Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts.
2024/06/26 23:39:51 ignoring optional flag "sandboxArg"="0"
2024/06/26 23:39:51 parsed 1 programs
[ 73.320969][ T5094] cgroup: Unknown subsys name 'net'
[ 73.488902][ T5094] cgroup: Unknown subsys name 'rlimit'
[ 75.198028][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.640478][ T5107] chnl_net:caif_netlink_parms(): no params data found
[ 75.735255][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.743642][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.751185][ T5107] bridge_slave_0: entered allmulticast mode
[ 75.758612][ T5107] bridge_slave_0: entered promiscuous mode
[ 75.768918][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.776167][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.784382][ T5107] bridge_slave_1: entered allmulticast mode
[ 75.791585][ T5107] bridge_slave_1: entered promiscuous mode
[ 75.823792][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.836840][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.872695][ T5107] team0: Port device team_slave_0 added
[ 75.881635][ T5107] team0: Port device team_slave_1 added
[ 75.913554][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.920786][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.947741][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.961340][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.968401][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.994521][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.041846][ T5107] hsr_slave_0: entered promiscuous mode
[ 76.050218][ T5107] hsr_slave_1: entered promiscuous mode
[ 76.207361][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.219814][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.232198][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.242365][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.275509][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.282834][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.290982][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.298134][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.366729][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.391462][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.401147][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.420705][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.435722][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.442918][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.470430][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.478098][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.506658][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 76.517572][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 76.665353][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.718029][ T5107] veth0_vlan: entered promiscuous mode
[ 76.732033][ T5107] veth1_vlan: entered promiscuous mode
[ 76.764681][ T5107] veth0_macvtap: entered promiscuous mode
[ 76.775178][ T5107] veth1_macvtap: entered promiscuous mode
[ 76.795317][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.811748][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.824352][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.833390][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.842669][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.852100][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.976257][ T5107] syz-executor (5107) used greatest stack depth: 19248 bytes left
[ 77.029822][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.120394][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.186576][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.268784][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.280926][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.283001][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.289098][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.307629][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.315818][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.323928][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 77.963138][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.971397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.007511][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.015894][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/26 23:39:57 executed programs: 0
[ 79.495303][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.505850][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.516535][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.525750][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.534371][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.542135][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.707604][ T5181] chnl_net:caif_netlink_parms(): no params data found
[ 79.782789][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.790317][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.797521][ T5181] bridge_slave_0: entered allmulticast mode
[ 79.804880][ T5181] bridge_slave_0: entered promiscuous mode
[ 79.814466][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.822173][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.836783][ T5181] bridge_slave_1: entered allmulticast mode
[ 79.844143][ T5181] bridge_slave_1: entered promiscuous mode
[ 79.877620][ T5181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.890511][ T5181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.926749][ T5181] team0: Port device team_slave_0 added
[ 79.937783][ T5181] team0: Port device team_slave_1 added
[ 79.967030][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.974847][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.001288][ T5181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.018113][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.026338][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.052546][ T5181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.101536][ T5181] hsr_slave_0: entered promiscuous mode
[ 80.108677][ T5181] hsr_slave_1: entered promiscuous mode
[ 80.115089][ T5181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 80.123217][ T5181] Cannot create hsr debugfs directory
[ 81.579480][ T4491] Bluetooth: hci0: command tx timeout
[ 81.721624][ T35] bridge_slave_1: left allmulticast mode
[ 81.727483][ T35] bridge_slave_1: left promiscuous mode
[ 81.737324][ T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.751174][ T35] bridge_slave_0: left allmulticast mode
[ 81.756833][ T35] bridge_slave_0: left promiscuous mode
[ 81.762819][ T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.060392][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.073318][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.087149][ T35] bond0 (unregistering): Released all slaves
[ 82.318339][ T35] hsr_slave_0: left promiscuous mode
[ 82.326847][ T35] hsr_slave_1: left promiscuous mode
[ 82.350711][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.368714][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.389957][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.397429][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.433074][ T35] veth1_macvtap: left promiscuous mode
[ 82.441849][ T35] veth0_macvtap: left promiscuous mode
[ 82.447805][ T35] veth1_vlan: left promiscuous mode
[ 82.462636][ T35] veth0_vlan: left promiscuous mode
[ 82.925422][ T35] team0 (unregistering): Port device team_slave_1 removed
[ 82.959650][ T35] team0 (unregistering): Port device team_slave_0 removed
[ 83.408133][ T5181] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.419936][ T5181] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.433948][ T5181] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.445466][ T5181] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.606956][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.655751][ T5181] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.670295][ T4491] Bluetooth: hci0: command tx timeout
[ 84.026546][ T928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.033768][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.073091][ T783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.080434][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.169056][ T5181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 84.372466][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.418903][ T5181] veth0_vlan: entered promiscuous mode
[ 84.432299][ T5181] veth1_vlan: entered promiscuous mode
[ 84.464193][ T5181] veth0_macvtap: entered promiscuous mode
[ 84.474517][ T5181] veth1_macvtap: entered promiscuous mode
[ 84.494541][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.512374][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.526816][ T5181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.536022][ T5181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.545209][ T5181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.555300][ T5181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.619037][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.626884][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.661753][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.670093][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.772167][ T2395] ==================================================================
[ 84.780311][ T2395] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 84.788366][ T2395] Write of size 8 at addr ffff88807cb5b808 by task kworker/u8:6/2395
[ 84.796472][ T2395]
[ 84.798828][ T2395] CPU: 0 PID: 2395 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0
[ 84.809087][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 84.819165][ T2395] Workqueue: l2tp l2tp_tunnel_del_work
[ 84.824681][ T2395] Call Trace:
[ 84.827974][ T2395]
[ 84.830913][ T2395] dump_stack_lvl+0x241/0x360
[ 84.835616][ T2395] ? __pfx_dump_stack_lvl+0x10/0x10
[ 84.840835][ T2395] ? __pfx__printk+0x10/0x10
[ 84.845440][ T2395] ? _printk+0xd5/0x120
[ 84.849611][ T2395] ? __virt_addr_valid+0x183/0x520
[ 84.854746][ T2395] ? __virt_addr_valid+0x183/0x520
[ 84.859908][ T2395] print_report+0x169/0x550
[ 84.864428][ T2395] ? __virt_addr_valid+0x183/0x520
[ 84.869581][ T2395] ? __virt_addr_valid+0x183/0x520
[ 84.874710][ T2395] ? __virt_addr_valid+0x44e/0x520
[ 84.879845][ T2395] ? __phys_addr+0xba/0x170
[ 84.884371][ T2395] ? l2tp_session_delete+0x28/0x9e0
[ 84.889678][ T2395] kasan_report+0x143/0x180
[ 84.894200][ T2395] ? l2tp_session_delete+0x28/0x9e0
[ 84.899425][ T2395] kasan_check_range+0x282/0x290
[ 84.904407][ T2395] l2tp_session_delete+0x28/0x9e0
[ 84.909456][ T2395] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 84.914855][ T2395] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 84.920274][ T2395] l2tp_tunnel_del_work+0x1cb/0x330
[ 84.925546][ T2395] ? process_scheduled_works+0x945/0x1830
[ 84.931301][ T2395] process_scheduled_works+0xa2c/0x1830
[ 84.936887][ T2395] ? __pfx_process_scheduled_works+0x10/0x10
[ 84.942900][ T2395] ? assign_work+0x364/0x3d0
[ 84.947517][ T2395] worker_thread+0x86d/0xd70
[ 84.952142][ T2395] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 84.958051][ T2395] ? __kthread_parkme+0x169/0x1d0
[ 84.963076][ T2395] ? __pfx_worker_thread+0x10/0x10
[ 84.968194][ T2395] kthread+0x2f0/0x390
[ 84.972279][ T2395] ? __pfx_worker_thread+0x10/0x10
[ 84.977391][ T2395] ? __pfx_kthread+0x10/0x10
[ 84.981986][ T2395] ret_from_fork+0x4b/0x80
[ 84.986590][ T2395] ? __pfx_kthread+0x10/0x10
[ 84.991182][ T2395] ret_from_fork_asm+0x1a/0x30
[ 84.995955][ T2395]
[ 84.998972][ T2395]
[ 85.001282][ T2395] Allocated by task 5223:
[ 85.005610][ T2395] kasan_save_track+0x3f/0x80
[ 85.010285][ T2395] __kasan_kmalloc+0x98/0xb0
[ 85.014877][ T2395] __kmalloc_noprof+0x1f9/0x400
[ 85.019722][ T2395] l2tp_session_create+0x3b/0xc20
[ 85.024765][ T2395] pppol2tp_connect+0xca3/0x17a0
[ 85.029692][ T2395] __sys_connect+0x2df/0x310
[ 85.034275][ T2395] __x64_sys_connect+0x7a/0x90
[ 85.039034][ T2395] do_syscall_64+0xf3/0x230
[ 85.043538][ T2395] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.049432][ T2395]
[ 85.051749][ T2395] Freed by task 35:
[ 85.055634][ T2395] kasan_save_track+0x3f/0x80
[ 85.060311][ T2395] kasan_save_free_info+0x40/0x50
[ 85.065329][ T2395] poison_slab_object+0xe0/0x150
[ 85.070266][ T2395] __kasan_slab_free+0x37/0x60
[ 85.075033][ T2395] kfree+0x149/0x360
[ 85.078930][ T2395] __sk_destruct+0x58/0x5f0
[ 85.083433][ T2395] rcu_core+0xafd/0x1830
[ 85.087672][ T2395] handle_softirqs+0x2c4/0x970
[ 85.092435][ T2395] __irq_exit_rcu+0xf4/0x1c0
[ 85.097024][ T2395] irq_exit_rcu+0x9/0x30
[ 85.101261][ T2395] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 85.106892][ T2395] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 85.112890][ T2395]
[ 85.115210][ T2395] Last potentially related work creation:
[ 85.120914][ T2395] kasan_save_stack+0x3f/0x60
[ 85.125594][ T2395] __kasan_record_aux_stack+0xac/0xc0
[ 85.131052][ T2395] call_rcu+0x167/0xa70
[ 85.135387][ T2395] pppol2tp_release+0x24b/0x350
[ 85.140241][ T2395] sock_close+0xbc/0x240
[ 85.144568][ T2395] __fput+0x406/0x8b0
[ 85.148551][ T2395] task_work_run+0x24f/0x310
[ 85.153158][ T2395] syscall_exit_to_user_mode+0x168/0x370
[ 85.158796][ T2395] do_syscall_64+0x100/0x230
[ 85.163396][ T2395] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.169298][ T2395]
[ 85.171618][ T2395] The buggy address belongs to the object at ffff88807cb5b800
[ 85.171618][ T2395] which belongs to the cache kmalloc-1k of size 1024
[ 85.185668][ T2395] The buggy address is located 8 bytes inside of
[ 85.185668][ T2395] freed 1024-byte region [ffff88807cb5b800, ffff88807cb5bc00)
[ 85.199462][ T2395]
[ 85.201788][ T2395] The buggy address belongs to the physical page:
[ 85.208211][ T2395] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807cb5d800 pfn:0x7cb58
[ 85.218282][ T2395] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 85.226789][ T2395] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 85.234774][ T2395] page_type: 0xffffefff(slab)
[ 85.239451][ T2395] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 0000000000000001
[ 85.248035][ T2395] raw: ffff88807cb5d800 000000000010000e 00000001ffffefff 0000000000000000
[ 85.256636][ T2395] head: 00fff00000000040 ffff888015041dc0 0000000000000000 0000000000000001
[ 85.265306][ T2395] head: ffff88807cb5d800 000000000010000e 00000001ffffefff 0000000000000000
[ 85.273979][ T2395] head: 00fff00000000003 ffffea0001f2d601 ffffffffffffffff 0000000000000000
[ 85.282649][ T2395] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 85.291312][ T2395] page dumped because: kasan: bad access detected
[ 85.297725][ T2395] page_owner tracks the page as allocated
[ 85.303438][ T2395] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4948, tgid 4948 (sh), ts 57602021341, free_ts 48020973673
[ 85.323150][ T2395] post_alloc_hook+0x1f3/0x230
[ 85.327954][ T2395] get_page_from_freelist+0x2e43/0x2f00
[ 85.333519][ T2395] __alloc_pages_noprof+0x256/0x6c0
[ 85.338727][ T2395] alloc_slab_page+0x5f/0x120
[ 85.343407][ T2395] allocate_slab+0x5a/0x2f0
[ 85.347913][ T2395] ___slab_alloc+0xcd1/0x14b0
[ 85.352593][ T2395] __slab_alloc+0x58/0xa0
[ 85.356924][ T2395] __kmalloc_noprof+0x257/0x400
[ 85.361774][ T2395] tomoyo_init_log+0x1b3e/0x2050
[ 85.366738][ T2395] tomoyo_supervisor+0x38a/0x11f0
[ 85.371762][ T2395] tomoyo_env_perm+0x178/0x210
[ 85.376532][ T2395] tomoyo_find_next_domain+0x1384/0x1cf0
[ 85.382169][ T2395] tomoyo_bprm_check_security+0x115/0x180
[ 85.387888][ T2395] security_bprm_check+0x65/0x90
[ 85.392825][ T2395] bprm_execve+0xa56/0x17c0
[ 85.397327][ T2395] do_execveat_common+0x553/0x700
[ 85.402353][ T2395] page last free pid 4891 tgid 4891 stack trace:
[ 85.408682][ T2395] free_unref_page+0xd22/0xea0
[ 85.413442][ T2395] __slab_free+0x31b/0x3d0
[ 85.417851][ T2395] qlist_free_all+0x9e/0x140
[ 85.422439][ T2395] kasan_quarantine_reduce+0x14f/0x170
[ 85.427893][ T2395] __kasan_slab_alloc+0x23/0x80
[ 85.432745][ T2395] kmem_cache_alloc_noprof+0x135/0x2a0
[ 85.438206][ T2395] getname_flags+0xbd/0x4f0
[ 85.442706][ T2395] do_sys_openat2+0xd2/0x1d0
[ 85.447289][ T2395] __x64_sys_openat+0x247/0x2a0
[ 85.452133][ T2395] do_syscall_64+0xf3/0x230
[ 85.456638][ T2395] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.462537][ T2395]
[ 85.464853][ T2395] Memory state around the buggy address:
[ 85.470473][ T2395] ffff88807cb5b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.478525][ T2395] ffff88807cb5b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.486580][ T2395] >ffff88807cb5b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.494631][ T2395] ^
[ 85.498945][ T2395] ffff88807cb5b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.506996][ T2395] ffff88807cb5b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.515047][ T2395] ==================================================================
[ 85.595098][ T2395] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.602352][ T2395] CPU: 1 PID: 2395 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00937-ga6a6a9809411 #0
[ 85.612619][ T2395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 85.622698][ T2395] Workqueue: l2tp l2tp_tunnel_del_work
[ 85.628196][ T2395] Call Trace:
[ 85.631489][ T2395]
[ 85.634430][ T2395] dump_stack_lvl+0x241/0x360
[ 85.639142][ T2395] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.6443