Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts.
2024/06/30 07:13:34 ignoring optional flag "sandboxArg"="0"
2024/06/30 07:13:34 parsed 1 programs
[ 150.742268][ T5106] cgroup: Unknown subsys name 'net'
[ 150.938195][ T5106] cgroup: Unknown subsys name 'rlimit'
[ 152.255769][ T5106] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 153.435567][ T5139] chnl_net:caif_netlink_parms(): no params data found
[ 153.517376][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.526042][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.533466][ T5139] bridge_slave_0: entered allmulticast mode
[ 153.540265][ T5139] bridge_slave_0: entered promiscuous mode
[ 153.549871][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.557120][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 153.564461][ T5139] bridge_slave_1: entered allmulticast mode
[ 153.572532][ T5139] bridge_slave_1: entered promiscuous mode
[ 153.598141][ T5139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 153.628246][ T5139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 153.669536][ T5139] team0: Port device team_slave_0 added
[ 153.677679][ T5139] team0: Port device team_slave_1 added
[ 153.698045][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 153.705741][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 153.731742][ T5139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 153.747577][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 153.755138][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 153.782367][ T5139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 153.820014][ T5139] hsr_slave_0: entered promiscuous mode
[ 153.827331][ T5139] hsr_slave_1: entered promiscuous mode
[ 153.947462][ T5139] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 153.958587][ T5139] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 153.968637][ T5139] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.978063][ T5139] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 154.002612][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.009794][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.017783][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.024905][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.079094][ T5139] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.100073][ T783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.109938][ T783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.127274][ T5139] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.141306][ T783] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.148578][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.164376][ T783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.171535][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.302593][ T5139] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.338282][ T5139] veth0_vlan: entered promiscuous mode
[ 154.353548][ T5139] veth1_vlan: entered promiscuous mode
[ 154.379085][ T5139] veth0_macvtap: entered promiscuous mode
[ 154.389789][ T5139] veth1_macvtap: entered promiscuous mode
[ 154.407234][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 154.421553][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 154.433533][ T5139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.444095][ T5139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.453426][ T5139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.462369][ T5139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.556957][ T5139] syz-executor (5139) used greatest stack depth: 18512 bytes left
[ 154.586202][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.644991][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.711438][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 154.788494][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 155.633024][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 155.642343][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 155.649864][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 155.659064][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 155.666875][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 155.674697][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 155.889545][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.901577][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 155.926084][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.934687][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/30 07:13:40 executed programs: 0
[ 156.043503][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 156.052467][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 156.060221][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 156.068847][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 156.076829][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 156.084182][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 156.205785][ T5196] chnl_net:caif_netlink_parms(): no params data found
[ 156.260587][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.267756][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.275380][ T5196] bridge_slave_0: entered allmulticast mode
[ 156.282382][ T5196] bridge_slave_0: entered promiscuous mode
[ 156.290266][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.297605][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.304798][ T5196] bridge_slave_1: entered allmulticast mode
[ 156.311636][ T5196] bridge_slave_1: entered promiscuous mode
[ 156.336717][ T5196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 156.349032][ T5196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 156.377011][ T5196] team0: Port device team_slave_0 added
[ 156.386193][ T5196] team0: Port device team_slave_1 added
[ 156.407864][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 156.415044][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 156.441381][ T5196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 156.459512][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 156.466570][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 156.493365][ T5196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 156.528008][ T5196] hsr_slave_0: entered promiscuous mode
[ 156.534358][ T5196] hsr_slave_1: entered promiscuous mode
[ 156.540371][ T5196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 156.548562][ T5196] Cannot create hsr debugfs directory
[ 158.172421][ T53] Bluetooth: hci0: command tx timeout
[ 159.810481][ T1110] bridge_slave_1: left allmulticast mode
[ 159.816413][ T1110] bridge_slave_1: left promiscuous mode
[ 159.823495][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[ 159.834033][ T1110] bridge_slave_0: left allmulticast mode
[ 159.840355][ T1110] bridge_slave_0: left promiscuous mode
[ 159.847346][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[ 160.043738][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 160.054452][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 160.064910][ T1110] bond0 (unregistering): Released all slaves
[ 160.219721][ T1110] hsr_slave_0: left promiscuous mode
[ 160.228470][ T1110] hsr_slave_1: left promiscuous mode
[ 160.235785][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 160.249140][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 160.250620][ T53] Bluetooth: hci0: command tx timeout
[ 160.263936][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 160.274389][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 160.297001][ T1110] veth1_macvtap: left promiscuous mode
[ 160.303037][ T1110] veth0_macvtap: left promiscuous mode
[ 160.308735][ T1110] veth1_vlan: left promiscuous mode
[ 160.317210][ T1110] veth0_vlan: left promiscuous mode
[ 160.624210][ T1110] team0 (unregistering): Port device team_slave_1 removed
[ 160.647698][ T1110] team0 (unregistering): Port device team_slave_0 removed
[ 161.045156][ T5196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 161.059772][ T5196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 161.072680][ T5196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 161.088461][ T5196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 161.204722][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0
[ 161.229806][ T5196] 8021q: adding VLAN 0 to HW filter on device team0
[ 161.242550][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.249688][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 161.266640][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.273850][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 161.634310][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 161.706465][ T5196] veth0_vlan: entered promiscuous mode
[ 161.718897][ T5196] veth1_vlan: entered promiscuous mode
[ 161.749095][ T5196] veth0_macvtap: entered promiscuous mode
[ 161.758192][ T5196] veth1_macvtap: entered promiscuous mode
[ 161.779621][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 161.794027][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 161.805279][ T5196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.814496][ T5196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.823367][ T5196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.832351][ T5196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.884410][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.897561][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.923617][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2024/06/30 07:13:46 executed programs: 2
[ 161.932105][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 162.062961][ T35] ==================================================================
[ 162.071073][ T35] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 162.079086][ T35] Write of size 8 at addr ffff88807f05c008 by task kworker/u8:2/35
[ 162.086979][ T35]
[ 162.089317][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0
[ 162.099564][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 162.109713][ T35] Workqueue: l2tp l2tp_tunnel_del_work
[ 162.115199][ T35] Call Trace:
[ 162.118461][ T35]
[ 162.121387][ T35] dump_stack_lvl+0x241/0x360
[ 162.126082][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 162.131296][ T35] ? __pfx__printk+0x10/0x10
[ 162.135905][ T35] ? _printk+0xd5/0x120
[ 162.140079][ T35] ? __virt_addr_valid+0x183/0x520
[ 162.145201][ T35] ? __virt_addr_valid+0x183/0x520
[ 162.150336][ T35] print_report+0x169/0x550
[ 162.154946][ T35] ? __virt_addr_valid+0x183/0x520
[ 162.160073][ T35] ? __virt_addr_valid+0x183/0x520
[ 162.165196][ T35] ? __virt_addr_valid+0x44e/0x520
[ 162.170319][ T35] ? __phys_addr+0xba/0x170
[ 162.174834][ T35] ? l2tp_session_delete+0x28/0x9e0
[ 162.180035][ T35] kasan_report+0x143/0x180
[ 162.184533][ T35] ? l2tp_session_delete+0x28/0x9e0
[ 162.189726][ T35] kasan_check_range+0x282/0x290
[ 162.194669][ T35] l2tp_session_delete+0x28/0x9e0
[ 162.199683][ T35] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 162.205047][ T35] l2tp_tunnel_del_work+0x1cb/0x330
[ 162.210236][ T35] ? process_scheduled_works+0x945/0x1830
[ 162.215945][ T35] process_scheduled_works+0xa2c/0x1830
[ 162.221577][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 162.227546][ T35] ? assign_work+0x364/0x3d0
[ 162.232122][ T35] worker_thread+0x86d/0xd50
[ 162.236701][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 162.242586][ T35] ? __kthread_parkme+0x169/0x1d0
[ 162.247596][ T35] ? __pfx_worker_thread+0x10/0x10
[ 162.252691][ T35] kthread+0x2f0/0x390
[ 162.256755][ T35] ? __pfx_worker_thread+0x10/0x10
[ 162.261855][ T35] ? __pfx_kthread+0x10/0x10
[ 162.266431][ T35] ret_from_fork+0x4b/0x80
[ 162.270841][ T35] ? __pfx_kthread+0x10/0x10
[ 162.275422][ T35] ret_from_fork_asm+0x1a/0x30
[ 162.280178][ T35]
[ 162.283181][ T35]
[ 162.285487][ T35] Allocated by task 5241:
[ 162.289796][ T35] kasan_save_track+0x3f/0x80
[ 162.294462][ T35] __kasan_kmalloc+0x98/0xb0
[ 162.299037][ T35] __kmalloc_noprof+0x1f9/0x400
[ 162.303873][ T35] l2tp_session_create+0x3b/0xc20
[ 162.308881][ T35] pppol2tp_connect+0xca3/0x17a0
[ 162.313803][ T35] __sys_connect+0x2df/0x310
[ 162.318377][ T35] __x64_sys_connect+0x7a/0x90
[ 162.323124][ T35] do_syscall_64+0xf3/0x230
[ 162.327610][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 162.333488][ T35]
[ 162.335794][ T35] Freed by task 24:
[ 162.339578][ T35] kasan_save_track+0x3f/0x80
[ 162.344242][ T35] kasan_save_free_info+0x40/0x50
[ 162.349248][ T35] poison_slab_object+0xe0/0x150
[ 162.354170][ T35] __kasan_slab_free+0x37/0x60
[ 162.358928][ T35] kfree+0x149/0x360
[ 162.362812][ T35] __sk_destruct+0x58/0x5f0
[ 162.367302][ T35] rcu_core+0xafd/0x1830
[ 162.371530][ T35] handle_softirqs+0x2c4/0x970
[ 162.376278][ T35] run_ksoftirqd+0xca/0x130
[ 162.380767][ T35] smpboot_thread_fn+0x544/0xa30
[ 162.385687][ T35] kthread+0x2f0/0x390
[ 162.389738][ T35] ret_from_fork+0x4b/0x80
[ 162.394143][ T35] ret_from_fork_asm+0x1a/0x30
[ 162.398899][ T35]
[ 162.401209][ T35] Last potentially related work creation:
[ 162.406904][ T35] kasan_save_stack+0x3f/0x60
[ 162.411566][ T35] __kasan_record_aux_stack+0xac/0xc0
[ 162.416921][ T35] call_rcu+0x167/0xa70
[ 162.421074][ T35] pppol2tp_release+0x24b/0x350
[ 162.425911][ T35] sock_close+0xbc/0x240
[ 162.430140][ T35] __fput+0x406/0x8b0
[ 162.434109][ T35] task_work_run+0x24f/0x310
[ 162.438685][ T35] syscall_exit_to_user_mode+0x168/0x370
[ 162.444306][ T35] do_syscall_64+0x100/0x230
[ 162.448914][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 162.454796][ T35]
[ 162.457193][ T35] The buggy address belongs to the object at ffff88807f05c000
[ 162.457193][ T35] which belongs to the cache kmalloc-1k of size 1024
[ 162.471232][ T35] The buggy address is located 8 bytes inside of
[ 162.471232][ T35] freed 1024-byte region [ffff88807f05c000, ffff88807f05c400)
[ 162.484930][ T35]
[ 162.487239][ T35] The buggy address belongs to the physical page:
[ 162.493639][ T35] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f058
[ 162.502390][ T35] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 162.510882][ T35] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 162.518418][ T35] page_type: 0xffffefff(slab)
[ 162.523167][ T35] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 162.531738][ T35] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 162.540301][ T35] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 162.548954][ T35] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 162.557607][ T35] head: 00fff00000000003 ffffea0001fc1601 ffffffffffffffff 0000000000000000
[ 162.566258][ T35] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 162.574907][ T35] page dumped because: kasan: bad access detected
[ 162.581303][ T35] page_owner tracks the page as allocated
[ 162.586996][ T35] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u8:0), ts 161934090046, free_ts 161922204335
[ 162.607469][ T35] post_alloc_hook+0x1f3/0x230
[ 162.612222][ T35] get_page_from_freelist+0x2e4c/0x2f10
[ 162.617749][ T35] __alloc_pages_noprof+0x256/0x6c0
[ 162.622930][ T35] alloc_slab_page+0x5f/0x120
[ 162.627591][ T35] allocate_slab+0x5a/0x2f0
[ 162.632078][ T35] ___slab_alloc+0xcd1/0x14b0
[ 162.636741][ T35] __slab_alloc+0x58/0xa0
[ 162.641054][ T35] __kmalloc_noprof+0x257/0x400
[ 162.645888][ T35] ___neigh_create+0x691/0x2470
[ 162.650736][ T35] ip6_finish_output2+0x1631/0x1680
[ 162.655918][ T35] ip6_finish_output+0x41e/0x810
[ 162.660846][ T35] ndisc_send_skb+0xab2/0x1380
[ 162.665594][ T35] ndisc_send_ns+0xcc/0x160
[ 162.670095][ T35] addrconf_dad_work+0xb45/0x16f0
[ 162.675122][ T35] process_scheduled_works+0xa2c/0x1830
[ 162.680657][ T35] worker_thread+0x86d/0xd50
[ 162.685241][ T35] page last free pid 5196 tgid 5196 stack trace:
[ 162.691551][ T35] free_unref_page+0xd22/0xea0
[ 162.696313][ T35] __put_partials+0xeb/0x130
[ 162.700902][ T35] put_cpu_partial+0x17c/0x250
[ 162.705717][ T35] __slab_free+0x2ea/0x3d0
[ 162.710125][ T35] qlist_free_all+0x9e/0x140
[ 162.714702][ T35] kasan_quarantine_reduce+0x14f/0x170
[ 162.720151][ T35] __kasan_slab_alloc+0x23/0x80
[ 162.724987][ T35] kmem_cache_alloc_lru_noprof+0x139/0x2b0
[ 162.730784][ T35] __d_alloc+0x31/0x700
[ 162.734937][ T35] d_alloc_parallel+0xdf/0x1600
[ 162.739774][ T35] __lookup_slow+0x117/0x3f0
[ 162.744348][ T35] lookup_one_len+0x18b/0x2d0
[ 162.749010][ T35] start_creating+0x187/0x310
[ 162.753670][ T35] __debugfs_create_file+0x73/0x4b0
[ 162.758853][ T35] drv_add_interface+0x579/0x8e0
[ 162.763777][ T35] ieee80211_do_open+0x6d5/0x22d0
[ 162.768793][ T35]
[ 162.771103][ T35] Memory state around the buggy address:
[ 162.776716][ T35] ffff88807f05bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 162.784763][ T35] ffff88807f05bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 162.792809][ T35] >ffff88807f05c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 162.800851][ T35] ^
[ 162.805159][ T35] ffff88807f05c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 162.813205][ T35] ffff88807f05c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 162.821250][ T35] ==================================================================
[ 162.841931][ T53] Bluetooth: hci0: command tx timeout
[ 162.888259][ T35] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 162.895489][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0
[ 162.905565][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 162.915639][ T35] Workqueue: l2tp l2tp_tunnel_del_work
[ 162.921129][ T35] Call Trace:
[ 162.924417][ T35]
[ 162.927360][ T35] dump_stack_lvl+0x241/0x360
[ 162.932403][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 162.937620][ T35] ? __pfx__printk+0x10/0x10
[ 162.942323][ T35] ? preempt_schedule+0xe1/0xf0
[ 162.947189][ T35] ? vscnprintf+0x5d/0x90
[ 162.951574][ T35] panic+0x349/0x860
[ 162.955483][ T35] ? check_panic_on_warn+0x21/0xb0
[ 162.960611][ T35] ? __pfx_panic+0x10/0x10
[ 162.965124][ T35] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 162.971114][ T35] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 162.977453][ T35] ? print_report+0x502/0x550
[ 162.982147][ T35] check_panic_on_warn+0x86/0xb0
[ 162.987103][ T35] ? l2tp_session_delete+0x28/0x9e0
[ 162.992330][ T35] end_report+0x77/0x160
[ 162.996590][ T35] kasan_report+0x154/0x180
[ 163.001111][ T35] ? l2tp_session_delete+0x28/0x9e0
[ 163.006323][ T35] kasan_check_range+0x282/0x290
[ 163.011282][ T35] l2tp_session_delete+0x28/0x9e0
[ 163.016320][ T35] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 163.021707][ T35] l2tp_tunnel_del_work+0x1cb/0x330
[ 163.026920][ T35] ? process_scheduled_works+0x945/0x1830
[ 163.032674][ T35] process_scheduled_works+0xa2c/0x1830
[ 163.038247][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 163.044244][ T35] ? assign_work+0x364/0x3d0
[ 163.048868][ T35] worker_thread+0x86d/0xd50
[ 163.053476][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 163.059385][ T35] ? __kthread_parkme+0x169/0x1d0
[ 163.064426][ T35] ? __pfx_worker_thread+0x10/0x10
[ 163.069551][ T35] kthread+0x2f0/0x390
[ 163.073638][ T35] ? __pfx_worker_thread+0x10/0x10
[ 163.078849][ T35] ? __pfx_kthread+0x10/0x10
[ 163.083456][ T35] ret_from_fork+0x4b/0x80
[ 163.087892][ T35] ? __pfx_kthread+0x10/0x10
[ 163.092496][ T35] ret_from_fork_asm+0x1a/0x30
[ 163.097284][ T35]
[ 163.100526][ T35] Kernel Offset: disabled
[ 163.104884][ T35] Rebooting in 86400 seconds..