Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2025/12/07 04:33:05 parsed 1 programs [ 127.213166][ T6176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 130.981416][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.994553][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.017589][ T4884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.026653][ T4884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.667485][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 131.745907][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.753490][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.761079][ T6225] bridge_slave_0: entered allmulticast mode [ 131.768224][ T6225] bridge_slave_0: entered promiscuous mode [ 131.775864][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.783571][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.790950][ T6225] bridge_slave_1: entered allmulticast mode [ 131.798009][ T6225] bridge_slave_1: entered promiscuous mode [ 131.853493][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.866625][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.899586][ T6225] team0: Port device team_slave_0 added [ 131.907005][ T6225] team0: Port device team_slave_1 added [ 131.937318][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.944339][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.971125][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.983206][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.990255][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.016807][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.066517][ T6225] hsr_slave_0: entered promiscuous mode [ 132.074071][ T6225] hsr_slave_1: entered promiscuous mode [ 132.475424][ T6225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.487368][ T6225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.498586][ T6225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.517667][ T6225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.633980][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.656889][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.672153][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.679376][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.706714][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.713925][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.770811][ T6225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.003014][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.063959][ T6225] veth0_vlan: entered promiscuous mode [ 133.079521][ T6225] veth1_vlan: entered promiscuous mode [ 133.119387][ T6225] veth0_macvtap: entered promiscuous mode [ 133.132096][ T6225] veth1_macvtap: entered promiscuous mode [ 133.158566][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.178379][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.196877][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.216017][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.234655][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.261791][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.429227][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.439636][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.447502][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.457141][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.459952][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.475496][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.562344][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.618425][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.721443][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.529518][ T36] bridge_slave_1: left allmulticast mode [ 135.536828][ T36] bridge_slave_1: left promiscuous mode [ 135.543453][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.558393][ T36] bridge_slave_0: left allmulticast mode [ 135.565342][ T36] bridge_slave_0: left promiscuous mode [ 135.574627][ T36] bridge0: port 1(bridge_slave_0) entered disabled state 2025/12/07 04:33:18 executed programs: 0 [ 136.035234][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.047573][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.055874][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.068293][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.080823][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.108297][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.120747][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.131204][ T36] bond0 (unregistering): Released all slaves [ 136.270841][ T36] hsr_slave_0: left promiscuous mode [ 136.276887][ T36] hsr_slave_1: left promiscuous mode [ 136.283574][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.291466][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.299445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.306903][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.321028][ T36] veth1_macvtap: left promiscuous mode [ 136.326718][ T36] veth0_macvtap: left promiscuous mode [ 136.332659][ T36] veth1_vlan: left promiscuous mode [ 136.338031][ T36] veth0_vlan: left promiscuous mode [ 136.606425][ T36] team0 (unregistering): Port device team_slave_1 removed [ 136.635651][ T36] team0 (unregistering): Port device team_slave_0 removed [ 137.025993][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 137.328152][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.336109][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.343688][ T6359] bridge_slave_0: entered allmulticast mode [ 137.352223][ T6359] bridge_slave_0: entered promiscuous mode [ 137.361229][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.370417][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.378112][ T6359] bridge_slave_1: entered allmulticast mode [ 137.388377][ T6359] bridge_slave_1: entered promiscuous mode [ 137.432266][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.446001][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.490957][ T6359] team0: Port device team_slave_0 added [ 137.501122][ T6359] team0: Port device team_slave_1 added [ 137.780359][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.787507][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.813852][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.844967][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.852832][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.879503][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.012425][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.027960][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.045303][ T6359] hsr_slave_0: entered promiscuous mode [ 138.051968][ T6359] hsr_slave_1: entered promiscuous mode [ 138.168093][ T52] Bluetooth: hci0: command tx timeout [ 138.612193][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.624383][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.638162][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.652078][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.791331][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.816087][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.831204][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.838398][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.861466][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.868776][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.925114][ T6359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.157622][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.214603][ T6359] veth0_vlan: entered promiscuous mode [ 139.233742][ T6359] veth1_vlan: entered promiscuous mode [ 139.267628][ T6359] veth0_macvtap: entered promiscuous mode [ 139.282160][ T6359] veth1_macvtap: entered promiscuous mode [ 139.310855][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.327306][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.347072][ T3548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.359425][ T3548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.371196][ T3548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.395437][ T3548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.483564][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.505950][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.546810][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.555397][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.636945][ T6452] ------------[ cut here ]------------ [ 139.649060][ T6452] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1895:13 [ 139.658212][ T6452] shift exponent 64 is too large for 32-bit type 'int' [ 139.665104][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 139.665123][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.665136][ T6452] Call Trace: [ 139.665142][ T6452] [ 139.665147][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 139.665171][ T6452] __ubsan_handle_shift_out_of_bounds+0x2d5/0x4a0 [ 139.665205][ T6452] sg_build_indirect.cold+0x1b/0x20 [ 139.665228][ T6452] sg_build_reserve+0xc4/0x180 [ 139.665244][ T6452] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.665260][ T6452] sg_open+0xc88/0x1a10 [ 139.665283][ T6452] ? __pfx_sg_open+0x10/0x10 [ 139.665300][ T6452] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.665316][ T6452] ? find_held_lock+0x2b/0x80 [ 139.665335][ T6452] ? chrdev_open+0x58c/0x6a0 [ 139.665359][ T6452] ? __pfx_sg_open+0x10/0x10 [ 139.665376][ T6452] chrdev_open+0x234/0x6a0 [ 139.665397][ T6452] ? __pfx_chrdev_open+0x10/0x10 [ 139.665419][ T6452] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 139.665446][ T6452] do_dentry_open+0x748/0x1590 [ 139.665466][ T6452] ? __pfx_chrdev_open+0x10/0x10 [ 139.665492][ T6452] vfs_open+0x82/0x3f0 [ 139.665509][ T6452] path_openat+0x2078/0x3140 [ 139.665542][ T6452] ? __pfx_path_openat+0x10/0x10 [ 139.665570][ T6452] do_filp_open+0x20b/0x470 [ 139.665592][ T6452] ? __pfx_do_filp_open+0x10/0x10 [ 139.665626][ T6452] ? alloc_fd+0x471/0x7d0 [ 139.665652][ T6452] do_sys_openat2+0x11f/0x280 [ 139.665667][ T6452] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.665690][ T6452] __x64_sys_openat+0x174/0x210 [ 139.665706][ T6452] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.665729][ T6452] do_syscall_64+0xcd/0xf80 [ 139.665746][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.665760][ T6452] RIP: 0033:0x7fa9a7f8cde9 [ 139.665775][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.665789][ T6452] RSP: 002b:00007fa9a8e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.665802][ T6452] RAX: ffffffffffffffda RBX: 00007fa9a81a5fa0 RCX: 00007fa9a7f8cde9 [ 139.665812][ T6452] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 139.665820][ T6452] RBP: 00007fa9a800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.665829][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.665837][ T6452] R13: 0000000000000000 R14: 00007fa9a81a5fa0 R15: 00007ffdbf0418c8 [ 139.665855][ T6452] [ 139.665860][ T6452] ---[ end trace ]--- [ 139.914779][ T6452] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 139.922098][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 139.931325][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.941394][ T6452] Call Trace: [ 139.944696][ T6452] [ 139.947641][ T6452] dump_stack_lvl+0x3d/0x1f0 [ 139.952252][ T6452] vpanic+0x640/0x6f0 [ 139.956419][ T6452] panic+0xca/0xd0 [ 139.960251][ T6452] ? __pfx_panic+0x10/0x10 [ 139.964697][ T6452] ? check_panic_on_warn+0x1f/0xb0 [ 139.969837][ T6452] check_panic_on_warn+0xab/0xb0 [ 139.974797][ T6452] __ubsan_handle_shift_out_of_bounds+0x2fc/0x4a0 [ 139.981287][ T6452] sg_build_indirect.cold+0x1b/0x20 [ 139.986502][ T6452] sg_build_reserve+0xc4/0x180 [ 139.991273][ T6452] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.996475][ T6452] sg_open+0xc88/0x1a10 [ 140.000639][ T6452] ? __pfx_sg_open+0x10/0x10 [ 140.005227][ T6452] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.010250][ T6452] ? find_held_lock+0x2b/0x80 [ 140.014930][ T6452] ? chrdev_open+0x58c/0x6a0 [ 140.019535][ T6452] ? __pfx_sg_open+0x10/0x10 [ 140.024125][ T6452] chrdev_open+0x234/0x6a0 [ 140.028569][ T6452] ? __pfx_chrdev_open+0x10/0x10 [ 140.033513][ T6452] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 140.039863][ T6452] do_dentry_open+0x748/0x1590 [ 140.044655][ T6452] ? __pfx_chrdev_open+0x10/0x10 [ 140.049612][ T6452] vfs_open+0x82/0x3f0 [ 140.053707][ T6452] path_openat+0x2078/0x3140 [ 140.058322][ T6452] ? __pfx_path_openat+0x10/0x10 [ 140.063374][ T6452] do_filp_open+0x20b/0x470 [ 140.067956][ T6452] ? __pfx_do_filp_open+0x10/0x10 [ 140.073015][ T6452] ? alloc_fd+0x471/0x7d0 [ 140.077405][ T6452] do_sys_openat2+0x11f/0x280 [ 140.082110][ T6452] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.087338][ T6452] __x64_sys_openat+0x174/0x210 [ 140.092228][ T6452] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.097630][ T6452] do_syscall_64+0xcd/0xf80 [ 140.102150][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.108049][ T6452] RIP: 0033:0x7fa9a7f8cde9 [ 140.112463][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.132099][ T6452] RSP: 002b:00007fa9a8e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.140516][ T6452] RAX: ffffffffffffffda RBX: 00007fa9a81a5fa0 RCX: 00007fa9a7f8cde9 [ 140.148481][ T6452] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 140.156448][ T6452] RBP: 00007fa9a800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.164415][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.172410][ T6452] R13: 0000000000000000 R14: 00007fa9a81a5fa0 R15: 00007ffdbf0418c8 [ 140.180409][ T6452] [ 140.183760][ T6452] Kernel Offset: disabled [ 140.188231][ T6452] Rebooting in 86400 seconds..