Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2024/06/21 15:57:00 ignoring optional flag "sandboxArg"="0" 2024/06/21 15:57:00 parsed 1 programs [ 157.279831][ T5113] cgroup: Unknown subsys name 'net' [ 157.617437][ T5113] cgroup: Unknown subsys name 'rlimit' [ 159.177474][ T5122] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 159.345483][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.353713][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.389277][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.397525][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.750435][ T5164] chnl_net:caif_netlink_parms(): no params data found [ 160.837762][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.845464][ T5164] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.852756][ T5164] bridge_slave_0: entered allmulticast mode [ 160.860686][ T5164] bridge_slave_0: entered promiscuous mode [ 160.871234][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.878650][ T5164] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.886061][ T5164] bridge_slave_1: entered allmulticast mode [ 160.893321][ T5164] bridge_slave_1: entered promiscuous mode [ 160.930799][ T5164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.942820][ T5164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.978318][ T5164] team0: Port device team_slave_0 added [ 160.987035][ T5164] team0: Port device team_slave_1 added [ 161.017920][ T5164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.025329][ T5164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.052589][ T5164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.067066][ T5164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.074481][ T5164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.100620][ T5164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.148601][ T5164] hsr_slave_0: entered promiscuous mode [ 161.155485][ T5164] hsr_slave_1: entered promiscuous mode [ 161.319472][ T5164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.331487][ T5164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.342348][ T5164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.354071][ T5164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.461283][ T5164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.482096][ T5164] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.509039][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.516895][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.529756][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.537053][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.732918][ T5164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.782990][ T5164] veth0_vlan: entered promiscuous mode [ 161.806135][ T5164] veth1_vlan: entered promiscuous mode [ 161.841456][ T5164] veth0_macvtap: entered promiscuous mode [ 161.851855][ T5164] veth1_macvtap: entered promiscuous mode [ 161.875255][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.892316][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.906793][ T5164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.915934][ T5164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.926345][ T5164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.936805][ T5164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.072862][ T2909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.151042][ T2909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.248867][ T2909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.314643][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.323209][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.331256][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.344550][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.357626][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.361714][ T2909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.365395][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2024/06/21 15:57:06 executed programs: 0 [ 163.603476][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.611918][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.622505][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.632274][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.640473][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.648132][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.820788][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 163.895684][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.903089][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.910591][ T5212] bridge_slave_0: entered allmulticast mode [ 163.918269][ T5212] bridge_slave_0: entered promiscuous mode [ 163.927380][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.935523][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.942788][ T5212] bridge_slave_1: entered allmulticast mode [ 163.950209][ T5212] bridge_slave_1: entered promiscuous mode [ 163.985276][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.998018][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.035383][ T5212] team0: Port device team_slave_0 added [ 164.045687][ T5212] team0: Port device team_slave_1 added [ 164.076719][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.083796][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.110706][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.124475][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.131484][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.158505][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.209022][ T5212] hsr_slave_0: entered promiscuous mode [ 164.215893][ T5212] hsr_slave_1: entered promiscuous mode [ 164.223663][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.231963][ T5212] Cannot create hsr debugfs directory [ 165.694685][ T53] Bluetooth: hci0: command tx timeout [ 166.737497][ T2909] bridge_slave_1: left allmulticast mode [ 166.743929][ T2909] bridge_slave_1: left promiscuous mode [ 166.750530][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.773349][ T2909] bridge_slave_0: left allmulticast mode [ 166.785970][ T2909] bridge_slave_0: left promiscuous mode [ 166.791895][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.041745][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.053378][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.067518][ T2909] bond0 (unregistering): Released all slaves [ 167.225355][ T2909] hsr_slave_0: left promiscuous mode [ 167.233129][ T2909] hsr_slave_1: left promiscuous mode [ 167.242710][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.250736][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.263296][ T2909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.271648][ T2909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.302888][ T2909] veth1_macvtap: left promiscuous mode [ 167.309199][ T2909] veth0_macvtap: left promiscuous mode [ 167.318053][ T2909] veth1_vlan: left promiscuous mode [ 167.325051][ T2909] veth0_vlan: left promiscuous mode [ 167.769942][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 167.777392][ T53] Bluetooth: hci0: command tx timeout [ 167.806238][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 168.418047][ T5212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.444546][ T5212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.467999][ T5212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.496289][ T5212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.887287][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.960746][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.988561][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.995923][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.034999][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.042253][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.156023][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.353164][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.452023][ T5212] veth0_vlan: entered promiscuous mode [ 169.482062][ T5212] veth1_vlan: entered promiscuous mode [ 169.540389][ T5212] veth0_macvtap: entered promiscuous mode [ 169.553455][ T5212] veth1_macvtap: entered promiscuous mode [ 169.581965][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.611661][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.629679][ T5212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.640147][ T5212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.652371][ T5212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.661716][ T5212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.799732][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.819780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.855752][ T53] Bluetooth: hci0: command tx timeout [ 169.870306][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.878925][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/21 15:57:13 executed programs: 1 [ 170.593999][ T11] ================================================================== [ 170.602148][ T11] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 170.610304][ T11] Read of size 8 at addr ffff88801ff3c0b8 by task kworker/u8:0/11 [ 170.618463][ T11] [ 170.620847][ T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 170.631148][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.641319][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 170.646824][ T11] Call Trace: [ 170.650119][ T11] <TASK> [ 170.653068][ T11] dump_stack_lvl+0x241/0x360 [ 170.657790][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.663000][ T11] ? __pfx__printk+0x10/0x10 [ 170.668092][ T11] ? _printk+0xd5/0x120 [ 170.672293][ T11] ? __virt_addr_valid+0x183/0x520 [ 170.677423][ T11] ? __virt_addr_valid+0x183/0x520 [ 170.682566][ T11] print_report+0x169/0x550 [ 170.687098][ T11] ? __virt_addr_valid+0x183/0x520 [ 170.692224][ T11] ? __virt_addr_valid+0x183/0x520 [ 170.697345][ T11] ? __virt_addr_valid+0x44e/0x520 [ 170.702466][ T11] ? __phys_addr+0xba/0x170 [ 170.706993][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 170.712288][ T11] kasan_report+0x143/0x180 [ 170.716816][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 170.722111][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 170.727253][ T11] ? process_scheduled_works+0x945/0x1830 [ 170.732973][ T11] process_scheduled_works+0xa2c/0x1830 [ 170.738555][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 170.744558][ T11] ? assign_work+0x364/0x3d0 [ 170.749179][ T11] worker_thread+0x86d/0xd70 [ 170.753790][ T11] ? __kthread_parkme+0x169/0x1d0 [ 170.758833][ T11] ? __pfx_worker_thread+0x10/0x10 [ 170.763950][ T11] kthread+0x2f0/0x390 [ 170.768056][ T11] ? __pfx_worker_thread+0x10/0x10 [ 170.773168][ T11] ? __pfx_kthread+0x10/0x10 [ 170.777777][ T11] ret_from_fork+0x4b/0x80 [ 170.782220][ T11] ? __pfx_kthread+0x10/0x10 [ 170.786820][ T11] ret_from_fork_asm+0x1a/0x30 [ 170.791686][ T11] </TASK> [ 170.794703][ T11] [ 170.797022][ T11] Allocated by task 5308: [ 170.801355][ T11] kasan_save_track+0x3f/0x80 [ 170.806062][ T11] __kasan_kmalloc+0x98/0xb0 [ 170.810653][ T11] __kmalloc_noprof+0x1f9/0x400 [ 170.815500][ T11] l2tp_session_create+0x3b/0xc20 [ 170.820536][ T11] pppol2tp_connect+0xca3/0x17a0 [ 170.825481][ T11] __sys_connect+0x2df/0x310 [ 170.830119][ T11] __x64_sys_connect+0x7a/0x90 [ 170.834895][ T11] do_syscall_64+0xf3/0x230 [ 170.839430][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.845331][ T11] [ 170.847671][ T11] Freed by task 24: [ 170.851481][ T11] kasan_save_track+0x3f/0x80 [ 170.856229][ T11] kasan_save_free_info+0x40/0x50 [ 170.861271][ T11] poison_slab_object+0xe0/0x150 [ 170.866220][ T11] __kasan_slab_free+0x37/0x60 [ 170.871078][ T11] kfree+0x149/0x360 [ 170.874989][ T11] __sk_destruct+0x58/0x5f0 [ 170.879509][ T11] rcu_core+0xafd/0x1830 [ 170.883958][ T11] handle_softirqs+0x2c4/0x970 [ 170.888750][ T11] run_ksoftirqd+0xca/0x130 [ 170.893459][ T11] smpboot_thread_fn+0x544/0xa30 [ 170.898441][ T11] kthread+0x2f0/0x390 [ 170.902829][ T11] ret_from_fork+0x4b/0x80 [ 170.907264][ T11] ret_from_fork_asm+0x1a/0x30 [ 170.912040][ T11] [ 170.914401][ T11] Last potentially related work creation: [ 170.920238][ T11] kasan_save_stack+0x3f/0x60 [ 170.924953][ T11] __kasan_record_aux_stack+0xac/0xc0 [ 170.930365][ T11] call_rcu+0x167/0xa70 [ 170.934620][ T11] pppol2tp_release+0x24b/0x350 [ 170.939521][ T11] sock_close+0xbc/0x240 [ 170.943797][ T11] __fput+0x406/0x8b0 [ 170.947791][ T11] task_work_run+0x24f/0x310 [ 170.952392][ T11] syscall_exit_to_user_mode+0x168/0x370 [ 170.958062][ T11] do_syscall_64+0x100/0x230 [ 170.962679][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.968680][ T11] [ 170.971093][ T11] The buggy address belongs to the object at ffff88801ff3c000 [ 170.971093][ T11] which belongs to the cache kmalloc-1k of size 1024 [ 170.985173][ T11] The buggy address is located 184 bytes inside of [ 170.985173][ T11] freed 1024-byte region [ffff88801ff3c000, ffff88801ff3c400) [ 170.999169][ T11] [ 171.001504][ T11] The buggy address belongs to the physical page: [ 171.008608][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ff38 [ 171.017511][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 171.026053][ T11] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 171.033622][ T11] page_type: 0xffffefff(slab) [ 171.038321][ T11] raw: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 171.046904][ T11] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 171.055511][ T11] head: 00fff00000000040 ffff888015041dc0 dead000000000122 0000000000000000 [ 171.064221][ T11] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 171.073098][ T11] head: 00fff00000000003 ffffea00007fce01 ffffffffffffffff 0000000000000000 [ 171.082232][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 171.090920][ T11] page dumped because: kasan: bad access detected [ 171.097365][ T11] page_owner tracks the page as allocated [ 171.103468][ T11] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 62, tgid 62 (kworker/u8:4), ts 170500836332, free_ts 170485857715 [ 171.125850][ T11] post_alloc_hook+0x1f3/0x230 [ 171.130737][ T11] get_page_from_freelist+0x2e43/0x2f00 [ 171.136296][ T11] __alloc_pages_noprof+0x256/0x6c0 [ 171.141608][ T11] alloc_slab_page+0x5f/0x120 [ 171.146303][ T11] allocate_slab+0x5a/0x2f0 [ 171.150856][ T11] ___slab_alloc+0xcd1/0x14b0 [ 171.155554][ T11] __slab_alloc+0x58/0xa0 [ 171.159975][ T11] kmalloc_node_track_caller_noprof+0x281/0x440 [ 171.166236][ T11] kmalloc_reserve+0x111/0x2a0 [ 171.171071][ T11] __alloc_skb+0x1f3/0x440 [ 171.175685][ T11] inet6_rt_notify+0xdf/0x290 [ 171.180676][ T11] fib6_add+0x1e33/0x4430 [ 171.185030][ T11] ip6_ins_rt+0x106/0x170 [ 171.189502][ T11] __ipv6_ifa_notify+0x5d2/0x1230 [ 171.194561][ T11] addrconf_dad_completed+0x181/0xcd0 [ 171.199964][ T11] addrconf_dad_work+0xdc2/0x16f0 [ 171.205018][ T11] page last free pid 5306 tgid 5306 stack trace: [ 171.211383][ T11] free_unref_page+0xd22/0xea0 [ 171.216163][ T11] __put_partials+0xeb/0x130 [ 171.220752][ T11] put_cpu_partial+0x17c/0x250 [ 171.225539][ T11] __slab_free+0x2ea/0x3d0 [ 171.229962][ T11] qlist_free_all+0x9e/0x140 [ 171.234560][ T11] kasan_quarantine_reduce+0x14f/0x170 [ 171.240043][ T11] __kasan_slab_alloc+0x23/0x80 [ 171.244919][ T11] kmem_cache_alloc_noprof+0x135/0x2a0 [ 171.250391][ T11] __pmd_alloc+0x110/0x630 [ 171.254921][ T11] handle_mm_fault+0xf4c/0x1ba0 [ 171.259880][ T11] exc_page_fault+0x459/0x8c0 [ 171.264558][ T11] asm_exc_page_fault+0x26/0x30 [ 171.269423][ T11] [ 171.271743][ T11] Memory state around the buggy address: [ 171.277364][ T11] ffff88801ff3bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 171.285508][ T11] ffff88801ff3c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.293593][ T11] >ffff88801ff3c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.301668][ T11] ^ [ 171.307572][ T11] ffff88801ff3c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.315757][ T11] ffff88801ff3c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.323828][ T11] ================================================================== [ 171.332138][ T11] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.339331][ T11] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 171.349595][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.359686][ T11] Workqueue: l2tp l2tp_tunnel_del_work [ 171.365366][ T11] Call Trace: [ 171.368660][ T11] <TASK> [ 171.371597][ T11] dump_stack_lvl+0x241/0x360 [ 171.376296][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.381517][ T11] ? __pfx__printk+0x10/0x10 [ 171.386146][ T11] ? vscnprintf+0x5d/0x90 [ 171.390507][ T11] panic+0x349/0x860 [ 171.394434][ T11] ? check_panic_on_warn+0x21/0xb0 [ 171.399578][ T11] ? __pfx_panic+0x10/0x10 [ 171.404026][ T11] ? mark_lock+0x9a/0x350 [ 171.408371][ T11] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 171.414364][ T11] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 171.420274][ T11] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.426632][ T11] ? print_report+0x502/0x550 [ 171.431321][ T11] check_panic_on_warn+0x86/0xb0 [ 171.436284][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 171.441587][ T11] end_report+0x77/0x160 [ 171.445851][ T11] kasan_report+0x154/0x180 [ 171.450376][ T11] ? l2tp_tunnel_del_work+0xe5/0x330 [ 171.455674][ T11] l2tp_tunnel_del_work+0xe5/0x330 [ 171.460815][ T11] ? process_scheduled_works+0x945/0x1830 [ 171.466577][ T11] process_scheduled_works+0xa2c/0x1830 [ 171.472499][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.478531][ T11] ? assign_work+0x364/0x3d0 [ 171.483177][ T11] worker_thread+0x86d/0xd70 [ 171.487782][ T11] ? __kthread_parkme+0x169/0x1d0 [ 171.492831][ T11] ? __pfx_worker_thread+0x10/0x10 [ 171.497976][ T11] kthread+0x2f0/0x390 [ 171.502091][ T11] ? __pfx_worker_thread+0x10/0x10 [ 171.507241][ T11] ? __pfx_kthread+0x10/0x10 [ 171.511955][ T11] ret_from_fork+0x4b/0x80 [ 171.516494][ T11] ? __pfx_kthread+0x10/0x10 [ 171.521120][ T11] ret_from_fork_asm+0x1a/0x30 [ 171.526375][ T11] </TASK> [ 171.529676][ T11] Kernel Offset: disabled [ 171.534080][ T11] Rebooting in 86400 seconds..