Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. 2026/04/16 21:03:08 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 110.908625][ T6131] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.726293][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.735048][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.756199][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.765304][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.196341][ T6207] chnl_net:caif_netlink_parms(): no params data found [ 116.274061][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.281423][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.288565][ T6207] bridge_slave_0: entered allmulticast mode [ 116.295680][ T6207] bridge_slave_0: entered promiscuous mode [ 116.304955][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.312495][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.320073][ T6207] bridge_slave_1: entered allmulticast mode [ 116.327035][ T6207] bridge_slave_1: entered promiscuous mode [ 116.357076][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.368158][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.396796][ T6207] team0: Port device team_slave_0 added [ 116.404106][ T6207] team0: Port device team_slave_1 added [ 116.426532][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.434359][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.460639][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.473190][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.480613][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.507076][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.544935][ T6207] hsr_slave_0: entered promiscuous mode [ 116.551166][ T6207] hsr_slave_1: entered promiscuous mode [ 117.095691][ T6207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.106741][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.114938][ T6207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.131109][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.138956][ T6207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.151981][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.160559][ T6207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.175930][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.278677][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.307896][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.322903][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.330101][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.348182][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.355384][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.415001][ T6207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.608309][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.667493][ T6207] veth0_vlan: entered promiscuous mode [ 117.682357][ T6207] veth1_vlan: entered promiscuous mode [ 117.718629][ T6207] veth0_macvtap: entered promiscuous mode [ 117.731424][ T6207] veth1_macvtap: entered promiscuous mode [ 117.757379][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.773641][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.795564][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.824326][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.851923][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.873646][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.014560][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.032400][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.043964][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.051712][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.062199][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.069961][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.127248][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.230905][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.352979][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/16 21:03:20 executed programs: 0 [ 118.903279][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.913307][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.926466][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.936327][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.944518][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.214491][ T6299] chnl_net:caif_netlink_parms(): no params data found [ 119.322396][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.330162][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.337402][ T6299] bridge_slave_0: entered allmulticast mode [ 119.346171][ T6299] bridge_slave_0: entered promiscuous mode [ 119.356741][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.364464][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.381356][ T6299] bridge_slave_1: entered allmulticast mode [ 119.389072][ T6299] bridge_slave_1: entered promiscuous mode [ 119.448511][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.464478][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.516968][ T6299] team0: Port device team_slave_0 added [ 119.526360][ T6299] team0: Port device team_slave_1 added [ 119.571529][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.578550][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.605116][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.621425][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.628459][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.655367][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.717535][ T6299] hsr_slave_0: entered promiscuous mode [ 119.724314][ T6299] hsr_slave_1: entered promiscuous mode [ 119.731850][ T6299] debugfs: 'hsr0' already exists in 'hsr' [ 119.737626][ T6299] Cannot create hsr debugfs directory [ 120.621690][ T37] bridge_slave_1: left allmulticast mode [ 120.629510][ T37] bridge_slave_1: left promiscuous mode [ 120.636024][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.651969][ T37] bridge_slave_0: left allmulticast mode [ 120.657642][ T37] bridge_slave_0: left promiscuous mode [ 120.663556][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.851004][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.864277][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.873924][ T37] bond0 (unregistering): Released all slaves [ 120.970368][ T49] Bluetooth: hci0: command tx timeout [ 121.022609][ T37] hsr_slave_0: left promiscuous mode [ 121.039282][ T37] hsr_slave_1: left promiscuous mode [ 121.047832][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.055703][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.063980][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.073515][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.090733][ T37] veth1_macvtap: left promiscuous mode [ 121.096381][ T37] veth0_macvtap: left promiscuous mode [ 121.102664][ T37] veth1_vlan: left promiscuous mode [ 121.107976][ T37] veth0_vlan: left promiscuous mode [ 121.384512][ T37] team0 (unregistering): Port device team_slave_1 removed [ 121.405382][ T37] team0 (unregistering): Port device team_slave_0 removed [ 121.819489][ T6299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.831461][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.845907][ T6299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.856191][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.866062][ T6299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.878091][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.889271][ T6299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.902842][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.108970][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.143703][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.158103][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.165333][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.193935][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.201157][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.431835][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.467545][ T6299] veth0_vlan: entered promiscuous mode [ 122.477343][ T6299] veth1_vlan: entered promiscuous mode [ 122.504833][ T6299] veth0_macvtap: entered promiscuous mode [ 122.514138][ T6299] veth1_macvtap: entered promiscuous mode [ 122.529518][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.545016][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.559085][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.567912][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.577434][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.586385][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.641988][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.654303][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.676249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.684727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.768142][ C1] [ 122.768150][ C1] ================================ [ 122.768153][ C1] WARNING: inconsistent lock state [ 122.768163][ C1] syzkaller #0 Not tainted [ 122.768169][ C1] -------------------------------- [ 122.768172][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 122.768176][ C1] syz.0.17/6426 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 122.768186][ C1] ffffe8ffffd2cf18 (&l->lock#2){....}-{2:2}, at: bpf_lru_push_free+0xcb/0xbb0 [ 122.768226][ C1] {INITIAL USE} state was registered at: [ 122.768230][ C1] lock_acquire+0x106/0x350 [ 122.768241][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 122.768252][ C1] bpf_lru_pop_free+0xcc/0x1ca0 [ 122.768262][ C1] htab_lru_map_update_elem+0x122/0x870 [ 122.768273][ C1] bpf_map_update_value+0x750/0x920 [ 122.768285][ C1] generic_map_update_batch+0x6ea/0x990 [ 122.768297][ C1] bpf_map_do_batch+0x39b/0x630 [ 122.768306][ C1] __sys_bpf+0x7c1/0x950 [ 122.768320][ C1] __x64_sys_bpf+0x7c/0x90 [ 122.768327][ C1] do_syscall_64+0x15f/0xf80 [ 122.768337][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.768346][ C1] irq event stamp: 19586 [ 122.768350][ C1] hardirqs last enabled at (19585): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.768362][ C1] hardirqs last disabled at (19586): [] exc_debug_kernel+0x60/0x140 [ 122.768377][ C1] softirqs last enabled at (19520): [] bpf_prog_load+0x1504/0x1a10 [ 122.768389][ C1] softirqs last disabled at (19518): [] bpf_ksym_add+0x2d/0x340 [ 122.768401][ C1] [ 122.768401][ C1] other info that might help us debug this: [ 122.768404][ C1] Possible unsafe locking scenario: [ 122.768404][ C1] [ 122.768407][ C1] CPU0 [ 122.768409][ C1] ---- [ 122.768411][ C1] lock(&l->lock#2); [ 122.768419][ C1] [ 122.768422][ C1] lock(&l->lock#2); [ 122.768429][ C1] [ 122.768429][ C1] *** DEADLOCK *** [ 122.768429][ C1] [ 122.768432][ C1] no locks held by syz.0.17/6426. [ 122.768436][ C1] [ 122.768436][ C1] stack backtrace: [ 122.768451][ C1] CPU: 1 UID: 0 PID: 6426 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 122.768461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.768472][ C1] Call Trace: [ 122.768476][ C1] <#DB> [ 122.768480][ C1] dump_stack_lvl+0xe8/0x150 [ 122.768496][ C1] print_usage_bug+0x28b/0x2e0 [ 122.768509][ C1] ? bpf_lru_push_free+0xcb/0xbb0 [ 122.768520][ C1] lock_acquire+0x1cc/0x350 [ 122.768532][ C1] ? bpf_lru_push_free+0xcb/0xbb0 [ 122.768545][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 122.768554][ C1] ? bpf_lru_push_free+0xcb/0xbb0 [ 122.768565][ C1] bpf_lru_push_free+0xcb/0xbb0 [ 122.768578][ C1] htab_lru_map_delete_elem+0x3d3/0x440 [ 122.768591][ C1] bpf_prog_464bc2be3fc7c272+0x43/0x4b [ 122.768604][ C1] __perf_event_overflow+0x3b7/0xec0 [ 122.768618][ C1] ? __perf_event_overflow+0x273/0xec0 [ 122.768631][ C1] ? __pfx___perf_event_overflow+0x10/0x10 [ 122.768646][ C1] perf_swevent_event+0x637/0x7e0 [ 122.768660][ C1] ? __pfx_perf_swevent_event+0x10/0x10 [ 122.768675][ C1] perf_bp_event+0x318/0x430 [ 122.768689][ C1] ? __pfx_perf_bp_event+0x10/0x10 [ 122.768711][ C1] hw_breakpoint_exceptions_notify+0x243/0x680 [ 122.768724][ C1] notifier_call_chain+0x1ad/0x3d0 [ 122.768734][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 122.768743][ C1] atomic_notifier_call_chain+0xda/0x180 [ 122.768752][ C1] notify_die+0x144/0x1a0 [ 122.768761][ C1] ? __pfx_notify_die+0x10/0x10 [ 122.768771][ C1] ? rcu_is_watching+0x15/0xb0 [ 122.768785][ C1] notify_debug+0x2e/0x50 [ 122.768797][ C1] exc_debug_kernel+0xb1/0x140 [ 122.768811][ C1] asm_exc_debug+0x1e/0x40 [ 122.768820][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 122.768835][ C1] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 122.768843][ C1] RSP: 0018:ffffc900026a7b10 EFLAGS: 00050202 [ 122.768851][ C1] RAX: 00007ffffffff001 RBX: 0000000000000080 RCX: 0000000000000030 [ 122.768858][ C1] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc90002dde0b0 [ 122.768864][ C1] RBP: 0000000000000000 R08: ffffc90002dde0df R09: 1ffff920005bbc1b [ 122.768870][ C1] R10: dffffc0000000000 R11: fffff520005bbc1c R12: 0000000000000000 [ 122.768876][ C1] R13: dffffc0000000000 R14: ffffc90002dde060 R15: 00002000000002c0 [ 122.768886][ C1] [ 122.768889][ C1] [ 122.768892][ C1] _copy_from_user+0x7a/0xb0 [ 122.768902][ C1] copy_from_bpfptr+0x5c/0x90 [ 122.768912][ C1] bpf_prog_load+0xad5/0x1a10 [ 122.768924][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 122.768934][ C1] ? __might_fault+0xaf/0x130 [ 122.768949][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 122.768959][ C1] ? security_bpf+0x7e/0x2d0 [ 122.768972][ C1] __sys_bpf+0x618/0x950 [ 122.768981][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 122.768993][ C1] ? __fget_files+0x2a/0x420 [ 122.769005][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 122.769018][ C1] ? __fget_files+0x2a/0x420 [ 122.769030][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.769039][ C1] __x64_sys_bpf+0x7c/0x90 [ 122.769048][ C1] do_syscall_64+0x15f/0xf80 [ 122.769058][ C1] ? trace_irq_disable+0x3b/0x140 [ 122.769068][ C1] ? clear_bhb_loop+0x40/0x90 [ 122.769079][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.769088][ C1] RIP: 0033:0x7f8491b9aef9 [ 122.769096][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.769103][ C1] RSP: 002b:00007f8492977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.769112][ C1] RAX: ffffffffffffffda RBX: 00007f8491e05fa0 RCX: 00007f8491b9aef9 [ 122.769118][ C1] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 122.769124][ C1] RBP: 00007f8491c2fee0 R08: 0000000000000000 R09: 0000000000000000 [ 122.769129][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.769134][ C1] R13: 00007f8491e06038 R14: 00007f8491e05fa0 R15: 00007ffcc7b86c78 [ 122.769144][ C1] [ 123.382230][ T49] Bluetooth: hci0: command tx timeout 2026/04/16 21:03:25 executed programs: 14 [ 125.449763][ T49] Bluetooth: hci0: command tx timeout [ 127.530055][ T49] Bluetooth: hci0: command tx timeout 2026/04/16 21:03:30 executed programs: 143 [ 132.742981][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749534][ T1300] ieee802154 phy1 wpan1: encryption failed: -22