Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. 2024/06/22 04:11:52 ignoring optional flag "sandboxArg"="0" 2024/06/22 04:11:52 parsed 1 programs [ 175.289477][ T5118] cgroup: Unknown subsys name 'net' [ 175.544550][ T5118] cgroup: Unknown subsys name 'rlimit' [ 176.998694][ T5123] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 177.068883][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.077159][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.085582][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.094458][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.105472][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.113158][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.156593][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.164762][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.208576][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.218620][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.046436][ T5203] chnl_net:caif_netlink_parms(): no params data found [ 180.133347][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.141697][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.150127][ T5203] bridge_slave_0: entered allmulticast mode [ 180.158446][ T5203] bridge_slave_0: entered promiscuous mode [ 180.168269][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.176356][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.183621][ T5203] bridge_slave_1: entered allmulticast mode [ 180.190648][ T5203] bridge_slave_1: entered promiscuous mode [ 180.224227][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.237741][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.280408][ T5203] team0: Port device team_slave_0 added [ 180.289809][ T5203] team0: Port device team_slave_1 added [ 180.320636][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.328107][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.354159][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.393026][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.399998][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.426619][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.471357][ T5203] hsr_slave_0: entered promiscuous mode [ 180.488949][ T5203] hsr_slave_1: entered promiscuous mode [ 180.660551][ T5203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.672576][ T5203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.683107][ T5203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.693400][ T5203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.783433][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.815508][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.830072][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.837433][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.854760][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.861944][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.041382][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.087871][ T5203] veth0_vlan: entered promiscuous mode [ 181.100407][ T5203] veth1_vlan: entered promiscuous mode [ 181.137600][ T5203] veth0_macvtap: entered promiscuous mode [ 181.151184][ T5203] veth1_macvtap: entered promiscuous mode [ 181.174048][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.189898][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.204520][ T5203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.213935][ T5203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.222669][ T5203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.232256][ T5203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/06/22 04:11:58 executed programs: 0 [ 181.360355][ T2848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.397238][ T4495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.405743][ T4495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.416179][ T4495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.425734][ T4495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.438418][ T4495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.447185][ T4495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.447641][ T2848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.508952][ T2848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.580352][ T2848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.678870][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 181.751876][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.759543][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.767248][ T5219] bridge_slave_0: entered allmulticast mode [ 181.774717][ T5219] bridge_slave_0: entered promiscuous mode [ 181.787288][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.794661][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.801939][ T5219] bridge_slave_1: entered allmulticast mode [ 181.809625][ T5219] bridge_slave_1: entered promiscuous mode [ 181.846923][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.859699][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.902292][ T5219] team0: Port device team_slave_0 added [ 181.912082][ T5219] team0: Port device team_slave_1 added [ 181.943446][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.950440][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.976803][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.989575][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.997230][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.024267][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.076273][ T5219] hsr_slave_0: entered promiscuous mode [ 182.083243][ T5219] hsr_slave_1: entered promiscuous mode [ 182.089641][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.097943][ T5219] Cannot create hsr debugfs directory [ 183.514846][ T4495] Bluetooth: hci0: command tx timeout [ 185.593473][ T4495] Bluetooth: hci0: command tx timeout [ 186.053086][ T2848] bridge_slave_1: left allmulticast mode [ 186.059050][ T2848] bridge_slave_1: left promiscuous mode [ 186.075477][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.090805][ T2848] bridge_slave_0: left allmulticast mode [ 186.099457][ T2848] bridge_slave_0: left promiscuous mode [ 186.107210][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.349502][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.360879][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.371552][ T2848] bond0 (unregistering): Released all slaves [ 186.545226][ T2848] hsr_slave_0: left promiscuous mode [ 186.551491][ T2848] hsr_slave_1: left promiscuous mode [ 186.559474][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.571728][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.580818][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.596404][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.619501][ T2848] veth1_macvtap: left promiscuous mode [ 186.626727][ T2848] veth0_macvtap: left promiscuous mode [ 186.632446][ T2848] veth1_vlan: left promiscuous mode [ 186.641781][ T2848] veth0_vlan: left promiscuous mode [ 187.025978][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 187.055905][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 187.574654][ T5219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.590539][ T5219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.603602][ T5219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.617576][ T5219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.674085][ T4495] Bluetooth: hci0: command tx timeout [ 187.747960][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.778083][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.793131][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.800306][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.818596][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.825826][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.072357][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.144222][ T5219] veth0_vlan: entered promiscuous mode [ 188.162831][ T5219] veth1_vlan: entered promiscuous mode [ 188.206477][ T5219] veth0_macvtap: entered promiscuous mode [ 188.224951][ T5219] veth1_macvtap: entered promiscuous mode [ 188.255292][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.274540][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.293989][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.302757][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.316416][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.327416][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.416439][ T2848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.425657][ T2848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.456183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.464153][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/22 04:12:05 executed programs: 1 [ 188.583464][ T2848] ================================================================== [ 188.591576][ T2848] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 188.599632][ T2848] Write of size 8 at addr ffff88807858b808 by task kworker/u8:11/2848 [ 188.607806][ T2848] [ 188.610163][ T2848] CPU: 1 PID: 2848 Comm: kworker/u8:11 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0 [ 188.620510][ T2848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.630676][ T2848] Workqueue: l2tp l2tp_tunnel_del_work [ 188.636199][ T2848] Call Trace: [ 188.639498][ T2848] [ 188.642448][ T2848] dump_stack_lvl+0x241/0x360 [ 188.647169][ T2848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.652508][ T2848] ? __pfx__printk+0x10/0x10 [ 188.657135][ T2848] ? _printk+0xd5/0x120 [ 188.661344][ T2848] ? __virt_addr_valid+0x183/0x520 [ 188.666533][ T2848] ? __virt_addr_valid+0x183/0x520 [ 188.671686][ T2848] print_report+0x169/0x550 [ 188.676228][ T2848] ? __virt_addr_valid+0x183/0x520 [ 188.681388][ T2848] ? __virt_addr_valid+0x183/0x520 [ 188.686534][ T2848] ? __virt_addr_valid+0x44e/0x520 [ 188.691681][ T2848] ? __phys_addr+0xba/0x170 [ 188.696220][ T2848] ? l2tp_session_delete+0x28/0x9e0 [ 188.701455][ T2848] kasan_report+0x143/0x180 [ 188.706010][ T2848] ? l2tp_session_delete+0x28/0x9e0 [ 188.711255][ T2848] kasan_check_range+0x282/0x290 [ 188.716323][ T2848] l2tp_session_delete+0x28/0x9e0 [ 188.721390][ T2848] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 188.726803][ T2848] l2tp_tunnel_del_work+0x1cb/0x330 [ 188.732039][ T2848] ? process_scheduled_works+0x945/0x1830 [ 188.737790][ T2848] process_scheduled_works+0xa2c/0x1830 [ 188.743381][ T2848] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.749398][ T2848] ? assign_work+0x364/0x3d0 [ 188.754026][ T2848] worker_thread+0x86d/0xd70 [ 188.758655][ T2848] ? __kthread_parkme+0x169/0x1d0 [ 188.763801][ T2848] ? __pfx_worker_thread+0x10/0x10 [ 188.768941][ T2848] kthread+0x2f0/0x390 [ 188.773040][ T2848] ? __pfx_worker_thread+0x10/0x10 [ 188.778232][ T2848] ? __pfx_kthread+0x10/0x10 [ 188.782871][ T2848] ret_from_fork+0x4b/0x80 [ 188.787337][ T2848] ? __pfx_kthread+0x10/0x10 [ 188.791958][ T2848] ret_from_fork_asm+0x1a/0x30 [ 188.796769][ T2848] [ 188.799804][ T2848] [ 188.802149][ T2848] Allocated by task 5279: [ 188.806496][ T2848] kasan_save_track+0x3f/0x80 [ 188.811207][ T2848] __kasan_kmalloc+0x98/0xb0 [ 188.815835][ T2848] __kmalloc_noprof+0x1f9/0x400 [ 188.820710][ T2848] l2tp_session_create+0x3b/0xc20 [ 188.825772][ T2848] pppol2tp_connect+0xca3/0x17a0 [ 188.830748][ T2848] __sys_connect+0x2df/0x310 [ 188.835369][ T2848] __x64_sys_connect+0x7a/0x90 [ 188.840174][ T2848] do_syscall_64+0xf3/0x230 [ 188.844716][ T2848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.850655][ T2848] [ 188.852997][ T2848] Freed by task 5219: [ 188.856991][ T2848] kasan_save_track+0x3f/0x80 [ 188.861703][ T2848] kasan_save_free_info+0x40/0x50 [ 188.866753][ T2848] poison_slab_object+0xe0/0x150 [ 188.871719][ T2848] __kasan_slab_free+0x37/0x60 [ 188.876510][ T2848] kfree+0x149/0x360 [ 188.880457][ T2848] __sk_destruct+0x58/0x5f0 [ 188.884996][ T2848] rcu_core+0xafd/0x1830 [ 188.889267][ T2848] handle_softirqs+0x2c4/0x970 [ 188.894061][ T2848] __irq_exit_rcu+0xf4/0x1c0 [ 188.898675][ T2848] irq_exit_rcu+0x9/0x30 [ 188.902939][ T2848] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 188.908576][ T2848] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.914576][ T2848] [ 188.916912][ T2848] Last potentially related work creation: [ 188.922627][ T2848] kasan_save_stack+0x3f/0x60 [ 188.927322][ T2848] __kasan_record_aux_stack+0xac/0xc0 [ 188.932696][ T2848] call_rcu+0x167/0xa70 [ 188.936857][ T2848] pppol2tp_release+0x24b/0x350 [ 188.941718][ T2848] sock_close+0xbc/0x240 [ 188.945974][ T2848] __fput+0x406/0x8b0 [ 188.949956][ T2848] task_work_run+0x24f/0x310 [ 188.954559][ T2848] syscall_exit_to_user_mode+0x168/0x370 [ 188.960216][ T2848] do_syscall_64+0x100/0x230 [ 188.964814][ T2848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.970719][ T2848] [ 188.973041][ T2848] The buggy address belongs to the object at ffff88807858b800 [ 188.973041][ T2848] which belongs to the cache kmalloc-1k of size 1024 [ 188.987100][ T2848] The buggy address is located 8 bytes inside of [ 188.987100][ T2848] freed 1024-byte region [ffff88807858b800, ffff88807858bc00) [ 189.000809][ T2848] [ 189.003139][ T2848] The buggy address belongs to the physical page: [ 189.009554][ T2848] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78588 [ 189.018320][ T2848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.026817][ T2848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 189.034368][ T2848] page_type: 0xffffefff(slab) [ 189.039045][ T2848] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 189.047718][ T2848] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 189.056303][ T2848] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 189.064990][ T2848] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 189.073660][ T2848] head: 00fff00000000003 ffffea0001e16201 ffffffffffffffff 0000000000000000 [ 189.082331][ T2848] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 189.091084][ T2848] page dumped because: kasan: bad access detected [ 189.097505][ T2848] page_owner tracks the page as allocated [ 189.103217][ T2848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5219, tgid 5219 (syz-executor), ts 188485236326, free_ts 188449019367 [ 189.126145][ T2848] post_alloc_hook+0x1f3/0x230 [ 189.130932][ T2848] get_page_from_freelist+0x2e43/0x2f00 [ 189.136480][ T2848] __alloc_pages_noprof+0x256/0x6c0 [ 189.141678][ T2848] alloc_slab_page+0x5f/0x120 [ 189.146363][ T2848] allocate_slab+0x5a/0x2f0 [ 189.150869][ T2848] ___slab_alloc+0xcd1/0x14b0 [ 189.155653][ T2848] __slab_alloc+0x58/0xa0 [ 189.159986][ T2848] __kmalloc_noprof+0x257/0x400 [ 189.164838][ T2848] ip6t_alloc_initial_table+0x71/0x640 [ 189.170298][ T2848] ip6table_filter_table_init+0x1c/0xc0 [ 189.175853][ T2848] xt_find_table_lock+0x2d4/0x3b0 [ 189.180896][ T2848] xt_request_find_table_lock+0x26/0x100 [ 189.186628][ T2848] do_ip6t_get_ctl+0x89e/0x1820 [ 189.191489][ T2848] nf_getsockopt+0x299/0x2c0 [ 189.196105][ T2848] ipv6_getsockopt+0x263/0x380 [ 189.200885][ T2848] tcp_getsockopt+0x163/0x1c0 [ 189.205568][ T2848] page last free pid 5219 tgid 5219 stack trace: [ 189.211890][ T2848] free_unref_page+0xd22/0xea0 [ 189.216664][ T2848] __slab_free+0x31b/0x3d0 [ 189.221102][ T2848] qlist_free_all+0x9e/0x140 [ 189.225700][ T2848] kasan_quarantine_reduce+0x14f/0x170 [ 189.231178][ T2848] __kasan_slab_alloc+0x23/0x80 [ 189.236038][ T2848] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 189.241946][ T2848] __alloc_skb+0x1c3/0x440 [ 189.246368][ T2848] netlink_ack+0x13f/0xa30 [ 189.250786][ T2848] netlink_rcv_skb+0x262/0x430 [ 189.255553][ T2848] genl_rcv+0x28/0x40 [ 189.259539][ T2848] netlink_unicast+0x7f0/0x990 [ 189.264314][ T2848] netlink_sendmsg+0x8e4/0xcb0 [ 189.269086][ T2848] __sock_sendmsg+0x221/0x270 [ 189.273765][ T2848] __sys_sendto+0x3a4/0x4f0 [ 189.278286][ T2848] __x64_sys_sendto+0xde/0x100 [ 189.283056][ T2848] do_syscall_64+0xf3/0x230 [ 189.287588][ T2848] [ 189.289909][ T2848] Memory state around the buggy address: [ 189.295535][ T2848] ffff88807858b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.303600][ T2848] ffff88807858b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.311666][ T2848] >ffff88807858b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.319720][ T2848] ^ [ 189.324047][ T2848] ffff88807858b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.332103][ T2848] ffff88807858b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.340162][ T2848] ================================================================== [ 189.354794][ T2848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.362032][ T2848] CPU: 0 PID: 2848 Comm: kworker/u8:11 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0 [ 189.372384][ T2848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.382467][ T2848] Workqueue: l2tp l2tp_tunnel_del_work [ 189.387978][ T2848] Call Trace: [ 189.391281][ T2848] [ 189.394236][ T2848] dump_stack_lvl+0x241/0x360 [ 189.398953][ T2848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.404193][ T2848] ? __pfx__printk+0x10/0x10 [ 189.408817][ T2848] ? preempt_schedule+0xe1/0xf0 [ 189.413707][ T2848] ? vscnprintf+0x5d/0x90 [ 189.418056][ T2848] panic+0x349/0x860 [ 189.421963][ T2848] ? check_panic_on_warn+0x21/0xb0 [ 189.427085][ T2848] ? __pfx_panic+0x10/0x10 [ 189.431509][ T2848] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 189.437501][ T2848] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 189.443847][ T2848] ? print_report+0x502/0x550 [ 189.448540][ T2848] check_panic_on_warn+0x86/0xb0 [ 189.453576][ T2848] ? l2tp_session_delete+0x28/0x9e0 [ 189.458788][ T2848] end_report+0x77/0x160 [ 189.463040][ T2848] kasan_report+0x154/0x180 [ 189.467575][ T2848] ? l2tp_session_delete+0x28/0x9e0 [ 189.472791][ T2848] kasan_check_range+0x282/0x290 [ 189.477748][ T2848] l2tp_session_delete+0x28/0x9e0 [ 189.482781][ T2848] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 189.488186][ T2848] l2tp_tunnel_del_work+0x1cb/0x330 [ 189.493416][ T2848] ? process_scheduled_works+0x945/0x1830 [ 189.499153][ T2848] process_scheduled_works+0xa2c/0x1830 [ 189.504735][ T2848] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.510726][ T2848] ? assign_work+0x364/0x3d0 [ 189.515323][ T2848] worker_thread+0x86d/0xd70 [ 189.519943][ T2848] ? __kthread_parkme+0x169/0x1d0 [ 189.524975][ T2848] ? __pfx_worker_thread+0x10/0x10 [ 189.530093][ T2848] kthread+0x2f0/0x390 [ 189.534170][ T2848] ? __pfx_worker_thread+0x10/0x10 [ 189.539284][ T2848] ? __pfx_kthread+0x10/0x10 [ 189.543907][ T2848] ret_from_fork+0x4b/0x80 [ 189.548347][ T2848] ? __pfx_kthread+0x10/0x10 [ 189.552946][ T2848] ret_from_fork_asm+0x1a/0x30 [ 189.557736][ T2848] [ 189.561129][ T2848] Kernel Offset: disabled [ 189.565456][ T2848] Rebooting in 86400 seconds..