount+0x733/0x1420 [ 297.830363][ T6609] ? apparmor_capable+0x32d/0x410 [ 297.835760][ T6609] ? kmsan_get_metadata+0xfb/0x160 [ 297.841108][ T6609] path_mount+0x6db/0x1e90 [ 297.845709][ T6609] ? user_path_at+0x32d/0x3d0 [ 297.850548][ T6609] __se_sys_mount+0x6eb/0x7d0 [ 297.855400][ T6609] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 297.861700][ T6609] __x64_sys_mount+0xe4/0x150 [ 297.866665][ T6609] x64_sys_call+0x3604/0x3e20 [ 297.871535][ T6609] do_syscall_64+0xd9/0x210 [ 297.876222][ T6609] ? irqentry_exit+0x16/0x60 [ 297.881060][ T6609] ? clear_bhb_loop+0x40/0x90 [ 297.885896][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.891941][ T6609] RIP: 0033:0x7f7a47f874ba [ 297.896485][ T6609] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.916430][ T6609] RSP: 002b:00007f7a48dabe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.925102][ T6609] RAX: ffffffffffffffda RBX: 00007f7a48dabef0 RCX: 00007f7a47f874ba [ 297.933274][ T6609] RDX: 0000000020000180 RSI: 00000000200003c0 RDI: 00007f7a48dabeb0 [ 297.941526][ T6609] RBP: 0000000020000180 R08: 00007f7a48dabef0 R09: 0000000002810880 [ 297.949616][ T6609] R10: 0000000002810880 R11: 0000000000000246 R12: 00000000200003c0 [ 297.957681][ T6609] R13: 00007f7a48dabeb0 R14: 000000000000029c R15: 0000000020000480 [ 297.965780][ T6609] [ 297.969173][ T6609] Kernel Offset: disabled [ 297.973542][ T6609] Rebooting in 86400 seconds..