Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts.
2024/06/21 19:40:24 ignoring optional flag "sandboxArg"="0"
2024/06/21 19:40:24 parsed 1 programs
[ 174.691603][ T5107] cgroup: Unknown subsys name 'net'
[ 175.007285][ T5107] cgroup: Unknown subsys name 'rlimit'
[ 176.130806][ T5118] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 176.785000][ T5154] chnl_net:caif_netlink_parms(): no params data found
[ 176.847706][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 176.856205][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 176.863412][ T5154] bridge_slave_0: entered allmulticast mode
[ 176.871106][ T5154] bridge_slave_0: entered promiscuous mode
[ 176.880805][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 176.888153][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 176.895785][ T5154] bridge_slave_1: entered allmulticast mode
[ 176.902506][ T5154] bridge_slave_1: entered promiscuous mode
[ 176.931794][ T5154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 176.946082][ T5154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 176.980230][ T5154] team0: Port device team_slave_0 added
[ 176.987928][ T5154] team0: Port device team_slave_1 added
[ 177.010501][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 177.017811][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 177.043993][ T5154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 177.057149][ T5154] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 177.064180][ T5154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 177.090179][ T5154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 177.151629][ T5154] hsr_slave_0: entered promiscuous mode
[ 177.160189][ T5154] hsr_slave_1: entered promiscuous mode
[ 177.285132][ T5154] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 177.296472][ T5154] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 177.308439][ T5154] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 177.320854][ T5154] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 177.358206][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.365532][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.373432][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.380646][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 177.437887][ T5154] 8021q: adding VLAN 0 to HW filter on device bond0
[ 177.457148][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 177.466421][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 177.484321][ T5154] 8021q: adding VLAN 0 to HW filter on device team0
[ 177.497981][ T927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.505354][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 177.518612][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.525834][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.668471][ T5154] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 177.707934][ T5154] veth0_vlan: entered promiscuous mode
[ 177.718453][ T5154] veth1_vlan: entered promiscuous mode
[ 177.747075][ T5154] veth0_macvtap: entered promiscuous mode
[ 177.756193][ T5154] veth1_macvtap: entered promiscuous mode
[ 177.773276][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 177.791446][ T5154] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 177.803466][ T5154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.814513][ T5154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.823256][ T5154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.833025][ T5154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.944554][ T2470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 177.974736][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 177.982908][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 177.990974][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 178.000960][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 178.009935][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 178.018978][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 178.045363][ T2470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.117579][ T2470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.208367][ T2470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.293906][ T2452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.301905][ T2452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 178.329870][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.337946][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/21 19:40:29 executed programs: 0
[ 179.604683][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 179.616015][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 179.624514][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 179.633472][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 179.643474][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 179.651776][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 179.803004][ T5208] chnl_net:caif_netlink_parms(): no params data found
[ 179.857700][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 179.865241][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state
[ 179.872412][ T5208] bridge_slave_0: entered allmulticast mode
[ 179.879776][ T5208] bridge_slave_0: entered promiscuous mode
[ 179.888415][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 179.895761][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 179.903373][ T5208] bridge_slave_1: entered allmulticast mode
[ 179.911598][ T5208] bridge_slave_1: entered promiscuous mode
[ 179.938032][ T5208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 179.951382][ T5208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 179.980592][ T5208] team0: Port device team_slave_0 added
[ 179.988183][ T5208] team0: Port device team_slave_1 added
[ 180.011666][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 180.019036][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 180.046974][ T5208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 180.059215][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 180.066349][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 180.092446][ T5208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 180.129556][ T5208] hsr_slave_0: entered promiscuous mode
[ 180.135995][ T5208] hsr_slave_1: entered promiscuous mode
[ 180.142152][ T5208] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 180.150859][ T5208] Cannot create hsr debugfs directory
[ 181.704274][ T4490] Bluetooth: hci0: command tx timeout
[ 182.832477][ T2470] bridge_slave_1: left allmulticast mode
[ 182.838591][ T2470] bridge_slave_1: left promiscuous mode
[ 182.845321][ T2470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 182.858355][ T2470] bridge_slave_0: left allmulticast mode
[ 182.865468][ T2470] bridge_slave_0: left promiscuous mode
[ 182.871249][ T2470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 183.110859][ T2470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 183.123240][ T2470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 183.135255][ T2470] bond0 (unregistering): Released all slaves
[ 183.305216][ T2470] hsr_slave_0: left promiscuous mode
[ 183.311672][ T2470] hsr_slave_1: left promiscuous mode
[ 183.320896][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 183.335747][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 183.347800][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 183.356627][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 183.379389][ T2470] veth1_macvtap: left promiscuous mode
[ 183.385621][ T2470] veth0_macvtap: left promiscuous mode
[ 183.391371][ T2470] veth1_vlan: left promiscuous mode
[ 183.397067][ T2470] veth0_vlan: left promiscuous mode
[ 183.724468][ T2470] team0 (unregistering): Port device team_slave_1 removed
[ 183.751121][ T2470] team0 (unregistering): Port device team_slave_0 removed
[ 183.794359][ T4490] Bluetooth: hci0: command tx timeout
[ 184.209467][ T5208] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 184.228255][ T5208] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 184.244473][ T5208] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 184.269522][ T5208] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 184.396074][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0
[ 184.416947][ T5208] 8021q: adding VLAN 0 to HW filter on device team0
[ 184.437208][ T930] bridge0: port 1(bridge_slave_0) entered blocking state
[ 184.444583][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 184.455339][ T930] bridge0: port 2(bridge_slave_1) entered blocking state
[ 184.462423][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 184.847911][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 184.885913][ T5208] veth0_vlan: entered promiscuous mode
[ 184.898362][ T5208] veth1_vlan: entered promiscuous mode
[ 184.923502][ T5208] veth0_macvtap: entered promiscuous mode
[ 184.936067][ T5208] veth1_macvtap: entered promiscuous mode
[ 184.954491][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 184.968156][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 184.979586][ T5208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 184.989013][ T5208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 184.998201][ T5208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.007323][ T5208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.069893][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.089053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 185.137728][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.146801][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/21 19:40:35 executed programs: 1
[ 185.247170][ T3926] ==================================================================
[ 185.255383][ T3926] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 185.263431][ T3926] Write of size 8 at addr ffff88807b914008 by task kworker/u8:9/3926
[ 185.271509][ T3926]
[ 185.273854][ T3926] CPU: 0 PID: 3926 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0
[ 185.284110][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 185.294193][ T3926] Workqueue: l2tp l2tp_tunnel_del_work
[ 185.299741][ T3926] Call Trace:
[ 185.303047][ T3926]
[ 185.305999][ T3926] dump_stack_lvl+0x241/0x360
[ 185.310708][ T3926] ? __pfx_dump_stack_lvl+0x10/0x10
[ 185.315935][ T3926] ? __pfx__printk+0x10/0x10
[ 185.320551][ T3926] ? _printk+0xd5/0x120
[ 185.324913][ T3926] ? __virt_addr_valid+0x183/0x520
[ 185.330064][ T3926] ? __virt_addr_valid+0x183/0x520
[ 185.335210][ T3926] print_report+0x169/0x550
[ 185.339773][ T3926] ? __virt_addr_valid+0x183/0x520
[ 185.345106][ T3926] ? __virt_addr_valid+0x183/0x520
[ 185.350602][ T3926] ? __virt_addr_valid+0x44e/0x520
[ 185.356182][ T3926] ? __phys_addr+0xba/0x170
[ 185.360697][ T3926] ? l2tp_session_delete+0x28/0x9e0
[ 185.365895][ T3926] kasan_report+0x143/0x180
[ 185.370433][ T3926] ? l2tp_session_delete+0x28/0x9e0
[ 185.375640][ T3926] kasan_check_range+0x282/0x290
[ 185.380666][ T3926] l2tp_session_delete+0x28/0x9e0
[ 185.385691][ T3926] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 185.391071][ T3926] l2tp_tunnel_del_work+0x1cb/0x330
[ 185.396297][ T3926] ? process_scheduled_works+0x945/0x1830
[ 185.402010][ T3926] process_scheduled_works+0xa2c/0x1830
[ 185.407561][ T3926] ? __pfx_process_scheduled_works+0x10/0x10
[ 185.413539][ T3926] ? assign_work+0x364/0x3d0
[ 185.418397][ T3926] worker_thread+0x86d/0xd70
[ 185.422983][ T3926] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 185.428879][ T3926] ? __kthread_parkme+0x169/0x1d0
[ 185.433902][ T3926] ? __pfx_worker_thread+0x10/0x10
[ 185.440662][ T3926] kthread+0x2f0/0x390
[ 185.444741][ T3926] ? __pfx_worker_thread+0x10/0x10
[ 185.449857][ T3926] ? __pfx_kthread+0x10/0x10
[ 185.454528][ T3926] ret_from_fork+0x4b/0x80
[ 185.458950][ T3926] ? __pfx_kthread+0x10/0x10
[ 185.463543][ T3926] ret_from_fork_asm+0x1a/0x30
[ 185.468317][ T3926]
[ 185.471327][ T3926]
[ 185.473643][ T3926] Allocated by task 5252:
[ 185.477981][ T3926] kasan_save_track+0x3f/0x80
[ 185.482654][ T3926] __kasan_kmalloc+0x98/0xb0
[ 185.487238][ T3926] __kmalloc_noprof+0x1f9/0x400
[ 185.492174][ T3926] l2tp_session_create+0x3b/0xc20
[ 185.497205][ T3926] pppol2tp_connect+0xca3/0x17a0
[ 185.502163][ T3926] __sys_connect+0x2df/0x310
[ 185.506782][ T3926] __x64_sys_connect+0x7a/0x90
[ 185.511537][ T3926] do_syscall_64+0xf3/0x230
[ 185.516044][ T3926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 185.521933][ T3926]
[ 185.524247][ T3926] Freed by task 4546:
[ 185.528212][ T3926] kasan_save_track+0x3f/0x80
[ 185.532879][ T3926] kasan_save_free_info+0x40/0x50
[ 185.537977][ T3926] poison_slab_object+0xe0/0x150
[ 185.542907][ T3926] __kasan_slab_free+0x37/0x60
[ 185.547668][ T3926] kfree+0x149/0x360
[ 185.551560][ T3926] __sk_destruct+0x58/0x5f0
[ 185.556064][ T3926] rcu_core+0xafd/0x1830
[ 185.560302][ T3926] handle_softirqs+0x2c4/0x970
[ 185.565059][ T3926] __irq_exit_rcu+0xf4/0x1c0
[ 185.569669][ T3926] irq_exit_rcu+0x9/0x30
[ 185.573911][ T3926] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 185.579539][ T3926] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 185.585517][ T3926]
[ 185.587830][ T3926] Last potentially related work creation:
[ 185.593531][ T3926] kasan_save_stack+0x3f/0x60
[ 185.598209][ T3926] __kasan_record_aux_stack+0xac/0xc0
[ 185.603583][ T3926] call_rcu+0x167/0xa70
[ 185.607817][ T3926] pppol2tp_release+0x24b/0x350
[ 185.612949][ T3926] sock_close+0xbc/0x240
[ 185.617208][ T3926] __fput+0x406/0x8b0
[ 185.621190][ T3926] task_work_run+0x24f/0x310
[ 185.625778][ T3926] syscall_exit_to_user_mode+0x168/0x370
[ 185.631406][ T3926] do_syscall_64+0x100/0x230
[ 185.635991][ T3926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 185.641882][ T3926]
[ 185.644194][ T3926] The buggy address belongs to the object at ffff88807b914000
[ 185.644194][ T3926] which belongs to the cache kmalloc-1k of size 1024
[ 185.658424][ T3926] The buggy address is located 8 bytes inside of
[ 185.658424][ T3926] freed 1024-byte region [ffff88807b914000, ffff88807b914400)
[ 185.672139][ T3926]
[ 185.674466][ T3926] The buggy address belongs to the physical page:
[ 185.680867][ T3926] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b910
[ 185.689628][ T3926] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 185.698111][ T3926] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 185.705670][ T3926] page_type: 0xffffefff(slab)
[ 185.710336][ T3926] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 185.718912][ T3926] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 185.727487][ T3926] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 185.736235][ T3926] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 185.744908][ T3926] head: 00fff00000000003 ffffea0001ee4401 ffffffffffffffff 0000000000000000
[ 185.753573][ T3926] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 185.762315][ T3926] page dumped because: kasan: bad access detected
[ 185.768726][ T3926] page_owner tracks the page as allocated
[ 185.774428][ T3926] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 45, tgid 45 (kworker/1:1), ts 185168383550, free_ts 185087196166
[ 185.796322][ T3926] post_alloc_hook+0x1f3/0x230
[ 185.801088][ T3926] get_page_from_freelist+0x2e43/0x2f00
[ 185.806624][ T3926] __alloc_pages_noprof+0x256/0x6c0
[ 185.811810][ T3926] alloc_slab_page+0x5f/0x120
[ 185.816481][ T3926] allocate_slab+0x5a/0x2f0
[ 185.820974][ T3926] ___slab_alloc+0xcd1/0x14b0
[ 185.825740][ T3926] __slab_alloc+0x58/0xa0
[ 185.830063][ T3926] kmalloc_node_track_caller_noprof+0x281/0x440
[ 185.836293][ T3926] kmalloc_reserve+0x111/0x2a0
[ 185.841048][ T3926] __alloc_skb+0x1f3/0x440
[ 185.845452][ T3926] inet6_rt_notify+0xdf/0x290
[ 185.850119][ T3926] fib6_add+0x1e33/0x4430
[ 185.854436][ T3926] ip6_route_add+0x8b/0x160
[ 185.859148][ T3926] addrconf_add_linklocal+0x61a/0xa30
[ 185.864509][ T3926] addrconf_addr_gen+0x510/0xbb0
[ 185.869442][ T3926] addrconf_init_auto_addrs+0x96a/0xeb0
[ 185.874984][ T3926] page last free pid 5162 tgid 5162 stack trace:
[ 185.881297][ T3926] free_unref_page+0xd22/0xea0
[ 185.886062][ T3926] __slab_free+0x31b/0x3d0
[ 185.890468][ T3926] qlist_free_all+0x9e/0x140
[ 185.895516][ T3926] kasan_quarantine_reduce+0x14f/0x170
[ 185.900967][ T3926] __kasan_slab_alloc+0x23/0x80
[ 185.905812][ T3926] kmalloc_trace_noprof+0x132/0x2c0
[ 185.911000][ T3926] nsim_fib_event_work+0x19c2/0x4130
[ 185.916297][ T3926] process_scheduled_works+0xa2c/0x1830
[ 185.921835][ T3926] worker_thread+0x86d/0xd70
[ 185.926501][ T3926] kthread+0x2f0/0x390
[ 185.930830][ T3926] ret_from_fork+0x4b/0x80
[ 185.935239][ T3926] ret_from_fork_asm+0x1a/0x30
[ 185.939998][ T3926]
[ 185.942310][ T3926] Memory state around the buggy address:
[ 185.947926][ T3926] ffff88807b913f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 185.955977][ T3926] ffff88807b913f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 185.964028][ T3926] >ffff88807b914000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 185.972334][ T3926] ^
[ 185.976647][ T3926] ffff88807b914080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 185.984787][ T3926] ffff88807b914100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 185.992837][ T3926] ==================================================================
[ 186.007967][ T3926] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 186.015211][ T3926] CPU: 1 PID: 3926 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0
[ 186.025553][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 186.036668][ T3926] Workqueue: l2tp l2tp_tunnel_del_work
[ 186.042172][ T3926] Call Trace:
[ 186.045472][ T3926]
[ 186.048420][ T3926] dump_stack_lvl+0x241/0x360
[ 186.053125][ T3926] ? __pfx_dump_stack_lvl+0x10/0x10
[ 186.058357][ T3926] ? __pfx__printk+0x10/0x10
[ 186.062978][ T3926] ? preempt_schedule+0xe1/0xf0
[ 186.068204][ T3926] ? vscnprintf+0x5d/0x90
[ 186.072547][ T3926] panic+0x349/0x860
[ 186.076458][ T3926] ? check_panic_on_warn+0x21/0xb0
[ 186.081598][ T3926] ? __pfx_panic+0x10/0x10
[ 186.086040][ T3926] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 186.092052][ T3926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 186.098412][ T3926] ? print_report+0x502/0x550
[ 186.103118][ T3926] check_panic_on_warn+0x86/0xb0
[ 186.108112][ T3926] ? l2tp_session_delete+0x28/0x9e0
[ 186.113345][ T3926] end_report+0x77/0x160
[ 186.117617][ T3926] kasan_report+0x154/0x180
[ 186.122243][ T3926] ? l2tp_session_delete+0x28/0x9e0
[ 186.127579][ T3926] kasan_check_range+0x282/0x290
[ 186.132546][ T3926] l2tp_session_delete+0x28/0x9e0
[ 186.137597][ T3926] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 186.142997][ T3926] l2tp_tunnel_del_work+0x1cb/0x330
[ 186.148232][ T3926] ? process_scheduled_works+0x945/0x1830
[ 186.153987][ T3926] process_scheduled_works+0xa2c/0x1830
[ 186.159654][ T3926] ? __pfx_process_scheduled_works+0x10/0x10
[ 186.165668][ T3926] ? assign_work+0x364/0x3d0
[ 186.170287][ T3926] worker_thread+0x86d/0xd70
[ 186.174914][ T3926] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 186.180934][ T3926] ? __kthread_parkme+0x169/0x1d0
[ 186.186072][ T3926] ? __pfx_worker_thread+0x10/0x10
[ 186.191219][ T3926] kthread+0x2f0/0x390
[ 186.195310][ T3926] ? __pfx_worker_thread+0x10/0x10
[ 186.200437][ T3926] ? __pfx_kthread+0x10/0x10
[ 186.205053][ T3926] ret_from_fork+0x4b/0x80
[ 186.209506][ T3926] ? __pfx_kthread+0x10/0x10
[ 186.214131][ T3926] ret_from_fork_asm+0x1a/0x30
[ 186.218934][ T3926]
[ 186.222323][ T3926] Kernel Offset: disabled
[ 186.226649][ T3926] Rebooting in 86400 seconds..