Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. 2025/06/20 08:45:03 ignoring optional flag "sandboxArg"="0" 2025/06/20 08:45:05 parsed 1 programs [ 342.321532][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.328402][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.552213][ T6416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 382.593649][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 382.878385][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.887276][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.895220][ T6446] bridge_slave_0: entered allmulticast mode [ 382.903552][ T6446] bridge_slave_0: entered promiscuous mode [ 382.916253][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.923812][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.932079][ T6446] bridge_slave_1: entered allmulticast mode [ 382.940477][ T6446] bridge_slave_1: entered promiscuous mode [ 383.005009][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.023208][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.087701][ T6446] team0: Port device team_slave_0 added [ 383.103340][ T6446] team0: Port device team_slave_1 added [ 383.162469][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.170151][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.198484][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.214640][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.222086][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.251869][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.348838][ T6446] hsr_slave_0: entered promiscuous mode [ 383.357994][ T6446] hsr_slave_1: entered promiscuous mode [ 384.208921][ T6446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.230519][ T6446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.251875][ T6446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.273919][ T6446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.599453][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.651878][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.690412][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.698515][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.727787][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.735941][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.373393][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.512550][ T6446] veth0_vlan: entered promiscuous mode [ 385.546799][ T6446] veth1_vlan: entered promiscuous mode [ 385.659428][ T6446] veth0_macvtap: entered promiscuous mode [ 385.685819][ T6446] veth1_macvtap: entered promiscuous mode [ 385.739123][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.785272][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.814284][ T6446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.823841][ T6446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.833710][ T6446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.844323][ T6446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.118855][ T1326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.268584][ T1326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.381146][ T1326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.530595][ T1326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.773005][ T1326] bridge_slave_1: left allmulticast mode [ 388.780105][ T1326] bridge_slave_1: left promiscuous mode [ 388.787607][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.817802][ T1326] bridge_slave_0: left allmulticast mode [ 388.824477][ T1326] bridge_slave_0: left promiscuous mode [ 388.831892][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.869959][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.879385][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.889772][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.907611][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.958298][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.318110][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.337120][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.358569][ T1326] bond0 (unregistering): Released all slaves [ 389.621058][ T1326] hsr_slave_0: left promiscuous mode [ 389.653709][ T1326] hsr_slave_1: left promiscuous mode [ 389.661750][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.671266][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.734513][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.742620][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.819438][ T1326] veth1_macvtap: left promiscuous mode [ 389.825752][ T1326] veth0_macvtap: left promiscuous mode [ 389.831665][ T1326] veth1_vlan: left promiscuous mode [ 389.837455][ T1326] veth0_vlan: left promiscuous mode [ 390.546855][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 390.581345][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 393.067799][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.076570][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.175301][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.183476][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/20 08:46:24 executed programs: 0 [ 397.505671][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.542119][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.553113][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.569098][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.589440][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.057988][ T6681] chnl_net:caif_netlink_parms(): no params data found [ 398.478625][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.486636][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.496023][ T6681] bridge_slave_0: entered allmulticast mode [ 398.505840][ T6681] bridge_slave_0: entered promiscuous mode [ 398.521555][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.531543][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.541668][ T6681] bridge_slave_1: entered allmulticast mode [ 398.552597][ T6681] bridge_slave_1: entered promiscuous mode [ 398.643982][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.667708][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.768749][ T6681] team0: Port device team_slave_0 added [ 398.785371][ T6681] team0: Port device team_slave_1 added [ 398.870693][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.879235][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.907073][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.927214][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.935987][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.963819][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.099562][ T6681] hsr_slave_0: entered promiscuous mode [ 399.109482][ T6681] hsr_slave_1: entered promiscuous mode [ 399.668994][ T5085] Bluetooth: hci0: command tx timeout [ 399.793015][ T6681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 399.813842][ T6681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 399.834828][ T6681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 399.855730][ T6681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.190094][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.249669][ T6681] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.280306][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.288051][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.322907][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.330727][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.951738][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.129117][ T6681] veth0_vlan: entered promiscuous mode [ 401.160119][ T6681] veth1_vlan: entered promiscuous mode [ 401.276062][ T6681] veth0_macvtap: entered promiscuous mode [ 401.303006][ T6681] veth1_macvtap: entered promiscuous mode [ 401.361444][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.397985][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.423589][ T6681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.434210][ T6681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.443482][ T6681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.453041][ T6681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.748287][ T5085] Bluetooth: hci0: command tx timeout [ 403.324010][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.332290][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.425244][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.433640][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/20 08:46:30 executed programs: 2 [ 403.583311][ T6787] ===================================================== [ 403.590830][ T6787] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 403.598517][ T6787] _copy_to_user+0xcc/0x120 [ 403.603229][ T6787] vmci_host_unlocked_ioctl+0x1d05/0x5260 [ 403.609317][ T6787] __se_sys_ioctl+0x23c/0x400 [ 403.614480][ T6787] __x64_sys_ioctl+0x97/0xe0 [ 403.619270][ T6787] x64_sys_call+0x1ebe/0x3db0 [ 403.624449][ T6787] do_syscall_64+0xd9/0x210 [ 403.629134][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.635689][ T6787] [ 403.638130][ T6787] Uninit was stored to memory at: [ 403.643437][ T6787] kmemdup_noprof+0xb0/0x100 [ 403.648381][ T6787] vmci_datagram_dispatch+0x4eb/0x1560 [ 403.654216][ T6787] vmci_ctx_put+0x88e/0x15d0 [ 403.659011][ T6787] vmci_ctx_destroy+0x15d/0x250 [ 403.664302][ T6787] vmci_host_unlocked_ioctl+0x45c1/0x5260 [ 403.670215][ T6787] __se_sys_ioctl+0x23c/0x400 [ 403.675384][ T6787] __x64_sys_ioctl+0x97/0xe0 [ 403.681051][ T6787] x64_sys_call+0x1ebe/0x3db0 [ 403.686413][ T6787] do_syscall_64+0xd9/0x210 [ 403.691185][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.697562][ T6787] [ 403.699993][ T6787] Local variable ev.i.i created at: [ 403.705552][ T6787] vmci_ctx_put+0x76b/0x15d0 [ 403.710348][ T6787] vmci_ctx_destroy+0x15d/0x250 [ 403.715836][ T6787] [ 403.718256][ T6787] Bytes 28-31 of 40 are uninitialized [ 403.723932][ T6787] Memory access of size 40 starts at ffff8880231f26c0 [ 403.731411][ T6787] Data copied to user address 000000000000a4bf [ 403.737849][ T6787] [ 403.740332][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.0.16 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787-dirty #0 PREEMPT(undef) [ 403.753280][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.763726][ T6787] ===================================================== [ 403.771112][ T6787] Disabling lock debugging due to kernel taint [ 403.777581][ T6787] Kernel panic - not syncing: kmsan.panic set ... [ 403.784167][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.0.16 Tainted: G B 6.16.0-rc2-syzkaller-00231-g75f5f23f8787-dirty #0 PREEMPT(undef) [ 403.798398][ T6787] Tainted: [B]=BAD_PAGE [ 403.802666][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.812902][ T6787] Call Trace: [ 403.816408][ T6787] [ 403.819465][ T6787] __dump_stack+0x26/0x30 [ 403.824172][ T6787] dump_stack_lvl+0x53/0x270 [ 403.828968][ T6787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 403.835103][ T6787] dump_stack+0x1e/0x25 [ 403.839560][ T6787] panic+0x4bd/0xd50 [ 403.843726][ T6787] kmsan_report+0x31c/0x320 [ 403.848773][ T6787] ? kmsan_internal_check_memory+0x16c/0x230 [ 403.854994][ T6787] ? kmsan_copy_to_user+0xf1/0x190 [ 403.860418][ T6787] ? _copy_to_user+0xcc/0x120 [ 403.865401][ T6787] ? vmci_host_unlocked_ioctl+0x1d05/0x5260 [ 403.871661][ T6787] ? __se_sys_ioctl+0x23c/0x400 [ 403.876717][ T6787] ? __x64_sys_ioctl+0x97/0xe0 [ 403.881767][ T6787] ? x64_sys_call+0x1ebe/0x3db0 [ 403.886876][ T6787] ? do_syscall_64+0xd9/0x210 [ 403.891834][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.898196][ T6787] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 403.904507][ T6787] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 403.910626][ T6787] ? stack_depot_save_flags+0x60f/0x7b0 [ 403.916459][ T6787] ? kmsan_get_metadata+0xfb/0x160 [ 403.921882][ T6787] ? kmsan_get_metadata+0xfb/0x160 [ 403.927234][ T6787] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 403.933813][ T6787] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 403.940112][ T6787] ? kmsan_get_metadata+0xfb/0x160 [ 403.945502][ T6787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 403.951652][ T6787] kmsan_internal_check_memory+0x16c/0x230 [ 403.957837][ T6787] kmsan_copy_to_user+0xf1/0x190 [ 403.963097][ T6787] _copy_to_user+0xcc/0x120 [ 403.967915][ T6787] vmci_host_unlocked_ioctl+0x1d05/0x5260 [ 403.974046][ T6787] ? kmsan_get_metadata+0xfb/0x160 [ 403.979510][ T6787] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 403.985815][ T6787] __se_sys_ioctl+0x23c/0x400 [ 403.990838][ T6787] __x64_sys_ioctl+0x97/0xe0 [ 403.995840][ T6787] x64_sys_call+0x1ebe/0x3db0 [ 404.000737][ T6787] do_syscall_64+0xd9/0x210 [ 404.005532][ T6787] ? clear_bhb_loop+0x40/0x90 [ 404.010496][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.016612][ T6787] RIP: 0033:0x7f298bb8e929 [ 404.021183][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.041920][ T6787] RSP: 002b:00007f298ca63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.050576][ T6787] RAX: ffffffffffffffda RBX: 00007f298bdb5fa0 RCX: 00007f298bb8e929 [ 404.058829][ T6787] RDX: 0000200000000200 RSI: 00000000000007ac RDI: 0000000000000003 [ 404.067664][ T6787] RBP: 00007f298bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 404.075975][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.084282][ T6787] R13: 0000000000000000 R14: 00007f298bdb5fa0 R15: 00007fff062750b8 [ 404.092467][ T6787] [ 404.096044][ T6787] Kernel Offset: disabled [ 404.100548][ T6787] Rebooting in 86400 seconds..