Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts.
2025/07/18 16:08:24 ignoring optional flag "sandboxArg"="0"
2025/07/18 16:08:26 parsed 1 programs
[ 159.614511][ T6292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 163.810779][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 163.822781][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 163.837692][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 163.849043][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 163.857260][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 165.160673][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.170121][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 165.202560][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.211377][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 166.020551][ T6358] chnl_net:caif_netlink_parms(): no params data found
[ 166.167113][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 166.175402][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 166.183501][ T6358] bridge_slave_0: entered allmulticast mode
[ 166.191835][ T6358] bridge_slave_0: entered promiscuous mode
[ 166.201959][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 166.209366][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 166.216819][ T6358] bridge_slave_1: entered allmulticast mode
[ 166.224533][ T6358] bridge_slave_1: entered promiscuous mode
[ 166.264037][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 166.277849][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 166.320296][ T6358] team0: Port device team_slave_0 added
[ 166.333511][ T6358] team0: Port device team_slave_1 added
[ 166.370365][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 166.378520][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.404767][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 166.417424][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 166.424435][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.450929][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 166.503704][ T6358] hsr_slave_0: entered promiscuous mode
[ 166.510283][ T6358] hsr_slave_1: entered promiscuous mode
[ 167.258099][ T6358] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 167.271448][ T6358] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 167.285160][ T6358] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 167.298955][ T6358] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 167.476476][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 167.532000][ T6358] 8021q: adding VLAN 0 to HW filter on device team0
[ 167.563908][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.571440][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 167.637072][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.644401][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 168.076494][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 168.151613][ T6358] veth0_vlan: entered promiscuous mode
[ 168.167483][ T6358] veth1_vlan: entered promiscuous mode
[ 168.210338][ T6358] veth0_macvtap: entered promiscuous mode
[ 168.225432][ T6358] veth1_macvtap: entered promiscuous mode
[ 168.262379][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 168.282196][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 168.301556][ T6358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 168.313869][ T6358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 168.323869][ T6358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 168.334215][ T6358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 168.594483][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 168.701147][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 168.794727][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 169.618043][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/07/18 16:08:43 executed programs: 0
[ 169.990362][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 170.001914][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 170.013236][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 170.022136][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 170.030620][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 170.329016][ T6450] chnl_net:caif_netlink_parms(): no params data found
[ 170.491618][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.499123][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state
[ 170.508920][ T6450] bridge_slave_0: entered allmulticast mode
[ 170.517346][ T6450] bridge_slave_0: entered promiscuous mode
[ 170.527112][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.534471][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state
[ 170.542329][ T6450] bridge_slave_1: entered allmulticast mode
[ 170.550857][ T6450] bridge_slave_1: entered promiscuous mode
[ 170.599857][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 170.613737][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 170.667682][ T6450] team0: Port device team_slave_0 added
[ 170.680661][ T6450] team0: Port device team_slave_1 added
[ 170.734352][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 170.743462][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.772914][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 170.789219][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 170.796399][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.826475][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 170.904728][ T6450] hsr_slave_0: entered promiscuous mode
[ 170.912723][ T6450] hsr_slave_1: entered promiscuous mode
[ 170.921100][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 170.931262][ T6450] Cannot create hsr debugfs directory
[ 171.137926][ T49] bridge_slave_1: left allmulticast mode
[ 171.144503][ T49] bridge_slave_1: left promiscuous mode
[ 171.151988][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 171.163043][ T49] bridge_slave_0: left allmulticast mode
[ 171.170124][ T49] bridge_slave_0: left promiscuous mode
[ 171.176760][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 171.616515][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 171.632829][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 171.644931][ T49] bond0 (unregistering): Released all slaves
[ 171.779493][ T49] hsr_slave_0: left promiscuous mode
[ 171.787987][ T49] hsr_slave_1: left promiscuous mode
[ 171.794378][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 171.803407][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 171.815664][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 171.823137][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 171.847942][ T49] veth1_macvtap: left promiscuous mode
[ 171.853735][ T49] veth0_macvtap: left promiscuous mode
[ 171.860976][ T49] veth1_vlan: left promiscuous mode
[ 171.867493][ T49] veth0_vlan: left promiscuous mode
[ 172.105835][ T5169] Bluetooth: hci0: command tx timeout
[ 172.398429][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 172.432550][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 173.168683][ T6450] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 173.207564][ T6450] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 173.222215][ T6450] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 173.235056][ T6450] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 173.560530][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0
[ 173.626852][ T6450] 8021q: adding VLAN 0 to HW filter on device team0
[ 173.645302][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 173.652613][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 173.688400][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 173.695686][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 174.049936][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 174.110091][ T6450] veth0_vlan: entered promiscuous mode
[ 174.129605][ T6450] veth1_vlan: entered promiscuous mode
[ 174.182822][ T6450] veth0_macvtap: entered promiscuous mode
[ 174.187201][ T5169] Bluetooth: hci0: command tx timeout
[ 174.204001][ T6450] veth1_macvtap: entered promiscuous mode
[ 174.234793][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 174.255363][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 174.279898][ T6450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 174.288935][ T6450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 174.301381][ T6450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 174.310937][ T6450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 174.434103][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 174.449633][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 174.488375][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 174.502252][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 174.625081][ T6548] ------------[ cut here ]------------
[ 174.639579][ T6548] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1896:13
[ 174.647402][ T6548] shift exponent 64 is too large for 32-bit type 'int'
[ 174.654361][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full)
[ 174.654403][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 174.654427][ T6548] Call Trace:
[ 174.654437][ T6548]
[ 174.654453][ T6548] dump_stack_lvl+0x16c/0x1f0
[ 174.654490][ T6548] __ubsan_handle_shift_out_of_bounds+0x27f/0x420
[ 174.654553][ T6548] sg_build_indirect.cold+0x1b/0x20
[ 174.654614][ T6548] sg_build_reserve+0xc4/0x180
[ 174.654654][ T6548] ? lockdep_hardirqs_on+0x7c/0x110
[ 174.654707][ T6548] sg_open+0xc88/0x1a00
[ 174.654763][ T6548] ? __pfx_sg_open+0x10/0x10
[ 174.654807][ T6548] ? do_raw_spin_lock+0x12c/0x2b0
[ 174.654858][ T6548] ? find_held_lock+0x2b/0x80
[ 174.654893][ T6548] ? chrdev_open+0x58c/0x6a0
[ 174.654934][ T6548] ? __pfx_sg_open+0x10/0x10
[ 174.654976][ T6548] chrdev_open+0x231/0x6a0
[ 174.655014][ T6548] ? __pfx_chrdev_open+0x10/0x10
[ 174.655053][ T6548] ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 174.655113][ T6548] do_dentry_open+0x744/0x1c10
[ 174.655148][ T6548] ? __pfx_chrdev_open+0x10/0x10
[ 174.655192][ T6548] vfs_open+0x82/0x3f0
[ 174.655248][ T6548] path_openat+0x1de4/0x2cb0
[ 174.655294][ T6548] ? __pfx_path_openat+0x10/0x10
[ 174.655328][ T6548] ? __lock_acquire+0xb8a/0x1c90
[ 174.655376][ T6548] do_filp_open+0x20b/0x470
[ 174.655409][ T6548] ? __pfx_do_filp_open+0x10/0x10
[ 174.655473][ T6548] ? alloc_fd+0x471/0x7d0
[ 174.655538][ T6548] do_sys_openat2+0x11b/0x1d0
[ 174.655582][ T6548] ? __pfx_do_sys_openat2+0x10/0x10
[ 174.655642][ T6548] __x64_sys_openat+0x174/0x210
[ 174.655687][ T6548] ? __pfx___x64_sys_openat+0x10/0x10
[ 174.655747][ T6548] do_syscall_64+0xcd/0x490
[ 174.655782][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.655814][ T6548] RIP: 0033:0x7f4c8238cde9
[ 174.655847][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 174.655878][ T6548] RSP: 002b:00007f4c83179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 174.655907][ T6548] RAX: ffffffffffffffda RBX: 00007f4c825a5fa0 RCX: 00007f4c8238cde9
[ 174.655926][ T6548] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c
[ 174.655946][ T6548] RBP: 00007f4c8240e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 174.655964][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 174.655981][ T6548] R13: 0000000000000000 R14: 00007f4c825a5fa0 R15: 00007ffd79b92e28
[ 174.656022][ T6548]
[ 174.918462][ T6548] ---[ end trace ]---
[ 174.922632][ T6548] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 174.929899][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full)
[ 174.941855][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 174.951974][ T6548] Call Trace:
[ 174.955318][ T6548]
[ 174.958312][ T6548] dump_stack_lvl+0x3d/0x1f0
[ 174.963408][ T6548] panic+0x71c/0x800
[ 174.967410][ T6548] ? __pfx_panic+0x10/0x10
[ 174.971924][ T6548] ? __pfx__printk+0x10/0x10
[ 174.976614][ T6548] ? check_panic_on_warn+0x1f/0xb0
[ 174.981831][ T6548] check_panic_on_warn+0xab/0xb0
[ 174.986950][ T6548] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420
[ 174.993901][ T6548] sg_build_indirect.cold+0x1b/0x20
[ 174.999205][ T6548] sg_build_reserve+0xc4/0x180
[ 175.004043][ T6548] ? lockdep_hardirqs_on+0x7c/0x110
[ 175.009353][ T6548] sg_open+0xc88/0x1a00
[ 175.013694][ T6548] ? __pfx_sg_open+0x10/0x10
[ 175.018369][ T6548] ? do_raw_spin_lock+0x12c/0x2b0
[ 175.023490][ T6548] ? find_held_lock+0x2b/0x80
[ 175.028256][ T6548] ? chrdev_open+0x58c/0x6a0
[ 175.032929][ T6548] ? __pfx_sg_open+0x10/0x10
[ 175.037602][ T6548] chrdev_open+0x231/0x6a0
[ 175.042135][ T6548] ? __pfx_chrdev_open+0x10/0x10
[ 175.047168][ T6548] ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 175.054302][ T6548] do_dentry_open+0x744/0x1c10
[ 175.059259][ T6548] ? __pfx_chrdev_open+0x10/0x10
[ 175.064288][ T6548] vfs_open+0x82/0x3f0
[ 175.068444][ T6548] path_openat+0x1de4/0x2cb0
[ 175.073123][ T6548] ? __pfx_path_openat+0x10/0x10
[ 175.078135][ T6548] ? __lock_acquire+0xb8a/0x1c90
[ 175.083166][ T6548] do_filp_open+0x20b/0x470
[ 175.087734][ T6548] ? __pfx_do_filp_open+0x10/0x10
[ 175.092851][ T6548] ? alloc_fd+0x471/0x7d0
[ 175.097384][ T6548] do_sys_openat2+0x11b/0x1d0
[ 175.102115][ T6548] ? __pfx_do_sys_openat2+0x10/0x10
[ 175.107370][ T6548] __x64_sys_openat+0x174/0x210
[ 175.112377][ T6548] ? __pfx___x64_sys_openat+0x10/0x10
[ 175.118338][ T6548] do_syscall_64+0xcd/0x490
[ 175.123141][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 175.129065][ T6548] RIP: 0033:0x7f4c8238cde9
[ 175.133684][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 175.153901][ T6548] RSP: 002b:00007f4c83179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 175.162612][ T6548] RAX: ffffffffffffffda RBX: 00007f4c825a5fa0 RCX: 00007f4c8238cde9
[ 175.170636][ T6548] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c
[ 175.178662][ T6548] RBP: 00007f4c8240e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 175.186677][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 175.194705][ T6548] R13: 0000000000000000 R14: 00007f4c825a5fa0 R15: 00007ffd79b92e28
[ 175.202758][ T6548]
[ 175.206273][ T6548] Kernel Offset: disabled
[ 175.210697][ T6548] Rebooting in 86400 seconds..