Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. 2025/11/28 03:30:23 parsed 1 programs [ 285.998339][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.005222][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.126164][ T6300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 300.565240][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.574604][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.636715][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.644991][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.385655][ T6358] chnl_net:caif_netlink_parms(): no params data found [ 301.721473][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.730732][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.738661][ T6358] bridge_slave_0: entered allmulticast mode [ 301.747380][ T6358] bridge_slave_0: entered promiscuous mode [ 301.760239][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.767655][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.775615][ T6358] bridge_slave_1: entered allmulticast mode [ 301.783891][ T6358] bridge_slave_1: entered promiscuous mode [ 301.849879][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.872150][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.940253][ T6358] team0: Port device team_slave_0 added [ 301.954696][ T6358] team0: Port device team_slave_1 added [ 302.018230][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.025620][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.053035][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.067588][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.074788][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.101399][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.195773][ T6358] hsr_slave_0: entered promiscuous mode [ 302.205971][ T6358] hsr_slave_1: entered promiscuous mode [ 302.909851][ T6358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.934872][ T6358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.959971][ T6358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.984970][ T6358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.346048][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.403004][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.444930][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.452809][ T4023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.507053][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.514655][ T4023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.156008][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.323162][ T6358] veth0_vlan: entered promiscuous mode [ 304.366049][ T6358] veth1_vlan: entered promiscuous mode [ 304.487446][ T6358] veth0_macvtap: entered promiscuous mode [ 304.512945][ T6358] veth1_macvtap: entered promiscuous mode [ 304.583302][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.620221][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.652448][ T3450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.683179][ T3450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.722240][ T3450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.736425][ T3450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.206537][ T3541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.476646][ T3541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.603878][ T3541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.748797][ T3541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.817316][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.827915][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.838880][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.859025][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.871047][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.208830][ T3541] bridge_slave_1: left allmulticast mode [ 308.214703][ T3541] bridge_slave_1: left promiscuous mode [ 308.224154][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.251539][ T3541] bridge_slave_0: left allmulticast mode [ 308.257390][ T3541] bridge_slave_0: left promiscuous mode [ 308.264440][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.795822][ T3541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.840096][ T3541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.864996][ T3541] bond0 (unregistering): Released all slaves [ 309.123771][ T3541] hsr_slave_0: left promiscuous mode [ 309.157625][ T3541] hsr_slave_1: left promiscuous mode [ 309.165920][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.174253][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.215011][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.223148][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.258982][ T3541] veth1_macvtap: left promiscuous mode [ 309.264733][ T3541] veth0_macvtap: left promiscuous mode [ 309.272117][ T3541] veth1_vlan: left promiscuous mode [ 309.277677][ T3541] veth0_vlan: left promiscuous mode [ 310.023719][ T3541] team0 (unregistering): Port device team_slave_1 removed [ 310.090928][ T3541] team0 (unregistering): Port device team_slave_0 removed 2025/11/28 03:31:04 executed programs: 0 [ 311.339769][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.349701][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.359675][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.374229][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.386031][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.134870][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 312.597553][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.610368][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.618375][ T6494] bridge_slave_0: entered allmulticast mode [ 312.627895][ T6494] bridge_slave_0: entered promiscuous mode [ 312.645123][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.652793][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.662992][ T6494] bridge_slave_1: entered allmulticast mode [ 312.672519][ T6494] bridge_slave_1: entered promiscuous mode [ 312.772718][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.793471][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.893464][ T6494] team0: Port device team_slave_0 added [ 312.913464][ T6494] team0: Port device team_slave_1 added [ 313.014086][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.022534][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.049690][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.068684][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.076329][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.103068][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.241807][ T6494] hsr_slave_0: entered promiscuous mode [ 313.252234][ T6494] hsr_slave_1: entered promiscuous mode [ 313.498260][ T52] Bluetooth: hci0: command tx timeout [ 313.972175][ T6494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.006048][ T6494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.034352][ T6494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.058938][ T6494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.450394][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.507326][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.538077][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.545676][ T4023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.579715][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.587922][ T4023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.242457][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.423835][ T6494] veth0_vlan: entered promiscuous mode [ 315.469597][ T6494] veth1_vlan: entered promiscuous mode [ 315.578343][ T52] Bluetooth: hci0: command tx timeout [ 315.595618][ T6494] veth0_macvtap: entered promiscuous mode [ 315.629547][ T6494] veth1_macvtap: entered promiscuous mode [ 315.715504][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.761065][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.813415][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.838469][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.859405][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.888722][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.658599][ T52] Bluetooth: hci0: command tx timeout [ 317.909547][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.917584][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.988282][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.996313][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/28 03:31:11 executed programs: 2 [ 318.172229][ T52] ===================================================== [ 318.179626][ T52] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc3a7/0x187c0 [ 318.187396][ T52] l2cap_recv_frame+0xc3a7/0x187c0 [ 318.193007][ T52] l2cap_recv_acldata+0xe91/0x1de0 [ 318.198477][ T52] hci_rx_work+0x688/0xfc0 [ 318.203145][ T52] process_scheduled_works+0xb91/0x1d80 [ 318.209011][ T52] worker_thread+0xedf/0x1590 [ 318.213901][ T52] kthread+0xd5c/0xf00 [ 318.218324][ T52] ret_from_fork+0x1f5/0x4c0 [ 318.223100][ T52] ret_from_fork_asm+0x1a/0x30 [ 318.228357][ T52] [ 318.230754][ T52] Uninit was stored to memory at: [ 318.236017][ T52] l2cap_recv_frame+0xc3a0/0x187c0 [ 318.241692][ T52] l2cap_recv_acldata+0xe91/0x1de0 [ 318.247336][ T52] hci_rx_work+0x688/0xfc0 [ 318.252048][ T52] process_scheduled_works+0xb91/0x1d80 [ 318.257793][ T52] worker_thread+0xedf/0x1590 [ 318.262886][ T52] kthread+0xd5c/0xf00 [ 318.267154][ T52] ret_from_fork+0x1f5/0x4c0 [ 318.272162][ T52] ret_from_fork_asm+0x1a/0x30 [ 318.277219][ T52] [ 318.279882][ T52] Uninit was created at: [ 318.284378][ T52] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 318.290801][ T52] kmalloc_reserve+0x13c/0x4b0 [ 318.295762][ T52] __alloc_skb+0x347/0x7d0 [ 318.300600][ T52] vhci_write+0x125/0x960 [ 318.305127][ T52] vfs_write+0xbe2/0x15d0 [ 318.309816][ T52] __x64_sys_write+0x1fb/0x4d0 [ 318.314740][ T52] x64_sys_call+0x3014/0x3e30 [ 318.319923][ T52] do_syscall_64+0xd9/0xfa0 [ 318.324749][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.331168][ T52] [ 318.333644][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(none) [ 318.343315][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.353843][ T52] Workqueue: hci0 hci_rx_work [ 318.358870][ T52] ===================================================== [ 318.365909][ T52] Disabling lock debugging due to kernel taint [ 318.372542][ T52] Kernel panic - not syncing: kmsan.panic set ... [ 318.379105][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G B syzkaller #0 PREEMPT(none) [ 318.390143][ T52] Tainted: [B]=BAD_PAGE [ 318.394473][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.404760][ T52] Workqueue: hci0 hci_rx_work [ 318.409811][ T52] Call Trace: [ 318.413266][ T52] [ 318.416318][ T52] __dump_stack+0x26/0x30 [ 318.420810][ T52] dump_stack_lvl+0x53/0x270 [ 318.425856][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.431856][ T52] dump_stack+0x1e/0x25 [ 318.436286][ T52] vpanic+0x435/0xd30 [ 318.440621][ T52] panic+0x15d/0x160 [ 318.444814][ T52] kmsan_report+0x31c/0x320 [ 318.449468][ T52] ? __msan_warning+0x1b/0x30 [ 318.454516][ T52] ? l2cap_recv_frame+0xc3a7/0x187c0 [ 318.460249][ T52] ? l2cap_recv_acldata+0xe91/0x1de0 [ 318.466037][ T52] ? hci_rx_work+0x688/0xfc0 [ 318.470778][ T52] ? process_scheduled_works+0xb91/0x1d80 [ 318.476755][ T52] ? worker_thread+0xedf/0x1590 [ 318.481776][ T52] ? kthread+0xd5c/0xf00 [ 318.486154][ T52] ? ret_from_fork+0x1f5/0x4c0 [ 318.491174][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 318.496292][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 318.501403][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.506687][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.512026][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.517295][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.523268][ T52] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 318.529275][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.534538][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.540507][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.545857][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.551820][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.557175][ T52] __msan_warning+0x1b/0x30 [ 318.561813][ T52] l2cap_recv_frame+0xc3a7/0x187c0 [ 318.567113][ T52] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 318.573678][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.578959][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.585035][ T52] ? __pfx__raw_spin_lock+0x1/0x10 [ 318.590300][ T52] ? filter_irq_stacks+0x49/0x190 [ 318.595518][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.601740][ T52] ? stack_depot_save_flags+0x35/0x7b0 [ 318.607355][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.612795][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.618055][ T52] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 318.624680][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.629948][ T52] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.636014][ T52] l2cap_recv_acldata+0xe91/0x1de0 [ 318.641301][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.646671][ T52] hci_rx_work+0x688/0xfc0 [ 318.651237][ T52] ? kmsan_get_metadata+0xfb/0x160 [ 318.656501][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 318.661938][ T52] process_scheduled_works+0xb91/0x1d80 [ 318.667950][ T52] worker_thread+0xedf/0x1590 [ 318.673046][ T52] kthread+0xd5c/0xf00 [ 318.677346][ T52] ? __pfx_worker_thread+0x10/0x10 [ 318.682877][ T52] ? __pfx_kthread+0x10/0x10 [ 318.687806][ T52] ret_from_fork+0x1f5/0x4c0 [ 318.692853][ T52] ? __pfx_kthread+0x10/0x10 [ 318.697695][ T52] ret_from_fork_asm+0x1a/0x30 [ 318.702724][ T52] [ 318.706394][ T52] Kernel Offset: disabled [ 318.710770][ T52] Rebooting in 86400 seconds..