[ 86.960806][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts.
2026/02/26 02:25:42 ignoring optional flag "sandbox_arg"="0"
2026/02/26 02:25:42 ignoring optional flag "type"="gce"
2026/02/26 02:25:42 parsed 1 programs
2026/02/26 02:25:42 executed programs: 0
[ 88.371496][ T6010] cgroup: Unknown subsys name 'net'
[ 88.379876][ T6010] cgroup: Unknown subsys name 'cpuset'
[ 88.387343][ T6010] cgroup: Unknown subsys name 'rlimit'
[ 89.441311][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.449514][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.457878][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.465972][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.474319][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.585658][ T6017] chnl_net:caif_netlink_parms(): no params data found
[ 89.648798][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.656299][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.663946][ T6017] bridge_slave_0: entered allmulticast mode
[ 89.671715][ T6017] bridge_slave_0: entered promiscuous mode
[ 89.679576][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.687069][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.695476][ T6017] bridge_slave_1: entered allmulticast mode
[ 89.702326][ T6017] bridge_slave_1: entered promiscuous mode
[ 89.730374][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.743899][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.774843][ T6017] team0: Port device team_slave_0 added
[ 89.782656][ T6017] team0: Port device team_slave_1 added
[ 89.807204][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.815561][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.842843][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.856335][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.865044][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.892470][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.928261][ T6017] hsr_slave_0: entered promiscuous mode
[ 89.935115][ T6017] hsr_slave_1: entered promiscuous mode
[ 90.033806][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.040971][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.048475][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.055711][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.100462][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.116071][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.123905][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.137762][ T6017] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.150549][ T151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.157956][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.172294][ T151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.179625][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.240191][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.528917][ T6017] veth0_vlan: entered promiscuous mode
[ 90.540635][ T6017] veth1_vlan: entered promiscuous mode
[ 90.568083][ T6017] veth0_macvtap: entered promiscuous mode
[ 90.578905][ T6017] veth1_macvtap: entered promiscuous mode
[ 90.595219][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.607646][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.726571][ T6044] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 91.515412][ T52] Bluetooth: hci0: command tx timeout
[ 91.598856][ T6048] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 92.450408][ T6051] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 93.302139][ T6054] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 93.594358][ T52] Bluetooth: hci0: command tx timeout
2026/02/26 02:25:48 executed programs: 4
[ 94.156465][ T6058] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 95.011921][ T6061] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 95.674313][ T52] Bluetooth: hci0: command tx timeout
[ 95.863443][ T6065] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 96.715931][ T6069] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 97.574738][ T6073] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 97.754434][ T52] Bluetooth: hci0: command tx timeout
[ 98.430296][ T6077] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
2026/02/26 02:25:53 executed programs: 10
[ 99.283026][ T6080] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 100.138989][ T6084] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 100.985292][ T6087] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 101.833960][ T6091] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 102.681833][ T6094] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 103.534968][ T6098] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
2026/02/26 02:25:58 executed programs: 16
[ 104.387129][ T6101] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 105.233907][ T6104] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 106.081175][ T6108] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 106.102013][ T6108] bond1: entered promiscuous mode
[ 106.107833][ T6108] 8021q: adding VLAN 0 to HW filter on device bond1
[ 106.122666][ T6108] 8021q: adding VLAN 0 to HW filter on device bond1
[ 106.130001][ T6108] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[ 106.140474][ T6108] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[ 106.151867][ T6108] bond1: (slave gre1): making interface the new active one
[ 106.159805][ T6108] gre1: entered promiscuous mode
[ 106.166382][ T6108] bond1: (slave gre1): Enslaving as an active interface with an up link
[ 106.176939][ T6108] ------------[ cut here ]------------
[ 106.182707][ T6108] kernel BUG at net/core/skbuff.c:2306!
[ 106.191058][ T12] ------------[ cut here ]------------
[ 106.197463][ T12] kernel BUG at net/core/skbuff.c:2306!
[ 106.204041][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 106.210765][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.220394][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 106.231316][ T12] Workqueue: bond1 bond_resend_igmp_join_requests_delayed
[ 106.238979][ T12] RIP: 0010:pskb_expand_head+0x12da/0x1320
[ 106.245236][ T12] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 b4 ba f8 e9 d3 f3 ff ff e8 87 8f 50 f8 90 <0f> 0b e8 7f 8f 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[ 106.266123][ T12] RSP: 0018:ffffc90000117470 EFLAGS: 00010293
[ 106.272541][ T12] RAX: ffffffff8974fc29 RBX: ffff888076824280 RCX: ffff88801dab8000
[ 106.280769][ T12] RDX: 0000000000000000 RSI: 0000000093ca7030 RDI: 0000000000000000
[ 106.288994][ T12] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000004c
[ 106.297489][ T12] R10: dffffc0000000000 R11: ffffffff8a32d7b0 R12: dffffc0000000000
[ 106.306008][ T12] R13: 0000000000000820 R14: 0000000093ca7030 R15: 00000000000006c0
[ 106.315621][ T12] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000
[ 106.324627][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 106.331318][ T12] CR2: 00007f3075c2dd58 CR3: 000000007d5b4000 CR4: 00000000003526f0
[ 106.340159][ T12] Call Trace:
[ 106.343709][ T12]
[ 106.347242][ T12] ? neigh_connected_output+0x1ea/0x460
[ 106.353114][ T12] ipgre_header+0xd5/0x350
[ 106.357896][ T12] ? __pfx_ipgre_header+0x10/0x10
[ 106.363164][ T12] neigh_connected_output+0x286/0x460
[ 106.368743][ T12] ? ip6_output+0x126/0x550
[ 106.373521][ T12] ip6_output+0x340/0x550
[ 106.378208][ T12] NF_HOOK+0xa2/0x3a0
[ 106.382199][ T12] ? NF_HOOK+0xf9/0x3a0
[ 106.386432][ T12] ? __pfx_NF_HOOK+0x10/0x10
[ 106.391184][ T12] ? __pfx_dst_output+0x10/0x10
[ 106.396328][ T12] ? lockdep_hardirqs_on+0x7a/0x110
[ 106.401698][ T12] ? __local_bh_enable_ip+0xd0/0x130
[ 106.407148][ T12] ? icmp6_dst_alloc+0x3a6/0x440
[ 106.412157][ T12] mld_sendpack+0x8b4/0xe40
[ 106.416823][ T12] ? mld_sendpack+0x213/0xe40
[ 106.421685][ T12] ? __pfx_mld_sendpack+0x10/0x10
[ 106.427078][ T12] ? mld_send_report+0xe0/0x380
[ 106.432482][ T12] ipv6_mc_netdev_event+0x1b7/0x5a0
[ 106.438124][ T12] notifier_call_chain+0x1be/0x400
[ 106.443402][ T12] call_netdevice_notifiers+0x90/0xd0
[ 106.449201][ T12] ? __pfx_call_netdevice_notifiers+0x10/0x10
[ 106.455450][ T12] bond_resend_igmp_join_requests_delayed+0x61/0x170
[ 106.462201][ T12] ? process_scheduled_works+0xa25/0x1830
[ 106.468265][ T12] process_scheduled_works+0xb02/0x1830
[ 106.473987][ T12] ? __pfx_process_scheduled_works+0x10/0x10
[ 106.479953][ T12] ? assign_work+0x3d5/0x5e0
[ 106.484647][ T12] worker_thread+0xa50/0xfc0
[ 106.489576][ T12] kthread+0x388/0x470
[ 106.493733][ T12] ? __pfx_worker_thread+0x10/0x10
[ 106.499210][ T12] ? __pfx_kthread+0x10/0x10
[ 106.504163][ T12] ret_from_fork+0x51e/0xb90
[ 106.508911][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 106.514102][ T12] ? __switch_to+0xc7d/0x1450
[ 106.518869][ T12] ? __pfx_kthread+0x10/0x10
[ 106.523622][ T12] ret_from_fork_asm+0x1a/0x30
[ 106.528578][ T12]
[ 106.531603][ T12] Modules linked in:
[ 106.535672][ T6108] Oops: invalid opcode: 0000 [#2] SMP KASAN PTI
[ 106.535794][ T12] ---[ end trace 0000000000000000 ]---
[ 106.542119][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz-executor.0 Tainted: G D syzkaller #0 PREEMPT(full)
[ 106.549423][ T12] RIP: 0010:pskb_expand_head+0x12da/0x1320
[ 106.559083][ T6108] Tainted: [D]=DIE
[ 106.559093][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 106.559102][ T6108] RIP: 0010:pskb_expand_head+0x12da/0x1320
[ 106.559128][ T6108] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 b4 ba f8 e9 d3 f3 ff ff e8 87 8f 50 f8 90 <0f> 0b e8 7f 8f 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[ 106.559142][ T6108] RSP: 0018:ffffc90004a9f590 EFLAGS: 00010293
[ 106.565082][ T12] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 b4 ba f8 e9 d3 f3 ff ff e8 87 8f 50 f8 90 <0f> 0b e8 7f 8f 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[ 106.568885][ T6108]
[ 106.568898][ T6108] RAX: ffffffff8974fc29 RBX: ffff88806427c640 RCX: ffff888031ffdac0
[ 106.568913][ T6108] RDX: 0000000000000000 RSI: 0000000093ca7030 RDI: 0000000000000000
[ 106.568923][ T6108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 106.568932][ T6108] R10: dffffc0000000000 R11: ffffffff8a32d7b0 R12: dffffc0000000000
[ 106.579612][ T12] RSP: 0018:ffffc90000117470 EFLAGS: 00010293
[ 106.585287][ T6108] R13: 0000000000000820 R14: 0000000093ca7030 R15: 0000000000000180
[ 106.585303][ T6108] FS: 00007f3075c4e6c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000
[ 106.585316][ T6108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 106.585326][ T6108] CR2: 000055c476b64908 CR3: 000000006496c000 CR4: 00000000003526f0
[ 106.585341][ T6108] Call Trace:
[ 106.585349][ T6108]
[ 106.585359][ T6108] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 106.585390][ T6108] ipgre_header+0xd5/0x350
[ 106.585413][ T6108] packet_sendmsg+0x361f/0x50f0
[ 106.585440][ T6108] ? finish_task_switch+0x240/0x920
[ 106.585466][ T6108] ? trace_sched_exit_tp+0x3a/0x150
[ 106.585494][ T6108] ? aa_sk_perm+0x6d5/0x900
[ 106.585512][ T6108] ? __pfx_packet_sendmsg+0x10/0x10
[ 106.585537][ T6108] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 106.585561][ T6108] ? aa_sock_msg_perm+0xf1/0x1b0
[ 106.585581][ T6108] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 106.585598][ T6108] ? __pfx_packet_sendmsg+0x10/0x10
[ 106.585618][ T6108] ____sys_sendmsg+0xa68/0xad0
[ 106.779486][ T6108] ? futex_unqueue+0x211/0x240
[ 106.784335][ T6108] ? __pfx_____sys_sendmsg+0x10/0x10
[ 106.789704][ T6108] ? import_iovec+0x73/0xa0
[ 106.794320][ T6108] ___sys_sendmsg+0x2a5/0x360
[ 106.799036][ T6108] ? __pfx____sys_sendmsg+0x10/0x10
[ 106.804316][ T6108] ? futex_wait+0x29a/0x380
[ 106.809259][ T6108] ? __fget_files+0x2a/0x420
[ 106.813923][ T6108] ? __fget_files+0x3a0/0x420
[ 106.818767][ T6108] __x64_sys_sendmsg+0x1bd/0x2a0
[ 106.823792][ T6108] ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 106.829682][ T6108] ? rcu_is_watching+0x15/0xb0
[ 106.834959][ T6108] do_syscall_64+0x14d/0xf80
[ 106.839817][ T6108] ? trace_irq_disable+0x3b/0x150
[ 106.844931][ T6108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.851425][ T6108] ? clear_bhb_loop+0x40/0x90
[ 106.856803][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.863212][ T6108] RIP: 0033:0x7f3074a698a9
[ 106.867896][ T6108] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 106.888128][ T6108] RSP: 002b:00007f3075c4e0b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 106.896998][ T6108] RAX: ffffffffffffffda RBX: 00007f3074b8c030 RCX: 00007f3074a698a9
[ 106.905519][ T6108] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 106.913659][ T6108] RBP: 00007f3074adef7c R08: 0000000000000000 R09: 0000000000000000
[ 106.922055][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.930206][ T6108] R13: 000000000000006e R14: 00007f3074b8c030 R15: 00007ffc7a974638
[ 106.938581][ T6108]
[ 106.941689][ T6108] Modules linked in:
[ 106.945815][ T6108] ---[ end trace 0000000000000000 ]---
[ 106.952204][ T12]
[ 106.954843][ T12] RAX: ffffffff8974fc29 RBX: ffff888076824280 RCX: ffff88801dab8000
[ 106.955027][ T6108] RIP: 0010:pskb_expand_head+0x12da/0x1320
[ 106.962985][ T12] RDX: 0000000000000000 RSI: 0000000093ca7030 RDI: 0000000000000000
[ 106.962998][ T12] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000004c
[ 106.963008][ T12] R10: dffffc0000000000 R11: ffffffff8a32d7b0 R12: dffffc0000000000
[ 106.969087][ T6108] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 b1 b4 ba f8 e9 d3 f3 ff ff e8 87 8f 50 f8 90 <0f> 0b e8 7f 8f 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[ 106.979150][ T12] R13: 0000000000000820 R14: 0000000093ca7030 R15: 00000000000006c0
[ 106.986195][ T6108] RSP: 0018:ffffc90000117470 EFLAGS: 00010293
[ 107.002554][ T12] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000
[ 107.014664][ T6108]
[ 107.023234][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.029411][ T6108] RAX: ffffffff8974fc29 RBX: ffff888076824280 RCX: ffff88801dab8000
[ 107.039010][ T12] CR2: 000055c476b64908 CR3: 00000000786da000 CR4: 00000000003526f0
[ 107.041033][ T6108] RDX: 0000000000000000 RSI: 0000000093ca7030 RDI: 0000000000000000
[ 107.048050][ T12] Kernel panic - not syncing: Fatal exception
[ 107.056655][ T12] Kernel Offset: disabled