Warning: Permanently added '10.128.1.255' (ED25519) to the list of known hosts.
2024/06/22 09:10:09 ignoring optional flag "sandboxArg"="0"
2024/06/22 09:10:09 parsed 1 programs
[ 166.074997][ T5112] cgroup: Unknown subsys name 'net'
[ 166.372514][ T5112] cgroup: Unknown subsys name 'rlimit'
[ 167.826245][ T5133] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 167.840236][ T5133] syz-executor (5133) used greatest stack depth: 18800 bytes left
[ 168.935454][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 168.944114][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 168.988170][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 168.996230][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 169.727844][ T5173] chnl_net:caif_netlink_parms(): no params data found
[ 169.820460][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 169.828107][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 169.835784][ T5173] bridge_slave_0: entered allmulticast mode
[ 169.845822][ T5173] bridge_slave_0: entered promiscuous mode
[ 169.856295][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 169.863577][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 169.871283][ T5173] bridge_slave_1: entered allmulticast mode
[ 169.878290][ T5173] bridge_slave_1: entered promiscuous mode
[ 169.917249][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 169.932891][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 169.997794][ T5173] team0: Port device team_slave_0 added
[ 170.006654][ T5173] team0: Port device team_slave_1 added
[ 170.050399][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 170.057369][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.083873][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 170.097764][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 170.105909][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.131871][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 170.180601][ T5173] hsr_slave_0: entered promiscuous mode
[ 170.187341][ T5173] hsr_slave_1: entered promiscuous mode
[ 170.347063][ T5173] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.359419][ T5173] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.369642][ T5173] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.379745][ T5173] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 170.467869][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.495100][ T5173] 8021q: adding VLAN 0 to HW filter on device team0
[ 170.514064][ T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.521454][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.538299][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.545706][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 170.595808][ T5173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 170.734917][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 170.778507][ T5173] veth0_vlan: entered promiscuous mode
[ 170.800302][ T5173] veth1_vlan: entered promiscuous mode
[ 170.833303][ T5173] veth0_macvtap: entered promiscuous mode
[ 170.844011][ T5173] veth1_macvtap: entered promiscuous mode
[ 170.866913][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 170.884252][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 170.896877][ T5173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.906348][ T5173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.915168][ T5173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.924000][ T5173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.035810][ T5173] syz-executor.0 (5173) used greatest stack depth: 18640 bytes left
[ 171.057176][ T2810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.130541][ T2810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.193243][ T2810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.287681][ T2810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.363283][ T5197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 171.372174][ T5197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 171.381693][ T5197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 171.390890][ T5197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 171.399086][ T5197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 171.407748][ T5197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2024/06/22 09:10:16 executed programs: 0
[ 172.239967][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 172.250024][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 172.258061][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 172.268224][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 172.278666][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 172.288130][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 172.464597][ T5213] chnl_net:caif_netlink_parms(): no params data found
[ 172.542081][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 172.549966][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 172.557246][ T5213] bridge_slave_0: entered allmulticast mode
[ 172.564603][ T5213] bridge_slave_0: entered promiscuous mode
[ 172.574475][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 172.582134][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 172.589895][ T5213] bridge_slave_1: entered allmulticast mode
[ 172.596897][ T5213] bridge_slave_1: entered promiscuous mode
[ 172.629625][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 172.642515][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 172.685043][ T5213] team0: Port device team_slave_0 added
[ 172.693925][ T5213] team0: Port device team_slave_1 added
[ 172.724306][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 172.731442][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 172.757413][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 172.770466][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 172.777449][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 172.803936][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 172.853412][ T5213] hsr_slave_0: entered promiscuous mode
[ 172.860198][ T5213] hsr_slave_1: entered promiscuous mode
[ 172.866418][ T5213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 172.874984][ T5213] Cannot create hsr debugfs directory
[ 174.390222][ T5197] Bluetooth: hci0: command tx timeout
[ 176.072209][ T2810] bridge_slave_1: left allmulticast mode
[ 176.078112][ T2810] bridge_slave_1: left promiscuous mode
[ 176.093042][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state
[ 176.111868][ T2810] bridge_slave_0: left allmulticast mode
[ 176.117572][ T2810] bridge_slave_0: left promiscuous mode
[ 176.123993][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state
[ 176.357760][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 176.372076][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 176.383128][ T2810] bond0 (unregistering): Released all slaves
[ 176.469471][ T5197] Bluetooth: hci0: command tx timeout
[ 176.545639][ T2810] hsr_slave_0: left promiscuous mode
[ 176.557605][ T2810] hsr_slave_1: left promiscuous mode
[ 176.570796][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 176.578301][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 176.591955][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 176.599874][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 176.627943][ T2810] veth1_macvtap: left promiscuous mode
[ 176.634143][ T2810] veth0_macvtap: left promiscuous mode
[ 176.641151][ T2810] veth1_vlan: left promiscuous mode
[ 176.646734][ T2810] veth0_vlan: left promiscuous mode
[ 177.045331][ T2810] team0 (unregistering): Port device team_slave_1 removed
[ 177.073159][ T2810] team0 (unregistering): Port device team_slave_0 removed
[ 177.592516][ T5213] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 177.603745][ T5213] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 177.616069][ T5213] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 177.635238][ T5213] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 177.805152][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0
[ 178.047117][ T5213] 8021q: adding VLAN 0 to HW filter on device team0
[ 178.067459][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 178.074725][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 178.120884][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 178.128094][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 178.447918][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 178.512859][ T5213] veth0_vlan: entered promiscuous mode
[ 178.527649][ T5213] veth1_vlan: entered promiscuous mode
[ 178.549025][ T5197] Bluetooth: hci0: command tx timeout
[ 178.562350][ T5213] veth0_macvtap: entered promiscuous mode
[ 178.572620][ T5213] veth1_macvtap: entered promiscuous mode
[ 178.592820][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 178.608026][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 178.621626][ T5213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.630915][ T5213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.639911][ T5213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.648619][ T5213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.713886][ T2810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.722040][ T2810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 178.756137][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.764699][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/22 09:10:22 executed programs: 1
[ 178.949776][ T2810] ==================================================================
[ 178.957901][ T2810] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 178.965961][ T2810] Write of size 8 at addr ffff88807b6e6008 by task kworker/u8:9/2810
[ 178.974059][ T2810]
[ 178.976417][ T2810] CPU: 0 PID: 2810 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0
[ 178.986737][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 178.996842][ T2810] Workqueue: l2tp l2tp_tunnel_del_work
[ 179.002376][ T2810] Call Trace:
[ 179.005663][ T2810]
[ 179.008861][ T2810] dump_stack_lvl+0x241/0x360
[ 179.013561][ T2810] ? __pfx_dump_stack_lvl+0x10/0x10
[ 179.018863][ T2810] ? __pfx__printk+0x10/0x10
[ 179.023468][ T2810] ? _printk+0xd5/0x120
[ 179.027654][ T2810] ? __virt_addr_valid+0x183/0x520
[ 179.032867][ T2810] ? __virt_addr_valid+0x183/0x520
[ 179.037996][ T2810] print_report+0x169/0x550
[ 179.043209][ T2810] ? __virt_addr_valid+0x183/0x520
[ 179.048352][ T2810] ? __virt_addr_valid+0x183/0x520
[ 179.053474][ T2810] ? __virt_addr_valid+0x44e/0x520
[ 179.058595][ T2810] ? __phys_addr+0xba/0x170
[ 179.063119][ T2810] ? l2tp_session_delete+0x28/0x9e0
[ 179.068328][ T2810] kasan_report+0x143/0x180
[ 179.072842][ T2810] ? l2tp_session_delete+0x28/0x9e0
[ 179.078061][ T2810] kasan_check_range+0x282/0x290
[ 179.083012][ T2810] l2tp_session_delete+0x28/0x9e0
[ 179.088055][ T2810] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 179.093443][ T2810] l2tp_tunnel_del_work+0x1cb/0x330
[ 179.098656][ T2810] ? process_scheduled_works+0x945/0x1830
[ 179.104381][ T2810] process_scheduled_works+0xa2c/0x1830
[ 179.109945][ T2810] ? __pfx_process_scheduled_works+0x10/0x10
[ 179.115936][ T2810] ? assign_work+0x364/0x3d0
[ 179.120674][ T2810] worker_thread+0x86d/0xd70
[ 179.125380][ T2810] ? __kthread_parkme+0x169/0x1d0
[ 179.130412][ T2810] ? __pfx_worker_thread+0x10/0x10
[ 179.135531][ T2810] kthread+0x2f0/0x390
[ 179.139612][ T2810] ? __pfx_worker_thread+0x10/0x10
[ 179.144733][ T2810] ? __pfx_kthread+0x10/0x10
[ 179.149332][ T2810] ret_from_fork+0x4b/0x80
[ 179.153768][ T2810] ? __pfx_kthread+0x10/0x10
[ 179.158374][ T2810] ret_from_fork_asm+0x1a/0x30
[ 179.163185][ T2810]
[ 179.166201][ T2810]
[ 179.168541][ T2810] Allocated by task 5275:
[ 179.172866][ T2810] kasan_save_track+0x3f/0x80
[ 179.177548][ T2810] __kasan_kmalloc+0x98/0xb0
[ 179.182144][ T2810] __kmalloc_noprof+0x1f9/0x400
[ 179.187008][ T2810] l2tp_session_create+0x3b/0xc20
[ 179.192063][ T2810] pppol2tp_connect+0xca3/0x17a0
[ 179.197011][ T2810] __sys_connect+0x2df/0x310
[ 179.201604][ T2810] __x64_sys_connect+0x7a/0x90
[ 179.206368][ T2810] do_syscall_64+0xf3/0x230
[ 179.210877][ T2810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.216780][ T2810]
[ 179.219112][ T2810] Freed by task 24:
[ 179.222918][ T2810] kasan_save_track+0x3f/0x80
[ 179.227602][ T2810] kasan_save_free_info+0x40/0x50
[ 179.232627][ T2810] poison_slab_object+0xe0/0x150
[ 179.237573][ T2810] __kasan_slab_free+0x37/0x60
[ 179.242342][ T2810] kfree+0x149/0x360
[ 179.246284][ T2810] __sk_destruct+0x58/0x5f0
[ 179.250796][ T2810] rcu_core+0xafd/0x1830
[ 179.255043][ T2810] handle_softirqs+0x2c4/0x970
[ 179.259811][ T2810] run_ksoftirqd+0xca/0x130
[ 179.264320][ T2810] smpboot_thread_fn+0x544/0xa30
[ 179.269263][ T2810] kthread+0x2f0/0x390
[ 179.273345][ T2810] ret_from_fork+0x4b/0x80
[ 179.277769][ T2810] ret_from_fork_asm+0x1a/0x30
[ 179.282553][ T2810]
[ 179.284876][ T2810] Last potentially related work creation:
[ 179.290613][ T2810] kasan_save_stack+0x3f/0x60
[ 179.295315][ T2810] __kasan_record_aux_stack+0xac/0xc0
[ 179.300688][ T2810] call_rcu+0x167/0xa70
[ 179.304854][ T2810] pppol2tp_release+0x24b/0x350
[ 179.309724][ T2810] sock_close+0xbc/0x240
[ 179.313976][ T2810] __fput+0x406/0x8b0
[ 179.317958][ T2810] task_work_run+0x24f/0x310
[ 179.322553][ T2810] syscall_exit_to_user_mode+0x168/0x370
[ 179.328190][ T2810] do_syscall_64+0x100/0x230
[ 179.332788][ T2810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.338690][ T2810]
[ 179.341012][ T2810] The buggy address belongs to the object at ffff88807b6e6000
[ 179.341012][ T2810] which belongs to the cache kmalloc-1k of size 1024
[ 179.355063][ T2810] The buggy address is located 8 bytes inside of
[ 179.355063][ T2810] freed 1024-byte region [ffff88807b6e6000, ffff88807b6e6400)
[ 179.368771][ T2810]
[ 179.371099][ T2810] The buggy address belongs to the physical page:
[ 179.377512][ T2810] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b6e0
[ 179.386282][ T2810] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 179.394795][ T2810] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 179.402776][ T2810] page_type: 0xffffefff(slab)
[ 179.407451][ T2810] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 0000000000000001
[ 179.416031][ T2810] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 179.424614][ T2810] head: 00fff00000000040 ffff888015041dc0 0000000000000000 0000000000000001
[ 179.433285][ T2810] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 179.441970][ T2810] head: 00fff00000000003 ffffea0001edb801 ffffffffffffffff 0000000000000000
[ 179.450651][ T2810] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 179.459413][ T2810] page dumped because: kasan: bad access detected
[ 179.465854][ T2810] page_owner tracks the page as allocated
[ 179.471582][ T2810] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (dhcpcd-run-hook), ts 58734027513, free_ts 58720550165
[ 179.493217][ T2810] post_alloc_hook+0x1f3/0x230
[ 179.497999][ T2810] get_page_from_freelist+0x2e43/0x2f00
[ 179.503548][ T2810] __alloc_pages_noprof+0x256/0x6c0
[ 179.508749][ T2810] alloc_slab_page+0x5f/0x120
[ 179.513443][ T2810] allocate_slab+0x5a/0x2f0
[ 179.517976][ T2810] ___slab_alloc+0xcd1/0x14b0
[ 179.522656][ T2810] __slab_alloc+0x58/0xa0
[ 179.527003][ T2810] __kmalloc_noprof+0x257/0x400
[ 179.531859][ T2810] load_elf_phdrs+0x162/0x260
[ 179.536537][ T2810] load_elf_binary+0x937/0x2620
[ 179.541392][ T2810] bprm_execve+0xaf8/0x17c0
[ 179.545900][ T2810] do_execveat_common+0x553/0x700
[ 179.550934][ T2810] __x64_sys_execve+0x92/0xb0
[ 179.555622][ T2810] do_syscall_64+0xf3/0x230
[ 179.560219][ T2810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.566225][ T2810] page last free pid 4988 tgid 4988 stack trace:
[ 179.572557][ T2810] free_unref_page+0xd22/0xea0
[ 179.577346][ T2810] __put_partials+0xeb/0x130
[ 179.581968][ T2810] put_cpu_partial+0x17c/0x250
[ 179.586747][ T2810] __slab_free+0x2ea/0x3d0
[ 179.591179][ T2810] qlist_free_all+0x9e/0x140
[ 179.595783][ T2810] kasan_quarantine_reduce+0x14f/0x170
[ 179.601251][ T2810] __kasan_slab_alloc+0x23/0x80
[ 179.606108][ T2810] kmem_cache_alloc_noprof+0x135/0x2a0
[ 179.611588][ T2810] getname_flags+0xbd/0x4f0
[ 179.616105][ T2810] user_path_at_empty+0x2c/0x60
[ 179.620958][ T2810] do_faccessat+0x5e5/0xb80
[ 179.625463][ T2810] do_syscall_64+0xf3/0x230
[ 179.629983][ T2810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.635899][ T2810]
[ 179.638237][ T2810] Memory state around the buggy address:
[ 179.643876][ T2810] ffff88807b6e5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 179.651949][ T2810] ffff88807b6e5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 179.660019][ T2810] >ffff88807b6e6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.668076][ T2810] ^
[ 179.672417][ T2810] ffff88807b6e6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.680482][ T2810] ffff88807b6e6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.688543][ T2810] ==================================================================
[ 179.720178][ T2810] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 179.727431][ T2810] CPU: 1 PID: 2810 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0
[ 179.737707][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 179.747890][ T2810] Workqueue: l2tp l2tp_tunnel_del_work
[ 179.753411][ T2810] Call Trace:
[ 179.756724][ T2810]
[ 179.759712][ T2810] dump_stack_lvl+0x241/0x360
[ 179.764444][ T2810] ? __pfx_dump_stack_lvl+0x10/0x10
[ 179.769681][ T2810] ? __pfx__printk+0x10/0x10
[ 179.774296][ T2810] ? preempt_schedule+0xe1/0xf0
[ 179.779168][ T2810] ? vscnprintf+0x5d/0x90
[ 179.783527][ T2810] panic+0x349/0x860
[ 179.787432][ T2810] ? check_panic_on_warn+0x21/0xb0
[ 179.792556][ T2810] ? __pfx_panic+0x10/0x10
[ 179.796989][ T2810] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 179.802987][ T2810] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 179.809419][ T2810] ? print_report+0x502/0x550
[ 179.814107][ T2810] check_panic_on_warn+0x86/0xb0
[ 179.819069][ T2810] ? l2tp_session_delete+0x28/0x9e0
[ 179.824280][ T2810] end_report+0x77/0x160
[ 179.828615][ T2810] kasan_report+0x154/0x180
[ 179.833134][ T2810] ? l2tp_session_delete+0x28/0x9e0
[ 179.838350][ T2810] kasan_check_range+0x282/0x290
[ 179.843325][ T2810] l2tp_session_delete+0x28/0x9e0
[ 179.848365][ T2810] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 179.853752][ T2810] l2tp_tunnel_del_work+0x1cb/0x330
[ 179.859056][ T2810] ? process_scheduled_works+0x945/0x1830
[ 179.864782][ T2810] process_scheduled_works+0xa2c/0x1830
[ 179.870346][ T2810] ? __pfx_process_scheduled_works+0x10/0x10
[ 179.876336][ T2810] ? assign_work+0x364/0x3d0
[ 179.880932][ T2810] worker_thread+0x86d/0xd70
[ 179.885532][ T2810] ? __kthread_parkme+0x169/0x1d0
[ 179.890564][ T2810] ? __pfx_worker_thread+0x10/0x10
[ 179.895679][ T2810] kthread+0x2f0/0x390
[ 179.899763][ T2810] ? __pfx_worker_thread+0x10/0x10
[ 179.904878][ T2810] ? __pfx_kthread+0x10/0x10
[ 179.909480][ T2810] ret_from_fork+0x4b/0x80
[ 179.913912][ T2810] ? __pfx_kthread+0x10/0x10
[ 179.918511][ T2810] ret_from_fork_asm+0x1a/0x30
[ 179.923307][ T2810]
[ 179.926716][ T2810] Kernel Offset: disabled
[ 179.931066][ T2810] Rebooting in 86400 seconds..