Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. 2025/09/26 16:33:43 parsed 1 programs [ 127.520230][ T6198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 131.741035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.749875][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.779928][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.788604][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.907962][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.916311][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.924399][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.932588][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.940738][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.731149][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 132.768308][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777572][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.826570][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.834302][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.841477][ T6263] bridge_slave_0: entered allmulticast mode [ 132.848971][ T6263] bridge_slave_0: entered promiscuous mode [ 132.857341][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.865196][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.872347][ T6263] bridge_slave_1: entered allmulticast mode [ 132.879833][ T6263] bridge_slave_1: entered promiscuous mode [ 132.915412][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.927946][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.967693][ T6263] team0: Port device team_slave_0 added [ 132.976564][ T6263] team0: Port device team_slave_1 added [ 133.000449][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.007759][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.033805][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.045694][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.052631][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.079293][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.116813][ T6263] hsr_slave_0: entered promiscuous mode [ 133.122938][ T6263] hsr_slave_1: entered promiscuous mode [ 133.517355][ T6263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.530506][ T6263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.546186][ T6263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.559200][ T6263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.606240][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.613452][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.620923][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.628100][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.710847][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.732922][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.743458][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.765649][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.782942][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.790119][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.823078][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.830253][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.868867][ T6263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.885839][ T6263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.118037][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.182675][ T6263] veth0_vlan: entered promiscuous mode [ 134.200065][ T6263] veth1_vlan: entered promiscuous mode [ 134.241260][ T6263] veth0_macvtap: entered promiscuous mode [ 134.256352][ T6263] veth1_macvtap: entered promiscuous mode [ 134.282879][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.301895][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.321205][ T2939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.332533][ T2939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.344664][ T2939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.353386][ T2939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.527952][ T2939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.619568][ T2939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.705145][ T2939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.810580][ T2939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/26 16:33:56 executed programs: 0 [ 135.914358][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.926107][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.939908][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.951688][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.960327][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.219036][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 136.396009][ T2939] bridge_slave_1: left allmulticast mode [ 136.401693][ T2939] bridge_slave_1: left promiscuous mode [ 136.410281][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.420858][ T2939] bridge_slave_0: left allmulticast mode [ 136.427050][ T2939] bridge_slave_0: left promiscuous mode [ 136.432816][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.791918][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.806763][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.818899][ T2939] bond0 (unregistering): Released all slaves [ 136.891848][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.911884][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.926053][ T6354] bridge_slave_0: entered allmulticast mode [ 136.940597][ T6354] bridge_slave_0: entered promiscuous mode [ 136.955617][ T2939] hsr_slave_0: left promiscuous mode [ 136.962946][ T2939] hsr_slave_1: left promiscuous mode [ 136.969984][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.979524][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.988582][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.997761][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.021363][ T2939] veth1_macvtap: left promiscuous mode [ 137.026983][ T2939] veth0_macvtap: left promiscuous mode [ 137.032641][ T2939] veth1_vlan: left promiscuous mode [ 137.038573][ T2939] veth0_vlan: left promiscuous mode [ 137.348674][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 137.377595][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 137.573745][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.580955][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.588208][ T6354] bridge_slave_1: entered allmulticast mode [ 137.595923][ T6354] bridge_slave_1: entered promiscuous mode [ 137.649719][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.669820][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.739893][ T6354] team0: Port device team_slave_0 added [ 137.750018][ T6354] team0: Port device team_slave_1 added [ 137.792905][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.800584][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.828691][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.846252][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.863769][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.892129][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.958839][ T6354] hsr_slave_0: entered promiscuous mode [ 137.970570][ T6354] hsr_slave_1: entered promiscuous mode [ 138.044484][ T5894] Bluetooth: hci0: command tx timeout [ 138.628538][ T6354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.640772][ T6354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.652542][ T6354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.669608][ T6354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.776560][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.801378][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.817596][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.824779][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.842571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.849780][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.130457][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.184439][ T6354] veth0_vlan: entered promiscuous mode [ 139.198076][ T6354] veth1_vlan: entered promiscuous mode [ 139.232204][ T6354] veth0_macvtap: entered promiscuous mode [ 139.242839][ T6354] veth1_macvtap: entered promiscuous mode [ 139.269993][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.289154][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.307274][ T2939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.326665][ T2939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.345197][ T2939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.361021][ T2939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.431540][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.449460][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.482868][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.493304][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.546201][ T6448] ------------[ cut here ]------------ [ 139.556647][ T6448] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1896:13 [ 139.567793][ T6448] shift exponent 64 is too large for 32-bit type 'int' [ 139.575716][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 139.575746][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.575763][ T6448] Call Trace: [ 139.575771][ T6448] [ 139.575780][ T6448] dump_stack_lvl+0x16c/0x1f0 [ 139.575824][ T6448] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 139.575870][ T6448] sg_build_indirect.cold+0x1b/0x20 [ 139.575920][ T6448] sg_build_reserve+0xc4/0x180 [ 139.575946][ T6448] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.575982][ T6448] sg_open+0xc88/0x1a10 [ 139.576021][ T6448] ? __pfx_sg_open+0x10/0x10 [ 139.576050][ T6448] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.576084][ T6448] ? find_held_lock+0x2b/0x80 [ 139.576116][ T6448] ? chrdev_open+0x58c/0x6a0 [ 139.576151][ T6448] ? __pfx_sg_open+0x10/0x10 [ 139.576179][ T6448] chrdev_open+0x234/0x6a0 [ 139.576211][ T6448] ? __pfx_chrdev_open+0x10/0x10 [ 139.576243][ T6448] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 139.576278][ T6448] do_dentry_open+0x982/0x1530 [ 139.576309][ T6448] ? __pfx_chrdev_open+0x10/0x10 [ 139.576346][ T6448] vfs_open+0x82/0x3f0 [ 139.576385][ T6448] path_openat+0x1de4/0x2cb0 [ 139.576426][ T6448] ? __pfx_path_openat+0x10/0x10 [ 139.576465][ T6448] do_filp_open+0x20b/0x470 [ 139.576494][ T6448] ? __pfx_do_filp_open+0x10/0x10 [ 139.576550][ T6448] ? alloc_fd+0x471/0x7d0 [ 139.576587][ T6448] do_sys_openat2+0x11b/0x1d0 [ 139.576622][ T6448] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.576672][ T6448] __x64_sys_openat+0x174/0x210 [ 139.576694][ T6448] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.576731][ T6448] do_syscall_64+0xcd/0x4c0 [ 139.576755][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.576780][ T6448] RIP: 0033:0x7f188058cde9 [ 139.576804][ T6448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.576831][ T6448] RSP: 002b:00007f188133c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.576856][ T6448] RAX: ffffffffffffffda RBX: 00007f18807a5fa0 RCX: 00007f188058cde9 [ 139.576873][ T6448] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 139.576888][ T6448] RBP: 00007f188060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.576902][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.576916][ T6448] R13: 0000000000000000 R14: 00007f18807a5fa0 R15: 00007ffc3936fed8 [ 139.576949][ T6448] [ 139.576957][ T6448] ---[ end trace ]--- [ 139.824799][ T6448] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 139.832018][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 139.841140][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.851199][ T6448] Call Trace: [ 139.854476][ T6448] [ 139.857399][ T6448] dump_stack_lvl+0x3d/0x1f0 [ 139.862006][ T6448] vpanic+0x6e8/0x7a0 [ 139.865994][ T6448] ? __pfx_vpanic+0x10/0x10 [ 139.870501][ T6448] ? __pfx_vprintk_emit+0x10/0x10 [ 139.875529][ T6448] panic+0xca/0xd0 [ 139.879255][ T6448] ? __pfx_panic+0x10/0x10 [ 139.883683][ T6448] ? check_panic_on_warn+0x1f/0xb0 [ 139.888800][ T6448] check_panic_on_warn+0xab/0xb0 [ 139.893748][ T6448] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 139.900178][ T6448] sg_build_indirect.cold+0x1b/0x20 [ 139.905393][ T6448] sg_build_reserve+0xc4/0x180 [ 139.910156][ T6448] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.915362][ T6448] sg_open+0xc88/0x1a10 [ 139.919527][ T6448] ? __pfx_sg_open+0x10/0x10 [ 139.924115][ T6448] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.929145][ T6448] ? find_held_lock+0x2b/0x80 [ 139.933819][ T6448] ? chrdev_open+0x58c/0x6a0 [ 139.938414][ T6448] ? __pfx_sg_open+0x10/0x10 [ 139.942999][ T6448] chrdev_open+0x234/0x6a0 [ 139.947417][ T6448] ? __pfx_chrdev_open+0x10/0x10 [ 139.952357][ T6448] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 139.958686][ T6448] do_dentry_open+0x982/0x1530 [ 139.963450][ T6448] ? __pfx_chrdev_open+0x10/0x10 [ 139.968401][ T6448] vfs_open+0x82/0x3f0 [ 139.972490][ T6448] path_openat+0x1de4/0x2cb0 [ 139.977094][ T6448] ? __pfx_path_openat+0x10/0x10 [ 139.982037][ T6448] do_filp_open+0x20b/0x470 [ 139.986540][ T6448] ? __pfx_do_filp_open+0x10/0x10 [ 139.991587][ T6448] ? alloc_fd+0x471/0x7d0 [ 139.995925][ T6448] do_sys_openat2+0x11b/0x1d0 [ 140.000617][ T6448] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.005831][ T6448] __x64_sys_openat+0x174/0x210 [ 140.010671][ T6448] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.016056][ T6448] do_syscall_64+0xcd/0x4c0 [ 140.020560][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.026447][ T6448] RIP: 0033:0x7f188058cde9 [ 140.030853][ T6448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.050452][ T6448] RSP: 002b:00007f188133c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.058868][ T6448] RAX: ffffffffffffffda RBX: 00007f18807a5fa0 RCX: 00007f188058cde9 [ 140.066831][ T6448] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 140.074793][ T6448] RBP: 00007f188060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.082753][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.090712][ T6448] R13: 0000000000000000 R14: 00007f18807a5fa0 R15: 00007ffc3936fed8 [ 140.098689][ T6448] [ 140.101954][ T6448] Kernel Offset: disabled [ 140.106287][ T6448] Rebooting in 86400 seconds..