Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. 2026/01/07 14:49:23 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 274.518054][ T6147] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 279.993114][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 280.314395][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.325173][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.335537][ T6163] bridge_slave_0: entered allmulticast mode [ 280.345387][ T6163] bridge_slave_0: entered promiscuous mode [ 280.358960][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.367420][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.375871][ T6163] bridge_slave_1: entered allmulticast mode [ 280.386609][ T6163] bridge_slave_1: entered promiscuous mode [ 280.461751][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.486645][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.563262][ T6163] team0: Port device team_slave_0 added [ 280.580804][ T6163] team0: Port device team_slave_1 added [ 280.645740][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.656090][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.685418][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.701911][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.709769][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.741335][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.838065][ T6163] hsr_slave_0: entered promiscuous mode [ 280.849021][ T6163] hsr_slave_1: entered promiscuous mode [ 281.560212][ T6163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.580188][ T6163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.601519][ T6163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.626020][ T6163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.995746][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.065974][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.096864][ T1869] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.105556][ T1869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.139494][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.148744][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.872566][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.045264][ T6163] veth0_vlan: entered promiscuous mode [ 283.081846][ T6163] veth1_vlan: entered promiscuous mode [ 283.192028][ T6163] veth0_macvtap: entered promiscuous mode [ 283.215788][ T6163] veth1_macvtap: entered promiscuous mode [ 283.281768][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.327724][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.367619][ T4344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.405311][ T4344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.429661][ T4344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.452321][ T4344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.532253][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.612722][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.731668][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.884522][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.004726][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.012980][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.268647][ T59] bridge_slave_1: left allmulticast mode [ 286.274697][ T59] bridge_slave_1: left promiscuous mode [ 286.283462][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.388777][ T59] bridge_slave_0: left allmulticast mode [ 286.395018][ T59] bridge_slave_0: left promiscuous mode [ 286.401987][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.821013][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.843110][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.868779][ T59] bond0 (unregistering): Released all slaves [ 287.130343][ T59] hsr_slave_0: left promiscuous mode [ 287.158946][ T59] hsr_slave_1: left promiscuous mode [ 287.169431][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.177763][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.203130][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.213954][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.302449][ T59] veth1_macvtap: left promiscuous mode [ 287.310460][ T59] veth0_macvtap: left promiscuous mode [ 287.317508][ T59] veth1_vlan: left promiscuous mode [ 287.324662][ T59] veth0_vlan: left promiscuous mode [ 287.982752][ T59] team0 (unregistering): Port device team_slave_1 removed [ 288.072966][ T59] team0 (unregistering): Port device team_slave_0 removed [ 295.020977][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.031065][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.095957][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.107342][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.310438][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.327253][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.359755][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.377207][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.393965][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/01/07 14:50:10 executed programs: 0 [ 299.997069][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.007497][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.020280][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.051107][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.063718][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.575758][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 301.041561][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.052098][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.062808][ T6437] bridge_slave_0: entered allmulticast mode [ 301.074340][ T6437] bridge_slave_0: entered promiscuous mode [ 301.091843][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.100091][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.108457][ T6437] bridge_slave_1: entered allmulticast mode [ 301.119191][ T6437] bridge_slave_1: entered promiscuous mode [ 301.225284][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.250853][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.370852][ T6437] team0: Port device team_slave_0 added [ 301.398949][ T6437] team0: Port device team_slave_1 added [ 301.520452][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.529834][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.560318][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.594455][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.601841][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.631628][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.785793][ T6437] hsr_slave_0: entered promiscuous mode [ 301.798436][ T6437] hsr_slave_1: entered promiscuous mode [ 302.145513][ T5875] Bluetooth: hci0: command tx timeout [ 302.560522][ T6437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.587709][ T6437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.610237][ T6437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.636500][ T6437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.014162][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.073962][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.108971][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.117301][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.155758][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.165515][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.858663][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.031500][ T6437] veth0_vlan: entered promiscuous mode [ 304.074183][ T6437] veth1_vlan: entered promiscuous mode [ 304.203198][ T6437] veth0_macvtap: entered promiscuous mode [ 304.220919][ T5875] Bluetooth: hci0: command tx timeout [ 304.239400][ T6437] veth1_macvtap: entered promiscuous mode [ 304.312200][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.355891][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.409369][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.441141][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.468262][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.489910][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.298556][ T5875] Bluetooth: hci0: command tx timeout [ 306.357545][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.368177][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.426551][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.436276][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/07 14:50:16 executed programs: 2 [ 307.058959][ T6525] loop0: detected capacity change from 0 to 32768 [ 307.085317][ T6525] (syz.0.17,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.110125][ T6525] (syz.0.17,6525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.163250][ T6525] JBD2: Ignoring recovery information on journal [ 307.223320][ T6525] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 307.248391][ T3614] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 307.256560][ T3614] ===================================================== [ 307.264695][ T3614] BUG: KMSAN: uninit-value in _find_next_bit+0x129/0x140 [ 307.272830][ T3614] _find_next_bit+0x129/0x140 [ 307.278220][ T3614] ocfs2_finish_quota_recovery+0xa93/0x3ea0 [ 307.285115][ T3614] ocfs2_complete_recovery+0x29c1/0x3ad0 [ 307.291438][ T3614] process_scheduled_works+0xb91/0x1d80 [ 307.297470][ T3614] worker_thread+0xedf/0x1590 [ 307.302939][ T3614] kthread+0xd5c/0xf00 [ 307.307578][ T3614] ret_from_fork+0x208/0x710 [ 307.313173][ T3614] ret_from_fork_asm+0x1a/0x30 [ 307.318673][ T3614] [ 307.321483][ T3614] Uninit was stored to memory at: [ 307.327154][ T3614] _find_next_bit+0x122/0x140 [ 307.332375][ T3614] ocfs2_finish_quota_recovery+0xa93/0x3ea0 [ 307.339408][ T3614] ocfs2_complete_recovery+0x29c1/0x3ad0 [ 307.345743][ T3614] process_scheduled_works+0xb91/0x1d80 [ 307.351867][ T3614] worker_thread+0xedf/0x1590 [ 307.357120][ T3614] kthread+0xd5c/0xf00 [ 307.361460][ T3614] ret_from_fork+0x208/0x710 [ 307.366596][ T3614] ret_from_fork_asm+0x1a/0x30 [ 307.372183][ T3614] [ 307.374827][ T3614] Uninit was created at: [ 307.379933][ T3614] __kmalloc_noprof+0xaf2/0x1c20 [ 307.385247][ T3614] ocfs2_recovery_load_quota+0x44a/0x1290 [ 307.392441][ T3614] ocfs2_local_read_info+0x147f/0x2e30 [ 307.399779][ T3614] dquot_load_quota_sb+0x9ef/0xd60 [ 307.406380][ T3614] dquot_load_quota_inode+0x4c5/0x7a0 [ 307.412980][ T3614] ocfs2_enable_quotas+0x1d3/0x730 [ 307.420104][ T3614] ocfs2_fill_super+0xab6d/0xb270 [ 307.425939][ T3614] get_tree_bdev_flags+0x6e6/0x920 [ 307.432037][ T3614] get_tree_bdev+0x38/0x50 [ 307.437065][ T3614] ocfs2_get_tree+0x35/0x40 [ 307.441827][ T3614] vfs_get_tree+0xb3/0x5c0 [ 307.446922][ T3614] do_new_mount+0x879/0x1700 [ 307.451893][ T3614] path_mount+0x749/0x1fb0 [ 307.456475][ T3614] __se_sys_mount+0x6f7/0x7e0 [ 307.461629][ T3614] __x64_sys_mount+0xe4/0x150 [ 307.467447][ T3614] x64_sys_call+0x38cb/0x3e70 [ 307.472520][ T3614] do_syscall_64+0xd3/0xf80 [ 307.478210][ T3614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.484491][ T3614] [ 307.486872][ T3614] CPU: 1 UID: 0 PID: 3614 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(none) [ 307.497112][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.508185][ T3614] Workqueue: ocfs2_wq ocfs2_complete_recovery [ 307.514901][ T3614] ===================================================== [ 307.522496][ T3614] Disabling lock debugging due to kernel taint [ 307.529856][ T3614] Kernel panic - not syncing: kmsan.panic set ... [ 307.537159][ T3614] CPU: 1 UID: 0 PID: 3614 Comm: kworker/u8:18 Tainted: G B syzkaller #0 PREEMPT(none) [ 307.550894][ T3614] Tainted: [B]=BAD_PAGE [ 307.555555][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.568277][ T3614] Workqueue: ocfs2_wq ocfs2_complete_recovery [ 307.575210][ T3614] Call Trace: [ 307.579340][ T3614] [ 307.583488][ T3614] __dump_stack+0x26/0x30 [ 307.588987][ T3614] dump_stack_lvl+0x50/0x1c0 [ 307.594481][ T3614] ? dump_stack+0x12/0x25 [ 307.599133][ T3614] dump_stack+0x1e/0x25 [ 307.604126][ T3614] vpanic+0x435/0xd30 [ 307.608431][ T3614] panic+0x15d/0x160 [ 307.612820][ T3614] kmsan_report+0x31c/0x320 [ 307.618079][ T3614] ? __msan_warning+0x1b/0x30 [ 307.623204][ T3614] ? _find_next_bit+0x129/0x140 [ 307.628696][ T3614] ? ocfs2_finish_quota_recovery+0xa93/0x3ea0 [ 307.635671][ T3614] ? ocfs2_complete_recovery+0x29c1/0x3ad0 [ 307.641962][ T3614] ? process_scheduled_works+0xb91/0x1d80 [ 307.649724][ T3614] ? worker_thread+0xedf/0x1590 [ 307.654922][ T3614] ? kthread+0xd5c/0xf00 [ 307.659509][ T3614] ? ret_from_fork+0x208/0x710 [ 307.664645][ T3614] ? ret_from_fork_asm+0x1a/0x30 [ 307.669934][ T3614] ? ret_from_fork_asm+0x1a/0x30 [ 307.675185][ T3614] ? ocfs2_read_virt_blocks+0xbdf/0xdf0 [ 307.681398][ T3614] ? __pfx_ocfs2_validate_quota_block+0x10/0x10 [ 307.687991][ T3614] ? kmsan_get_metadata+0xfb/0x160 [ 307.693467][ T3614] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.700430][ T3614] ? kmsan_get_metadata+0xfb/0x160 [ 307.706735][ T3614] __msan_warning+0x1b/0x30 [ 307.712128][ T3614] _find_next_bit+0x129/0x140 [ 307.718177][ T3614] ocfs2_finish_quota_recovery+0xa93/0x3ea0 [ 307.725244][ T3614] ? kmsan_get_metadata+0xfb/0x160 [ 307.732900][ T3614] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 307.740596][ T3614] ocfs2_complete_recovery+0x29c1/0x3ad0 [ 307.747145][ T3614] ? __pfx_ocfs2_orphan_filldir+0x10/0x10 [ 307.755392][ T3614] ? kmsan_get_metadata+0xfb/0x160 [ 307.761977][ T3614] ? __pfx_ocfs2_complete_recovery+0x10/0x10 [ 307.771055][ T3614] process_scheduled_works+0xb91/0x1d80 [ 307.778879][ T3614] worker_thread+0xedf/0x1590 [ 307.784577][ T3614] kthread+0xd5c/0xf00 [ 307.790333][ T3614] ? __pfx_worker_thread+0x10/0x10 [ 307.796729][ T3614] ? __pfx_kthread+0x10/0x10 [ 307.802478][ T3614] ret_from_fork+0x208/0x710 [ 307.809921][ T3614] ? __switch_to+0x53d/0x790 [ 307.816982][ T3614] ? __pfx_kthread+0x10/0x10 [ 307.822478][ T3614] ret_from_fork_asm+0x1a/0x30 [ 307.828054][ T3614] [ 307.833514][ T3614] Kernel Offset: disabled [ 307.838920][ T3614] Rebooting in 86400 seconds..