[ 352.614043][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.620904][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2025/07/22 06:00:37 ignoring optional flag "sandboxArg"="0" 2025/07/22 06:00:39 parsed 1 programs [ 414.064918][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.071859][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.988659][ T6292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 457.415537][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.426853][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.436949][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.449857][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.462397][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.176302][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 459.534505][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.542213][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.550411][ T6335] bridge_slave_0: entered allmulticast mode [ 459.559778][ T6335] bridge_slave_0: entered promiscuous mode [ 459.574801][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.582532][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.590372][ T6335] bridge_slave_1: entered allmulticast mode [ 459.599653][ T6335] bridge_slave_1: entered promiscuous mode [ 459.671694][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.692043][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.767719][ T6335] team0: Port device team_slave_0 added [ 459.784144][ T6335] team0: Port device team_slave_1 added [ 459.854293][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.862136][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.888618][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.903814][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.911254][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.937705][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.040941][ T6335] hsr_slave_0: entered promiscuous mode [ 460.050562][ T6335] hsr_slave_1: entered promiscuous mode [ 460.993366][ T6335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.017601][ T6335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.042172][ T6335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.065858][ T6335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.437101][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.497485][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.529302][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.536910][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.579396][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.586967][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.297908][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.484805][ T6335] veth0_vlan: entered promiscuous mode [ 462.543466][ T6335] veth1_vlan: entered promiscuous mode [ 462.690181][ T6335] veth0_macvtap: entered promiscuous mode [ 462.722845][ T6335] veth1_macvtap: entered promiscuous mode [ 462.803473][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.854516][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.883771][ T6335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.893260][ T6335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.902616][ T6335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.911886][ T6335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.289370][ T4509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.444743][ T4509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.568330][ T4509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.711347][ T4509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.128795][ T4509] bridge_slave_1: left allmulticast mode [ 466.134755][ T4509] bridge_slave_1: left promiscuous mode [ 466.141887][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.218905][ T4509] bridge_slave_0: left allmulticast mode [ 466.224941][ T4509] bridge_slave_0: left promiscuous mode [ 466.232087][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.770044][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.800074][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.815224][ T4509] bond0 (unregistering): Released all slaves [ 467.124417][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.132725][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.212240][ T4509] hsr_slave_0: left promiscuous mode [ 467.221787][ T4509] hsr_slave_1: left promiscuous mode [ 467.230638][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.239379][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.256518][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.264583][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.294121][ T4509] veth1_macvtap: left promiscuous mode [ 467.300080][ T4509] veth0_macvtap: left promiscuous mode [ 467.306156][ T4509] veth1_vlan: left promiscuous mode [ 467.311981][ T4509] veth0_vlan: left promiscuous mode [ 468.002532][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 468.036468][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 468.354409][ T3809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.362916][ T3809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.511150][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.517913][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/22 06:02:16 executed programs: 0 [ 476.928922][ T5078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.938591][ T5078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.949445][ T5078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.966513][ T5078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.983822][ T5078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.592954][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 478.146586][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.155203][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.165773][ T6558] bridge_slave_0: entered allmulticast mode [ 478.175388][ T6558] bridge_slave_0: entered promiscuous mode [ 478.192824][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.202624][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.210566][ T6558] bridge_slave_1: entered allmulticast mode [ 478.220253][ T6558] bridge_slave_1: entered promiscuous mode [ 478.323731][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.346109][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.445798][ T6558] team0: Port device team_slave_0 added [ 478.473247][ T6558] team0: Port device team_slave_1 added [ 478.565553][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.575811][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.603432][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.625813][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.634831][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.661549][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.806172][ T6558] hsr_slave_0: entered promiscuous mode [ 478.816535][ T6558] hsr_slave_1: entered promiscuous mode [ 479.078321][ T53] Bluetooth: hci0: command tx timeout [ 479.617626][ T6558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.641976][ T6558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.666026][ T6558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.690561][ T6558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.076765][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.139778][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.173192][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.182809][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.233667][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.241416][ T3809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.404842][ T6558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.974039][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.160532][ T53] Bluetooth: hci0: command tx timeout [ 481.203028][ T6558] veth0_vlan: entered promiscuous mode [ 481.264230][ T6558] veth1_vlan: entered promiscuous mode [ 481.428604][ T6558] veth0_macvtap: entered promiscuous mode [ 481.464152][ T6558] veth1_macvtap: entered promiscuous mode [ 481.559159][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.595762][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.649101][ T6558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.660421][ T6558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.669751][ T6558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.678978][ T6558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.238632][ T53] Bluetooth: hci0: command tx timeout [ 483.922310][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.930657][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.031585][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.041510][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/22 06:02:24 executed programs: 2 [ 484.284423][ T6668] loop0: detected capacity change from 0 to 1024 [ 484.311859][ T6668] hfsplus: Unknown parameter 'typ ' [ 484.592592][ T6671] loop0: detected capacity change from 0 to 1024 [ 484.603522][ T6671] hfsplus: Unknown parameter 'typ ' [ 484.860801][ T6674] loop0: detected capacity change from 0 to 1024 [ 484.873729][ T6674] hfsplus: Unknown parameter 'typ ' [ 485.125215][ T6678] loop0: detected capacity change from 0 to 1024 [ 485.168987][ T6678] hfsplus: Unknown parameter 'typ ' [ 485.380250][ T6683] loop0: detected capacity change from 0 to 1024 [ 485.397178][ T6683] hfsplus: Unknown parameter 'typ ' [ 485.668357][ T6687] loop0: detected capacity change from 0 to 1024 [ 485.688104][ T6687] hfsplus: Unknown parameter 'typ ' [ 485.939715][ T6691] loop0: detected capacity change from 0 to 1024 [ 485.960941][ T6691] hfsplus: Unknown parameter 'typ ' [ 486.217703][ T6695] loop0: detected capacity change from 0 to 1024 [ 486.256399][ T6695] hfsplus: Unknown parameter 'typ ' [ 486.403928][ T6698] loop0: detected capacity change from 0 to 1024 [ 486.419318][ T6698] hfsplus: Unknown parameter 'typ ' [ 486.699681][ T6702] loop0: detected capacity change from 0 to 1024 [ 486.720449][ T6702] hfsplus: Unknown parameter 'typ ' [ 487.069761][ T6707] loop0: detected capacity change from 0 to 1024 [ 487.090337][ T6707] hfsplus: Unknown parameter 'typ ' [ 487.106862][ T53] ===================================================== [ 487.114328][ T53] BUG: KMSAN: uninit-value in hci_cmd_complete_evt+0xca3/0xe90 [ 487.122401][ T53] hci_cmd_complete_evt+0xca3/0xe90 [ 487.127856][ T53] hci_event_packet+0xce2/0x1e40 [ 487.133106][ T53] hci_rx_work+0x9a8/0x12b0 [ 487.137836][ T53] process_scheduled_works+0xb97/0x1d90 [ 487.143720][ T53] worker_thread+0xedf/0x1590 [ 487.148801][ T53] kthread+0xd59/0xf00 [ 487.153076][ T53] ret_from_fork+0x6e/0x90 [ 487.157850][ T53] ret_from_fork_asm+0x1a/0x30 [ 487.162999][ T53] [ 487.165448][ T53] Uninit was stored to memory at: [ 487.170998][ T53] hci_cmd_complete_evt+0xc9c/0xe90 [ 487.176430][ T53] hci_event_packet+0xce2/0x1e40 [ 487.181746][ T53] hci_rx_work+0x9a8/0x12b0 [ 487.186825][ T53] process_scheduled_works+0xb97/0x1d90 [ 487.194590][ T53] worker_thread+0xedf/0x1590 [ 487.200268][ T53] kthread+0xd59/0xf00 [ 487.204587][ T53] ret_from_fork+0x6e/0x90 [ 487.209362][ T53] ret_from_fork_asm+0x1a/0x30 [ 487.214384][ T53] [ 487.216843][ T53] Uninit was stored to memory at: [ 487.222292][ T53] hci_cmd_complete_evt+0x775/0xe90 [ 487.227702][ T53] hci_event_packet+0xce2/0x1e40 [ 487.233048][ T53] hci_rx_work+0x9a8/0x12b0 [ 487.237788][ T53] process_scheduled_works+0xb97/0x1d90 [ 487.243724][ T53] worker_thread+0xedf/0x1590 [ 487.248844][ T53] kthread+0xd59/0xf00 [ 487.253126][ T53] ret_from_fork+0x6e/0x90 [ 487.257791][ T53] ret_from_fork_asm+0x1a/0x30 [ 487.263021][ T53] [ 487.265497][ T53] Uninit was created at: [ 487.270109][ T53] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 487.276224][ T53] kmalloc_reserve+0x13c/0x4b0 [ 487.281384][ T53] __alloc_skb+0x347/0x7d0 [ 487.286034][ T53] vhci_write+0x125/0x960 [ 487.290740][ T53] vfs_write+0xb34/0x1560 [ 487.297121][ T53] __x64_sys_write+0x1fb/0x4d0 [ 487.302934][ T53] x64_sys_call+0x38c3/0x3db0 [ 487.307895][ T53] do_syscall_64+0xd9/0x1c0 [ 487.312713][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.320980][ T53] [ 487.323503][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.15.0-rc6-syzkaller-01366-g0ba714749722 #0 PREEMPT(undef) [ 487.337146][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.347531][ T53] Workqueue: hci0 hci_rx_work [ 487.352687][ T53] ===================================================== [ 487.359852][ T53] Disabling lock debugging due to kernel taint [ 487.366257][ T53] Kernel panic - not syncing: kmsan.panic set ... [ 487.372879][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:0 Tainted: G B 6.15.0-rc6-syzkaller-01366-g0ba714749722 #0 PREEMPT(undef) [ 487.387050][ T53] Tainted: [B]=BAD_PAGE [ 487.391353][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.401623][ T53] Workqueue: hci0 hci_rx_work [ 487.406534][ T53] Call Trace: [ 487.409941][ T53] [ 487.413002][ T53] __dump_stack+0x26/0x30 [ 487.417532][ T53] dump_stack_lvl+0x53/0x270 [ 487.422321][ T53] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.428330][ T53] dump_stack+0x1e/0x25 [ 487.432691][ T53] panic+0x4bd/0xd50 [ 487.436843][ T53] kmsan_report+0x29d/0x2a0 [ 487.441541][ T53] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 487.447581][ T53] ? __msan_warning+0x96/0x120 [ 487.452561][ T53] ? hci_cmd_complete_evt+0xca3/0xe90 [ 487.458144][ T53] ? hci_event_packet+0xce2/0x1e40 [ 487.463457][ T53] ? hci_rx_work+0x9a8/0x12b0 [ 487.468333][ T53] ? process_scheduled_works+0xb97/0x1d90 [ 487.474261][ T53] ? worker_thread+0xedf/0x1590 [ 487.479308][ T53] ? kthread+0xd59/0xf00 [ 487.483709][ T53] ? ret_from_fork+0x6e/0x90 [ 487.488618][ T53] ? ret_from_fork_asm+0x1a/0x30 [ 487.493763][ T53] ? ret_from_fork_asm+0x1a/0x30 [ 487.498915][ T53] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 487.505480][ T53] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 487.511790][ T53] ? work_grab_pending+0x5e3/0x1100 [ 487.517216][ T53] ? kmsan_get_metadata+0xfb/0x160 [ 487.522508][ T53] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 487.529074][ T53] ? kmsan_get_metadata+0xfb/0x160 [ 487.534362][ T53] ? kmsan_get_metadata+0xfb/0x160 [ 487.539681][ T53] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 487.545679][ T53] ? kmsan_get_metadata+0xfb/0x160 [ 487.550987][ T53] __msan_warning+0x96/0x120 [ 487.555794][ T53] hci_cmd_complete_evt+0xca3/0xe90 [ 487.561233][ T53] hci_event_packet+0xce2/0x1e40 [ 487.566368][ T53] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 487.572325][ T53] hci_rx_work+0x9a8/0x12b0 [ 487.577051][ T53] ? __pfx_hci_rx_work+0x10/0x10 [ 487.582189][ T53] process_scheduled_works+0xb97/0x1d90 [ 487.588051][ T53] worker_thread+0xedf/0x1590 [ 487.592997][ T53] kthread+0xd59/0xf00 [ 487.597227][ T53] ? __pfx_worker_thread+0x10/0x10 [ 487.602751][ T53] ? __pfx_kthread+0x10/0x10 [ 487.607530][ T53] ret_from_fork+0x6e/0x90 [ 487.612211][ T53] ? __pfx_kthread+0x10/0x10 [ 487.617014][ T53] ret_from_fork_asm+0x1a/0x30 [ 487.622024][ T53] [ 487.625504][ T53] Kernel Offset: disabled [ 487.629936][ T53] Rebooting in 86400 seconds..