Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/01/19 09:34:42 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 286.132702][ T6218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 291.060508][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.067194][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.173896][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.182010][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.237421][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.246389][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.851024][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.915913][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.925048][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.982559][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.993750][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.964911][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 296.264316][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.271807][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.281666][ T6267] bridge_slave_0: entered allmulticast mode [ 296.291723][ T6267] bridge_slave_0: entered promiscuous mode [ 296.304180][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.313265][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.320913][ T6267] bridge_slave_1: entered allmulticast mode [ 296.328999][ T6267] bridge_slave_1: entered promiscuous mode [ 296.396030][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.414718][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.484177][ T6267] team0: Port device team_slave_0 added [ 296.497217][ T6267] team0: Port device team_slave_1 added [ 296.559020][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.566291][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.593905][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.609651][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.616748][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.644253][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.735447][ T6267] hsr_slave_0: entered promiscuous mode [ 296.743866][ T6267] hsr_slave_1: entered promiscuous mode [ 297.426749][ T6267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.451187][ T6267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.472788][ T6267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.501327][ T6267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.852709][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.907235][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.938266][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.945850][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.992613][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.000217][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.656108][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.839481][ T6267] veth0_vlan: entered promiscuous mode [ 298.872720][ T6267] veth1_vlan: entered promiscuous mode [ 298.992109][ T6267] veth0_macvtap: entered promiscuous mode [ 299.014567][ T6267] veth1_macvtap: entered promiscuous mode [ 299.078794][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.117254][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.171268][ T2980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.192163][ T2980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.222760][ T2980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.248112][ T2980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.516088][ T3817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.614295][ T3817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.776265][ T3817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.904517][ T3817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.270502][ T3817] bridge_slave_1: left allmulticast mode [ 302.276357][ T3817] bridge_slave_1: left promiscuous mode [ 302.283174][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.327222][ T3817] bridge_slave_0: left allmulticast mode [ 302.333817][ T3817] bridge_slave_0: left promiscuous mode [ 302.340586][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.932506][ T3817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.967490][ T3817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.006744][ T3817] bond0 (unregistering): Released all slaves [ 303.304428][ T3817] hsr_slave_0: left promiscuous mode [ 303.331015][ T3817] hsr_slave_1: left promiscuous mode [ 303.338872][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.346708][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.393260][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.401052][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.450113][ T3817] veth1_macvtap: left promiscuous mode [ 303.455837][ T3817] veth0_macvtap: left promiscuous mode [ 303.461871][ T3817] veth1_vlan: left promiscuous mode [ 303.467395][ T3817] veth0_vlan: left promiscuous mode [ 304.165684][ T3817] team0 (unregistering): Port device team_slave_1 removed [ 304.191128][ T3817] team0 (unregistering): Port device team_slave_0 removed 2026/01/19 09:35:25 executed programs: 0 [ 307.863489][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.878372][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.887530][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.923986][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.935029][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.450926][ T6428] chnl_net:caif_netlink_parms(): no params data found [ 308.913929][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.924278][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.932031][ T6428] bridge_slave_0: entered allmulticast mode [ 308.941524][ T6428] bridge_slave_0: entered promiscuous mode [ 308.958876][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.966607][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.976171][ T6428] bridge_slave_1: entered allmulticast mode [ 308.985720][ T6428] bridge_slave_1: entered promiscuous mode [ 309.087755][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.110861][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.208546][ T6428] team0: Port device team_slave_0 added [ 309.227638][ T6428] team0: Port device team_slave_1 added [ 309.319897][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.327038][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.354734][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.377684][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.385740][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.412148][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.544531][ T6428] hsr_slave_0: entered promiscuous mode [ 309.554440][ T6428] hsr_slave_1: entered promiscuous mode [ 310.000999][ T5100] Bluetooth: hci0: command tx timeout [ 310.407401][ T6428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.435243][ T6428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.456975][ T6428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.485309][ T6428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.871147][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.934621][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.960554][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.968045][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.006969][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.014547][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.650546][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.823663][ T6428] veth0_vlan: entered promiscuous mode [ 311.861167][ T6428] veth1_vlan: entered promiscuous mode [ 311.970943][ T6428] veth0_macvtap: entered promiscuous mode [ 311.993715][ T6428] veth1_macvtap: entered promiscuous mode [ 312.056048][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.082077][ T5100] Bluetooth: hci0: command tx timeout [ 312.102468][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.141862][ T3953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.171263][ T3817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.210197][ T3817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.219490][ T3817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.150023][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.158044][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.173505][ T5100] Bluetooth: hci0: command tx timeout [ 314.252590][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.260706][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/19 09:35:31 executed programs: 2 [ 314.487862][ T6534] ===================================================== [ 314.495725][ T6534] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 314.503803][ T6534] _copy_to_user+0xcc/0x120 [ 314.508491][ T6534] move_addr_to_user+0x29a/0x400 [ 314.513855][ T6534] ____sys_recvmsg+0x232/0x610 [ 314.518816][ T6534] ___sys_recvmsg+0x20b/0x850 [ 314.523902][ T6534] do_recvmmsg+0x40e/0xdf0 [ 314.528502][ T6534] __x64_sys_recvmmsg+0x383/0x500 [ 314.533871][ T6534] x64_sys_call+0x365f/0x3e70 [ 314.538740][ T6534] do_syscall_64+0xd3/0xf80 [ 314.543704][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.549930][ T6534] [ 314.552327][ T6534] Uninit was stored to memory at: [ 314.557567][ T6534] dgram_recvmsg+0xa17/0xbe0 [ 314.562471][ T6534] sock_common_recvmsg+0xd5/0x1d0 [ 314.567667][ T6534] sock_recvmsg_nosec+0x240/0x2f0 [ 314.573063][ T6534] ____sys_recvmsg+0x4e5/0x610 [ 314.578118][ T6534] ___sys_recvmsg+0x20b/0x850 [ 314.583262][ T6534] do_recvmmsg+0x40e/0xdf0 [ 314.588846][ T6534] __x64_sys_recvmmsg+0x383/0x500 [ 314.594712][ T6534] x64_sys_call+0x365f/0x3e70 [ 314.599791][ T6534] do_syscall_64+0xd3/0xf80 [ 314.604492][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.610699][ T6534] [ 314.613105][ T6534] Uninit was stored to memory at: [ 314.618403][ T6534] __copy_skb_header+0xa3/0x840 [ 314.623586][ T6534] __skb_clone+0x57/0x650 [ 314.628099][ T6534] skb_clone+0x473/0x580 [ 314.632677][ T6534] ieee802154_rx+0xdeb/0x3460 [ 314.637575][ T6534] ieee802154_tasklet_handler+0x136/0x2c0 [ 314.643794][ T6534] tasklet_action_common+0x34b/0xcf0 [ 314.649653][ T6534] tasklet_action+0x2d/0x40 [ 314.654319][ T6534] handle_softirqs+0x169/0x6e0 [ 314.659660][ T6534] __do_softirq+0x14/0x1b [ 314.664157][ T6534] [ 314.666507][ T6534] Uninit was stored to memory at: [ 314.671916][ T6534] ieee802154_rx+0xb4d/0x3460 [ 314.676754][ T6534] ieee802154_tasklet_handler+0x136/0x2c0 [ 314.682803][ T6534] tasklet_action_common+0x34b/0xcf0 [ 314.688260][ T6534] tasklet_action+0x2d/0x40 [ 314.693962][ T6534] handle_softirqs+0x169/0x6e0 [ 314.698899][ T6534] __do_softirq+0x14/0x1b [ 314.703921][ T6534] [ 314.706318][ T6534] Uninit was stored to memory at: [ 314.711633][ T6534] ieee802154_hdr_pull+0xbf1/0xd60 [ 314.716839][ T6534] ieee802154_rx+0xa3d/0x3460 [ 314.721925][ T6534] ieee802154_tasklet_handler+0x136/0x2c0 [ 314.727839][ T6534] tasklet_action_common+0x34b/0xcf0 [ 314.733483][ T6534] tasklet_action+0x2d/0x40 [ 314.738146][ T6534] handle_softirqs+0x169/0x6e0 [ 314.743234][ T6534] __do_softirq+0x14/0x1b [ 314.747820][ T6534] [ 314.750349][ T6534] Local variable hdr.i created at: [ 314.755538][ T6534] ieee802154_rx+0x96e/0x3460 [ 314.760511][ T6534] ieee802154_tasklet_handler+0x136/0x2c0 [ 314.766403][ T6534] [ 314.768763][ T6534] Bytes 8-9 of 20 are uninitialized [ 314.774153][ T6534] Memory access of size 20 starts at ffff888013a8fa38 [ 314.781139][ T6534] Data copied to user address 0000200000000800 [ 314.787375][ T6534] [ 314.789917][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) [ 314.800019][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.810793][ T6534] ===================================================== [ 314.817808][ T6534] Disabling lock debugging due to kernel taint [ 314.824187][ T6534] Kernel panic - not syncing: kmsan.panic set ... [ 314.830753][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(none) [ 314.841604][ T6534] Tainted: [B]=BAD_PAGE [ 314.845846][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.855981][ T6534] Call Trace: [ 314.859339][ T6534] [ 314.862316][ T6534] __dump_stack+0x26/0x30 [ 314.866750][ T6534] dump_stack_lvl+0x50/0x1c0 [ 314.871504][ T6534] ? dump_stack+0x12/0x25 [ 314.875967][ T6534] dump_stack+0x1e/0x25 [ 314.880247][ T6534] vpanic+0x435/0xd30 [ 314.884431][ T6534] panic+0x15d/0x160 [ 314.888568][ T6534] kmsan_report+0x31c/0x320 [ 314.893319][ T6534] ? __msan_chain_origin+0xc3/0x140 [ 314.898713][ T6534] ? kmsan_internal_check_memory+0x16c/0x230 [ 314.904875][ T6534] ? kmsan_copy_to_user+0xf1/0x190 [ 314.910098][ T6534] ? _copy_to_user+0xcc/0x120 [ 314.914870][ T6534] ? move_addr_to_user+0x29a/0x400 [ 314.920075][ T6534] ? ____sys_recvmsg+0x232/0x610 [ 314.925122][ T6534] ? ___sys_recvmsg+0x20b/0x850 [ 314.930177][ T6534] ? do_recvmmsg+0x40e/0xdf0 [ 314.934920][ T6534] ? __x64_sys_recvmmsg+0x383/0x500 [ 314.940264][ T6534] ? x64_sys_call+0x365f/0x3e70 [ 314.945219][ T6534] ? do_syscall_64+0xd3/0xf80 [ 314.950006][ T6534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.956192][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 314.961454][ T6534] ? __skb_datagram_iter+0x1203/0x12c0 [ 314.967101][ T6534] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 314.972844][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 314.978075][ T6534] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 314.984584][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 314.989936][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 314.995202][ T6534] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.001226][ T6534] kmsan_internal_check_memory+0x16c/0x230 [ 315.007255][ T6534] kmsan_copy_to_user+0xf1/0x190 [ 315.012576][ T6534] _copy_to_user+0xcc/0x120 [ 315.017182][ T6534] move_addr_to_user+0x29a/0x400 [ 315.022231][ T6534] ____sys_recvmsg+0x232/0x610 [ 315.027113][ T6534] ? should_fail_ex+0x45/0x8a0 [ 315.032038][ T6534] ___sys_recvmsg+0x20b/0x850 [ 315.037028][ T6534] ? kmsan_internal_check_memory+0x9c/0x230 [ 315.043049][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 315.048279][ T6534] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.054210][ T6534] do_recvmmsg+0x40e/0xdf0 [ 315.058838][ T6534] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 315.064749][ T6534] ? stack_depot_save_flags+0x610/0x790 [ 315.070406][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 315.075739][ T6534] __x64_sys_recvmmsg+0x383/0x500 [ 315.080900][ T6534] ? kmsan_get_metadata+0xfb/0x160 [ 315.086219][ T6534] x64_sys_call+0x365f/0x3e70 [ 315.091014][ T6534] do_syscall_64+0xd3/0xf80 [ 315.095658][ T6534] ? clear_bhb_loop+0x40/0x90 [ 315.100444][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.106462][ T6534] RIP: 0033:0x7fca8d58f749 [ 315.110963][ T6534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.130831][ T6534] RSP: 002b:00007fca8e4b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 315.139441][ T6534] RAX: ffffffffffffffda RBX: 00007fca8d7e5fa0 RCX: 00007fca8d58f749 [ 315.147537][ T6534] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: 0000000000000004 [ 315.155584][ T6534] RBP: 00007fca8d613f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.163651][ T6534] R10: 0000000060012023 R11: 0000000000000246 R12: 0000000000000000 [ 315.171693][ T6534] R13: 00007fca8d7e6038 R14: 00007fca8d7e5fa0 R15: 00007ffc2e34eb48 [ 315.179784][ T6534] [ 315.183335][ T6534] Kernel Offset: disabled [ 315.187718][ T6534] Rebooting in 86400 seconds..