Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. 2026/05/03 12:30:09 parsed 1 programs [ 79.242401][ T5779] cgroup: Unknown subsys name 'net' [ 79.373456][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.782001][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.307389][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.315219][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.323149][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.331687][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.340264][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.347670][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.659782][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.671778][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.708167][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.716118][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.096279][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.173162][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.181791][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.189514][ T5849] bridge_slave_0: entered allmulticast mode [ 85.196554][ T5849] bridge_slave_0: entered promiscuous mode [ 85.205431][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.213203][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.220757][ T5849] bridge_slave_1: entered allmulticast mode [ 85.228257][ T5849] bridge_slave_1: entered promiscuous mode [ 85.260672][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.271961][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.305633][ T5849] team0: Port device team_slave_0 added [ 85.314655][ T5849] team0: Port device team_slave_1 added [ 85.352169][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.359413][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.385496][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.413392][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.420424][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.447664][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.481197][ T5849] hsr_slave_0: entered promiscuous mode [ 85.488677][ T5849] hsr_slave_1: entered promiscuous mode [ 85.604772][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.617388][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.627894][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.638412][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.737742][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.771340][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.783606][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.791030][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.807170][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.814388][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.025175][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.071644][ T5849] veth0_vlan: entered promiscuous mode [ 86.085811][ T5849] veth1_vlan: entered promiscuous mode [ 86.135604][ T5849] veth0_macvtap: entered promiscuous mode [ 86.165521][ T5849] veth1_macvtap: entered promiscuous mode [ 86.200951][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.215335][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.240895][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249959][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.260690][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.269600][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522477][ T1115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.030139][ T969] cfg80211: failed to load regulatory.db 2026/05/03 12:30:19 executed programs: 0 [ 87.530604][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.538591][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.549280][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.558506][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.566240][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.573925][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.697807][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 87.759670][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.767532][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.774715][ T5884] bridge_slave_0: entered allmulticast mode [ 87.781888][ T5884] bridge_slave_0: entered promiscuous mode [ 87.792433][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.800123][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.807887][ T5884] bridge_slave_1: entered allmulticast mode [ 87.814558][ T5884] bridge_slave_1: entered promiscuous mode [ 87.842656][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.853836][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.879934][ T5884] team0: Port device team_slave_0 added [ 87.889091][ T5884] team0: Port device team_slave_1 added [ 87.913047][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.920324][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.947713][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.959644][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.966828][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.992917][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.025812][ T5884] hsr_slave_0: entered promiscuous mode [ 88.032452][ T5884] hsr_slave_1: entered promiscuous mode [ 88.040058][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.047915][ T5884] Cannot create hsr debugfs directory [ 89.256534][ T1115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.656642][ T51] Bluetooth: hci0: command tx timeout [ 91.507620][ T1115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.568992][ T1115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.736801][ T51] Bluetooth: hci0: command tx timeout [ 92.447941][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.459147][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.469810][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.479068][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.504205][ T1115] hsr_slave_0: left promiscuous mode [ 92.511190][ T1115] hsr_slave_1: left promiscuous mode [ 92.517659][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.525077][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.533742][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.541465][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.549482][ T1115] bridge_slave_1: left allmulticast mode [ 92.555162][ T1115] bridge_slave_1: left promiscuous mode [ 92.561727][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.572910][ T1115] bridge_slave_0: left allmulticast mode [ 92.578613][ T1115] bridge_slave_0: left promiscuous mode [ 92.584354][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.604620][ T1115] veth1_macvtap: left promiscuous mode [ 92.610927][ T1115] veth0_macvtap: left promiscuous mode [ 92.616663][ T1115] veth1_vlan: left promiscuous mode [ 92.622113][ T1115] veth0_vlan: left promiscuous mode [ 93.001158][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 93.034023][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 93.065289][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.098205][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.314140][ T1115] bond0 (unregistering): Released all slaves [ 93.441002][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.478160][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.489544][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.496726][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.525574][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.533011][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.733719][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.768967][ T5884] veth0_vlan: entered promiscuous mode [ 93.786444][ T5884] veth1_vlan: entered promiscuous mode [ 93.817438][ T51] Bluetooth: hci0: command tx timeout [ 93.860495][ T5884] veth0_macvtap: entered promiscuous mode [ 93.880519][ T5884] veth1_macvtap: entered promiscuous mode [ 93.898919][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.913893][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.926566][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.935263][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.944934][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.954277][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.007766][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015609][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.045300][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.054064][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.305263][ C1] [ 94.305269][ C1] ================================ [ 94.305271][ C1] WARNING: inconsistent lock state [ 94.305277][ C1] syzkaller #0 Not tainted [ 94.305282][ C1] -------------------------------- [ 94.305284][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 94.305288][ C1] syz.0.17/5923 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 94.305298][ C1] ffff88802c39f988 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 94.305333][ C1] {INITIAL USE} state was registered at: [ 94.305338][ C1] lock_acquire+0x19e/0x420 [ 94.305349][ C1] _raw_spin_lock+0x2e/0x40 [ 94.305358][ C1] htab_lock_bucket+0x17d/0x300 [ 94.305366][ C1] htab_lru_map_update_elem+0x2c6/0x990 [ 94.305373][ C1] bpf_map_update_value+0x660/0x720 [ 94.305387][ C1] generic_map_update_batch+0x5ec/0x810 [ 94.305394][ C1] bpf_map_do_batch+0x3d7/0x610 [ 94.305402][ C1] __sys_bpf+0x381/0x890 [ 94.305409][ C1] __x64_sys_bpf+0x7c/0x90 [ 94.305416][ C1] do_syscall_64+0x55/0xa0 [ 94.305423][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.305434][ C1] irq event stamp: 200794 [ 94.305437][ C1] hardirqs last enabled at (200793): [] syscall_enter_from_user_mode+0x25/0x80 [ 94.305450][ C1] hardirqs last disabled at (200794): [] exc_debug+0x73/0x140 [ 94.305459][ C1] softirqs last enabled at (200720): [] bpf_prog_load+0x1266/0x1670 [ 94.305469][ C1] softirqs last disabled at (200718): [] bpf_ksym_add+0x2d/0x340 [ 94.305480][ C1] [ 94.305480][ C1] other info that might help us debug this: [ 94.305483][ C1] Possible unsafe locking scenario: [ 94.305483][ C1] [ 94.305485][ C1] CPU0 [ 94.305486][ C1] ---- [ 94.305487][ C1] lock(&htab->lockdep_key); [ 94.305493][ C1] [ 94.305494][ C1] lock(&htab->lockdep_key); [ 94.305499][ C1] [ 94.305499][ C1] *** DEADLOCK *** [ 94.305499][ C1] [ 94.305500][ C1] no locks held by syz.0.17/5923. [ 94.305504][ C1] [ 94.305504][ C1] stack backtrace: [ 94.305514][ C1] CPU: 1 PID: 5923 Comm: syz.0.17 Not tainted syzkaller #0 [ 94.305522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.305532][ C1] Call Trace: [ 94.305538][ C1] <#DB> [ 94.305541][ C1] dump_stack_lvl+0x18c/0x250 [ 94.305555][ C1] ? show_regs_print_info+0x20/0x20 [ 94.305568][ C1] ? print_usage_bug+0x475/0x690 [ 94.305578][ C1] ? verify_lock_unused+0x18/0x140 [ 94.305587][ C1] lock_acquire+0x2c2/0x420 [ 94.305597][ C1] ? htab_lock_bucket+0x17d/0x300 [ 94.305606][ C1] ? read_lock_is_recursive+0x20/0x20 [ 94.305618][ C1] _raw_spin_lock+0x2e/0x40 [ 94.305627][ C1] ? htab_lock_bucket+0x17d/0x300 [ 94.305635][ C1] htab_lock_bucket+0x17d/0x300 [ 94.305644][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 94.305654][ C1] ? kvm_guest_state+0xb7/0xf0 [ 94.305665][ C1] ? jhash+0x2e8/0x740 [ 94.305674][ C1] htab_lru_map_delete_elem+0x1a4/0x650 [ 94.305684][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 94.305692][ C1] ? perf_callchain+0x220/0x220 [ 94.305703][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 94.305716][ C1] bpf_overflow_handler+0x1fc/0x510 [ 94.305728][ C1] ? bpf_overflow_handler+0xde/0x510 [ 94.305739][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 94.305751][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 94.305761][ C1] __perf_event_overflow+0x447/0x630 [ 94.305772][ C1] perf_swevent_event+0x319/0x570 [ 94.305782][ C1] ? perf_tp_event+0x1520/0x1520 [ 94.305793][ C1] perf_bp_event+0x319/0x430 [ 94.305803][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 94.305814][ C1] ? rep_movs_alternative+0x33/0x90 [ 94.305831][ C1] ? lock_acquire+0x2c2/0x420 [ 94.305841][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 94.305853][ C1] notifier_call_chain+0x197/0x380 [ 94.305865][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 94.305876][ C1] atomic_notifier_call_chain+0xda/0x180 [ 94.305886][ C1] notify_die+0x145/0x1a0 [ 94.305896][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 94.305911][ C1] ? rcu_is_watching+0x15/0xb0 [ 94.305930][ C1] notify_debug+0x2e/0x50 [ 94.305942][ C1] exc_debug+0xde/0x140 [ 94.305955][ C1] asm_exc_debug+0x1e/0x40 [ 94.305972][ C1] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 94.305987][ C1] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 94.305999][ C1] RSP: 0018:ffffc90003207d50 EFLAGS: 00040202 [ 94.306011][ C1] RAX: 00000100ffffffff RBX: 000000000000000c RCX: 000000000000000c [ 94.306019][ C1] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc90003207dc0 [ 94.306029][ C1] RBP: ffffc90003207ee8 R08: ffffc90003207dcb R09: 1ffff92000640fb9 [ 94.306041][ C1] R10: dffffc0000000000 R11: fffff52000640fba R12: 000020000000030c [ 94.306054][ C1] R13: 000000000000000c R14: ffffc90003207dc0 R15: 0000200000000300 [ 94.306073][ C1] [ 94.306078][ C1] [ 94.306083][ C1] _copy_from_user+0x8b/0xe0 [ 94.306105][ C1] __sys_bpf+0x23e/0x890 [ 94.306123][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 94.306138][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 94.306164][ C1] ? lock_chain_count+0x20/0x20 [ 94.306185][ C1] __x64_sys_bpf+0x7c/0x90 [ 94.306201][ C1] do_syscall_64+0x55/0xa0 [ 94.306215][ C1] ? clear_bhb_loop+0x40/0x90 [ 94.306234][ C1] ? clear_bhb_loop+0x40/0x90 [ 94.306254][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.306273][ C1] RIP: 0033:0x7f1ec6b9cdd9 [ 94.306285][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.306298][ C1] RSP: 002b:00007fff1b89fe98 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.306313][ C1] RAX: ffffffffffffffda RBX: 00007f1ec6e15fa0 RCX: 00007f1ec6b9cdd9 [ 94.306323][ C1] RDX: 000000000000000c RSI: 0000200000000300 RDI: 000000000000000e [ 94.306332][ C1] RBP: 00007f1ec6c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 94.306340][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.306344][ C1] R13: 00007f1ec6e15fac R14: 00007f1ec6e15fa0 R15: 00007f1ec6e15fa0 [ 94.306353][ C1]