Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. 2024/06/21 15:11:07 ignoring optional flag "sandboxArg"="0" 2024/06/21 15:11:07 parsed 1 programs [ 168.464510][ T5123] cgroup: Unknown subsys name 'net' [ 168.707428][ T5123] cgroup: Unknown subsys name 'rlimit' [ 170.134819][ T5128] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 170.866564][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.879809][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.913718][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.922215][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.071277][ T5168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.080637][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.088658][ T5168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.097612][ T5168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.106209][ T5168] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.113868][ T5168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.339367][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 172.440111][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.448407][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.456175][ T5189] bridge_slave_0: entered allmulticast mode [ 172.463604][ T5189] bridge_slave_0: entered promiscuous mode [ 172.475070][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.482503][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.489808][ T5189] bridge_slave_1: entered allmulticast mode [ 172.496926][ T5189] bridge_slave_1: entered promiscuous mode [ 172.536914][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.549014][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.588371][ T5189] team0: Port device team_slave_0 added [ 172.597747][ T5189] team0: Port device team_slave_1 added [ 172.629378][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.637803][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.665267][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.678872][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.686601][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.712678][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.763869][ T5189] hsr_slave_0: entered promiscuous mode [ 172.771519][ T5189] hsr_slave_1: entered promiscuous mode [ 172.917702][ T5189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.929325][ T5189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.941341][ T5189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.951525][ T5189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.051628][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.075551][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.089307][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.097001][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.114067][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.121336][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.308045][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.349634][ T5189] veth0_vlan: entered promiscuous mode [ 173.368256][ T5189] veth1_vlan: entered promiscuous mode [ 173.402534][ T5189] veth0_macvtap: entered promiscuous mode [ 173.413769][ T5189] veth1_macvtap: entered promiscuous mode [ 173.434427][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.452408][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.465570][ T5189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.475395][ T5189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.484483][ T5189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.493598][ T5189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.591117][ T5189] syz-executor.0 (5189) used greatest stack depth: 18128 bytes left [ 173.626366][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.707460][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.779884][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.853784][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/06/21 15:11:13 executed programs: 0 [ 174.471311][ T4492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.489516][ T4492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.497936][ T4492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.511757][ T4492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.520861][ T4492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.529071][ T4492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.718475][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 174.803640][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.811016][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.818208][ T5220] bridge_slave_0: entered allmulticast mode [ 174.825634][ T5220] bridge_slave_0: entered promiscuous mode [ 174.835213][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.843285][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.850860][ T5220] bridge_slave_1: entered allmulticast mode [ 174.858130][ T5220] bridge_slave_1: entered promiscuous mode [ 174.893189][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.906151][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.948069][ T5220] team0: Port device team_slave_0 added [ 174.959282][ T5220] team0: Port device team_slave_1 added [ 175.000714][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.007690][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.034387][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.049109][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.056239][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.082735][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.135364][ T5220] hsr_slave_0: entered promiscuous mode [ 175.142225][ T5220] hsr_slave_1: entered promiscuous mode [ 175.148598][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.156905][ T5220] Cannot create hsr debugfs directory [ 176.560410][ T5168] Bluetooth: hci0: command tx timeout [ 178.429782][ T61] bridge_slave_1: left allmulticast mode [ 178.436611][ T61] bridge_slave_1: left promiscuous mode [ 178.444846][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.458838][ T61] bridge_slave_0: left allmulticast mode [ 178.464927][ T61] bridge_slave_0: left promiscuous mode [ 178.471181][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.657284][ T5168] Bluetooth: hci0: command tx timeout [ 178.719298][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.732137][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.743320][ T61] bond0 (unregistering): Released all slaves [ 178.922922][ T61] hsr_slave_0: left promiscuous mode [ 178.939842][ T61] hsr_slave_1: left promiscuous mode [ 178.947518][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.959267][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.970760][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.982949][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.011186][ T61] veth1_macvtap: left promiscuous mode [ 179.017234][ T61] veth0_macvtap: left promiscuous mode [ 179.026536][ T61] veth1_vlan: left promiscuous mode [ 179.033572][ T61] veth0_vlan: left promiscuous mode [ 179.426791][ T61] team0 (unregistering): Port device team_slave_1 removed [ 179.457701][ T61] team0 (unregistering): Port device team_slave_0 removed [ 179.923957][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.946973][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.964640][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.983373][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.104392][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.139456][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.155713][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.162963][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.188700][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.195953][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.504262][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.563743][ T5220] veth0_vlan: entered promiscuous mode [ 180.578215][ T5220] veth1_vlan: entered promiscuous mode [ 180.626470][ T5220] veth0_macvtap: entered promiscuous mode [ 180.643253][ T5220] veth1_macvtap: entered promiscuous mode [ 180.666955][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.682080][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.699471][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.708957][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.718573][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.727466][ T5168] Bluetooth: hci0: command tx timeout [ 180.734294][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.806130][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.816514][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/21 15:11:20 executed programs: 1 [ 180.847305][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.856942][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.942017][ T2811] ================================================================== [ 180.950135][ T2811] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 180.958195][ T2811] Write of size 8 at addr ffff88807c175808 by task kworker/u8:9/2811 [ 180.966296][ T2811] [ 180.968657][ T2811] CPU: 0 PID: 2811 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 180.978920][ T2811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 180.989000][ T2811] Workqueue: l2tp l2tp_tunnel_del_work [ 180.994499][ T2811] Call Trace: [ 180.997782][ T2811] [ 181.000714][ T2811] dump_stack_lvl+0x241/0x360 [ 181.005408][ T2811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.010620][ T2811] ? __pfx__printk+0x10/0x10 [ 181.015223][ T2811] ? _printk+0xd5/0x120 [ 181.019390][ T2811] ? __virt_addr_valid+0x183/0x520 [ 181.024516][ T2811] ? __virt_addr_valid+0x183/0x520 [ 181.029641][ T2811] print_report+0x169/0x550 [ 181.034159][ T2811] ? __virt_addr_valid+0x183/0x520 [ 181.039288][ T2811] ? __virt_addr_valid+0x183/0x520 [ 181.044408][ T2811] ? __virt_addr_valid+0x44e/0x520 [ 181.049530][ T2811] ? __phys_addr+0xba/0x170 [ 181.054053][ T2811] ? l2tp_session_delete+0x28/0x9e0 [ 181.059268][ T2811] kasan_report+0x143/0x180 [ 181.063785][ T2811] ? l2tp_session_delete+0x28/0x9e0 [ 181.069015][ T2811] kasan_check_range+0x282/0x290 [ 181.073979][ T2811] l2tp_session_delete+0x28/0x9e0 [ 181.079025][ T2811] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 181.084418][ T2811] l2tp_tunnel_del_work+0x1cb/0x330 [ 181.089767][ T2811] ? process_scheduled_works+0x945/0x1830 [ 181.095532][ T2811] process_scheduled_works+0xa2c/0x1830 [ 181.101385][ T2811] ? __pfx_process_scheduled_works+0x10/0x10 [ 181.107483][ T2811] ? assign_work+0x364/0x3d0 [ 181.112107][ T2811] worker_thread+0x86d/0xd70 [ 181.116748][ T2811] ? __kthread_parkme+0x169/0x1d0 [ 181.121796][ T2811] ? __pfx_worker_thread+0x10/0x10 [ 181.126927][ T2811] kthread+0x2f0/0x390 [ 181.131017][ T2811] ? __pfx_worker_thread+0x10/0x10 [ 181.136151][ T2811] ? __pfx_kthread+0x10/0x10 [ 181.140790][ T2811] ret_from_fork+0x4b/0x80 [ 181.145235][ T2811] ? __pfx_kthread+0x10/0x10 [ 181.149835][ T2811] ret_from_fork_asm+0x1a/0x30 [ 181.154640][ T2811] [ 181.157657][ T2811] [ 181.159979][ T2811] Allocated by task 5264: [ 181.164338][ T2811] kasan_save_track+0x3f/0x80 [ 181.169125][ T2811] __kasan_kmalloc+0x98/0xb0 [ 181.173739][ T2811] __kmalloc_noprof+0x1f9/0x400 [ 181.178600][ T2811] l2tp_session_create+0x3b/0xc20 [ 181.183650][ T2811] pppol2tp_connect+0xca3/0x17a0 [ 181.188597][ T2811] __sys_connect+0x2df/0x310 [ 181.193214][ T2811] __x64_sys_connect+0x7a/0x90 [ 181.197996][ T2811] do_syscall_64+0xf3/0x230 [ 181.202514][ T2811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.208417][ T2811] [ 181.210745][ T2811] Freed by task 2811: [ 181.214723][ T2811] kasan_save_track+0x3f/0x80 [ 181.219417][ T2811] kasan_save_free_info+0x40/0x50 [ 181.224455][ T2811] poison_slab_object+0xe0/0x150 [ 181.229400][ T2811] __kasan_slab_free+0x37/0x60 [ 181.234178][ T2811] kfree+0x149/0x360 [ 181.238092][ T2811] __sk_destruct+0x58/0x5f0 [ 181.242606][ T2811] rcu_core+0xafd/0x1830 [ 181.246877][ T2811] handle_softirqs+0x2c4/0x970 [ 181.251660][ T2811] __irq_exit_rcu+0xf4/0x1c0 [ 181.256266][ T2811] irq_exit_rcu+0x9/0x30 [ 181.260519][ T2811] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 181.266158][ T2811] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.272156][ T2811] [ 181.274489][ T2811] Last potentially related work creation: [ 181.280206][ T2811] kasan_save_stack+0x3f/0x60 [ 181.284905][ T2811] __kasan_record_aux_stack+0xac/0xc0 [ 181.290291][ T2811] call_rcu+0x167/0xa70 [ 181.294462][ T2811] pppol2tp_release+0x24b/0x350 [ 181.299336][ T2811] sock_close+0xbc/0x240 [ 181.303635][ T2811] __fput+0x406/0x8b0 [ 181.307637][ T2811] task_work_run+0x24f/0x310 [ 181.312276][ T2811] syscall_exit_to_user_mode+0x168/0x370 [ 181.317959][ T2811] do_syscall_64+0x100/0x230 [ 181.322574][ T2811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.328484][ T2811] [ 181.330812][ T2811] The buggy address belongs to the object at ffff88807c175800 [ 181.330812][ T2811] which belongs to the cache kmalloc-1k of size 1024 [ 181.344875][ T2811] The buggy address is located 8 bytes inside of [ 181.344875][ T2811] freed 1024-byte region [ffff88807c175800, ffff88807c175c00) [ 181.358588][ T2811] [ 181.360918][ T2811] The buggy address belongs to the physical page: [ 181.367336][ T2811] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c170 [ 181.376121][ T2811] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 181.384653][ T2811] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 181.392253][ T2811] page_type: 0xffffefff(slab) [ 181.396930][ T2811] raw: 00fff00000000040 ffff888015041dc0 ffffea0001f5f400 0000000000000002 [ 181.405519][ T2811] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 181.414109][ T2811] head: 00fff00000000040 ffff888015041dc0 ffffea0001f5f400 0000000000000002 [ 181.422779][ T2811] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 181.431449][ T2811] head: 00fff00000000003 ffffea0001f05c01 ffffffffffffffff 0000000000000000 [ 181.440121][ T2811] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 181.448787][ T2811] page dumped because: kasan: bad access detected [ 181.455199][ T2811] page_owner tracks the page as allocated [ 181.460913][ T2811] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4952, tgid 4952 (sshd), ts 57494575783, free_ts 57494370820 [ 181.480803][ T2811] post_alloc_hook+0x1f3/0x230 [ 181.485585][ T2811] get_page_from_freelist+0x2e43/0x2f00 [ 181.491133][ T2811] __alloc_pages_noprof+0x256/0x6c0 [ 181.496337][ T2811] alloc_slab_page+0x5f/0x120 [ 181.501023][ T2811] allocate_slab+0x5a/0x2f0 [ 181.505535][ T2811] ___slab_alloc+0xcd1/0x14b0 [ 181.510225][ T2811] __slab_alloc+0x58/0xa0 [ 181.514567][ T2811] __kmalloc_noprof+0x257/0x400 [ 181.519426][ T2811] tomoyo_init_log+0x1b3e/0x2050 [ 181.524376][ T2811] tomoyo_supervisor+0x38a/0x11f0 [ 181.529406][ T2811] tomoyo_env_perm+0x178/0x210 [ 181.534177][ T2811] tomoyo_find_next_domain+0x1384/0x1cf0 [ 181.539814][ T2811] tomoyo_bprm_check_security+0x115/0x180 [ 181.545534][ T2811] security_bprm_check+0x65/0x90 [ 181.550469][ T2811] bprm_execve+0xa56/0x17c0 [ 181.554978][ T2811] do_execveat_common+0x553/0x700 [ 181.560127][ T2811] page last free pid 4952 tgid 4952 stack trace: [ 181.566507][ T2811] free_unref_page+0xd22/0xea0 [ 181.571335][ T2811] __put_partials+0xeb/0x130 [ 181.576032][ T2811] put_cpu_partial+0x17c/0x250 [ 181.580834][ T2811] __slab_free+0x2ea/0x3d0 [ 181.585264][ T2811] qlist_free_all+0x9e/0x140 [ 181.589861][ T2811] kasan_quarantine_reduce+0x14f/0x170 [ 181.595347][ T2811] __kasan_slab_alloc+0x23/0x80 [ 181.600247][ T2811] __kmalloc_noprof+0x1a3/0x400 [ 181.605115][ T2811] tomoyo_supervisor+0xe0d/0x11f0 [ 181.610157][ T2811] tomoyo_env_perm+0x178/0x210 [ 181.614937][ T2811] tomoyo_find_next_domain+0x1384/0x1cf0 [ 181.620580][ T2811] tomoyo_bprm_check_security+0x115/0x180 [ 181.626346][ T2811] security_bprm_check+0x65/0x90 [ 181.631306][ T2811] bprm_execve+0xa56/0x17c0 [ 181.635838][ T2811] do_execveat_common+0x553/0x700 [ 181.640886][ T2811] __x64_sys_execve+0x92/0xb0 [ 181.645584][ T2811] [ 181.647915][ T2811] Memory state around the buggy address: [ 181.653550][ T2811] ffff88807c175700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 181.661616][ T2811] ffff88807c175780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 181.669713][ T2811] >ffff88807c175800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.677796][ T2811] ^ [ 181.682138][ T2811] ffff88807c175880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.690204][ T2811] ffff88807c175900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.698261][ T2811] ================================================================== [ 181.739732][ T2811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.746981][ T2811] CPU: 0 PID: 2811 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 181.757258][ T2811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 181.767459][ T2811] Workqueue: l2tp l2tp_tunnel_del_work [ 181.772966][ T2811] Call Trace: [ 181.776255][ T2811] [ 181.779200][ T2811] dump_stack_lvl+0x241/0x360 [ 181.783896][ T2811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.789102][ T2811] ? __pfx__printk+0x10/0x10 [ 181.793701][ T2811] ? preempt_schedule+0xe1/0xf0 [ 181.798567][ T2811] ? vscnprintf+0x5d/0x90 [ 181.802913][ T2811] panic+0x349/0x860 [ 181.806828][ T2811] ? check_panic_on_warn+0x21/0xb0 [ 181.811953][ T2811] ? __pfx_panic+0x10/0x10 [ 181.816398][ T2811] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 181.822398][ T2811] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.828740][ T2811] ? print_report+0x502/0x550 [ 181.833431][ T2811] check_panic_on_warn+0x86/0xb0 [ 181.838385][ T2811] ? l2tp_session_delete+0x28/0x9e0 [ 181.843597][ T2811] end_report+0x77/0x160 [ 181.847852][ T2811] kasan_report+0x154/0x180 [ 181.852374][ T2811] ? l2tp_session_delete+0x28/0x9e0 [ 181.857677][ T2811] kasan_check_range+0x282/0x290 [ 181.862629][ T2811] l2tp_session_delete+0x28/0x9e0 [ 181.867682][ T2811] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 181.873069][ T2811] l2tp_tunnel_del_work+0x1cb/0x330 [ 181.878372][ T2811] ? process_scheduled_works+0x945/0x1830 [ 181.884098][ T2811] process_scheduled_works+0xa2c/0x1830 [ 181.889676][ T2811] ? __pfx_process_scheduled_works+0x10/0x10 [ 181.895672][ T2811] ? assign_work+0x364/0x3d0 [ 181.900273][ T2811] worker_thread+0x86d/0xd70 [ 181.904960][ T2811] ? __kthread_parkme+0x169/0x1d0 [ 181.909998][ T2811] ? __pfx_worker_thread+0x10/0x10 [ 181.915161][ T2811] kthread+0x2f0/0x390 [ 181.919248][ T2811] ? __pfx_worker_thread+0x10/0x10 [ 181.924384][ T2811] ? __pfx_kthread+0x10/0x10 [ 181.928982][ T2811] ret_from_fork+0x4b/0x80 [ 181.933416][ T2811] ? __pfx_kthread+0x10/0x10 [ 181.938026][ T2811] ret_from_fork_asm+0x1a/0x30 [ 181.942826][ T2811] [ 181.946198][ T2811] Kernel Offset: disabled [ 181.950532][ T2811] Rebooting in 86400 seconds..