Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts.
2024/06/23 01:49:31 ignoring optional flag "sandboxArg"="0"
2024/06/23 01:49:31 parsed 1 programs
[ 160.881945][ T5111] cgroup: Unknown subsys name 'net'
[ 161.127202][ T5111] cgroup: Unknown subsys name 'rlimit'
[ 162.247547][ T5113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 162.613426][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 162.622196][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 162.632613][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 162.642256][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 162.650836][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 162.658352][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 163.464312][ T5168] chnl_net:caif_netlink_parms(): no params data found
[ 163.566714][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.578509][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.588837][ T5168] bridge_slave_0: entered allmulticast mode
[ 163.596854][ T5168] bridge_slave_0: entered promiscuous mode
[ 163.607148][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.616296][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.624584][ T5168] bridge_slave_1: entered allmulticast mode
[ 163.631629][ T5168] bridge_slave_1: entered promiscuous mode
[ 163.661417][ T5168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 163.672759][ T5168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 163.701472][ T5168] team0: Port device team_slave_0 added
[ 163.709795][ T5168] team0: Port device team_slave_1 added
[ 163.743973][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 163.751388][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.778011][ T5168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 163.792042][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 163.799455][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 163.826780][ T5168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 163.874647][ T5168] hsr_slave_0: entered promiscuous mode
[ 163.881649][ T5168] hsr_slave_1: entered promiscuous mode
[ 164.010999][ T5168] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 164.021673][ T5168] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 164.031696][ T5168] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.041538][ T5168] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 164.122846][ T5168] 8021q: adding VLAN 0 to HW filter on device bond0
[ 164.143811][ T5168] 8021q: adding VLAN 0 to HW filter on device team0
[ 164.166386][ T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.173941][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 164.186317][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 164.193432][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 164.337011][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 164.382408][ T5168] veth0_vlan: entered promiscuous mode
[ 164.396932][ T5168] veth1_vlan: entered promiscuous mode
[ 164.428327][ T5168] veth0_macvtap: entered promiscuous mode
[ 164.438290][ T5168] veth1_macvtap: entered promiscuous mode
[ 164.456003][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 164.470921][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 164.484300][ T5168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.494351][ T5168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.503229][ T5168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.512572][ T5168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 164.640856][ T2796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.729515][ T2796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.808858][ T2796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 164.893397][ T2796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 165.080070][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.089764][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 165.114347][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 165.122303][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/23 01:49:36 executed programs: 0
[ 165.821580][ T4495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 165.835678][ T4495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 165.843457][ T4495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 165.851943][ T4495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 165.861189][ T4495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 165.874230][ T4495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 166.054205][ T5210] chnl_net:caif_netlink_parms(): no params data found
[ 166.120897][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 166.128292][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 166.135908][ T5210] bridge_slave_0: entered allmulticast mode
[ 166.142619][ T5210] bridge_slave_0: entered promiscuous mode
[ 166.151720][ T5210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 166.159135][ T5210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 166.166578][ T5210] bridge_slave_1: entered allmulticast mode
[ 166.173303][ T5210] bridge_slave_1: entered promiscuous mode
[ 166.201880][ T5210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 166.214861][ T5210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 166.250570][ T5210] team0: Port device team_slave_0 added
[ 166.258291][ T5210] team0: Port device team_slave_1 added
[ 166.280899][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 166.288671][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.315117][ T5210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 166.328328][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 166.335361][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 166.361470][ T5210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 166.397952][ T5210] hsr_slave_0: entered promiscuous mode
[ 166.405417][ T5210] hsr_slave_1: entered promiscuous mode
[ 166.411501][ T5210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 166.419489][ T5210] Cannot create hsr debugfs directory
[ 167.904423][ T53] Bluetooth: hci0: command tx timeout
[ 169.649234][ T2796] bridge_slave_1: left allmulticast mode
[ 169.655723][ T2796] bridge_slave_1: left promiscuous mode
[ 169.662259][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 169.681180][ T2796] bridge_slave_0: left allmulticast mode
[ 169.686991][ T2796] bridge_slave_0: left promiscuous mode
[ 169.692747][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 169.998483][ T53] Bluetooth: hci0: command tx timeout
[ 170.006308][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 170.017254][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 170.027497][ T2796] bond0 (unregistering): Released all slaves
[ 170.154794][ T2796] hsr_slave_0: left promiscuous mode
[ 170.160844][ T2796] hsr_slave_1: left promiscuous mode
[ 170.172168][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 170.181057][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 170.192533][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 170.201445][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 170.222845][ T2796] veth1_macvtap: left promiscuous mode
[ 170.229092][ T2796] veth0_macvtap: left promiscuous mode
[ 170.235207][ T2796] veth1_vlan: left promiscuous mode
[ 170.240765][ T2796] veth0_vlan: left promiscuous mode
[ 170.588841][ T2796] team0 (unregistering): Port device team_slave_1 removed
[ 170.612234][ T2796] team0 (unregistering): Port device team_slave_0 removed
[ 170.959796][ T5210] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.972153][ T5210] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.982851][ T5210] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.998853][ T5210] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 171.117319][ T5210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 171.157468][ T5210] 8021q: adding VLAN 0 to HW filter on device team0
[ 171.181302][ T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 171.189214][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 171.206891][ T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 171.214086][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 171.270864][ T5210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 171.726429][ T5210] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 171.782703][ T5210] veth0_vlan: entered promiscuous mode
[ 171.800415][ T5210] veth1_vlan: entered promiscuous mode
[ 171.882638][ T5210] veth0_macvtap: entered promiscuous mode
[ 171.899699][ T5210] veth1_macvtap: entered promiscuous mode
[ 171.962363][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 171.981487][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 172.002390][ T5210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.016823][ T5210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.029221][ T5210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.039238][ T5210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.064718][ T53] Bluetooth: hci0: command tx timeout
[ 172.179928][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 172.189122][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 172.239333][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 172.249341][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/23 01:49:43 executed programs: 1
[ 172.390346][ T29] ==================================================================
[ 172.398457][ T29] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 172.406590][ T29] Write of size 8 at addr ffff88807af2f008 by task kworker/u8:2/29
[ 172.414470][ T29]
[ 172.416787][ T29] CPU: 1 PID: 29 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 172.426837][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 172.436883][ T29] Workqueue: l2tp l2tp_tunnel_del_work
[ 172.442354][ T29] Call Trace:
[ 172.445630][ T29]
[ 172.448637][ T29] dump_stack_lvl+0x241/0x360
[ 172.453308][ T29] ? __pfx_dump_stack_lvl+0x10/0x10
[ 172.458498][ T29] ? __pfx__printk+0x10/0x10
[ 172.463169][ T29] ? _printk+0xd5/0x120
[ 172.467314][ T29] ? __virt_addr_valid+0x183/0x520
[ 172.472501][ T29] ? __virt_addr_valid+0x183/0x520
[ 172.477608][ T29] print_report+0x169/0x550
[ 172.482102][ T29] ? __virt_addr_valid+0x183/0x520
[ 172.487208][ T29] ? __virt_addr_valid+0x183/0x520
[ 172.492314][ T29] ? __virt_addr_valid+0x44e/0x520
[ 172.497509][ T29] ? __phys_addr+0xba/0x170
[ 172.502003][ T29] ? l2tp_session_delete+0x28/0x9e0
[ 172.507194][ T29] kasan_report+0x143/0x180
[ 172.511774][ T29] ? l2tp_session_delete+0x28/0x9e0
[ 172.516963][ T29] kasan_check_range+0x282/0x290
[ 172.521894][ T29] l2tp_session_delete+0x28/0x9e0
[ 172.526909][ T29] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 172.532271][ T29] l2tp_tunnel_del_work+0x1cb/0x330
[ 172.537569][ T29] ? process_scheduled_works+0x945/0x1830
[ 172.543274][ T29] process_scheduled_works+0xa2c/0x1830
[ 172.548848][ T29] ? __pfx_process_scheduled_works+0x10/0x10
[ 172.554824][ T29] ? assign_work+0x364/0x3d0
[ 172.559401][ T29] worker_thread+0x86d/0xd70
[ 172.563981][ T29] ? __kthread_parkme+0x169/0x1d0
[ 172.568993][ T29] ? __pfx_worker_thread+0x10/0x10
[ 172.574088][ T29] kthread+0x2f0/0x390
[ 172.578146][ T29] ? __pfx_worker_thread+0x10/0x10
[ 172.583245][ T29] ? __pfx_kthread+0x10/0x10
[ 172.587827][ T29] ret_from_fork+0x4b/0x80
[ 172.592323][ T29] ? __pfx_kthread+0x10/0x10
[ 172.596916][ T29] ret_from_fork_asm+0x1a/0x30
[ 172.601675][ T29]
[ 172.604680][ T29]
[ 172.606985][ T29] Allocated by task 5297:
[ 172.611293][ T29] kasan_save_track+0x3f/0x80
[ 172.615959][ T29] __kasan_kmalloc+0x98/0xb0
[ 172.620548][ T29] __kmalloc_noprof+0x1f9/0x400
[ 172.625474][ T29] l2tp_session_create+0x3b/0xc20
[ 172.630518][ T29] pppol2tp_connect+0xca3/0x17a0
[ 172.635541][ T29] __sys_connect+0x2df/0x310
[ 172.640205][ T29] __x64_sys_connect+0x7a/0x90
[ 172.645044][ T29] do_syscall_64+0xf3/0x230
[ 172.649536][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 172.655417][ T29]
[ 172.657760][ T29] Freed by task 16:
[ 172.661546][ T29] kasan_save_track+0x3f/0x80
[ 172.666209][ T29] kasan_save_free_info+0x40/0x50
[ 172.671215][ T29] poison_slab_object+0xe0/0x150
[ 172.676139][ T29] __kasan_slab_free+0x37/0x60
[ 172.680886][ T29] kfree+0x149/0x360
[ 172.684771][ T29] __sk_destruct+0x58/0x5f0
[ 172.689262][ T29] rcu_core+0xafd/0x1830
[ 172.693487][ T29] handle_softirqs+0x2c4/0x970
[ 172.698236][ T29] run_ksoftirqd+0xca/0x130
[ 172.702722][ T29] smpboot_thread_fn+0x544/0xa30
[ 172.707643][ T29] kthread+0x2f0/0x390
[ 172.711697][ T29] ret_from_fork+0x4b/0x80
[ 172.716099][ T29] ret_from_fork_asm+0x1a/0x30
[ 172.720848][ T29]
[ 172.723155][ T29] Last potentially related work creation:
[ 172.728936][ T29] kasan_save_stack+0x3f/0x60
[ 172.733598][ T29] __kasan_record_aux_stack+0xac/0xc0
[ 172.738958][ T29] call_rcu+0x167/0xa70
[ 172.743103][ T29] pppol2tp_release+0x24b/0x350
[ 172.747947][ T29] sock_close+0xbc/0x240
[ 172.752180][ T29] __fput+0x406/0x8b0
[ 172.756144][ T29] task_work_run+0x24f/0x310
[ 172.760721][ T29] syscall_exit_to_user_mode+0x168/0x370
[ 172.766338][ T29] do_syscall_64+0x100/0x230
[ 172.771006][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 172.776996][ T29]
[ 172.779307][ T29] The buggy address belongs to the object at ffff88807af2f000
[ 172.779307][ T29] which belongs to the cache kmalloc-1k of size 1024
[ 172.793346][ T29] The buggy address is located 8 bytes inside of
[ 172.793346][ T29] freed 1024-byte region [ffff88807af2f000, ffff88807af2f400)
[ 172.807039][ T29]
[ 172.809347][ T29] The buggy address belongs to the physical page:
[ 172.815746][ T29] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7af28
[ 172.824495][ T29] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 172.832973][ T29] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 172.840527][ T29] page_type: 0xffffefff(slab)
[ 172.845191][ T29] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 172.853757][ T29] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 172.862322][ T29] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000
[ 172.870980][ T29] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 172.879632][ T29] head: 00fff00000000003 ffffea0001ebca01 ffffffffffffffff 0000000000000000
[ 172.888283][ T29] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 172.896928][ T29] page dumped because: kasan: bad access detected
[ 172.903324][ T29] page_owner tracks the page as allocated
[ 172.909017][ T29] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5210, tgid 5210 (syz-executor), ts 172142307269, free_ts 172127611689
[ 172.931919][ T29] post_alloc_hook+0x1f3/0x230
[ 172.936764][ T29] get_page_from_freelist+0x2e43/0x2f00
[ 172.942297][ T29] __alloc_pages_noprof+0x256/0x6c0
[ 172.947478][ T29] alloc_slab_page+0x5f/0x120
[ 172.952139][ T29] allocate_slab+0x5a/0x2f0
[ 172.956628][ T29] ___slab_alloc+0xcd1/0x14b0
[ 172.961293][ T29] __slab_alloc+0x58/0xa0
[ 172.965605][ T29] __kmalloc_noprof+0x257/0x400
[ 172.970444][ T29] alloc_workqueue+0x1b0/0x2060
[ 172.975280][ T29] ieee80211_register_hw+0x296c/0x3d80
[ 172.980724][ T29] mac80211_hwsim_new_radio+0x2597/0x44d0
[ 172.986445][ T29] hwsim_new_radio_nl+0xe4c/0x21d0
[ 172.991542][ T29] genl_rcv_msg+0xb14/0xec0
[ 172.996034][ T29] netlink_rcv_skb+0x1e3/0x430
[ 173.000782][ T29] genl_rcv+0x28/0x40
[ 173.004747][ T29] netlink_unicast+0x7f0/0x990
[ 173.009589][ T29] page last free pid 5283 tgid 5283 stack trace:
[ 173.015894][ T29] free_unref_page+0xd22/0xea0
[ 173.020646][ T29] __put_partials+0xeb/0x130
[ 173.025219][ T29] put_cpu_partial+0x17c/0x250
[ 173.029968][ T29] __slab_free+0x2ea/0x3d0
[ 173.034369][ T29] qlist_free_all+0x9e/0x140
[ 173.038943][ T29] kasan_quarantine_reduce+0x14f/0x170
[ 173.044389][ T29] __kasan_slab_alloc+0x23/0x80
[ 173.049233][ T29] kmem_cache_alloc_noprof+0x135/0x2a0
[ 173.054680][ T29] getname_flags+0xbd/0x4f0
[ 173.059258][ T29] vfs_fstatat+0x11c/0x190
[ 173.063664][ T29] __x64_sys_newfstatat+0x125/0x1b0
[ 173.068851][ T29] do_syscall_64+0xf3/0x230
[ 173.073339][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 173.079222][ T29]
[ 173.081530][ T29] Memory state around the buggy address:
[ 173.087137][ T29] ffff88807af2ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 173.095188][ T29] ffff88807af2ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 173.103227][ T29] >ffff88807af2f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 173.111263][ T29] ^
[ 173.115570][ T29] ffff88807af2f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 173.123610][ T29] ffff88807af2f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 173.131646][ T29] ==================================================================
[ 173.169325][ T29] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 173.176551][ T29] CPU: 1 PID: 29 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0
[ 173.186704][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 173.196756][ T29] Workqueue: l2tp l2tp_tunnel_del_work
[ 173.202217][ T29] Call Trace:
[ 173.205483][ T29]
[ 173.208400][ T29] dump_stack_lvl+0x241/0x360
[ 173.213070][ T29] ? __pfx_dump_stack_lvl+0x10/0x10
[ 173.218258][ T29] ? __pfx__printk+0x10/0x10
[ 173.222839][ T29] ? preempt_schedule+0xe1/0xf0
[ 173.227684][ T29] ? vscnprintf+0x5d/0x90
[ 173.232099][ T29] panic+0x349/0x860
[ 173.236014][ T29] ? check_panic_on_warn+0x21/0xb0
[ 173.241117][ T29] ? __pfx_panic+0x10/0x10
[ 173.245526][ T29] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 173.251498][ T29] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 173.257820][ T29] ? print_report+0x502/0x550
[ 173.262489][ T29] check_panic_on_warn+0x86/0xb0
[ 173.267416][ T29] ? l2tp_session_delete+0x28/0x9e0
[ 173.272602][ T29] end_report+0x77/0x160
[ 173.276833][ T29] kasan_report+0x154/0x180
[ 173.281325][ T29] ? l2tp_session_delete+0x28/0x9e0
[ 173.286535][ T29] kasan_check_range+0x282/0x290
[ 173.291555][ T29] l2tp_session_delete+0x28/0x9e0
[ 173.296588][ T29] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 173.301970][ T29] l2tp_tunnel_del_work+0x1cb/0x330
[ 173.307172][ T29] ? process_scheduled_works+0x945/0x1830
[ 173.312882][ T29] process_scheduled_works+0xa2c/0x1830
[ 173.318433][ T29] ? __pfx_process_scheduled_works+0x10/0x10
[ 173.324405][ T29] ? assign_work+0x364/0x3d0
[ 173.328986][ T29] worker_thread+0x86d/0xd70
[ 173.333571][ T29] ? __kthread_parkme+0x169/0x1d0
[ 173.338583][ T29] ? __pfx_worker_thread+0x10/0x10
[ 173.343684][ T29] kthread+0x2f0/0x390
[ 173.347745][ T29] ? __pfx_worker_thread+0x10/0x10
[ 173.352844][ T29] ? __pfx_kthread+0x10/0x10
[ 173.357427][ T29] ret_from_fork+0x4b/0x80
[ 173.361838][ T29] ? __pfx_kthread+0x10/0x10
[ 173.366419][ T29] ret_from_fork_asm+0x1a/0x30
[ 173.371267][ T29]
[ 173.374375][ T29] Kernel Offset: disabled
[ 173.378689][ T29] Rebooting in 86400 seconds..