Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. 2026/04/13 01:44:53 ignoring optional flag "type"="gce" 2026/04/13 01:44:53 parsed 1 programs [ 203.971943][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.979014][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.978438][ T6285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 214.698022][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.716010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.757742][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.765876][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.238546][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 217.518952][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.529458][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.538068][ T6359] bridge_slave_0: entered allmulticast mode [ 217.546302][ T6359] bridge_slave_0: entered promiscuous mode [ 217.558669][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.566218][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.575822][ T6359] bridge_slave_1: entered allmulticast mode [ 217.584220][ T6359] bridge_slave_1: entered promiscuous mode [ 217.646198][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.664093][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.725386][ T6359] team0: Port device team_slave_0 added [ 217.739227][ T6359] team0: Port device team_slave_1 added [ 217.793381][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.800428][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.828220][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.842483][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.849593][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.875718][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.958050][ T6359] hsr_slave_0: entered promiscuous mode [ 217.967383][ T6359] hsr_slave_1: entered promiscuous mode [ 218.656938][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.688637][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.710179][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.736553][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.310218][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.380756][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.433633][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.441089][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.499910][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.507434][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.205525][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.380892][ T6359] veth0_vlan: entered promiscuous mode [ 220.414536][ T6359] veth1_vlan: entered promiscuous mode [ 220.525985][ T6359] veth0_macvtap: entered promiscuous mode [ 220.547580][ T6359] veth1_macvtap: entered promiscuous mode [ 220.611915][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.655336][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.687365][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.698642][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.734241][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.765759][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.823789][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.927968][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.031419][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.185153][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.675198][ T13] bridge_slave_1: left allmulticast mode [ 223.681045][ T13] bridge_slave_1: left promiscuous mode [ 223.708631][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.775572][ T13] bridge_slave_0: left allmulticast mode [ 223.781395][ T13] bridge_slave_0: left promiscuous mode [ 223.809026][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.109197][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.133888][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.150222][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.163045][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.173878][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.300147][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.318265][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.332379][ T13] bond0 (unregistering): Released all slaves [ 224.554901][ T13] hsr_slave_0: left promiscuous mode [ 224.573067][ T13] hsr_slave_1: left promiscuous mode [ 224.594538][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.602422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.625598][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.642990][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.687890][ T13] veth1_macvtap: left promiscuous mode [ 224.694003][ T13] veth0_macvtap: left promiscuous mode [ 224.699844][ T13] veth1_vlan: left promiscuous mode [ 224.723185][ T13] veth0_vlan: left promiscuous mode [ 225.460609][ T13] team0 (unregistering): Port device team_slave_1 removed [ 225.547894][ T13] team0 (unregistering): Port device team_slave_0 removed 2026/04/13 01:45:15 executed programs: 0 [ 226.448773][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.457939][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.474772][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.493907][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.511282][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.246620][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 227.646626][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.654640][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.662159][ T6498] bridge_slave_0: entered allmulticast mode [ 227.674208][ T6498] bridge_slave_0: entered promiscuous mode [ 227.691440][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.699349][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.708518][ T6498] bridge_slave_1: entered allmulticast mode [ 227.718586][ T6498] bridge_slave_1: entered promiscuous mode [ 227.810848][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.831961][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.920883][ T6498] team0: Port device team_slave_0 added [ 227.939467][ T6498] team0: Port device team_slave_1 added [ 228.019098][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.026347][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.054338][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.073980][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.081095][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.109686][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.241794][ T6498] hsr_slave_0: entered promiscuous mode [ 228.251715][ T6498] hsr_slave_1: entered promiscuous mode [ 228.593745][ T49] Bluetooth: hci0: command tx timeout [ 228.972757][ T6498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.008503][ T6498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.030229][ T6498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.057898][ T6498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.394701][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.456422][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.485158][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.492609][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.533610][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.540907][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.143167][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.329308][ T6498] veth0_vlan: entered promiscuous mode [ 230.370224][ T6498] veth1_vlan: entered promiscuous mode [ 230.486195][ T6498] veth0_macvtap: entered promiscuous mode [ 230.509099][ T6498] veth1_macvtap: entered promiscuous mode [ 230.576758][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.630306][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.673224][ T49] Bluetooth: hci0: command tx timeout [ 230.688784][ T1073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.717109][ T1073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.744511][ T1073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.764616][ T1073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.604757][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.619661][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.698798][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.708936][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.753025][ T49] Bluetooth: hci0: command tx timeout [ 233.427583][ T6610] loop0: detected capacity change from 0 to 32768 [ 233.439520][ T6610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor (6610) [ 233.466116][ T6610] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.476710][ T6610] BTRFS info (device loop0): using sha256 checksum algorithm [ 233.560235][ T6610] BTRFS info (device loop0): enabling ssd optimizations [ 233.567623][ T6610] BTRFS info (device loop0): turning on async discard [ 233.574742][ T6610] BTRFS info (device loop0): enabling free space tree [ 233.596875][ T29] audit: type=1804 audit(1776044723.511:2): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/root/syzkaller-testdir1253405044/syzkaller.ILsyYE/0/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 233.627789][ T6610] ===================================================== [ 233.635272][ T6610] BUG: KMSAN: uninit-value in iov_iter_alignment_iovec+0x19e/0x470 [ 233.643959][ T6610] iov_iter_alignment_iovec+0x19e/0x470 [ 233.649762][ T6610] iov_iter_alignment+0x174/0x2d0 [ 233.655084][ T6610] btrfs_direct_read+0x23e/0xa50 [ 233.660186][ T6610] btrfs_file_read_iter+0x208/0x430 [ 233.665767][ T6610] aio_read+0x493/0x6c0 [ 233.670064][ T6610] io_submit_one+0x259d/0x32e0 [ 233.675105][ T6610] __se_sys_io_submit+0x26f/0x690 [ 233.680330][ T6610] __x64_sys_io_submit+0x97/0xe0 [ 233.685655][ T6610] x64_sys_call+0x1ec2/0x3ea0 [ 233.691638][ T6610] do_syscall_64+0x134/0xf80 [ 233.696598][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.702679][ T6610] [ 233.705186][ T6610] Local variable inline_vecs created at: [ 233.710891][ T6610] aio_read+0x4f/0x6c0 [ 233.715225][ T6610] io_submit_one+0x259d/0x32e0 [ 233.720122][ T6610] [ 233.722551][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 233.732272][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.742592][ T6610] ===================================================== [ 233.749789][ T6610] Disabling lock debugging due to kernel taint [ 233.756214][ T6610] Kernel panic - not syncing: kmsan.panic set ... [ 233.762761][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(full) [ 233.773954][ T6610] Tainted: [B]=BAD_PAGE [ 233.778196][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.788393][ T6610] Call Trace: [ 233.791793][ T6610] [ 233.794808][ T6610] __dump_stack+0x26/0x30 [ 233.799316][ T6610] dump_stack_lvl+0x50/0x1c0 [ 233.804068][ T6610] ? dump_stack+0x12/0x25 [ 233.808562][ T6610] dump_stack+0x1e/0x25 [ 233.812887][ T6610] vpanic+0x7b4/0x1430 [ 233.817144][ T6610] panic+0x15d/0x160 [ 233.821253][ T6610] kmsan_report+0x31a/0x320 [ 233.825909][ T6610] ? __msan_warning+0x1b/0x30 [ 233.830771][ T6610] ? iov_iter_alignment_iovec+0x19e/0x470 [ 233.836683][ T6610] ? iov_iter_alignment+0x174/0x2d0 [ 233.842074][ T6610] ? btrfs_direct_read+0x23e/0xa50 [ 233.847353][ T6610] ? btrfs_file_read_iter+0x208/0x430 [ 233.852897][ T6610] ? aio_read+0x493/0x6c0 [ 233.857371][ T6610] ? io_submit_one+0x259d/0x32e0 [ 233.862459][ T6610] ? __se_sys_io_submit+0x26f/0x690 [ 233.867857][ T6610] ? __x64_sys_io_submit+0x97/0xe0 [ 233.873165][ T6610] ? x64_sys_call+0x1ec2/0x3ea0 [ 233.878193][ T6610] ? do_syscall_64+0x134/0xf80 [ 233.883159][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.889392][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.895372][ T6610] ? __rcu_read_unlock+0x6c/0xd0 [ 233.900503][ T6610] ? is_module_text_address+0x1f4/0x240 [ 233.906268][ T6610] ? kernel_text_address+0x10e/0x1a0 [ 233.911753][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 233.917010][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 233.922274][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.928238][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 233.933506][ T6610] __msan_warning+0x1b/0x30 [ 233.938190][ T6610] iov_iter_alignment_iovec+0x19e/0x470 [ 233.943958][ T6610] iov_iter_alignment+0x174/0x2d0 [ 233.949172][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.955149][ T6610] btrfs_direct_read+0x23e/0xa50 [ 233.960249][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.966220][ T6610] ? common_file_perm+0x1b7/0x370 [ 233.971409][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 233.976671][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.982667][ T6610] btrfs_file_read_iter+0x208/0x430 [ 233.988037][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 233.993301][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.999276][ T6610] aio_read+0x493/0x6c0 [ 234.003611][ T6610] ? __pfx_btrfs_file_read_iter+0x10/0x10 [ 234.009555][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 234.014831][ T6610] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 234.021356][ T6610] ? kmsan_get_metadata+0xf1/0x160 [ 234.026626][ T6610] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.032707][ T6610] io_submit_one+0x259d/0x32e0 [ 234.037649][ T6610] ? stack_depot_save_flags+0x610/0x790 [ 234.043466][ T6610] __se_sys_io_submit+0x26f/0x690 [ 234.048730][ T6610] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 234.055111][ T6610] __x64_sys_io_submit+0x97/0xe0 [ 234.060260][ T6610] x64_sys_call+0x1ec2/0x3ea0 [ 234.065125][ T6610] do_syscall_64+0x134/0xf80 [ 234.069898][ T6610] ? clear_bhb_loop+0x50/0xa0 [ 234.074746][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.080815][ T6610] RIP: 0033:0x7ff90566ae39 [ 234.085367][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 234.105138][ T6610] RSP: 002b:00007ff9064c0078 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 234.113705][ T6610] RAX: ffffffffffffffda RBX: 00007ff9057c3f80 RCX: 00007ff90566ae39 [ 234.121813][ T6610] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007ff90649f000 [ 234.129911][ T6610] RBP: 00007ff9056e45ae R08: 0000000000000000 R09: 0000000000000000 [ 234.138089][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.146190][ T6610] R13: 000000000000000b R14: 00007ff9057c3f80 R15: 00007ffe9f413628 [ 234.154328][ T6610] [ 234.157897][ T6610] Kernel Offset: disabled [ 234.162272][ T6610] Rebooting in 86400 seconds..