This study addresses resilient human-in-the-loop (HiTL) formation-tracking of multi-UAV systems against $f$ -local Byzantine attacks. In the HiTL settings, a human operator plays a key role in detecting any physical hazard, monitoring the whole UAV swarm, and sending secure execution signals to a non-autonomous leader UAV. Moreover, there exists a fraction of Byzantine UAVs in the multi-UAV systems, which propagate incorrect information to their neighbors (called Byzantine edge attacks (BEAs)) and adopt false input signals (called Byzantine node attacks (BNAs)) when swarming. In order to suppress the above aggressive Byzantine attacks, this paper proposes a Byzantine-resilient hierarchical control scheme, including a virtual Digital Twin Layer (DTL) apart from a Cyber-Physical Layer (CPL). First, a distributed resilient estimation scheme is proposed on the DTL, which can realize resilient estimation on the state of the non-autonomous leader UAV against BEAs on the premise that the DTL topology is strongly $(2f+1)$ -robust. Second, a series of decentralized and chattering-free controllers is formulated on the CPL, which is resilient to both BNAs and inter-layered faults. The asymptotical control performance of the above controllers is strictly proven based on Cromwell-Bellman Lemma. To demonstrate the practicality of the theoretical results, a resilient HiTL multi-UAV systems experiment has been further conducted. The experimental results verify the effectiveness and practicality of the designed two-layered controllers against $f$ -local Byzantine attacks. Note to Practitioners —Owing to the wide application of multi-UAV systems, the resilience of the whole swarm against malicious attacks has grasped the great attention of both academia and industry. This work considers a rather aggressive kind of attacks, named Byzantine attacks, where a fraction of unidentified UAVs act as traitors. Inspired by the digital twin technology, a two-layered control architecture for multi-UAV systems is formatted, including a Digital Twin Layer (DTL) and a Cyber-Physical Layer (CPL). Here are the highlights: 1) Control Architecture: The DTL handles Byzantine edge attacks (BEAs), while the CPL addresses Byzantine node attacks (BNAs), ensuring reliable human-swarm cooperation in adversarial environments. 2) Resilient Estimation against BEAs: A novel resilient estimation scheme on the DTL is designed, using edge-based feedback, which can estimate the states of the leader UAV manipulated by human operators. 3) Adaptive Controller against BNAs and Inter-layered Faults: On the CPL, a decentralized adaptive controller with adjustable and exponential convergence is proposed, enhancing its precision and flexibility. 4) Practical Application: A UAV swarm formation-tracking experiment validates the control architecture's effectiveness in human-in-the-loop scenarios, demonstrating its practicality in the realm of swarm robotics and human-swarm interaction.