Warning: Permanently added '[localhost]:36689' (ED25519) to the list of known hosts. 2025/07/03 06:55:47 ignoring optional flag "sandboxArg"="0" 2025/07/03 06:55:49 parsed 1 programs [ 130.022978][ T5710] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 135.845684][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.849317][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.876952][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.880876][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.984641][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 137.047097][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.050359][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.054281][ T5764] bridge_slave_0: entered allmulticast mode [ 137.058141][ T5764] bridge_slave_0: entered promiscuous mode [ 137.063436][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.067580][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.072618][ T5764] bridge_slave_1: entered allmulticast mode [ 137.076689][ T5764] bridge_slave_1: entered promiscuous mode [ 137.098717][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.105863][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.132851][ T5764] team0: Port device team_slave_0 added [ 137.137717][ T5764] team0: Port device team_slave_1 added [ 137.161424][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.164658][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.177419][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.184737][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.187939][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.200735][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.236503][ T5764] hsr_slave_0: entered promiscuous mode [ 137.239815][ T5764] hsr_slave_1: entered promiscuous mode [ 137.891760][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.924657][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.941976][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.947948][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.984117][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.987178][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.113314][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.136971][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.155897][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.159465][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.196008][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.200081][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.563741][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.628042][ T5764] veth0_vlan: entered promiscuous mode [ 138.646630][ T5764] veth1_vlan: entered promiscuous mode [ 138.689882][ T5764] veth0_macvtap: entered promiscuous mode [ 138.722335][ T5764] veth1_macvtap: entered promiscuous mode [ 138.747321][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.782862][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.803835][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.809066][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.830404][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.840744][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.109749][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.222670][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.334451][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.909147][ T5418] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.915178][ T5418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.918981][ T5418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.923813][ T5418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.927475][ T5418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.285195][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/03 06:56:04 executed programs: 0 [ 141.008665][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.013321][ T4673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.017586][ T4673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.023986][ T4673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.027625][ T4673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.377045][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 141.576763][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.580133][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.601067][ T5859] bridge_slave_0: entered allmulticast mode [ 141.605144][ T5859] bridge_slave_0: entered promiscuous mode [ 141.654557][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.658006][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.682459][ T5859] bridge_slave_1: entered allmulticast mode [ 141.686768][ T5859] bridge_slave_1: entered promiscuous mode [ 141.759724][ T31] bridge_slave_1: left allmulticast mode [ 141.773450][ T31] bridge_slave_1: left promiscuous mode [ 141.777061][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.793355][ T31] bridge_slave_0: left allmulticast mode [ 141.796261][ T31] bridge_slave_0: left promiscuous mode [ 141.799109][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.305881][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.323897][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.330080][ T31] bond0 (unregistering): Released all slaves [ 142.367523][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.393091][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.470272][ T31] hsr_slave_0: left promiscuous mode [ 142.483862][ T31] hsr_slave_1: left promiscuous mode [ 142.487043][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.490439][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.510665][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.514007][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.525552][ T31] veth1_macvtap: left promiscuous mode [ 142.528227][ T31] veth0_macvtap: left promiscuous mode [ 142.545559][ T31] veth1_vlan: left promiscuous mode [ 142.548100][ T31] veth0_vlan: left promiscuous mode [ 142.852995][ T31] team0 (unregistering): Port device team_slave_1 removed [ 142.873786][ T31] team0 (unregistering): Port device team_slave_0 removed [ 143.101896][ T4673] Bluetooth: hci0: command tx timeout [ 143.130313][ T5859] team0: Port device team_slave_0 added [ 143.162842][ T5859] team0: Port device team_slave_1 added [ 143.217847][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.232438][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.266255][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.283216][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.287050][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.332185][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.462510][ T5859] hsr_slave_0: entered promiscuous mode [ 143.472523][ T5859] hsr_slave_1: entered promiscuous mode [ 144.525414][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.547292][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.563976][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.571956][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.715486][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.744064][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.766179][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.769446][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.799396][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.803013][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.172516][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.182324][ T4673] Bluetooth: hci0: command tx timeout [ 145.254413][ T5859] veth0_vlan: entered promiscuous mode [ 145.283869][ T5859] veth1_vlan: entered promiscuous mode [ 145.327087][ T5859] veth0_macvtap: entered promiscuous mode [ 145.353047][ T5859] veth1_macvtap: entered promiscuous mode [ 145.385847][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.403909][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.419280][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.430621][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.434924][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.439032][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.575504][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.579218][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.629325][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.636258][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.195613][ T5934] loop0: detected capacity change from 0 to 32768 [ 146.266216][ T25] audit: type=1800 audit(1751525769.571:2): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 146.313466][ T5934] loop0: detected capacity change from 32768 to 32736 [ 146.351868][ T5934] ERROR: (device loop0): dbAdjCtl: Corrupt dmapctl page [ 146.351868][ T5934] [ 146.357923][ T5934] ERROR: (device loop0): remounting filesystem as read-only [ 146.371195][ T5934] ERROR: (device loop0): dbDiscardAG: -EIO [ 146.371195][ T5934] [ 146.398416][ T5934] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 146.398416][ T5934] [ 146.409100][ T5934] ------------[ cut here ]------------ [ 146.423350][ T5934] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:3023:55 [ 146.426654][ T5934] shift exponent 32 is too large for 32-bit type 'u32' (aka 'unsigned int') [ 146.456170][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-gb4911fb0b060 #0 PREEMPT(full) [ 146.456190][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.456196][ T5934] Call Trace: [ 146.456201][ T5934] [ 146.456206][ T5934] dump_stack_lvl+0x189/0x250 [ 146.456229][ T5934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.456244][ T5934] ? __pfx__printk+0x10/0x10 [ 146.456253][ T5934] ? filemap_get_entry+0x28f/0x2f0 [ 146.456272][ T5934] ubsan_epilogue+0xa/0x40 [ 146.456283][ T5934] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 146.456311][ T5934] dbFindBits+0xdf/0x1a0 [ 146.456326][ T5934] dbAllocDmapLev+0x16b/0x3c0 [ 146.456342][ T5934] dbAllocCtl+0x14a/0x9b0 [ 146.456355][ T5934] ? __phys_addr+0xd3/0x180 [ 146.456368][ T5934] dbAllocAG+0x1e8/0xf10 [ 146.456377][ T5934] ? rcu_is_watching+0x15/0xb0 [ 146.456410][ T5934] ? __kmalloc_noprof+0x29b/0x4f0 [ 146.456419][ T5934] ? dbDiscardAG+0x1b0/0x900 [ 146.456433][ T5934] dbDiscardAG+0x2df/0x900 [ 146.456450][ T5934] jfs_ioc_trim+0x429/0x690 [ 146.456470][ T5934] jfs_ioctl+0x2b5/0x3d0 [ 146.456478][ T5934] ? __fget_files+0x2a/0x420 [ 146.456490][ T5934] ? __pfx_jfs_ioctl+0x10/0x10 [ 146.456500][ T5934] ? __fget_files+0x2a/0x420 [ 146.456509][ T5934] ? __fget_files+0x2a/0x420 [ 146.456521][ T5934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.456536][ T5934] ? __pfx_jfs_ioctl+0x10/0x10 [ 146.456547][ T5934] __se_sys_ioctl+0xf9/0x170 [ 146.456563][ T5934] do_syscall_64+0xfa/0x3b0 [ 146.456634][ T5934] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.456647][ T5934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.456657][ T5934] ? clear_bhb_loop+0x60/0xb0 [ 146.456670][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.456679][ T5934] RIP: 0033:0x7fd8cd98cda9 [ 146.456690][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.456699][ T5934] RSP: 002b:00007fd8ce857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.456712][ T5934] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cda9 [ 146.456718][ T5934] RDX: 00000000200000c0 RSI: 00000000c0185879 RDI: 0000000000000004 [ 146.456723][ T5934] RBP: 00007fd8cda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.456730][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.456735][ T5934] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe44352a68 [ 146.456751][ T5934] [ 146.456755][ T5934] ---[ end trace ]--- [ 146.689205][ T5934] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 146.692716][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-gb4911fb0b060 #0 PREEMPT(full) [ 146.697919][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.703290][ T5934] Call Trace: [ 146.704984][ T5934] [ 146.706405][ T5934] dump_stack_lvl+0x99/0x250 [ 146.708629][ T5934] ? __asan_memcpy+0x40/0x70 [ 146.710863][ T5934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.713278][ T5934] ? __pfx__printk+0x10/0x10 [ 146.715564][ T5934] panic+0x2db/0x790 [ 146.717437][ T5934] ? __pfx_panic+0x10/0x10 [ 146.719585][ T5934] ? _printk+0xcf/0x120 [ 146.721659][ T5934] ? __pfx__printk+0x10/0x10 [ 146.723969][ T5934] ? filemap_get_entry+0x28f/0x2f0 [ 146.726392][ T5934] check_panic_on_warn+0x89/0xb0 [ 146.728712][ T5934] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 146.731828][ T5934] dbFindBits+0xdf/0x1a0 [ 146.733892][ T5934] dbAllocDmapLev+0x16b/0x3c0 [ 146.736381][ T5934] dbAllocCtl+0x14a/0x9b0 [ 146.738627][ T5934] ? __phys_addr+0xd3/0x180 [ 146.740889][ T5934] dbAllocAG+0x1e8/0xf10 [ 146.742917][ T5934] ? rcu_is_watching+0x15/0xb0 [ 146.745217][ T5934] ? __kmalloc_noprof+0x29b/0x4f0 [ 146.747695][ T5934] ? dbDiscardAG+0x1b0/0x900 [ 146.749874][ T5934] dbDiscardAG+0x2df/0x900 [ 146.752016][ T5934] jfs_ioc_trim+0x429/0x690 [ 146.754187][ T5934] jfs_ioctl+0x2b5/0x3d0 [ 146.756221][ T5934] ? __fget_files+0x2a/0x420 [ 146.758437][ T5934] ? __pfx_jfs_ioctl+0x10/0x10 [ 146.760683][ T5934] ? __fget_files+0x2a/0x420 [ 146.762861][ T5934] ? __fget_files+0x2a/0x420 [ 146.765121][ T5934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.767622][ T5934] ? __pfx_jfs_ioctl+0x10/0x10 [ 146.769991][ T5934] __se_sys_ioctl+0xf9/0x170 [ 146.772184][ T5934] do_syscall_64+0xfa/0x3b0 [ 146.774312][ T5934] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.776776][ T5934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.779780][ T5934] ? clear_bhb_loop+0x60/0xb0 [ 146.782031][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.784783][ T5934] RIP: 0033:0x7fd8cd98cda9 [ 146.786917][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.795721][ T5934] RSP: 002b:00007fd8ce857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.799790][ T5934] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cda9 [ 146.803901][ T5934] RDX: 00000000200000c0 RSI: 00000000c0185879 RDI: 0000000000000004 [ 146.808112][ T5934] RBP: 00007fd8cda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.811782][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.815338][ T5934] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe44352a68 [ 146.819361][ T5934] [ 146.821166][ T5934] Kernel Offset: disabled [ 146.823248][ T5934] Rebooting in 86400 seconds..