Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 64.496194][ T11] cfg80211: failed to load regulatory.db [ 64.506464][ T2453] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506518][ T2453] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:04 parsed 1 programs [ 66.195472][ T6869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 70.468513][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 70.489154][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.489217][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.489263][ T6884] bridge_slave_0: entered allmulticast mode [ 70.489683][ T6884] bridge_slave_0: entered promiscuous mode [ 70.490445][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.490488][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.490524][ T6884] bridge_slave_1: entered allmulticast mode [ 70.490930][ T6884] bridge_slave_1: entered promiscuous mode [ 70.503008][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.503933][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.510615][ T6884] team0: Port device team_slave_0 added [ 70.511331][ T6884] team0: Port device team_slave_1 added [ 70.518007][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.518032][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.518047][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.518577][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.518584][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.518597][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.532492][ T6884] hsr_slave_0: entered promiscuous mode [ 70.532783][ T6884] hsr_slave_1: entered promiscuous mode [ 70.861577][ T6884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.863804][ T6884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.869155][ T6884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.872087][ T6884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.882178][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.882256][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.882424][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.882446][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.899977][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.902766][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.907150][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.915329][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.915380][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.924055][ T6884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.924095][ T6884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.964655][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.979708][ T6884] veth0_vlan: entered promiscuous mode [ 70.982636][ T6884] veth1_vlan: entered promiscuous mode [ 70.996586][ T6884] veth0_macvtap: entered promiscuous mode [ 70.998772][ T6884] veth1_macvtap: entered promiscuous mode [ 71.003583][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.013141][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.016988][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.017070][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.017094][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.017106][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.244135][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.298597][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.319318][ T6590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.321751][ T6590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.323584][ T6590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.325080][ T6590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.327841][ T6590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.355861][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.380809][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.784519][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.784564][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.792756][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.792791][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:12 executed programs: 0 [ 72.386406][ T6152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.388062][ T6152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.389348][ T6152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.391165][ T6152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.392533][ T6152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.439533][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 72.460272][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.461641][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.463132][ T7138] bridge_slave_0: entered allmulticast mode [ 72.464747][ T7138] bridge_slave_0: entered promiscuous mode [ 72.466985][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.467024][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.467104][ T7138] bridge_slave_1: entered allmulticast mode [ 72.467530][ T7138] bridge_slave_1: entered promiscuous mode [ 72.476897][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.479448][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.488718][ T7138] team0: Port device team_slave_0 added [ 72.490501][ T7138] team0: Port device team_slave_1 added [ 72.499182][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.500351][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.504423][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.506266][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.506274][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.506287][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.518869][ T7138] hsr_slave_0: entered promiscuous mode [ 72.519227][ T7138] hsr_slave_1: entered promiscuous mode [ 72.519441][ T7138] debugfs: 'hsr0' already exists in 'hsr' [ 72.519452][ T7138] Cannot create hsr debugfs directory [ 74.415344][ T6152] Bluetooth: hci0: command tx timeout [ 74.593066][ T12] bridge_slave_1: left allmulticast mode [ 74.594415][ T12] bridge_slave_1: left promiscuous mode [ 74.595844][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.598836][ T12] bridge_slave_0: left allmulticast mode [ 74.598872][ T12] bridge_slave_0: left promiscuous mode [ 74.598934][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.722963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.746511][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.766198][ T12] bond0 (unregistering): Released all slaves [ 74.841900][ T12] hsr_slave_0: left promiscuous mode [ 74.843169][ T12] hsr_slave_1: left promiscuous mode [ 74.844479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.846056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.847881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.849284][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.855744][ T12] veth1_macvtap: left promiscuous mode [ 74.855798][ T12] veth0_macvtap: left promiscuous mode [ 74.855877][ T12] veth1_vlan: left promiscuous mode [ 74.855921][ T12] veth0_vlan: left promiscuous mode [ 74.977990][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.984340][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.265039][ T7138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.269066][ T7138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.271561][ T7138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.273976][ T7138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.304071][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.311614][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.315009][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.315055][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.326272][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.326312][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.377702][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.388175][ T7138] veth0_vlan: entered promiscuous mode [ 75.389803][ T7138] veth1_vlan: entered promiscuous mode [ 75.401757][ T7138] veth0_macvtap: entered promiscuous mode [ 75.402672][ T7138] veth1_macvtap: entered promiscuous mode [ 75.589013][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.590003][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.592033][ T230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.592591][ T230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.592613][ T230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.592632][ T230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.618456][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.618492][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.630100][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.630127][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.674953][ T7201] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 75.674983][ T7201] FAULT_INJECTION: forcing a failure. [ 75.674983][ T7201] name failslab, interval 1, probability 0, space 0, times 1 [ 75.674998][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 75.675007][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.675013][ T7201] Call trace: [ 75.675016][ T7201] show_stack+0x2c/ ** replaying previous printk message ** [ 75.675016][ T7201] show_stack+0x2c/0x3c (C) [ 75.675030][ T7201] __dump_stack+0x30/0x40 [ 75.675036][ T7201] dump_stack_lvl+0xd8/0x12c [ 75.675042][ T7201] dump_stack+0x1c/0x28 [ 75.675046][ T7201] should_fail_ex+0x41c/0x594 [ 75.675054][ T7201] should_failslab+0xc0/0x128 [ 75.675062][ T7201] __kmalloc_cache_noprof+0x80/0x65c [ 75.675069][ T7201] qfq_change_class+0x858/0xbe8 [ 75.675078][ T7201] tc_ctl_tclass+0x988/0x10b0 [ 75.675085][ T7201] rtnetlink_rcv_msg+0x624/0x97c [ 75.675091][ T7201] netlink_rcv_skb+0x220/0x3fc [ 75.675097][ T7201] rtnetlink_rcv+0x28/0x38 [ 75.675101][ T7201] netlink_unicast+0x694/0x8c4 [ 75.675109][ T7201] netlink_sendmsg+0x648/0x930 [ 75.675114][ T7201] ____sys_sendmsg+0x490/0x7b8 [ 75.675121][ T7201] ___sys_sendmsg+0x204/0x278 [ 75.675127][ T7201] __arm64_sys_sendmsg+0x184/0x238 [ 75.675133][ T7201] invoke_syscall+0x98/0x254 [ 75.675139][ T7201] el0_svc_common+0x130/0x23c [ 75.675144][ T7201] do_el0_svc+0x48/0x58 [ 75.675149][ T7201] el0_svc+0x5c/0x254 [ 75.675156][ T7201] el0t_64_sync_handler+0x84/0x12c [ 75.675162][ T7201] el0t_64_sync+0x198/0x19c [ 75.682556][ T7200] ================================================================== [ 75.682565][ T7200] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0xcc/0x208 [ 75.682581][ T7200] Read of size 8 at addr ffff0000f4261f50 by task syz.0.17/7200 [ 75.682586][ T7200] [ 75.682590][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 75.682597][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.682600][ T7200] Call trace: [ 75.682603][ T7200] show_stack+0x2c/0x3c (C) [ 75.682611][ T7200] __dump_stack+0x30/0x40 [ 75.682617][ T7200] dump_stack_lvl+0xd8/0x12c [ 75.682621][ T7200] print_address_description+0xa8/0x238 [ 75.682628][ T7200] print_report+0x68/0x84 [ 75.682634][ T7200] kasan_report+0xb0/0x110 [ 75.682640][ T7200] __asan_report_load8_noabort+0x20/0x2c [ 75.682646][ T7200] qfq_reset_qdisc+0xcc/0x208 [ 75.682652][ T7200] qdisc_reset+0x128/0x598 [ 75.682658][ T7200] __qdisc_destroy+0x134/0x4bc [ 75.682662][ T7200] dev_shutdown+0x35c/0x47c [ 75.682667][ T7200] unregister_netdevice_many_notify+0xec0/0x20e8 [ 75.682675][ T7200] unregister_netdevice_queue+0x2b4/0x300 [ 75.682681][ T7200] __tun_detach+0x5d4/0x1304 [ 75.682689][ T7200] tun_chr_close+0x118/0x1f8 [ 75.682694][ T7200] __fput+0x340/0x75c [ 75.682700][ T7200] ____fput+0x20/0x58 [ 75.682705][ T7200] task_work_run+0x1dc/0x260 [ 75.682711][ T7200] exit_to_user_mode_loop+0xfc/0x178 [ 75.682723][ T7200] el0_svc+0x170/0x254 [ 75.682730][ T7200] el0t_64_sync_handler+0x84/0x12c [ 75.682736][ T7200] el0t_64_sync+0x198/0x19c [ 75.682743][ T7200] [ 75.682744][ T7200] Allocated by task 7201: [ 75.682747][ T7200] kasan_save_track+0x40/0x78 [ 75.682752][ T7200] kasan_save_alloc_info+0x44/0x54 [ 75.682756][ T7200] __kasan_kmalloc+0x9c/0xb4 [ 75.682760][ T7200] __kmalloc_cache_noprof+0x3a4/0x65c [ 75.682764][ T7200] qfq_change_class+0x498/0xbe8 [ 75.682771][ T7200] tc_ctl_tclass+0x988/0x10b0 [ 75.682775][ T7200] rtnetlink_rcv_msg+0x624/0x97c [ 75.682779][ T7200] netlink_rcv_skb+0x220/0x3fc [ 75.682783][ T7200] rtnetlink_rcv+0x28/0x38 [ 75.682787][ T7200] netlink_unicast+0x694/0x8c4 [ 75.682793][ T7200] netlink_sendmsg+0x648/0x930 [ 75.682796][ T7200] ____sys_sendmsg+0x490/0x7b8 [ 75.682802][ T7200] ___sys_sendmsg+0x204/0x278 [ 75.682806][ T7200] __arm64_sys_sendmsg+0x184/0x238 [ 75.682811][ T7200] invoke_syscall+0x98/0x254 [ 75.682816][ T7200] el0_svc_common+0x130/0x23c [ 75.682819][ T7200] do_el0_svc+0x48/0x58 [ 75.682823][ T7200] el0_svc+0x5c/0x254 [ 75.682827][ T7200] el0t_64_sync_handler+0x84/0x12c [ 75.682832][ T7200] el0t_64_sync+0x198/0x19c [ 75.682835][ T7200] [ 75.682836][ T7200] Freed by task 7201: [ 75.682839][ T7200] kasan_save_track+0x40/0x78 [ 75.682842][ T7200] __kasan_save_free_info+0x58/0x70 [ 75.682847][ T7200] __kasan_slab_free+0x74/0xa4 [ 75.682851][ T7200] kfree+0x184/0x600 [ 75.682854][ T7200] qfq_change_class+0x92c/0xbe8 [ 75.682859][ T7200] tc_ctl_tclass+0x988/0x10b0 [ 75.682864][ T7200] rtnetlink_rcv_msg+0x624/0x97c [ 75.682868][ T7200] netlink_rcv_skb+0x220/0x3fc [ 75.682871][ T7200] rtnetlink_rcv+0x28/0x38 [ 75.682875][ T7200] netlink_unicast+0x694/0x8c4 [ 75.682880][ T7200] netlink_sendmsg+0x648/0x930 [ 75.682884][ T7200] ____sys_sendmsg+0x490/0x7b8 [ 75.682889][ T7200] ___sys_sendmsg+0x204/0x278 [ 75.682894][ T7200] __arm64_sys_sendmsg+0x184/0x238 [ 75.682899][ T7200] invoke_syscall+0x98/0x254 [ 75.682902][ T7200] el0_svc_common+0x130/0x23c [ 75.682906][ T7200] do_el0_svc+0x48/0x58 [ 75.682910][ T7200] el0_svc+0x5c/0x254 [ 75.682914][ T7200] el0t_64_sync_handler+0x84/0x12c [ 75.682918][ T7200] el0t_64_sync+0x198/0x19c [ 75.682922][ T7200] [ 75.682923][ T7200] The buggy address belongs to the object at ffff0000f4261f00 [ 75.682923][ T7200] which belongs to the cache kmalloc-128 of size 128 [ 75.682928][ T7200] The buggy address is located 80 bytes inside of [ 75.682928][ T7200] freed 128-byte region [ffff0000f4261f00, ffff0000f4261f80) [ 75.682933][ T7200] [ 75.682934][ T7200] The buggy address belongs to the physical page: [ 75.682938][ T7200] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134261 [ 75.682943][ T7200] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 75.682949][ T7200] page_type: f5(slab) [ 75.682954][ T7200] raw: 05ffc00000000000 ffff0000c0001a00 dead000000000122 0000000000000000 [ 75.682958][ T7200] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 75.682960][ T7200] page dumped because: kasan: bad access detected [ 75.682962][ T7200] [ 75.682963][ T7200] Memory state around the buggy address: [ 75.682966][ T7200] ffff0000f4261e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 75.682969][ T7200] ffff0000f4261e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.682972][ T7200] >ffff0000f4261f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.682974][ T7200] ^ [ 75.682977][ T7200] ffff0000f4261f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.682980][ T7200] ffff0000f4262000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 75.682982][ T7200] ================================================================== [ 75.682985][ T7200] Disabling lock debugging due to kernel taint [ 75.682995][ T7200] Unable to handle kernel paging request at virtual address 0005407e0000038d [ 75.682999][ T7200] Mem abort info: [ 75.683001][ T7200] ESR = 0x0000000096000004 [ 75.683004][ T7200] EC = 0x25: DABT (current EL), IL = 32 bits [ 75.683008][ T7200] SET = 0, FnV = 0 [ 75.683010][ T7200] EA = 0, S1PTW = 0 [ 75.683013][ T7200] FSC = 0x04: level 0 translation fault [ 75.683016][ T7200] Data abort info: [ 75.683018][ T7200] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 75.683021][ T7200] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 75.683025][ T7200] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 75.683028][ T7200] [0005407e0000038d] address between user and kernel address ranges [ 75.683033][ T7200] Internal error: Oops: 0000000096000004 [#1] SMP [ 75.782232][ T7200] Modules linked in: [ 75.782841][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT [ 75.784339][ T7200] Tainted: [B]=BAD_PAGE [ 75.784978][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.786515][ T7200] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 75.787664][ T7200] pc : qfq_reset_qdisc+0xbc/0x208 [ 75.788363][ T7200] lr : qfq_reset_qdisc+0x158/0x208 [ 75.789058][ T7200] sp : ffff80009e7477c0 [ 75.789637][ T7200] x29: ffff80009e7477d0 x28: 0000000000000000 x27: 1fffe0001b65d85a [ 75.790826][ T7200] x26: 0005c07e0000038d x25: dfff800000000000 x24: 0000000000000000 [ 75.791959][ T7200] x23: 002e03f000001c69 x22: 002e03f000001c19 x21: ffff0000db2ec2d0 [ 75.793106][ T7200] x20: ffff0000db2ec2d8 x19: ffff0000db2ec000 x18: 1fffe000337dfe90 [ 75.794270][ T7200] x17: 3d3d3d3d3d3d3d3d x16: ffff800082deb6c0 x15: 0000000000000001 [ 75.795426][ T7200] x14: 1ffff0001250ae08 x13: 0000000000000000 x12: 0000000000000000 [ 75.796608][ T7200] x11: ffff70001250ae09 x10: 0000000000ff0100 x9 : 0000000000000000 [ 75.797777][ T7200] x8 : ffff0000d7251ec0 x7 : 0000000000000001 x6 : ffff800080564a40 [ 75.798913][ T7200] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008936e214 [ 75.800066][ T7200] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 75.801187][ T7200] Call trace: [ 75.801636][ T7200] qfq_reset_qdisc+0xbc/0x208 (P) [ 75.802323][ T7200] qdisc_reset+0x128/0x598 [ 75.802930][ T7200] __qdisc_destroy+0x134/0x4bc [ 75.803589][ T7200] dev_shutdown+0x35c/0x47c [ 75.804262][ T7200] unregister_netdevice_many_notify+0xec0/0x20e8 [ 75.805181][ T7200] unregister_netdevice_queue+0x2b4/0x300 [ 75.805966][ T7200] __tun_detach+0x5d4/0x1304 [ 75.806585][ T7200] tun_chr_close+0x118/0x1f8 [ 75.807263][ T7200] __fput+0x340/0x75c [ 75.807816][ T7200] ____fput+0x20/0x58 [ 75.808387][ T7200] task_work_run+0x1dc/0x260 [ 75.809054][ T7200] exit_to_user_mode_loop+0xfc/0x178 [ 75.809828][ T7200] el0_svc+0x170/0x254 [ 75.810422][ T7200] el0t_64_sync_handler+0x84/0x12c [ 75.811153][ T7200] el0t_64_sync+0x198/0x19c [ 75.811790][ T7200] Code: d1002116 b4000656 910142d7 d343fefa (38796b48) [ 75.812756][ T7200] ---[ end trace 0000000000000000 ]--- [ 76.054810][ T7200] Kernel panic - not syncing: Oops: Fatal exception [ 76.055794][ T7200] SMP: stopping secondary CPUs [ 76.056535][ T7200] Kernel Offset: disabled [ 76.057139][ T7200] CPU features: 0x100000,0001e000,42702281,5427fea7 [ 76.058058][ T7200] Memory Limit: none [ 76.276309][ T7200] Rebooting in 86400 seconds..