Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts.
2024/06/24 12:23:03 ignoring optional flag "sandboxArg"="0"
2024/06/24 12:23:03 parsed 1 programs
[ 544.603977][ T5126] cgroup: Unknown subsys name 'net'
[ 544.914685][ T5126] cgroup: Unknown subsys name 'rlimit'
[ 545.995982][ T5131] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS
[ 546.055093][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 546.063582][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 546.071462][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 546.079467][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 546.087308][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 546.094838][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 546.883768][ T5176] chnl_net:caif_netlink_parms(): no params data found
[ 546.956503][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 546.965070][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state
[ 546.973385][ T5176] bridge_slave_0: entered allmulticast mode
[ 546.981066][ T5176] bridge_slave_0: entered promiscuous mode
[ 546.992120][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 546.999362][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state
[ 547.006858][ T5176] bridge_slave_1: entered allmulticast mode
[ 547.013712][ T5176] bridge_slave_1: entered promiscuous mode
[ 547.040857][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 547.052589][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 547.091814][ T5176] team0: Port device team_slave_0 added
[ 547.101588][ T5176] team0: Port device team_slave_1 added
[ 547.127865][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 547.135176][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 547.161502][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 547.175161][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 547.182272][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 547.208704][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 547.246162][ T5176] hsr_slave_0: entered promiscuous mode
[ 547.252533][ T5176] hsr_slave_1: entered promiscuous mode
[ 547.370565][ T5176] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 547.382161][ T5176] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 547.391675][ T5176] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 547.403101][ T5176] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 547.431173][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 547.438487][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 547.446884][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 547.454095][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 547.520473][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0
[ 547.541721][ T927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 547.551148][ T927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 547.567727][ T5176] 8021q: adding VLAN 0 to HW filter on device team0
[ 547.583898][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[ 547.591032][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 547.606552][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 547.613712][ T5109] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 547.769331][ T5176] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 547.814136][ T5176] veth0_vlan: entered promiscuous mode
[ 547.826266][ T5176] veth1_vlan: entered promiscuous mode
[ 547.858270][ T5176] veth0_macvtap: entered promiscuous mode
[ 547.868436][ T5176] veth1_macvtap: entered promiscuous mode
[ 547.888582][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 547.906404][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 547.920319][ T5176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 547.929210][ T5176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 547.939301][ T5176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 547.949803][ T5176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 548.074458][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 548.151979][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 548.214391][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 548.274060][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 548.353244][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 548.365907][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 548.392498][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 548.401960][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/24 12:23:08 executed programs: 0
[ 549.594224][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 549.602737][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 549.612958][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 549.624004][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 549.633422][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 549.641834][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 549.769216][ T5232] chnl_net:caif_netlink_parms(): no params data found
[ 549.832799][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 549.840400][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 549.847612][ T5232] bridge_slave_0: entered allmulticast mode
[ 549.855894][ T5232] bridge_slave_0: entered promiscuous mode
[ 549.866648][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 549.874321][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 549.881716][ T5232] bridge_slave_1: entered allmulticast mode
[ 549.888577][ T5232] bridge_slave_1: entered promiscuous mode
[ 549.917573][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 549.929180][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 549.959895][ T5232] team0: Port device team_slave_0 added
[ 549.968972][ T5232] team0: Port device team_slave_1 added
[ 549.994751][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 550.003062][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 550.029304][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 550.042829][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 550.049884][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 550.075827][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 550.114581][ T5232] hsr_slave_0: entered promiscuous mode
[ 550.121090][ T5232] hsr_slave_1: entered promiscuous mode
[ 550.127254][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 550.135329][ T5232] Cannot create hsr debugfs directory
[ 551.690557][ T55] Bluetooth: hci0: command tx timeout
[ 553.229327][ T53] bridge_slave_1: left allmulticast mode
[ 553.238565][ T53] bridge_slave_1: left promiscuous mode
[ 553.246771][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 553.258562][ T53] bridge_slave_0: left allmulticast mode
[ 553.265125][ T53] bridge_slave_0: left promiscuous mode
[ 553.271146][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 553.478729][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 553.491382][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 553.502612][ T53] bond0 (unregistering): Released all slaves
[ 553.629143][ T53] hsr_slave_0: left promiscuous mode
[ 553.638585][ T53] hsr_slave_1: left promiscuous mode
[ 553.646803][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 553.654450][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 553.663807][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 553.671857][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 553.697052][ T53] veth1_macvtap: left promiscuous mode
[ 553.705610][ T53] veth0_macvtap: left promiscuous mode
[ 553.712087][ T53] veth1_vlan: left promiscuous mode
[ 553.717685][ T53] veth0_vlan: left promiscuous mode
[ 553.772263][ T55] Bluetooth: hci0: command tx timeout
[ 554.077602][ T53] team0 (unregistering): Port device team_slave_1 removed
[ 554.103926][ T53] team0 (unregistering): Port device team_slave_0 removed
[ 554.573278][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 554.592999][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 554.605599][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 554.616686][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 555.083652][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 555.115236][ T5232] 8021q: adding VLAN 0 to HW filter on device team0
[ 555.132865][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[ 555.140150][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 555.168733][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state
[ 555.175953][ T5187] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 555.407254][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 555.447899][ T5232] veth0_vlan: entered promiscuous mode
[ 555.460580][ T5232] veth1_vlan: entered promiscuous mode
[ 555.516528][ T5232] veth0_macvtap: entered promiscuous mode
[ 555.525789][ T5232] veth1_macvtap: entered promiscuous mode
[ 555.574310][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 555.591580][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 555.617424][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 555.626385][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 555.635237][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 555.644060][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 555.747006][ T5209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 555.761100][ T5209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 555.814111][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 555.822911][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 555.857090][ T55] Bluetooth: hci0: command tx timeout
2024/06/24 12:23:15 executed programs: 1
[ 555.961115][ T53] ==================================================================
[ 555.969314][ T53] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 555.977338][ T53] Write of size 8 at addr ffff888079d39008 by task kworker/u8:3/53
[ 555.985247][ T53]
[ 555.987615][ T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-next-20240621-syzkaller #0
[ 555.997886][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 556.008046][ T53] Workqueue: l2tp l2tp_tunnel_del_work
[ 556.013556][ T53] Call Trace:
[ 556.016851][ T53]
[ 556.019800][ T53] dump_stack_lvl+0x241/0x360
[ 556.024481][ T53] ? __pfx_dump_stack_lvl+0x10/0x10
[ 556.029670][ T53] ? __pfx__printk+0x10/0x10
[ 556.034254][ T53] ? _printk+0xd5/0x120
[ 556.038403][ T53] ? __virt_addr_valid+0x183/0x520
[ 556.043504][ T53] ? __virt_addr_valid+0x183/0x520
[ 556.048613][ T53] print_report+0x169/0x550
[ 556.053130][ T53] ? __virt_addr_valid+0x183/0x520
[ 556.058323][ T53] ? __virt_addr_valid+0x183/0x520
[ 556.063428][ T53] ? __virt_addr_valid+0x44e/0x520
[ 556.068534][ T53] ? __phys_addr+0xba/0x170
[ 556.073084][ T53] ? l2tp_session_delete+0x28/0x9e0
[ 556.078274][ T53] kasan_report+0x143/0x180
[ 556.082770][ T53] ? l2tp_session_delete+0x28/0x9e0
[ 556.087954][ T53] kasan_check_range+0x282/0x290
[ 556.092882][ T53] l2tp_session_delete+0x28/0x9e0
[ 556.097895][ T53] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 556.103254][ T53] l2tp_tunnel_del_work+0x1cb/0x330
[ 556.108439][ T53] ? process_scheduled_works+0x945/0x1830
[ 556.114145][ T53] process_scheduled_works+0xa2c/0x1830
[ 556.119689][ T53] ? __pfx_process_scheduled_works+0x10/0x10
[ 556.125660][ T53] ? assign_work+0x364/0x3d0
[ 556.130361][ T53] worker_thread+0x86d/0xd50
[ 556.135076][ T53] ? __kthread_parkme+0x169/0x1d0
[ 556.140125][ T53] ? __pfx_worker_thread+0x10/0x10
[ 556.145234][ T53] kthread+0x2f0/0x390
[ 556.149299][ T53] ? __pfx_worker_thread+0x10/0x10
[ 556.154403][ T53] ? __pfx_kthread+0x10/0x10
[ 556.159071][ T53] ret_from_fork+0x4b/0x80
[ 556.163478][ T53] ? __pfx_kthread+0x10/0x10
[ 556.168060][ T53] ret_from_fork_asm+0x1a/0x30
[ 556.172906][ T53]
[ 556.175912][ T53]
[ 556.178218][ T53] Allocated by task 5289:
[ 556.182625][ T53] kasan_save_track+0x3f/0x80
[ 556.187288][ T53] __kasan_kmalloc+0x98/0xb0
[ 556.191866][ T53] __kmalloc_noprof+0x1f9/0x400
[ 556.196710][ T53] l2tp_session_create+0x3b/0xc20
[ 556.201727][ T53] pppol2tp_connect+0xca3/0x17a0
[ 556.206650][ T53] __sys_connect+0x2df/0x310
[ 556.211320][ T53] __x64_sys_connect+0x7a/0x90
[ 556.216071][ T53] do_syscall_64+0xf3/0x230
[ 556.220643][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 556.226522][ T53]
[ 556.228830][ T53] Freed by task 5290:
[ 556.232791][ T53] kasan_save_track+0x3f/0x80
[ 556.237449][ T53] kasan_save_free_info+0x40/0x50
[ 556.242462][ T53] poison_slab_object+0xe0/0x150
[ 556.247560][ T53] __kasan_slab_free+0x37/0x60
[ 556.252312][ T53] kfree+0x149/0x360
[ 556.256199][ T53] __sk_destruct+0x58/0x5f0
[ 556.260701][ T53] rcu_core+0xaaa/0x17a0
[ 556.264935][ T53] handle_softirqs+0x2c4/0x970
[ 556.269689][ T53] __irq_exit_rcu+0xf4/0x1c0
[ 556.274274][ T53] irq_exit_rcu+0x9/0x30
[ 556.278503][ T53] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 556.284127][ T53] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 556.290096][ T53]
[ 556.292409][ T53] Last potentially related work creation:
[ 556.298102][ T53] kasan_save_stack+0x3f/0x60
[ 556.302764][ T53] __kasan_record_aux_stack+0xac/0xc0
[ 556.308123][ T53] call_rcu+0x167/0xa70
[ 556.312266][ T53] pppol2tp_release+0x24b/0x350
[ 556.317102][ T53] sock_close+0xbc/0x240
[ 556.321335][ T53] __fput+0x24a/0x8a0
[ 556.325306][ T53] task_work_run+0x24f/0x310
[ 556.329886][ T53] syscall_exit_to_user_mode+0x168/0x370
[ 556.335510][ T53] do_syscall_64+0x100/0x230
[ 556.340083][ T53] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 556.345970][ T53]
[ 556.348303][ T53] The buggy address belongs to the object at ffff888079d39000
[ 556.348303][ T53] which belongs to the cache kmalloc-1k of size 1024
[ 556.362352][ T53] The buggy address is located 8 bytes inside of
[ 556.362352][ T53] freed 1024-byte region [ffff888079d39000, ffff888079d39400)
[ 556.376046][ T53]
[ 556.378357][ T53] The buggy address belongs to the physical page:
[ 556.384756][ T53] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79d38
[ 556.393500][ T53] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 556.401982][ T53] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 556.409533][ T53] page_type: 0xffffefff(slab)
[ 556.414207][ T53] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 556.422775][ T53] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 556.431354][ T53] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 556.440047][ T53] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 556.448798][ T53] head: 00fff00000000003 ffffea0001e74e01 ffffffffffffffff 0000000000000000
[ 556.457453][ T53] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 556.466283][ T53] page dumped because: kasan: bad access detected
[ 556.472781][ T53] page_owner tracks the page as allocated
[ 556.478478][ T53] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5186, tgid 5186 (kworker/1:4), ts 555863721244, free_ts 555841555267
[ 556.499476][ T53] post_alloc_hook+0x1f3/0x230
[ 556.504241][ T53] get_page_from_freelist+0x2ccb/0x2d80
[ 556.509776][ T53] __alloc_pages_noprof+0x256/0x6c0
[ 556.514983][ T53] alloc_slab_page+0x5f/0x120
[ 556.519659][ T53] allocate_slab+0x5a/0x2f0
[ 556.524181][ T53] ___slab_alloc+0xcd1/0x14b0
[ 556.528842][ T53] __slab_alloc+0x58/0xa0
[ 556.533154][ T53] __kmalloc_noprof+0x257/0x400
[ 556.538107][ T53] ___neigh_create+0x691/0x2470
[ 556.542951][ T53] ip6_finish_output2+0x1631/0x1680
[ 556.548142][ T53] ip6_finish_output+0x41e/0x810
[ 556.553159][ T53] NF_HOOK+0x9e/0x430
[ 556.557231][ T53] mld_sendpack+0x843/0xdb0
[ 556.561726][ T53] mld_ifc_work+0x7d6/0xd90
[ 556.566221][ T53] process_scheduled_works+0xa2c/0x1830
[ 556.571755][ T53] worker_thread+0x86d/0xd50
[ 556.576433][ T53] page last free pid 5186 tgid 5186 stack trace:
[ 556.582753][ T53] free_unref_page+0xd22/0xea0
[ 556.587511][ T53] __slab_free+0x31b/0x3d0
[ 556.591915][ T53] qlist_free_all+0x9e/0x140
[ 556.596493][ T53] kasan_quarantine_reduce+0x14f/0x170
[ 556.601937][ T53] __kasan_slab_alloc+0x23/0x80
[ 556.606774][ T53] kmem_cache_alloc_node_noprof+0x16b/0x320
[ 556.612755][ T53] __alloc_skb+0x1c3/0x440
[ 556.617160][ T53] alloc_skb_with_frags+0xc3/0x770
[ 556.622261][ T53] sock_alloc_send_pskb+0x91a/0xa60
[ 556.627445][ T53] mld_newpack+0x1c3/0xa90
[ 556.631851][ T53] add_grec+0x1492/0x19a0
[ 556.636167][ T53] mld_ifc_work+0x68e/0xd90
[ 556.640656][ T53] process_scheduled_works+0xa2c/0x1830
[ 556.646189][ T53] worker_thread+0x86d/0xd50
[ 556.650785][ T53] kthread+0x2f0/0x390
[ 556.654865][ T53] ret_from_fork+0x4b/0x80
[ 556.659290][ T53]
[ 556.661605][ T53] Memory state around the buggy address:
[ 556.667224][ T53] ffff888079d38f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 556.675294][ T53] ffff888079d38f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 556.683356][ T53] >ffff888079d39000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 556.691402][ T53] ^
[ 556.695711][ T53] ffff888079d39080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 556.703757][ T53] ffff888079d39100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 556.711890][ T53] ==================================================================
[ 556.742857][ T53] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 556.750352][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-next-20240621-syzkaller #0
[ 556.760524][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 556.770679][ T53] Workqueue: l2tp l2tp_tunnel_del_work
[ 556.776216][ T53] Call Trace:
[ 556.779480][ T53]
[ 556.782413][ T53] dump_stack_lvl+0x241/0x360
[ 556.787115][ T53] ? __pfx_dump_stack_lvl+0x10/0x10
[ 556.792335][ T53] ? __pfx__printk+0x10/0x10
[ 556.796952][ T53] ? preempt_schedule+0xe1/0xf0
[ 556.801828][ T53] ? vscnprintf+0x5d/0x90
[ 556.806184][ T53] panic+0x349/0x870
[ 556.810199][ T53] ? check_panic_on_warn+0x21/0xb0
[ 556.815333][ T53] ? __pfx_panic+0x10/0x10
[ 556.819775][ T53] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 556.825779][ T53] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 556.832128][ T53] ? print_report+0x502/0x550
[ 556.836829][ T53] check_panic_on_warn+0x86/0xb0
[ 556.841801][ T53] ? l2tp_session_delete+0x28/0x9e0
[ 556.847027][ T53] end_report+0x77/0x160
[ 556.851289][ T53] kasan_report+0x154/0x180
[ 556.855790][ T53] ? l2tp_session_delete+0x28/0x9e0
[ 556.860984][ T53] kasan_check_range+0x282/0x290
[ 556.865918][ T53] l2tp_session_delete+0x28/0x9e0
[ 556.870936][ T53] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 556.876304][ T53] l2tp_tunnel_del_work+0x1cb/0x330
[ 556.881489][ T53] ? process_scheduled_works+0x945/0x1830
[ 556.887195][ T53] process_scheduled_works+0xa2c/0x1830
[ 556.892742][ T53] ? __pfx_process_scheduled_works+0x10/0x10
[ 556.899163][ T53] ? assign_work+0x364/0x3d0
[ 556.903741][ T53] worker_thread+0x86d/0xd50
[ 556.908411][ T53] ? __kthread_parkme+0x169/0x1d0
[ 556.913423][ T53] ? __pfx_worker_thread+0x10/0x10
[ 556.918521][ T53] kthread+0x2f0/0x390
[ 556.922595][ T53] ? __pfx_worker_thread+0x10/0x10
[ 556.927960][ T53] ? __pfx_kthread+0x10/0x10
[ 556.932540][ T53] ret_from_fork+0x4b/0x80
[ 556.936943][ T53] ? __pfx_kthread+0x10/0x10
[ 556.941523][ T53] ret_from_fork_asm+0x1a/0x30
[ 556.946282][ T53]
[ 556.949402][ T53] Kernel Offset: disabled
[ 556.953716][ T53] Rebooting in 86400 seconds..