Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 2026/01/04 08:36:31 parsed 1 programs [ 171.668045][ T5801] cgroup: Unknown subsys name 'net' [ 171.813358][ T5801] cgroup: Unknown subsys name 'cpuset' [ 171.831191][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 177.300553][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 181.518495][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.047743][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 187.317724][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.326940][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.334347][ T5866] bridge_slave_0: entered allmulticast mode [ 187.343243][ T5866] bridge_slave_0: entered promiscuous mode [ 187.355860][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.363226][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.370833][ T5866] bridge_slave_1: entered allmulticast mode [ 187.379033][ T5866] bridge_slave_1: entered promiscuous mode [ 187.442966][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.460310][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.523413][ T5866] team0: Port device team_slave_0 added [ 187.537747][ T5866] team0: Port device team_slave_1 added [ 187.593801][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.601242][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.628576][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.643018][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.650320][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.677475][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.763564][ T5866] hsr_slave_0: entered promiscuous mode [ 187.773462][ T5866] hsr_slave_1: entered promiscuous mode [ 188.066126][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.084182][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.102089][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.118889][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.337912][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.376833][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.398814][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.406236][ T3725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.433415][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.440935][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.846316][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.953207][ T5866] veth0_vlan: entered promiscuous mode [ 188.978792][ T5866] veth1_vlan: entered promiscuous mode [ 189.053368][ T5866] veth0_macvtap: entered promiscuous mode [ 189.071653][ T5866] veth1_macvtap: entered promiscuous mode [ 189.117514][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.148165][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.174763][ T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.186172][ T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.206926][ T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.217807][ T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.437016][ T86] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.069113][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.085481][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.098792][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.111348][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.123755][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.620438][ T86] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.847314][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.855527][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.909939][ T3725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.918056][ T3725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.790311][ T86] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/04 08:37:05 executed programs: 0 [ 192.883734][ T86] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.020870][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.079133][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.087255][ T86] bridge_slave_1: left allmulticast mode [ 193.093059][ T86] bridge_slave_1: left promiscuous mode [ 193.099762][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.111858][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.126853][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.138942][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.155050][ T86] bridge_slave_0: left allmulticast mode [ 193.160878][ T86] bridge_slave_0: left promiscuous mode [ 193.167562][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.464140][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.480283][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.492787][ T86] bond0 (unregistering): Released all slaves [ 193.750917][ T86] hsr_slave_0: left promiscuous mode [ 193.761426][ T86] hsr_slave_1: left promiscuous mode [ 193.769356][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.777110][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.792070][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.799813][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.827034][ T86] veth1_macvtap: left promiscuous mode [ 193.832742][ T86] veth0_macvtap: left promiscuous mode [ 193.839339][ T86] veth1_vlan: left promiscuous mode [ 193.845013][ T86] veth0_vlan: left promiscuous mode [ 194.381290][ T86] team0 (unregistering): Port device team_slave_1 removed [ 194.444490][ T86] team0 (unregistering): Port device team_slave_0 removed [ 195.195069][ T50] Bluetooth: hci0: command tx timeout [ 195.395775][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 196.046145][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.053615][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.061278][ T5921] bridge_slave_0: entered allmulticast mode [ 196.070239][ T5921] bridge_slave_0: entered promiscuous mode [ 196.086094][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.093542][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.101433][ T5921] bridge_slave_1: entered allmulticast mode [ 196.110711][ T5921] bridge_slave_1: entered promiscuous mode [ 196.201462][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.222944][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.316606][ T5921] team0: Port device team_slave_0 added [ 196.344045][ T5921] team0: Port device team_slave_1 added [ 196.412158][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.419367][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.446606][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.462786][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.470120][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.497719][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.606845][ T5921] hsr_slave_0: entered promiscuous mode [ 196.616495][ T5921] hsr_slave_1: entered promiscuous mode [ 197.277601][ T50] Bluetooth: hci0: command tx timeout [ 197.414177][ T5921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.441094][ T5921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.461548][ T5921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.483475][ T5921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.820230][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.869989][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.896479][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.903919][ T4648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.962547][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.970075][ T4648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.071841][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.489311][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.627846][ T5921] veth0_vlan: entered promiscuous mode [ 198.671198][ T5921] veth1_vlan: entered promiscuous mode [ 198.772997][ T5921] veth0_macvtap: entered promiscuous mode [ 198.794020][ T5921] veth1_macvtap: entered promiscuous mode [ 198.856310][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.901038][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.941164][ T3669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.953868][ T3669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.996194][ T3669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.007990][ T3669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.358698][ T50] Bluetooth: hci0: command tx timeout [ 200.808031][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.816273][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.882703][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.891565][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/04 08:37:13 executed programs: 2 [ 201.052748][ T6040] ===================================================== [ 201.060391][ T6040] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 201.067812][ T6040] _copy_to_user+0xcc/0x120 [ 201.072454][ T6040] move_addr_to_user+0x29a/0x400 [ 201.077627][ T6040] ____sys_recvmsg+0x232/0x610 [ 201.082552][ T6040] ___sys_recvmsg+0x20b/0x850 [ 201.087439][ T6040] do_recvmmsg+0x40e/0xdf0 [ 201.092004][ T6040] __x64_sys_recvmmsg+0x383/0x500 [ 201.097283][ T6040] x64_sys_call+0x365f/0x3e70 [ 201.102117][ T6040] do_syscall_64+0xd3/0xf80 [ 201.106997][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.113031][ T6040] [ 201.115585][ T6040] Uninit was stored to memory at: [ 201.120765][ T6040] dgram_recvmsg+0xa17/0xbe0 [ 201.125678][ T6040] sock_common_recvmsg+0xd5/0x1d0 [ 201.130845][ T6040] sock_recvmsg_nosec+0x240/0x2f0 [ 201.136100][ T6040] ____sys_recvmsg+0x4e5/0x610 [ 201.141016][ T6040] ___sys_recvmsg+0x20b/0x850 [ 201.146104][ T6040] do_recvmmsg+0x40e/0xdf0 [ 201.150685][ T6040] __x64_sys_recvmmsg+0x383/0x500 [ 201.156071][ T6040] x64_sys_call+0x365f/0x3e70 [ 201.160911][ T6040] do_syscall_64+0xd3/0xf80 [ 201.165710][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.171788][ T6040] [ 201.174163][ T6040] Uninit was stored to memory at: [ 201.179591][ T6040] __copy_skb_header+0xa3/0x840 [ 201.184623][ T6040] __skb_clone+0x57/0x650 [ 201.189394][ T6040] skb_clone+0x473/0x580 [ 201.193887][ T6040] ieee802154_rx+0xdeb/0x3460 [ 201.198900][ T6040] ieee802154_tasklet_handler+0x136/0x2c0 [ 201.204950][ T6040] tasklet_action_common+0x34b/0xcf0 [ 201.210394][ T6040] tasklet_action+0x2d/0x40 [ 201.215151][ T6040] handle_softirqs+0x169/0x6e0 [ 201.220053][ T6040] __do_softirq+0x14/0x1b [ 201.224486][ T6040] [ 201.227115][ T6040] Uninit was stored to memory at: [ 201.232322][ T6040] ieee802154_rx+0xb4d/0x3460 [ 201.237244][ T6040] ieee802154_tasklet_handler+0x136/0x2c0 [ 201.243127][ T6040] tasklet_action_common+0x34b/0xcf0 [ 201.248682][ T6040] tasklet_action+0x2d/0x40 [ 201.253322][ T6040] handle_softirqs+0x169/0x6e0 [ 201.258314][ T6040] __do_softirq+0x14/0x1b [ 201.262787][ T6040] [ 201.265271][ T6040] Uninit was stored to memory at: [ 201.270441][ T6040] ieee802154_hdr_pull+0xbf1/0xd60 [ 201.275775][ T6040] ieee802154_rx+0xa3d/0x3460 [ 201.280594][ T6040] ieee802154_tasklet_handler+0x136/0x2c0 [ 201.286672][ T6040] tasklet_action_common+0x34b/0xcf0 [ 201.292114][ T6040] tasklet_action+0x2d/0x40 [ 201.296896][ T6040] handle_softirqs+0x169/0x6e0 [ 201.301806][ T6040] __do_softirq+0x14/0x1b [ 201.306428][ T6040] [ 201.308884][ T6040] Local variable hdr.i created at: [ 201.314035][ T6040] ieee802154_rx+0x96e/0x3460 [ 201.318976][ T6040] ieee802154_tasklet_handler+0x136/0x2c0 [ 201.325006][ T6040] [ 201.327365][ T6040] Bytes 8-9 of 20 are uninitialized [ 201.332607][ T6040] Memory access of size 20 starts at ffff88804e467a38 [ 201.339560][ T6040] Data copied to user address 0000200000000800 [ 201.345979][ T6040] [ 201.348416][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) [ 201.357849][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.368109][ T6040] ===================================================== [ 201.375318][ T6040] Disabling lock debugging due to kernel taint [ 201.381555][ T6040] Kernel panic - not syncing: kmsan.panic set ... [ 201.388067][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(none) [ 201.398906][ T6040] Tainted: [B]=BAD_PAGE [ 201.403129][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.413265][ T6040] Call Trace: [ 201.416598][ T6040] [ 201.419602][ T6040] __dump_stack+0x26/0x30 [ 201.424044][ T6040] dump_stack_lvl+0x50/0x1c0 [ 201.428730][ T6040] ? dump_stack+0x12/0x25 [ 201.433164][ T6040] dump_stack+0x1e/0x25 [ 201.437417][ T6040] vpanic+0x435/0xd30 [ 201.441507][ T6040] panic+0x15d/0x160 [ 201.445521][ T6040] kmsan_report+0x31c/0x320 [ 201.450140][ T6040] ? __msan_chain_origin+0xc3/0x140 [ 201.455435][ T6040] ? kmsan_internal_check_memory+0x16c/0x230 [ 201.461514][ T6040] ? kmsan_copy_to_user+0xf1/0x190 [ 201.466736][ T6040] ? _copy_to_user+0xcc/0x120 [ 201.471574][ T6040] ? move_addr_to_user+0x29a/0x400 [ 201.476787][ T6040] ? ____sys_recvmsg+0x232/0x610 [ 201.481844][ T6040] ? ___sys_recvmsg+0x20b/0x850 [ 201.486808][ T6040] ? do_recvmmsg+0x40e/0xdf0 [ 201.491573][ T6040] ? __x64_sys_recvmmsg+0x383/0x500 [ 201.496959][ T6040] ? x64_sys_call+0x365f/0x3e70 [ 201.501948][ T6040] ? do_syscall_64+0xd3/0xf80 [ 201.506799][ T6040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.513027][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.518278][ T6040] ? __skb_datagram_iter+0x1203/0x12c0 [ 201.523860][ T6040] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 201.529600][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.534843][ T6040] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 201.541349][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.546584][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.551804][ T6040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 201.557742][ T6040] kmsan_internal_check_memory+0x16c/0x230 [ 201.563673][ T6040] kmsan_copy_to_user+0xf1/0x190 [ 201.568721][ T6040] _copy_to_user+0xcc/0x120 [ 201.573343][ T6040] move_addr_to_user+0x29a/0x400 [ 201.578498][ T6040] ____sys_recvmsg+0x232/0x610 [ 201.583415][ T6040] ? should_fail_ex+0x45/0x8a0 [ 201.588361][ T6040] ___sys_recvmsg+0x20b/0x850 [ 201.593203][ T6040] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 201.599722][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.604968][ T6040] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 201.610963][ T6040] do_recvmmsg+0x40e/0xdf0 [ 201.615524][ T6040] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 201.621509][ T6040] ? stack_depot_save_flags+0x610/0x790 [ 201.627285][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.632567][ T6040] __x64_sys_recvmmsg+0x383/0x500 [ 201.637719][ T6040] ? kmsan_get_metadata+0xfb/0x160 [ 201.643033][ T6040] x64_sys_call+0x365f/0x3e70 [ 201.647821][ T6040] do_syscall_64+0xd3/0xf80 [ 201.652436][ T6040] ? clear_bhb_loop+0x40/0x90 [ 201.657207][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.663198][ T6040] RIP: 0033:0x7f229298f749 [ 201.667693][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.687418][ T6040] RSP: 002b:00007f22937c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.695946][ T6040] RAX: ffffffffffffffda RBX: 00007f2292be5fa0 RCX: 00007f229298f749 [ 201.704037][ T6040] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: 0000000000000004 [ 201.712104][ T6040] RBP: 00007f2292a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.720180][ T6040] R10: 0000000060012023 R11: 0000000000000246 R12: 0000000000000000 [ 201.728247][ T6040] R13: 00007f2292be6038 R14: 00007f2292be5fa0 R15: 00007fff52e75a28 [ 201.736321][ T6040] [ 201.739921][ T6040] Kernel Offset: disabled [ 201.744307][ T6040] Rebooting in 86400 seconds..