Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. 2026/03/05 23:57:19 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 113.162879][ T6172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.695981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.704257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.782291][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.791177][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.392530][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 118.494738][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.502480][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.510097][ T6232] bridge_slave_0: entered allmulticast mode [ 118.521790][ T6232] bridge_slave_0: entered promiscuous mode [ 118.532293][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.540786][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.555746][ T6232] bridge_slave_1: entered allmulticast mode [ 118.573748][ T6232] bridge_slave_1: entered promiscuous mode [ 118.606878][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.619349][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.652351][ T6232] team0: Port device team_slave_0 added [ 118.664285][ T6232] team0: Port device team_slave_1 added [ 118.693969][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.700991][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.727010][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.740767][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.747850][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.774405][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.817243][ T6232] hsr_slave_0: entered promiscuous mode [ 118.823980][ T6232] hsr_slave_1: entered promiscuous mode [ 119.392566][ T6232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.410088][ T6232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.422535][ T6232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.437170][ T6232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.578636][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.613835][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.634994][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.642276][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.661999][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.669262][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.958915][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.034451][ T6232] veth0_vlan: entered promiscuous mode [ 120.053466][ T6232] veth1_vlan: entered promiscuous mode [ 120.111564][ T6232] veth0_macvtap: entered promiscuous mode [ 120.128047][ T6232] veth1_macvtap: entered promiscuous mode [ 120.163485][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.198230][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.221011][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.243524][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.267514][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.295429][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.578384][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.647717][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.735169][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.832476][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.223829][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.236448][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.246389][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.257217][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.266877][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/05 23:57:32 executed programs: 0 [ 122.002056][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.011674][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.021931][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.034215][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.042037][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.277676][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 122.433201][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.440793][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.448667][ T6356] bridge_slave_0: entered allmulticast mode [ 122.457681][ T6356] bridge_slave_0: entered promiscuous mode [ 122.468950][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.476875][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.484220][ T6356] bridge_slave_1: entered allmulticast mode [ 122.494537][ T6356] bridge_slave_1: entered promiscuous mode [ 122.550272][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.566914][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.617273][ T6356] team0: Port device team_slave_0 added [ 122.627949][ T6356] team0: Port device team_slave_1 added [ 122.670811][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.677978][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.705669][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.719938][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.727506][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.757138][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.855440][ T6356] hsr_slave_0: entered promiscuous mode [ 122.865769][ T6356] hsr_slave_1: entered promiscuous mode [ 122.875000][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 122.881233][ T6356] Cannot create hsr debugfs directory [ 123.025466][ T58] bridge_slave_1: left allmulticast mode [ 123.032052][ T58] bridge_slave_1: left promiscuous mode [ 123.038812][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.052008][ T58] bridge_slave_0: left allmulticast mode [ 123.057795][ T58] bridge_slave_0: left promiscuous mode [ 123.063644][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.325501][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.339541][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.351450][ T58] bond0 (unregistering): Released all slaves [ 123.487350][ T58] hsr_slave_0: left promiscuous mode [ 123.495453][ T58] hsr_slave_1: left promiscuous mode [ 123.501801][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.512021][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.520337][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.529679][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.543547][ T58] veth1_macvtap: left promiscuous mode [ 123.549419][ T58] veth0_macvtap: left promiscuous mode [ 123.555262][ T58] veth1_vlan: left promiscuous mode [ 123.560781][ T58] veth0_vlan: left promiscuous mode [ 123.781343][ T58] team0 (unregistering): Port device team_slave_1 removed [ 123.794935][ T58] team0 (unregistering): Port device team_slave_0 removed [ 124.116580][ T5148] Bluetooth: hci0: command tx timeout [ 124.606765][ T6356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.634711][ T6356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.671789][ T6356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.702044][ T6356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.952261][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.988663][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.007787][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.014999][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.036337][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.043573][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.325429][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.394720][ T6356] veth0_vlan: entered promiscuous mode [ 125.410789][ T6356] veth1_vlan: entered promiscuous mode [ 125.452698][ T6356] veth0_macvtap: entered promiscuous mode [ 125.463947][ T6356] veth1_macvtap: entered promiscuous mode [ 125.486252][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.503043][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.519473][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.528627][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.544809][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.554143][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.616883][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.624802][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.652971][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.661891][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.729579][ T6460] ------------[ cut here ]------------ [ 125.736171][ T6460] UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2170:30 [ 125.743363][ T6460] shift exponent 235 is too large for 64-bit type 'unsigned long' [ 125.751237][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 125.751258][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.751276][ T6460] Call Trace: [ 125.751282][ T6460] [ 125.751287][ T6460] dump_stack_lvl+0xe8/0x150 [ 125.751314][ T6460] ubsan_epilogue+0xa/0x30 [ 125.751329][ T6460] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 125.751365][ T6460] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 125.751397][ T6460] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 125.751431][ T6460] ? ieee80211_select_queue_80211+0x241/0x380 [ 125.751454][ T6460] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 125.751477][ T6460] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 125.751495][ T6460] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 125.751524][ T6460] dev_hard_start_xmit+0x2d8/0x870 [ 125.751563][ T6460] __dev_queue_xmit+0x17a7/0x38d0 [ 125.751585][ T6460] ? __dev_queue_xmit+0x28d/0x38d0 [ 125.751612][ T6460] ? _copy_from_iter+0x21b/0x1670 [ 125.751632][ T6460] ? __pfx___dev_queue_xmit+0x10/0x10 [ 125.751646][ T6460] ? sock_alloc_send_pskb+0x896/0x990 [ 125.751675][ T6460] ? __pfx__copy_from_iter+0x10/0x10 [ 125.751697][ T6460] ? packet_parse_headers+0x4c9/0x790 [ 125.751720][ T6460] ? packet_parse_headers+0x575/0x790 [ 125.751742][ T6460] ? __pfx_packet_parse_headers+0x10/0x10 [ 125.751766][ T6460] ? packet_xmit+0x68/0x320 [ 125.751789][ T6460] packet_sendmsg+0x3ed0/0x5110 [ 125.751817][ T6460] ? futex_unqueue+0x22/0x240 [ 125.751838][ T6460] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 125.751857][ T6460] ? futex_unqueue+0x211/0x240 [ 125.751878][ T6460] ? __futex_wait+0x371/0x420 [ 125.751904][ T6460] ? __lock_acquire+0x6b5/0x2cf0 [ 125.751939][ T6460] ? __pfx_packet_sendmsg+0x10/0x10 [ 125.751964][ T6460] ? __pfx_aa_sk_perm+0x10/0x10 [ 125.751988][ T6460] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 125.752015][ T6460] ? __pfx_packet_sendmsg+0x10/0x10 [ 125.752028][ T6460] sock_sendmsg_nosec+0x112/0x150 [ 125.752046][ T6460] __sys_sendto+0x3ff/0x590 [ 125.752068][ T6460] ? __pfx___sys_sendto+0x10/0x10 [ 125.752084][ T6460] ? do_futex+0x333/0x420 [ 125.752128][ T6460] ? fd_install+0x94/0x3d0 [ 125.752146][ T6460] ? __pfx___se_sys_futex+0x10/0x10 [ 125.752175][ T6460] __x64_sys_sendto+0xde/0x100 [ 125.752198][ T6460] do_syscall_64+0x14d/0xf80 [ 125.752219][ T6460] ? trace_irq_disable+0x3b/0x150 [ 125.752236][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.752251][ T6460] ? clear_bhb_loop+0x40/0x90 [ 125.752271][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.752286][ T6460] RIP: 0033:0x7fe90359bf79 [ 125.752309][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.752322][ T6460] RSP: 002b:00007fe90452c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.752348][ T6460] RAX: ffffffffffffffda RBX: 00007fe903815fa0 RCX: 00007fe90359bf79 [ 125.752359][ T6460] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 125.752368][ T6460] RBP: 00007fe9036327e0 R08: 0000200000000380 R09: 0000000000000014 [ 125.752377][ T6460] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.752386][ T6460] R13: 00007fe903816038 R14: 00007fe903815fa0 R15: 00007ffffa2479b8 [ 125.752413][ T6460] [ 125.752419][ T6460] ---[ end trace ]--- [ 126.077558][ T6460] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 126.084749][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.093846][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.103902][ T6460] Call Trace: [ 126.107217][ T6460] [ 126.110140][ T6460] vpanic+0x56c/0xa60 [ 126.114116][ T6460] ? __pfx_vpanic+0x10/0x10 [ 126.118625][ T6460] panic+0xc5/0xd0 [ 126.122334][ T6460] ? __pfx_panic+0x10/0x10 [ 126.126823][ T6460] ? __pfx__printk+0x10/0x10 [ 126.131401][ T6460] ? dump_stack_lvl+0x103/0x150 [ 126.136245][ T6460] check_panic_on_warn+0x89/0xb0 [ 126.141177][ T6460] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 126.147595][ T6460] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 126.153498][ T6460] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 126.159841][ T6460] ? ieee80211_select_queue_80211+0x241/0x380 [ 126.165913][ T6460] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 126.171927][ T6460] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 126.178083][ T6460] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 126.184509][ T6460] dev_hard_start_xmit+0x2d8/0x870 [ 126.189710][ T6460] __dev_queue_xmit+0x17a7/0x38d0 [ 126.194725][ T6460] ? __dev_queue_xmit+0x28d/0x38d0 [ 126.199828][ T6460] ? _copy_from_iter+0x21b/0x1670 [ 126.204857][ T6460] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.210232][ T6460] ? sock_alloc_send_pskb+0x896/0x990 [ 126.215617][ T6460] ? __pfx__copy_from_iter+0x10/0x10 [ 126.220912][ T6460] ? packet_parse_headers+0x4c9/0x790 [ 126.226322][ T6460] ? packet_parse_headers+0x575/0x790 [ 126.231701][ T6460] ? __pfx_packet_parse_headers+0x10/0x10 [ 126.237446][ T6460] ? packet_xmit+0x68/0x320 [ 126.241945][ T6460] packet_sendmsg+0x3ed0/0x5110 [ 126.246794][ T6460] ? futex_unqueue+0x22/0x240 [ 126.251464][ T6460] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.256831][ T6460] ? futex_unqueue+0x211/0x240 [ 126.261609][ T6460] ? __futex_wait+0x371/0x420 [ 126.266296][ T6460] ? __lock_acquire+0x6b5/0x2cf0 [ 126.271253][ T6460] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.276467][ T6460] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.281314][ T6460] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 126.287730][ T6460] ? __pfx_packet_sendmsg+0x10/0x10 [ 126.292934][ T6460] sock_sendmsg_nosec+0x112/0x150 [ 126.297975][ T6460] __sys_sendto+0x3ff/0x590 [ 126.302472][ T6460] ? __pfx___sys_sendto+0x10/0x10 [ 126.307496][ T6460] ? do_futex+0x333/0x420 [ 126.311840][ T6460] ? fd_install+0x94/0x3d0 [ 126.316248][ T6460] ? __pfx___se_sys_futex+0x10/0x10 [ 126.321456][ T6460] __x64_sys_sendto+0xde/0x100 [ 126.326215][ T6460] do_syscall_64+0x14d/0xf80 [ 126.330795][ T6460] ? trace_irq_disable+0x3b/0x150 [ 126.335899][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.341987][ T6460] ? clear_bhb_loop+0x40/0x90 [ 126.346683][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.352581][ T6460] RIP: 0033:0x7fe90359bf79 [ 126.356990][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.376585][ T6460] RSP: 002b:00007fe90452c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.384995][ T6460] RAX: ffffffffffffffda RBX: 00007fe903815fa0 RCX: 00007fe90359bf79 [ 126.393041][ T6460] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 126.400998][ T6460] RBP: 00007fe9036327e0 R08: 0000200000000380 R09: 0000000000000014 [ 126.408958][ T6460] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.416958][ T6460] R13: 00007fe903816038 R14: 00007fe903815fa0 R15: 00007ffffa2479b8 [ 126.424937][ T6460] [ 126.428400][ T6460] Kernel Offset: disabled [ 126.432863][ T6460] Rebooting in 86400 seconds..