Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts.
2024/06/23 05:24:55 ignoring optional flag "sandboxArg"="0"
2024/06/23 05:24:55 parsed 1 programs
[ 168.185373][ T5108] cgroup: Unknown subsys name 'net'
[ 168.416132][ T5108] cgroup: Unknown subsys name 'rlimit'
[ 169.614955][ T5123] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 169.944047][ T5145] chnl_net:caif_netlink_parms(): no params data found
[ 170.011569][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.019519][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 170.027295][ T5145] bridge_slave_0: entered allmulticast mode
[ 170.034675][ T5145] bridge_slave_0: entered promiscuous mode
[ 170.044104][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.051498][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 170.059009][ T5145] bridge_slave_1: entered allmulticast mode
[ 170.066208][ T5145] bridge_slave_1: entered promiscuous mode
[ 170.092954][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 170.106427][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 170.139321][ T5145] team0: Port device team_slave_0 added
[ 170.148373][ T5145] team0: Port device team_slave_1 added
[ 170.172310][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 170.179397][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.205337][ T5145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 170.218216][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 170.225235][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 170.251272][ T5145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 170.288162][ T5145] hsr_slave_0: entered promiscuous mode
[ 170.294874][ T5145] hsr_slave_1: entered promiscuous mode
[ 170.404835][ T5145] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.416093][ T5145] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.426081][ T5145] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.435701][ T5145] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 170.460901][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.468135][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 170.476394][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.483495][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.539392][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.556546][ T5145] 8021q: adding VLAN 0 to HW filter on device team0
[ 170.568606][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 170.577038][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 170.606545][ T783] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.613683][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.622929][ T783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.630061][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 170.762097][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 170.801588][ T5145] veth0_vlan: entered promiscuous mode
[ 170.813488][ T5145] veth1_vlan: entered promiscuous mode
[ 170.842454][ T5145] veth0_macvtap: entered promiscuous mode
[ 170.851452][ T5145] veth1_macvtap: entered promiscuous mode
[ 170.868735][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 170.883828][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 170.896663][ T5145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.905848][ T5145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.914657][ T5145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 170.923674][ T5145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 171.012514][ T5145] syz-executor.0 (5145) used greatest stack depth: 19024 bytes left
[ 171.043895][ T1279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.158997][ T1279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.228566][ T1279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 171.307875][ T1279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 172.277483][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 172.287003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 172.312022][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 172.320154][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 172.564976][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 172.573908][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 172.581790][ T5199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 172.590521][ T5199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 172.599145][ T5199] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 172.606614][ T5199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2024/06/23 05:25:00 executed programs: 0
[ 172.786060][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 172.794244][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 172.802883][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 172.812127][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 172.820167][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 172.827556][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 172.948694][ T5206] chnl_net:caif_netlink_parms(): no params data found
[ 173.006021][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 173.013103][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 173.020613][ T5206] bridge_slave_0: entered allmulticast mode
[ 173.028112][ T5206] bridge_slave_0: entered promiscuous mode
[ 173.036100][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 173.043270][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 173.050691][ T5206] bridge_slave_1: entered allmulticast mode
[ 173.058479][ T5206] bridge_slave_1: entered promiscuous mode
[ 173.087130][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 173.098541][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 173.129620][ T5206] team0: Port device team_slave_0 added
[ 173.141994][ T5206] team0: Port device team_slave_1 added
[ 173.164301][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 173.171333][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 173.197706][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 173.211152][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 173.218433][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 173.245104][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 173.281899][ T5206] hsr_slave_0: entered promiscuous mode
[ 173.288829][ T5206] hsr_slave_1: entered promiscuous mode
[ 173.295355][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 173.303190][ T5206] Cannot create hsr debugfs directory
[ 174.885784][ T4490] Bluetooth: hci0: command tx timeout
[ 175.895196][ T1279] bridge_slave_1: left allmulticast mode
[ 175.901015][ T1279] bridge_slave_1: left promiscuous mode
[ 175.908663][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 175.919580][ T1279] bridge_slave_0: left allmulticast mode
[ 175.928523][ T1279] bridge_slave_0: left promiscuous mode
[ 175.934293][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 176.147266][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 176.159164][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 176.169872][ T1279] bond0 (unregistering): Released all slaves
[ 176.316994][ T1279] hsr_slave_0: left promiscuous mode
[ 176.323693][ T1279] hsr_slave_1: left promiscuous mode
[ 176.330237][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 176.345381][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 176.358721][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 176.366959][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 176.387190][ T1279] veth1_macvtap: left promiscuous mode
[ 176.393113][ T1279] veth0_macvtap: left promiscuous mode
[ 176.399639][ T1279] veth1_vlan: left promiscuous mode
[ 176.405659][ T1279] veth0_vlan: left promiscuous mode
[ 176.718454][ T1279] team0 (unregistering): Port device team_slave_1 removed
[ 176.742553][ T1279] team0 (unregistering): Port device team_slave_0 removed
[ 176.965696][ T4490] Bluetooth: hci0: command tx timeout
[ 177.130693][ T5206] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 177.148920][ T5206] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 177.173704][ T5206] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 177.198027][ T5206] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 177.332336][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0
[ 177.352986][ T5206] 8021q: adding VLAN 0 to HW filter on device team0
[ 177.367502][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.374593][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 177.390281][ T783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.397450][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.644721][ T5206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 177.822400][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 177.854450][ T5206] veth0_vlan: entered promiscuous mode
[ 177.869480][ T5206] veth1_vlan: entered promiscuous mode
[ 177.894203][ T5206] veth0_macvtap: entered promiscuous mode
[ 177.902769][ T5206] veth1_macvtap: entered promiscuous mode
[ 177.921019][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 177.933393][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 177.947778][ T5206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.956958][ T5206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.967447][ T5206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.976650][ T5206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 178.057574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.065500][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 178.101795][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 178.110099][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/23 05:25:05 executed programs: 1
[ 178.227402][ T2471] ==================================================================
[ 178.235514][ T2471] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 178.243539][ T2471] Write of size 8 at addr ffff88807e67c008 by task kworker/u8:8/2471
[ 178.251613][ T2471]
[ 178.253959][ T2471] CPU: 0 PID: 2471 Comm: kworker/u8:8 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 178.264207][ T2471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 178.274275][ T2471] Workqueue: l2tp l2tp_tunnel_del_work
[ 178.279788][ T2471] Call Trace:
[ 178.283096][ T2471]
[ 178.286124][ T2471] dump_stack_lvl+0x241/0x360
[ 178.290828][ T2471] ? __pfx_dump_stack_lvl+0x10/0x10
[ 178.296045][ T2471] ? __pfx__printk+0x10/0x10
[ 178.300662][ T2471] ? _printk+0xd5/0x120
[ 178.304837][ T2471] ? __virt_addr_valid+0x183/0x520
[ 178.309964][ T2471] ? __virt_addr_valid+0x183/0x520
[ 178.315095][ T2471] print_report+0x169/0x550
[ 178.319602][ T2471] ? __virt_addr_valid+0x183/0x520
[ 178.324702][ T2471] ? __virt_addr_valid+0x183/0x520
[ 178.329805][ T2471] ? __virt_addr_valid+0x44e/0x520
[ 178.334910][ T2471] ? __phys_addr+0xba/0x170
[ 178.339411][ T2471] ? l2tp_session_delete+0x28/0x9e0
[ 178.344604][ T2471] kasan_report+0x143/0x180
[ 178.349102][ T2471] ? l2tp_session_delete+0x28/0x9e0
[ 178.354297][ T2471] kasan_check_range+0x282/0x290
[ 178.359228][ T2471] l2tp_session_delete+0x28/0x9e0
[ 178.364243][ T2471] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 178.369628][ T2471] l2tp_tunnel_del_work+0x1cb/0x330
[ 178.374820][ T2471] ? process_scheduled_works+0x945/0x1830
[ 178.380527][ T2471] process_scheduled_works+0xa2c/0x1830
[ 178.386078][ T2471] ? __pfx_process_scheduled_works+0x10/0x10
[ 178.392053][ T2471] ? assign_work+0x364/0x3d0
[ 178.396636][ T2471] worker_thread+0x86d/0xd70
[ 178.401219][ T2471] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 178.407107][ T2471] ? __kthread_parkme+0x169/0x1d0
[ 178.412125][ T2471] ? __pfx_worker_thread+0x10/0x10
[ 178.417227][ T2471] kthread+0x2f0/0x390
[ 178.421286][ T2471] ? __pfx_worker_thread+0x10/0x10
[ 178.426385][ T2471] ? __pfx_kthread+0x10/0x10
[ 178.430969][ T2471] ret_from_fork+0x4b/0x80
[ 178.435386][ T2471] ? __pfx_kthread+0x10/0x10
[ 178.439971][ T2471] ret_from_fork_asm+0x1a/0x30
[ 178.444734][ T2471]
[ 178.447741][ T2471]
[ 178.450049][ T2471] Allocated by task 5249:
[ 178.454357][ T2471] kasan_save_track+0x3f/0x80
[ 178.459026][ T2471] __kasan_kmalloc+0x98/0xb0
[ 178.463602][ T2471] __kmalloc_noprof+0x1f9/0x400
[ 178.468438][ T2471] l2tp_session_create+0x3b/0xc20
[ 178.473452][ T2471] pppol2tp_connect+0xca3/0x17a0
[ 178.478382][ T2471] __sys_connect+0x2df/0x310
[ 178.482964][ T2471] __x64_sys_connect+0x7a/0x90
[ 178.487716][ T2471] do_syscall_64+0xf3/0x230
[ 178.492209][ T2471] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.498092][ T2471]
[ 178.500402][ T2471] Freed by task 2471:
[ 178.504369][ T2471] kasan_save_track+0x3f/0x80
[ 178.509045][ T2471] kasan_save_free_info+0x40/0x50
[ 178.514060][ T2471] poison_slab_object+0xe0/0x150
[ 178.518985][ T2471] __kasan_slab_free+0x37/0x60
[ 178.523735][ T2471] kfree+0x149/0x360
[ 178.527619][ T2471] __sk_destruct+0x58/0x5f0
[ 178.532111][ T2471] rcu_core+0xafd/0x1830
[ 178.536343][ T2471] handle_softirqs+0x2c4/0x970
[ 178.541091][ T2471] do_softirq+0x11b/0x1e0
[ 178.545409][ T2471] __local_bh_enable_ip+0x1bb/0x200
[ 178.550592][ T2471] l2tp_tunnel_del_work+0x1c3/0x330
[ 178.555779][ T2471] process_scheduled_works+0xa2c/0x1830
[ 178.561310][ T2471] worker_thread+0x86d/0xd70
[ 178.565887][ T2471] kthread+0x2f0/0x390
[ 178.569944][ T2471] ret_from_fork+0x4b/0x80
[ 178.574450][ T2471] ret_from_fork_asm+0x1a/0x30
[ 178.579212][ T2471]
[ 178.581705][ T2471] Last potentially related work creation:
[ 178.587408][ T2471] kasan_save_stack+0x3f/0x60
[ 178.592083][ T2471] __kasan_record_aux_stack+0xac/0xc0
[ 178.597450][ T2471] call_rcu+0x167/0xa70
[ 178.601602][ T2471] pppol2tp_release+0x24b/0x350
[ 178.606446][ T2471] sock_close+0xbc/0x240
[ 178.610680][ T2471] __fput+0x406/0x8b0
[ 178.614650][ T2471] task_work_run+0x24f/0x310
[ 178.619230][ T2471] syscall_exit_to_user_mode+0x168/0x370
[ 178.624852][ T2471] do_syscall_64+0x100/0x230
[ 178.629430][ T2471] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.635401][ T2471]
[ 178.637710][ T2471] The buggy address belongs to the object at ffff88807e67c000
[ 178.637710][ T2471] which belongs to the cache kmalloc-1k of size 1024
[ 178.651750][ T2471] The buggy address is located 8 bytes inside of
[ 178.651750][ T2471] freed 1024-byte region [ffff88807e67c000, ffff88807e67c400)
[ 178.665446][ T2471]
[ 178.667756][ T2471] The buggy address belongs to the physical page:
[ 178.674159][ T2471] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e678
[ 178.682911][ T2471] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 178.691402][ T2471] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 178.698942][ T2471] page_type: 0xffffefff(slab)
[ 178.703604][ T2471] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 178.712180][ T2471] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 178.720748][ T2471] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 178.729491][ T2471] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000
[ 178.738149][ T2471] head: 00fff00000000003 ffffea0001f99e01 ffffffffffffffff 0000000000000000
[ 178.746804][ T2471] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 178.755453][ T2471] page dumped because: kasan: bad access detected
[ 178.761855][ T2471] page_owner tracks the page as allocated
[ 178.767556][ T2471] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5206, tgid 5206 (syz-executor), ts 178149847315, free_ts 178047756015
[ 178.788560][ T2471] post_alloc_hook+0x1f3/0x230
[ 178.793332][ T2471] get_page_from_freelist+0x2e43/0x2f00
[ 178.798873][ T2471] __alloc_pages_noprof+0x256/0x6c0
[ 178.804074][ T2471] alloc_slab_page+0x5f/0x120
[ 178.808753][ T2471] allocate_slab+0x5a/0x2f0
[ 178.813251][ T2471] ___slab_alloc+0xcd1/0x14b0
[ 178.817921][ T2471] __slab_alloc+0x58/0xa0
[ 178.822244][ T2471] __kmalloc_node_noprof+0x286/0x440
[ 178.827519][ T2471] alloc_slab_obj_exts+0x3a/0xa0
[ 178.832451][ T2471] __memcg_slab_post_alloc_hook+0x31c/0x7e0
[ 178.838338][ T2471] __kmalloc_noprof+0x276/0x400
[ 178.843186][ T2471] security_prepare_creds+0x4c/0x140
[ 178.848474][ T2471] prepare_creds+0x467/0x640
[ 178.853055][ T2471] copy_creds+0x109/0x9c0
[ 178.857372][ T2471] copy_process+0x9e8/0x3dc0
[ 178.861949][ T2471] kernel_clone+0x226/0x8f0
[ 178.866438][ T2471] page last free pid 1279 tgid 1279 stack trace:
[ 178.872746][ T2471] free_unref_page+0xd22/0xea0
[ 178.877502][ T2471] __slab_free+0x31b/0x3d0
[ 178.881904][ T2471] qlist_free_all+0x9e/0x140
[ 178.886481][ T2471] kasan_quarantine_reduce+0x14f/0x170
[ 178.891926][ T2471] __kasan_slab_alloc+0x23/0x80
[ 178.896766][ T2471] kmalloc_trace_noprof+0x132/0x2c0
[ 178.901951][ T2471] netdevice_event+0x37d/0x950
[ 178.906703][ T2471] notifier_call_chain+0x19f/0x3e0
[ 178.911824][ T2471] unregister_netdevice_many_notify+0xd75/0x16b0
[ 178.918141][ T2471] unregister_netdevice_queue+0x303/0x370
[ 178.923847][ T2471] _cfg80211_unregister_wdev+0x162/0x560
[ 178.929483][ T2471] ieee80211_remove_interfaces+0x4db/0x700
[ 178.935278][ T2471] ieee80211_unregister_hw+0x5d/0x2c0
[ 178.940653][ T2471] mac80211_hwsim_del_radio+0x2c4/0x4c0
[ 178.946191][ T2471] hwsim_exit_net+0x5c1/0x670
[ 178.950854][ T2471] cleanup_net+0x802/0xcc0
[ 178.955267][ T2471]
[ 178.957578][ T2471] Memory state around the buggy address:
[ 178.963191][ T2471] ffff88807e67bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 178.971236][ T2471] ffff88807e67bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 178.979280][ T2471] >ffff88807e67c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 178.987407][ T2471] ^
[ 178.991717][ T2471] ffff88807e67c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 178.999863][ T2471] ffff88807e67c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.007920][ T2471] ==================================================================
[ 179.029285][ T2471] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 179.036515][ T2471] CPU: 1 PID: 2471 Comm: kworker/u8:8 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 179.046848][ T2471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 179.058823][ T2471] Workqueue: l2tp l2tp_tunnel_del_work
[ 179.064291][ T2471] Call Trace:
[ 179.067559][ T2471]
[ 179.070478][ T2471] dump_stack_lvl+0x241/0x360
[ 179.075149][ T2471] ? __pfx_dump_stack_lvl+0x10/0x10
[ 179.080338][ T2471] ? __pfx__printk+0x10/0x10
[ 179.084915][ T2471] ? preempt_schedule+0xe1/0xf0
[ 179.089767][ T2471] ? vscnprintf+0x5d/0x90
[ 179.094107][ T2471] panic+0x349/0x860
[ 179.097992][ T2471] ? check_panic_on_warn+0x21/0xb0
[ 179.103097][ T2471] ? __pfx_panic+0x10/0x10
[ 179.107502][ T2471] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 179.113471][ T2471] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 179.119788][ T2471] ? print_report+0x502/0x550
[ 179.124474][ T2471] check_panic_on_warn+0x86/0xb0
[ 179.129426][ T2471] ? l2tp_session_delete+0x28/0x9e0
[ 179.134634][ T2471] end_report+0x77/0x160
[ 179.138873][ T2471] kasan_report+0x154/0x180
[ 179.143373][ T2471] ? l2tp_session_delete+0x28/0x9e0
[ 179.148562][ T2471] kasan_check_range+0x282/0x290
[ 179.153490][ T2471] l2tp_session_delete+0x28/0x9e0
[ 179.158503][ T2471] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 179.163863][ T2471] l2tp_tunnel_del_work+0x1cb/0x330
[ 179.169053][ T2471] ? process_scheduled_works+0x945/0x1830
[ 179.174755][ T2471] process_scheduled_works+0xa2c/0x1830
[ 179.180293][ T2471] ? __pfx_process_scheduled_works+0x10/0x10
[ 179.186263][ T2471] ? assign_work+0x364/0x3d0
[ 179.190838][ T2471] worker_thread+0x86d/0xd70
[ 179.195416][ T2471] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 179.201298][ T2471] ? __kthread_parkme+0x169/0x1d0
[ 179.206307][ T2471] ? __pfx_worker_thread+0x10/0x10
[ 179.211402][ T2471] kthread+0x2f0/0x390
[ 179.215461][ T2471] ? __pfx_worker_thread+0x10/0x10
[ 179.220556][ T2471] ? __pfx_kthread+0x10/0x10
[ 179.225135][ T2471] ret_from_fork+0x4b/0x80
[ 179.229542][ T2471] ? __pfx_kthread+0x10/0x10
[ 179.234175][ T2471] ret_from_fork_asm+0x1a/0x30
[ 179.238964][ T2471]
[ 179.242256][ T2471] Kernel Offset: disabled
[ 179.246567][ T2471] Rebooting in 86400 seconds..