[ 143.470207][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.473771][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:1776' (ED25519) to the list of known hosts. 2026/03/05 23:33:18 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 155.134511][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 159.090911][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.095135][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.132215][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.137993][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.340675][ T5649] chnl_net:caif_netlink_parms(): no params data found [ 161.416330][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.419774][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.423558][ T5649] bridge_slave_0: entered allmulticast mode [ 161.428761][ T5649] bridge_slave_0: entered promiscuous mode [ 161.434459][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.439661][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.443487][ T5649] bridge_slave_1: entered allmulticast mode [ 161.448500][ T5649] bridge_slave_1: entered promiscuous mode [ 161.478165][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.485482][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.513213][ T5649] team0: Port device team_slave_0 added [ 161.518490][ T5649] team0: Port device team_slave_1 added [ 161.543333][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.548034][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.560857][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.568110][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.571289][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.590824][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.646163][ T5649] hsr_slave_0: entered promiscuous mode [ 161.650246][ T5649] hsr_slave_1: entered promiscuous mode [ 162.208248][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.229695][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.248065][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.264463][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.327601][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.331401][ T5649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.336317][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.339784][ T5649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.370280][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.375210][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.482217][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.518384][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.530809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.534534][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.557617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.561006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.971012][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.066782][ T5649] veth0_vlan: entered promiscuous mode [ 163.084680][ T5649] veth1_vlan: entered promiscuous mode [ 163.149976][ T5649] veth0_macvtap: entered promiscuous mode [ 163.167507][ T5649] veth1_macvtap: entered promiscuous mode [ 163.201624][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.221644][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.252652][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.259972][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.264863][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.291118][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.618801][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.703729][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.779949][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.869188][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.474905][ T13] bridge_slave_1: left allmulticast mode [ 165.488815][ T13] bridge_slave_1: left promiscuous mode [ 165.492222][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.515288][ T13] bridge_slave_0: left allmulticast mode [ 165.536279][ T13] bridge_slave_0: left promiscuous mode [ 165.539447][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.306442][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.348062][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.353407][ T13] bond0 (unregistering): Released all slaves [ 166.535921][ T13] hsr_slave_0: left promiscuous mode [ 166.549061][ T13] hsr_slave_1: left promiscuous mode [ 166.560669][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.564189][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.597406][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.600846][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.620420][ T13] veth1_macvtap: left promiscuous mode [ 166.623928][ T13] veth0_macvtap: left promiscuous mode [ 166.628270][ T13] veth1_vlan: left promiscuous mode [ 166.630872][ T13] veth0_vlan: left promiscuous mode [ 167.035928][ T13] team0 (unregistering): Port device team_slave_1 removed [ 167.052164][ T13] team0 (unregistering): Port device team_slave_0 removed [ 167.567619][ T4663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.573499][ T4663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.579619][ T4663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.583564][ T4663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.587687][ T4663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/05 23:33:38 executed programs: 0 [ 170.776673][ T5360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.781761][ T5360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.789990][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.795493][ T5360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.799738][ T5360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.264391][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 171.498502][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.503534][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.510786][ T5784] bridge_slave_0: entered allmulticast mode [ 171.519791][ T5784] bridge_slave_0: entered promiscuous mode [ 171.531488][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.535065][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.557388][ T5784] bridge_slave_1: entered allmulticast mode [ 171.561475][ T5784] bridge_slave_1: entered promiscuous mode [ 171.627173][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.647660][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.708256][ T5784] team0: Port device team_slave_0 added [ 171.727450][ T5784] team0: Port device team_slave_1 added [ 171.784864][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.788813][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.802571][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.816102][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.820198][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.856968][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.937535][ T5784] hsr_slave_0: entered promiscuous mode [ 171.947618][ T5784] hsr_slave_1: entered promiscuous mode [ 172.639936][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.659394][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.676732][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.697586][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.827951][ T5360] Bluetooth: hci0: command tx timeout [ 172.877884][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.908586][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.941500][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.944794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.977431][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.981767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.393516][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.480362][ T5784] veth0_vlan: entered promiscuous mode [ 173.503445][ T5784] veth1_vlan: entered promiscuous mode [ 173.577675][ T5784] veth0_macvtap: entered promiscuous mode [ 173.588994][ T5784] veth1_macvtap: entered promiscuous mode [ 173.629973][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.649777][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.670400][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.685555][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.698644][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.703396][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.833185][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.847388][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.911352][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.920161][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.100357][ T5842] ------------[ cut here ]------------ [ 174.103693][ T5842] UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2173:30 [ 174.107528][ T5842] shift exponent 85 is too large for 64-bit type 'unsigned long' [ 174.112574][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 174.112600][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.112609][ T5842] Call Trace: [ 174.112662][ T5842] [ 174.112669][ T5842] dump_stack_lvl+0xe8/0x150 [ 174.112744][ T5842] ubsan_epilogue+0xa/0x30 [ 174.112758][ T5842] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 174.112802][ T5842] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 174.112840][ T5842] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 174.112864][ T5842] ? ieee80211_select_queue_80211+0x241/0x380 [ 174.112884][ T5842] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 174.112900][ T5842] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 174.112918][ T5842] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 174.112940][ T5842] dev_hard_start_xmit+0x2d8/0x870 [ 174.112965][ T5842] __dev_queue_xmit+0x16d1/0x3890 [ 174.112985][ T5842] ? __dev_queue_xmit+0x277/0x3890 [ 174.113006][ T5842] ? _copy_from_iter+0x21b/0x1670 [ 174.113021][ T5842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 174.113036][ T5842] ? sock_alloc_send_pskb+0x896/0x990 [ 174.113056][ T5842] ? __pfx__copy_from_iter+0x10/0x10 [ 174.113071][ T5842] ? packet_parse_headers+0x4c9/0x790 [ 174.113091][ T5842] ? packet_parse_headers+0x575/0x790 [ 174.113107][ T5842] ? __pfx_packet_parse_headers+0x10/0x10 [ 174.113123][ T5842] ? packet_xmit+0x68/0x320 [ 174.113139][ T5842] packet_sendmsg+0x3eb6/0x50f0 [ 174.113166][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 174.113190][ T5842] ? aa_sk_perm+0x6d5/0x900 [ 174.113206][ T5842] ? __pfx_packet_sendmsg+0x10/0x10 [ 174.113224][ T5842] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 174.113244][ T5842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.113258][ T5842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.113280][ T5842] ? __pfx_packet_sendmsg+0x10/0x10 [ 174.113294][ T5842] __sys_sendto+0x672/0x710 [ 174.113312][ T5842] ? __pfx___sys_sendto+0x10/0x10 [ 174.113324][ T5842] ? do_futex+0x395/0x420 [ 174.113357][ T5842] ? rcu_is_watching+0x15/0xb0 [ 174.113379][ T5842] __x64_sys_sendto+0xde/0x100 [ 174.113403][ T5842] do_syscall_64+0x14d/0xf80 [ 174.113421][ T5842] ? trace_irq_disable+0x3b/0x150 [ 174.113433][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.113442][ T5842] ? clear_bhb_loop+0x40/0x90 [ 174.113451][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.113459][ T5842] RIP: 0033:0x7f404679bf79 [ 174.113509][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.113543][ T5842] RSP: 002b:00007f40475b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.113560][ T5842] RAX: ffffffffffffffda RBX: 00007f4046a15fa0 RCX: 00007f404679bf79 [ 174.113568][ T5842] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 174.113575][ T5842] RBP: 00007f40468327e0 R08: 0000200000000380 R09: 0000000000000014 [ 174.113582][ T5842] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.113588][ T5842] R13: 00007f4046a16038 R14: 00007f4046a15fa0 R15: 00007ffd454dc378 [ 174.113600][ T5842] [ 174.113603][ T5842] ---[ end trace ]--- [ 174.268795][ T5842] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 174.272095][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 174.276140][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.280867][ T5842] Call Trace: [ 174.282516][ T5842] [ 174.283893][ T5842] vpanic+0x56c/0xa60 [ 174.285997][ T5842] ? __pfx_vpanic+0x10/0x10 [ 174.288683][ T5842] panic+0xc5/0xd0 [ 174.290531][ T5842] ? __pfx_panic+0x10/0x10 [ 174.292658][ T5842] ? __pfx__printk+0x10/0x10 [ 174.294837][ T5842] ? dump_stack_lvl+0x103/0x150 [ 174.297119][ T5842] check_panic_on_warn+0x89/0xb0 [ 174.299384][ T5842] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 174.302610][ T5842] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 174.305824][ T5842] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 174.309288][ T5842] ? ieee80211_select_queue_80211+0x241/0x380 [ 174.312029][ T5842] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 174.315403][ T5842] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 174.318488][ T5842] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 174.322073][ T5842] dev_hard_start_xmit+0x2d8/0x870 [ 174.324853][ T5842] __dev_queue_xmit+0x16d1/0x3890 [ 174.327248][ T5842] ? __dev_queue_xmit+0x277/0x3890 [ 174.329891][ T5842] ? _copy_from_iter+0x21b/0x1670 [ 174.332405][ T5842] ? __pfx___dev_queue_xmit+0x10/0x10 [ 174.335218][ T5842] ? sock_alloc_send_pskb+0x896/0x990 [ 174.338423][ T5842] ? __pfx__copy_from_iter+0x10/0x10 [ 174.341040][ T5842] ? packet_parse_headers+0x4c9/0x790 [ 174.343786][ T5842] ? packet_parse_headers+0x575/0x790 [ 174.346039][ T5842] ? __pfx_packet_parse_headers+0x10/0x10 [ 174.348653][ T5842] ? packet_xmit+0x68/0x320 [ 174.351206][ T5842] packet_sendmsg+0x3eb6/0x50f0 [ 174.353708][ T5842] ? __lock_acquire+0x6b5/0x2cf0 [ 174.356400][ T5842] ? aa_sk_perm+0x6d5/0x900 [ 174.358662][ T5842] ? __pfx_packet_sendmsg+0x10/0x10 [ 174.361184][ T5842] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 174.364175][ T5842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.366797][ T5842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.369543][ T5842] ? __pfx_packet_sendmsg+0x10/0x10 [ 174.372463][ T5842] __sys_sendto+0x672/0x710 [ 174.374541][ T5842] ? __pfx___sys_sendto+0x10/0x10 [ 174.377020][ T5842] ? do_futex+0x395/0x420 [ 174.379099][ T5842] ? rcu_is_watching+0x15/0xb0 [ 174.381549][ T5842] __x64_sys_sendto+0xde/0x100 [ 174.384156][ T5842] do_syscall_64+0x14d/0xf80 [ 174.386463][ T5842] ? trace_irq_disable+0x3b/0x150 [ 174.388803][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.391716][ T5842] ? clear_bhb_loop+0x40/0x90 [ 174.393953][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.396806][ T5842] RIP: 0033:0x7f404679bf79 [ 174.399078][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.408240][ T5842] RSP: 002b:00007f40475b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.413121][ T5842] RAX: ffffffffffffffda RBX: 00007f4046a15fa0 RCX: 00007f404679bf79 [ 174.417071][ T5842] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 174.420450][ T5842] RBP: 00007f40468327e0 R08: 0000200000000380 R09: 0000000000000014 [ 174.424145][ T5842] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.428102][ T5842] R13: 00007f4046a16038 R14: 00007f4046a15fa0 R15: 00007ffd454dc378 [ 174.432542][ T5842] [ 174.434352][ T5842] Kernel Offset: disabled [ 174.436693][ T5842] Rebooting in 86400 seconds..