Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. 2025/12/22 18:09:00 parsed 1 programs [ 90.644177][ T5834] cgroup: Unknown subsys name 'net' [ 90.821526][ T5834] cgroup: Unknown subsys name 'cpuset' [ 90.829904][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.033005][ T892] cfg80211: failed to load regulatory.db [ 92.439610][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.113082][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.121933][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.152473][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.160371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.201178][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.656692][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.664511][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.672967][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.682879][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.690774][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.293300][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 98.370973][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.378934][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.386092][ T5908] bridge_slave_0: entered allmulticast mode [ 98.393464][ T5908] bridge_slave_0: entered promiscuous mode [ 98.402138][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.409387][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.416520][ T5908] bridge_slave_1: entered allmulticast mode [ 98.424532][ T5908] bridge_slave_1: entered promiscuous mode [ 98.459671][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.471807][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.502304][ T5908] team0: Port device team_slave_0 added [ 98.511215][ T5908] team0: Port device team_slave_1 added [ 98.539611][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.546554][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.572531][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.585068][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.592707][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.618618][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.661933][ T5908] hsr_slave_0: entered promiscuous mode [ 98.668809][ T5908] hsr_slave_1: entered promiscuous mode [ 98.812468][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.824425][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.835199][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.845754][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.877297][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.884492][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.892413][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.899522][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.955123][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.972665][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.981813][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.997410][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.012016][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.019165][ T3803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.033821][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.040987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.212577][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.252753][ T5908] veth0_vlan: entered promiscuous mode [ 99.265406][ T5908] veth1_vlan: entered promiscuous mode [ 99.292288][ T5908] veth0_macvtap: entered promiscuous mode [ 99.303193][ T5908] veth1_macvtap: entered promiscuous mode [ 99.321858][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.337418][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.351620][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.361972][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.377064][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.386667][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.503318][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.592725][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.660637][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.735488][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/22 18:09:13 executed programs: 0 [ 100.073775][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.082241][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.090975][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.101325][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.111463][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.271712][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 100.352652][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.360282][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.367407][ T5939] bridge_slave_0: entered allmulticast mode [ 100.374946][ T5939] bridge_slave_0: entered promiscuous mode [ 100.384263][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.391997][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.399255][ T5939] bridge_slave_1: entered allmulticast mode [ 100.406308][ T5939] bridge_slave_1: entered promiscuous mode [ 100.444339][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.456499][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.492213][ T5939] team0: Port device team_slave_0 added [ 100.501859][ T5939] team0: Port device team_slave_1 added [ 100.534869][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.542207][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.569022][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.582683][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.589964][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.616180][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.663685][ T5939] hsr_slave_0: entered promiscuous mode [ 100.671093][ T5939] hsr_slave_1: entered promiscuous mode [ 100.677235][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 100.683805][ T5939] Cannot create hsr debugfs directory [ 102.188843][ T52] Bluetooth: hci0: command tx timeout [ 102.265722][ T13] bridge_slave_1: left allmulticast mode [ 102.272779][ T13] bridge_slave_1: left promiscuous mode [ 102.281650][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.292646][ T13] bridge_slave_0: left allmulticast mode [ 102.298361][ T13] bridge_slave_0: left promiscuous mode [ 102.305313][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.539279][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.551070][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.561013][ T13] bond0 (unregistering): Released all slaves [ 102.671837][ T13] hsr_slave_0: left promiscuous mode [ 102.679091][ T13] hsr_slave_1: left promiscuous mode [ 102.685358][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.698039][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.707062][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.721328][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.740961][ T13] veth1_macvtap: left promiscuous mode [ 102.746628][ T13] veth0_macvtap: left promiscuous mode [ 102.753432][ T13] veth1_vlan: left promiscuous mode [ 102.758971][ T13] veth0_vlan: left promiscuous mode [ 103.161232][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.196530][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.602815][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.623550][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.640318][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.660818][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.198655][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.219304][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.234926][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.242133][ T3803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.256592][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.263811][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.272044][ T52] Bluetooth: hci0: command tx timeout [ 104.460075][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.504786][ T5939] veth0_vlan: entered promiscuous mode [ 104.516851][ T5939] veth1_vlan: entered promiscuous mode [ 104.545568][ T5939] veth0_macvtap: entered promiscuous mode [ 104.554544][ T5939] veth1_macvtap: entered promiscuous mode [ 104.572865][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.586593][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.605383][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.615212][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.627116][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.638519][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.692540][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.704832][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.730253][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.738861][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.826986][ C0] [ 104.826995][ C0] ================================ [ 104.826999][ C0] WARNING: inconsistent lock state [ 104.827007][ C0] syzkaller #0 Not tainted [ 104.827013][ C0] -------------------------------- [ 104.827018][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 104.827023][ C0] syz.0.17/5989 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 104.827037][ C0] ffffe8ffffc2f8d8 (&l->lock#2){....}-{2:2}, at: bpf_lru_push_free+0x13e/0x520 [ 104.827078][ C0] {INITIAL USE} state was registered at: [ 104.827083][ C0] lock_acquire+0x117/0x340 [ 104.827095][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 104.827115][ C0] bpf_lru_pop_free+0xcb/0x19b0 [ 104.827126][ C0] htab_lru_map_update_elem+0x168/0x8a0 [ 104.827139][ C0] bpf_map_update_value+0x751/0x920 [ 104.827152][ C0] generic_map_update_batch+0x5a9/0x810 [ 104.827165][ C0] bpf_map_do_batch+0x39b/0x630 [ 104.827183][ C0] __sys_bpf+0x750/0x8a0 [ 104.827199][ C0] __x64_sys_bpf+0x7c/0x90 [ 104.827213][ C0] do_syscall_64+0xfa/0xf80 [ 104.827225][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.827237][ C0] irq event stamp: 19654 [ 104.827246][ C0] hardirqs last enabled at (19653): [] do_syscall_64+0xbe/0xf80 [ 104.827263][ C0] hardirqs last disabled at (19654): [] exc_debug_kernel+0x68/0x150 [ 104.827282][ C0] softirqs last enabled at (19590): [] bpf_prog_load+0x14fb/0x1a10 [ 104.827304][ C0] softirqs last disabled at (19588): [] bpf_ksym_add+0x2d/0x340 [ 104.827326][ C0] [ 104.827326][ C0] other info that might help us debug this: [ 104.827330][ C0] Possible unsafe locking scenario: [ 104.827330][ C0] [ 104.827334][ C0] CPU0 [ 104.827338][ C0] ---- [ 104.827341][ C0] lock(&l->lock#2); [ 104.827352][ C0] [ 104.827355][ C0] lock(&l->lock#2); [ 104.827366][ C0] [ 104.827366][ C0] *** DEADLOCK *** [ 104.827366][ C0] [ 104.827370][ C0] no locks held by syz.0.17/5989. [ 104.827376][ C0] [ 104.827376][ C0] stack backtrace: [ 104.827388][ C0] CPU: 0 UID: 0 PID: 5989 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.827413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.827425][ C0] Call Trace: [ 104.827431][ C0] <#DB> [ 104.827436][ C0] dump_stack_lvl+0x189/0x250 [ 104.827453][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.827468][ C0] ? __pfx__printk+0x10/0x10 [ 104.827485][ C0] ? nbcon_cpu_emergency_exit+0x15b/0x200 [ 104.827506][ C0] print_usage_bug+0x28b/0x2e0 [ 104.827522][ C0] ? bpf_lru_push_free+0x13e/0x520 [ 104.827533][ C0] lock_acquire+0x1f8/0x340 [ 104.827546][ C0] ? bpf_lru_push_free+0x13e/0x520 [ 104.827560][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 104.827578][ C0] ? bpf_lru_push_free+0x13e/0x520 [ 104.827590][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 104.827610][ C0] ? htab_unlock_bucket+0x200/0x2e0 [ 104.827625][ C0] ? __pfx_htab_unlock_bucket+0x10/0x10 [ 104.827639][ C0] ? perf_prepare_sample+0x168/0x2250 [ 104.827657][ C0] bpf_lru_push_free+0x13e/0x520 [ 104.827669][ C0] ? check_and_free_fields+0x5e/0x2d0 [ 104.827685][ C0] htab_lru_map_delete_elem+0x3a3/0x410 [ 104.827718][ C0] bpf_prog_464bc2be3fc7c272+0x43/0x4b [ 104.827733][ C0] __perf_event_overflow+0x39c/0xe70 [ 104.827753][ C0] ? __perf_event_overflow+0x258/0xe70 [ 104.827774][ C0] ? __pfx___perf_event_overflow+0x10/0x10 [ 104.827798][ C0] perf_swevent_event+0x4f8/0x5e0 [ 104.827820][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 104.827843][ C0] perf_bp_event+0x251/0x300 [ 104.827865][ C0] ? __pfx_perf_bp_event+0x10/0x10 [ 104.827936][ C0] hw_breakpoint_exceptions_notify+0x244/0x680 [ 104.827960][ C0] notifier_call_chain+0x19d/0x3a0 [ 104.827977][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 104.827994][ C0] atomic_notifier_call_chain+0xda/0x180 [ 104.828011][ C0] notify_die+0x130/0x180 [ 104.828028][ C0] ? __pfx_notify_die+0x10/0x10 [ 104.828048][ C0] ? rcu_is_watching+0x15/0xb0 [ 104.828065][ C0] notify_debug+0x2e/0x50 [ 104.828076][ C0] exc_debug_kernel+0xbe/0x150 [ 104.828095][ C0] asm_exc_debug+0x1e/0x40 [ 104.828107][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 104.828126][ C0] Code: 48 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 104.828137][ C0] RSP: 0018:ffffc90003697cf8 EFLAGS: 00050202 [ 104.828148][ C0] RAX: 00007ffffffff001 RBX: 0000000000000050 RCX: 000000000000000f [ 104.828157][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90003697da1 [ 104.828166][ C0] RBP: ffffc90003697ea8 R08: ffffc90003697daf R09: 1ffff920006d2fb5 [ 104.828176][ C0] R10: dffffc0000000000 R11: fffff520006d2fb6 R12: ffffc90003697d60 [ 104.828185][ C0] R13: 0000000000000050 R14: ffffc90003697d60 R15: 00002000000002c0 [ 104.828200][ C0] [ 104.828205][ C0] [ 104.828209][ C0] _copy_from_user+0x7a/0xb0 [ 104.828226][ C0] __sys_bpf+0x1f2/0x8a0 [ 104.828249][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 104.828272][ C0] ? __fget_files+0x3a0/0x420 [ 104.828290][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 104.828308][ C0] __x64_sys_bpf+0x7c/0x90 [ 104.828324][ C0] do_syscall_64+0xfa/0xf80 [ 104.828337][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.828350][ C0] ? clear_bhb_loop+0x60/0xb0 [ 104.828364][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.828376][ C0] RIP: 0033:0x7efcc198f749 [ 104.828386][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.828396][ C0] RSP: 002b:00007efcc2754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.828409][ C0] RAX: ffffffffffffffda RBX: 00007efcc1be5fa0 RCX: 00007efcc198f749 [ 104.828418][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 104.828426][ C0] RBP: 00007efcc1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.828434][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.828459][ C0] R13: 00007efcc1be6038 R14: 00007efcc1be5fa0 R15: 00007ffd9db831a8 [ 104.828475][ C0]