[ 35.103150][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.110072][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.127398][ T12] bond0 (unregistering): Released all slaves [ 35.242365][ T12] hsr_slave_0: left promiscuous mode [ 35.242663][ T12] hsr_slave_1: left promiscuous mode [ 35.242941][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.242954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.243341][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.243350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.253339][ T12] veth1_macvtap: left promiscuous mode [ 35.253370][ T12] veth0_macvtap: left promiscuous mode [ 35.253514][ T12] veth1_vlan: left promiscuous mode [ 35.253553][ T12] veth0_vlan: left promiscuous mode [ 35.350667][ T12] team0 (unregistering): Port device team_slave_1 removed [ 35.355214][ T12] team0 (unregistering): Port device team_slave_0 removed [ 35.402944][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.540290][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 35.582574][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.642014][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.665041][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 35.702224][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.775534][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 35.791177][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.855233][ T12] bridge_slave_1: left allmulticast mode [ 35.855253][ T12] bridge_slave_1: left promiscuous mode [ 35.855336][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.857473][ T12] bridge_slave_0: left allmulticast mode [ 35.857488][ T12] bridge_slave_0: left promiscuous mode [ 35.857560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.909224][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.937348][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.957016][ T12] bond0 (unregistering): Released all slaves [ 36.128073][ T4405] 8021q: adding VLAN 0 to HW filter on device eth5 [ 36.268278][ T4405] 8021q: adding VLAN 0 to HW filter on device eth4 [ 36.412268][ T4405] 8021q: adding VLAN 0 to HW filter on device eth6 [ 36.485685][ T12] hsr_slave_0: left promiscuous mode [ 36.485943][ T12] hsr_slave_1: left promiscuous mode [ 36.490778][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.490790][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.501745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.501759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.509984][ T12] veth1_macvtap: left promiscuous mode [ 36.510011][ T12] veth0_macvtap: left promiscuous mode [ 36.510087][ T12] veth1_vlan: left promiscuous mode [ 36.510117][ T12] veth0_vlan: left promiscuous mode [ 36.613205][ T12] team0 (unregistering): Port device team_slave_1 removed [ 36.619200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 36.667365][ T4405] 8021q: adding VLAN 0 to HW filter on device eth7 Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [*] Starting reproducer for WARNING in l2cap_chan_le_send_credits... [+] open /dev/vhci successful. [+] write create_cmd to /dev/vhci successful. [+] Controller created: dev_id = 0 [+] Controller reader thread started. [+] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) successful. [+] Bring up HCI device (HCIDEVUP 0) successful (res=-1, errno=114). [+] socket(AF_BLUETOOTH, SOCK_SEQPACKET, BTPROTO_L2CAP) successful. [+] bind L2CAP socket successful. [+] setsockopt(l2cap_sock, SOL_BLUETOOTH, BT_MODE, BT_MODE_LE_FLOWCTL) successful. [*] Connecting L2CAP socket to remote LE device... [+] L2CAP socket connected successfully (BT_CONNECTED). [+] Rejection sprayer thread 1 started on CPU 1. [*] Starting credit return race loop on CPU 0... [ 40.329867][ T5073] ------------[ cut here ]------------ [ 40.329878][ T5073] ida_free called for id=3 which is not allocated. [ 40.330129][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 40.334050][ T5073] Modules linked in: [ 40.334776][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Not tainted syzkaller #0 PREEMPT [ 40.336310][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.338381][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.339972][ T5073] pc : ida_free+0x24c/0x2d4 [ 40.340884][ T5073] lr : ida_free+0x24c/0x2d4 [ 40.341779][ T5073] sp : ffff800094f27880 [ 40.342638][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 40.344367][ T5073] x26: 0000000000000003 x25: dfff800000000000 x24: ffff800094f27880 [ 40.346059][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 40.347758][ T5073] x20: 0000000000000003 x19: 0000000000000000 x18: 00000000ffffffff [ 40.349475][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008b586000 [ 40.351218][ T5073] x14: 000000000000067b x13: 0000000000000001 x12: 0000000000000000 [ 40.352936][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 40.354606][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 40.356226][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 40.357772][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 40.359491][ T5073] Call trace: [ 40.360180][ T5073] ida_free+0x24c/0x2d4 (P) [ 40.361151][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 40.362401][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 40.363488][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 40.364657][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 40.365727][ T5073] sock_recvmsg+0xd4/0x170 [ 40.366673][ T5073] __sys_recvfrom+0x1ec/0x31c [ 40.367676][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 40.368856][ T5073] invoke_syscall+0x98/0x244 [ 40.369870][ T5073] el0_svc_common+0xec/0x23c [ 40.370845][ T5073] do_el0_svc+0x4c/0x5c [ 40.371769][ T5073] el0_svc+0x60/0x1d8 [ 40.372661][ T5073] el0t_64_sync_handler+0x44/0x104 [ 40.373599][ T5073] el0t_64_sync+0x198/0x19c [ 40.374464][ T5073] irq event stamp: 8486 [ 40.375295][ T5073] hardirqs last enabled at (8485): [] vprintk_store+0x924/0xb94 [ 40.377155][ T5073] hardirqs last disabled at (8486): [] el1_brk64+0x20/0x54 [ 40.378877][ T5073] softirqs last enabled at (8478): [] __do_softirq+0x14/0x20 [ 40.380678][ T5073] softirqs last disabled at (8455): [] __do_softirq+0x14/0x20 [ 40.382449][ T5073] ---[ end trace 0000000000000000 ]--- [ 40.389957][ T5073] ------------[ cut here ]------------ [ 40.389965][ T5073] ida_free called for id=5 which is not allocated. [ 40.390220][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 40.394568][ T5073] Modules linked in: [ 40.395419][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 40.397866][ T5073] Tainted: [W]=WARN [ 40.398731][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.401003][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.402733][ T5073] pc : ida_free+0x24c/0x2d4 [ 40.403769][ T5073] lr : ida_free+0x24c/0x2d4 [ 40.404716][ T5073] sp : ffff800094f27880 [ 40.405509][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 40.407225][ T5073] x26: 0000000000000005 x25: dfff800000000000 x24: ffff800094f27880 [ 40.408940][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 40.410550][ T5073] x20: 0000000000000005 x19: 0000000000000000 x18: 1fffe000359cf228 [ 40.412165][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008b586000 [ 40.413810][ T5073] x14: 00000000000006c5 x13: 0000000000000001 x12: 0000000000000000 [ 40.415445][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 40.417062][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 40.418853][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 40.420622][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 40.422389][ T5073] Call trace: [ 40.423118][ T5073] ida_free+0x24c/0x2d4 (P) [ 40.424028][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 40.425199][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 40.426242][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 40.427306][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 40.428294][ T5073] sock_recvmsg+0xd4/0x170 [ 40.429150][ T5073] __sys_recvfrom+0x1ec/0x31c [ 40.430028][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 40.431014][ T5073] invoke_syscall+0x98/0x244 [ 40.431910][ T5073] el0_svc_common+0xec/0x23c [ 40.432740][ T5073] do_el0_svc+0x4c/0x5c [ 40.433493][ T5073] el0_svc+0x60/0x1d8 [ 40.434304][ T5073] el0t_64_sync_handler+0x44/0x104 [ 40.435357][ T5073] el0t_64_sync+0x198/0x19c [ 40.436327][ T5073] irq event stamp: 8834 [ 40.437206][ T5073] hardirqs last enabled at (8833): [] vprintk_store+0x924/0xb94 [ 40.439071][ T5073] hardirqs last disabled at (8834): [] el1_brk64+0x20/0x54 [ 40.440788][ T5073] softirqs last enabled at (8818): [] __alloc_skb+0x1c0/0x610 [ 40.442603][ T5073] softirqs last disabled at (8816): [] __alloc_skb+0x1a8/0x610 [ 40.444714][ T5073] ---[ end trace 0000000000000000 ]--- [ 40.566166][ T5073] ------------[ cut here ]------------ [ 40.566177][ T5073] ida_free called for id=8 which is not allocated. [ 40.576479][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 40.578229][ T5073] Modules linked in: [ 40.578960][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 40.580980][ T5073] Tainted: [W]=WARN [ 40.581700][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.583710][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.585232][ T5073] pc : ida_free+0x24c/0x2d4 [ 40.586012][ T5073] lr : ida_free+0x24c/0x2d4 [ 40.586944][ T5073] sp : ffff800094f27880 [ 40.587814][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 40.589531][ T5073] x26: 0000000000000008 x25: dfff800000000000 x24: ffff800094f27880 [ 40.591211][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 40.592877][ T5073] x20: 0000000000000008 x19: 0000000000000000 x18: 1fffe000359cf228 [ 40.594576][ T5073] x17: ffff800123625000 x16: ffff80008f910000 x15: 0000000000000001 [ 40.596287][ T5073] x14: 000000000042ed3e x13: 0000000000000001 x12: 0000000000000000 [ 40.597928][ T5073] x11: 0000000000000000 x10: ffff7000129e4eb8 x9 : b56adb3a1390ea00 [ 40.599552][ T5073] x8 : b56adb3a1390ea00 x7 : 0000000000000000 x6 : 0000000000000000 [ 40.601294][ T5073] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803cfd0c [ 40.602914][ T5073] x2 : 0000000000000001 x1 : ffff0000d8109d80 x0 : 0000000000000001 [ 40.604589][ T5073] Call trace: [ 40.605323][ T5073] ida_free+0x24c/0x2d4 (P) [ 40.606349][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 40.607572][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 40.608642][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 40.609789][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 40.610881][ T5073] sock_recvmsg+0xd4/0x170 [ 40.611825][ T5073] __sys_recvfrom+0x1ec/0x31c [ 40.612829][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 40.613907][ T5073] invoke_syscall+0x98/0x244 [ 40.614833][ T5073] el0_svc_common+0xec/0x23c [ 40.615786][ T5073] do_el0_svc+0x4c/0x5c [ 40.616615][ T5073] el0_svc+0x60/0x1d8 [ 40.617404][ T5073] el0t_64_sync_handler+0x44/0x104 [ 40.618364][ T5073] el0t_64_sync+0x198/0x19c [ 40.619281][ T5073] irq event stamp: 9170 [ 40.620109][ T5073] hardirqs last enabled at (9169): [] finish_task_switch+0x234/0x858 [ 40.621968][ T5073] hardirqs last disabled at (9170): [] el1_brk64+0x20/0x54 [ 40.623553][ T5073] softirqs last enabled at (9150): [] __alloc_skb+0x1c0/0x610 [ 40.625281][ T5073] softirqs last disabled at (9148): [] __alloc_skb+0x1a8/0x610 [ 40.627121][ T5073] ---[ end trace 0000000000000000 ]--- [ 40.808533][ T5073] ------------[ cut here ]------------ [ 40.808543][ T5073] ida_free called for id=10 which is not allocated. [ 40.808795][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 40.813020][ T5073] Modules linked in: [ 40.813810][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 40.816010][ T5073] Tainted: [W]=WARN [ 40.816776][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.818942][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.820558][ T5073] pc : ida_free+0x24c/0x2d4 [ 40.821503][ T5073] lr : ida_free+0x24c/0x2d4 [ 40.822442][ T5073] sp : ffff800094f27880 [ 40.823294][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 40.825021][ T5073] x26: 000000000000000a x25: dfff800000000000 x24: ffff800094f27880 [ 40.826698][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 40.828334][ T5073] x20: 000000000000000a x19: 0000000000000000 x18: 1fffe000359cf228 [ 40.829939][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 40.831618][ T5073] x14: 0000000000000760 x13: 0000000000000001 x12: 0000000000000000 [ 40.833222][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 40.834806][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 40.836376][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 40.838127][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 40.839861][ T5073] Call trace: [ 40.840566][ T5073] ida_free+0x24c/0x2d4 (P) [ 40.841525][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 40.842722][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 40.843808][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 40.844948][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 40.845985][ T5073] sock_recvmsg+0xd4/0x170 [ 40.846943][ T5073] __sys_recvfrom+0x1ec/0x31c [ 40.847931][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 40.848953][ T5073] invoke_syscall+0x98/0x244 [ 40.849878][ T5073] el0_svc_common+0xec/0x23c [ 40.850761][ T5073] do_el0_svc+0x4c/0x5c [ 40.851553][ T5073] el0_svc+0x60/0x1d8 [ 40.852387][ T5073] el0t_64_sync_handler+0x44/0x104 [ 40.853427][ T5073] el0t_64_sync+0x198/0x19c [ 40.854345][ T5073] irq event stamp: 9406 [ 40.855185][ T5073] hardirqs last enabled at (9405): [] vprintk_store+0x924/0xb94 [ 40.856950][ T5073] hardirqs last disabled at (9406): [] el1_brk64+0x20/0x54 [ 40.858664][ T5073] softirqs last enabled at (9390): [] __alloc_skb+0x1c0/0x610 [ 40.860394][ T5073] softirqs last disabled at (9388): [] __alloc_skb+0x1a8/0x610 [ 40.862150][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.002413][ T4476] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.013058][ T5073] ------------[ cut here ]------------ [ 41.013065][ T5073] ida_free called for id=12 which is not allocated. [ 41.013321][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.017730][ T5073] Modules linked in: [ 41.018578][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.020837][ T5073] Tainted: [W]=WARN [ 41.021656][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.023561][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.025083][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.025968][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.026914][ T5073] sp : ffff800094f27880 [ 41.027827][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.029540][ T5073] x26: 000000000000000c x25: dfff800000000000 x24: ffff800094f27880 [ 41.031264][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.032948][ T5073] x20: 000000000000000c x19: 0000000000000000 x18: 1fffe000359cf228 [ 41.034670][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 41.036409][ T5073] x14: 00000000000007af x13: 0000000000000001 x12: 0000000000000000 [ 41.038142][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.039886][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.041645][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.043403][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.045106][ T5073] Call trace: [ 41.045788][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.046673][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.047816][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.048810][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.049867][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.050879][ T5073] sock_recvmsg+0xd4/0x170 [ 41.051799][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.052731][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.053748][ T5073] invoke_syscall+0x98/0x244 [ 41.054652][ T5073] el0_svc_common+0xec/0x23c [ 41.055552][ T5073] do_el0_svc+0x4c/0x5c [ 41.056352][ T5073] el0_svc+0x60/0x1d8 [ 41.057194][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.058238][ T5073] el0t_64_sync+0x198/0x19c [ 41.059203][ T5073] irq event stamp: 9622 [ 41.060075][ T5073] hardirqs last enabled at (9621): [] vprintk_store+0x924/0xb94 [ 41.061924][ T5073] hardirqs last disabled at (9622): [] el1_brk64+0x20/0x54 [ 41.063807][ T5073] softirqs last enabled at (9606): [] __alloc_skb+0x1c0/0x610 [ 41.065837][ T5073] softirqs last disabled at (9604): [] __alloc_skb+0x1a8/0x610 [ 41.067782][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.138130][ T5073] ------------[ cut here ]------------ [ 41.138141][ T5073] ida_free called for id=156 which is not allocated. [ 41.138393][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.142824][ T5073] Modules linked in: [ 41.143633][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.145866][ T5073] Tainted: [W]=WARN [ 41.146691][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.148694][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.150212][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.151246][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.152249][ T5073] sp : ffff800094f27880 [ 41.153188][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.154963][ T5073] x26: 000000000000009c x25: dfff800000000000 x24: ffff800094f27880 [ 41.156763][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.158428][ T5073] x20: 000000000000009c x19: 0000000000000000 x18: 0000000000000000 [ 41.159995][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.161624][ T5073] x14: 00000000000007fa x13: 0000000000000001 x12: 0000000000000000 [ 41.163222][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.164845][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.166382][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.167936][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.169500][ T5073] Call trace: [ 41.170176][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.171151][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.172288][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.173318][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.174481][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.175540][ T5073] sock_recvmsg+0xd4/0x170 [ 41.176490][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.177600][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.178728][ T5073] invoke_syscall+0x98/0x244 [ 41.179741][ T5073] el0_svc_common+0xec/0x23c [ 41.180733][ T5073] do_el0_svc+0x4c/0x5c [ 41.181648][ T5073] el0_svc+0x60/0x1d8 [ 41.182506][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.183600][ T5073] el0t_64_sync+0x198/0x19c [ 41.184563][ T5073] irq event stamp: 24500 [ 41.185432][ T5073] hardirqs last enabled at (24499): [] vprintk_store+0x924/0xb94 [ 41.187222][ T5073] hardirqs last disabled at (24500): [] el1_brk64+0x20/0x54 [ 41.189073][ T5073] softirqs last enabled at (24488): [] __alloc_skb+0x1c0/0x610 [ 41.190982][ T5073] softirqs last disabled at (24486): [] __alloc_skb+0x1a8/0x610 [ 41.192820][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.228690][ T5073] ------------[ cut here ]------------ [ 41.228701][ T5073] ida_free called for id=220 which is not allocated. [ 41.228951][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.233233][ T5073] Modules linked in: [ 41.234000][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.235797][ T5073] Tainted: [W]=WARN [ 41.236507][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.238453][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.239850][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.240595][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.241393][ T5073] sp : ffff800094f27880 [ 41.242138][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.243607][ T5073] x26: 00000000000000dc x25: dfff800000000000 x24: ffff800094f27880 [ 41.245115][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.246579][ T5073] x20: 00000000000000dc x19: 0000000000000000 x18: 0000000000000000 [ 41.248126][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.249667][ T5073] x14: 0000000000000845 x13: 0000000000000001 x12: 0000000000000000 [ 41.251206][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.252747][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.254280][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.255721][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.257296][ T5073] Call trace: [ 41.257927][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.258788][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.259916][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.260917][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.261922][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.262914][ T5073] sock_recvmsg+0xd4/0x170 [ 41.263810][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.264747][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.265723][ T5073] invoke_syscall+0x98/0x244 [ 41.266603][ T5073] el0_svc_common+0xec/0x23c [ 41.267526][ T5073] do_el0_svc+0x4c/0x5c [ 41.268352][ T5073] el0_svc+0x60/0x1d8 [ 41.269125][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.270162][ T5073] el0t_64_sync+0x198/0x19c [ 41.271071][ T5073] irq event stamp: 31398 [ 41.271892][ T5073] hardirqs last enabled at (31397): [] vprintk_store+0x924/0xb94 [ 41.273727][ T5073] hardirqs last disabled at (31398): [] el1_brk64+0x20/0x54 [ 41.275414][ T5073] softirqs last enabled at (31386): [] __alloc_skb+0x1c0/0x610 [ 41.277249][ T5073] softirqs last disabled at (31384): [] __alloc_skb+0x1a8/0x610 [ 41.279000][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.287248][ T5073] ------------[ cut here ]------------ [ 41.287255][ T5073] ida_free called for id=235 which is not allocated. [ 41.287502][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.291528][ T5073] Modules linked in: [ 41.292274][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.294363][ T5073] Tainted: [W]=WARN [ 41.295100][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.297203][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.298836][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.299750][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.300650][ T5073] sp : ffff800094f27880 [ 41.301430][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.302986][ T5073] x26: 00000000000000eb x25: dfff800000000000 x24: ffff800094f27880 [ 41.304638][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.306154][ T5073] x20: 00000000000000eb x19: 0000000000000000 x18: 0000000000000000 [ 41.307781][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.309370][ T5073] x14: 0000000000000890 x13: 0000000000000001 x12: 0000000000000000 [ 41.310970][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.312412][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.313988][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.315566][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.317120][ T5073] Call trace: [ 41.317761][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.318622][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.319791][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.320801][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.321884][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.322909][ T5073] sock_recvmsg+0xd4/0x170 [ 41.323766][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.324662][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.325731][ T5073] invoke_syscall+0x98/0x244 [ 41.326582][ T5073] el0_svc_common+0xec/0x23c [ 41.327484][ T5073] do_el0_svc+0x4c/0x5c [ 41.328305][ T5073] el0_svc+0x60/0x1d8 [ 41.329073][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.330012][ T5073] el0t_64_sync+0x198/0x19c [ 41.330832][ T5073] irq event stamp: 33188 [ 41.331623][ T5073] hardirqs last enabled at (33187): [] vprintk_store+0x924/0xb94 [ 41.333416][ T5073] hardirqs last disabled at (33188): [] el1_brk64+0x20/0x54 [ 41.335069][ T5073] softirqs last enabled at (33176): [] __alloc_skb+0x1c0/0x610 [ 41.336783][ T5073] softirqs last disabled at (33174): [] __alloc_skb+0x1a8/0x610 [ 41.338536][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.341178][ T5073] ------------[ cut here ]------------ [ 41.341192][ T5073] ida_free called for id=237 which is not allocated. [ 41.341446][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.345236][ T5073] Modules linked in: [ 41.346013][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.348257][ T5073] Tainted: [W]=WARN [ 41.349065][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.351275][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.352968][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.353900][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.354861][ T5073] sp : ffff800094f27880 [ 41.355732][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.357298][ T5073] x26: 00000000000000ed x25: dfff800000000000 x24: ffff800094f27880 [ 41.358782][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.360286][ T5073] x20: 00000000000000ed x19: 0000000000000000 x18: 0000000000000000 [ 41.361817][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.363297][ T5073] x14: 00000000000008db x13: 0000000000000001 x12: ffff800123625000 [ 41.364854][ T5073] x11: ffff0001ace79308 x10: 0000000000000001 x9 : b56adb3a1390ea00 [ 41.366479][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.368075][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.369609][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.371123][ T5073] Call trace: [ 41.371758][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.372599][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.373685][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.374619][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.375673][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.376671][ T5073] sock_recvmsg+0xd4/0x170 [ 41.377558][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.378416][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.379437][ T5073] invoke_syscall+0x98/0x244 [ 41.380369][ T5073] el0_svc_common+0xec/0x23c [ 41.381294][ T5073] do_el0_svc+0x4c/0x5c [ 41.382089][ T5073] el0_svc+0x60/0x1d8 [ 41.382839][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.383831][ T5073] el0t_64_sync+0x198/0x19c [ 41.384656][ T5073] irq event stamp: 33428 [ 41.385465][ T5073] hardirqs last enabled at (33427): [] vprintk_store+0x924/0xb94 [ 41.387250][ T5073] hardirqs last disabled at (33428): [] el1_brk64+0x20/0x54 [ 41.388896][ T5073] softirqs last enabled at (33408): [] __alloc_skb+0x1c0/0x610 [ 41.390663][ T5073] softirqs last disabled at (33406): [] __alloc_skb+0x1a8/0x610 [ 41.392373][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.430873][ T5073] ------------[ cut here ]------------ [ 41.430881][ T5073] ida_free called for id=166 which is not allocated. [ 41.431128][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.434635][ T5073] Modules linked in: [ 41.435279][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.437381][ T5073] Tainted: [W]=WARN [ 41.438151][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.440271][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.441903][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.442869][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.443832][ T5073] sp : ffff800094f27880 [ 41.444732][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.446461][ T5073] x26: 00000000000000a6 x25: dfff800000000000 x24: ffff800094f27880 [ 41.448243][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.449927][ T5073] x20: 00000000000000a6 x19: 0000000000000000 x18: 0000000000000000 [ 41.451553][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.453275][ T5073] x14: 0000000000000926 x13: 0000000000000001 x12: 0000000000000000 [ 41.454975][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.456660][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.458333][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.459928][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.461538][ T5073] Call trace: [ 41.462239][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.463128][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.464215][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.465264][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.466401][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.467410][ T5073] sock_recvmsg+0xd4/0x170 [ 41.468263][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.469266][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.470304][ T5073] invoke_syscall+0x98/0x244 [ 41.471230][ T5073] el0_svc_common+0xec/0x23c [ 41.472180][ T5073] do_el0_svc+0x4c/0x5c [ 41.473070][ T5073] el0_svc+0x60/0x1d8 [ 41.473905][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.474966][ T5073] el0t_64_sync+0x198/0x19c [ 41.475959][ T5073] irq event stamp: 53042 [ 41.476891][ T5073] hardirqs last enabled at (53041): [] vprintk_store+0x924/0xb94 [ 41.478971][ T5073] hardirqs last disabled at (53042): [] el1_brk64+0x20/0x54 [ 41.480954][ T5073] softirqs last enabled at (53030): [] __alloc_skb+0x1c0/0x610 [ 41.482943][ T5073] softirqs last disabled at (53028): [] __alloc_skb+0x1a8/0x610 [ 41.484977][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.489194][ T5073] ------------[ cut here ]------------ [ 41.489201][ T5073] ida_free called for id=172 which is not allocated. [ 41.489453][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.493731][ T5073] Modules linked in: [ 41.494440][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.496388][ T5073] Tainted: [W]=WARN [ 41.497191][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.499232][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.500843][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.501677][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.502544][ T5073] sp : ffff800094f27880 [ 41.503349][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.504821][ T5073] x26: 00000000000000ac x25: dfff800000000000 x24: ffff800094f27880 [ 41.506309][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.507812][ T5073] x20: 00000000000000ac x19: 0000000000000000 x18: 0000000000000000 [ 41.509517][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.511224][ T5073] x14: 0000000000000971 x13: 0000000000000001 x12: 0000000000000000 [ 41.512884][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.514543][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.516300][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.518052][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.519724][ T5073] Call trace: [ 41.520427][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.521265][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.522464][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.523578][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.524757][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.525807][ T5073] sock_recvmsg+0xd4/0x170 [ 41.526713][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.527705][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.528712][ T5073] invoke_syscall+0x98/0x244 [ 41.529705][ T5073] el0_svc_common+0xec/0x23c [ 41.530674][ T5073] do_el0_svc+0x4c/0x5c [ 41.531558][ T5073] el0_svc+0x60/0x1d8 [ 41.532390][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.533383][ T5073] el0t_64_sync+0x198/0x19c [ 41.534222][ T5073] irq event stamp: 53782 [ 41.534997][ T5073] hardirqs last enabled at (53781): [] vprintk_store+0x924/0xb94 [ 41.536593][ T5073] hardirqs last disabled at (53782): [] el1_brk64+0x20/0x54 [ 41.538427][ T5073] softirqs last enabled at (53770): [] __alloc_skb+0x1c0/0x610 [ 41.540010][ T5073] softirqs last disabled at (53768): [] __alloc_skb+0x1a8/0x610 [ 41.541728][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.554422][ T5073] ------------[ cut here ]------------ [ 41.554429][ T5073] ida_free called for id=224 which is not allocated. [ 41.554675][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.559019][ T5073] Modules linked in: [ 41.559776][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.561860][ T5073] Tainted: [W]=WARN [ 41.562579][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.564559][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.566118][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.566931][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.567789][ T5073] sp : ffff800094f27880 [ 41.568577][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.569964][ T5073] x26: 00000000000000e0 x25: dfff800000000000 x24: ffff800094f27880 [ 41.571426][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.572981][ T5073] x20: 00000000000000e0 x19: 0000000000000000 x18: ffff800123625000 [ 41.574546][ T5073] x17: ffff0001ace95387 x16: ffff0000d8109d94 x15: 0000000000000001 [ 41.576198][ T5073] x14: 00000000000009bc x13: 0000000000000001 x12: 0000000000000000 [ 41.577772][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.579364][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.580967][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.582676][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.584422][ T5073] Call trace: [ 41.585064][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.585946][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.587036][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.587969][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.589001][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.589922][ T5073] sock_recvmsg+0xd4/0x170 [ 41.590815][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.591730][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.592742][ T5073] invoke_syscall+0x98/0x244 [ 41.593657][ T5073] el0_svc_common+0xec/0x23c [ 41.594543][ T5073] do_el0_svc+0x4c/0x5c [ 41.595287][ T5073] el0_svc+0x60/0x1d8 [ 41.596013][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.596982][ T5073] el0t_64_sync+0x198/0x19c [ 41.597789][ T5073] irq event stamp: 59336 [ 41.598553][ T5073] hardirqs last enabled at (59335): [] vprintk_store+0x924/0xb94 [ 41.600329][ T5073] hardirqs last disabled at (59336): [] el1_brk64+0x20/0x54 [ 41.601797][ T5073] softirqs last enabled at (59316): [] __alloc_skb+0x1c0/0x610 [ 41.603602][ T5073] softirqs last disabled at (59314): [] __alloc_skb+0x1a8/0x610 [ 41.605391][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.611630][ T5073] ------------[ cut here ]------------ [ 41.611636][ T5073] ida_free called for id=239 which is not allocated. [ 41.611882][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.615669][ T5073] Modules linked in: [ 41.616404][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.618593][ T5073] Tainted: [W]=WARN [ 41.619384][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.621480][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.623081][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.624029][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.624878][ T5073] sp : ffff800094f27880 [ 41.625675][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.627269][ T5073] x26: 00000000000000ef x25: dfff800000000000 x24: ffff800094f27880 [ 41.628826][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.630502][ T5073] x20: 00000000000000ef x19: 0000000000000000 x18: 0000000000000000 [ 41.632247][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.633968][ T5073] x14: 0000000000000a07 x13: 0000000000000001 x12: 0000000000000000 [ 41.635712][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.637379][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.638972][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.640466][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.641904][ T5073] Call trace: [ 41.642503][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.643365][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.644542][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.645527][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.646616][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.647699][ T5073] sock_recvmsg+0xd4/0x170 [ 41.648618][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.649583][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.650695][ T5073] invoke_syscall+0x98/0x244 [ 41.651585][ T5073] el0_svc_common+0xec/0x23c [ 41.652470][ T5073] do_el0_svc+0x4c/0x5c [ 41.653333][ T5073] el0_svc+0x60/0x1d8 [ 41.654181][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.655221][ T5073] el0t_64_sync+0x198/0x19c [ 41.656151][ T5073] irq event stamp: 60986 [ 41.657037][ T5073] hardirqs last enabled at (60985): [] vprintk_store+0x924/0xb94 [ 41.658881][ T5073] hardirqs last disabled at (60986): [] el1_brk64+0x20/0x54 [ 41.660918][ T5073] softirqs last enabled at (60974): [] __alloc_skb+0x1c0/0x610 [ 41.662968][ T5073] softirqs last disabled at (60972): [] __alloc_skb+0x1a8/0x610 [ 41.664720][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.671437][ T5073] ------------[ cut here ]------------ [ 41.671444][ T5073] ida_free called for id=6 which is not allocated. [ 41.671690][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.675635][ T5073] Modules linked in: [ 41.676410][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.678616][ T5073] Tainted: [W]=WARN [ 41.679358][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.681416][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.682934][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.683906][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.684893][ T5073] sp : ffff800094f27880 [ 41.685724][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.687262][ T5073] x26: 0000000000000006 x25: dfff800000000000 x24: ffff800094f27880 [ 41.688867][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.690363][ T5073] x20: 0000000000000006 x19: 0000000000000000 x18: 0000000000000000 [ 41.691860][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 41.693254][ T5073] x14: 0000000000000a52 x13: 0000000000000001 x12: 0000000000000000 [ 41.694682][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.696267][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.697909][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.699552][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.701171][ T5073] Call trace: [ 41.701878][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.702846][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.703897][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.704880][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.705857][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.706830][ T5073] sock_recvmsg+0xd4/0x170 [ 41.707739][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.708606][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.709477][ T5073] invoke_syscall+0x98/0x244 [ 41.710347][ T5073] el0_svc_common+0xec/0x23c [ 41.711230][ T5073] do_el0_svc+0x4c/0x5c [ 41.712067][ T5073] el0_svc+0x60/0x1d8 [ 41.712916][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.713918][ T5073] el0t_64_sync+0x198/0x19c [ 41.714859][ T5073] irq event stamp: 63392 [ 41.715721][ T5073] hardirqs last enabled at (63391): [] vprintk_store+0x924/0xb94 [ 41.717519][ T5073] hardirqs last disabled at (63392): [] el1_brk64+0x20/0x54 [ 41.719212][ T5073] softirqs last enabled at (63380): [] __alloc_skb+0x1c0/0x610 [ 41.721215][ T5073] softirqs last disabled at (63378): [] __alloc_skb+0x1a8/0x610 [ 41.723260][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.747190][ T5073] ------------[ cut here ]------------ [ 41.747198][ T5073] ida_free called for id=109 which is not allocated. [ 41.747453][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 41.751265][ T5073] Modules linked in: [ 41.751966][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 41.753879][ T5073] Tainted: [W]=WARN [ 41.754555][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.756461][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.758046][ T5073] pc : ida_free+0x24c/0x2d4 [ 41.758971][ T5073] lr : ida_free+0x24c/0x2d4 [ 41.759839][ T5073] sp : ffff800094f27880 [ 41.760662][ T5073] x29: ffff800094f27910 x28: 00000000000000cc x27: 1fffe0001aec2a11 [ 41.762142][ T5073] x26: 000000000000006d x25: dfff800000000000 x24: ffff800094f27880 [ 41.763724][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 41.765205][ T5073] x20: 000000000000006d x19: 0000000000000000 x18: 1fffe000359cf228 [ 41.766712][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 41.768280][ T5073] x14: 0000000000000a9d x13: 0000000000000001 x12: 0000000000000000 [ 41.769806][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 41.771290][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.772771][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.774326][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 41.775898][ T5073] Call trace: [ 41.776512][ T5073] ida_free+0x24c/0x2d4 (P) [ 41.777395][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 41.778429][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 41.779395][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 41.780448][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 41.781421][ T5073] sock_recvmsg+0xd4/0x170 [ 41.782318][ T5073] __sys_recvfrom+0x1ec/0x31c [ 41.783240][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 41.784239][ T5073] invoke_syscall+0x98/0x244 [ 41.785051][ T5073] el0_svc_common+0xec/0x23c [ 41.785908][ T5073] do_el0_svc+0x4c/0x5c [ 41.786694][ T5073] el0_svc+0x60/0x1d8 [ 41.787484][ T5073] el0t_64_sync_handler+0x44/0x104 [ 41.788451][ T5073] el0t_64_sync+0x198/0x19c [ 41.789315][ T5073] irq event stamp: 74376 [ 41.790145][ T5073] hardirqs last enabled at (74375): [] vprintk_store+0x924/0xb94 [ 41.792092][ T5073] hardirqs last disabled at (74376): [] el1_brk64+0x20/0x54 [ 41.793816][ T5073] softirqs last enabled at (74346): [] __alloc_skb+0x1c0/0x610 [ 41.795494][ T5073] softirqs last disabled at (74344): [] __alloc_skb+0x1a8/0x610 [ 41.797328][ T5073] ---[ end trace 0000000000000000 ]--- [ 41.845599][ T50] ------------[ cut here ]------------ [ 41.845609][ T50] ida_free called for id=156 which is not allocated. [ 41.845860][ T50] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#1: kworker/u9:0/50 [ 41.850517][ T50] Modules linked in: [ 41.851384][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT [ 41.853754][ T50] Tainted: [W]=WARN [ 41.854598][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.856781][ T50] Workqueue: hci0 hci_rx_work [ 41.857775][ T50] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 41.859423][ T50] pc : ida_free+0x24c/0x2d4 [ 41.860354][ T50] lr : ida_free+0x24c/0x2d4 [ 41.861290][ T50] sp : ffff800092047240 [ 41.862198][ T50] x29: ffff8000920472e0 x28: ffff8000920474c0 x27: ffff0000cf799780 [ 41.863815][ T50] x26: 000000000000009c x25: dfff800000000000 x24: ffff800092047240 [ 41.865625][ T50] x23: ffff700012408e48 x22: 1fffe0001dacf86a x21: 0000000000000000 [ 41.867432][ T50] x20: 000000000000009c x19: 0000000000000000 x18: 0000000000000000 [ 41.869257][ T50] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 41.871068][ T50] x14: 0000000000000788 x13: 0000000000000001 x12: 0000000000000000 [ 41.872877][ T50] x11: 0000000000000000 x10: ffff70001135360e x9 : f2647356494f3f00 [ 41.874708][ T50] x8 : f2647356494f3f00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 41.876572][ T50] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 41.878401][ T50] x2 : 0000000100000000 x1 : ffff0000c3d63b00 x0 : 0000000000000000 [ 41.880121][ T50] Call trace: [ 41.880830][ T50] ida_free+0x24c/0x2d4 (P) [ 41.881804][ T50] l2cap_put_ident+0x120/0x144 [ 41.882849][ T50] l2cap_recv_frame+0x9ec/0xc5e4 [ 41.883917][ T50] l2cap_recv_acldata+0x6c8/0xe74 [ 41.884950][ T50] hci_rx_work+0x450/0xe3c [ 41.885849][ T50] process_scheduled_works+0x91c/0x1250 [ 41.887025][ T50] worker_thread+0x798/0xbd0 [ 41.888018][ T50] kthread+0x304/0x3d4 [ 41.888900][ T50] ret_from_fork+0x10/0x20 [ 41.889814][ T50] irq event stamp: 1297368 [ 41.890767][ T50] hardirqs last enabled at (1297367): [] vprintk_store+0x924/0xb94 [ 41.892919][ T50] hardirqs last disabled at (1297368): [] el1_brk64+0x20/0x54 [ 41.894923][ T50] softirqs last enabled at (1297344): [] release_sock+0x150/0x228 [ 41.896850][ T50] softirqs last disabled at (1297342): [] release_sock+0x34/0x228 [ 41.898841][ T50] ---[ end trace 0000000000000000 ]--- [+] Race loop running: iteration 1000 (elapsed: 1.6s)... [ 41.995416][ T50] ------------[ cut here ]------------ [ 41.995428][ T50] ida_free called for id=181 which is not allocated. [ 41.995677][ T50] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#1: kworker/u9:0/50 [ 42.000321][ T50] Modules linked in: [ 42.001145][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT [ 42.003373][ T50] Tainted: [W]=WARN [ 42.004178][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.006239][ T50] Workqueue: hci0 hci_rx_work [ 42.007229][ T50] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.008847][ T50] pc : ida_free+0x24c/0x2d4 [ 42.009827][ T50] lr : ida_free+0x24c/0x2d4 [ 42.010788][ T50] sp : ffff800092047240 [ 42.011672][ T50] x29: ffff8000920472e0 x28: ffff8000920474c0 x27: ffff0000ed6048c0 [ 42.013445][ T50] x26: 00000000000000b5 x25: dfff800000000000 x24: ffff800092047240 [ 42.015153][ T50] x23: ffff700012408e48 x22: 1fffe0001d4a561a x21: 0000000000000000 [ 42.016842][ T50] x20: 00000000000000b5 x19: 0000000000000000 x18: ffff80012364b000 [ 42.018479][ T50] x17: ffff0001acebb387 x16: ffff0000d89e9d94 x15: 0000000000000000 [ 42.020282][ T50] x14: 00000000000007cf x13: 0000000000000001 x12: 0000000000000000 [ 42.022027][ T50] x11: 0000000000000000 x10: ffff70001135360e x9 : f2647356494f3f00 [ 42.023647][ T50] x8 : f2647356494f3f00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.025248][ T50] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.026833][ T50] x2 : 0000000100000000 x1 : ffff0000c3d63b00 x0 : 0000000000000000 [ 42.028450][ T50] Call trace: [ 42.029149][ T50] ida_free+0x24c/0x2d4 (P) [ 42.030074][ T50] l2cap_put_ident+0x120/0x144 [ 42.031084][ T50] l2cap_recv_frame+0x9ec/0xc5e4 [ 42.032128][ T50] l2cap_recv_acldata+0x6c8/0xe74 [ 42.033170][ T50] hci_rx_work+0x450/0xe3c [ 42.034090][ T50] process_scheduled_works+0x91c/0x1250 [ 42.035266][ T50] worker_thread+0x798/0xbd0 [ 42.036232][ T50] kthread+0x304/0x3d4 [ 42.037059][ T50] ret_from_fork+0x10/0x20 [ 42.037953][ T50] irq event stamp: 1382396 [ 42.038850][ T50] hardirqs last enabled at (1382395): [] vprintk_store+0x924/0xb94 [ 42.040840][ T50] hardirqs last disabled at (1382396): [] el1_brk64+0x20/0x54 [ 42.042766][ T50] softirqs last enabled at (1382372): [] release_sock+0x150/0x228 [ 42.044798][ T50] softirqs last disabled at (1382368): [] release_sock+0x34/0x228 [ 42.046779][ T50] ---[ end trace 0000000000000000 ]--- [ 42.066047][ T5073] ------------[ cut here ]------------ [ 42.066058][ T5073] ida_free called for id=24 which is not allocated. [ 42.066311][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.070614][ T5073] Modules linked in: [ 42.071446][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.073793][ T5073] Tainted: [W]=WARN [ 42.074581][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.076646][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.078249][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.079191][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.080109][ T5073] sp : ffff800094f27880 [ 42.080962][ T5073] x29: ffff800094f27910 x28: 00000000000000c2 x27: 1fffe0001aec2a11 [ 42.082640][ T5073] x26: 0000000000000018 x25: dfff800000000000 x24: ffff800094f27880 [ 42.084052][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.085449][ T5073] x20: 0000000000000018 x19: 0000000000000000 x18: 0000000000000000 [ 42.086997][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 42.088563][ T5073] x14: 0000000000000aea x13: 0000000000000001 x12: 0000000000000000 [ 42.090137][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.091716][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.093416][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.095109][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.096818][ T5073] Call trace: [ 42.097501][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.098470][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.099717][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.100776][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.101809][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.102877][ T5073] sock_recvmsg+0xd4/0x170 [ 42.103778][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.104753][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.105802][ T5073] invoke_syscall+0x98/0x244 [ 42.106782][ T5073] el0_svc_common+0xec/0x23c [ 42.107745][ T5073] do_el0_svc+0x4c/0x5c [ 42.108573][ T5073] el0_svc+0x60/0x1d8 [ 42.109425][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.110511][ T5073] el0t_64_sync+0x198/0x19c [ 42.111486][ T5073] irq event stamp: 142656 [ 42.112376][ T5073] hardirqs last enabled at (142655): [] vprintk_store+0x924/0xb94 [ 42.114256][ T5073] hardirqs last disabled at (142656): [] el1_brk64+0x20/0x54 [ 42.115886][ T5073] softirqs last enabled at (142644): [] __alloc_skb+0x1c0/0x610 [ 42.117849][ T5073] softirqs last disabled at (142642): [] __alloc_skb+0x1a8/0x610 [ 42.119805][ T5073] ---[ end trace 0000000000000000 ]--- [ 42.192748][ T5073] ------------[ cut here ]------------ [ 42.192759][ T5073] ida_free called for id=156 which is not allocated. [ 42.193008][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.197309][ T5073] Modules linked in: [ 42.198203][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.200439][ T5073] Tainted: [W]=WARN [ 42.201240][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.203189][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.204806][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.205713][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.206686][ T5073] sp : ffff800094f27880 [ 42.207590][ T5073] x29: ffff800094f27910 x28: 00000000000000be x27: 1fffe0001aec2a11 [ 42.209259][ T5073] x26: 000000000000009c x25: dfff800000000000 x24: ffff800094f27880 [ 42.210909][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.212748][ T5073] x20: 000000000000009c x19: 0000000000000000 x18: 0000000000000000 [ 42.214570][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 42.216436][ T5073] x14: 0000000000000b35 x13: 0000000000000001 x12: 0000000000000000 [ 42.218266][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.220061][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.221799][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.223543][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.225294][ T5073] Call trace: [ 42.225917][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.226731][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.227908][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.228948][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.230021][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.230927][ T5073] sock_recvmsg+0xd4/0x170 [ 42.231724][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.232686][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.233746][ T5073] invoke_syscall+0x98/0x244 [ 42.234703][ T5073] el0_svc_common+0xec/0x23c [ 42.235715][ T5073] do_el0_svc+0x4c/0x5c [ 42.236644][ T5073] el0_svc+0x60/0x1d8 [ 42.237466][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.238544][ T5073] el0t_64_sync+0x198/0x19c [ 42.239473][ T5073] irq event stamp: 158266 [ 42.240268][ T5073] hardirqs last enabled at (158265): [] vprintk_store+0x924/0xb94 [ 42.242190][ T5073] hardirqs last disabled at (158266): [] el1_brk64+0x20/0x54 [ 42.243985][ T5073] softirqs last enabled at (158254): [] __alloc_skb+0x1c0/0x610 [ 42.245762][ T5073] softirqs last disabled at (158252): [] __alloc_skb+0x1a8/0x610 [ 42.247587][ T5073] ---[ end trace 0000000000000000 ]--- [ 42.303470][ T5073] ------------[ cut here ]------------ [ 42.303481][ T5073] ida_free called for id=180 which is not allocated. [ 42.303733][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.308141][ T5073] Modules linked in: [ 42.308991][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.310994][ T5073] Tainted: [W]=WARN [ 42.311698][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.313669][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.315258][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.316175][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.317142][ T5073] sp : ffff800094f27880 [ 42.318005][ T5073] x29: ffff800094f27910 x28: 00000000000000b9 x27: 1fffe0001aec2a11 [ 42.319608][ T5073] x26: 00000000000000b4 x25: dfff800000000000 x24: ffff800094f27880 [ 42.321408][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.323195][ T5073] x20: 00000000000000b4 x19: 0000000000000000 x18: 1fffe000359cf228 [ 42.324976][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 42.326725][ T5073] x14: 0000000000000b80 x13: 0000000000000001 x12: 0000000000000000 [ 42.328385][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.330069][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.331798][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.333344][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.335057][ T5073] Call trace: [ 42.335780][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.336790][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.338049][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.339042][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.340166][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.341300][ T5073] sock_recvmsg+0xd4/0x170 [ 42.342225][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.343223][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.344312][ T5073] invoke_syscall+0x98/0x244 [ 42.345284][ T5073] el0_svc_common+0xec/0x23c [ 42.346274][ T5073] do_el0_svc+0x4c/0x5c [ 42.347157][ T5073] el0_svc+0x60/0x1d8 [ 42.347999][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.348987][ T5073] el0t_64_sync+0x198/0x19c [ 42.349993][ T5073] irq event stamp: 161840 [ 42.350940][ T5073] hardirqs last enabled at (161839): [] vprintk_store+0x924/0xb94 [ 42.352749][ T5073] hardirqs last disabled at (161840): [] el1_brk64+0x20/0x54 [ 42.354619][ T5073] softirqs last enabled at (161824): [] __alloc_skb+0x1c0/0x610 [ 42.356324][ T5073] softirqs last disabled at (161822): [] __alloc_skb+0x1a8/0x610 [ 42.358127][ T5073] ---[ end trace 0000000000000000 ]--- [ 42.440742][ T5073] ------------[ cut here ]------------ [ 42.440753][ T5073] ida_free called for id=137 which is not allocated. [ 42.441002][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.445225][ T5073] Modules linked in: [ 42.446070][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.448272][ T5073] Tainted: [W]=WARN [ 42.449141][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.451274][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.452902][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.453829][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.454793][ T5073] sp : ffff800094f27880 [ 42.455708][ T5073] x29: ffff800094f27910 x28: 00000000000000b9 x27: 1fffe0001aec2a11 [ 42.457456][ T5073] x26: 0000000000000089 x25: dfff800000000000 x24: ffff800094f27880 [ 42.459239][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.460972][ T5073] x20: 0000000000000089 x19: 0000000000000000 x18: ffff800123625000 [ 42.462711][ T5073] x17: ffff0001ace95387 x16: ffff0000d8109d94 x15: 0000000000000001 [ 42.464320][ T5073] x14: 0000000000000bcb x13: 0000000000000001 x12: 0000000000000000 [ 42.465887][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.467470][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.469000][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.470574][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.472168][ T5073] Call trace: [ 42.472810][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.473701][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.474855][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.475854][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.476921][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.477899][ T5073] sock_recvmsg+0xd4/0x170 [ 42.478782][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.479691][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.480765][ T5073] invoke_syscall+0x98/0x244 [ 42.481757][ T5073] el0_svc_common+0xec/0x23c [ 42.482670][ T5073] do_el0_svc+0x4c/0x5c [ 42.483534][ T5073] el0_svc+0x60/0x1d8 [ 42.484362][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.485370][ T5073] el0t_64_sync+0x198/0x19c [ 42.486263][ T5073] irq event stamp: 204974 [ 42.487045][ T5073] hardirqs last enabled at (204973): [] vprintk_store+0x924/0xb94 [ 42.488736][ T5073] hardirqs last disabled at (204974): [] el1_brk64+0x20/0x54 [ 42.490552][ T5073] softirqs last enabled at (204956): [] __alloc_skb+0x1c0/0x610 [ 42.492577][ T5073] softirqs last disabled at (204954): [] __alloc_skb+0x1a8/0x610 [ 42.494420][ T5073] ---[ end trace 0000000000000000 ]--- [+] Race loop running: iteration 2000 (elapsed: 2.2s)... [ 42.564103][ T50] ------------[ cut here ]------------ [ 42.564115][ T50] ida_free called for id=235 which is not allocated. [ 42.564370][ T50] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#1: kworker/u9:0/50 [ 42.568371][ T50] Modules linked in: [ 42.569202][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT [ 42.571166][ T50] Tainted: [W]=WARN [ 42.571916][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.573945][ T50] Workqueue: hci0 hci_rx_work [ 42.574926][ T50] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.576602][ T50] pc : ida_free+0x24c/0x2d4 [ 42.577591][ T50] lr : ida_free+0x24c/0x2d4 [ 42.578558][ T50] sp : ffff800092047240 [ 42.579428][ T50] x29: ffff8000920472e0 x28: ffff8000920474c0 x27: ffff0000eaf318c0 [ 42.581120][ T50] x26: 00000000000000eb x25: dfff800000000000 x24: ffff800092047240 [ 42.582764][ T50] x23: ffff700012408e48 x22: 1fffe0001d5e361a x21: 0000000000000000 [ 42.584398][ T50] x20: 00000000000000eb x19: 0000000000000000 x18: 0000000000000000 [ 42.586063][ T50] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 42.587750][ T50] x14: 0000000000000816 x13: 0000000000000001 x12: 0000000000000000 [ 42.589410][ T50] x11: 0000000000000000 x10: ffff70001135360e x9 : f2647356494f3f00 [ 42.591069][ T50] x8 : f2647356494f3f00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.592741][ T50] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.594449][ T50] x2 : 0000000100000000 x1 : ffff0000c3d63b00 x0 : 0000000000000000 [ 42.596200][ T50] Call trace: [ 42.596925][ T50] ida_free+0x24c/0x2d4 (P) [ 42.597925][ T50] l2cap_put_ident+0x120/0x144 [ 42.598949][ T50] l2cap_recv_frame+0x9ec/0xc5e4 [ 42.600005][ T50] l2cap_recv_acldata+0x6c8/0xe74 [ 42.601113][ T50] hci_rx_work+0x450/0xe3c [ 42.602074][ T50] process_scheduled_works+0x91c/0x1250 [ 42.603302][ T50] worker_thread+0x798/0xbd0 [ 42.604282][ T50] kthread+0x304/0x3d4 [ 42.605137][ T50] ret_from_fork+0x10/0x20 [ 42.606038][ T50] irq event stamp: 1769554 [ 42.606983][ T50] hardirqs last enabled at (1769553): [] vprintk_store+0x924/0xb94 [ 42.609079][ T50] hardirqs last disabled at (1769554): [] el1_brk64+0x20/0x54 [ 42.611065][ T50] softirqs last enabled at (1769530): [] release_sock+0x150/0x228 [ 42.613168][ T50] softirqs last disabled at (1769526): [] release_sock+0x34/0x228 [ 42.615142][ T50] ---[ end trace 0000000000000000 ]--- [ 42.643196][ T5073] ------------[ cut here ]------------ [ 42.643208][ T5073] ida_free called for id=132 which is not allocated. [ 42.643464][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.647921][ T5073] Modules linked in: [ 42.648803][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.651060][ T5073] Tainted: [W]=WARN [ 42.651894][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.654116][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.655876][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.656822][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.657815][ T5073] sp : ffff800094f27880 [ 42.658724][ T5073] x29: ffff800094f27910 x28: 00000000000000b5 x27: 1fffe0001aec2a11 [ 42.660426][ T5073] x26: 0000000000000084 x25: dfff800000000000 x24: ffff800094f27880 [ 42.662051][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.663688][ T5073] x20: 0000000000000084 x19: 0000000000000000 x18: 1fffe000359cf228 [ 42.665252][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: 0000000000000001 [ 42.666888][ T5073] x14: 0000000000000c17 x13: 0000000000000001 x12: 0000000000000000 [ 42.668501][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.670167][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.671787][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.673423][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.675025][ T5073] Call trace: [ 42.675632][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.676526][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.677680][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.678693][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.679816][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.680893][ T5073] sock_recvmsg+0xd4/0x170 [ 42.681808][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.682773][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.683801][ T5073] invoke_syscall+0x98/0x244 [ 42.684764][ T5073] el0_svc_common+0xec/0x23c [ 42.685760][ T5073] do_el0_svc+0x4c/0x5c [ 42.686661][ T5073] el0_svc+0x60/0x1d8 [ 42.687451][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.688631][ T5073] el0t_64_sync+0x198/0x19c [ 42.689616][ T5073] irq event stamp: 253844 [ 42.690532][ T5073] hardirqs last enabled at (253843): [] vprintk_store+0x924/0xb94 [ 42.692635][ T5073] hardirqs last disabled at (253844): [] el1_brk64+0x20/0x54 [ 42.694561][ T5073] softirqs last enabled at (253832): [] __alloc_skb+0x1c0/0x610 [ 42.696583][ T5073] softirqs last disabled at (253830): [] __alloc_skb+0x1a8/0x610 [ 42.698645][ T5073] ---[ end trace 0000000000000000 ]--- [ 42.763564][ T5073] ------------[ cut here ]------------ [ 42.763575][ T5073] ida_free called for id=233 which is not allocated. [ 42.763826][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.767546][ T5073] Modules linked in: [ 42.768287][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.770355][ T5073] Tainted: [W]=WARN [ 42.771129][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.773178][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.774689][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.775603][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.776540][ T5073] sp : ffff800094f27880 [ 42.777420][ T5073] x29: ffff800094f27910 x28: 00000000000000b5 x27: 1fffe0001aec2a11 [ 42.779052][ T5073] x26: 00000000000000e9 x25: dfff800000000000 x24: ffff800094f27880 [ 42.780650][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.782387][ T5073] x20: 00000000000000e9 x19: 0000000000000000 x18: ffff800123625000 [ 42.784160][ T5073] x17: ffff0001ace95387 x16: ffff0000d8109d94 x15: 0000000000000001 [ 42.785833][ T5073] x14: 0000000000000c62 x13: 0000000000000001 x12: 0000000000000000 [ 42.787502][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.789247][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.791096][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.792648][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.794140][ T5073] Call trace: [ 42.794674][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.795497][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.796560][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.797496][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.798486][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.799494][ T5073] sock_recvmsg+0xd4/0x170 [ 42.800390][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.801297][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.802290][ T5073] invoke_syscall+0x98/0x244 [ 42.803215][ T5073] el0_svc_common+0xec/0x23c [ 42.804134][ T5073] do_el0_svc+0x4c/0x5c [ 42.804940][ T5073] el0_svc+0x60/0x1d8 [ 42.805717][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.806743][ T5073] el0t_64_sync+0x198/0x19c [ 42.807644][ T5073] irq event stamp: 288938 [ 42.808541][ T5073] hardirqs last enabled at (288937): [] vprintk_store+0x924/0xb94 [ 42.810551][ T5073] hardirqs last disabled at (288938): [] el1_brk64+0x20/0x54 [ 42.812510][ T5073] softirqs last enabled at (288918): [] __alloc_skb+0x1c0/0x610 [ 42.814530][ T5073] softirqs last disabled at (288916): [] __alloc_skb+0x1a8/0x610 [ 42.816554][ T5073] ---[ end trace 0000000000000000 ]--- [ 42.827038][ T5073] ------------[ cut here ]------------ [ 42.827045][ T5073] ida_free called for id=24 which is not allocated. [ 42.827297][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 42.831694][ T5073] Modules linked in: [ 42.832467][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 42.834637][ T5073] Tainted: [W]=WARN [ 42.835429][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.837441][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.838906][ T5073] pc : ida_free+0x24c/0x2d4 [ 42.839806][ T5073] lr : ida_free+0x24c/0x2d4 [ 42.840677][ T5073] sp : ffff800094f27880 [ 42.841462][ T5073] x29: ffff800094f27910 x28: 00000000000000b7 x27: 1fffe0001aec2a11 [ 42.843029][ T5073] x26: 0000000000000018 x25: dfff800000000000 x24: ffff800094f27880 [ 42.844680][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 42.846363][ T5073] x20: 0000000000000018 x19: 0000000000000000 x18: 0000000000000000 [ 42.848210][ T5073] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 42.850042][ T5073] x14: 0000000000000cad x13: 0000000000000001 x12: 0000000000000000 [ 42.851688][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 42.853313][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 42.854883][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 42.856544][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 42.858092][ T5073] Call trace: [ 42.858669][ T5073] ida_free+0x24c/0x2d4 (P) [ 42.859621][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 42.860830][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 42.861958][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 42.863171][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 42.864293][ T5073] sock_recvmsg+0xd4/0x170 [ 42.865276][ T5073] __sys_recvfrom+0x1ec/0x31c [ 42.866314][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 42.867457][ T5073] invoke_syscall+0x98/0x244 [ 42.868386][ T5073] el0_svc_common+0xec/0x23c [ 42.869314][ T5073] do_el0_svc+0x4c/0x5c [ 42.870199][ T5073] el0_svc+0x60/0x1d8 [ 42.871035][ T5073] el0t_64_sync_handler+0x44/0x104 [ 42.872088][ T5073] el0t_64_sync+0x198/0x19c [ 42.872971][ T5073] irq event stamp: 293428 [ 42.873805][ T5073] hardirqs last enabled at (293427): [] vprintk_store+0x924/0xb94 [ 42.875848][ T5073] hardirqs last disabled at (293428): [] el1_brk64+0x20/0x54 [ 42.877642][ T5073] softirqs last enabled at (293416): [] __alloc_skb+0x1c0/0x610 [ 42.879581][ T5073] softirqs last disabled at (293414): [] __alloc_skb+0x1a8/0x610 [ 42.881584][ T5073] ---[ end trace 0000000000000000 ]--- [ 43.027594][ T5073] ------------[ cut here ]------------ [ 43.027604][ T5073] ida_free called for id=67 which is not allocated. [ 43.027852][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 43.032081][ T5073] Modules linked in: [ 43.032871][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 43.035113][ T5073] Tainted: [W]=WARN [ 43.035868][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.038077][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.039766][ T5073] pc : ida_free+0x24c/0x2d4 [ 43.040754][ T5073] lr : ida_free+0x24c/0x2d4 [ 43.041777][ T5073] sp : ffff800094f27880 [ 43.042671][ T5073] x29: ffff800094f27910 x28: 00000000000000b4 x27: 1fffe0001aec2a11 [ 43.044222][ T5073] x26: 0000000000000043 x25: dfff800000000000 x24: ffff800094f27880 [ 43.045754][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 43.047277][ T5073] x20: 0000000000000043 x19: 0000000000000000 x18: 1fffe000359cf228 [ 43.048905][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 43.050638][ T5073] x14: 0000000000000cf8 x13: 0000000000000001 x12: 0000000000000000 [ 43.052311][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 43.053889][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 43.055475][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 43.057190][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 43.058723][ T5073] Call trace: [ 43.059366][ T5073] ida_free+0x24c/0x2d4 (P) [ 43.060308][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 43.061518][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 43.062552][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 43.063637][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 43.064681][ T5073] sock_recvmsg+0xd4/0x170 [ 43.065616][ T5073] __sys_recvfrom+0x1ec/0x31c [ 43.066565][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 43.067658][ T5073] invoke_syscall+0x98/0x244 [ 43.068654][ T5073] el0_svc_common+0xec/0x23c [ 43.069585][ T5073] do_el0_svc+0x4c/0x5c [ 43.070486][ T5073] el0_svc+0x60/0x1d8 [ 43.071285][ T5073] el0t_64_sync_handler+0x44/0x104 [ 43.072271][ T5073] el0t_64_sync+0x198/0x19c [ 43.073174][ T5073] irq event stamp: 298612 [ 43.074042][ T5073] hardirqs last enabled at (298611): [] vprintk_store+0x924/0xb94 [ 43.076066][ T5073] hardirqs last disabled at (298612): [] el1_brk64+0x20/0x54 [ 43.077753][ T5073] softirqs last enabled at (298596): [] __alloc_skb+0x1c0/0x610 [ 43.079554][ T5073] softirqs last disabled at (298594): [] __alloc_skb+0x1a8/0x610 [ 43.081396][ T5073] ---[ end trace 0000000000000000 ]--- [ 43.265211][ T5073] ------------[ cut here ]------------ [ 43.265225][ T5073] ida_free called for id=69 which is not allocated. [ 43.265747][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 43.269790][ T5073] Modules linked in: [ 43.270607][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 43.272690][ T5073] Tainted: [W]=WARN [ 43.273481][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.275553][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.276934][ T5073] pc : ida_free+0x24c/0x2d4 [ 43.277856][ T5073] lr : ida_free+0x24c/0x2d4 [ 43.278818][ T5073] sp : ffff800094f27880 [ 43.279678][ T5073] x29: ffff800094f27910 x28: 00000000000000b4 x27: 1fffe0001aec2a11 [ 43.281324][ T5073] x26: 0000000000000045 x25: dfff800000000000 x24: ffff800094f27880 [ 43.283023][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 43.284607][ T5073] x20: 0000000000000045 x19: 0000000000000000 x18: 1fffe000359cf228 [ 43.286245][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 43.287806][ T5073] x14: 00000000004673ca x13: 0000000000000001 x12: 0000000000000000 [ 43.289405][ T5073] x11: 0000000000000000 x10: ffff7000129e4eb8 x9 : b56adb3a1390ea00 [ 43.291016][ T5073] x8 : b56adb3a1390ea00 x7 : 0000000000000000 x6 : 0000000000000000 [ 43.292621][ T5073] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803cfd0c [ 43.294212][ T5073] x2 : 0000000000000001 x1 : ffff0000d8109d80 x0 : 0000000000000001 [ 43.295802][ T5073] Call trace: [ 43.296456][ T5073] ida_free+0x24c/0x2d4 (P) [ 43.297343][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 43.298487][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 43.299513][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 43.300583][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 43.301631][ T5073] sock_recvmsg+0xd4/0x170 [ 43.302575][ T5073] __sys_recvfrom+0x1ec/0x31c [ 43.303550][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 43.304709][ T5073] invoke_syscall+0x98/0x244 [ 43.305694][ T5073] el0_svc_common+0xec/0x23c [ 43.306672][ T5073] do_el0_svc+0x4c/0x5c [ 43.307562][ T5073] el0_svc+0x60/0x1d8 [ 43.308388][ T5073] el0t_64_sync_handler+0x44/0x104 [ 43.309433][ T5073] el0t_64_sync+0x198/0x19c [ 43.310359][ T5073] irq event stamp: 298834 [ 43.311264][ T5073] hardirqs last enabled at (298833): [] finish_task_switch+0x234/0x858 [ 43.313177][ T5073] hardirqs last disabled at (298834): [] el1_brk64+0x20/0x54 [ 43.314991][ T5073] softirqs last enabled at (298814): [] __alloc_skb+0x1c0/0x610 [ 43.316823][ T5073] softirqs last disabled at (298812): [] __alloc_skb+0x1a8/0x610 [ 43.318727][ T5073] ---[ end trace 0000000000000000 ]--- [ 43.485924][ T5073] ------------[ cut here ]------------ [ 43.485935][ T5073] ida_free called for id=71 which is not allocated. [ 43.486190][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 43.490360][ T5073] Modules linked in: [ 43.491111][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 43.493181][ T5073] Tainted: [W]=WARN [ 43.493968][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.496032][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.497641][ T5073] pc : ida_free+0x24c/0x2d4 [ 43.498556][ T5073] lr : ida_free+0x24c/0x2d4 [ 43.499457][ T5073] sp : ffff800094f27880 [ 43.500270][ T5073] x29: ffff800094f27910 x28: 00000000000000b4 x27: 1fffe0001aec2a11 [ 43.501965][ T5073] x26: 0000000000000047 x25: dfff800000000000 x24: ffff800094f27880 [ 43.503616][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 43.505162][ T5073] x20: 0000000000000047 x19: 0000000000000000 x18: 1fffe000359cf228 [ 43.506782][ T5073] x17: 0000000000000003 x16: ffff8000898b7000 x15: ffff80008996b3e0 [ 43.508477][ T5073] x14: 0000000000000d8c x13: 0000000000000001 x12: 0000000000000000 [ 43.510067][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 43.511869][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 43.513746][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 43.515391][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 43.516977][ T5073] Call trace: [ 43.517657][ T5073] ida_free+0x24c/0x2d4 (P) [ 43.518595][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 43.519829][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 43.520911][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 43.522061][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 43.523133][ T5073] sock_recvmsg+0xd4/0x170 [ 43.523978][ T5073] __sys_recvfrom+0x1ec/0x31c [ 43.524959][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 43.526041][ T5073] invoke_syscall+0x98/0x244 [ 43.527000][ T5073] el0_svc_common+0xec/0x23c [ 43.528032][ T5073] do_el0_svc+0x4c/0x5c [ 43.528967][ T5073] el0_svc+0x60/0x1d8 [ 43.529754][ T5073] el0t_64_sync_handler+0x44/0x104 [ 43.530781][ T5073] el0t_64_sync+0x198/0x19c [ 43.531647][ T5073] irq event stamp: 299058 [ 43.532482][ T5073] hardirqs last enabled at (299057): [] vprintk_store+0x924/0xb94 [ 43.534304][ T5073] hardirqs last disabled at (299058): [] el1_brk64+0x20/0x54 [ 43.535899][ T5073] softirqs last enabled at (299042): [] __alloc_skb+0x1c0/0x610 [ 43.537682][ T5073] softirqs last disabled at (299040): [] __alloc_skb+0x1a8/0x610 [ 43.539356][ T5073] ---[ end trace 0000000000000000 ]--- [+] Race loop running: iteration 3000 (elapsed: 3.2s)... [ 43.661701][ T5073] ------------[ cut here ]------------ [ 43.661712][ T5073] ida_free called for id=150 which is not allocated. [ 43.661961][ T5073] WARNING: lib/idr.c:594 at ida_free+0x24c/0x2d4, CPU#0: syz-executor357/5073 [ 43.666194][ T5073] Modules linked in: [ 43.667065][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz-executor357 Tainted: G W syzkaller #0 PREEMPT [ 43.669369][ T5073] Tainted: [W]=WARN [ 43.670111][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.672118][ T5073] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.673678][ T5073] pc : ida_free+0x24c/0x2d4 [ 43.674528][ T5073] lr : ida_free+0x24c/0x2d4 [ 43.675327][ T5073] sp : ffff800094f27880 [ 43.676121][ T5073] x29: ffff800094f27910 x28: 00000000000000b5 x27: 1fffe0001aec2a11 [ 43.677825][ T5073] x26: 0000000000000096 x25: dfff800000000000 x24: ffff800094f27880 [ 43.679476][ T5073] x23: ffff7000129e4f10 x22: 0000000000000001 x21: 0000000000000000 [ 43.681089][ T5073] x20: 0000000000000096 x19: 0000000000000000 x18: ffff800123625000 [ 43.682759][ T5073] x17: ffff0001ace95387 x16: ffff0000d8109d94 x15: 0000000000000001 [ 43.684215][ T5073] x14: 0000000000000dd7 x13: 0000000000000001 x12: 0000000000000000 [ 43.685836][ T5073] x11: 0000000000000000 x10: ffff70001135360e x9 : b56adb3a1390ea00 [ 43.687542][ T5073] x8 : b56adb3a1390ea00 x7 : ffff8000804a121c x6 : 0000000000000000 [ 43.689207][ T5073] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008030d4c8 [ 43.690873][ T5073] x2 : 0000000100000000 x1 : ffff0000d8109d80 x0 : 0000000000000000 [ 43.692562][ T5073] Call trace: [ 43.693204][ T5073] ida_free+0x24c/0x2d4 (P) [ 43.694158][ T5073] l2cap_chan_le_send_credits+0x17c/0x29c [ 43.695351][ T5073] l2cap_chan_rx_avail+0xb4/0x134 [ 43.696230][ T5073] l2cap_publish_rx_avail+0x110/0x168 [ 43.697253][ T5073] l2cap_sock_recvmsg+0x280/0x7b8 [ 43.698306][ T5073] sock_recvmsg+0xd4/0x170 [ 43.699251][ T5073] __sys_recvfrom+0x1ec/0x31c [ 43.700105][ T5073] __arm64_sys_recvfrom+0xec/0x10c [ 43.701006][ T5073] invoke_syscall+0x98/0x244 [ 43.701887][ T5073] el0_svc_common+0xec/0x23c [ 43.702746][ T5073] do_el0_svc+0x4c/0x5c [ 43.703489][ T5073] el0_svc+0x60/0x1d8 [ 43.704256][ T5073] el0t_64_sync_handler+0x44/0x104 [ 43.705245][ T5073] el0t_64_sync+0x198/0x19c [ 43.706136][ T5073] irq event stamp: 354420 [ 43.706974][ T5073] hardirqs last enabled at (354419): [] vprintk_store+0x924/0xb94 [ 43.708710][ T5073] hardirqs last disabled at (354420): [] el1_brk64+0x20/0x54 [ 43.710341][ T5073] softirqs last enabled at (354400): [] __alloc_skb+0x1c0/0x610 [ 43.712129][ T5073] softirqs last disabled at (354398): [] __alloc_skb+0x1a8/0x610 [ 43.713893][ T5073] ---[ end trace 0000000000000000 ]--- [+] Race loop running: iteration 4000 (elapsed: 3.9s)... [+] Race loop running: iteration 5000 (elapsed: 4.6s)... [+] Race loop running: iteration 6000 (elapsed: 5.3s)... [+] Race loop running: iteration 7000 (elapsed: 6.0s)... [+] Race loop running: iteration 8000 (elapsed: 6.7s)... [+] Race loop running: iteration 9000 (elapsed: 7.2s)... [+] Race loop running: iteration 10000 (elapsed: 7.7s)... [+] Race loop running: iteration 11000 (elapsed: 8.2s)... [+] Race loop running: iteration 12000 (elapsed: 8.6s)... [+] Race loop running: iteration 13000 (elapsed: 9.0s)... [+] Race loop running: iteration 14000 (elapsed: 9.7s)...