[ 133.014743][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022083][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. 2026/07/10 09:48:38 parsed 1 programs [ 145.466694][ T6016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 149.440927][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.453160][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.461801][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.472971][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.481916][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.880749][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.891433][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.934451][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.942396][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.047586][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.054993][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.062180][ T6070] bridge_slave_0: entered allmulticast mode [ 152.070117][ T6070] bridge_slave_0: entered promiscuous mode [ 152.079285][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.086765][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.094397][ T6070] bridge_slave_1: entered allmulticast mode [ 152.102100][ T6070] bridge_slave_1: entered promiscuous mode [ 152.136493][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.148609][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.185334][ T6070] team0: Port device team_slave_0 added [ 152.193561][ T6070] team0: Port device team_slave_1 added [ 152.226828][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.233887][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.260088][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.272453][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.279574][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.305729][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.356674][ T6070] hsr_slave_0: entered promiscuous mode [ 152.363271][ T6070] hsr_slave_1: entered promiscuous mode [ 152.917753][ T6070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.928911][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.943053][ T6070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.957655][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.968222][ T6070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.983403][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.991940][ T6070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.004370][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.123714][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.151886][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.166994][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.174264][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.195588][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.202818][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.836295][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.908245][ T6070] veth0_vlan: entered promiscuous mode [ 153.929035][ T6070] veth1_vlan: entered promiscuous mode [ 153.977924][ T6070] veth0_macvtap: entered promiscuous mode [ 153.992254][ T6070] veth1_macvtap: entered promiscuous mode [ 154.021546][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.044794][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.078216][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.097960][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.122223][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.132519][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.382059][ T158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.507537][ T158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.619582][ T158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.725065][ T158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.157953][ T158] bridge_slave_1: left allmulticast mode [ 156.184287][ T158] bridge_slave_1: left promiscuous mode [ 156.191256][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.206886][ T158] bridge_slave_0: left allmulticast mode [ 156.223580][ T158] bridge_slave_0: left promiscuous mode [ 156.236265][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.632241][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.659372][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.682376][ T158] bond0 (unregistering): Released all slaves [ 156.833507][ T158] hsr_slave_0: left promiscuous mode [ 156.848710][ T158] hsr_slave_1: left promiscuous mode [ 156.864845][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.883489][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.896093][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.913042][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.952440][ T158] veth1_macvtap: left promiscuous mode [ 156.964639][ T158] veth0_macvtap: left promiscuous mode [ 156.993092][ T158] veth1_vlan: left promiscuous mode [ 156.998671][ T158] veth0_vlan: left promiscuous mode 2026/07/10 09:48:57 executed programs: 0 [ 157.472101][ T5657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.488632][ T5657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.504371][ T5657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.515100][ T5657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.524102][ T5657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.571396][ T158] team0 (unregistering): Port device team_slave_1 removed [ 157.595501][ T158] team0 (unregistering): Port device team_slave_0 removed [ 158.976255][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.984208][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.991472][ T6212] bridge_slave_0: entered allmulticast mode [ 158.999793][ T6212] bridge_slave_0: entered promiscuous mode [ 159.010349][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.021483][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.028880][ T6212] bridge_slave_1: entered allmulticast mode [ 159.037916][ T6212] bridge_slave_1: entered promiscuous mode [ 159.097574][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.114183][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.164588][ T6212] team0: Port device team_slave_0 added [ 159.174074][ T6212] team0: Port device team_slave_1 added [ 159.219445][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.226636][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.252845][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.267744][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.275931][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.302353][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.374383][ T6212] hsr_slave_0: entered promiscuous mode [ 159.381488][ T6212] hsr_slave_1: entered promiscuous mode [ 159.574271][ T4943] Bluetooth: hci0: command tx timeout [ 159.931104][ T6212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.945995][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.954472][ T6212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.966677][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.981185][ T6212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.995577][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.004895][ T6212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.016079][ T6212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.130258][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.157093][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.171739][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.179890][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.199224][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.206505][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.850896][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.919939][ T6212] veth0_vlan: entered promiscuous mode [ 160.948903][ T6212] veth1_vlan: entered promiscuous mode [ 161.006099][ T6212] veth0_macvtap: entered promiscuous mode [ 161.025340][ T6212] veth1_macvtap: entered promiscuous mode [ 161.066607][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.088218][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.108042][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.126328][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.145016][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.157439][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.241286][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.256834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.301541][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.310081][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.398093][ T6317] ------------[ cut here ]------------ [ 161.410464][ T6317] UBSAN: shift-out-of-bounds in drivers/scsi/sg.c:1888:13 [ 161.425552][ T6317] shift exponent 64 is too large for 32-bit type 'int' [ 161.435174][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 161.435213][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.435240][ T6317] Call Trace: [ 161.435251][ T6317] [ 161.435262][ T6317] dump_stack_lvl+0x100/0x190 [ 161.435307][ T6317] ubsan_epilogue+0xa/0x30 [ 161.435339][ T6317] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 161.435395][ T6317] sg_build_indirect.cold+0x1b/0x20 [ 161.435448][ T6317] ? do_raw_write_lock+0x11e/0x260 [ 161.435495][ T6317] sg_build_reserve+0xc8/0x180 [ 161.435525][ T6317] ? lockdep_hardirqs_on+0x78/0x100 [ 161.435583][ T6317] sg_open+0xd3c/0x1a70 [ 161.435630][ T6317] ? __pfx_sg_open+0x10/0x10 [ 161.435667][ T6317] ? do_raw_spin_lock+0x128/0x260 [ 161.435698][ T6317] ? find_held_lock+0x2b/0x80 [ 161.435742][ T6317] ? chrdev_open+0x589/0x6a0 [ 161.435794][ T6317] ? chrdev_open+0x589/0x6a0 [ 161.435851][ T6317] ? __pfx_sg_open+0x10/0x10 [ 161.435885][ T6317] chrdev_open+0x234/0x6a0 [ 161.435939][ T6317] ? __pfx_chrdev_open+0x10/0x10 [ 161.435992][ T6317] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 161.436036][ T6317] do_dentry_open+0x6ab/0x14d0 [ 161.436086][ T6317] ? __pfx_chrdev_open+0x10/0x10 [ 161.436148][ T6317] vfs_open+0x82/0x3f0 [ 161.436191][ T6317] path_openat+0x2873/0x4280 [ 161.436263][ T6317] ? __pfx_path_openat+0x10/0x10 [ 161.436328][ T6317] do_file_open+0x20e/0x430 [ 161.436384][ T6317] ? __pfx_do_file_open+0x10/0x10 [ 161.436466][ T6317] ? alloc_fd+0x471/0x7a0 [ 161.436520][ T6317] ? do_getname+0x191/0x390 [ 161.436561][ T6317] do_sys_openat2+0x10f/0x1e0 [ 161.436601][ T6317] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.436642][ T6317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.436710][ T6317] __x64_sys_openat+0x12d/0x210 [ 161.436758][ T6317] ? __pfx___x64_sys_openat+0x10/0x10 [ 161.436816][ T6317] do_syscall_64+0x115/0x840 [ 161.436866][ T6317] ? clear_bhb_loop+0x40/0x90 [ 161.436907][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.436942][ T6317] RIP: 0033:0x7f0e78f97479 [ 161.436979][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.437010][ T6317] RSP: 002b:00007f0e79d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.437044][ T6317] RAX: ffffffffffffffda RBX: 00007f0e791c5fa0 RCX: 00007f0e78f97479 [ 161.437066][ T6317] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 161.437087][ T6317] RBP: 00007f0e790281bc R08: 0000000000000000 R09: 0000000000000000 [ 161.437106][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.437125][ T6317] R13: 0000000000000000 R14: 00007f0e791c5fa0 R15: 00007ffc8fcfdfc8 [ 161.437168][ T6317] [ 161.437274][ T6317] ---[ end trace ]--- [ 161.653683][ T4943] Bluetooth: hci0: command tx timeout [ 161.670752][ T6317] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 161.670825][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 161.670921][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.670972][ T6317] Call Trace: [ 161.670996][ T6317] [ 161.671036][ T6317] dump_stack_lvl+0x100/0x190 [ 161.671128][ T6317] vpanic+0x552/0x970 [ 161.671209][ T6317] ? __pfx_vpanic+0x10/0x10 [ 161.671279][ T6317] ? irqentry_exit+0x24d/0xa00 [ 161.671415][ T6317] ? lockdep_hardirqs_on+0x78/0x100 [ 161.671544][ T6317] ? irqentry_exit+0x24d/0xa00 [ 161.671671][ T6317] panic+0xd1/0xe0 [ 161.671738][ T6317] ? __pfx_panic+0x10/0x10 [ 161.671831][ T6317] ? dump_stack_lvl+0x16c/0x190 [ 161.798032][ T6317] ? dump_stack_lvl+0x176/0x190 [ 161.802938][ T6317] ? check_panic_on_warn+0x1f/0x90 [ 161.808108][ T6317] check_panic_on_warn.cold+0x19/0x34 [ 161.813529][ T6317] __ubsan_handle_shift_out_of_bounds+0x279/0x2a0 [ 161.820104][ T6317] sg_build_indirect.cold+0x1b/0x20 [ 161.825379][ T6317] ? do_raw_write_lock+0x11e/0x260 [ 161.830622][ T6317] sg_build_reserve+0xc8/0x180 [ 161.835421][ T6317] ? lockdep_hardirqs_on+0x78/0x100 [ 161.840676][ T6317] sg_open+0xd3c/0x1a70 [ 161.844888][ T6317] ? __pfx_sg_open+0x10/0x10 [ 161.849527][ T6317] ? do_raw_spin_lock+0x128/0x260 [ 161.854676][ T6317] ? find_held_lock+0x2b/0x80 [ 161.859397][ T6317] ? chrdev_open+0x589/0x6a0 [ 161.864036][ T6317] ? chrdev_open+0x589/0x6a0 [ 161.868688][ T6317] ? __pfx_sg_open+0x10/0x10 [ 161.873321][ T6317] chrdev_open+0x234/0x6a0 [ 161.877794][ T6317] ? __pfx_chrdev_open+0x10/0x10 [ 161.882795][ T6317] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 161.889170][ T6317] do_dentry_open+0x6ab/0x14d0 [ 161.893989][ T6317] ? __pfx_chrdev_open+0x10/0x10 [ 161.899016][ T6317] vfs_open+0x82/0x3f0 [ 161.903130][ T6317] path_openat+0x2873/0x4280 [ 161.907796][ T6317] ? __pfx_path_openat+0x10/0x10 [ 161.912792][ T6317] do_file_open+0x20e/0x430 [ 161.917358][ T6317] ? __pfx_do_file_open+0x10/0x10 [ 161.922546][ T6317] ? alloc_fd+0x471/0x7a0 [ 161.927015][ T6317] ? do_getname+0x191/0x390 [ 161.931558][ T6317] do_sys_openat2+0x10f/0x1e0 [ 161.936273][ T6317] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.941516][ T6317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.947902][ T6317] __x64_sys_openat+0x12d/0x210 [ 161.952970][ T6317] ? __pfx___x64_sys_openat+0x10/0x10 [ 161.958424][ T6317] do_syscall_64+0x115/0x840 [ 161.963066][ T6317] ? clear_bhb_loop+0x40/0x90 [ 161.967795][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.973730][ T6317] RIP: 0033:0x7f0e78f97479 [ 161.978189][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.997832][ T6317] RSP: 002b:00007f0e79d71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.006397][ T6317] RAX: ffffffffffffffda RBX: 00007f0e791c5fa0 RCX: 00007f0e78f97479 [ 162.014490][ T6317] RDX: 000000000008a002 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 162.022502][ T6317] RBP: 00007f0e790281bc R08: 0000000000000000 R09: 0000000000000000 [ 162.030516][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.038599][ T6317] R13: 0000000000000000 R14: 00007f0e791c5fa0 R15: 00007ffc8fcfdfc8 [ 162.046650][ T6317] [ 162.050366][ T6317] Kernel Offset: disabled [ 162.054752][ T6317] Rebooting in 86400 seconds..