Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. 2026/02/15 04:50:30 parsed 1 programs [ 120.397723][ T6133] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 123.554045][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.565664][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.593850][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.601781][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.020203][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 124.099861][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.109310][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.116528][ T6161] bridge_slave_0: entered allmulticast mode [ 124.125050][ T6161] bridge_slave_0: entered promiscuous mode [ 124.133306][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.140644][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.148007][ T6161] bridge_slave_1: entered allmulticast mode [ 124.155383][ T6161] bridge_slave_1: entered promiscuous mode [ 124.187576][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.199571][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.233773][ T6161] team0: Port device team_slave_0 added [ 124.270516][ T6161] team0: Port device team_slave_1 added [ 124.295727][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.302753][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.328722][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.340685][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.347719][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.379061][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.426601][ T6161] hsr_slave_0: entered promiscuous mode [ 124.432987][ T6161] hsr_slave_1: entered promiscuous mode [ 124.886416][ T6161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.899244][ T6161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.910680][ T6161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.924581][ T6161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.042710][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.066302][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.081091][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.088288][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.126816][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.134046][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.414902][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.472020][ T6161] veth0_vlan: entered promiscuous mode [ 125.493596][ T6161] veth1_vlan: entered promiscuous mode [ 125.535619][ T6161] veth0_macvtap: entered promiscuous mode [ 125.548183][ T6161] veth1_macvtap: entered promiscuous mode [ 125.574391][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.595046][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.615057][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.636907][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.664816][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.695751][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.826055][ T748] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.934646][ T748] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.024577][ T748] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.080023][ T748] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.359104][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.367083][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.379325][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.391311][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.403992][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.190779][ T748] bridge_slave_1: left allmulticast mode [ 128.196477][ T748] bridge_slave_1: left promiscuous mode [ 128.221956][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.257095][ T748] bridge_slave_0: left allmulticast mode [ 128.262826][ T748] bridge_slave_0: left promiscuous mode [ 128.277398][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.532490][ T748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.543106][ T748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.553215][ T748] bond0 (unregistering): Released all slaves [ 128.649567][ T748] hsr_slave_0: left promiscuous mode [ 128.655792][ T748] hsr_slave_1: left promiscuous mode [ 128.663776][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.671293][ T748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.688160][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.695574][ T748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.710813][ T748] veth1_macvtap: left promiscuous mode [ 128.716333][ T748] veth0_macvtap: left promiscuous mode [ 128.722157][ T748] veth1_vlan: left promiscuous mode [ 128.727562][ T748] veth0_vlan: left promiscuous mode [ 129.014878][ T748] team0 (unregistering): Port device team_slave_1 removed [ 129.036259][ T748] team0 (unregistering): Port device team_slave_0 removed 2026/02/15 04:50:44 executed programs: 0 [ 129.971414][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.983638][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.997008][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.005132][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.014222][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.710778][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 130.906753][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.914584][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.928040][ T6351] bridge_slave_0: entered allmulticast mode [ 130.935836][ T6351] bridge_slave_0: entered promiscuous mode [ 130.948571][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.955858][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.963445][ T6351] bridge_slave_1: entered allmulticast mode [ 130.971627][ T6351] bridge_slave_1: entered promiscuous mode [ 131.067994][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.081853][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.143645][ T6351] team0: Port device team_slave_0 added [ 131.159377][ T6351] team0: Port device team_slave_1 added [ 131.196825][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.206004][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.232849][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.253258][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.262442][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.290124][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.358488][ T6351] hsr_slave_0: entered promiscuous mode [ 131.365279][ T6351] hsr_slave_1: entered promiscuous mode [ 131.946035][ T6351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.958321][ T6351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.971308][ T6351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.983444][ T6351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.109908][ T6351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.127537][ T5860] Bluetooth: hci0: command tx timeout [ 132.149101][ T6351] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.162266][ T748] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.169464][ T748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.192867][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.200077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.466729][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.521366][ T6351] veth0_vlan: entered promiscuous mode [ 132.551742][ T6351] veth1_vlan: entered promiscuous mode [ 132.586826][ T6351] veth0_macvtap: entered promiscuous mode [ 132.599811][ T6351] veth1_macvtap: entered promiscuous mode [ 132.628970][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.650945][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.666620][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.680820][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.701809][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.729263][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.843105][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.868838][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.921467][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.947805][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.954337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.972192][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.053558][ T6442] ------------[ cut here ]------------ [ 133.060082][ T6442] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1898:13 [ 133.068699][ T6442] shift exponent 64 is too large for 32-bit type 'int' [ 133.075667][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 133.075707][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.075729][ T6442] Call Trace: [ 133.075738][ T6442] [ 133.075750][ T6442] dump_stack_lvl+0x100/0x190 [ 133.075796][ T6442] ubsan_epilogue+0xa/0x30 [ 133.075822][ T6442] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 133.075867][ T6442] sg_build_indirect.cold+0x1b/0x20 [ 133.075906][ T6442] ? do_raw_write_lock+0x11e/0x260 [ 133.075950][ T6442] sg_build_reserve+0xc8/0x180 [ 133.075985][ T6442] ? lockdep_hardirqs_on+0x78/0x100 [ 133.076020][ T6442] sg_open+0xd5c/0x1aa0 [ 133.076069][ T6442] ? __pfx_sg_open+0x10/0x10 [ 133.076108][ T6442] ? do_raw_spin_lock+0x128/0x260 [ 133.076141][ T6442] ? find_held_lock+0x2b/0x80 [ 133.076177][ T6442] ? chrdev_open+0x589/0x6a0 [ 133.076211][ T6442] ? chrdev_open+0x589/0x6a0 [ 133.076252][ T6442] ? __pfx_sg_open+0x10/0x10 [ 133.076289][ T6442] chrdev_open+0x234/0x6a0 [ 133.076334][ T6442] ? __pfx_chrdev_open+0x10/0x10 [ 133.076372][ T6442] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 133.076416][ T6442] do_dentry_open+0x6d8/0x1660 [ 133.076450][ T6442] ? __pfx_chrdev_open+0x10/0x10 [ 133.076495][ T6442] vfs_open+0x82/0x3f0 [ 133.076527][ T6442] path_openat+0x208c/0x31a0 [ 133.076574][ T6442] ? __pfx_path_openat+0x10/0x10 [ 133.076622][ T6442] do_file_open+0x20e/0x430 [ 133.076658][ T6442] ? __pfx_do_file_open+0x10/0x10 [ 133.076718][ T6442] ? alloc_fd+0x476/0x790 [ 133.076756][ T6442] ? do_getname+0x191/0x390 [ 133.076786][ T6442] do_sys_openat2+0x10d/0x1e0 [ 133.076813][ T6442] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.076853][ T6442] __x64_sys_openat+0x12d/0x210 [ 133.076881][ T6442] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.076920][ T6442] do_syscall_64+0x106/0xf80 [ 133.076950][ T6442] ? clear_bhb_loop+0x40/0x90 [ 133.076981][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.077005][ T6442] RIP: 0033:0x7f53f9597479 [ 133.077032][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.077060][ T6442] RSP: 002b:00007f53fa3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.077087][ T6442] RAX: ffffffffffffffda RBX: 00007f53f97c5fa0 RCX: 00007f53f9597479 [ 133.077104][ T6442] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 133.077122][ T6442] RBP: 00007f53f96281bc R08: 0000000000000000 R09: 0000000000000000 [ 133.077135][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.077147][ T6442] R13: 0000000000000000 R14: 00007f53f97c5fa0 R15: 00007ffe5086d898 [ 133.077177][ T6442] [ 133.367434][ T6442] ---[ end trace ]--- [ 133.371583][ T6442] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 133.378802][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 133.387936][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.398004][ T6442] Call Trace: [ 133.401274][ T6442] [ 133.404210][ T6442] dump_stack_lvl+0x100/0x190 [ 133.408886][ T6442] vpanic+0x552/0x970 [ 133.412852][ T6442] ? __pfx_vpanic+0x10/0x10 [ 133.417338][ T6442] ? irqentry_exit+0x180/0x670 [ 133.422090][ T6442] ? lockdep_hardirqs_on+0x78/0x100 [ 133.427289][ T6442] panic+0xd1/0xe0 [ 133.431016][ T6442] ? __pfx_panic+0x10/0x10 [ 133.435466][ T6442] ? dump_stack_lvl+0x16c/0x190 [ 133.440328][ T6442] ? dump_stack_lvl+0x176/0x190 [ 133.445192][ T6442] ? check_panic_on_warn+0x1f/0x90 [ 133.450313][ T6442] check_panic_on_warn.cold+0x19/0x34 [ 133.455694][ T6442] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 133.462122][ T6442] sg_build_indirect.cold+0x1b/0x20 [ 133.467325][ T6442] ? do_raw_write_lock+0x11e/0x260 [ 133.472458][ T6442] sg_build_reserve+0xc8/0x180 [ 133.477270][ T6442] ? lockdep_hardirqs_on+0x78/0x100 [ 133.482484][ T6442] sg_open+0xd5c/0x1aa0 [ 133.486641][ T6442] ? __pfx_sg_open+0x10/0x10 [ 133.491225][ T6442] ? do_raw_spin_lock+0x128/0x260 [ 133.496243][ T6442] ? find_held_lock+0x2b/0x80 [ 133.500912][ T6442] ? chrdev_open+0x589/0x6a0 [ 133.505492][ T6442] ? chrdev_open+0x589/0x6a0 [ 133.510074][ T6442] ? __pfx_sg_open+0x10/0x10 [ 133.514743][ T6442] chrdev_open+0x234/0x6a0 [ 133.519150][ T6442] ? __pfx_chrdev_open+0x10/0x10 [ 133.524084][ T6442] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 133.530421][ T6442] do_dentry_open+0x6d8/0x1660 [ 133.535231][ T6442] ? __pfx_chrdev_open+0x10/0x10 [ 133.540188][ T6442] vfs_open+0x82/0x3f0 [ 133.544263][ T6442] path_openat+0x208c/0x31a0 [ 133.548875][ T6442] ? __pfx_path_openat+0x10/0x10 [ 133.553857][ T6442] do_file_open+0x20e/0x430 [ 133.558386][ T6442] ? __pfx_do_file_open+0x10/0x10 [ 133.563504][ T6442] ? alloc_fd+0x476/0x790 [ 133.567922][ T6442] ? do_getname+0x191/0x390 [ 133.572421][ T6442] do_sys_openat2+0x10d/0x1e0 [ 133.577098][ T6442] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.582332][ T6442] __x64_sys_openat+0x12d/0x210 [ 133.587213][ T6442] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.592618][ T6442] do_syscall_64+0x106/0xf80 [ 133.597208][ T6442] ? clear_bhb_loop+0x40/0x90 [ 133.602004][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.607892][ T6442] RIP: 0033:0x7f53f9597479 [ 133.612290][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.631885][ T6442] RSP: 002b:00007f53fa3e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.640289][ T6442] RAX: ffffffffffffffda RBX: 00007f53f97c5fa0 RCX: 00007f53f9597479 [ 133.648260][ T6442] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 133.656287][ T6442] RBP: 00007f53f96281bc R08: 0000000000000000 R09: 0000000000000000 [ 133.664246][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.672202][ T6442] R13: 0000000000000000 R14: 00007f53f97c5fa0 R15: 00007ffe5086d898 [ 133.680206][ T6442] [ 133.683927][ T6442] Kernel Offset: disabled [ 133.688341][ T6442] Rebooting in 86400 seconds..