Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
2024/06/21 18:19:11 ignoring optional flag "sandboxArg"="0"
2024/06/21 18:19:11 parsed 1 programs
[ 56.152393][ T5092] cgroup: Unknown subsys name 'net'
[ 56.377703][ T5092] cgroup: Unknown subsys name 'rlimit'
[ 57.452921][ T5091] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 58.413619][ T5143] chnl_net:caif_netlink_parms(): no params data found
[ 58.470282][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.477994][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 58.485259][ T5143] bridge_slave_0: entered allmulticast mode
[ 58.492529][ T5143] bridge_slave_0: entered promiscuous mode
[ 58.502767][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.510683][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 58.517977][ T5143] bridge_slave_1: entered allmulticast mode
[ 58.525288][ T5143] bridge_slave_1: entered promiscuous mode
[ 58.554544][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 58.565951][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 58.597544][ T5143] team0: Port device team_slave_0 added
[ 58.606446][ T5143] team0: Port device team_slave_1 added
[ 58.634451][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 58.641424][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 58.667823][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 58.681516][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 58.688524][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 58.714449][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 58.762642][ T5143] hsr_slave_0: entered promiscuous mode
[ 58.769868][ T5143] hsr_slave_1: entered promiscuous mode
[ 58.882829][ T5143] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 58.892861][ T5143] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 58.902439][ T5143] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 58.911937][ T5143] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 58.936305][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.943810][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.951940][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.959154][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.013948][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0
[ 59.032617][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.041582][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.060496][ T5143] 8021q: adding VLAN 0 to HW filter on device team0
[ 59.074236][ T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.081379][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.096034][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.103218][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.140058][ T5143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 59.250964][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 59.288292][ T5143] veth0_vlan: entered promiscuous mode
[ 59.300498][ T5143] veth1_vlan: entered promiscuous mode
[ 59.326152][ T5143] veth0_macvtap: entered promiscuous mode
[ 59.335801][ T5143] veth1_macvtap: entered promiscuous mode
[ 59.352799][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 59.368390][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 59.380524][ T5143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.389512][ T5143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.398836][ T5143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.407862][ T5143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.517281][ T1113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 59.596225][ T1113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 59.639506][ T1113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 59.708541][ T1113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 60.171537][ T5171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 60.180249][ T5171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 60.188366][ T5171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 60.197550][ T5171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 60.206024][ T5171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 60.213374][ T5171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 60.699463][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 60.711726][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 60.737574][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 60.746695][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/21 18:19:16 executed programs: 0
[ 60.868105][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 60.877319][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 60.885127][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 60.893254][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 60.901879][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 60.909368][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 61.036100][ T5188] chnl_net:caif_netlink_parms(): no params data found
[ 61.103126][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.110522][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state
[ 61.117976][ T5188] bridge_slave_0: entered allmulticast mode
[ 61.125512][ T5188] bridge_slave_0: entered promiscuous mode
[ 61.135617][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.142909][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.150787][ T5188] bridge_slave_1: entered allmulticast mode
[ 61.157808][ T5188] bridge_slave_1: entered promiscuous mode
[ 61.190522][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 61.203764][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 61.238366][ T5188] team0: Port device team_slave_0 added
[ 61.247306][ T5188] team0: Port device team_slave_1 added
[ 61.268866][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 61.276369][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.302662][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 61.317798][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 61.324866][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.350943][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 61.400002][ T5188] hsr_slave_0: entered promiscuous mode
[ 61.406360][ T5188] hsr_slave_1: entered promiscuous mode
[ 61.412460][ T5188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 61.420560][ T5188] Cannot create hsr debugfs directory
[ 62.954704][ T4490] Bluetooth: hci0: command tx timeout
[ 64.515620][ T1113] bridge_slave_1: left allmulticast mode
[ 64.521572][ T1113] bridge_slave_1: left promiscuous mode
[ 64.528117][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.538644][ T1113] bridge_slave_0: left allmulticast mode
[ 64.545398][ T1113] bridge_slave_0: left promiscuous mode
[ 64.551083][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.765643][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 64.776905][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 64.788849][ T1113] bond0 (unregistering): Released all slaves
[ 64.924605][ T1113] hsr_slave_0: left promiscuous mode
[ 64.930893][ T1113] hsr_slave_1: left promiscuous mode
[ 64.941749][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 64.949919][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 64.968599][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 64.979256][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 64.999895][ T1113] veth1_macvtap: left promiscuous mode
[ 65.006264][ T1113] veth0_macvtap: left promiscuous mode
[ 65.011941][ T1113] veth1_vlan: left promiscuous mode
[ 65.018299][ T1113] veth0_vlan: left promiscuous mode
[ 65.034842][ T4490] Bluetooth: hci0: command tx timeout
[ 65.345989][ T1113] team0 (unregistering): Port device team_slave_1 removed
[ 65.371811][ T1113] team0 (unregistering): Port device team_slave_0 removed
[ 65.734228][ T5188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 65.746234][ T5188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 65.774037][ T5188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 65.787473][ T5188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 65.920477][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 65.967038][ T5188] 8021q: adding VLAN 0 to HW filter on device team0
[ 65.979578][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.986795][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.005431][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.012560][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.172960][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 66.329950][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 66.369332][ T5188] veth0_vlan: entered promiscuous mode
[ 66.379989][ T5188] veth1_vlan: entered promiscuous mode
[ 66.406876][ T5188] veth0_macvtap: entered promiscuous mode
[ 66.416297][ T5188] veth1_macvtap: entered promiscuous mode
[ 66.433752][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.448510][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.459678][ T5188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.469031][ T5188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.478051][ T5188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.487497][ T5188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.585133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.592958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.638584][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.647443][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/06/21 18:19:22 executed programs: 1
[ 66.735286][ T1098] ==================================================================
[ 66.743477][ T1098] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0
[ 66.751503][ T1098] Write of size 8 at addr ffff88802df94008 by task kworker/u8:7/1098
[ 66.759578][ T1098]
[ 66.761922][ T1098] CPU: 1 PID: 1098 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0
[ 66.772166][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 66.782232][ T1098] Workqueue: l2tp l2tp_tunnel_del_work
[ 66.787730][ T1098] Call Trace:
[ 66.791013][ T1098]
[ 66.793951][ T1098] dump_stack_lvl+0x241/0x360
[ 66.798642][ T1098] ? __pfx_dump_stack_lvl+0x10/0x10
[ 66.803855][ T1098] ? __pfx__printk+0x10/0x10
[ 66.808462][ T1098] ? _printk+0xd5/0x120
[ 66.812634][ T1098] ? __virt_addr_valid+0x183/0x520
[ 66.817750][ T1098] ? __virt_addr_valid+0x183/0x520
[ 66.822853][ T1098] print_report+0x169/0x550
[ 66.827349][ T1098] ? __virt_addr_valid+0x183/0x520
[ 66.832454][ T1098] ? __virt_addr_valid+0x183/0x520
[ 66.837552][ T1098] ? __virt_addr_valid+0x44e/0x520
[ 66.842650][ T1098] ? __phys_addr+0xba/0x170
[ 66.847146][ T1098] ? l2tp_session_delete+0x28/0x9e0
[ 66.852335][ T1098] kasan_report+0x143/0x180
[ 66.856833][ T1098] ? l2tp_session_delete+0x28/0x9e0
[ 66.862024][ T1098] kasan_check_range+0x282/0x290
[ 66.867038][ T1098] l2tp_session_delete+0x28/0x9e0
[ 66.872068][ T1098] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 66.877451][ T1098] l2tp_tunnel_del_work+0x1cb/0x330
[ 66.882654][ T1098] ? process_scheduled_works+0x945/0x1830
[ 66.888375][ T1098] process_scheduled_works+0xa2c/0x1830
[ 66.893922][ T1098] ? __pfx_process_scheduled_works+0x10/0x10
[ 66.899892][ T1098] ? assign_work+0x364/0x3d0
[ 66.904468][ T1098] worker_thread+0x86d/0xd70
[ 66.909050][ T1098] ? __kthread_parkme+0x169/0x1d0
[ 66.914060][ T1098] ? __pfx_worker_thread+0x10/0x10
[ 66.919156][ T1098] kthread+0x2f0/0x390
[ 66.923211][ T1098] ? __pfx_worker_thread+0x10/0x10
[ 66.928307][ T1098] ? __pfx_kthread+0x10/0x10
[ 66.932883][ T1098] ret_from_fork+0x4b/0x80
[ 66.937289][ T1098] ? __pfx_kthread+0x10/0x10
[ 66.941865][ T1098] ret_from_fork_asm+0x1a/0x30
[ 66.946631][ T1098]
[ 66.949632][ T1098]
[ 66.951937][ T1098] Allocated by task 5232:
[ 66.956244][ T1098] kasan_save_track+0x3f/0x80
[ 66.960909][ T1098] __kasan_kmalloc+0x98/0xb0
[ 66.965483][ T1098] __kmalloc_noprof+0x1f9/0x400
[ 66.970317][ T1098] l2tp_session_create+0x3b/0xc20
[ 66.975328][ T1098] pppol2tp_connect+0xca3/0x17a0
[ 66.980252][ T1098] __sys_connect+0x2df/0x310
[ 66.984824][ T1098] __x64_sys_connect+0x7a/0x90
[ 66.989570][ T1098] do_syscall_64+0xf3/0x230
[ 66.994059][ T1098] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 66.999942][ T1098]
[ 67.002248][ T1098] Freed by task 16:
[ 67.006031][ T1098] kasan_save_track+0x3f/0x80
[ 67.010690][ T1098] kasan_save_free_info+0x40/0x50
[ 67.015702][ T1098] poison_slab_object+0xe0/0x150
[ 67.020622][ T1098] __kasan_slab_free+0x37/0x60
[ 67.025370][ T1098] kfree+0x149/0x360
[ 67.029253][ T1098] __sk_destruct+0x58/0x5f0
[ 67.033739][ T1098] rcu_core+0xafd/0x1830
[ 67.037966][ T1098] handle_softirqs+0x2c4/0x970
[ 67.042713][ T1098] run_ksoftirqd+0xca/0x130
[ 67.047200][ T1098] smpboot_thread_fn+0x544/0xa30
[ 67.052118][ T1098] kthread+0x2f0/0x390
[ 67.056171][ T1098] ret_from_fork+0x4b/0x80
[ 67.060574][ T1098] ret_from_fork_asm+0x1a/0x30
[ 67.065323][ T1098]
[ 67.067630][ T1098] Last potentially related work creation:
[ 67.073323][ T1098] kasan_save_stack+0x3f/0x60
[ 67.077987][ T1098] __kasan_record_aux_stack+0xac/0xc0
[ 67.083339][ T1098] call_rcu+0x167/0xa70
[ 67.087478][ T1098] pppol2tp_release+0x24b/0x350
[ 67.092314][ T1098] sock_close+0xbc/0x240
[ 67.096544][ T1098] __fput+0x406/0x8b0
[ 67.100509][ T1098] task_work_run+0x24f/0x310
[ 67.105107][ T1098] syscall_exit_to_user_mode+0x168/0x370
[ 67.110725][ T1098] do_syscall_64+0x100/0x230
[ 67.115302][ T1098] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.121180][ T1098]
[ 67.123485][ T1098] The buggy address belongs to the object at ffff88802df94000
[ 67.123485][ T1098] which belongs to the cache kmalloc-1k of size 1024
[ 67.137519][ T1098] The buggy address is located 8 bytes inside of
[ 67.137519][ T1098] freed 1024-byte region [ffff88802df94000, ffff88802df94400)
[ 67.151211][ T1098]
[ 67.153521][ T1098] The buggy address belongs to the physical page:
[ 67.159919][ T1098] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802df95000 pfn:0x2df90
[ 67.169970][ T1098] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 67.178451][ T1098] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 67.186329][ T1098] page_type: 0xffffefff(slab)
[ 67.191006][ T1098] raw: 00fff00000000040 ffff888015041dc0 ffffea0001f55000 0000000000000003
[ 67.199587][ T1098] raw: ffff88802df95000 000000000010000e 00000001ffffefff 0000000000000000
[ 67.208166][ T1098] head: 00fff00000000040 ffff888015041dc0 ffffea0001f55000 0000000000000003
[ 67.216831][ T1098] head: ffff88802df95000 000000000010000e 00000001ffffefff 0000000000000000
[ 67.225500][ T1098] head: 00fff00000000003 ffffea0000b7e401 ffffffffffffffff 0000000000000000
[ 67.234166][ T1098] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 67.242822][ T1098] page dumped because: kasan: bad access detected
[ 67.249225][ T1098] page_owner tracks the page as allocated
[ 67.254921][ T1098] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4940, tgid 4940 (sshd), ts 42698281154, free_ts 35088022936
[ 67.274787][ T1098] post_alloc_hook+0x1f3/0x230
[ 67.279547][ T1098] get_page_from_freelist+0x2e43/0x2f00
[ 67.285075][ T1098] __alloc_pages_noprof+0x256/0x6c0
[ 67.290254][ T1098] alloc_slab_page+0x5f/0x120
[ 67.294918][ T1098] allocate_slab+0x5a/0x2f0
[ 67.299406][ T1098] ___slab_alloc+0xcd1/0x14b0
[ 67.304066][ T1098] __slab_alloc+0x58/0xa0
[ 67.308382][ T1098] __kmalloc_noprof+0x257/0x400
[ 67.313214][ T1098] tomoyo_init_log+0x1b3e/0x2050
[ 67.318142][ T1098] tomoyo_supervisor+0x38a/0x11f0
[ 67.323151][ T1098] tomoyo_env_perm+0x178/0x210
[ 67.327901][ T1098] tomoyo_find_next_domain+0x1384/0x1cf0
[ 67.333523][ T1098] tomoyo_bprm_check_security+0x115/0x180
[ 67.339226][ T1098] security_bprm_check+0x65/0x90
[ 67.344147][ T1098] bprm_execve+0xa56/0x17c0
[ 67.348634][ T1098] do_execveat_common+0x553/0x700
[ 67.353643][ T1098] page last free pid 4900 tgid 4900 stack trace:
[ 67.359944][ T1098] free_unref_page+0xd22/0xea0
[ 67.364694][ T1098] __put_partials+0xeb/0x130
[ 67.369268][ T1098] put_cpu_partial+0x17c/0x250
[ 67.374017][ T1098] __slab_free+0x2ea/0x3d0
[ 67.378444][ T1098] qlist_free_all+0x9e/0x140
[ 67.383020][ T1098] kasan_quarantine_reduce+0x14f/0x170
[ 67.388462][ T1098] __kasan_slab_alloc+0x23/0x80
[ 67.393301][ T1098] kmem_cache_alloc_noprof+0x135/0x2a0
[ 67.398767][ T1098] getname_flags+0xbd/0x4f0
[ 67.403262][ T1098] user_path_at_empty+0x2c/0x60
[ 67.408102][ T1098] do_faccessat+0x5e5/0xb80
[ 67.412592][ T1098] do_syscall_64+0xf3/0x230
[ 67.417080][ T1098] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 67.422960][ T1098]
[ 67.425267][ T1098] Memory state around the buggy address:
[ 67.430877][ T1098] ffff88802df93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 67.438922][ T1098] ffff88802df93f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 67.446966][ T1098] >ffff88802df94000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.455008][ T1098] ^
[ 67.459319][ T1098] ffff88802df94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.467360][ T1098] ffff88802df94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 67.475401][ T1098] ==================================================================
[ 67.507282][ T4490] Bluetooth: hci0: command tx timeout
[ 67.533578][ T1098] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 67.540804][ T1098] CPU: 0 PID: 1098 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0
[ 67.551051][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 67.561106][ T1098] Workqueue: l2tp l2tp_tunnel_del_work
[ 67.566570][ T1098] Call Trace:
[ 67.569834][ T1098]
[ 67.572751][ T1098] dump_stack_lvl+0x241/0x360
[ 67.577438][ T1098] ? __pfx_dump_stack_lvl+0x10/0x10
[ 67.582627][ T1098] ? __pfx__printk+0x10/0x10
[ 67.587206][ T1098] ? preempt_schedule+0xe1/0xf0
[ 67.592054][ T1098] ? vscnprintf+0x5d/0x90
[ 67.596376][ T1098] panic+0x349/0x860
[ 67.600261][ T1098] ? check_panic_on_warn+0x21/0xb0
[ 67.605363][ T1098] ? __pfx_panic+0x10/0x10
[ 67.609768][ T1098] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 67.615739][ T1098] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 67.622054][ T1098] ? print_report+0x502/0x550
[ 67.626721][ T1098] check_panic_on_warn+0x86/0xb0
[ 67.631645][ T1098] ? l2tp_session_delete+0x28/0x9e0
[ 67.636830][ T1098] end_report+0x77/0x160
[ 67.641061][ T1098] kasan_report+0x154/0x180
[ 67.645554][ T1098] ? l2tp_session_delete+0x28/0x9e0
[ 67.650744][ T1098] kasan_check_range+0x282/0x290
[ 67.655674][ T1098] l2tp_session_delete+0x28/0x9e0
[ 67.660689][ T1098] ? l2tp_tunnel_del_work+0x1d3/0x330
[ 67.666055][ T1098] l2tp_tunnel_del_work+0x1cb/0x330
[ 67.671245][ T1098] ? process_scheduled_works+0x945/0x1830
[ 67.676949][ T1098] process_scheduled_works+0xa2c/0x1830
[ 67.682488][ T1098] ? __pfx_process_scheduled_works+0x10/0x10
[ 67.688457][ T1098] ? assign_work+0x364/0x3d0
[ 67.693043][ T1098] worker_thread+0x86d/0xd70
[ 67.697627][ T1098] ? __kthread_parkme+0x169/0x1d0
[ 67.702652][ T1098] ? __pfx_worker_thread+0x10/0x10
[ 67.707770][ T1098] kthread+0x2f0/0x390
[ 67.711855][ T1098] ? __pfx_worker_thread+0x10/0x10
[ 67.716975][ T1098] ? __pfx_kthread+0x10/0x10
[ 67.721563][ T1098] ret_from_fork+0x4b/0x80
[ 67.725979][ T1098] ? __pfx_kthread+0x10/0x10
[ 67.730562][ T1098] ret_from_fork_asm+0x1a/0x30
[ 67.735328][ T1098]
[ 67.738435][ T1098] Kernel Offset: disabled
[ 67.742739][ T1098] Rebooting in 86400 seconds..