[ 143.374975][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.379004][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:38779' (ED25519) to the list of known hosts. 2026/03/05 23:52:07 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 152.878810][ T5543] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 157.362457][ T5364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.370511][ T5364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.374904][ T5364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.379255][ T5364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.383552][ T5364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.493902][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.508652][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.550358][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.554348][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.866120][ T5614] chnl_net:caif_netlink_parms(): no params data found [ 162.984144][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.988143][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.992053][ T5614] bridge_slave_0: entered allmulticast mode [ 162.996414][ T5614] bridge_slave_0: entered promiscuous mode [ 163.003376][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.007567][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.012735][ T5614] bridge_slave_1: entered allmulticast mode [ 163.016906][ T5614] bridge_slave_1: entered promiscuous mode [ 163.045886][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.052955][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.082962][ T5614] team0: Port device team_slave_0 added [ 163.088016][ T5614] team0: Port device team_slave_1 added [ 163.113497][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.116928][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.131011][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.138160][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.142051][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.155319][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.199620][ T5614] hsr_slave_0: entered promiscuous mode [ 163.203403][ T5614] hsr_slave_1: entered promiscuous mode [ 163.823287][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.845188][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.863268][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.873813][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.046678][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.089602][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.104828][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.108341][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.133945][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.137992][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.536554][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.618410][ T5614] veth0_vlan: entered promiscuous mode [ 164.638894][ T5614] veth1_vlan: entered promiscuous mode [ 164.705540][ T5614] veth0_macvtap: entered promiscuous mode [ 164.724194][ T5614] veth1_macvtap: entered promiscuous mode [ 164.767629][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.788954][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.808090][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.829664][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.850792][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.862940][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.137266][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.992287][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/05 23:52:26 executed programs: 0 [ 166.347954][ T4664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.354551][ T4664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.359734][ T4664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.364975][ T4664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.368875][ T4664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.754606][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 166.932574][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.998091][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.010667][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.014078][ T5677] bridge_slave_0: entered allmulticast mode [ 167.031746][ T5677] bridge_slave_0: entered promiscuous mode [ 167.037483][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.050698][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.054099][ T5677] bridge_slave_1: entered allmulticast mode [ 167.070751][ T5677] bridge_slave_1: entered promiscuous mode [ 167.142331][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.163543][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.221886][ T5677] team0: Port device team_slave_0 added [ 167.236519][ T5677] team0: Port device team_slave_1 added [ 167.298101][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.305039][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.330482][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.351033][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.354572][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.390477][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.492188][ T5677] hsr_slave_0: entered promiscuous mode [ 167.495583][ T5677] hsr_slave_1: entered promiscuous mode [ 167.502786][ T5677] debugfs: 'hsr0' already exists in 'hsr' [ 167.505685][ T5677] Cannot create hsr debugfs directory [ 167.744997][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.027818][ T13] bridge_slave_1: left allmulticast mode [ 168.043310][ T13] bridge_slave_1: left promiscuous mode [ 168.046809][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.062552][ T13] bridge_slave_0: left allmulticast mode [ 168.065862][ T13] bridge_slave_0: left promiscuous mode [ 168.069820][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.376677][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.383614][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.389448][ T13] bond0 (unregistering): Released all slaves [ 168.413249][ T4664] Bluetooth: hci0: command tx timeout [ 168.457182][ T13] hsr_slave_0: left promiscuous mode [ 168.478014][ T13] hsr_slave_1: left promiscuous mode [ 168.482239][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.485707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.497553][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.501534][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.511856][ T13] veth1_macvtap: left promiscuous mode [ 168.514368][ T13] veth0_macvtap: left promiscuous mode [ 168.516871][ T13] veth1_vlan: left promiscuous mode [ 168.519191][ T13] veth0_vlan: left promiscuous mode [ 168.735294][ T13] team0 (unregistering): Port device team_slave_1 removed [ 168.751823][ T13] team0 (unregistering): Port device team_slave_0 removed [ 169.208117][ T5677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.237126][ T5677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.256582][ T5677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.275894][ T5677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.573146][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.600009][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.618869][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.622295][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.665210][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.668346][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.734915][ T5677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.992626][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.035614][ T5677] veth0_vlan: entered promiscuous mode [ 170.046716][ T5677] veth1_vlan: entered promiscuous mode [ 170.076009][ T5677] veth0_macvtap: entered promiscuous mode [ 170.085199][ T5677] veth1_macvtap: entered promiscuous mode [ 170.105862][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.117933][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.128408][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.139039][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.155309][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.159496][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.239896][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.256740][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.288226][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.293636][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.364070][ T5733] ------------[ cut here ]------------ [ 170.366892][ T5733] UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2173:30 [ 170.370412][ T5733] shift exponent 235 is too large for 64-bit type 'unsigned long' [ 170.375361][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 170.375384][ T5733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.375392][ T5733] Call Trace: [ 170.375436][ T5733] [ 170.375442][ T5733] dump_stack_lvl+0xe8/0x150 [ 170.375561][ T5733] ubsan_epilogue+0xa/0x30 [ 170.375574][ T5733] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 170.375638][ T5733] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 170.375697][ T5733] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 170.375722][ T5733] ? ieee80211_select_queue_80211+0x241/0x380 [ 170.375738][ T5733] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 170.375763][ T5733] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 170.375780][ T5733] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 170.375802][ T5733] dev_hard_start_xmit+0x2d8/0x870 [ 170.375832][ T5733] __dev_queue_xmit+0x16d1/0x3890 [ 170.375853][ T5733] ? __dev_queue_xmit+0x277/0x3890 [ 170.375874][ T5733] ? _copy_from_iter+0x21b/0x1670 [ 170.375889][ T5733] ? __pfx___dev_queue_xmit+0x10/0x10 [ 170.375904][ T5733] ? sock_alloc_send_pskb+0x896/0x990 [ 170.375926][ T5733] ? __pfx__copy_from_iter+0x10/0x10 [ 170.375979][ T5733] ? packet_parse_headers+0x4c9/0x790 [ 170.375997][ T5733] ? packet_parse_headers+0x575/0x790 [ 170.376015][ T5733] ? __pfx_packet_parse_headers+0x10/0x10 [ 170.376034][ T5733] ? packet_xmit+0x68/0x320 [ 170.376052][ T5733] packet_sendmsg+0x3eb6/0x50f0 [ 170.376081][ T5733] ? __lock_acquire+0x6b5/0x2cf0 [ 170.376109][ T5733] ? aa_sk_perm+0x6d5/0x900 [ 170.376140][ T5733] ? __pfx_packet_sendmsg+0x10/0x10 [ 170.376160][ T5733] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 170.376179][ T5733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.376194][ T5733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.376213][ T5733] ? __pfx_packet_sendmsg+0x10/0x10 [ 170.376226][ T5733] __sys_sendto+0x672/0x710 [ 170.376245][ T5733] ? __pfx___sys_sendto+0x10/0x10 [ 170.376257][ T5733] ? do_futex+0x395/0x420 [ 170.376293][ T5733] ? rcu_is_watching+0x15/0xb0 [ 170.376314][ T5733] __x64_sys_sendto+0xde/0x100 [ 170.376326][ T5733] do_syscall_64+0x14d/0xf80 [ 170.376339][ T5733] ? trace_irq_disable+0x3b/0x150 [ 170.376351][ T5733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.376360][ T5733] ? clear_bhb_loop+0x40/0x90 [ 170.376369][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.376377][ T5733] RIP: 0033:0x7f5577b9bf79 [ 170.376389][ T5733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.376398][ T5733] RSP: 002b:00007f5578970028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.376412][ T5733] RAX: ffffffffffffffda RBX: 00007f5577e15fa0 RCX: 00007f5577b9bf79 [ 170.376421][ T5733] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 170.376428][ T5733] RBP: 00007f5577c327e0 R08: 0000200000000380 R09: 0000000000000014 [ 170.376435][ T5733] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.376442][ T5733] R13: 00007f5577e16038 R14: 00007f5577e15fa0 R15: 00007fff1e0bcc48 [ 170.376461][ T5733] [ 170.376522][ T5733] ---[ end trace ]--- [ 170.528693][ T5733] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 170.532864][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 170.537143][ T5733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.542989][ T5733] Call Trace: [ 170.545194][ T5733] [ 170.546517][ T5733] vpanic+0x56c/0xa60 [ 170.548293][ T5733] ? __pfx_vpanic+0x10/0x10 [ 170.550342][ T5733] ? irqentry_exit+0x59e/0x620 [ 170.552516][ T5733] panic+0xc5/0xd0 [ 170.554319][ T5733] ? __pfx_panic+0x10/0x10 [ 170.557360][ T5733] ? __pfx__printk+0x10/0x10 [ 170.560685][ T5733] check_panic_on_warn+0x89/0xb0 [ 170.563528][ T5733] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 170.566733][ T5733] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 170.569876][ T5733] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 170.573045][ T5733] ? ieee80211_select_queue_80211+0x241/0x380 [ 170.576259][ T5733] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 170.579399][ T5733] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 170.582257][ T5733] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 170.585133][ T5733] dev_hard_start_xmit+0x2d8/0x870 [ 170.587592][ T5733] __dev_queue_xmit+0x16d1/0x3890 [ 170.590158][ T5733] ? __dev_queue_xmit+0x277/0x3890 [ 170.592866][ T5733] ? _copy_from_iter+0x21b/0x1670 [ 170.595386][ T5733] ? __pfx___dev_queue_xmit+0x10/0x10 [ 170.597912][ T5733] ? sock_alloc_send_pskb+0x896/0x990 [ 170.600517][ T5733] ? __pfx__copy_from_iter+0x10/0x10 [ 170.602894][ T5733] ? packet_parse_headers+0x4c9/0x790 [ 170.605432][ T5733] ? packet_parse_headers+0x575/0x790 [ 170.609003][ T5733] ? __pfx_packet_parse_headers+0x10/0x10 [ 170.612246][ T5733] ? packet_xmit+0x68/0x320 [ 170.614305][ T5733] packet_sendmsg+0x3eb6/0x50f0 [ 170.616607][ T5733] ? __lock_acquire+0x6b5/0x2cf0 [ 170.618792][ T5733] ? aa_sk_perm+0x6d5/0x900 [ 170.620925][ T5733] ? __pfx_packet_sendmsg+0x10/0x10 [ 170.623190][ T5733] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 170.626790][ T5733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.629914][ T5733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.632722][ T5733] ? __pfx_packet_sendmsg+0x10/0x10 [ 170.635083][ T5733] __sys_sendto+0x672/0x710 [ 170.637095][ T5733] ? __pfx___sys_sendto+0x10/0x10 [ 170.639355][ T5733] ? do_futex+0x395/0x420 [ 170.641359][ T5733] ? rcu_is_watching+0x15/0xb0 [ 170.643539][ T5733] __x64_sys_sendto+0xde/0x100 [ 170.645766][ T5733] do_syscall_64+0x14d/0xf80 [ 170.648070][ T5733] ? trace_irq_disable+0x3b/0x150 [ 170.650590][ T5733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.653381][ T5733] ? clear_bhb_loop+0x40/0x90 [ 170.655590][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.658308][ T5733] RIP: 0033:0x7f5577b9bf79 [ 170.660435][ T5733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.669021][ T5733] RSP: 002b:00007f5578970028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.673297][ T5733] RAX: ffffffffffffffda RBX: 00007f5577e15fa0 RCX: 00007f5577b9bf79 [ 170.676872][ T5733] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 0000000000000007 [ 170.681126][ T5733] RBP: 00007f5577c327e0 R08: 0000200000000380 R09: 0000000000000014 [ 170.685914][ T5733] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.689707][ T5733] R13: 00007f5577e16038 R14: 00007f5577e15fa0 R15: 00007fff1e0bcc48 [ 170.693355][ T5733] [ 170.695146][ T5733] Kernel Offset: disabled [ 170.697148][ T5733] Rebooting in 86400 seconds..