Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2026/04/02 16:05:51 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 264.106473][ T6179] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 265.518240][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.525565][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.021967][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 273.314754][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.322779][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.330680][ T6223] bridge_slave_0: entered allmulticast mode [ 273.341106][ T6223] bridge_slave_0: entered promiscuous mode [ 273.355430][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.363241][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.371230][ T6223] bridge_slave_1: entered allmulticast mode [ 273.380262][ T6223] bridge_slave_1: entered promiscuous mode [ 273.446883][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.463905][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.525427][ T6223] team0: Port device team_slave_0 added [ 273.540719][ T6223] team0: Port device team_slave_1 added [ 273.595852][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.603953][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.631770][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.647428][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.654654][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.681414][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.771694][ T6223] hsr_slave_0: entered promiscuous mode [ 273.780426][ T6223] hsr_slave_1: entered promiscuous mode [ 274.521478][ T6223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.547408][ T6223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.574451][ T6223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 274.597923][ T6223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.934565][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.990305][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.022674][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.030484][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.064173][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.071903][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.686544][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.838131][ T6223] veth0_vlan: entered promiscuous mode [ 275.887588][ T6223] veth1_vlan: entered promiscuous mode [ 276.009847][ T6223] veth0_macvtap: entered promiscuous mode [ 276.041101][ T6223] veth1_macvtap: entered promiscuous mode [ 276.114576][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.147945][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.198595][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.210335][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.229970][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.243266][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.297807][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.456878][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.544571][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.631993][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.883505][ T59] bridge_slave_1: left allmulticast mode [ 278.889372][ T59] bridge_slave_1: left promiscuous mode [ 278.905517][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.976468][ T59] bridge_slave_0: left allmulticast mode [ 278.994916][ T59] bridge_slave_0: left promiscuous mode [ 279.001731][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.588816][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.608845][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.633523][ T59] bond0 (unregistering): Released all slaves [ 279.855346][ T59] hsr_slave_0: left promiscuous mode [ 279.863989][ T59] hsr_slave_1: left promiscuous mode [ 279.871753][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.882406][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.897022][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.906577][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.934861][ T59] veth1_macvtap: left promiscuous mode [ 279.940587][ T59] veth0_macvtap: left promiscuous mode [ 279.948181][ T59] veth1_vlan: left promiscuous mode [ 279.954197][ T59] veth0_vlan: left promiscuous mode [ 280.662424][ T59] team0 (unregistering): Port device team_slave_1 removed [ 280.695191][ T59] team0 (unregistering): Port device team_slave_0 removed [ 283.777600][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.792898][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.802103][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.817254][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.828190][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.178404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.189518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.290351][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.301196][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/02 16:06:35 executed programs: 0 [ 287.214958][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.233179][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.254301][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.272459][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.285263][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.821504][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 288.258871][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.269609][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.278638][ T6446] bridge_slave_0: entered allmulticast mode [ 288.295722][ T6446] bridge_slave_0: entered promiscuous mode [ 288.311482][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.323101][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.330662][ T6446] bridge_slave_1: entered allmulticast mode [ 288.346403][ T6446] bridge_slave_1: entered promiscuous mode [ 288.447943][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.472433][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.572019][ T6446] team0: Port device team_slave_0 added [ 288.589642][ T6446] team0: Port device team_slave_1 added [ 288.672354][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.682241][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.710639][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.738672][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.746144][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.774049][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.899816][ T6446] hsr_slave_0: entered promiscuous mode [ 288.911964][ T6446] hsr_slave_1: entered promiscuous mode [ 289.342875][ T5798] Bluetooth: hci0: command tx timeout [ 289.575824][ T6446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.600300][ T6446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.622045][ T6446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.646788][ T6446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.006606][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.067738][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.102012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.110163][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.161230][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.168942][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.863430][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.046337][ T6446] veth0_vlan: entered promiscuous mode [ 291.078033][ T6446] veth1_vlan: entered promiscuous mode [ 291.205853][ T6446] veth0_macvtap: entered promiscuous mode [ 291.239738][ T6446] veth1_macvtap: entered promiscuous mode [ 291.313909][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.359634][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.399566][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.416581][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.426437][ T5798] Bluetooth: hci0: command tx timeout [ 291.445222][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.457360][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.740025][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.760576][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.814301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.822313][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/02 16:06:41 executed programs: 2 [ 292.934019][ T5798] ===================================================== [ 292.941344][ T5798] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xcfb9/0x1a7e0 [ 292.949462][ T5798] l2cap_recv_frame+0xcfb9/0x1a7e0 [ 292.957224][ T5798] l2cap_recv_acldata+0xe8a/0x1dd0 [ 292.963551][ T5798] hci_rx_work+0x688/0xfc0 [ 292.968189][ T5798] process_scheduled_works+0xb82/0x1e80 [ 292.974260][ T5798] worker_thread+0xee4/0x1590 [ 292.979321][ T5798] kthread+0x53f/0x600 [ 292.983756][ T5798] ret_from_fork+0x20f/0x910 [ 292.988596][ T5798] ret_from_fork_asm+0x1a/0x30 [ 292.993688][ T5798] [ 292.996093][ T5798] Uninit was stored to memory at: [ 293.001416][ T5798] l2cap_recv_frame+0xcfb2/0x1a7e0 [ 293.007324][ T5798] l2cap_recv_acldata+0xe8a/0x1dd0 [ 293.012734][ T5798] hci_rx_work+0x688/0xfc0 [ 293.017531][ T5798] process_scheduled_works+0xb82/0x1e80 [ 293.023647][ T5798] worker_thread+0xee4/0x1590 [ 293.028726][ T5798] kthread+0x53f/0x600 [ 293.033190][ T5798] ret_from_fork+0x20f/0x910 [ 293.038203][ T5798] ret_from_fork_asm+0x1a/0x30 [ 293.043336][ T5798] [ 293.045732][ T5798] Uninit was created at: [ 293.050396][ T5798] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 293.058298][ T5798] __alloc_skb+0x855/0x1190 [ 293.063898][ T5798] vhci_write+0x125/0x960 [ 293.068616][ T5798] vfs_write+0xbe1/0x15c0 [ 293.073280][ T5798] ksys_write+0x1d9/0x470 [ 293.077868][ T5798] __x64_sys_write+0x97/0xf0 [ 293.082945][ T5798] x64_sys_call+0x2ff0/0x3ea0 [ 293.088092][ T5798] do_syscall_64+0x134/0xf80 [ 293.093095][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.099418][ T5798] [ 293.101859][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 293.111615][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.122677][ T5798] Workqueue: hci0 hci_rx_work [ 293.127569][ T5798] ===================================================== [ 293.134823][ T5798] Disabling lock debugging due to kernel taint [ 293.143591][ T5798] Kernel panic - not syncing: kmsan.panic set ... [ 293.150436][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: kworker/u9:2 Tainted: G B syzkaller #0 PREEMPT(full) [ 293.162083][ T5798] Tainted: [B]=BAD_PAGE [ 293.166402][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.177009][ T5798] Workqueue: hci0 hci_rx_work [ 293.182239][ T5798] Call Trace: [ 293.185718][ T5798] [ 293.188824][ T5798] __dump_stack+0x26/0x30 [ 293.193526][ T5798] dump_stack_lvl+0x50/0x1c0 [ 293.198462][ T5798] ? dump_stack+0x12/0x25 [ 293.203072][ T5798] dump_stack+0x1e/0x25 [ 293.207801][ T5798] vpanic+0x7b4/0x1430 [ 293.212047][ T5798] panic+0x15d/0x160 [ 293.216303][ T5798] kmsan_report+0x31a/0x320 [ 293.220988][ T5798] ? __msan_warning+0x1b/0x30 [ 293.226207][ T5798] ? l2cap_recv_frame+0xcfb9/0x1a7e0 [ 293.231755][ T5798] ? l2cap_recv_acldata+0xe8a/0x1dd0 [ 293.237761][ T5798] ? hci_rx_work+0x688/0xfc0 [ 293.242769][ T5798] ? process_scheduled_works+0xb82/0x1e80 [ 293.249255][ T5798] ? worker_thread+0xee4/0x1590 [ 293.254455][ T5798] ? kthread+0x53f/0x600 [ 293.258967][ T5798] ? ret_from_fork+0x20f/0x910 [ 293.264156][ T5798] ? ret_from_fork_asm+0x1a/0x30 [ 293.269342][ T5798] ? ret_from_fork_asm+0x1a/0x30 [ 293.274526][ T5798] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.280547][ T5798] ? kmsan_get_metadata+0xa0/0x160 [ 293.285929][ T5798] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 293.291930][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.297335][ T5798] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.303271][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.308771][ T5798] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.315032][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.320368][ T5798] __msan_warning+0x1b/0x30 [ 293.325207][ T5798] l2cap_recv_frame+0xcfb9/0x1a7e0 [ 293.330784][ T5798] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 293.337584][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.343105][ T5798] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.349447][ T5798] ? psi_group_change+0xf8c/0x1420 [ 293.354831][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.360085][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.365346][ T5798] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 293.371947][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.377200][ T5798] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 293.383702][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.388945][ T5798] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 293.394925][ T5798] l2cap_recv_acldata+0xe8a/0x1dd0 [ 293.400407][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.405747][ T5798] hci_rx_work+0x688/0xfc0 [ 293.410622][ T5798] ? kmsan_get_metadata+0xf1/0x160 [ 293.415862][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 293.421279][ T5798] process_scheduled_works+0xb82/0x1e80 [ 293.427031][ T5798] worker_thread+0xee4/0x1590 [ 293.431887][ T5798] kthread+0x53f/0x600 [ 293.436196][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 293.441457][ T5798] ? __pfx_kthread+0x10/0x10 [ 293.446417][ T5798] ret_from_fork+0x20f/0x910 [ 293.451327][ T5798] ? __switch_to+0x51c/0x750 [ 293.456098][ T5798] ? __pfx_kthread+0x10/0x10 [ 293.461034][ T5798] ret_from_fork_asm+0x1a/0x30 [ 293.466003][ T5798] [ 293.469815][ T5798] Kernel Offset: disabled [ 293.474391][ T5798] Rebooting in 86400 seconds..