Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. 2026/04/12 17:19:31 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 265.477916][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.485061][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.897020][ T6245] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 274.724905][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.747181][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.799488][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.812779][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.956247][ T6289] chnl_net:caif_netlink_parms(): no params data found [ 279.247311][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.255925][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.264064][ T6289] bridge_slave_0: entered allmulticast mode [ 279.272629][ T6289] bridge_slave_0: entered promiscuous mode [ 279.285251][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.293095][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.302109][ T6289] bridge_slave_1: entered allmulticast mode [ 279.311561][ T6289] bridge_slave_1: entered promiscuous mode [ 279.384529][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.403414][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.468235][ T6289] team0: Port device team_slave_0 added [ 279.483287][ T6289] team0: Port device team_slave_1 added [ 279.538888][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.546232][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.573161][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.587877][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.595176][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.625909][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.718083][ T6289] hsr_slave_0: entered promiscuous mode [ 279.727930][ T6289] hsr_slave_1: entered promiscuous mode [ 280.477766][ T6289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.502692][ T6289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.526132][ T6289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.551660][ T6289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.914199][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.965332][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.997604][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.005521][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.051145][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.058949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.754393][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.914160][ T6289] veth0_vlan: entered promiscuous mode [ 281.956876][ T6289] veth1_vlan: entered promiscuous mode [ 282.079714][ T6289] veth0_macvtap: entered promiscuous mode [ 282.123435][ T6289] veth1_macvtap: entered promiscuous mode [ 282.203513][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.253115][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.309897][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.334539][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.364652][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.390146][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.556027][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.651411][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.750071][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.842565][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.079293][ T35] bridge_slave_1: left allmulticast mode [ 285.085336][ T35] bridge_slave_1: left promiscuous mode [ 285.099692][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.162357][ T35] bridge_slave_0: left allmulticast mode [ 285.168486][ T35] bridge_slave_0: left promiscuous mode [ 285.195568][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.877549][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.899565][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.922260][ T35] bond0 (unregistering): Released all slaves [ 286.187856][ T35] hsr_slave_0: left promiscuous mode [ 286.211324][ T35] hsr_slave_1: left promiscuous mode [ 286.219453][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.227355][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.262400][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.276428][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.301285][ T35] veth1_macvtap: left promiscuous mode [ 286.307098][ T35] veth0_macvtap: left promiscuous mode [ 286.315061][ T35] veth1_vlan: left promiscuous mode [ 286.320990][ T35] veth0_vlan: left promiscuous mode [ 287.054997][ T35] team0 (unregistering): Port device team_slave_1 removed [ 287.093500][ T35] team0 (unregistering): Port device team_slave_0 removed [ 290.906802][ T5072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.916334][ T5072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.926880][ T5072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.940481][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.952797][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/04/12 17:20:14 executed programs: 0 [ 292.847028][ T5072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.867882][ T5072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.887688][ T5072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.908744][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.923000][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.476896][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 293.925958][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.933918][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.943403][ T6498] bridge_slave_0: entered allmulticast mode [ 293.954071][ T6498] bridge_slave_0: entered promiscuous mode [ 293.972268][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.980197][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.988062][ T6498] bridge_slave_1: entered allmulticast mode [ 293.999542][ T6498] bridge_slave_1: entered promiscuous mode [ 294.106212][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.130886][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.227432][ T6498] team0: Port device team_slave_0 added [ 294.247405][ T6498] team0: Port device team_slave_1 added [ 294.332922][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.341856][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.370161][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.387197][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.395571][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.425397][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.561626][ T6498] hsr_slave_0: entered promiscuous mode [ 294.572644][ T6498] hsr_slave_1: entered promiscuous mode [ 294.979010][ T5072] Bluetooth: hci0: command tx timeout [ 295.307547][ T6498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.332477][ T6498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.351787][ T6498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.370772][ T6498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.675083][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.715763][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.742596][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.750213][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.779764][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.787620][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.199846][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.317900][ T6498] veth0_vlan: entered promiscuous mode [ 296.343739][ T6498] veth1_vlan: entered promiscuous mode [ 296.424716][ T6498] veth0_macvtap: entered promiscuous mode [ 296.443838][ T6498] veth1_macvtap: entered promiscuous mode [ 296.493627][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.529254][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.558276][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.568407][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.582443][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.593071][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.058977][ T5072] Bluetooth: hci0: command tx timeout [ 297.787275][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.809065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.868813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.877178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/12 17:20:19 executed programs: 2 [ 298.055722][ T6561] ===================================================== [ 298.063556][ T6561] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 298.071416][ T6561] _copy_to_user+0xcc/0x120 [ 298.076190][ T6561] move_addr_to_user+0x299/0x3f0 [ 298.082009][ T6561] ____sys_recvmsg+0x232/0x620 [ 298.087148][ T6561] ___sys_recvmsg+0x20b/0x850 [ 298.092433][ T6561] do_recvmmsg+0x40e/0xdf0 [ 298.097066][ T6561] __x64_sys_recvmmsg+0x383/0x500 [ 298.102461][ T6561] x64_sys_call+0x96d/0x3ea0 [ 298.107248][ T6561] do_syscall_64+0x134/0xf80 [ 298.112259][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.118502][ T6561] [ 298.121049][ T6561] Uninit was stored to memory at: [ 298.126928][ T6561] dgram_recvmsg+0xa17/0xbe0 [ 298.131914][ T6561] sock_common_recvmsg+0xd5/0x1f0 [ 298.137408][ T6561] sock_recvmsg_nosec+0x1e2/0x270 [ 298.142958][ T6561] ____sys_recvmsg+0x4e5/0x620 [ 298.149605][ T6561] ___sys_recvmsg+0x20b/0x850 [ 298.154648][ T6561] do_recvmmsg+0x40e/0xdf0 [ 298.160098][ T6561] __x64_sys_recvmmsg+0x383/0x500 [ 298.165586][ T6561] x64_sys_call+0x96d/0x3ea0 [ 298.170557][ T6561] do_syscall_64+0x134/0xf80 [ 298.175437][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.181662][ T6561] [ 298.184328][ T6561] Uninit was stored to memory at: [ 298.189919][ T6561] __copy_skb_header+0xa3/0x7c0 [ 298.195340][ T6561] __skb_clone+0x57/0x650 [ 298.200317][ T6561] skb_clone+0x473/0x580 [ 298.204723][ T6561] ieee802154_rx+0xdcd/0x3460 [ 298.209754][ T6561] ieee802154_tasklet_handler+0x136/0x2c0 [ 298.215637][ T6561] tasklet_action_common+0x354/0xf30 [ 298.221303][ T6561] tasklet_action+0x2d/0x40 [ 298.225969][ T6561] handle_softirqs+0x171/0x7e0 [ 298.231050][ T6561] __do_softirq+0x14/0x1b [ 298.235628][ T6561] [ 298.237996][ T6561] Uninit was stored to memory at: [ 298.243670][ T6561] ieee802154_rx+0xb3b/0x3460 [ 298.250266][ T6561] ieee802154_tasklet_handler+0x136/0x2c0 [ 298.256239][ T6561] tasklet_action_common+0x354/0xf30 [ 298.262568][ T6561] tasklet_action+0x2d/0x40 [ 298.267282][ T6561] handle_softirqs+0x171/0x7e0 [ 298.272482][ T6561] __do_softirq+0x14/0x1b [ 298.276973][ T6561] [ 298.279485][ T6561] Uninit was stored to memory at: [ 298.284674][ T6561] ieee802154_hdr_pull+0xc72/0xe00 [ 298.290050][ T6561] ieee802154_rx+0xa2b/0x3460 [ 298.295004][ T6561] ieee802154_tasklet_handler+0x136/0x2c0 [ 298.301072][ T6561] tasklet_action_common+0x354/0xf30 [ 298.306651][ T6561] tasklet_action+0x2d/0x40 [ 298.311582][ T6561] handle_softirqs+0x171/0x7e0 [ 298.316713][ T6561] __do_softirq+0x14/0x1b [ 298.321370][ T6561] [ 298.323778][ T6561] Local variable hdr.i created at: [ 298.329226][ T6561] ieee802154_rx+0x95c/0x3460 [ 298.334281][ T6561] ieee802154_tasklet_handler+0x136/0x2c0 [ 298.340941][ T6561] [ 298.343521][ T6561] Bytes 8-9 of 20 are uninitialized [ 298.350344][ T6561] Memory access of size 20 starts at ffff888051bbfa38 [ 298.357364][ T6561] Data copied to user address 0000200000000800 [ 298.364688][ T6561] [ 298.367211][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 298.376842][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.387534][ T6561] ===================================================== [ 298.394780][ T6561] Disabling lock debugging due to kernel taint [ 298.401380][ T6561] Kernel panic - not syncing: kmsan.panic set ... [ 298.408018][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 298.419077][ T6561] Tainted: [B]=BAD_PAGE [ 298.423402][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.433658][ T6561] Call Trace: [ 298.437003][ T6561] [ 298.440002][ T6561] __dump_stack+0x26/0x30 [ 298.444533][ T6561] dump_stack_lvl+0x50/0x1c0 [ 298.449414][ T6561] ? dump_stack+0x12/0x25 [ 298.454042][ T6561] dump_stack+0x1e/0x25 [ 298.458552][ T6561] vpanic+0x7b4/0x1430 [ 298.462882][ T6561] panic+0x15d/0x160 [ 298.467177][ T6561] kmsan_report+0x31a/0x320 [ 298.471895][ T6561] ? ____sys_recvmsg+0x4e5/0x620 [ 298.477091][ T6561] ? kmsan_internal_check_memory+0x166/0x240 [ 298.483300][ T6561] ? kmsan_copy_to_user+0xef/0x190 [ 298.488954][ T6561] ? _copy_to_user+0xcc/0x120 [ 298.493745][ T6561] ? move_addr_to_user+0x299/0x3f0 [ 298.499050][ T6561] ? ____sys_recvmsg+0x232/0x620 [ 298.504521][ T6561] ? ___sys_recvmsg+0x20b/0x850 [ 298.509555][ T6561] ? do_recvmmsg+0x40e/0xdf0 [ 298.514247][ T6561] ? __x64_sys_recvmmsg+0x383/0x500 [ 298.519541][ T6561] ? x64_sys_call+0x96d/0x3ea0 [ 298.524587][ T6561] ? do_syscall_64+0x134/0xf80 [ 298.529539][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.536044][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.541283][ T6561] ? __skb_datagram_iter+0x11eb/0x12b0 [ 298.547239][ T6561] ? __skb_try_recv_datagram+0x5f1/0x6e0 [ 298.553092][ T6561] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 298.559040][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.564248][ T6561] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 298.570802][ T6561] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 298.577747][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.583051][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.588394][ T6561] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 298.594478][ T6561] kmsan_internal_check_memory+0x166/0x240 [ 298.600441][ T6561] kmsan_copy_to_user+0xef/0x190 [ 298.605762][ T6561] _copy_to_user+0xcc/0x120 [ 298.610473][ T6561] move_addr_to_user+0x299/0x3f0 [ 298.615587][ T6561] ____sys_recvmsg+0x232/0x620 [ 298.620670][ T6561] ___sys_recvmsg+0x20b/0x850 [ 298.625566][ T6561] ? kmsan_internal_check_memory+0x9f/0x240 [ 298.631581][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.636872][ T6561] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 298.643092][ T6561] do_recvmmsg+0x40e/0xdf0 [ 298.648073][ T6561] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 298.654157][ T6561] ? stack_depot_save_flags+0x610/0x790 [ 298.659997][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.665218][ T6561] __x64_sys_recvmmsg+0x383/0x500 [ 298.670391][ T6561] ? kmsan_get_metadata+0xf1/0x160 [ 298.675700][ T6561] x64_sys_call+0x96d/0x3ea0 [ 298.680506][ T6561] do_syscall_64+0x134/0xf80 [ 298.685327][ T6561] ? clear_bhb_loop+0x50/0xa0 [ 298.690285][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.696402][ T6561] RIP: 0033:0x7f4dbdd9aef9 [ 298.701102][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.721341][ T6561] RSP: 002b:00007f4dbec8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 298.729868][ T6561] RAX: ffffffffffffffda RBX: 00007f4dbe005fa0 RCX: 00007f4dbdd9aef9 [ 298.737918][ T6561] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: 0000000000000004 [ 298.746128][ T6561] RBP: 00007f4dbde2fee0 R08: 0000000000000000 R09: 0000000000000000 [ 298.754428][ T6561] R10: 0000000060012023 R11: 0000000000000246 R12: 0000000000000000 [ 298.762477][ T6561] R13: 00007f4dbe006038 R14: 00007f4dbe005fa0 R15: 00007ffc8df45538 [ 298.770960][ T6561] [ 298.774525][ T6561] Kernel Offset: disabled [ 298.778995][ T6561] Rebooting in 86400 seconds..