[ 143.639755][ T14] veth1_macvtap: left promiscuous mode [ 143.641968][ T14] veth0_macvtap: left promiscuous mode [ 143.645730][ T14] veth1_vlan: left promiscuous mode [ 143.647264][ T14] veth0_vlan: left promiscuous mode [ 144.041296][ T14] team0 (unregistering): Port device team_slave_1 removed [ 144.064206][ T14] team0 (unregistering): Port device team_slave_0 removed [ 144.268836][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 145.082916][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.820669][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.579392][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. 2026/09/04 06:38:19 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 170.126249][ T5981] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 173.651943][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.662007][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.701440][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.701509][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.398603][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.401509][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.417444][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.428164][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.430544][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.835276][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.835670][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.836751][ T6047] bridge_slave_0: entered allmulticast mode [ 177.843963][ T6047] bridge_slave_0: entered promiscuous mode [ 177.858089][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.858637][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.859131][ T6047] bridge_slave_1: entered allmulticast mode [ 177.866081][ T6047] bridge_slave_1: entered promiscuous mode [ 177.929033][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.941332][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.977891][ T6047] team0: Port device team_slave_0 added [ 177.985936][ T6047] team0: Port device team_slave_1 added [ 178.016903][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.016946][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.016989][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.025332][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.025358][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.025402][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.129660][ T6047] hsr_slave_0: entered promiscuous mode [ 178.137613][ T6047] hsr_slave_1: entered promiscuous mode [ 178.788938][ T6047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.807007][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.815938][ T6047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.829619][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.838806][ T6047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.857090][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.865481][ T6047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.882725][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.017622][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.059846][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.078730][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.078877][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.106932][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.107241][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.780872][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.865719][ T6047] veth0_vlan: entered promiscuous mode [ 179.883580][ T6047] veth1_vlan: entered promiscuous mode [ 179.954915][ T6047] veth0_macvtap: entered promiscuous mode [ 179.975988][ T6047] veth1_macvtap: entered promiscuous mode [ 180.003855][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.025013][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.053609][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.085375][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.085458][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.085531][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.415865][ T140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.207332][ T140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.957966][ T140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.509985][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.854916][ T140] bridge_slave_1: left allmulticast mode [ 182.863688][ T140] bridge_slave_1: left promiscuous mode [ 182.872760][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.889561][ T140] bridge_slave_0: left allmulticast mode [ 182.889619][ T140] bridge_slave_0: left promiscuous mode [ 182.889998][ T140] bridge0: port 1(bridge_slave_0) entered disabled state 2026/09/04 06:38:40 executed programs: 0 [ 183.281159][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.297179][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.307760][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.316790][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.326054][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.475386][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.489460][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.501768][ T140] bond0 (unregistering): Released all slaves [ 183.664071][ T140] hsr_slave_0: left promiscuous mode [ 183.669965][ T140] hsr_slave_1: left promiscuous mode [ 183.677348][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.677380][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.678592][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.678617][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.724875][ T140] veth1_macvtap: left promiscuous mode [ 183.724959][ T140] veth0_macvtap: left promiscuous mode [ 183.725437][ T140] veth1_vlan: left promiscuous mode [ 183.725666][ T140] veth0_vlan: left promiscuous mode [ 184.125598][ T140] team0 (unregistering): Port device team_slave_1 removed [ 184.157505][ T140] team0 (unregistering): Port device team_slave_0 removed [ 185.402581][ T4935] Bluetooth: hci0: command tx timeout [ 185.460190][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.472196][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.481321][ T6175] bridge_slave_0: entered allmulticast mode [ 185.495743][ T6175] bridge_slave_0: entered promiscuous mode [ 185.509036][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.510778][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.527209][ T6175] bridge_slave_1: entered allmulticast mode [ 185.540488][ T6175] bridge_slave_1: entered promiscuous mode [ 185.624251][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.638588][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.698437][ T6175] team0: Port device team_slave_0 added [ 185.710704][ T6175] team0: Port device team_slave_1 added [ 185.752115][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.759538][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.786671][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.800915][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.808542][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.836950][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.914507][ T6175] hsr_slave_0: entered promiscuous mode [ 185.925992][ T6175] hsr_slave_1: entered promiscuous mode [ 186.575035][ T6175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.588929][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.598728][ T6175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.611173][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.621890][ T6175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.636543][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.646834][ T6175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.658993][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.796316][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.826958][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.848632][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.848909][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.878482][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.878784][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.482658][ T4935] Bluetooth: hci0: command tx timeout [ 187.674947][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.781724][ T6175] veth0_vlan: entered promiscuous mode [ 187.829122][ T6175] veth1_vlan: entered promiscuous mode [ 187.886697][ T6175] veth0_macvtap: entered promiscuous mode [ 187.901292][ T6175] veth1_macvtap: entered promiscuous mode [ 187.936768][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.961451][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.053947][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.078282][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.078383][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.097016][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.147378][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.147454][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.235187][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.235249][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/04 06:38:45 executed programs: 2 [ 188.339715][ T6292] ------------[ cut here ]------------ [ 188.351472][ T6292] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1887:13 [ 188.364647][ T6292] shift exponent 64 is too large for 32-bit type 'int' [ 188.375752][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 188.375790][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.375816][ T6292] Call Trace: [ 188.375826][ T6292] [ 188.375851][ T6292] dump_stack_lvl+0x100/0x190 [ 188.375897][ T6292] ubsan_epilogue+0xa/0x30 [ 188.375927][ T6292] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 188.375977][ T6292] sg_build_indirect.cold+0x1b/0x20 [ 188.376008][ T6292] ? do_raw ** replaying previous printk message ** [ 188.376008][ T6292] ? do_raw_write_lock+0x11e/0x260 [ 188.376047][ T6292] sg_build_reserve+0xc8/0x180 [ 188.376078][ T6292] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.376122][ T6292] sg_open+0xd3c/0x1a70 [ 188.376166][ T6292] ? __pfx_sg_open+0x10/0x10 [ 188.376199][ T6292] ? lock_acquire+0x1d1/0x380 [ 188.376243][ T6292] ? do_raw_spin_lock+0x128/0x260 [ 188.376291][ T6292] ? find_held_lock+0x2b/0x80 [ 188.376317][ T6292] ? chrdev_open+0x589/0x6a0 [ 188.376348][ T6292] ? chrdev_open+0x589/0x6a0 [ 188.376382][ T6292] ? __pfx_sg_open+0x10/0x10 [ 188.376412][ T6292] chrdev_open+0x234/0x6a0 [ 188.376445][ T6292] ? __pfx_chrdev_open+0x10/0x10 [ 188.376610][ T6292] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 188.376667][ T6292] do_dentry_open+0x6ab/0x14d0 [ 188.376705][ T6292] ? __pfx_chrdev_open+0x10/0x10 [ 188.376752][ T6292] vfs_open+0x82/0x3f0 [ 188.376802][ T6292] path_openat+0x19fa/0x2440 [ 188.376848][ T6292] ? __pfx_path_openat+0x10/0x10 [ 188.376908][ T6292] do_file_open+0x20e/0x430 [ 188.376950][ T6292] ? __pfx_do_file_open+0x10/0x10 [ 188.377022][ T6292] ? _raw_spin_unlock+0x28/0x50 [ 188.377061][ T6292] ? alloc_fd+0x471/0x7a0 [ 188.377245][ T6292] do_sys_openat2+0x10f/0x1e0 [ 188.377291][ T6292] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.377332][ T6292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.377385][ T6292] __x64_sys_openat+0x12d/0x210 [ 188.377430][ T6292] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.377490][ T6292] do_syscall_64+0x121/0x770 [ 188.377538][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.377575][ T6292] RIP: 0033:0x7f609599c819 [ 188.377632][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.377665][ T6292] RSP: 002b:00007f6096927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.377717][ T6292] RAX: ffffffffffffffda RBX: 00007f6095c15fa0 RCX: 00007f609599c819 [ 188.377851][ T6292] RDX: 00000000000c0482 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 188.377875][ T6292] RBP: 00007f6095a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 188.377893][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.377910][ T6292] R13: 00007f6095c16038 R14: 00007f6095c15fa0 R15: 00007fffbad15518 [ 188.378089][ T6292] [ 188.461553][ T6292] ---[ end trace ]--- [ 188.461662][ T6292] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 188.806412][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 188.822072][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.835614][ T6292] Call Trace: [ 188.841527][ T6292] [ 188.846449][ T6292] dump_stack_lvl+0x100/0x190 [ 188.855387][ T6292] vpanic+0x553/0x970 [ 188.862545][ T6292] ? __pfx_vpanic+0x10/0x10 [ 188.872149][ T6292] ? irqentry_exit+0x24d/0xa10 [ 188.880790][ T6292] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.887466][ T6292] ? irqentry_exit+0x24d/0xa10 [ 188.895215][ T6292] panic+0xd1/0xe0 [ 188.900358][ T6292] ? __pfx_panic+0x10/0x10 [ 188.905714][ T6292] ? dump_stack_lvl+0x176/0x190 [ 188.911355][ T6292] check_panic_on_warn.cold+0x19/0x34 [ 188.918819][ T6292] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 188.929004][ T6292] sg_build_indirect.cold+0x1b/0x20 [ 188.935094][ T6292] ? do_raw_write_lock+0x11e/0x260 [ 188.940737][ T6292] sg_build_reserve+0xc8/0x180 [ 188.945876][ T6292] ? lockdep_hardirqs_on+0x7d/0x110 [ 188.953421][ T6292] sg_open+0xd3c/0x1a70 [ 188.958587][ T6292] ? __pfx_sg_open+0x10/0x10 [ 188.965803][ T6292] ? lock_acquire+0x1d1/0x380 [ 188.972045][ T6292] ? do_raw_spin_lock+0x128/0x260 [ 188.978065][ T6292] ? find_held_lock+0x2b/0x80 [ 188.983361][ T6292] ? chrdev_open+0x589/0x6a0 [ 188.988588][ T6292] ? chrdev_open+0x589/0x6a0 [ 188.994490][ T6292] ? __pfx_sg_open+0x10/0x10 [ 189.000168][ T6292] chrdev_open+0x234/0x6a0 [ 189.005484][ T6292] ? __pfx_chrdev_open+0x10/0x10 [ 189.011839][ T6292] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 189.019258][ T6292] do_dentry_open+0x6ab/0x14d0 [ 189.025952][ T6292] ? __pfx_chrdev_open+0x10/0x10 [ 189.036328][ T6292] vfs_open+0x82/0x3f0 [ 189.041476][ T6292] path_openat+0x19fa/0x2440 [ 189.048720][ T6292] ? __pfx_path_openat+0x10/0x10 [ 189.056237][ T6292] do_file_open+0x20e/0x430 [ 189.063677][ T6292] ? __pfx_do_file_open+0x10/0x10 [ 189.069638][ T6292] ? _raw_spin_unlock+0x28/0x50 [ 189.076383][ T6292] ? alloc_fd+0x471/0x7a0 [ 189.083908][ T6292] do_sys_openat2+0x10f/0x1e0 [ 189.090719][ T6292] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.099895][ T6292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.108671][ T6292] __x64_sys_openat+0x12d/0x210 [ 189.114304][ T6292] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.122088][ T6292] do_syscall_64+0x121/0x770 [ 189.130929][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.138993][ T6292] RIP: 0033:0x7f609599c819 [ 189.143753][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.166851][ T6292] RSP: 002b:00007f6096927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.176627][ T6292] RAX: ffffffffffffffda RBX: 00007f6095c15fa0 RCX: 00007f609599c819 [ 189.185263][ T6292] RDX: 00000000000c0482 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 189.195299][ T6292] RBP: 00007f6095a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 189.203947][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.213701][ T6292] R13: 00007f6095c16038 R14: 00007f6095c15fa0 R15: 00007fffbad15518 [ 189.224300][ T6292] [ 189.228911][ T6292] Kernel Offset: disabled [ 189.236293][ T6292] Rebooting in 86400 seconds..