Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
2026/11/08 09:22:48 parsed 1 programs
2026/11/08 09:22:48 serving rpc on tcp://38009
[ 24.725146][ T28] audit: type=1400 audit(1794129768.266:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.745945][ T28] audit: type=1400 audit(1794129768.266:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.511207][ T28] audit: type=1400 audit(1794129769.056:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.512288][ T301] cgroup: Unknown subsys name 'net'
[ 25.533873][ T28] audit: type=1400 audit(1794129769.056:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.561149][ T28] audit: type=1400 audit(1794129769.086:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.561327][ T301] cgroup: Unknown subsys name 'devices'
[ 25.707586][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 25.713266][ T301] cgroup: Unknown subsys name 'rlimit'
[ 25.821094][ T28] audit: type=1400 audit(1794129769.366:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.844329][ T28] audit: type=1400 audit(1794129769.366:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.852443][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 25.864896][ T28] audit: type=1400 audit(1794129769.366:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.893543][ T28] audit: type=1400 audit(1794129769.366:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 25.913981][ T28] audit: type=1400 audit(1794129769.366:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.944201][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.646399][ T313] request_module fs-gadgetfs succeeded, but still no fs?
[ 26.772724][ T316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.796522][ T316] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.804005][ T316] device bridge_slave_0 entered promiscuous mode
[ 26.842523][ T316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.854721][ T316] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.868942][ T316] device bridge_slave_1 entered promiscuous mode
[ 27.083215][ T316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.090318][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.097621][ T316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.104653][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.197065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.205238][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.216132][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.235635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.243891][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.250974][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.259497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.267808][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.274858][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.282439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.290487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.303291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.336165][ T316] device veth0_vlan entered promiscuous mode
[ 27.342425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.352286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.359928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.375985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.385387][ T316] device veth1_macvtap entered promiscuous mode
2026/11/08 09:22:50 executed programs: 0
[ 27.395402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.405216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.521251][ T316] syz-executor (316) used greatest stack depth: 21848 bytes left
[ 27.533805][ T371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.567401][ T371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.574874][ T371] device bridge_slave_0 entered promiscuous mode
[ 27.597902][ T371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.604950][ T371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.612410][ T371] device bridge_slave_1 entered promiscuous mode
[ 27.732530][ T381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.739716][ T381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.747545][ T381] device bridge_slave_0 entered promiscuous mode
[ 27.755772][ T381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.763108][ T381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.770495][ T381] device bridge_slave_1 entered promiscuous mode
[ 27.813577][ T382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.820724][ T382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.828267][ T382] device bridge_slave_0 entered promiscuous mode
[ 27.851825][ T382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.859040][ T382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.866443][ T382] device bridge_slave_1 entered promiscuous mode
[ 27.904170][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.911258][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.918638][ T379] device bridge_slave_0 entered promiscuous mode
[ 27.935545][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.942782][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.950235][ T379] device bridge_slave_1 entered promiscuous mode
[ 27.978655][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.985717][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.993136][ T380] device bridge_slave_0 entered promiscuous mode
[ 28.018300][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.025338][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.032843][ T380] device bridge_slave_1 entered promiscuous mode
[ 28.053415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.061014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.156495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.164760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.173081][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.180112][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.188031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.196345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.204414][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.211438][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.218803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.264401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.272724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.294958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.302729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.339136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.347776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.356244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.364502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.373054][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.380107][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.387551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.395774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.403989][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.411016][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.418490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.426696][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.458000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.467516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.475570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.483237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.490944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.499271][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.506308][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.513618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.521933][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.529011][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.536513][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.544629][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.551669][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.559013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.567181][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.574201][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.581590][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.589574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.597218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.616664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.624953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.633133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.656927][ T381] device veth0_vlan entered promiscuous mode
[ 28.663582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.672223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.679874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.687805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.695691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.703824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.711538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.719771][ T371] device veth0_vlan entered promiscuous mode
[ 28.740022][ T381] device veth1_macvtap entered promiscuous mode
[ 28.747071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.754743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.763115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.771300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.779664][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.786708][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.794195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.804943][ T371] device veth1_macvtap entered promiscuous mode
[ 28.828096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.836388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.844447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 28.853144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.861913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.870486][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.877533][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.885071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.893401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.901887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 28.910323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.925966][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.934036][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.943549][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.951808][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.969515][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.978565][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.989782][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.998189][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.013430][ T382] device veth0_vlan entered promiscuous mode
[ 29.025124][ T379] device veth0_vlan entered promiscuous mode
[ 29.034764][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.045290][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.053840][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.062169][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.070459][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.078743][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.086816][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.094961][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.120172][ T398] ==================================================================
[ 29.123355][ T382] device veth1_macvtap entered promiscuous mode
[ 29.128346][ T398] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.141543][ T380] device veth0_vlan entered promiscuous mode
[ 29.142628][ T398] Read of size 4 at addr ffff888121f3e800 by task syz.4.21/398
[ 29.149060][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.156103][ T398]
[ 29.156110][ T398] CPU: 0 PID: 398 Comm: syz.4.21 Not tainted syzkaller #0
[ 29.156132][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 29.156152][ T398] Call Trace:
[ 29.163993][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.165622][ T398]
[ 29.173023][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.182731][ T398] __dump_stack+0x21/0x24
[ 29.182753][ T398] dump_stack_lvl+0x110/0x170
[ 29.182766][ T398] ? __cfi_dump_stack_lvl+0x8/0x8
[ 29.182780][ T398] ? _raw_spin_lock_bh+0x94/0xf0
[ 29.182798][ T398] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.182814][ T398] print_address_description+0x71/0x200
[ 29.182837][ T398] print_report+0x4a/0x60
[ 29.182856][ T398] kasan_report+0x122/0x150
[ 29.182875][ T398] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.187560][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.193297][ T398] __asan_report_load4_noabort+0x14/0x20
[ 29.196488][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.203380][ T398] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.207936][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.212330][ T398] pppol2tp_release+0x150/0x2b0
[ 29.217580][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.222232][ T398] sock_close+0xc9/0x220
[ 29.228626][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.233437][ T398] ? __cfi_sock_close+0x10/0x10
[ 29.238014][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.242225][ T398] __fput+0x1fd/0x8f0
[ 29.248176][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.255079][ T398] ____fput+0x15/0x20
[ 29.260954][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.268725][ T398] task_work_run+0x1e1/0x250
[ 29.268747][ T398] ? __cfi_task_work_run+0x10/0x10
[ 29.268765][ T398] ? free_nsproxy+0x21f/0x270
[ 29.279452][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.282320][ T398] do_exit+0xb0d/0x29f0
[ 29.287430][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.295004][ T398] ? __cfi_do_exit+0x10/0x10
[ 29.379655][ T398] ? xfd_validate_state+0x70/0x150
[ 29.384757][ T398] ? __kasan_check_write+0x14/0x20
[ 29.389852][ T398] __x64_sys_exit+0x40/0x40
[ 29.394348][ T398] x64_sys_call+0x67/0x9a0
[ 29.398745][ T398] do_syscall_64+0x4c/0xa0
[ 29.403140][ T398] ? clear_bhb_loop+0x30/0x80
[ 29.407801][ T398] ? clear_bhb_loop+0x30/0x80
[ 29.412462][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.418336][ T398] RIP: 0033:0x7f8dbd59fb19
[ 29.422744][ T398] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 29.429736][ T398] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 29.438139][ T398] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 29.446094][ T398] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 29.454043][ T398] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 29.461992][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 29.469943][ T398] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 29.477898][ T398]
[ 29.480901][ T398]
[ 29.483201][ T398] Allocated by task 397:
[ 29.487417][ T398] kasan_set_track+0x4b/0x70
[ 29.491991][ T398] kasan_save_alloc_info+0x1f/0x30
[ 29.497086][ T398] __kasan_kmalloc+0x95/0xb0
[ 29.501656][ T398] __kmalloc+0xb4/0x1e0
[ 29.505793][ T398] l2tp_session_create+0x38/0xbd0
[ 29.510802][ T398] pppol2tp_connect+0xbf5/0x1640
[ 29.515738][ T398] __sys_connect+0x3da/0x460
[ 29.520310][ T398] __x64_sys_connect+0x7a/0x90
[ 29.525055][ T398] x64_sys_call+0x88d/0x9a0
[ 29.529553][ T398] do_syscall_64+0x4c/0xa0
[ 29.533950][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.539825][ T398]
[ 29.542158][ T398] Freed by task 43:
[ 29.545947][ T398] kasan_set_track+0x4b/0x70
[ 29.550536][ T398] kasan_save_free_info+0x2b/0x40
[ 29.555540][ T398] ____kasan_slab_free+0x132/0x180
[ 29.560648][ T398] __kasan_slab_free+0x11/0x20
[ 29.565393][ T398] slab_free_freelist_hook+0xc2/0x190
[ 29.570742][ T398] __kmem_cache_free+0xb7/0x1b0
[ 29.575581][ T398] kfree+0x6f/0xf0
[ 29.579280][ T398] l2tp_session_put+0xaf/0x1a0
[ 29.584022][ T398] l2tp_session_delete+0x3df/0x4d0
[ 29.589115][ T398] l2tp_tunnel_del_work+0x199/0x410
[ 29.594295][ T398] process_one_work+0x717/0xc30
[ 29.599122][ T398] worker_thread+0xa4d/0x11d0
[ 29.603780][ T398] kthread+0x281/0x320
[ 29.607825][ T398] ret_from_fork+0x1f/0x30
[ 29.612225][ T398]
[ 29.614526][ T398] The buggy address belongs to the object at ffff888121f3e800
[ 29.614526][ T398] which belongs to the cache kmalloc-512 of size 512
[ 29.628553][ T398] The buggy address is located 0 bytes inside of
[ 29.628553][ T398] 512-byte region [ffff888121f3e800, ffff888121f3ea00)
[ 29.641633][ T398]
[ 29.643937][ T398] The buggy address belongs to the physical page:
[ 29.650320][ T398] page:ffffea000487cf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121f3c
[ 29.660565][ T398] head:ffffea000487cf00 order:2 compound_mapcount:0 compound_pincount:0
[ 29.668870][ T398] flags: 0x4000000000010200(slab|head|zone=1)
[ 29.674976][ T398] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 29.683551][ T398] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 29.692112][ T398] page dumped because: kasan: bad access detected
[ 29.698520][ T398] page_owner tracks the page as allocated
[ 29.704219][ T398] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 19, tgid 19 (kworker/0:1), ts 28960487308, free_ts 27472171906
[ 29.724429][ T398] post_alloc_hook+0x1f5/0x210
[ 29.729184][ T398] prep_new_page+0x1c/0x110
[ 29.733673][ T398] get_page_from_freelist+0x2ca9/0x2d20
[ 29.739213][ T398] __alloc_pages+0x1fa/0x610
[ 29.743790][ T398] alloc_slab_page+0x6e/0xf0
[ 29.748370][ T398] new_slab+0x98/0x3e0
[ 29.752418][ T398] ___slab_alloc+0x70f/0xb70
[ 29.756991][ T398] __slab_alloc+0x5e/0xa0
[ 29.761298][ T398] __kmem_cache_alloc_node+0x204/0x2d0
[ 29.766740][ T398] __kmalloc+0xa4/0x1e0
[ 29.770877][ T398] ___neigh_create+0x6e3/0x1db0
[ 29.775708][ T398] __neigh_create+0x31/0x40
[ 29.780193][ T398] ip6_finish_output2+0xaaf/0x18b0
[ 29.785287][ T398] ip6_finish_output+0x60b/0xbe0
[ 29.790211][ T398] ip6_output+0x1fa/0x410
[ 29.794528][ T398] ndisc_send_skb+0x7c8/0xcd0
[ 29.799191][ T398] page last free stack trace:
[ 29.803841][ T398] free_unref_page_prepare+0x81b/0x820
[ 29.809287][ T398] free_unref_page+0x93/0x530
[ 29.813951][ T398] __free_pages+0x67/0x100
[ 29.818349][ T398] free_pages+0x82/0x90
[ 29.822492][ T398] kasan_depopulate_vmalloc_pte+0x6b/0x90
[ 29.828193][ T398] __apply_to_page_range+0x8db/0xc80
[ 29.833477][ T398] apply_to_existing_page_range+0x38/0x50
[ 29.839176][ T398] kasan_release_vmalloc+0x97/0xb0
[ 29.844274][ T398] __purge_vmap_area_lazy+0xf09/0x1870
[ 29.849713][ T398] drain_vmap_area_work+0x3e/0xd0
[ 29.854720][ T398] process_one_work+0x717/0xc30
[ 29.859552][ T398] worker_thread+0xa4d/0x11d0
[ 29.864211][ T398] kthread+0x281/0x320
[ 29.868259][ T398] ret_from_fork+0x1f/0x30
[ 29.872659][ T398]
[ 29.874964][ T398] Memory state around the buggy address:
[ 29.880572][ T398] ffff888121f3e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.888618][ T398] ffff888121f3e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.896697][ T398] >ffff888121f3e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.904738][ T398] ^
[ 29.908783][ T398] ffff888121f3e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.916823][ T398] ffff888121f3e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.924859][ T398] ==================================================================
[ 29.944805][ T28] kauditd_printk_skb: 35 callbacks suppressed
[ 29.944817][ T28] audit: type=1400 audit(1794129773.486:109): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 29.951497][ T398] Disabling lock debugging due to kernel taint
[ 29.973209][ T28] audit: type=1400 audit(1794129773.486:110): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 29.983896][ T398] ------------[ cut here ]------------
[ 30.001851][ T28] audit: type=1400 audit(1794129773.486:111): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.005697][ T398] WARNING: CPU: 0 PID: 398 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.027419][ T28] audit: type=1400 audit(1794129773.486:112): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.037009][ T398] Modules linked in:
[ 30.057480][ T28] audit: type=1400 audit(1794129773.486:113): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.061351][ T398] CPU: 0 PID: 398 Comm: syz.4.21 Tainted: G B syzkaller #0
[ 30.081825][ T28] audit: type=1400 audit(1794129773.486:114): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.090393][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 30.113496][ T28] audit: type=1400 audit(1794129773.486:115): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.123437][ T398] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.152415][ T398] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 30.172055][ T398] RSP: 0018:ffffc90000a27b90 EFLAGS: 00010293
[ 30.178194][ T398] RAX: ffffffff849cba07 RBX: ffff8881162f3000 RCX: ffff8881162ea880
[ 30.186179][ T398] RDX: 0000000000000000 RSI: 000000002df5b480 RDI: 000000000c04eb7d
[ 30.194146][ T398] RBP: ffffc90000a27bb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
[ 30.202137][ T398] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: dffffc0000000000
[ 30.210142][ T398] R13: dffffc0000000000 R14: 000000002df5b480 R15: ffff888121f3e800
[ 30.218124][ T398] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.227120][ T398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.233684][ T398] CR2: 00007f8dbe358060 CR3: 000000012d3de000 CR4: 00000000003506b0
[ 30.241664][ T398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.249645][ T398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.257631][ T398] Call Trace:
[ 30.260905][ T398]
[ 30.263834][ T398] pppol2tp_release+0x150/0x2b0
[ 30.268740][ T398] sock_close+0xc9/0x220
[ 30.272988][ T398] ? __cfi_sock_close+0x10/0x10
[ 30.277883][ T398] __fput+0x1fd/0x8f0
[ 30.281873][ T398] ____fput+0x15/0x20
[ 30.285863][ T398] task_work_run+0x1e1/0x250
[ 30.290515][ T398] ? __cfi_task_work_run+0x10/0x10
[ 30.295612][ T398] ? free_nsproxy+0x21f/0x270
[ 30.300313][ T398] do_exit+0xb0d/0x29f0
[ 30.304479][ T398] ? __cfi_do_exit+0x10/0x10
[ 30.309147][ T398] ? xfd_validate_state+0x70/0x150
[ 30.314265][ T398] ? __kasan_check_write+0x14/0x20
[ 30.319436][ T398] __x64_sys_exit+0x40/0x40
[ 30.323945][ T398] x64_sys_call+0x67/0x9a0
[ 30.328411][ T398] do_syscall_64+0x4c/0xa0
[ 30.332829][ T398] ? clear_bhb_loop+0x30/0x80
[ 30.337564][ T398] ? clear_bhb_loop+0x30/0x80
[ 30.342245][ T398] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.348197][ T398] RIP: 0033:0x7f8dbd59fb19
[ 30.352609][ T398] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 30.359640][ T398] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 30.368076][ T398] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 30.376090][ T398] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.384061][ T398] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 30.392080][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 30.400089][ T398] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 30.408118][ T398]
[ 30.411134][ T398] ---[ end trace 0000000000000000 ]---
[ 30.425230][ T380] device veth1_macvtap entered promiscuous mode
[ 30.443445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.452136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.460573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.470317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.478748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.486984][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.495207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.524411][ T379] device veth1_macvtap entered promiscuous mode
[ 30.541859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.554376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.566267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.579446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.587937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.598895][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.609924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.641966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.650880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.685914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.694277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.724823][ T8] device bridge_slave_1 left promiscuous mode
[ 30.735164][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.743075][ T8] device bridge_slave_0 left promiscuous mode
[ 30.762690][ T518] ------------[ cut here ]------------
[ 30.768216][ T518] WARNING: CPU: 0 PID: 518 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.778264][ T518] Modules linked in:
[ 30.782154][ T518] CPU: 0 PID: 518 Comm: syz.6.79 Tainted: G B W syzkaller #0
[ 30.790774][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 30.800860][ T518] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.801702][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.807243][ T518] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 30.833893][ T518] RSP: 0018:ffffc90000ad7b90 EFLAGS: 00010293
[ 30.840021][ T518] RAX: ffffffff849cba07 RBX: ffff888118495000 RCX: ffff8881184fe540
[ 30.848036][ T518] RDX: 0000000000000000 RSI: 000000002df4ed00 RDI: 000000000c04eb7d
[ 30.856063][ T518] RBP: ffffc90000ad7bb0 R08: ffff888118495083 R09: 1ffff11023092a10
[ 30.864059][ T518] R10: dffffc0000000000 R11: ffffed1023092a11 R12: dffffc0000000000
[ 30.872098][ T518] R13: dffffc0000000000 R14: 000000002df4ed00 R15: ffff88810fd7ec00
[ 30.880123][ T518] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.889132][ T518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.895718][ T518] CR2: 0000555565531908 CR3: 000000000700f000 CR4: 00000000003506b0
[ 30.903786][ T518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.911817][ T518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.919833][ T518] Call Trace:
[ 30.923114][ T518]
[ 30.926076][ T518] pppol2tp_release+0x150/0x2b0
[ 30.930936][ T518] sock_close+0xc9/0x220
[ 30.935188][ T518] ? __cfi_sock_close+0x10/0x10
[ 30.940083][ T518] __fput+0x1fd/0x8f0
[ 30.944250][ T518] ____fput+0x15/0x20
[ 30.948305][ T518] task_work_run+0x1e1/0x250
[ 30.952910][ T518] ? __cfi_task_work_run+0x10/0x10
[ 30.958062][ T518] ? free_nsproxy+0x21f/0x270
[ 30.962749][ T518] do_exit+0xb0d/0x29f0
[ 30.966935][ T518] ? __cfi_do_exit+0x10/0x10
[ 30.971541][ T518] ? xfd_validate_state+0x70/0x150
[ 30.976815][ T518] ? __kasan_check_write+0x14/0x20
[ 30.981934][ T518] __x64_sys_exit+0x40/0x40
[ 30.986496][ T518] x64_sys_call+0x67/0x9a0
[ 30.990917][ T518] do_syscall_64+0x4c/0xa0
[ 30.995335][ T518] ? clear_bhb_loop+0x30/0x80
[ 31.000065][ T518] ? clear_bhb_loop+0x30/0x80
[ 31.004742][ T518] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.010690][ T518] RIP: 0033:0x7fc6ad39fb19
[ 31.015111][ T518] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 31.022152][ T518] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.030613][ T518] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 31.038625][ T518] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.046642][ T518] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 31.054616][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.062617][ T518] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 31.070635][ T518]
[ 31.073656][ T518] ---[ end trace 0000000000000000 ]---
[ 31.080360][ T8] device veth1_macvtap left promiscuous mode
[ 31.088415][ T597] ------------[ cut here ]------------
[ 31.093899][ T597] WARNING: CPU: 1 PID: 597 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.095617][ T8] device veth0_vlan left promiscuous mode
[ 31.103974][ T597] Modules linked in:
[ 31.111543][ T636] ------------[ cut here ]------------
[ 31.113657][ T597] CPU: 1 PID: 597 Comm: syz.4.118 Tainted: G B W syzkaller #0
[ 31.119114][ T636] WARNING: CPU: 0 PID: 636 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.119145][ T636] Modules linked in:
[ 31.119153][ T636] CPU: 0 PID: 636 Comm: syz.3.134 Tainted: G B W syzkaller #0
[ 31.119170][ T636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 31.119178][ T636] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.119196][ T636] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 31.119209][ T636] RSP: 0018:ffffc90001157b90 EFLAGS: 00010293
[ 31.119223][ T636] RAX: ffffffff849cba07 RBX: ffff8881196e9000 RCX: ffff888118f4d100
[ 31.119236][ T636] RDX: 0000000000000000 RSI: 0000000017168c00 RDI: 000000000c04eb7d
[ 31.119246][ T636] RBP: ffffc90001157bb0 R08: ffff8881196e9083 R09: 1ffff110232dd210
[ 31.119258][ T636] R10: dffffc0000000000 R11: ffffed10232dd211 R12: dffffc0000000000
[ 31.119270][ T636] R13: dffffc0000000000 R14: 0000000017168c00 R15: ffff888117168000
[ 31.119282][ T636] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.119296][ T636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.128085][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 31.137945][ T636] CR2: 00007fc6ad35ac30 CR3: 000000000700f000 CR4: 00000000003506b0
[ 31.137970][ T636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.137980][ T636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.137991][ T636] Call Trace:
[ 31.137996][ T636]
[ 31.138003][ T636] pppol2tp_release+0x150/0x2b0
[ 31.138027][ T636] sock_close+0xc9/0x220
[ 31.138045][ T636] ? __cfi_sock_close+0x10/0x10
[ 31.138063][ T636] __fput+0x1fd/0x8f0
[ 31.141937][ T597] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.150606][ T636] ____fput+0x15/0x20
[ 31.150626][ T636] task_work_run+0x1e1/0x250
[ 31.150646][ T636] ? __cfi_task_work_run+0x10/0x10
[ 31.150665][ T636] ? free_nsproxy+0x21f/0x270
[ 31.150687][ T636] do_exit+0xb0d/0x29f0
[ 31.150709][ T636] ? __cfi_do_exit+0x10/0x10
[ 31.150730][ T636] ? xfd_validate_state+0x70/0x150
[ 31.160974][ T597] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 31.167124][ T636] ? __kasan_check_write+0x14/0x20
[ 31.167145][ T636] __x64_sys_exit+0x40/0x40
[ 31.167164][ T636] x64_sys_call+0x67/0x9a0
[ 31.167181][ T636] do_syscall_64+0x4c/0xa0
[ 31.167196][ T636] ? clear_bhb_loop+0x30/0x80
[ 31.167216][ T636] ? clear_bhb_loop+0x30/0x80
[ 31.167234][ T636] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.167253][ T636] RIP: 0033:0x7ff3ff39fb19
[ 31.167266][ T636] Code: Unable to access opcode bytes at 0x7ff3ff39faef.
[ 31.167274][ T636] RSP: 002b:00007fffb073b8a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.167292][ T636] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff3ff39fb19
[ 31.167304][ T636] RDX: 00007ff3ff35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.167314][ T636] RBP: 00007ff3ff437b70 R08: 0000000000000000 R09: 0000000000000058
[ 31.187045][ T597] RSP: 0018:ffffc900014c7b90 EFLAGS: 00010293
[ 31.192976][ T636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.201076][ T597]
[ 31.209012][ T636] R13: 00007ff3ff625fac R14: 00007ff3ff625fa0 R15: 00007ff3ff625fa0
[ 31.209032][ T636]
[ 31.209038][ T636] ---[ end trace 0000000000000000 ]---
[ 31.210069][ T638] ------------[ cut here ]------------
[ 31.217305][ T597] RAX: ffffffff849cba07 RBX: ffff888118fa1000 RCX: ffff888118f19440
[ 31.225168][ T638] WARNING: CPU: 0 PID: 638 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.225197][ T638] Modules linked in:
[ 31.225207][ T638] CPU: 0 PID: 638 Comm: syz.5.136 Tainted: G B W syzkaller #0
[ 31.225225][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 31.225233][ T638] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.225250][ T638] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 31.225263][ T638] RSP: 0018:ffffc9000140fb90 EFLAGS: 00010293
[ 31.225278][ T638] RAX: ffffffff849cba07 RBX: ffff8881196ea000 RCX: ffff888118f48000
[ 31.225290][ T638] RDX: 0000000000000000 RSI: 000000002de7bf00 RDI: 000000000c04eb7d
[ 31.225302][ T638] RBP: ffffc9000140fbb0 R08: ffff8881196ea083 R09: 1ffff110232dd410
[ 31.225314][ T638] R10: dffffc0000000000 R11: ffffed10232dd411 R12: dffffc0000000000
[ 31.233385][ T597] RDX: 0000000000000000 RSI: 000000002de95940 RDI: 000000000c04eb7d
[ 31.242346][ T638] R13: dffffc0000000000 R14: 000000002de7bf00 R15: ffff888117168c00
[ 31.242362][ T638] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.242377][ T638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.242390][ T638] CR2: 00007fc6ad35ac30 CR3: 000000000700f000 CR4: 00000000003506b0
[ 31.242405][ T638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.242415][ T638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.242426][ T638] Call Trace:
[ 31.242431][ T638]
[ 31.242438][ T638] pppol2tp_release+0x150/0x2b0
[ 31.249125][ T597] RBP: ffffc900014c7bb0 R08: ffff888118fa1083 R09: 1ffff110231f4210
[ 31.259123][ T638] sock_close+0xc9/0x220
[ 31.259146][ T638] ? __cfi_sock_close+0x10/0x10
[ 31.259163][ T638] __fput+0x1fd/0x8f0
[ 31.259195][ T638] ____fput+0x15/0x20
[ 31.267273][ T597] R10: dffffc0000000000 R11: ffffed10231f4211 R12: dffffc0000000000
[ 31.275136][ T638] task_work_run+0x1e1/0x250
[ 31.283203][ T597] R13: dffffc0000000000 R14: 000000002de95940 R15: ffff88811751c400
[ 31.286399][ T638] ? __cfi_task_work_run+0x10/0x10
[ 31.286421][ T638] ? free_nsproxy+0x21f/0x270
[ 31.286443][ T638] do_exit+0xb0d/0x29f0
[ 31.286466][ T638] ? __cfi_do_exit+0x10/0x10
[ 31.286485][ T638] ? xfd_validate_state+0x70/0x150
[ 31.286506][ T638] ? __kasan_check_write+0x14/0x20
[ 31.289415][ T597] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.294240][ T638] __x64_sys_exit+0x40/0x40
[ 31.298794][ T597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.303322][ T638] x64_sys_call+0x67/0x9a0
[ 31.307416][ T597] CR2: 00007fc6ad35fad0 CR3: 000000000700f000 CR4: 00000000003506a0
[ 31.313599][ T638] do_syscall_64+0x4c/0xa0
[ 31.317671][ T597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.322133][ T638] ? clear_bhb_loop+0x30/0x80
[ 31.327372][ T597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.331879][ T638] ? clear_bhb_loop+0x30/0x80
[ 31.336159][ T597] Call Trace:
[ 31.340593][ T638] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.345675][ T597]
[ 31.345682][ T597] pppol2tp_release+0x150/0x2b0
[ 31.365288][ T638] RIP: 0033:0x7f42ae59fb19
[ 31.365305][ T638] Code: Unable to access opcode bytes at 0x7f42ae59faef.
[ 31.365313][ T638] RSP: 002b:00007ffe38721298 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.365331][ T638] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42ae59fb19
[ 31.365342][ T638] RDX: 00007f42ae55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.365353][ T638] RBP: 00007f42ae637b70 R08: 0000000000000000 R09: 0000000000000058
[ 31.365363][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.365374][ T638] R13: 00007f42ae825fac R14: 00007f42ae825fa0 R15: 00007f42ae825fa0
[ 31.365389][ T638]
[ 31.365394][ T638] ---[ end trace 0000000000000000 ]---
[ 31.877534][ T597] sock_close+0xc9/0x220
[ 31.881765][ T597] ? __cfi_sock_close+0x10/0x10
[ 31.886709][ T597] __fput+0x1fd/0x8f0
[ 31.890690][ T597] ____fput+0x15/0x20
[ 31.894655][ T597] task_work_run+0x1e1/0x250
[ 31.899414][ T597] ? __cfi_task_work_run+0x10/0x10
[ 31.904545][ T597] ? free_nsproxy+0x21f/0x270
[ 31.909301][ T597] do_exit+0xb0d/0x29f0
[ 31.913458][ T597] ? __cfi_do_exit+0x10/0x10
[ 31.918148][ T597] ? xfd_validate_state+0x70/0x150
[ 31.923262][ T597] ? __kasan_check_write+0x14/0x20
[ 31.928449][ T597] __x64_sys_exit+0x40/0x40
[ 31.932957][ T597] x64_sys_call+0x67/0x9a0
[ 31.937575][ T597] do_syscall_64+0x4c/0xa0
[ 31.941979][ T597] ? clear_bhb_loop+0x30/0x80
[ 31.946729][ T597] ? clear_bhb_loop+0x30/0x80
[ 31.951421][ T597] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.957409][ T597] RIP: 0033:0x7f8dbd59fb19
[ 31.961838][ T597] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 31.968954][ T597] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.977423][ T597] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 31.985382][ T597] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.993431][ T597] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 32.001582][ T597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.009680][ T597] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 32.017920][ T597]
[ 32.020930][ T597] ---[ end trace 0000000000000000 ]---
[ 32.191743][ T737] ------------[ cut here ]------------
[ 32.197412][ T737] WARNING: CPU: 0 PID: 737 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.207590][ T737] Modules linked in:
[ 32.211484][ T737] CPU: 0 PID: 737 Comm: syz.6.171 Tainted: G B W syzkaller #0
[ 32.220317][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 32.230430][ T737] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.236813][ T737] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 32.256597][ T737] RSP: 0018:ffffc9000247fb90 EFLAGS: 00010293
[ 32.262695][ T737] RAX: ffffffff849cba07 RBX: ffff88811a27f000 RCX: ffff8881151e0000
[ 32.270719][ T737] RDX: 0000000000000000 RSI: 000000002101f888 RDI: 000000000c04eb7d
[ 32.278720][ T737] RBP: ffffc9000247fbb0 R08: ffff88811a27f083 R09: 1ffff1102344fe10
[ 32.286767][ T737] R10: dffffc0000000000 R11: ffffed102344fe11 R12: dffffc0000000000
[ 32.294840][ T737] R13: dffffc0000000000 R14: 000000002101f888 R15: ffff88811752e000
[ 32.303205][ T737] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.312157][ T737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.318778][ T737] CR2: 00007f0968558060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 32.326825][ T737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.334811][ T737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.343074][ T737] Call Trace:
[ 32.346396][ T737]
[ 32.349374][ T737] pppol2tp_release+0x150/0x2b0
[ 32.354239][ T737] sock_close+0xc9/0x220
[ 32.358538][ T737] ? __cfi_sock_close+0x10/0x10
[ 32.363394][ T737] __fput+0x1fd/0x8f0
[ 32.367417][ T737] ____fput+0x15/0x20
[ 32.371441][ T737] task_work_run+0x1e1/0x250
[ 32.376085][ T737] ? __cfi_task_work_run+0x10/0x10
[ 32.381195][ T737] ? free_nsproxy+0x21f/0x270
[ 32.385912][ T737] do_exit+0xb0d/0x29f0
[ 32.390078][ T737] ? __cfi_do_exit+0x10/0x10
[ 32.394677][ T737] ? xfd_validate_state+0x70/0x150
[ 32.399832][ T737] ? __kasan_check_write+0x14/0x20
[ 32.405036][ T737] __x64_sys_exit+0x40/0x40
[ 32.409594][ T737] x64_sys_call+0x67/0x9a0
[ 32.414008][ T737] do_syscall_64+0x4c/0xa0
[ 32.418457][ T737] ? clear_bhb_loop+0x30/0x80
[ 32.423137][ T737] ? clear_bhb_loop+0x30/0x80
[ 32.427861][ T737] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.433760][ T737] RIP: 0033:0x7fc6ad39fb19
2026/11/08 09:22:56 executed programs: 250
[ 32.438303][ T737] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 32.445315][ T737] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.453783][ T737] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 32.461784][ T737] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.469807][ T737] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 32.477799][ T737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.485783][ T737] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 32.493831][ T737]
[ 32.497013][ T737] ---[ end trace 0000000000000000 ]---
[ 32.661328][ T909] ------------[ cut here ]------------
[ 32.663865][ T905] ------------[ cut here ]------------
[ 32.666933][ T909] WARNING: CPU: 0 PID: 909 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.672300][ T905] WARNING: CPU: 1 PID: 905 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.672325][ T905] Modules linked in:
[ 32.672335][ T905] CPU: 1 PID: 905 Comm: syz.3.266 Tainted: G B W syzkaller #0
[ 32.672352][ T905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 32.672361][ T905] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.672378][ T905] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 32.682432][ T909] Modules linked in:
[ 32.692320][ T905] RSP: 0018:ffffc900024a7b90 EFLAGS: 00010293
[ 32.692337][ T905] RAX: ffffffff849cba07 RBX: ffff88811bf65000 RCX: ffff88811c419440
[ 32.692348][ T905] RDX: 0000000000000000 RSI: 00000000182f7540 RDI: 000000000c04eb7d
[ 32.692360][ T905] RBP: ffffc900024a7bb0 R08: ffff88811bf65083 R09: 1ffff110237eca10
[ 32.692371][ T905] R10: dffffc0000000000 R11: ffffed10237eca11 R12: dffffc0000000000
[ 32.692384][ T905] R13: dffffc0000000000 R14: 00000000182f7540 R15: ffff88811b8d1400
[ 32.692396][ T905] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.692411][ T905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.692423][ T905] CR2: 00007f42ae827dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 32.696370][ T909]
[ 32.696377][ T909] CPU: 0 PID: 909 Comm: syz.5.270 Tainted: G B W syzkaller #0
[ 32.705043][ T905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.715193][ T909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 32.721450][ T905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.721463][ T905] Call Trace:
[ 32.721468][ T905]
[ 32.721474][ T905] pppol2tp_release+0x150/0x2b0
[ 32.721510][ T905] sock_close+0xc9/0x220
[ 32.721527][ T905] ? __cfi_sock_close+0x10/0x10
[ 32.721545][ T905] __fput+0x1fd/0x8f0
[ 32.741312][ T909] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.741337][ T909] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 32.741349][ T909] RSP: 0018:ffffc900026ffb90 EFLAGS: 00010293
[ 32.745221][ T905] ____fput+0x15/0x20
[ 32.751392][ T909]
[ 32.759242][ T905] task_work_run+0x1e1/0x250
[ 32.759265][ T905] ? __cfi_task_work_run+0x10/0x10
[ 32.759285][ T905] ? free_nsproxy+0x21f/0x270
[ 32.767326][ T909] RAX: ffffffff849cba07 RBX: ffff88811bf62000 RCX: ffff88811c41e540
[ 32.775223][ T905] do_exit+0xb0d/0x29f0
[ 32.775248][ T905] ? __cfi_do_exit+0x10/0x10
[ 32.775280][ T905] ? xfd_validate_state+0x70/0x150
[ 32.775301][ T905] ? __kasan_check_write+0x14/0x20
[ 32.775318][ T905] __x64_sys_exit+0x40/0x40
[ 32.775338][ T905] x64_sys_call+0x67/0x9a0
[ 32.783408][ T909] RDX: 0000000000000000 RSI: 0000000015187000 RDI: 000000000c04eb7d
[ 32.791314][ T905] do_syscall_64+0x4c/0xa0
[ 32.800248][ T909] RBP: ffffc900026ffbb0 R08: ffff88811bf62083 R09: 1ffff110237ec410
[ 32.800261][ T909] R10: dffffc0000000000 R11: ffffed10237ec411 R12: dffffc0000000000
[ 32.800272][ T909] R13: dffffc0000000000 R14: 0000000015187000 R15: ffff88811b8d1800
[ 32.800283][ T909] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.800296][ T909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.800308][ T909] CR2: 00007f0968558060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 32.800323][ T909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.800338][ T909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.806919][ T905] ? clear_bhb_loop+0x30/0x80
[ 32.814857][ T909] Call Trace:
[ 32.814864][ T909]
[ 32.817293][ T905] ? clear_bhb_loop+0x30/0x80
[ 32.825833][ T909] pppol2tp_release+0x150/0x2b0
[ 32.833812][ T905] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.843938][ T909] sock_close+0xc9/0x220
[ 32.851817][ T905] RIP: 0033:0x7ff3ff39fb19
[ 32.855077][ T909] ? __cfi_sock_close+0x10/0x10
[ 32.858002][ T905] Code: Unable to access opcode bytes at 0x7ff3ff39faef.
[ 32.862826][ T909] __fput+0x1fd/0x8f0
[ 32.867082][ T905] RSP: 002b:00007fffb073b8a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.871916][ T909] ____fput+0x15/0x20
[ 32.875867][ T905] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff3ff39fb19
[ 32.875896][ T905] RDX: 00007ff3ff35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.882206][ T909] task_work_run+0x1e1/0x250
[ 32.901997][ T905] RBP: 00007ff3ff437b70 R08: 0000000000000000 R09: 0000000000000058
[ 32.907891][ T909] ? __cfi_task_work_run+0x10/0x10
[ 32.911845][ T905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.914152][ T909] ? free_nsproxy+0x21f/0x270
[ 32.918736][ T905] R13: 00007ff3ff625fac R14: 00007ff3ff625fa0 R15: 00007ff3ff625fa0
[ 32.923814][ T909] do_exit+0xb0d/0x29f0
[ 32.928497][ T905]
[ 32.928504][ T905] ---[ end trace 0000000000000000 ]---
[ 32.936464][ T909] ? __cfi_do_exit+0x10/0x10
[ 33.175298][ T909] ? xfd_validate_state+0x70/0x150
[ 33.180460][ T909] ? __kasan_check_write+0x14/0x20
[ 33.185575][ T909] __x64_sys_exit+0x40/0x40
[ 33.190147][ T909] x64_sys_call+0x67/0x9a0
[ 33.194569][ T909] do_syscall_64+0x4c/0xa0
[ 33.199030][ T909] ? clear_bhb_loop+0x30/0x80
[ 33.203711][ T909] ? clear_bhb_loop+0x30/0x80
[ 33.208432][ T909] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.214326][ T909] RIP: 0033:0x7f42ae59fb19
[ 33.218881][ T909] Code: Unable to access opcode bytes at 0x7f42ae59faef.
[ 33.225937][ T909] RSP: 002b:00007ffe38721298 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.234360][ T909] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42ae59fb19
[ 33.242375][ T909] RDX: 00007f42ae55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.250375][ T909] RBP: 00007f42ae637b70 R08: 0000000000000000 R09: 0000000000000058
[ 33.258386][ T909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.266382][ T909] R13: 00007f42ae825fac R14: 00007f42ae825fa0 R15: 00007f42ae825fa0
[ 33.274364][ T909]
[ 33.277424][ T909] ---[ end trace 0000000000000000 ]---
[ 33.333192][ T1060] ------------[ cut here ]------------
[ 33.338739][ T1060] WARNING: CPU: 1 PID: 1060 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.348933][ T1060] Modules linked in:
[ 33.352839][ T1060] CPU: 1 PID: 1060 Comm: syz.4.327 Tainted: G B W syzkaller #0
[ 33.361628][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 33.371724][ T1060] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.378192][ T1060] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 33.397855][ T1060] RSP: 0018:ffffc900032a7b90 EFLAGS: 00010293
[ 33.403951][ T1060] RAX: ffffffff849cba07 RBX: ffff88811d8c3000 RCX: ffff88811d921440
[ 33.411985][ T1060] RDX: 0000000000000000 RSI: 000000001c5998c0 RDI: 000000000c04eb7d
[ 33.419992][ T1060] RBP: ffffc900032a7bb0 R08: ffff88811d8c3083 R09: 1ffff11023b18610
[ 33.428027][ T1060] R10: dffffc0000000000 R11: ffffed1023b18611 R12: dffffc0000000000
[ 33.436030][ T1060] R13: dffffc0000000000 R14: 000000001c5998c0 R15: ffff88811cf5d800
[ 33.444008][ T1060] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.452983][ T1060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.459592][ T1060] CR2: 00007f8dbd827dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 33.467611][ T1060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.475602][ T1060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.483654][ T1060] Call Trace:
[ 33.486954][ T1060]
[ 33.489888][ T1060] pppol2tp_release+0x150/0x2b0
[ 33.494755][ T1060] sock_close+0xc9/0x220
[ 33.499064][ T1060] ? __cfi_sock_close+0x10/0x10
[ 33.503921][ T1060] __fput+0x1fd/0x8f0
[ 33.507942][ T1060] ____fput+0x15/0x20
[ 33.511938][ T1060] task_work_run+0x1e1/0x250
[ 33.516584][ T1060] ? __cfi_task_work_run+0x10/0x10
[ 33.521719][ T1060] ? free_nsproxy+0x21f/0x270
[ 33.526462][ T1060] do_exit+0xb0d/0x29f0
[ 33.530718][ T1060] ? __cfi_do_exit+0x10/0x10
[ 33.535318][ T1060] ? xfd_validate_state+0x70/0x150
[ 33.540506][ T1060] ? __kasan_check_write+0x14/0x20
[ 33.545631][ T1060] __x64_sys_exit+0x40/0x40
[ 33.550186][ T1060] x64_sys_call+0x67/0x9a0
[ 33.554606][ T1060] do_syscall_64+0x4c/0xa0
[ 33.559084][ T1060] ? clear_bhb_loop+0x30/0x80
[ 33.563768][ T1060] ? clear_bhb_loop+0x30/0x80
[ 33.568488][ T1060] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.574379][ T1060] RIP: 0033:0x7f8dbd59fb19
[ 33.578853][ T1060] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 33.585864][ T1060] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.594329][ T1060] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 33.602350][ T1060] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.610344][ T1060] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 33.618362][ T1060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.626353][ T1060] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 33.634337][ T1060]
[ 33.637388][ T1060] ---[ end trace 0000000000000000 ]---
[ 33.654021][ T1162] ------------[ cut here ]------------
[ 33.659675][ T1162] WARNING: CPU: 0 PID: 1162 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.669938][ T1162] Modules linked in:
[ 33.673863][ T1162] CPU: 0 PID: 1162 Comm: syz.6.399 Tainted: G B W syzkaller #0
[ 33.682726][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 33.692823][ T1162] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.699199][ T1162] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 33.718856][ T1162] RSP: 0018:ffffc9000335fb90 EFLAGS: 00010293
[ 33.724929][ T1162] RAX: ffffffff849cba07 RBX: ffff88811d307000 RCX: ffff88811da9bcc0
[ 33.732960][ T1162] RDX: 0000000000000000 RSI: 000000001b9f6880 RDI: 000000000c04eb7d
[ 33.740979][ T1162] RBP: ffffc9000335fbb0 R08: ffff88811d307083 R09: 1ffff11023a60e10
[ 33.748971][ T1162] R10: dffffc0000000000 R11: ffffed1023a60e11 R12: dffffc0000000000
[ 33.756970][ T1162] R13: dffffc0000000000 R14: 000000001b9f6880 R15: ffff88811dd25400
[ 33.764942][ T1162] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.773906][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.780510][ T1162] CR2: 000055556e7234e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.788501][ T1162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.796493][ T1162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.804511][ T1162] Call Trace:
[ 33.807819][ T1162]
[ 33.810745][ T1162] pppol2tp_release+0x150/0x2b0
[ 33.815586][ T1162] sock_close+0xc9/0x220
[ 33.819840][ T1162] ? __cfi_sock_close+0x10/0x10
[ 33.824686][ T1162] __fput+0x1fd/0x8f0
[ 33.828732][ T1162] ____fput+0x15/0x20
[ 33.832713][ T1162] task_work_run+0x1e1/0x250
[ 33.837317][ T1162] ? __cfi_task_work_run+0x10/0x10
[ 33.842440][ T1162] ? free_nsproxy+0x21f/0x270
[ 33.847129][ T1162] do_exit+0xb0d/0x29f0
[ 33.851282][ T1162] ? __cfi_do_exit+0x10/0x10
[ 33.855863][ T1162] ? xfd_validate_state+0x70/0x150
[ 33.861093][ T1162] ? __kasan_check_write+0x14/0x20
[ 33.866278][ T1162] __x64_sys_exit+0x40/0x40
[ 33.870893][ T1162] x64_sys_call+0x67/0x9a0
[ 33.875301][ T1162] do_syscall_64+0x4c/0xa0
[ 33.879756][ T1162] ? clear_bhb_loop+0x30/0x80
[ 33.884429][ T1162] ? clear_bhb_loop+0x30/0x80
[ 33.889124][ T1162] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.895015][ T1162] RIP: 0033:0x7fc6ad39fb19
[ 33.899441][ T1162] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 33.906458][ T1162] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.914877][ T1162] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 33.922970][ T1162] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.930987][ T1162] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 33.938974][ T1162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.946956][ T1162] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 33.954911][ T1162]
[ 33.957939][ T1162] ---[ end trace 0000000000000000 ]---
[ 34.131991][ T1243] ------------[ cut here ]------------
[ 34.136251][ T1245] ------------[ cut here ]------------
[ 34.137551][ T1243] WARNING: CPU: 0 PID: 1243 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.142945][ T1245] WARNING: CPU: 1 PID: 1245 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.153000][ T1243] Modules linked in:
[ 34.153011][ T1243] CPU: 0 PID: 1243 Comm: syz.1.436 Tainted: G B W syzkaller #0
[ 34.153028][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 34.153035][ T1243] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.153053][ T1243] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 34.153065][ T1243] RSP: 0018:ffffc90003437b90 EFLAGS: 00010293
[ 34.163134][ T1245] Modules linked in:
[ 34.167010][ T1243]
[ 34.167016][ T1243] RAX: ffffffff849cba07 RBX: ffff88811f7ae000 RCX: ffff88811e955100
[ 34.175761][ T1245]
[ 34.185972][ T1243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 34.185985][ T1243] RBP: ffffc90003437bb0 R08: ffff88811f7ae083 R09: 1ffff11023ef5c10
[ 34.185997][ T1243] R10: dffffc0000000000 R11: ffffed1023ef5c11 R12: dffffc0000000000
[ 34.186010][ T1243] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811d5abc00
[ 34.186021][ T1243] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.186036][ T1243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.186048][ T1243] CR2: 00007f42ae827dac CR3: 0000000120eb6000 CR4: 00000000003506b0
[ 34.186063][ T1243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.192370][ T1245] CPU: 1 PID: 1245 Comm: syz.4.439 Tainted: G B W syzkaller #0
[ 34.212031][ T1243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.218072][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 34.221944][ T1243] Call Trace:
[ 34.221950][ T1243]
[ 34.224249][ T1245] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.232233][ T1243] pppol2tp_release+0x150/0x2b0
[ 34.234542][ T1245] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 34.242547][ T1243] sock_close+0xc9/0x220
[ 34.250512][ T1245] RSP: 0018:ffffc90003e1fb90 EFLAGS: 00010293
[ 34.258667][ T1243] ? __cfi_sock_close+0x10/0x10
[ 34.258693][ T1243] __fput+0x1fd/0x8f0
[ 34.258716][ T1243] ____fput+0x15/0x20
[ 34.258734][ T1243] task_work_run+0x1e1/0x250
[ 34.258753][ T1243] ? __cfi_task_work_run+0x10/0x10
[ 34.266725][ T1245]
[ 34.266730][ T1245] RAX: ffffffff849cba07 RBX: ffff88811ea5d000 RCX: ffff88811e952880
[ 34.266743][ T1245] RDX: 0000000000000000 RSI: 00000000161dc300 RDI: 000000000c04eb7d
[ 34.266754][ T1245] RBP: ffffc90003e1fbb0 R08: ffff88811ea5d083 R09: 1ffff11023d4ba10
[ 34.266765][ T1245] R10: dffffc0000000000 R11: ffffed1023d4ba11 R12: dffffc0000000000
[ 34.266775][ T1245] R13: dffffc0000000000 R14: 00000000161dc300 R15: ffff88811e878000
[ 34.266784][ T1245] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.266796][ T1245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.266805][ T1245] CR2: 00007ff3ff35ac30 CR3: 000000011e819000 CR4: 00000000003506a0
[ 34.266820][ T1245] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.266829][ T1245] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.275754][ T1243] ? free_nsproxy+0x21f/0x270
[ 34.282407][ T1245] Call Trace:
[ 34.290338][ T1243] do_exit+0xb0d/0x29f0
[ 34.298318][ T1245]
[ 34.298326][ T1245] pppol2tp_release+0x150/0x2b0
[ 34.298350][ T1245] sock_close+0xc9/0x220
[ 34.298367][ T1245] ? __cfi_sock_close+0x10/0x10
[ 34.298384][ T1245] __fput+0x1fd/0x8f0
[ 34.298405][ T1245] ____fput+0x15/0x20
[ 34.307163][ T1243] ? __cfi_do_exit+0x10/0x10
[ 34.307185][ T1243] ? xfd_validate_state+0x70/0x150
[ 34.307205][ T1243] ? __kasan_check_write+0x14/0x20
[ 34.307223][ T1243] __x64_sys_exit+0x40/0x40
[ 34.315185][ T1245] task_work_run+0x1e1/0x250
[ 34.325245][ T1243] x64_sys_call+0x67/0x9a0
[ 34.328534][ T1245] ? __cfi_task_work_run+0x10/0x10
[ 34.328553][ T1245] ? free_nsproxy+0x21f/0x270
[ 34.328572][ T1245] do_exit+0xb0d/0x29f0
[ 34.331535][ T1243] do_syscall_64+0x4c/0xa0
[ 34.338080][ T1245] ? __cfi_do_exit+0x10/0x10
[ 34.338103][ T1245] ? xfd_validate_state+0x70/0x150
[ 34.338123][ T1245] ? __kasan_check_write+0x14/0x20
[ 34.342960][ T1243] ? clear_bhb_loop+0x30/0x80
[ 34.362659][ T1245] __x64_sys_exit+0x40/0x40
[ 34.362683][ T1245] x64_sys_call+0x67/0x9a0
[ 34.362698][ T1245] do_syscall_64+0x4c/0xa0
[ 34.362711][ T1245] ? clear_bhb_loop+0x30/0x80
[ 34.362729][ T1245] ? clear_bhb_loop+0x30/0x80
[ 34.362746][ T1245] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.362761][ T1245] RIP: 0033:0x7f8dbd59fb19
[ 34.362774][ T1245] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 34.362781][ T1245] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.362800][ T1245] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 34.362811][ T1245] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.362820][ T1245] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 34.362828][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.362836][ T1245] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 34.362847][ T1245]
[ 34.362853][ T1245] ---[ end trace 0000000000000000 ]---
[ 34.679140][ T1243] ? clear_bhb_loop+0x30/0x80
[ 34.683832][ T1243] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.689772][ T1243] RIP: 0033:0x7f096779fb19
[ 34.694193][ T1243] Code: Unable to access opcode bytes at 0x7f096779faef.
[ 34.701244][ T1243] RSP: 002b:00007fffad2e6998 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.709697][ T1243] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f096779fb19
[ 34.717718][ T1243] RDX: 00007f096775ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.725699][ T1243] RBP: 00007f0967837b70 R08: 0000000000000000 R09: 0000000000000058
[ 34.733726][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.741817][ T1243] R13: 00007f0967a25fac R14: 00007f0967a25fa0 R15: 00007f0967a25fa0
[ 34.749882][ T1243]
[ 34.752912][ T1243] ---[ end trace 0000000000000000 ]---
[ 34.941301][ T1424] ------------[ cut here ]------------
[ 34.946888][ T1424] WARNING: CPU: 0 PID: 1424 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.957070][ T1424] Modules linked in:
[ 34.961083][ T1424] CPU: 0 PID: 1424 Comm: syz.6.527 Tainted: G B W syzkaller #0
[ 34.969971][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 34.980248][ T1424] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.986843][ T1424] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 35.006518][ T1424] RSP: 0018:ffffc9000414fb90 EFLAGS: 00010293
[ 35.012598][ T1424] RAX: ffffffff849cba07 RBX: ffff8881214ee000 RCX: ffff888109831440
[ 35.020629][ T1424] RDX: 0000000000000000 RSI: 0000000020997b30 RDI: 000000000c04eb7d
[ 35.028631][ T1424] RBP: ffffc9000414fbb0 R08: ffff8881214ee083 R09: 1ffff1102429dc10
[ 35.036677][ T1424] R10: dffffc0000000000 R11: ffffed102429dc11 R12: dffffc0000000000
[ 35.044663][ T1424] R13: dffffc0000000000 R14: 0000000020997b30 R15: ffff88812016a800
[ 35.052695][ T1424] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.061667][ T1424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.068282][ T1424] CR2: 00007f8dbd826018 CR3: 000000012f5fd000 CR4: 00000000003506b0
[ 35.076299][ T1424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.084277][ T1424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.092290][ T1424] Call Trace:
[ 35.095570][ T1424]
[ 35.098540][ T1424] pppol2tp_release+0x150/0x2b0
[ 35.103402][ T1424] sock_close+0xc9/0x220
[ 35.107706][ T1424] ? __cfi_sock_close+0x10/0x10
[ 35.112580][ T1424] __fput+0x1fd/0x8f0
[ 35.116640][ T1424] ____fput+0x15/0x20
[ 35.120637][ T1424] task_work_run+0x1e1/0x250
[ 35.125237][ T1424] ? __cfi_task_work_run+0x10/0x10
[ 35.130389][ T1424] ? free_nsproxy+0x21f/0x270
[ 35.135168][ T1424] do_exit+0xb0d/0x29f0
[ 35.139378][ T1424] ? __cfi_do_exit+0x10/0x10
[ 35.143983][ T1424] ? xfd_validate_state+0x70/0x150
[ 35.149131][ T1424] ? __kasan_check_write+0x14/0x20
[ 35.154266][ T1424] __x64_sys_exit+0x40/0x40
[ 35.158809][ T1424] x64_sys_call+0x67/0x9a0
[ 35.163239][ T1424] do_syscall_64+0x4c/0xa0
[ 35.167701][ T1424] ? clear_bhb_loop+0x30/0x80
[ 35.172394][ T1424] ? clear_bhb_loop+0x30/0x80
[ 35.177110][ T1424] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.183016][ T1424] RIP: 0033:0x7fc6ad39fb19
[ 35.187460][ T1424] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 35.194475][ T1424] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.202935][ T1424] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 35.210940][ T1424] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.218942][ T1424] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 35.226948][ T1424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.234927][ T1424] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 35.242944][ T1424]
[ 35.245988][ T1424] ---[ end trace 0000000000000000 ]---
[ 35.467477][ T1625] ------------[ cut here ]------------
[ 35.472979][ T1625] WARNING: CPU: 0 PID: 1625 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.483172][ T1625] Modules linked in:
[ 35.487185][ T1625] CPU: 0 PID: 1625 Comm: syz.6.627 Tainted: G B W syzkaller #0
[ 35.496091][ T1625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 35.506398][ T1625] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.512829][ T1625] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 35.532543][ T1625] RSP: 0018:ffffc90000a47b90 EFLAGS: 00010293
[ 35.538634][ T1625] RAX: ffffffff849cba07 RBX: ffff88810898b000 RCX: ffff88810f058000
[ 35.546688][ T1625] RDX: 0000000000000000 RSI: 000000001dbf7480 RDI: 000000000c04eb7d
[ 35.554690][ T1625] RBP: ffffc90000a47bb0 R08: ffff88810898b083 R09: 1ffff11021131610
[ 35.562707][ T1625] R10: dffffc0000000000 R11: ffffed1021131611 R12: dffffc0000000000
[ 35.570722][ T1625] R13: dffffc0000000000 R14: 000000001dbf7480 R15: ffff88811e88d400
[ 35.578719][ T1625] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.587685][ T1625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.594293][ T1625] CR2: 000055558b0964e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 35.602308][ T1625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.610335][ T1625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.618340][ T1625] Call Trace:
[ 35.621623][ T1625]
[ 35.624557][ T1625] pppol2tp_release+0x150/0x2b0
[ 35.629456][ T1625] sock_close+0xc9/0x220
[ 35.633706][ T1625] ? __cfi_sock_close+0x10/0x10
[ 35.638586][ T1625] __fput+0x1fd/0x8f0
[ 35.642581][ T1625] ____fput+0x15/0x20
[ 35.646605][ T1625] task_work_run+0x1e1/0x250
[ 35.651205][ T1625] ? __cfi_task_work_run+0x10/0x10
[ 35.656351][ T1625] ? free_nsproxy+0x21f/0x270
[ 35.661039][ T1625] do_exit+0xb0d/0x29f0
[ 35.665214][ T1625] ? __cfi_do_exit+0x10/0x10
[ 35.669886][ T1625] ? xfd_validate_state+0x70/0x150
[ 35.675043][ T1625] ? __kasan_check_write+0x14/0x20
[ 35.680194][ T1625] __x64_sys_exit+0x40/0x40
[ 35.684709][ T1625] x64_sys_call+0x67/0x9a0
[ 35.689160][ T1625] do_syscall_64+0x4c/0xa0
[ 35.693580][ T1625] ? clear_bhb_loop+0x30/0x80
[ 35.698315][ T1625] ? clear_bhb_loop+0x30/0x80
[ 35.703001][ T1625] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.708933][ T1625] RIP: 0033:0x7fc6ad39fb19
[ 35.713351][ T1625] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 35.720396][ T1625] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.728838][ T1625] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 35.736845][ T1625] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.744825][ T1625] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 35.752836][ T1625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.760895][ T1625] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 35.768904][ T1625]
[ 35.771930][ T1625] ---[ end trace 0000000000000000 ]---
[ 35.837056][ T1768] ------------[ cut here ]------------
[ 35.842567][ T1768] WARNING: CPU: 1 PID: 1768 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.852750][ T1768] Modules linked in:
[ 35.857012][ T1768] CPU: 1 PID: 1768 Comm: syz.5.686 Tainted: G B W syzkaller #0
[ 35.865818][ T1768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 35.875939][ T1768] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.882290][ T1768] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 35.901960][ T1768] RSP: 0018:ffffc90001cbfb90 EFLAGS: 00010293
[ 35.908064][ T1768] RAX: ffffffff849cba07 RBX: ffff888111867000 RCX: ffff88811197a880
[ 35.916094][ T1768] RDX: 0000000000000000 RSI: 000000001f7d3940 RDI: 000000000c04eb7d
[ 35.924097][ T1768] RBP: ffffc90001cbfbb0 R08: ffff888111867083 R09: 1ffff1102230ce10
[ 35.932120][ T1768] R10: dffffc0000000000 R11: ffffed102230ce11 R12: dffffc0000000000
[ 35.940288][ T1768] R13: dffffc0000000000 R14: 000000001f7d3940 R15: ffff8881100fb800
[ 35.948314][ T1768] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.957286][ T1768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.963984][ T1768] CR2: 00007f8dbd579d00 CR3: 000000000700f000 CR4: 00000000003506a0
[ 35.972037][ T1768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.980052][ T1768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.988073][ T1768] Call Trace:
[ 35.991350][ T1768]
[ 35.994287][ T1768] pppol2tp_release+0x150/0x2b0
[ 35.999216][ T1768] sock_close+0xc9/0x220
[ 36.003465][ T1768] ? __cfi_sock_close+0x10/0x10
[ 36.008362][ T1768] __fput+0x1fd/0x8f0
[ 36.012350][ T1768] ____fput+0x15/0x20
[ 36.016507][ T1768] task_work_run+0x1e1/0x250
[ 36.021109][ T1768] ? __cfi_task_work_run+0x10/0x10
[ 36.026280][ T1768] ? free_nsproxy+0x21f/0x270
[ 36.030977][ T1768] do_exit+0xb0d/0x29f0
[ 36.035146][ T1768] ? __cfi_do_exit+0x10/0x10
[ 36.039770][ T1768] ? xfd_validate_state+0x70/0x150
[ 36.044897][ T1768] ? __kasan_check_write+0x14/0x20
[ 36.050045][ T1768] __x64_sys_exit+0x40/0x40
[ 36.054563][ T1768] x64_sys_call+0x67/0x9a0
[ 36.059071][ T1768] do_syscall_64+0x4c/0xa0
[ 36.063497][ T1768] ? clear_bhb_loop+0x30/0x80
[ 36.068203][ T1768] ? clear_bhb_loop+0x30/0x80
[ 36.072892][ T1768] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.078815][ T1768] RIP: 0033:0x7f42ae59fb19
[ 36.083233][ T1768] Code: Unable to access opcode bytes at 0x7f42ae59faef.
[ 36.090272][ T1768] RSP: 002b:00007ffe38721298 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.098911][ T1768] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42ae59fb19
[ 36.106914][ T1768] RDX: 00007f42ae55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.114890][ T1768] RBP: 00007f42ae637b70 R08: 0000000000000000 R09: 0000000000000058
[ 36.122934][ T1768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.130938][ T1768] R13: 00007f42ae825fac R14: 00007f42ae825fa0 R15: 00007f42ae825fa0
[ 36.138943][ T1768]
[ 36.141970][ T1768] ---[ end trace 0000000000000000 ]---
[ 36.229414][ T1906] ------------[ cut here ]------------
[ 36.234915][ T1906] WARNING: CPU: 0 PID: 1906 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.245091][ T1906] Modules linked in:
[ 36.249121][ T1906] CPU: 0 PID: 1906 Comm: syz.5.772 Tainted: G B W syzkaller #0
[ 36.258163][ T1906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 36.268518][ T1906] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.275029][ T1906] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 36.294773][ T1906] RSP: 0018:ffffc90002087b90 EFLAGS: 00010293
[ 36.300971][ T1906] RAX: ffffffff849cba07 RBX: ffff888127ab4000 RCX: ffff88810f3ee540
[ 36.309083][ T1906] RDX: 0000000000000000 RSI: 000000000f900180 RDI: 000000000c04eb7d
[ 36.317193][ T1906] RBP: ffffc90002087bb0 R08: ffff888127ab4083 R09: 1ffff11024f56810
[ 36.325286][ T1906] R10: dffffc0000000000 R11: ffffed1024f56811 R12: dffffc0000000000
[ 36.333373][ T1906] R13: dffffc0000000000 R14: 000000000f900180 R15: ffff888110021c00
[ 36.341696][ T1906] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.350846][ T1906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.357565][ T1906] CR2: 000055558b0b1908 CR3: 000000000700f000 CR4: 00000000003506b0
[ 36.365667][ T1906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.373778][ T1906] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.381878][ T1906] Call Trace:
[ 36.385165][ T1906]
[ 36.388226][ T1906] pppol2tp_release+0x150/0x2b0
[ 36.393088][ T1906] sock_close+0xc9/0x220
[ 36.397476][ T1906] ? __cfi_sock_close+0x10/0x10
[ 36.402336][ T1906] __fput+0x1fd/0x8f0
[ 36.406450][ T1906] ____fput+0x15/0x20
[ 36.410438][ T1906] task_work_run+0x1e1/0x250
[ 36.415035][ T1906] ? __cfi_task_work_run+0x10/0x10
[ 36.420432][ T1906] ? free_nsproxy+0x21f/0x270
[ 36.425134][ T1906] do_exit+0xb0d/0x29f0
[ 36.429415][ T1906] ? __cfi_do_exit+0x10/0x10
[ 36.434014][ T1906] ? xfd_validate_state+0x70/0x150
[ 36.439243][ T1906] ? __kasan_check_write+0x14/0x20
[ 36.444369][ T1906] __x64_sys_exit+0x40/0x40
[ 36.448971][ T1906] x64_sys_call+0x67/0x9a0
[ 36.453396][ T1906] do_syscall_64+0x4c/0xa0
[ 36.457923][ T1906] ? clear_bhb_loop+0x30/0x80
[ 36.462606][ T1906] ? clear_bhb_loop+0x30/0x80
[ 36.467432][ T1906] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.473336][ T1906] RIP: 0033:0x7f42ae59fb19
[ 36.477847][ T1906] Code: Unable to access opcode bytes at 0x7f42ae59faef.
[ 36.484865][ T1906] RSP: 002b:00007ffe38721298 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.493397][ T1906] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f42ae59fb19
[ 36.501752][ T1906] RDX: 00007f42ae55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.509816][ T1906] RBP: 00007f42ae637b70 R08: 0000000000000000 R09: 0000000000000058
[ 36.517892][ T1906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.525980][ T1906] R13: 00007f42ae825fac R14: 00007f42ae825fa0 R15: 00007f42ae825fa0
[ 36.534041][ T1906]
[ 36.537153][ T1906] ---[ end trace 0000000000000000 ]---
[ 36.627315][ T2053] ------------[ cut here ]------------
[ 36.632808][ T2053] WARNING: CPU: 1 PID: 2053 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.642949][ T2053] Modules linked in:
[ 36.646940][ T2053] CPU: 1 PID: 2053 Comm: syz.6.810 Tainted: G B W syzkaller #0
[ 36.655707][ T2053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 36.665863][ T2053] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.672299][ T2053] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 36.692003][ T2053] RSP: 0018:ffffc90002a47b90 EFLAGS: 00010293
[ 36.698183][ T2053] RAX: ffffffff849cba07 RBX: ffff888112845000 RCX: ffff88811038bcc0
[ 36.706196][ T2053] RDX: 0000000000000000 RSI: 00000000127ba130 RDI: 000000000c04eb7d
[ 36.714177][ T2053] RBP: ffffc90002a47bb0 R08: ffff888112845083 R09: 1ffff11022508a10
[ 36.722186][ T2053] R10: dffffc0000000000 R11: ffffed1022508a11 R12: dffffc0000000000
[ 36.730173][ T2053] R13: dffffc0000000000 R14: 00000000127ba130 R15: ffff88812bfcbc00
[ 36.738187][ T2053] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.747171][ T2053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.753756][ T2053] CR2: 0000555559c394e8 CR3: 00000001215fa000 CR4: 00000000003506a0
[ 36.761754][ T2053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.769734][ T2053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.777724][ T2053] Call Trace:
[ 36.781003][ T2053]
[ 36.783929][ T2053] pppol2tp_release+0x150/0x2b0
[ 36.788803][ T2053] sock_close+0xc9/0x220
[ 36.793080][ T2053] ? __cfi_sock_close+0x10/0x10
[ 36.797942][ T2053] __fput+0x1fd/0x8f0
[ 36.801920][ T2053] ____fput+0x15/0x20
[ 36.805930][ T2053] task_work_run+0x1e1/0x250
[ 36.810542][ T2053] ? __cfi_task_work_run+0x10/0x10
[ 36.815633][ T2053] ? free_nsproxy+0x21f/0x270
[ 36.820341][ T2053] do_exit+0xb0d/0x29f0
[ 36.824512][ T2053] ? __cfi_do_exit+0x10/0x10
[ 36.829115][ T2053] ? xfd_validate_state+0x70/0x150
[ 36.834227][ T2053] ? __kasan_check_write+0x14/0x20
[ 36.839349][ T2053] __x64_sys_exit+0x40/0x40
[ 36.843850][ T2053] x64_sys_call+0x67/0x9a0
[ 36.848273][ T2053] do_syscall_64+0x4c/0xa0
[ 36.852686][ T2053] ? clear_bhb_loop+0x30/0x80
[ 36.857439][ T2053] ? clear_bhb_loop+0x30/0x80
[ 36.862115][ T2053] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.868280][ T2053] RIP: 0033:0x7fc6ad39fb19
[ 36.872875][ T2053] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 36.879935][ T2053] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.888361][ T2053] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 36.896376][ T2053] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.904346][ T2053] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 36.912348][ T2053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.920361][ T2053] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 36.928359][ T2053]
[ 36.931369][ T2053] ---[ end trace 0000000000000000 ]---
[ 37.094478][ T2143] ------------[ cut here ]------------
[ 37.100064][ T2143] WARNING: CPU: 0 PID: 2143 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.110240][ T2143] Modules linked in:
[ 37.114221][ T2143] CPU: 0 PID: 2143 Comm: syz.3.889 Tainted: G B W syzkaller #0
[ 37.123102][ T2143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 37.133304][ T2143] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.139955][ T2143] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 37.159720][ T2143] RSP: 0018:ffffc90002f97b90 EFLAGS: 00010293
[ 37.165808][ T2143] RAX: ffffffff849cba07 RBX: ffff888110857000 RCX: ffff88812e493cc0
[ 37.173869][ T2143] RDX: 0000000000000000 RSI: 000000002e4b9980 RDI: 000000000c04eb7d
[ 37.181905][ T2143] RBP: ffffc90002f97bb0 R08: ffff888110857083 R09: 1ffff1102210ae10
[ 37.189917][ T2143] R10: dffffc0000000000 R11: ffffed102210ae11 R12: dffffc0000000000
[ 37.197927][ T2143] R13: dffffc0000000000 R14: 000000002e4b9980 R15: ffff88810e437c00
[ 37.205958][ T2143] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.214929][ T2143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.221586][ T2143] CR2: 0000555565531908 CR3: 000000000700f000 CR4: 00000000003506b0
[ 37.229608][ T2143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.237632][ T2143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.245603][ T2143] Call Trace:
[ 37.248901][ T2143]
[ 37.251835][ T2143] pppol2tp_release+0x150/0x2b0
[ 37.256730][ T2143] sock_close+0xc9/0x220
[ 37.260971][ T2143] ? __cfi_sock_close+0x10/0x10
[ 37.265822][ T2143] __fput+0x1fd/0x8f0
[ 37.269856][ T2143] ____fput+0x15/0x20
[ 37.273839][ T2143] task_work_run+0x1e1/0x250
[ 37.278480][ T2143] ? __cfi_task_work_run+0x10/0x10
[ 37.283596][ T2143] ? free_nsproxy+0x21f/0x270
[ 37.288335][ T2143] do_exit+0xb0d/0x29f0
[ 37.292491][ T2143] ? __cfi_do_exit+0x10/0x10
[ 37.297126][ T2143] ? xfd_validate_state+0x70/0x150
[ 37.302262][ T2143] ? __kasan_check_write+0x14/0x20
[ 37.307384][ T2143] __x64_sys_exit+0x40/0x40
[ 37.311881][ T2143] x64_sys_call+0x67/0x9a0
[ 37.316328][ T2143] do_syscall_64+0x4c/0xa0
[ 37.320737][ T2143] ? clear_bhb_loop+0x30/0x80
[ 37.325396][ T2143] ? clear_bhb_loop+0x30/0x80
[ 37.330113][ T2143] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.336022][ T2143] RIP: 0033:0x7ff3ff39fb19
[ 37.340421][ T2143] Code: Unable to access opcode bytes at 0x7ff3ff39faef.
[ 37.347459][ T2143] RSP: 002b:00007fffb073b8a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.355866][ T2143] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff3ff39fb19
[ 37.363867][ T2143] RDX: 00007ff3ff35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.371865][ T2143] RBP: 00007ff3ff437b70 R08: 0000000000000000 R09: 0000000000000058
[ 37.379929][ T2143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.387927][ T2143] R13: 00007ff3ff625fac R14: 00007ff3ff625fa0 R15: 00007ff3ff625fa0
[ 37.395948][ T2143]
[ 37.398951][ T2143] ---[ end trace 0000000000000000 ]---
2026/11/08 09:23:01 executed programs: 925
[ 37.563878][ T2223] ------------[ cut here ]------------
[ 37.569419][ T2223] WARNING: CPU: 0 PID: 2223 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.579631][ T2223] Modules linked in:
[ 37.583519][ T2223] CPU: 0 PID: 2223 Comm: syz.4.931 Tainted: G B W syzkaller #0
[ 37.592505][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 37.602680][ T2223] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.609123][ T2223] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 37.628848][ T2223] RSP: 0018:ffffc900032afb90 EFLAGS: 00010293
[ 37.635027][ T2223] RAX: ffffffff849cba07 RBX: ffff888115020000 RCX: ffff888114e25100
[ 37.643131][ T2223] RDX: 0000000000000000 RSI: 000000002e38e600 RDI: 000000000c04eb7d
[ 37.651279][ T2223] RBP: ffffc900032afbb0 R08: ffff888115020083 R09: 1ffff11022a04010
[ 37.659305][ T2223] R10: dffffc0000000000 R11: ffffed1022a04011 R12: dffffc0000000000
[ 37.667297][ T2223] R13: dffffc0000000000 R14: 000000002e38e600 R15: ffff88810f382400
[ 37.675284][ T2223] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.684263][ T2223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.690881][ T2223] CR2: 00007fc6ad35ac30 CR3: 000000012cbb9000 CR4: 00000000003506b0
[ 37.698935][ T2223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.707095][ T2223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.715101][ T2223] Call Trace:
[ 37.718419][ T2223]
[ 37.721436][ T2223] pppol2tp_release+0x150/0x2b0
[ 37.726330][ T2223] sock_close+0xc9/0x220
[ 37.730590][ T2223] ? __cfi_sock_close+0x10/0x10
[ 37.735446][ T2223] __fput+0x1fd/0x8f0
[ 37.739549][ T2223] ____fput+0x15/0x20
[ 37.743536][ T2223] task_work_run+0x1e1/0x250
[ 37.748165][ T2223] ? __cfi_task_work_run+0x10/0x10
[ 37.753279][ T2223] ? free_nsproxy+0x21f/0x270
[ 37.758036][ T2223] do_exit+0xb0d/0x29f0
[ 37.762198][ T2223] ? __cfi_do_exit+0x10/0x10
[ 37.766847][ T2223] ? xfd_validate_state+0x70/0x150
[ 37.771963][ T2223] ? __kasan_check_write+0x14/0x20
[ 37.777150][ T2223] __x64_sys_exit+0x40/0x40
[ 37.781660][ T2223] x64_sys_call+0x67/0x9a0
[ 37.786112][ T2223] do_syscall_64+0x4c/0xa0
[ 37.790533][ T2223] ? clear_bhb_loop+0x30/0x80
[ 37.795222][ T2223] ? clear_bhb_loop+0x30/0x80
[ 37.799949][ T2223] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.805853][ T2223] RIP: 0033:0x7f8dbd59fb19
[ 37.810308][ T2223] Code: Unable to access opcode bytes at 0x7f8dbd59faef.
[ 37.817358][ T2223] RSP: 002b:00007ffd9a57b878 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.825769][ T2223] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dbd59fb19
[ 37.833797][ T2223] RDX: 00007f8dbd55ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.841800][ T2223] RBP: 00007f8dbd637b70 R08: 0000000000000000 R09: 0000000000000058
[ 37.849812][ T2223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.857869][ T2223] R13: 00007f8dbd825fac R14: 00007f8dbd825fa0 R15: 00007f8dbd825fa0
[ 37.865865][ T2223]
[ 37.868943][ T2223] ---[ end trace 0000000000000000 ]---
[ 37.972210][ T2372] ------------[ cut here ]------------
[ 37.977786][ T2372] WARNING: CPU: 1 PID: 2372 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.987947][ T2372] Modules linked in:
[ 37.991883][ T2372] CPU: 1 PID: 2372 Comm: syz.6.1004 Tainted: G B W syzkaller #0
[ 38.000816][ T2372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 38.011035][ T2372] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.017430][ T2372] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 38.037108][ T2372] RSP: 0018:ffffc90003bb7b90 EFLAGS: 00010293
[ 38.043199][ T2372] RAX: ffffffff849cba07 RBX: ffff888114157000 RCX: ffff888127ac3cc0
[ 38.051244][ T2372] RDX: 0000000000000000 RSI: 000000001ba12540 RDI: 000000000c04eb7d
[ 38.059255][ T2372] RBP: ffffc90003bb7bb0 R08: ffff888114157083 R09: 1ffff1102282ae10
[ 38.067261][ T2372] R10: dffffc0000000000 R11: ffffed102282ae11 R12: dffffc0000000000
[ 38.075257][ T2372] R13: dffffc0000000000 R14: 000000001ba12540 R15: ffff88812bf27000
[ 38.083398][ T2372] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.092386][ T2372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.099004][ T2372] CR2: 000055558b0b1908 CR3: 00000001210ec000 CR4: 00000000003506a0
[ 38.107028][ T2372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.115022][ T2372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.123026][ T2372] Call Trace:
[ 38.126332][ T2372]
[ 38.129268][ T2372] pppol2tp_release+0x150/0x2b0
[ 38.134130][ T2372] sock_close+0xc9/0x220
[ 38.138424][ T2372] ? __cfi_sock_close+0x10/0x10
[ 38.143277][ T2372] __fput+0x1fd/0x8f0
[ 38.147305][ T2372] ____fput+0x15/0x20
[ 38.151299][ T2372] task_work_run+0x1e1/0x250
[ 38.155926][ T2372] ? __cfi_task_work_run+0x10/0x10
[ 38.161043][ T2372] ? free_nsproxy+0x21f/0x270
[ 38.165733][ T2372] do_exit+0xb0d/0x29f0
[ 38.169973][ T2372] ? __cfi_do_exit+0x10/0x10
[ 38.174565][ T2372] ? xfd_validate_state+0x70/0x150
[ 38.179716][ T2372] ? __kasan_check_write+0x14/0x20
[ 38.184836][ T2372] __x64_sys_exit+0x40/0x40
[ 38.189387][ T2372] x64_sys_call+0x67/0x9a0
[ 38.193808][ T2372] do_syscall_64+0x4c/0xa0
[ 38.198275][ T2372] ? clear_bhb_loop+0x30/0x80
[ 38.202955][ T2372] ? clear_bhb_loop+0x30/0x80
[ 38.207678][ T2372] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.213578][ T2372] RIP: 0033:0x7fc6ad39fb19
[ 38.218030][ T2372] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 38.225043][ T2372] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.233489][ T2372] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 38.241500][ T2372] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.249510][ T2372] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 38.257583][ T2372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.265565][ T2372] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 38.273580][ T2372]
[ 38.276617][ T2372] ---[ end trace 0000000000000000 ]---
[ 38.328901][ T2496] ------------[ cut here ]------------
[ 38.334417][ T2496] WARNING: CPU: 0 PID: 2496 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.344616][ T2496] Modules linked in:
[ 38.348606][ T2496] CPU: 0 PID: 2496 Comm: syz.6.1065 Tainted: G B W syzkaller #0
[ 38.357579][ T2496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 38.367745][ T2496] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.374081][ T2496] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 38.393816][ T2496] RSP: 0018:ffffc90003fc7b90 EFLAGS: 00010293
[ 38.399979][ T2496] RAX: ffffffff849cba07 RBX: ffff88811424d000 RCX: ffff888131da8000
[ 38.408093][ T2496] RDX: 0000000000000000 RSI: 0000000030707c00 RDI: 000000000c04eb7d
[ 38.416154][ T2496] RBP: ffffc90003fc7bb0 R08: ffff88811424d083 R09: 1ffff11022849a10
[ 38.424182][ T2496] R10: dffffc0000000000 R11: ffffed1022849a11 R12: dffffc0000000000
[ 38.432227][ T2496] R13: dffffc0000000000 R14: 0000000030707c00 R15: ffff88812a0a7800
[ 38.440244][ T2496] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.449218][ T2496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.455929][ T2496] CR2: 00007f8dbd55ac30 CR3: 000000012a185000 CR4: 00000000003506b0
[ 38.464041][ T2496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.472055][ T2496] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.480093][ T2496] Call Trace:
[ 38.483375][ T2496]
[ 38.486322][ T2496] pppol2tp_release+0x150/0x2b0
[ 38.491178][ T2496] sock_close+0xc9/0x220
[ 38.495489][ T2496] ? __cfi_sock_close+0x10/0x10
[ 38.500360][ T2496] __fput+0x1fd/0x8f0
[ 38.504354][ T2496] ____fput+0x15/0x20
[ 38.508369][ T2496] task_work_run+0x1e1/0x250
[ 38.512982][ T2496] ? __cfi_task_work_run+0x10/0x10
[ 38.518114][ T2496] ? free_nsproxy+0x21f/0x270
[ 38.522812][ T2496] do_exit+0xb0d/0x29f0
[ 38.526989][ T2496] ? __cfi_do_exit+0x10/0x10
[ 38.531578][ T2496] ? xfd_validate_state+0x70/0x150
[ 38.536755][ T2496] ? __kasan_check_write+0x14/0x20
[ 38.541866][ T2496] __x64_sys_exit+0x40/0x40
[ 38.546381][ T2496] x64_sys_call+0x67/0x9a0
[ 38.550793][ T2496] do_syscall_64+0x4c/0xa0
[ 38.555214][ T2496] ? clear_bhb_loop+0x30/0x80
[ 38.559906][ T2496] ? clear_bhb_loop+0x30/0x80
[ 38.564595][ T2496] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.570499][ T2496] RIP: 0033:0x7fc6ad39fb19
[ 38.574903][ T2496] Code: Unable to access opcode bytes at 0x7fc6ad39faef.
[ 38.581933][ T2496] RSP: 002b:00007fff17396d78 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.590363][ T2496] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc6ad39fb19
[ 38.598368][ T2496] RDX: 00007fc6ad35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.606370][ T2496] RBP: 00007fc6ad437b70 R08: 0000000000000000 R09: 0000000000000058
[ 38.614323][ T2496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.622323][ T2496] R13: 00007fc6ad625fac R14: 00007fc6ad625fa0 R15: 00007fc6ad625fa0
[ 38.630335][ T2496]
[ 38.633358][ T2496] ---[ end trace 0000000000000000 ]---
[ 38.799657][ T2585] ------------[ cut here ]------------
[ 38.805171][ T2585] WARNING: CPU: 1 PID: 2585 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.815302][ T2585] Modules linked in:
[ 38.819317][ T2585] CPU: 1 PID: 2585 Comm: syz.3.1109 Tainted: G B W syzkaller #0
[ 38.828256][ T2585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 38.838442][ T2585] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.844794][ T2585] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03
[ 38.864581][ T2585] RSP: 0018:ffffc9000486fb90 EFLAGS: 00010293
[ 38.870747][ T2585] RAX: ffffffff849cba07 RBX: ffff888114751000 RCX: ffff8881172c6540
[ 38.878777][ T2585] RDX: 0000000000000000 RSI: 000000002de5e8c0 RDI: 000000000c04eb7d
[ 38.886771][ T2585] RBP: ffffc9000486fbb0 R08: ffff888114751083 R09: 1ffff110228ea210
[ 38.894753][ T2585] R10: dffffc0000000000 R11: ffffed10228ea211 R12: dffffc0000000000
[ 38.902793][ T2585] R13: dffffc0000000000 R14: 000000002de5e8c0 R15: ffff888110100800
[ 38.910816][ T2585] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.919788][ T2585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.926431][ T2585] CR2: 0000555565531908 CR3: 000000000700f000 CR4: 00000000003506a0
[ 38.934420][ T2585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.942452][ T2585] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.950459][ T2585] Call Trace:
[ 38.953745][ T2585]
[ 38.956694][ T2585] pppol2tp_release+0x150/0x2b0
[ 38.961553][ T2585] sock_close+0xc9/0x220
[ 38.965791][ T2585] ? __cfi_sock_close+0x10/0x10
[ 38.970658][ T2585] __fput+0x1fd/0x8f0
[ 38.974642][ T2585] ____fput+0x15/0x20
[ 38.978656][ T2585] task_work_run+0x1e1/0x250
[ 38.983289][ T2585] ? __cfi_task_work_run+0x10/0x10
[ 38.988484][ T2585] ? free_nsproxy+0x21f/0x270
[ 38.993185][ T2585] do_exit+0xb0d/0x29f0
[ 38.997387][ T2585] ? __cfi_do_exit+0x10/0x10
[ 39.001993][ T2585] ? xfd_validate_state+0x70/0x150
[ 39.007145][ T2585] ? __kasan_check_write+0x14/0x20
[ 39.012270][ T2585] __x64_sys_exit+0x40/0x40
[ 39.016827][ T2585] x64_sys_call+0x67/0x9a0
[ 39.021249][ T2585] do_syscall_64+0x4c/0xa0
[ 39.025666][ T2585] ? clear_bhb_loop+0x30/0x80
[ 39.030378][ T2585] ? clear_bhb_loop+0x30/0x80
[ 39.035054][ T2585] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.040992][ T2585] RIP: 0033:0x7ff3ff39fb19
[ 39.045415][ T2585] Code: Unable to access opcode bytes at 0x7ff3ff39faef.
[ 39.052452][ T2585] RSP: 002b:00007fffb073b8a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 39.060914][ T2585] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff3ff39fb19
[ 39.068932][ T2585] RDX: 00007ff3ff35ac97 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.076943][ T2585] RBP: 00007ff3ff437b70 R08: 0000000000000000 R09: 0000000000000058
[ 39.084929][ T2585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.092933][ T2585] R13: 00007ff3ff625fac R14: 00007ff3ff625fa0 R15: 00007ff3ff625fa0
[ 39.100935][ T2585]
[ 39.103959][ T2585] ---[ end trace 0000000000000000 ]---
[ 39.140631][ T2662] ------------[ cut here ]------------