Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. 2025/12/27 21:16:12 parsed 1 programs [ 73.580440][ T5766] cgroup: Unknown subsys name 'net' [ 73.727999][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.061310][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.258332][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.267819][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.276100][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.285104][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.293681][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.301727][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.962885][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.971069][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.995150][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.003918][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253948][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.324313][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.331804][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.339048][ T5833] bridge_slave_0: entered allmulticast mode [ 79.346132][ T5833] bridge_slave_0: entered promiscuous mode [ 79.356936][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.364263][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.371479][ T5833] bridge_slave_1: entered allmulticast mode [ 79.380932][ T5833] bridge_slave_1: entered promiscuous mode [ 79.413787][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.424651][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.466545][ T5833] team0: Port device team_slave_0 added [ 79.475341][ T5833] team0: Port device team_slave_1 added [ 79.505992][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.513234][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.539559][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.556013][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.563123][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.589272][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.633287][ T5833] hsr_slave_0: entered promiscuous mode [ 79.639996][ T5833] hsr_slave_1: entered promiscuous mode [ 79.817708][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.833512][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.843388][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.853400][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.901293][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.908528][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.916529][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.923703][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.989046][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.008252][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.017562][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.031937][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.046622][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.053818][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.072326][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.079561][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.259761][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.309114][ T5833] veth0_vlan: entered promiscuous mode [ 80.320156][ T5833] veth1_vlan: entered promiscuous mode [ 80.353876][ T5833] veth0_macvtap: entered promiscuous mode [ 80.363429][ T5833] veth1_macvtap: entered promiscuous mode [ 80.384829][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.398067][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.410269][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.419305][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.429062][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.440098][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.923696][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/27 21:16:21 executed programs: 0 [ 81.657345][ T27] cfg80211: failed to load regulatory.db [ 81.681926][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.689763][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.698116][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.707303][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.715578][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.723987][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.853772][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 81.917337][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.926213][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.933941][ T5872] bridge_slave_0: entered allmulticast mode [ 81.940545][ T5872] bridge_slave_0: entered promiscuous mode [ 81.949107][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.956248][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.964845][ T5872] bridge_slave_1: entered allmulticast mode [ 81.972691][ T5872] bridge_slave_1: entered promiscuous mode [ 82.003565][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.016423][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.053291][ T5872] team0: Port device team_slave_0 added [ 82.063652][ T5872] team0: Port device team_slave_1 added [ 82.086178][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.093573][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.120639][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.134161][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.141263][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.167639][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.210584][ T5872] hsr_slave_0: entered promiscuous mode [ 82.216896][ T5872] hsr_slave_1: entered promiscuous mode [ 82.223251][ T5872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.230963][ T5872] Cannot create hsr debugfs directory [ 83.183112][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.802919][ T5082] Bluetooth: hci0: command tx timeout [ 85.643078][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.714522][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.892423][ T5082] Bluetooth: hci0: command tx timeout [ 86.667257][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.679840][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.689292][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.700273][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.771170][ T48] hsr_slave_0: left promiscuous mode [ 86.777636][ T48] hsr_slave_1: left promiscuous mode [ 86.784421][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.792479][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.805619][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.813050][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.820588][ T48] bridge_slave_1: left allmulticast mode [ 86.826382][ T48] bridge_slave_1: left promiscuous mode [ 86.832720][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.844104][ T48] bridge_slave_0: left allmulticast mode [ 86.849816][ T48] bridge_slave_0: left promiscuous mode [ 86.856657][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.874965][ T48] veth1_macvtap: left promiscuous mode [ 86.880719][ T48] veth0_macvtap: left promiscuous mode [ 86.886992][ T48] veth1_vlan: left promiscuous mode [ 86.893065][ T48] veth0_vlan: left promiscuous mode [ 87.240977][ T48] team0 (unregistering): Port device team_slave_1 removed [ 87.273365][ T48] team0 (unregistering): Port device team_slave_0 removed [ 87.300824][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.335505][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.628015][ T48] bond0 (unregistering): Released all slaves [ 87.685672][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.703457][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.717267][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.724482][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.755327][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.762625][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.972225][ T5082] Bluetooth: hci0: command tx timeout [ 87.979412][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.048249][ T5872] veth0_vlan: entered promiscuous mode [ 88.093160][ T5872] veth1_vlan: entered promiscuous mode [ 88.166103][ T5872] veth0_macvtap: entered promiscuous mode [ 88.178557][ T5872] veth1_macvtap: entered promiscuous mode [ 88.207171][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.235159][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.269213][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288349][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298884][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.308082][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.449359][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.458535][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.485559][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.494081][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.600994][ C1] [ 88.601002][ C1] ================================ [ 88.601005][ C1] WARNING: inconsistent lock state [ 88.601009][ C1] syzkaller #0 Not tainted [ 88.601016][ C1] -------------------------------- [ 88.601020][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 88.601025][ C1] syz.0.17/5921 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 88.601040][ C1] ffff88802f553920 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x181/0x300 [ 88.601077][ C1] {INITIAL USE} state was registered at: [ 88.601081][ C1] lock_acquire+0x197/0x410 [ 88.601095][ C1] _raw_spin_lock+0x2e/0x40 [ 88.601108][ C1] htab_lock_bucket+0x181/0x300 [ 88.601119][ C1] htab_lru_map_update_elem+0x2c6/0x970 [ 88.601130][ C1] bpf_map_update_value+0x660/0x720 [ 88.601147][ C1] generic_map_update_batch+0x5e0/0x810 [ 88.601163][ C1] bpf_map_do_batch+0x3d7/0x610 [ 88.601177][ C1] __sys_bpf+0x31b/0x800 [ 88.601190][ C1] __x64_sys_bpf+0x7c/0x90 [ 88.601201][ C1] do_syscall_64+0x55/0xb0 [ 88.601212][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.601228][ C1] irq event stamp: 29206 [ 88.601232][ C1] hardirqs last enabled at (29205): [] _raw_spin_unlock_irqrestore+0x86/0x110 [ 88.601254][ C1] hardirqs last disabled at (29206): [] exc_debug+0x7b/0x140 [ 88.601270][ C1] softirqs last enabled at (29172): [] bpf_map_alloc_id+0x87/0xd0 [ 88.601288][ C1] softirqs last disabled at (29170): [] bpf_map_alloc_id+0x21/0xd0 [ 88.601306][ C1] [ 88.601306][ C1] other info that might help us debug this: [ 88.601310][ C1] Possible unsafe locking scenario: [ 88.601310][ C1] [ 88.601314][ C1] CPU0 [ 88.601316][ C1] ---- [ 88.601319][ C1] lock(&htab->lockdep_key); [ 88.601330][ C1] [ 88.601333][ C1] lock(&htab->lockdep_key); [ 88.601343][ C1] [ 88.601343][ C1] *** DEADLOCK *** [ 88.601343][ C1] [ 88.601346][ C1] no locks held by syz.0.17/5921. [ 88.601352][ C1] [ 88.601352][ C1] stack backtrace: [ 88.601356][ C1] CPU: 1 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0 [ 88.601371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.601380][ C1] Call Trace: [ 88.601387][ C1] <#DB> [ 88.601393][ C1] dump_stack_lvl+0x16c/0x230 [ 88.601418][ C1] ? show_regs_print_info+0x20/0x20 [ 88.601443][ C1] ? print_usage_bug+0x475/0x690 [ 88.601460][ C1] ? verify_lock_unused+0x18/0x140 [ 88.601495][ C1] lock_acquire+0x2b1/0x410 [ 88.601512][ C1] ? htab_lock_bucket+0x181/0x300 [ 88.601529][ C1] ? read_lock_is_recursive+0x20/0x20 [ 88.601551][ C1] _raw_spin_lock+0x2e/0x40 [ 88.601567][ C1] ? htab_lock_bucket+0x181/0x300 [ 88.601581][ C1] htab_lock_bucket+0x181/0x300 [ 88.601597][ C1] ? htab_lru_map_delete_node+0x750/0x750 [ 88.601613][ C1] ? look_up_lock_class+0x75/0x140 [ 88.601631][ C1] ? verify_lock_unused+0x18/0x140 [ 88.601648][ C1] ? jhash+0x34e/0x740 [ 88.601663][ C1] htab_lru_map_delete_elem+0x1a4/0x630 [ 88.601681][ C1] ? htab_lru_map_update_elem+0x970/0x970 [ 88.601697][ C1] ? perf_callchain+0x200/0x200 [ 88.601715][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 88.601733][ C1] bpf_overflow_handler+0x1f9/0x4f0 [ 88.601752][ C1] ? bpf_overflow_handler+0xcf/0x4f0 [ 88.601771][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 88.601794][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 88.601812][ C1] __perf_event_overflow+0x447/0x630 [ 88.601832][ C1] perf_swevent_event+0x4de/0x5c0 [ 88.601850][ C1] ? perf_tp_event+0x13a0/0x13a0 [ 88.601871][ C1] perf_bp_event+0x252/0x300 [ 88.601890][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 88.601920][ C1] ? lock_acquire+0x2b1/0x410 [ 88.601940][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 88.601962][ C1] notifier_call_chain+0x197/0x390 [ 88.601982][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 88.602001][ C1] atomic_notifier_call_chain+0xda/0x180 [ 88.602020][ C1] notify_die+0x131/0x180 [ 88.602039][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 88.602061][ C1] ? rcu_is_watching+0x15/0xb0 [ 88.602081][ C1] notify_debug+0x2e/0x50 [ 88.602105][ C1] exc_debug+0xe6/0x140 [ 88.602122][ C1] asm_exc_debug+0x1e/0x40 [ 88.602137][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 88.602155][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 88.602168][ C1] RSP: 0018:ffffc900044b7bd0 EFLAGS: 00050202 [ 88.602183][ C1] RAX: ffffffff841f3d01 RBX: 0000000000100008 RCX: 00000000000fff47 [ 88.602195][ C1] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffff8880600000c1 [ 88.602207][ C1] RBP: ffffc900044b7d20 R08: ffff888060100007 R09: 1ffff1100c020000 [ 88.602218][ C1] R10: dffffc0000000000 R11: ffffed100c020001 R12: 0000200000100248 [ 88.602229][ C1] R13: 1ffff92000896fbd R14: ffff888060000000 R15: 0000200000000240 [ 88.602244][ C1] ? rcuref_put_slowpath+0xe1/0x150 [ 88.602266][ C1] [ 88.602271][ C1] [ 88.602276][ C1] _copy_from_user+0x8b/0xe0 [ 88.602294][ C1] generic_map_update_batch+0x53f/0x810 [ 88.602319][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 88.602334][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 88.602344][ C1] ? __fdget+0x14a/0x210 [ 88.602357][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 88.602370][ C1] bpf_map_do_batch+0x3d7/0x610 [ 88.602381][ C1] __sys_bpf+0x31b/0x800 [ 88.602390][ C1] ? bpf_link_show_fdinfo+0x350/0x350 [ 88.602403][ C1] ? lock_chain_count+0x20/0x20 [ 88.602414][ C1] __x64_sys_bpf+0x7c/0x90 [ 88.602423][ C1] do_syscall_64+0x55/0xb0 [ 88.602431][ C1] ? clear_bhb_loop+0x40/0x90 [ 88.602441][ C1] ? clear_bhb_loop+0x40/0x90 [ 88.602452][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.602462][ C1] RIP: 0033:0x7f067778f749 [ 88.602470][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.602485][ C1] RSP: 002b:00007ffc1c8d3d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.602495][ C1] RAX: ffffffffffffffda RBX: 00007f06779e5fa0 RCX: 00007f067778f749 [ 88.602501][ C1] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 88.602507][ C1] RBP: 00007f0677813f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.602513][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.602518][ C1] R13: 00007f06779e5fa0 R14: 00007f06779e5fa0 R15: 0000000000000003 [ 88.602527][ C1]