Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts.
2024/06/22 19:15:51 ignoring optional flag "sandboxArg"="0"
2024/06/22 19:15:51 parsed 1 programs
[ 159.569103][ T5106] cgroup: Unknown subsys name 'net'
[ 159.865666][ T5106] cgroup: Unknown subsys name 'rlimit'
[ 160.871950][ T5120] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 161.547974][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.556366][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.589546][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.597571][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.878555][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 161.886868][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 161.894708][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 161.903272][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 161.911117][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 161.919674][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 163.381074][ T5192] chnl_net:caif_netlink_parms(): no params data found
[ 163.451816][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.459592][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.466870][ T5192] bridge_slave_0: entered allmulticast mode
[ 163.474230][ T5192] bridge_slave_0: entered promiscuous mode
[ 163.483478][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.490577][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.498172][ T5192] bridge_slave_1: entered allmulticast mode
[ 163.506262][ T5192] bridge_slave_1: entered promiscuous mode
[ 163.541053][ T5192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 163.555156][ T5192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 163.592401][ T5192] team0: Port device team_slave_0 added
[ 163.601203][ T5192] team0: Port device team_slave_1 added
[ 163.636671][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 163.644212][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.670169][ T5192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 163.683434][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 163.690381][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.716354][ T5192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 163.751478][ T5192] hsr_slave_0: entered promiscuous mode
[ 163.757935][ T5192] hsr_slave_1: entered promiscuous mode
[ 163.863900][ T5192] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 163.876086][ T5192] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 163.885709][ T5192] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 163.895487][ T5192] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 163.967089][ T5192] 8021q: adding VLAN 0 to HW filter on device bond0
[ 163.987879][ T5192] 8021q: adding VLAN 0 to HW filter on device team0
[ 164.006009][ T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.013356][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 164.024317][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 164.031439][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 164.069832][ T5192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 164.179759][ T5192] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 164.215973][ T5192] veth0_vlan: entered promiscuous mode
[ 164.228510][ T5192] veth1_vlan: entered promiscuous mode
[ 164.253556][ T5192] veth0_macvtap: entered promiscuous mode
[ 164.267646][ T5192] veth1_macvtap: entered promiscuous mode
[ 164.284590][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 164.298497][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 164.311852][ T5192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.321608][ T5192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.330654][ T5192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.339805][ T5192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2024/06/22 19:15:56 executed programs: 0
[ 164.464717][ T1274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.489327][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 164.497494][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 164.505896][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 164.514701][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 164.526644][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 164.534342][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 164.535477][ T1274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.618222][ T1274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.683453][ T1274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.725168][ T5209] chnl_net:caif_netlink_parms(): no params data found
[ 164.779957][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.787397][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 164.795101][ T5209] bridge_slave_0: entered allmulticast mode
[ 164.801796][ T5209] bridge_slave_0: entered promiscuous mode
[ 164.811336][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 164.819514][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 164.826820][ T5209] bridge_slave_1: entered allmulticast mode
[ 164.833854][ T5209] bridge_slave_1: entered promiscuous mode
[ 164.866120][ T5209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 164.879267][ T5209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 164.912441][ T5209] team0: Port device team_slave_0 added
[ 164.920962][ T5209] team0: Port device team_slave_1 added
[ 164.946639][ T5209] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 164.953892][ T5209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 164.979936][ T5209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 164.992567][ T5209] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 165.000074][ T5209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 165.026317][ T5209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 165.065678][ T5209] hsr_slave_0: entered promiscuous mode
[ 165.072148][ T5209] hsr_slave_1: entered promiscuous mode
[ 165.078552][ T5209] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 165.086462][ T5209] Cannot create hsr debugfs directory
[ 166.613519][ T4490] Bluetooth: hci0: command tx timeout
[ 168.692777][ T4490] Bluetooth: hci0: command tx timeout
[ 169.441210][ T1274] bridge_slave_1: left allmulticast mode
[ 169.447665][ T1274] bridge_slave_1: left promiscuous mode
[ 169.456326][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 169.467393][ T1274] bridge_slave_0: left allmulticast mode
[ 169.473111][ T1274] bridge_slave_0: left promiscuous mode
[ 169.478819][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 169.678117][ T1274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 169.689336][ T1274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 169.699587][ T1274] bond0 (unregistering): Released all slaves
[ 169.833428][ T1274] hsr_slave_0: left promiscuous mode
[ 169.839571][ T1274] hsr_slave_1: left promiscuous mode
[ 169.849541][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 169.857371][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 169.877302][ T1274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 169.885678][ T1274] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 169.908103][ T1274] veth1_macvtap: left promiscuous mode
[ 169.914345][ T1274] veth0_macvtap: left promiscuous mode
[ 169.920003][ T1274] veth1_vlan: left promiscuous mode
[ 169.928244][ T1274] veth0_vlan: left promiscuous mode
[ 170.231134][ T1274] team0 (unregistering): Port device team_slave_1 removed
[ 170.258914][ T1274] team0 (unregistering): Port device team_slave_0 removed
[ 170.639285][ T5209] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.668117][ T5209] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.685273][ T5209] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.705729][ T5209] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 170.774097][ T4490] Bluetooth: hci0: command tx timeout
[ 170.810872][ T5209] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.841041][ T5209] 8021q: adding VLAN 0 to HW filter on device team0
[ 170.864984][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.872105][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.881440][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.888537][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 171.014314][ T5209] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 171.050113][ T5209] veth0_vlan: entered promiscuous mode
[ 171.061190][ T5209] veth1_vlan: entered promiscuous mode
[ 171.087054][ T5209] veth0_macvtap: entered promiscuous mode
[ 171.095694][ T5209] veth1_macvtap: entered promiscuous mode
[ 171.111271][ T5209] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 171.128101][ T5209] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 171.139131][ T5209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.148174][ T5209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.157378][ T5209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.170659][ T5209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.224666][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 171.232488][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/22 19:16:03 executed programs: 1
[ 171.269857][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 171.277843][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 171.363985][ T11] ==================================================================
[ 171.372067][ T11] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 171.380064][ T11] Write of size 8 at addr ffff88807db03008 by task kworker/u8:0/11
[ 171.387940][ T11]
[ 171.390252][ T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 171.400296][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 171.410333][ T11] Workqueue: l2tp l2tp_tunnel_del_work
[ 171.415797][ T11] Call Trace:
[ 171.419059][ T11]
[ 171.421972][ T11] dump_stack_lvl+0x241/0x360
[ 171.426644][ T11] ? __pfx_dump_stack_lvl+0x10/0x10
[ 171.431835][ T11] ? __pfx__printk+0x10/0x10
[ 171.436414][ T11] ? _printk+0xd5/0x120
[ 171.440558][ T11] ? __virt_addr_valid+0x183/0x520
[ 171.445663][ T11] ? __virt_addr_valid+0x183/0x520
[ 171.450764][ T11] print_report+0x169/0x550
[ 171.455256][ T11] ? __virt_addr_valid+0x183/0x520
[ 171.460354][ T11] ? __virt_addr_valid+0x183/0x520
[ 171.465451][ T11] ? __virt_addr_valid+0x44e/0x520
[ 171.470548][ T11] ? __phys_addr+0xba/0x170
[ 171.475040][ T11] ? l2tp_session_delete+0x28/0x9e0
[ 171.480228][ T11] kasan_report+0x143/0x180
[ 171.484720][ T11] ? l2tp_session_delete+0x28/0x9e0
[ 171.490085][ T11] kasan_check_range+0x282/0x290
[ 171.495011][ T11] l2tp_session_delete+0x28/0x9e0
[ 171.500022][ T11] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 171.505381][ T11] l2tp_tunnel_del_work+0x1cb/0x330
[ 171.510566][ T11] ? process_scheduled_works+0x945/0x1830
[ 171.516269][ T11] process_scheduled_works+0xa2c/0x1830
[ 171.521848][ T11] ? __pfx_process_scheduled_works+0x10/0x10
[ 171.527820][ T11] ? assign_work+0x364/0x3d0
[ 171.532395][ T11] worker_thread+0x86d/0xd70
[ 171.536976][ T11] ? __kthread_parkme+0x169/0x1d0
[ 171.541987][ T11] ? __pfx_worker_thread+0x10/0x10
[ 171.547081][ T11] kthread+0x2f0/0x390
[ 171.551139][ T11] ? __pfx_worker_thread+0x10/0x10
[ 171.556235][ T11] ? __pfx_kthread+0x10/0x10
[ 171.560815][ T11] ret_from_fork+0x4b/0x80
[ 171.565223][ T11] ? __pfx_kthread+0x10/0x10
[ 171.569797][ T11] ret_from_fork_asm+0x1a/0x30
[ 171.574563][ T11]
[ 171.577564][ T11]
[ 171.579868][ T11] Allocated by task 5255:
[ 171.584174][ T11] kasan_save_track+0x3f/0x80
[ 171.588836][ T11] __kasan_kmalloc+0x98/0xb0
[ 171.593409][ T11] __kmalloc_noprof+0x1f9/0x400
[ 171.598243][ T11] l2tp_session_create+0x3b/0xc20
[ 171.603253][ T11] pppol2tp_connect+0xca3/0x17a0
[ 171.608175][ T11] __sys_connect+0x2df/0x310
[ 171.612749][ T11] __x64_sys_connect+0x7a/0x90
[ 171.617492][ T11] do_syscall_64+0xf3/0x230
[ 171.621979][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 171.627858][ T11]
[ 171.630161][ T11] Freed by task 24:
[ 171.633945][ T11] kasan_save_track+0x3f/0x80
[ 171.638604][ T11] kasan_save_free_info+0x40/0x50
[ 171.643610][ T11] poison_slab_object+0xe0/0x150
[ 171.648529][ T11] __kasan_slab_free+0x37/0x60
[ 171.653280][ T11] kfree+0x149/0x360
[ 171.657163][ T11] __sk_destruct+0x58/0x5f0
[ 171.661649][ T11] rcu_core+0xafd/0x1830
[ 171.665874][ T11] handle_softirqs+0x2c4/0x970
[ 171.670621][ T11] run_ksoftirqd+0xca/0x130
[ 171.675106][ T11] smpboot_thread_fn+0x544/0xa30
[ 171.680025][ T11] kthread+0x2f0/0x390
[ 171.684075][ T11] ret_from_fork+0x4b/0x80
[ 171.688474][ T11] ret_from_fork_asm+0x1a/0x30
[ 171.693223][ T11]
[ 171.695526][ T11] Last potentially related work creation:
[ 171.701219][ T11] kasan_save_stack+0x3f/0x60
[ 171.705878][ T11] __kasan_record_aux_stack+0xac/0xc0
[ 171.711229][ T11] call_rcu+0x167/0xa70
[ 171.715368][ T11] pppol2tp_release+0x24b/0x350
[ 171.720206][ T11] sock_close+0xbc/0x240
[ 171.724437][ T11] __fput+0x406/0x8b0
[ 171.728399][ T11] task_work_run+0x24f/0x310
[ 171.732974][ T11] syscall_exit_to_user_mode+0x168/0x370
[ 171.738591][ T11] do_syscall_64+0x100/0x230
[ 171.743166][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 171.749048][ T11]
[ 171.751357][ T11] The buggy address belongs to the object at ffff88807db03000
[ 171.751357][ T11] which belongs to the cache kmalloc-1k of size 1024
[ 171.765390][ T11] The buggy address is located 8 bytes inside of
[ 171.765390][ T11] freed 1024-byte region [ffff88807db03000, ffff88807db03400)
[ 171.779079][ T11]
[ 171.781385][ T11] The buggy address belongs to the physical page:
[ 171.787777][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7db00
[ 171.796528][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 171.805010][ T11] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 171.812629][ T11] page_type: 0xffffefff(slab)
[ 171.817288][ T11] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 171.825853][ T11] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 171.834417][ T11] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 171.843156][ T11] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 171.851812][ T11] head: 00fff00000000003 ffffea0001f6c001 ffffffffffffffff 0000000000000000
[ 171.860472][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 171.869121][ T11] page dumped because: kasan: bad access detected
[ 171.875516][ T11] page_owner tracks the page as allocated
[ 171.881208][ T11] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u8:0), ts 171333415189, free_ts 169847754730
[ 171.901676][ T11] post_alloc_hook+0x1f3/0x230
[ 171.906433][ T11] get_page_from_freelist+0x2e43/0x2f00
[ 171.911960][ T11] __alloc_pages_noprof+0x256/0x6c0
[ 171.917146][ T11] alloc_slab_page+0x5f/0x120
[ 171.921811][ T11] allocate_slab+0x5a/0x2f0
[ 171.926300][ T11] ___slab_alloc+0xcd1/0x14b0
[ 171.930962][ T11] __slab_alloc+0x58/0xa0
[ 171.935278][ T11] __kmalloc_noprof+0x257/0x400
[ 171.940108][ T11] ___neigh_create+0x691/0x2470
[ 171.944947][ T11] ip6_finish_output2+0x1631/0x1680
[ 171.950132][ T11] ip6_finish_output+0x41e/0x810
[ 171.955056][ T11] ndisc_send_skb+0xab2/0x1380
[ 171.959808][ T11] ndisc_send_ns+0xcc/0x160
[ 171.964298][ T11] addrconf_dad_work+0xb45/0x16f0
[ 171.969306][ T11] process_scheduled_works+0xa2c/0x1830
[ 171.974836][ T11] worker_thread+0x86d/0xd70
[ 171.979410][ T11] page last free pid 4535 tgid 4535 stack trace:
[ 171.985714][ T11] free_unref_page+0xd22/0xea0
[ 171.990464][ T11] __put_partials+0xeb/0x130
[ 171.995040][ T11] put_cpu_partial+0x17c/0x250
[ 171.999790][ T11] __slab_free+0x2ea/0x3d0
[ 172.004193][ T11] qlist_free_all+0x9e/0x140
[ 172.008770][ T11] kasan_quarantine_reduce+0x14f/0x170
[ 172.014212][ T11] __kasan_slab_alloc+0x23/0x80
[ 172.019049][ T11] kmem_cache_alloc_node_noprof+0x16b/0x320
[ 172.024933][ T11] __alloc_skb+0x1c3/0x440
[ 172.029334][ T11] alloc_skb_with_frags+0xc3/0x770
[ 172.034430][ T11] sock_alloc_send_pskb+0x91a/0xa60
[ 172.039613][ T11] unix_dgram_sendmsg+0x6d3/0x1f80
[ 172.044712][ T11] __sock_sendmsg+0x221/0x270
[ 172.049393][ T11] __sys_sendto+0x3a4/0x4f0
[ 172.053882][ T11] __x64_sys_sendto+0xde/0x100
[ 172.058631][ T11] do_syscall_64+0xf3/0x230
[ 172.063123][ T11]
[ 172.065429][ T11] Memory state around the buggy address:
[ 172.071039][ T11] ffff88807db02f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 172.079083][ T11] ffff88807db02f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 172.087125][ T11] >ffff88807db03000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.095165][ T11] ^
[ 172.099472][ T11] ffff88807db03080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.107514][ T11] ffff88807db03100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 172.115552][ T11] ==================================================================
[ 172.209763][ T11] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 172.216999][ T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 172.227074][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 172.237138][ T11] Workqueue: l2tp l2tp_tunnel_del_work
[ 172.242626][ T11] Call Trace:
[ 172.245909][ T11]
[ 172.248845][ T11] dump_stack_lvl+0x241/0x360
[ 172.253543][ T11] ? __pfx_dump_stack_lvl+0x10/0x10
[ 172.258768][ T11] ? __pfx__printk+0x10/0x10
[ 172.263377][ T11] ? preempt_schedule+0xe1/0xf0
[ 172.268239][ T11] ? vscnprintf+0x5d/0x90
[ 172.272573][ T11] panic+0x349/0x860
[ 172.276480][ T11] ? check_panic_on_warn+0x21/0xb0
[ 172.281611][ T11] ? __pfx_panic+0x10/0x10
[ 172.286047][ T11] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 172.292043][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 172.298387][ T11] ? print_report+0x502/0x550
[ 172.303079][ T11] check_panic_on_warn+0x86/0xb0
[ 172.308055][ T11] ? l2tp_session_delete+0x28/0x9e0
[ 172.313270][ T11] end_report+0x77/0x160
[ 172.317530][ T11] kasan_report+0x154/0x180
[ 172.322048][ T11] ? l2tp_session_delete+0x28/0x9e0
[ 172.327264][ T11] kasan_check_range+0x282/0x290
[ 172.332218][ T11] l2tp_session_delete+0x28/0x9e0
[ 172.337260][ T11] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 172.342648][ T11] l2tp_tunnel_del_work+0x1cb/0x330
[ 172.347860][ T11] ? process_scheduled_works+0x945/0x1830
[ 172.353585][ T11] process_scheduled_works+0xa2c/0x1830
[ 172.359152][ T11] ? __pfx_process_scheduled_works+0x10/0x10
[ 172.365147][ T11] ? assign_work+0x364/0x3d0
[ 172.369748][ T11] worker_thread+0x86d/0xd70
[ 172.374361][ T11] ? __kthread_parkme+0x169/0x1d0
[ 172.379401][ T11] ? __pfx_worker_thread+0x10/0x10
[ 172.384524][ T11] kthread+0x2f0/0x390
[ 172.388604][ T11] ? __pfx_worker_thread+0x10/0x10
[ 172.393725][ T11] ? __pfx_kthread+0x10/0x10
[ 172.398331][ T11] ret_from_fork+0x4b/0x80
[ 172.402764][ T11] ? __pfx_kthread+0x10/0x10
[ 172.407368][ T11] ret_from_fork_asm+0x1a/0x30
[ 172.412154][ T11]
[ 172.415281][ T11] Kernel Offset: disabled
[ 172.419593][ T11] Rebooting in 86400 seconds..