Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. 2026/01/15 21:32:27 parsed 1 programs [ 103.163080][ T5783] cgroup: Unknown subsys name 'net' [ 103.294090][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.711553][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.333851][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 106.397141][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.404267][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.412874][ T5798] bridge_slave_0: entered allmulticast mode [ 106.419874][ T5798] bridge_slave_0: entered promiscuous mode [ 106.432261][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.439979][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.447291][ T5798] bridge_slave_1: entered allmulticast mode [ 106.454117][ T5798] bridge_slave_1: entered promiscuous mode [ 106.479383][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.493846][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.523541][ T5798] team0: Port device team_slave_0 added [ 106.532409][ T5798] team0: Port device team_slave_1 added [ 106.554082][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.561136][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.587131][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.603841][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.610922][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.636895][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.673356][ T5798] hsr_slave_0: entered promiscuous mode [ 106.680549][ T5798] hsr_slave_1: entered promiscuous mode [ 106.806021][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.820074][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.830440][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.840924][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.874546][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.881875][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.889694][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.896912][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.967059][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.989775][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.999199][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.015565][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.030862][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.038142][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.053492][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.060771][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.215779][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.250392][ T5798] veth0_vlan: entered promiscuous mode [ 107.262466][ T5798] veth1_vlan: entered promiscuous mode [ 107.290199][ T5798] veth0_macvtap: entered promiscuous mode [ 107.300338][ T5798] veth1_macvtap: entered promiscuous mode [ 107.318808][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.334303][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.346072][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.355398][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.365584][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.375689][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.526199][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.242452][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.251143][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.260615][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.268635][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.276470][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.284985][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.499048][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.510843][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.536310][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.548114][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.159612][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/15 21:32:35 executed programs: 0 [ 110.273193][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.283024][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.291851][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.300874][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.309370][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.317093][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.443856][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 110.500083][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.507442][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.514786][ T5885] bridge_slave_0: entered allmulticast mode [ 110.522079][ T5885] bridge_slave_0: entered promiscuous mode [ 110.530021][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.539054][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.546252][ T5885] bridge_slave_1: entered allmulticast mode [ 110.554467][ T5885] bridge_slave_1: entered promiscuous mode [ 110.584522][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.596468][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.625273][ T5885] team0: Port device team_slave_0 added [ 110.633562][ T5885] team0: Port device team_slave_1 added [ 110.657602][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.664555][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.690657][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.704496][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.712059][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.738211][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.773552][ T5885] hsr_slave_0: entered promiscuous mode [ 110.780329][ T5885] hsr_slave_1: entered promiscuous mode [ 110.786622][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.794555][ T5885] Cannot create hsr debugfs directory [ 112.328022][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.371848][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.387447][ T51] Bluetooth: hci0: command tx timeout [ 113.256182][ T146] hsr_slave_0: left promiscuous mode [ 113.263318][ T146] hsr_slave_1: left promiscuous mode [ 113.271028][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.285930][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.294969][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.302545][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.310623][ T146] bridge_slave_1: left allmulticast mode [ 113.316267][ T146] bridge_slave_1: left promiscuous mode [ 113.322793][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.333671][ T146] bridge_slave_0: left allmulticast mode [ 113.340860][ T146] bridge_slave_0: left promiscuous mode [ 113.346717][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.365874][ T146] veth1_macvtap: left promiscuous mode [ 113.372141][ T146] veth0_macvtap: left promiscuous mode [ 113.377829][ T146] veth1_vlan: left promiscuous mode [ 113.383505][ T146] veth0_vlan: left promiscuous mode [ 113.751896][ T146] team0 (unregistering): Port device team_slave_1 removed [ 113.783457][ T146] team0 (unregistering): Port device team_slave_0 removed [ 113.816176][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.850397][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.169480][ T146] bond0 (unregistering): Released all slaves [ 114.264449][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.274441][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.285890][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.301130][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.400499][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.425596][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.442530][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.449689][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.467172][ T51] Bluetooth: hci0: command tx timeout [ 114.479240][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.486495][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.711369][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.799922][ T5885] veth0_vlan: entered promiscuous mode [ 114.822373][ T5885] veth1_vlan: entered promiscuous mode [ 114.890279][ T5885] veth0_macvtap: entered promiscuous mode [ 114.907326][ T5885] veth1_macvtap: entered promiscuous mode [ 114.938148][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.966462][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.980777][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.990467][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.999223][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.008068][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.062233][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.075067][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.098851][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.107228][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.163712][ C1] [ 115.163717][ C1] ================================ [ 115.163720][ C1] WARNING: inconsistent lock state [ 115.163727][ C1] syzkaller #0 Not tainted [ 115.163732][ C1] -------------------------------- [ 115.163734][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 115.163738][ C1] syz.0.17/5933 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 115.163747][ C1] ffff888025565238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 115.163780][ C1] {INITIAL USE} state was registered at: [ 115.163783][ C1] lock_acquire+0x197/0x410 [ 115.163793][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 115.163803][ C1] trie_update_elem+0xca/0xea0 [ 115.163813][ C1] bpf_map_update_value+0x660/0x720 [ 115.163825][ C1] generic_map_update_batch+0x5e0/0x810 [ 115.163836][ C1] bpf_map_do_batch+0x3d7/0x610 [ 115.163843][ C1] __sys_bpf+0x31b/0x800 [ 115.163850][ C1] __x64_sys_bpf+0x7c/0x90 [ 115.163856][ C1] do_syscall_64+0x55/0xb0 [ 115.163864][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.163873][ C1] irq event stamp: 2928 [ 115.163876][ C1] hardirqs last enabled at (2927): [] seqcount_lockdep_reader_access+0x124/0x1c0 [ 115.163889][ C1] hardirqs last disabled at (2928): [] exc_debug+0x7b/0x140 [ 115.163898][ C1] softirqs last enabled at (2922): [] bpf_test_run+0x15c/0x850 [ 115.163911][ C1] softirqs last disabled at (2920): [] bpf_test_run+0x15c/0x850 [ 115.163922][ C1] [ 115.163922][ C1] other info that might help us debug this: [ 115.163924][ C1] Possible unsafe locking scenario: [ 115.163924][ C1] [ 115.163926][ C1] CPU0 [ 115.163928][ C1] ---- [ 115.163929][ C1] lock(&trie->lock); [ 115.163934][ C1] [ 115.163936][ C1] lock(&trie->lock); [ 115.163940][ C1] [ 115.163940][ C1] *** DEADLOCK *** [ 115.163940][ C1] [ 115.163942][ C1] no locks held by syz.0.17/5933. [ 115.163945][ C1] [ 115.163945][ C1] stack backtrace: [ 115.163953][ C1] CPU: 1 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0 [ 115.163961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.163972][ C1] Call Trace: [ 115.163978][ C1] <#DB> [ 115.163982][ C1] dump_stack_lvl+0x16c/0x230 [ 115.163992][ C1] ? show_regs_print_info+0x20/0x20 [ 115.164001][ C1] ? print_usage_bug+0x475/0x690 [ 115.164010][ C1] ? verify_lock_unused+0x18/0x140 [ 115.164019][ C1] lock_acquire+0x2b1/0x410 [ 115.164028][ C1] ? trie_delete_elem+0x96/0x6a0 [ 115.164039][ C1] ? read_lock_is_recursive+0x20/0x20 [ 115.164050][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 115.164060][ C1] ? trie_delete_elem+0x96/0x6a0 [ 115.164070][ C1] ? _raw_spin_lock+0x40/0x40 [ 115.164078][ C1] ? lock_acquire+0x2b1/0x410 [ 115.164086][ C1] ? perf_prepare_sample+0x13f/0x1d20 [ 115.164096][ C1] trie_delete_elem+0x96/0x6a0 [ 115.164106][ C1] ? __cant_sleep+0x210/0x210 [ 115.164119][ C1] bpf_prog_1c0c44170264bb34+0x45/0x49 [ 115.164132][ C1] bpf_overflow_handler+0x1f9/0x520 [ 115.164145][ C1] ? bpf_overflow_handler+0xcf/0x520 [ 115.164155][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 115.164167][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 115.164176][ C1] __perf_event_overflow+0x447/0x630 [ 115.164187][ C1] perf_swevent_event+0x4de/0x5c0 [ 115.164196][ C1] ? perf_tp_event+0x13a0/0x13a0 [ 115.164207][ C1] perf_bp_event+0x252/0x300 [ 115.164223][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 115.164238][ C1] ? lock_acquire+0x2b1/0x410 [ 115.164247][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 115.164259][ C1] notifier_call_chain+0x197/0x390 [ 115.164271][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 115.164281][ C1] atomic_notifier_call_chain+0xda/0x180 [ 115.164291][ C1] notify_die+0x131/0x180 [ 115.164301][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 115.164312][ C1] ? rcu_is_watching+0x15/0xb0 [ 115.164323][ C1] notify_debug+0x2e/0x50 [ 115.164336][ C1] exc_debug+0xe6/0x140 [ 115.164345][ C1] asm_exc_debug+0x1e/0x40 [ 115.164355][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 115.164365][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 115.164375][ C1] RSP: 0018:ffffc9000498fb10 EFLAGS: 00050206 [ 115.164382][ C1] RAX: ffffffff841f8401 RBX: 0000000000000e40 RCX: 0000000000000e3f [ 115.164389][ C1] RDX: 0000000000000000 RSI: ffff88807a9ea041 RDI: 0000200000000301 [ 115.164394][ C1] RBP: ffffc9000498fc50 R08: ffff88807a9eae7f R09: 1ffff1100f53d5cf [ 115.164400][ C1] R10: dffffc0000000000 R11: ffffed100f53d5d0 R12: 0000200000001140 [ 115.164406][ C1] R13: ffff88807a9ea040 R14: 0000200000000300 R15: ffff88807a9ea040 [ 115.164414][ C1] ? _copy_from_user+0x81/0xe0 [ 115.164426][ C1] [ 115.164428][ C1] [ 115.164431][ C1] _copy_to_user+0x85/0xa0 [ 115.164441][ C1] bpf_test_finish+0x201/0x620 [ 115.164452][ C1] ? convert_skb_to___skb+0x420/0x420 [ 115.164463][ C1] ? slab_build_skb+0x25f/0x3f0 [ 115.164473][ C1] bpf_prog_test_run_skb+0xc28/0x11c0 [ 115.164486][ C1] ? cpu_online+0x60/0x60 [ 115.164495][ C1] bpf_prog_test_run+0x321/0x390 [ 115.164504][ C1] __sys_bpf+0x440/0x800 [ 115.164513][ C1] ? bpf_link_show_fdinfo+0x350/0x350 [ 115.164524][ C1] ? lock_chain_count+0x20/0x20 [ 115.164534][ C1] __x64_sys_bpf+0x7c/0x90 [ 115.164541][ C1] do_syscall_64+0x55/0xb0 [ 115.164548][ C1] ? clear_bhb_loop+0x40/0x90 [ 115.164558][ C1] ? clear_bhb_loop+0x40/0x90 [ 115.164567][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.164577][ C1] RIP: 0033:0x7f7b0f38f749 [ 115.164583][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.164590][ C1] RSP: 002b:00007ffe9acde958 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.164598][ C1] RAX: ffffffffffffffda RBX: 00007f7b0f5e5fa0 RCX: 00007f7b0f38f749 [ 115.164603][ C1] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 115.164609][ C1] RBP: 00007f7b0f413f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.164614][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.164618][ C1] R13: 00007f7b0f5e5fa0 R14: 00007f7b0f5e5fa0 R15: 0000000000000003 [ 115.164627][ C1]