Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.
2024/06/22 03:58:24 ignoring optional flag "sandboxArg"="0"
2024/06/22 03:58:25 parsed 1 programs
[ 158.040214][ T5109] cgroup: Unknown subsys name 'net'
[ 158.334098][ T5109] cgroup: Unknown subsys name 'rlimit'
[ 159.718550][ T5113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 159.997360][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 160.006661][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 160.015188][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 160.027301][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 160.035792][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 160.043777][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 160.963403][ T5161] chnl_net:caif_netlink_parms(): no params data found
[ 161.075386][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.083538][ T5161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 161.090855][ T5161] bridge_slave_0: entered allmulticast mode
[ 161.098063][ T5161] bridge_slave_0: entered promiscuous mode
[ 161.110340][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.117599][ T5161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 161.126397][ T5161] bridge_slave_1: entered allmulticast mode
[ 161.134647][ T5161] bridge_slave_1: entered promiscuous mode
[ 161.166944][ T5161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 161.178848][ T5161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 161.215066][ T5161] team0: Port device team_slave_0 added
[ 161.224106][ T5161] team0: Port device team_slave_1 added
[ 161.252963][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 161.262146][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 161.288632][ T5161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 161.302116][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 161.309425][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 161.336076][ T5161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 161.387762][ T5161] hsr_slave_0: entered promiscuous mode
[ 161.394828][ T5161] hsr_slave_1: entered promiscuous mode
[ 161.541281][ T5161] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 161.553738][ T5161] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 161.565620][ T5161] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 161.576057][ T5161] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 161.607976][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.615301][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 161.623881][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.631229][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 161.706758][ T5161] 8021q: adding VLAN 0 to HW filter on device bond0
[ 161.728257][ T57] bridge0: port 1(bridge_slave_0) entered disabled state
[ 161.738121][ T57] bridge0: port 2(bridge_slave_1) entered disabled state
[ 161.756661][ T5161] 8021q: adding VLAN 0 to HW filter on device team0
[ 161.776243][ T784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.783465][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 161.798490][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.805674][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 161.981891][ T5161] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 162.026128][ T5161] veth0_vlan: entered promiscuous mode
[ 162.041572][ T5161] veth1_vlan: entered promiscuous mode
[ 162.074520][ T5161] veth0_macvtap: entered promiscuous mode
[ 162.087192][ T5161] veth1_macvtap: entered promiscuous mode
[ 162.106968][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 162.123486][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 162.136661][ T5161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.146663][ T5161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.156962][ T5161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.165786][ T5161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.263904][ T5161] syz-executor.0 (5161) used greatest stack depth: 18448 bytes left
[ 162.296710][ T1050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 162.390367][ T1050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 162.460865][ T1050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 162.527557][ T1050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 163.188367][ T2869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.201892][ T2869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 163.233779][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.242523][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/22 03:58:31 executed programs: 0
[ 163.792286][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 163.811628][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 163.821098][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 163.829741][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 163.837881][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 163.847229][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 164.023904][ T5208] chnl_net:caif_netlink_parms(): no params data found
[ 164.100940][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.108115][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state
[ 164.115844][ T5208] bridge_slave_0: entered allmulticast mode
[ 164.123555][ T5208] bridge_slave_0: entered promiscuous mode
[ 164.132583][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 164.139820][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 164.147037][ T5208] bridge_slave_1: entered allmulticast mode
[ 164.154957][ T5208] bridge_slave_1: entered promiscuous mode
[ 164.188830][ T5208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 164.201444][ T5208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 164.240687][ T5208] team0: Port device team_slave_0 added
[ 164.250507][ T5208] team0: Port device team_slave_1 added
[ 164.279557][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 164.286630][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.312882][ T5208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.325624][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 164.332689][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.358659][ T5208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 164.405992][ T5208] hsr_slave_0: entered promiscuous mode
[ 164.413607][ T5208] hsr_slave_1: entered promiscuous mode
[ 164.420349][ T5208] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 164.428186][ T5208] Cannot create hsr debugfs directory
[ 165.879726][ T4488] Bluetooth: hci0: command tx timeout
[ 167.044425][ T1050] bridge_slave_1: left allmulticast mode
[ 167.050348][ T1050] bridge_slave_1: left promiscuous mode
[ 167.056855][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state
[ 167.075650][ T1050] bridge_slave_0: left allmulticast mode
[ 167.088182][ T1050] bridge_slave_0: left promiscuous mode
[ 167.096391][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 167.348192][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 167.359922][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 167.372427][ T1050] bond0 (unregistering): Released all slaves
[ 167.501559][ T1050] hsr_slave_0: left promiscuous mode
[ 167.508113][ T1050] hsr_slave_1: left promiscuous mode
[ 167.515300][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 167.530974][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 167.540426][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 167.547856][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 167.573800][ T1050] veth1_macvtap: left promiscuous mode
[ 167.581450][ T1050] veth0_macvtap: left promiscuous mode
[ 167.587153][ T1050] veth1_vlan: left promiscuous mode
[ 167.596684][ T1050] veth0_vlan: left promiscuous mode
[ 167.959536][ T4488] Bluetooth: hci0: command tx timeout
[ 168.015458][ T1050] team0 (unregistering): Port device team_slave_1 removed
[ 168.045264][ T1050] team0 (unregistering): Port device team_slave_0 removed
[ 168.587899][ T5208] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 168.607940][ T5208] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 168.633376][ T5208] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 168.646092][ T5208] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 168.827105][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0
[ 169.058730][ T5208] 8021q: adding VLAN 0 to HW filter on device team0
[ 169.076226][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 169.083455][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 169.112804][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 169.120046][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 169.204649][ T5208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 169.335356][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 169.374849][ T5208] veth0_vlan: entered promiscuous mode
[ 169.391444][ T5208] veth1_vlan: entered promiscuous mode
[ 169.445859][ T5208] veth0_macvtap: entered promiscuous mode
[ 169.463704][ T5208] veth1_macvtap: entered promiscuous mode
[ 169.495985][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 169.534551][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 169.546832][ T5208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.556687][ T5208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.567566][ T5208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.576664][ T5208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 169.685985][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 169.703779][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 169.738008][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 169.748606][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/22 03:58:37 executed programs: 1
[ 169.884135][ T1280] ==================================================================
[ 169.892253][ T1280] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 169.900335][ T1280] Write of size 8 at addr ffff88807e55d008 by task kworker/u8:6/1280
[ 169.908511][ T1280]
[ 169.910868][ T1280] CPU: 1 PID: 1280 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0
[ 169.921141][ T1280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 169.931219][ T1280] Workqueue: l2tp l2tp_tunnel_del_work
[ 169.936722][ T1280] Call Trace:
[ 169.940092][ T1280]
[ 169.943053][ T1280] dump_stack_lvl+0x241/0x360
[ 169.947784][ T1280] ? __pfx_dump_stack_lvl+0x10/0x10
[ 169.953090][ T1280] ? __pfx__printk+0x10/0x10
[ 169.957691][ T1280] ? _printk+0xd5/0x120
[ 169.962046][ T1280] ? __virt_addr_valid+0x183/0x520
[ 169.967167][ T1280] ? __virt_addr_valid+0x183/0x520
[ 169.972284][ T1280] print_report+0x169/0x550
[ 169.976810][ T1280] ? __virt_addr_valid+0x183/0x520
[ 169.981953][ T1280] ? __virt_addr_valid+0x183/0x520
[ 169.987112][ T1280] ? __virt_addr_valid+0x44e/0x520
[ 169.992228][ T1280] ? __phys_addr+0xba/0x170
[ 169.996740][ T1280] ? l2tp_session_delete+0x28/0x9e0
[ 170.001952][ T1280] kasan_report+0x143/0x180
[ 170.006486][ T1280] ? l2tp_session_delete+0x28/0x9e0
[ 170.011698][ T1280] kasan_check_range+0x282/0x290
[ 170.016646][ T1280] l2tp_session_delete+0x28/0x9e0
[ 170.021682][ T1280] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 170.027237][ T1280] l2tp_tunnel_del_work+0x1cb/0x330
[ 170.032448][ T1280] ? process_scheduled_works+0x945/0x1830
[ 170.038171][ T1280] process_scheduled_works+0xa2c/0x1830
[ 170.043729][ T1280] ? __pfx_process_scheduled_works+0x10/0x10
[ 170.049714][ T1280] ? assign_work+0x364/0x3d0
[ 170.054309][ T1280] worker_thread+0x86d/0xd70
[ 170.058921][ T1280] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 170.064916][ T1280] ? __kthread_parkme+0x169/0x1d0
[ 170.069948][ T1280] ? __pfx_worker_thread+0x10/0x10
[ 170.075068][ T1280] kthread+0x2f0/0x390
[ 170.079147][ T1280] ? __pfx_worker_thread+0x10/0x10
[ 170.084267][ T1280] ? __pfx_kthread+0x10/0x10
[ 170.088862][ T1280] ret_from_fork+0x4b/0x80
[ 170.093296][ T1280] ? __pfx_kthread+0x10/0x10
[ 170.097892][ T1280] ret_from_fork_asm+0x1a/0x30
[ 170.102670][ T1280]
[ 170.105715][ T1280]
[ 170.108055][ T1280] Allocated by task 5254:
[ 170.112391][ T1280] kasan_save_track+0x3f/0x80
[ 170.117075][ T1280] __kasan_kmalloc+0x98/0xb0
[ 170.121692][ T1280] __kmalloc_noprof+0x1f9/0x400
[ 170.126538][ T1280] l2tp_session_create+0x3b/0xc20
[ 170.131571][ T1280] pppol2tp_connect+0xca3/0x17a0
[ 170.136518][ T1280] __sys_connect+0x2df/0x310
[ 170.141108][ T1280] __x64_sys_connect+0x7a/0x90
[ 170.145871][ T1280] do_syscall_64+0xf3/0x230
[ 170.150378][ T1280] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 170.156285][ T1280]
[ 170.158603][ T1280] Freed by task 784:
[ 170.162492][ T1280] kasan_save_track+0x3f/0x80
[ 170.167173][ T1280] kasan_save_free_info+0x40/0x50
[ 170.172195][ T1280] poison_slab_object+0xe0/0x150
[ 170.177137][ T1280] __kasan_slab_free+0x37/0x60
[ 170.181902][ T1280] kfree+0x149/0x360
[ 170.185799][ T1280] __sk_destruct+0x58/0x5f0
[ 170.190311][ T1280] rcu_core+0xafd/0x1830
[ 170.194553][ T1280] handle_softirqs+0x2c4/0x970
[ 170.199318][ T1280] do_softirq+0x11b/0x1e0
[ 170.203647][ T1280] __local_bh_enable_ip+0x1bb/0x200
[ 170.208845][ T1280] ipv6_get_lladdr+0x295/0x3d0
[ 170.213621][ T1280] mld_newpack+0x338/0xa90
[ 170.218042][ T1280] add_grec+0x1492/0x19a0
[ 170.222375][ T1280] mld_ifc_work+0x68e/0xd90
[ 170.226915][ T1280] process_scheduled_works+0xa2c/0x1830
[ 170.232464][ T1280] worker_thread+0x86d/0xd70
[ 170.237143][ T1280] kthread+0x2f0/0x390
[ 170.241215][ T1280] ret_from_fork+0x4b/0x80
[ 170.245635][ T1280] ret_from_fork_asm+0x1a/0x30
[ 170.250406][ T1280]
[ 170.252724][ T1280] Last potentially related work creation:
[ 170.258427][ T1280] kasan_save_stack+0x3f/0x60
[ 170.263122][ T1280] __kasan_record_aux_stack+0xac/0xc0
[ 170.268497][ T1280] call_rcu+0x167/0xa70
[ 170.272668][ T1280] pppol2tp_release+0x24b/0x350
[ 170.277527][ T1280] sock_close+0xbc/0x240
[ 170.281781][ T1280] __fput+0x406/0x8b0
[ 170.285779][ T1280] task_work_run+0x24f/0x310
[ 170.290376][ T1280] syscall_exit_to_user_mode+0x168/0x370
[ 170.296017][ T1280] do_syscall_64+0x100/0x230
[ 170.300610][ T1280] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 170.306506][ T1280]
[ 170.308826][ T1280] The buggy address belongs to the object at ffff88807e55d000
[ 170.308826][ T1280] which belongs to the cache kmalloc-1k of size 1024
[ 170.322878][ T1280] The buggy address is located 8 bytes inside of
[ 170.322878][ T1280] freed 1024-byte region [ffff88807e55d000, ffff88807e55d400)
[ 170.336593][ T1280]
[ 170.338916][ T1280] The buggy address belongs to the physical page:
[ 170.345414][ T1280] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e558
[ 170.354181][ T1280] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 170.362677][ T1280] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 170.370255][ T1280] page_type: 0xffffefff(slab)
[ 170.374931][ T1280] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 170.383520][ T1280] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 170.392103][ T1280] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 170.400769][ T1280] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 170.409441][ T1280] head: 00fff00000000003 ffffea0001f95601 ffffffffffffffff 0000000000000000
[ 170.418107][ T1280] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 170.426769][ T1280] page dumped because: kasan: bad access detected
[ 170.433182][ T1280] page_owner tracks the page as allocated
[ 170.438899][ T1280] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5208, tgid 5208 (syz-executor), ts 169771306468, free_ts 169732075922
[ 170.461832][ T1280] post_alloc_hook+0x1f3/0x230
[ 170.466611][ T1280] get_page_from_freelist+0x2e43/0x2f00
[ 170.472158][ T1280] __alloc_pages_noprof+0x256/0x6c0
[ 170.477356][ T1280] alloc_slab_page+0x5f/0x120
[ 170.482050][ T1280] allocate_slab+0x5a/0x2f0
[ 170.486562][ T1280] ___slab_alloc+0xcd1/0x14b0
[ 170.491242][ T1280] __slab_alloc+0x58/0xa0
[ 170.495571][ T1280] __kmalloc_noprof+0x257/0x400
[ 170.500419][ T1280] ipt_alloc_initial_table+0x70/0x5b0
[ 170.505802][ T1280] iptable_filter_table_init+0x1c/0xc0
[ 170.511269][ T1280] xt_find_table_lock+0x2d4/0x3b0
[ 170.516385][ T1280] xt_request_find_table_lock+0x26/0x100
[ 170.522054][ T1280] do_ipt_get_ctl+0x89e/0x1810
[ 170.526823][ T1280] nf_getsockopt+0x299/0x2c0
[ 170.531419][ T1280] ip_getsockopt+0x222/0x2e0
[ 170.536008][ T1280] tcp_getsockopt+0x163/0x1c0
[ 170.540686][ T1280] page last free pid 1050 tgid 1050 stack trace:
[ 170.547013][ T1280] free_unref_page+0xd22/0xea0
[ 170.551790][ T1280] __put_partials+0xeb/0x130
[ 170.556380][ T1280] put_cpu_partial+0x17c/0x250
[ 170.561148][ T1280] __slab_free+0x2ea/0x3d0
[ 170.565567][ T1280] qlist_free_all+0x9e/0x140
[ 170.570162][ T1280] kasan_quarantine_reduce+0x14f/0x170
[ 170.575620][ T1280] __kasan_slab_alloc+0x23/0x80
[ 170.580674][ T1280] kmem_cache_alloc_node_noprof+0x16b/0x320
[ 170.586580][ T1280] __alloc_skb+0x1c3/0x440
[ 170.591013][ T1280] inet6_netconf_notify_devconf+0xfc/0x1c0
[ 170.596826][ T1280] addrconf_exit_net+0xd1/0x2c0
[ 170.601697][ T1280] cleanup_net+0x802/0xcc0
[ 170.606114][ T1280] process_scheduled_works+0xa2c/0x1830
[ 170.611658][ T1280] worker_thread+0x86d/0xd70
[ 170.616347][ T1280] kthread+0x2f0/0x390
[ 170.620419][ T1280] ret_from_fork+0x4b/0x80
[ 170.624841][ T1280]
[ 170.627162][ T1280] Memory state around the buggy address:
[ 170.632785][ T1280] ffff88807e55cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 170.640842][ T1280] ffff88807e55cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 170.648910][ T1280] >ffff88807e55d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.657059][ T1280] ^
[ 170.661382][ T1280] ffff88807e55d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.669440][ T1280] ffff88807e55d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 170.677498][ T1280] ==================================================================
[ 170.733972][ T4488] Bluetooth: hci0: command tx timeout
[ 170.773751][ T1280] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 170.781004][ T1280] CPU: 0 PID: 1280 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0
[ 170.791276][ T1280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 170.801359][ T1280] Workqueue: l2tp l2tp_tunnel_del_work
[ 170.806880][ T1280] Call Trace:
[ 170.810190][ T1280]
[ 170.813145][ T1280] dump_stack_lvl+0x241/0x360
[ 170.817869][ T1280] ? __pfx_dump_stack_lvl+0x10/0x10
[ 170.823103][ T1280] ? __pfx__printk+0x10/0x10
[ 170.827724][ T1280] ? preempt_schedule+0xe1/0xf0
[ 170.832619][ T1280] ? vscnprintf+0x5d/0x90
[ 170.837013][ T1280] panic+0x349/0x860
[ 170.840942][ T1280] ? check_panic_on_warn+0x21/0xb0
[ 170.846092][ T1280] ? __pfx_panic+0x10/0x10
[ 170.850546][ T1280] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 170.856569][ T1280] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 170.862937][ T1280] ? print_report+0x502/0x550
[ 170.867651][ T1280] check_panic_on_warn+0x86/0xb0
[ 170.872625][ T1280] ? l2tp_session_delete+0x28/0x9e0
[ 170.877862][ T1280] end_report+0x77/0x160
[ 170.882148][ T1280] kasan_report+0x154/0x180
[ 170.886697][ T1280] ? l2tp_session_delete+0x28/0x9e0
[ 170.891941][ T1280] kasan_check_range+0x282/0x290
[ 170.896913][ T1280] l2tp_session_delete+0x28/0x9e0
[ 170.901977][ T1280] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 170.907392][ T1280] l2tp_tunnel_del_work+0x1cb/0x330
[ 170.912634][ T1280] ? process_scheduled_works+0x945/0x1830
[ 170.918386][ T1280] process_scheduled_works+0xa2c/0x1830
[ 170.923980][ T1280] ? __pfx_process_scheduled_works+0x10/0x10
[ 170.929996][ T1280] ? assign_work+0x364/0x3d0
[ 170.934622][ T1280] worker_thread+0x86d/0xd70
[ 170.939245][ T1280] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 170.945186][ T1280] ? __kthread_parkme+0x169/0x1d0
[ 170.950240][ T1280] ? __pfx_worker_thread+0x10/0x10
[ 170.955381][ T1280] kthread+0x2f0/0x390
[ 170.959486][ T1280] ? __pfx_worker_thread+0x10/0x10
[ 170.964623][ T1280] ? __pfx_kthread+0x10/0x10
[ 170.969268][ T1280] ret_from_fork+0x4b/0x80
[ 170.973734][ T1280] ? __pfx_kthread+0x10/0x10
[ 170.978363][ T1280] ret_from_fork_asm+0x1a/0x30
[ 170.983190][ T1280]
[ 170.986580][ T1280] Kernel Offset: disabled
[ 170.990916][ T1280] Rebooting in 86400 seconds..