Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. 2026/01/08 13:46:12 parsed 1 programs [ 220.020080][ T5812] cgroup: Unknown subsys name 'net' [ 220.138770][ T5812] cgroup: Unknown subsys name 'cpuset' [ 220.154671][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 227.389052][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 232.829314][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.839114][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.848760][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.866757][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.878337][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.199955][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 234.825497][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.832635][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.610791][ T3818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.618987][ T3818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.715677][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.724440][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.593203][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 242.940773][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.948575][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.958698][ T5891] bridge_slave_0: entered allmulticast mode [ 242.967892][ T5891] bridge_slave_0: entered promiscuous mode [ 242.981879][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.989331][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.999396][ T5891] bridge_slave_1: entered allmulticast mode [ 243.008491][ T5891] bridge_slave_1: entered promiscuous mode [ 243.088327][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.107058][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.189337][ T5891] team0: Port device team_slave_0 added [ 243.204721][ T5891] team0: Port device team_slave_1 added [ 243.276504][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.283911][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.310223][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.325949][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.333200][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.359883][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.466806][ T5891] hsr_slave_0: entered promiscuous mode [ 243.476089][ T5891] hsr_slave_1: entered promiscuous mode [ 243.845422][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.867851][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.887079][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.909260][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.201122][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.256580][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.282983][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.290438][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.323274][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.330636][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.865255][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.005535][ T5891] veth0_vlan: entered promiscuous mode [ 245.038253][ T5891] veth1_vlan: entered promiscuous mode [ 245.139514][ T5891] veth0_macvtap: entered promiscuous mode [ 245.165285][ T5891] veth1_macvtap: entered promiscuous mode [ 245.221014][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.261171][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.301335][ T4243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.316359][ T4243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.329675][ T4243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.347255][ T4243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.029455][ T3761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.146445][ T3761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.287634][ T3761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.401148][ T3761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.736483][ T3761] bridge_slave_1: left allmulticast mode [ 248.742781][ T3761] bridge_slave_1: left promiscuous mode [ 248.749617][ T3761] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.823809][ T3761] bridge_slave_0: left allmulticast mode [ 248.829711][ T3761] bridge_slave_0: left promiscuous mode [ 248.836879][ T3761] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/08 13:46:58 executed programs: 0 [ 249.372699][ T3761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.398721][ T3761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.421357][ T3761] bond0 (unregistering): Released all slaves [ 249.553316][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.564274][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.578406][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.600467][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.614394][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.625202][ T3761] hsr_slave_0: left promiscuous mode [ 249.640906][ T3761] hsr_slave_1: left promiscuous mode [ 249.654646][ T3761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.662456][ T3761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.685085][ T3761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.693047][ T3761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.719446][ T3761] veth1_macvtap: left promiscuous mode [ 249.725632][ T3761] veth0_macvtap: left promiscuous mode [ 249.731415][ T3761] veth1_vlan: left promiscuous mode [ 249.737180][ T3761] veth0_vlan: left promiscuous mode [ 250.595167][ T3761] team0 (unregistering): Port device team_slave_1 removed [ 250.623866][ T3761] team0 (unregistering): Port device team_slave_0 removed [ 251.686670][ T51] Bluetooth: hci0: command tx timeout [ 251.900326][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 252.527233][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.537758][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.545742][ T5938] bridge_slave_0: entered allmulticast mode [ 252.557446][ T5938] bridge_slave_0: entered promiscuous mode [ 252.576979][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.586705][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.594584][ T5938] bridge_slave_1: entered allmulticast mode [ 252.604777][ T5938] bridge_slave_1: entered promiscuous mode [ 252.729845][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.759919][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.877163][ T5938] team0: Port device team_slave_0 added [ 252.896422][ T5938] team0: Port device team_slave_1 added [ 253.007311][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.014587][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.040889][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.061105][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.069010][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.098194][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.238600][ T5938] hsr_slave_0: entered promiscuous mode [ 253.248215][ T5938] hsr_slave_1: entered promiscuous mode [ 253.752861][ T51] Bluetooth: hci0: command tx timeout [ 254.017648][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.046119][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.071175][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.102025][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.538207][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.605501][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.641432][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.649302][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.706452][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.714267][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.472962][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.668439][ T5938] veth0_vlan: entered promiscuous mode [ 255.709872][ T5938] veth1_vlan: entered promiscuous mode [ 255.832396][ T51] Bluetooth: hci0: command tx timeout [ 255.853143][ T5938] veth0_macvtap: entered promiscuous mode [ 255.878532][ T5938] veth1_macvtap: entered promiscuous mode [ 255.957011][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.034523][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.105508][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.125317][ T1005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.150817][ T1005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.163027][ T4243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.914422][ T51] Bluetooth: hci0: command tx timeout [ 258.602310][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.610466][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.733050][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.741177][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/08 13:47:08 executed programs: 2 [ 258.943981][ T51] ===================================================== [ 258.951255][ T51] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc3ae/0x187c0 [ 258.962590][ T51] l2cap_recv_frame+0xc3ae/0x187c0 [ 258.968236][ T51] l2cap_recv_acldata+0xe91/0x1de0 [ 258.973806][ T51] hci_rx_work+0x688/0xfc0 [ 258.978466][ T51] process_scheduled_works+0xb91/0x1d80 [ 258.984308][ T51] worker_thread+0xedf/0x1590 [ 258.989191][ T51] kthread+0xd5c/0xf00 [ 258.993665][ T51] ret_from_fork+0x208/0x710 [ 258.998502][ T51] ret_from_fork_asm+0x1a/0x30 [ 259.003800][ T51] [ 259.006236][ T51] Uninit was stored to memory at: [ 259.011562][ T51] l2cap_recv_frame+0xc3a7/0x187c0 [ 259.017058][ T51] l2cap_recv_acldata+0xe91/0x1de0 [ 259.022546][ T51] hci_rx_work+0x688/0xfc0 [ 259.027208][ T51] process_scheduled_works+0xb91/0x1d80 [ 259.034180][ T51] worker_thread+0xedf/0x1590 [ 259.040041][ T51] kthread+0xd5c/0xf00 [ 259.044836][ T51] ret_from_fork+0x208/0x710 [ 259.049739][ T51] ret_from_fork_asm+0x1a/0x30 [ 259.054986][ T51] [ 259.057404][ T51] Uninit was created at: [ 259.062087][ T51] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 259.068334][ T51] kmalloc_reserve+0x13c/0x4b0 [ 259.073468][ T51] __alloc_skb+0x805/0x1040 [ 259.078312][ T51] vhci_write+0x125/0x960 [ 259.083027][ T51] vfs_write+0xbe2/0x15d0 [ 259.087616][ T51] __x64_sys_write+0x1fb/0x4d0 [ 259.092769][ T51] x64_sys_call+0x30ab/0x3e70 [ 259.097679][ T51] do_syscall_64+0xd3/0xf80 [ 259.102503][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.108599][ T51] [ 259.111050][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(none) [ 259.120900][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.131481][ T51] Workqueue: hci0 hci_rx_work [ 259.136537][ T51] ===================================================== [ 259.144554][ T51] Disabling lock debugging due to kernel taint [ 259.150830][ T51] Kernel panic - not syncing: kmsan.panic set ... [ 259.157492][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G B syzkaller #0 PREEMPT(none) [ 259.168759][ T51] Tainted: [B]=BAD_PAGE [ 259.173017][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.183218][ T51] Workqueue: hci0 hci_rx_work [ 259.188218][ T51] Call Trace: [ 259.191681][ T51] [ 259.194727][ T51] __dump_stack+0x26/0x30 [ 259.199280][ T51] dump_stack_lvl+0x50/0x1c0 [ 259.204060][ T51] ? dump_stack+0x12/0x25 [ 259.208611][ T51] dump_stack+0x1e/0x25 [ 259.212973][ T51] vpanic+0x435/0xd30 [ 259.217257][ T51] panic+0x15d/0x160 [ 259.221416][ T51] kmsan_report+0x31c/0x320 [ 259.226154][ T51] ? __msan_warning+0x1b/0x30 [ 259.231120][ T51] ? l2cap_recv_frame+0xc3ae/0x187c0 [ 259.236643][ T51] ? l2cap_recv_acldata+0xe91/0x1de0 [ 259.242250][ T51] ? hci_rx_work+0x688/0xfc0 [ 259.247059][ T51] ? process_scheduled_works+0xb91/0x1d80 [ 259.253021][ T51] ? worker_thread+0xedf/0x1590 [ 259.258029][ T51] ? kthread+0xd5c/0xf00 [ 259.262446][ T51] ? ret_from_fork+0x208/0x710 [ 259.267436][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 259.272612][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 259.277783][ T51] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 259.283696][ T51] ? __update_load_avg_se+0xd02/0x11c0 [ 259.289361][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.294705][ T51] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.300756][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.306090][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.311431][ T51] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.317762][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.323239][ T51] __msan_warning+0x1b/0x30 [ 259.327975][ T51] l2cap_recv_frame+0xc3ae/0x187c0 [ 259.333501][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.338860][ T51] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.345035][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.350471][ T51] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.356714][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.362065][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.367403][ T51] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 259.373964][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.379308][ T51] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 259.385955][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.391290][ T51] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.397343][ T51] l2cap_recv_acldata+0xe91/0x1de0 [ 259.402708][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.408071][ T51] hci_rx_work+0x688/0xfc0 [ 259.412715][ T51] ? kmsan_get_metadata+0xfb/0x160 [ 259.418068][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 259.423235][ T51] process_scheduled_works+0xb91/0x1d80 [ 259.429093][ T51] worker_thread+0xedf/0x1590 [ 259.433977][ T51] kthread+0xd5c/0xf00 [ 259.438218][ T51] ? __pfx_worker_thread+0x10/0x10 [ 259.443528][ T51] ? __pfx_kthread+0x10/0x10 [ 259.448297][ T51] ret_from_fork+0x208/0x710 [ 259.453110][ T51] ? __switch_to+0x53d/0x790 [ 259.457916][ T51] ? __pfx_kthread+0x10/0x10 [ 259.462715][ T51] ret_from_fork_asm+0x1a/0x30 [ 259.467753][ T51] [ 259.471412][ T51] Kernel Offset: disabled [ 259.475832][ T51] Rebooting in 86400 seconds..