Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. 2025/09/10 18:04:57 parsed 1 programs [ 286.026897][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.033594][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.430824][ T6315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 294.175956][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.184075][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.256069][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.264373][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.281839][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 297.653248][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.661233][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.671027][ T6343] bridge_slave_0: entered allmulticast mode [ 297.679586][ T6343] bridge_slave_0: entered promiscuous mode [ 297.691866][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.699740][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.707928][ T6343] bridge_slave_1: entered allmulticast mode [ 297.716526][ T6343] bridge_slave_1: entered promiscuous mode [ 297.786754][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.806227][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.877726][ T6343] team0: Port device team_slave_0 added [ 297.892286][ T6343] team0: Port device team_slave_1 added [ 297.956137][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.963512][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.989853][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.004700][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.011858][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.038471][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.139634][ T6343] hsr_slave_0: entered promiscuous mode [ 298.148954][ T6343] hsr_slave_1: entered promiscuous mode [ 298.948019][ T6343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.973850][ T6343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.999667][ T6343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.023579][ T6343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.416377][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.481564][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.522249][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.529971][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.600360][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.608097][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.275836][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.448704][ T6343] veth0_vlan: entered promiscuous mode [ 300.494020][ T6343] veth1_vlan: entered promiscuous mode [ 300.617858][ T6343] veth0_macvtap: entered promiscuous mode [ 300.642652][ T6343] veth1_macvtap: entered promiscuous mode [ 300.705368][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.759066][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.791997][ T3904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.820438][ T3904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.856352][ T3904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.877675][ T3904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.202616][ T3962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.353586][ T3962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.450406][ T3962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.570713][ T3962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.994946][ T3962] bridge_slave_1: left allmulticast mode [ 304.000812][ T3962] bridge_slave_1: left promiscuous mode [ 304.008492][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.060890][ T3962] bridge_slave_0: left allmulticast mode [ 304.066976][ T3962] bridge_slave_0: left promiscuous mode [ 304.073566][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.693062][ T3962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.726408][ T3962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.750539][ T3962] bond0 (unregistering): Released all slaves [ 305.056652][ T3962] hsr_slave_0: left promiscuous mode [ 305.093101][ T3962] hsr_slave_1: left promiscuous mode [ 305.101655][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.109655][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.160947][ T3962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.168704][ T3962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.256901][ T3962] veth1_macvtap: left promiscuous mode [ 305.262637][ T3962] veth0_macvtap: left promiscuous mode [ 305.270692][ T3962] veth1_vlan: left promiscuous mode [ 305.276439][ T3962] veth0_vlan: left promiscuous mode [ 306.157624][ T3962] team0 (unregistering): Port device team_slave_1 removed [ 306.193384][ T3962] team0 (unregistering): Port device team_slave_0 removed [ 307.428538][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.443384][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.461608][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.490076][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.503357][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/09/10 18:05:42 executed programs: 0 [ 313.256679][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.283065][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.302734][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.321837][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.334081][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.916706][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 314.393973][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.401682][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.409546][ T6563] bridge_slave_0: entered allmulticast mode [ 314.419066][ T6563] bridge_slave_0: entered promiscuous mode [ 314.437527][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.445247][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.452810][ T6563] bridge_slave_1: entered allmulticast mode [ 314.464025][ T6563] bridge_slave_1: entered promiscuous mode [ 314.569801][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.592601][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.697314][ T6563] team0: Port device team_slave_0 added [ 314.715270][ T6563] team0: Port device team_slave_1 added [ 314.822360][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.829858][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.857669][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.876318][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.883439][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.910499][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.049914][ T6563] hsr_slave_0: entered promiscuous mode [ 315.059903][ T6563] hsr_slave_1: entered promiscuous mode [ 315.364462][ T5106] Bluetooth: hci0: command tx timeout [ 315.791517][ T6563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.817651][ T6563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.840939][ T6563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.870379][ T6563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.311878][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.382827][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.422629][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.430399][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.460118][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.467794][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.157244][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.288460][ T6563] veth0_vlan: entered promiscuous mode [ 317.317684][ T6563] veth1_vlan: entered promiscuous mode [ 317.407930][ T6563] veth0_macvtap: entered promiscuous mode [ 317.430658][ T6563] veth1_macvtap: entered promiscuous mode [ 317.455826][ T5106] Bluetooth: hci0: command tx timeout [ 317.490879][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.523278][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.567587][ T3904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.578101][ T3904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.587953][ T3904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.599617][ T3904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.970249][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.978590][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.088684][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.098720][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/10 18:05:48 executed programs: 2 [ 319.215580][ T6637] syzkaller1: entered promiscuous mode [ 319.221334][ T6637] syzkaller1: entered allmulticast mode [ 319.238388][ T6637] ===================================================== [ 319.245939][ T6637] BUG: KMSAN: uninit-value in ip_tunnel_rcv+0x1311/0x34f0 [ 319.253642][ T6637] ip_tunnel_rcv+0x1311/0x34f0 [ 319.259000][ T6637] gre_rcv+0x1aad/0x2050 [ 319.263425][ T6637] gre_rcv+0x282/0x380 [ 319.267903][ T6637] ip_protocol_deliver_rcu+0xb29/0x13d0 [ 319.273612][ T6637] ip_local_deliver_finish+0x409/0x730 [ 319.279643][ T6637] ip_local_deliver+0x228/0x4b0 [ 319.284980][ T6637] ip_rcv_finish+0x4f7/0x5c0 [ 319.290033][ T6637] ip_rcv+0xcb/0x380 [ 319.294028][ T6637] __netif_receive_skb+0x312/0xac0 [ 319.299479][ T6637] netif_receive_skb+0x57/0x630 [ 319.304613][ T6637] tun_rx_batched+0x1df/0x980 [ 319.309602][ T6637] tun_get_user+0x5028/0x6ca0 [ 319.314619][ T6637] tun_chr_write_iter+0x3e9/0x5c0 [ 319.319899][ T6637] vfs_write+0xbe2/0x15d0 [ 319.324551][ T6637] __x64_sys_write+0x1fb/0x4d0 [ 319.329490][ T6637] x64_sys_call+0x3014/0x3e20 [ 319.334461][ T6637] do_syscall_64+0xd9/0x210 [ 319.339109][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.346663][ T6637] [ 319.349253][ T6637] Uninit was created at: [ 319.353881][ T6637] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 319.360242][ T6637] kmalloc_reserve+0x13c/0x4b0 [ 319.365302][ T6637] __alloc_skb+0x347/0x7d0 [ 319.369996][ T6637] alloc_skb_with_frags+0xc5/0xa60 [ 319.375572][ T6637] sock_alloc_send_pskb+0xad8/0xc70 [ 319.381016][ T6637] tun_get_user+0x113f/0x6ca0 [ 319.386115][ T6637] tun_chr_write_iter+0x3e9/0x5c0 [ 319.391485][ T6637] vfs_write+0xbe2/0x15d0 [ 319.396331][ T6637] __x64_sys_write+0x1fb/0x4d0 [ 319.401289][ T6637] x64_sys_call+0x3014/0x3e20 [ 319.406330][ T6637] do_syscall_64+0xd9/0x210 [ 319.411159][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.417365][ T6637] [ 319.419867][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) [ 319.429637][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.440282][ T6637] ===================================================== [ 319.447573][ T6637] Disabling lock debugging due to kernel taint [ 319.453856][ T6637] Kernel panic - not syncing: kmsan.panic set ... [ 319.460400][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(none) [ 319.471273][ T6637] Tainted: [B]=BAD_PAGE [ 319.475515][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.485663][ T6637] Call Trace: [ 319.489016][ T6637] [ 319.492097][ T6637] __dump_stack+0x26/0x30 [ 319.496561][ T6637] dump_stack_lvl+0x53/0x270 [ 319.501360][ T6637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 319.507316][ T6637] dump_stack+0x1e/0x25 [ 319.511691][ T6637] vpanic+0x361/0xc50 [ 319.515990][ T6637] panic+0x15d/0x160 [ 319.520254][ T6637] kmsan_report+0x31c/0x320 [ 319.524933][ T6637] ? __msan_warning+0x1b/0x30 [ 319.529790][ T6637] ? ip_tunnel_rcv+0x1311/0x34f0 [ 319.534838][ T6637] ? gre_rcv+0x1aad/0x2050 [ 319.539392][ T6637] ? gre_rcv+0x282/0x380 [ 319.544108][ T6637] ? ip_protocol_deliver_rcu+0xb29/0x13d0 [ 319.550106][ T6637] ? ip_local_deliver_finish+0x409/0x730 [ 319.556042][ T6637] ? ip_local_deliver+0x228/0x4b0 [ 319.561367][ T6637] ? ip_rcv_finish+0x4f7/0x5c0 [ 319.566533][ T6637] ? ip_rcv+0xcb/0x380 [ 319.570986][ T6637] ? __netif_receive_skb+0x312/0xac0 [ 319.576538][ T6637] ? netif_receive_skb+0x57/0x630 [ 319.581868][ T6637] ? tun_rx_batched+0x1df/0x980 [ 319.587285][ T6637] ? tun_get_user+0x5028/0x6ca0 [ 319.592513][ T6637] ? tun_chr_write_iter+0x3e9/0x5c0 [ 319.598050][ T6637] ? vfs_write+0xbe2/0x15d0 [ 319.603467][ T6637] ? __x64_sys_write+0x1fb/0x4d0 [ 319.608669][ T6637] ? x64_sys_call+0x3014/0x3e20 [ 319.613760][ T6637] ? do_syscall_64+0xd9/0x210 [ 319.618620][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.625331][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.630651][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.636261][ T6637] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 319.642908][ T6637] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 319.649673][ T6637] ? skb_copy_bits+0xfa1/0x1110 [ 319.655019][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.660869][ T6637] __msan_warning+0x1b/0x30 [ 319.665557][ T6637] ip_tunnel_rcv+0x1311/0x34f0 [ 319.670502][ T6637] gre_rcv+0x1aad/0x2050 [ 319.674987][ T6637] ? __pskb_pull_tail+0x1779/0x2660 [ 319.680601][ T6637] ? __pfx_gre_rcv+0x10/0x10 [ 319.685410][ T6637] gre_rcv+0x282/0x380 [ 319.689730][ T6637] ? __pfx_gre_rcv+0x10/0x10 [ 319.694516][ T6637] ip_protocol_deliver_rcu+0xb29/0x13d0 [ 319.700276][ T6637] ip_local_deliver_finish+0x409/0x730 [ 319.705895][ T6637] ip_local_deliver+0x228/0x4b0 [ 319.711107][ T6637] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 319.717618][ T6637] ? __pfx_ip_local_deliver+0x10/0x10 [ 319.723323][ T6637] ip_rcv_finish+0x4f7/0x5c0 [ 319.728371][ T6637] ip_rcv+0xcb/0x380 [ 319.732560][ T6637] ? __pfx_ip_rcv_finish+0x10/0x10 [ 319.737949][ T6637] ? __pfx_ip_rcv+0x10/0x10 [ 319.742995][ T6637] __netif_receive_skb+0x312/0xac0 [ 319.748993][ T6637] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 319.755667][ T6637] netif_receive_skb+0x57/0x630 [ 319.760761][ T6637] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 319.766812][ T6637] ? tun_rx_batched+0x16c/0x980 [ 319.771997][ T6637] tun_rx_batched+0x1df/0x980 [ 319.776822][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.782156][ T6637] tun_get_user+0x5028/0x6ca0 [ 319.787853][ T6637] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 319.793989][ T6637] ? stack_depot_save_flags+0x615/0x7b0 [ 319.799684][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.805606][ T6637] ? kmsan_get_metadata+0xfb/0x160 [ 319.810980][ T6637] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 319.817544][ T6637] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 319.823872][ T6637] tun_chr_write_iter+0x3e9/0x5c0 [ 319.829035][ T6637] vfs_write+0xbe2/0x15d0 [ 319.833708][ T6637] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 319.839708][ T6637] __x64_sys_write+0x1fb/0x4d0 [ 319.844805][ T6637] x64_sys_call+0x3014/0x3e20 [ 319.850417][ T6637] do_syscall_64+0xd9/0x210 [ 319.855355][ T6637] ? irqentry_exit+0x16/0x60 [ 319.860481][ T6637] ? clear_bhb_loop+0x40/0x90 [ 319.865556][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.871889][ T6637] RIP: 0033:0x7f5b2138ebe9 [ 319.876487][ T6637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.896574][ T6637] RSP: 002b:00007f5b22212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.905295][ T6637] RAX: ffffffffffffffda RBX: 00007f5b215b5fa0 RCX: 00007f5b2138ebe9 [ 319.913620][ T6637] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 319.921938][ T6637] RBP: 00007f5b21411e19 R08: 0000000000000000 R09: 0000000000000000 [ 319.930666][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.938735][ T6637] R13: 00007f5b215b6038 R14: 00007f5b215b5fa0 R15: 00007ffd80bb97b8 [ 319.946909][ T6637] [ 319.950435][ T6637] Kernel Offset: disabled [ 319.955386][ T6637] Rebooting in 86400 seconds..