Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts. 2024/06/25 17:14:08 ignoring optional flag "sandboxArg"="0" 2024/06/25 17:14:09 parsed 1 programs [ 55.330788][ T5092] cgroup: Unknown subsys name 'net' [ 55.465275][ T5092] cgroup: Unknown subsys name 'rlimit' [ 56.879951][ T5092] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.741272][ T4494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.750802][ T4494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.758746][ T4494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.767146][ T4494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.775601][ T4494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.783296][ T4494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.084541][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.093343][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.113355][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.121348][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.985701][ T5145] chnl_net:caif_netlink_parms(): no params data found [ 59.072389][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.081248][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.088585][ T5145] bridge_slave_0: entered allmulticast mode [ 59.095485][ T5145] bridge_slave_0: entered promiscuous mode [ 59.105093][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.112864][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.120671][ T5145] bridge_slave_1: entered allmulticast mode [ 59.127781][ T5145] bridge_slave_1: entered promiscuous mode [ 59.161601][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.172805][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.199952][ T5145] team0: Port device team_slave_0 added [ 59.208694][ T5145] team0: Port device team_slave_1 added [ 59.230936][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.239725][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.265760][ T5145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.279998][ T5145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.286990][ T5145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.313938][ T5145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.361803][ T5145] hsr_slave_0: entered promiscuous mode [ 59.368882][ T5145] hsr_slave_1: entered promiscuous mode [ 59.485066][ T5145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.495834][ T5145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.506044][ T5145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.515339][ T5145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.587112][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.611374][ T5145] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.625117][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.632542][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.649261][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.656349][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.696125][ T5145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.802500][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.842310][ T5145] veth0_vlan: entered promiscuous mode [ 59.853303][ T5145] veth1_vlan: entered promiscuous mode [ 59.877262][ T5145] veth0_macvtap: entered promiscuous mode [ 59.890942][ T5145] veth1_macvtap: entered promiscuous mode [ 59.911157][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.924721][ T5145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.937397][ T5145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.947177][ T5145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.956733][ T5145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.965799][ T5145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.084458][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.170653][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.242015][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.331868][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/06/25 17:14:14 executed programs: 0 [ 60.923690][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.933129][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.941581][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.950145][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.960937][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.968395][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.098765][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 61.154065][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.161404][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.169105][ T5182] bridge_slave_0: entered allmulticast mode [ 61.175844][ T5182] bridge_slave_0: entered promiscuous mode [ 61.186764][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.194303][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.201559][ T5182] bridge_slave_1: entered allmulticast mode [ 61.209935][ T5182] bridge_slave_1: entered promiscuous mode [ 61.236861][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.251301][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.280082][ T5182] team0: Port device team_slave_0 added [ 61.288412][ T5182] team0: Port device team_slave_1 added [ 61.312960][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.320061][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.346554][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.360993][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.368104][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.394222][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.436135][ T5182] hsr_slave_0: entered promiscuous mode [ 61.442499][ T5182] hsr_slave_1: entered promiscuous mode [ 61.448904][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.456690][ T5182] Cannot create hsr debugfs directory [ 62.989233][ T53] Bluetooth: hci0: command tx timeout [ 65.068980][ T53] Bluetooth: hci0: command tx timeout [ 65.146682][ T11] bridge_slave_1: left allmulticast mode [ 65.156401][ T11] bridge_slave_1: left promiscuous mode [ 65.164104][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.175316][ T11] bridge_slave_0: left allmulticast mode [ 65.181932][ T11] bridge_slave_0: left promiscuous mode [ 65.189038][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.411352][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.423906][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.434420][ T11] bond0 (unregistering): Released all slaves [ 65.551711][ T11] hsr_slave_0: left promiscuous mode [ 65.560492][ T11] hsr_slave_1: left promiscuous mode [ 65.566891][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.575091][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.586389][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.594378][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.616015][ T11] veth1_macvtap: left promiscuous mode [ 65.624407][ T11] veth0_macvtap: left promiscuous mode [ 65.631827][ T11] veth1_vlan: left promiscuous mode [ 65.637408][ T11] veth0_vlan: left promiscuous mode [ 65.993503][ T11] team0 (unregistering): Port device team_slave_1 removed [ 66.017277][ T11] team0 (unregistering): Port device team_slave_0 removed [ 66.456074][ T5182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.470310][ T5182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.480931][ T5182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.501396][ T5182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.629825][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.651926][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.665633][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.672872][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.704677][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.711903][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.144690][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.158485][ T53] Bluetooth: hci0: command tx timeout [ 67.224561][ T5182] veth0_vlan: entered promiscuous mode [ 67.238843][ T5182] veth1_vlan: entered promiscuous mode [ 67.272298][ T5182] veth0_macvtap: entered promiscuous mode [ 67.292274][ T5182] veth1_macvtap: entered promiscuous mode [ 67.312601][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.333132][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.346422][ T5182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.356215][ T5182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.365284][ T5182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.374310][ T5182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.446266][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.455608][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.480569][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2024/06/25 17:14:21 executed programs: 2 [ 67.489469][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.579431][ T1110] ================================================================== [ 67.587543][ T1110] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 67.595578][ T1110] Write of size 8 at addr ffff8880787f2808 by task kworker/u8:7/1110 [ 67.603657][ T1110] [ 67.606009][ T1110] CPU: 1 PID: 1110 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 67.616261][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.626340][ T1110] Workqueue: l2tp l2tp_tunnel_del_work [ 67.631848][ T1110] Call Trace: [ 67.635143][ T1110] [ 67.638092][ T1110] dump_stack_lvl+0x241/0x360 [ 67.642806][ T1110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.648053][ T1110] ? __pfx__printk+0x10/0x10 [ 67.652750][ T1110] ? _printk+0xd5/0x120 [ 67.656927][ T1110] ? __virt_addr_valid+0x183/0x520 [ 67.662071][ T1110] ? __virt_addr_valid+0x183/0x520 [ 67.667194][ T1110] print_report+0x169/0x550 [ 67.671695][ T1110] ? __virt_addr_valid+0x183/0x520 [ 67.676800][ T1110] ? __virt_addr_valid+0x183/0x520 [ 67.681906][ T1110] ? __virt_addr_valid+0x44e/0x520 [ 67.687014][ T1110] ? __phys_addr+0xba/0x170 [ 67.691509][ T1110] ? l2tp_session_delete+0x28/0x9e0 [ 67.696700][ T1110] kasan_report+0x143/0x180 [ 67.701196][ T1110] ? l2tp_session_delete+0x28/0x9e0 [ 67.706392][ T1110] kasan_check_range+0x282/0x290 [ 67.711323][ T1110] l2tp_session_delete+0x28/0x9e0 [ 67.716340][ T1110] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 67.721708][ T1110] l2tp_tunnel_del_work+0x1cb/0x330 [ 67.726903][ T1110] ? process_scheduled_works+0x945/0x1830 [ 67.732621][ T1110] process_scheduled_works+0xa2c/0x1830 [ 67.738165][ T1110] ? __pfx_process_scheduled_works+0x10/0x10 [ 67.744139][ T1110] ? assign_work+0x364/0x3d0 [ 67.748720][ T1110] worker_thread+0x86d/0xd70 [ 67.753303][ T1110] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.759196][ T1110] ? __kthread_parkme+0x169/0x1d0 [ 67.764215][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 67.769317][ T1110] kthread+0x2f0/0x390 [ 67.773377][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 67.778478][ T1110] ? __pfx_kthread+0x10/0x10 [ 67.783059][ T1110] ret_from_fork+0x4b/0x80 [ 67.787555][ T1110] ? __pfx_kthread+0x10/0x10 [ 67.792134][ T1110] ret_from_fork_asm+0x1a/0x30 [ 67.796900][ T1110] [ 67.799912][ T1110] [ 67.802223][ T1110] Allocated by task 5242: [ 67.806532][ T1110] kasan_save_track+0x3f/0x80 [ 67.811198][ T1110] __kasan_kmalloc+0x98/0xb0 [ 67.815774][ T1110] __kmalloc_noprof+0x1f9/0x400 [ 67.820611][ T1110] l2tp_session_create+0x3b/0xc20 [ 67.825628][ T1110] pppol2tp_connect+0xca3/0x17a0 [ 67.830555][ T1110] __sys_connect+0x2df/0x310 [ 67.835136][ T1110] __x64_sys_connect+0x7a/0x90 [ 67.839900][ T1110] do_syscall_64+0xf3/0x230 [ 67.844400][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.850285][ T1110] [ 67.852594][ T1110] Freed by task 16: [ 67.856384][ T1110] kasan_save_track+0x3f/0x80 [ 67.861054][ T1110] kasan_save_free_info+0x40/0x50 [ 67.866065][ T1110] poison_slab_object+0xe0/0x150 [ 67.870992][ T1110] __kasan_slab_free+0x37/0x60 [ 67.875755][ T1110] kfree+0x149/0x360 [ 67.879641][ T1110] __sk_destruct+0x58/0x5f0 [ 67.884132][ T1110] rcu_core+0xafd/0x1830 [ 67.888365][ T1110] handle_softirqs+0x2c4/0x970 [ 67.893115][ T1110] run_ksoftirqd+0xca/0x130 [ 67.897605][ T1110] smpboot_thread_fn+0x544/0xa30 [ 67.902530][ T1110] kthread+0x2f0/0x390 [ 67.906588][ T1110] ret_from_fork+0x4b/0x80 [ 67.910997][ T1110] ret_from_fork_asm+0x1a/0x30 [ 67.915750][ T1110] [ 67.918061][ T1110] Last potentially related work creation: [ 67.923755][ T1110] kasan_save_stack+0x3f/0x60 [ 67.928421][ T1110] __kasan_record_aux_stack+0xac/0xc0 [ 67.933780][ T1110] call_rcu+0x167/0xa70 [ 67.937935][ T1110] pppol2tp_release+0x24b/0x350 [ 67.942777][ T1110] sock_close+0xbc/0x240 [ 67.947014][ T1110] __fput+0x406/0x8b0 [ 67.950984][ T1110] task_work_run+0x24f/0x310 [ 67.955566][ T1110] syscall_exit_to_user_mode+0x168/0x370 [ 67.961191][ T1110] do_syscall_64+0x100/0x230 [ 67.965768][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.971653][ T1110] [ 67.973965][ T1110] The buggy address belongs to the object at ffff8880787f2800 [ 67.973965][ T1110] which belongs to the cache kmalloc-1k of size 1024 [ 67.988179][ T1110] The buggy address is located 8 bytes inside of [ 67.988179][ T1110] freed 1024-byte region [ffff8880787f2800, ffff8880787f2c00) [ 68.001962][ T1110] [ 68.004299][ T1110] The buggy address belongs to the physical page: [ 68.010701][ T1110] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x787f0 [ 68.019454][ T1110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 68.027943][ T1110] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 68.035485][ T1110] page_type: 0xffffefff(slab) [ 68.040148][ T1110] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 68.048720][ T1110] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 68.057291][ T1110] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 68.066048][ T1110] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 68.074717][ T1110] head: 00fff00000000003 ffffea0001e1fc01 ffffffffffffffff 0000000000000000 [ 68.083378][ T1110] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 68.092032][ T1110] page dumped because: kasan: bad access detected [ 68.098437][ T1110] page_owner tracks the page as allocated [ 68.104142][ T1110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5241, tgid 5241 (syz.0.15), ts 67524833876, free_ts 67461080801 [ 68.126559][ T1110] post_alloc_hook+0x1f3/0x230 [ 68.131320][ T1110] get_page_from_freelist+0x2e43/0x2f00 [ 68.136857][ T1110] __alloc_pages_noprof+0x256/0x6c0 [ 68.142057][ T1110] alloc_slab_page+0x5f/0x120 [ 68.146721][ T1110] allocate_slab+0x5a/0x2f0 [ 68.151212][ T1110] ___slab_alloc+0xcd1/0x14b0 [ 68.155877][ T1110] __slab_alloc+0x58/0xa0 [ 68.160198][ T1110] __kmalloc_noprof+0x257/0x400 [ 68.165036][ T1110] l2tp_session_create+0x3b/0xc20 [ 68.170059][ T1110] pppol2tp_connect+0xca3/0x17a0 [ 68.174997][ T1110] __sys_connect+0x2df/0x310 [ 68.179574][ T1110] __x64_sys_connect+0x7a/0x90 [ 68.184324][ T1110] do_syscall_64+0xf3/0x230 [ 68.188818][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.194700][ T1110] page last free pid 4549 tgid 4549 stack trace: [ 68.201026][ T1110] free_unref_page+0xd22/0xea0 [ 68.205809][ T1110] __put_partials+0xeb/0x130 [ 68.210395][ T1110] put_cpu_partial+0x17c/0x250 [ 68.215145][ T1110] __slab_free+0x2ea/0x3d0 [ 68.219549][ T1110] qlist_free_all+0x9e/0x140 [ 68.224126][ T1110] kasan_quarantine_reduce+0x14f/0x170 [ 68.229571][ T1110] __kasan_slab_alloc+0x23/0x80 [ 68.234408][ T1110] __kmalloc_node_noprof+0x1d2/0x440 [ 68.239677][ T1110] kvmalloc_node_noprof+0x72/0x190 [ 68.244772][ T1110] seq_read_iter+0x202/0xd60 [ 68.249346][ T1110] vfs_read+0x9c4/0xbd0 [ 68.253488][ T1110] ksys_read+0x1a0/0x2c0 [ 68.257717][ T1110] do_syscall_64+0xf3/0x230 [ 68.262230][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.268140][ T1110] [ 68.270453][ T1110] Memory state around the buggy address: [ 68.276071][ T1110] ffff8880787f2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.284127][ T1110] ffff8880787f2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 68.292174][ T1110] >ffff8880787f2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.300303][ T1110] ^ [ 68.304612][ T1110] ffff8880787f2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.312659][ T1110] ffff8880787f2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.320707][ T1110] ================================================================== [ 68.362063][ T1110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.369297][ T1110] CPU: 1 PID: 1110 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 68.379551][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.389625][ T1110] Workqueue: l2tp l2tp_tunnel_del_work [ 68.395126][ T1110] Call Trace: [ 68.398418][ T1110] [ 68.401361][ T1110] dump_stack_lvl+0x241/0x360 [ 68.406066][ T1110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.411290][ T1110] ? __pfx__printk+0x10/0x10 [ 68.415900][ T1110] ? preempt_schedule+0xe1/0xf0 [ 68.420774][ T1110] ? vscnprintf+0x5d/0x90 [ 68.425135][ T1110] panic+0x349/0x860 [ 68.429057][ T1110] ? check_panic_on_warn+0x21/0xb0 [ 68.434194][ T1110] ? __pfx_panic+0x10/0x10 [ 68.438638][ T1110] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 68.444646][ T1110] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.451008][ T1110] ? print_report+0x502/0x550 [ 68.455722][ T1110] check_panic_on_warn+0x86/0xb0 [ 68.460686][ T1110] ? l2tp_session_delete+0x28/0x9e0 [ 68.465919][ T1110] end_report+0x77/0x160 [ 68.470188][ T1110] kasan_report+0x154/0x180 [ 68.474725][ T1110] ? l2tp_session_delete+0x28/0x9e0 [ 68.479996][ T1110] kasan_check_range+0x282/0x290 [ 68.484970][ T1110] l2tp_session_delete+0x28/0x9e0 [ 68.490023][ T1110] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 68.495428][ T1110] l2tp_tunnel_del_work+0x1cb/0x330 [ 68.500655][ T1110] ? process_scheduled_works+0x945/0x1830 [ 68.506399][ T1110] process_scheduled_works+0xa2c/0x1830 [ 68.511979][ T1110] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.517990][ T1110] ? assign_work+0x364/0x3d0 [ 68.522598][ T1110] worker_thread+0x86d/0xd70 [ 68.527201][ T1110] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.533117][ T1110] ? __kthread_parkme+0x169/0x1d0 [ 68.538168][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 68.543308][ T1110] kthread+0x2f0/0x390 [ 68.547400][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 68.552536][ T1110] ? __pfx_kthread+0x10/0x10 [ 68.557152][ T1110] ret_from_fork+0x4b/0x80 [ 68.561593][ T1110] ? __pfx_kthread+0x10/0x10 [ 68.566205][ T1110] ret_from_fork_asm+0x1a/0x30 [ 68.571006][ T1110] [ 68.574272][ T1110] Kernel Offset: disabled [ 68.578585][ T1110] Rebooting in 86400 seconds..