Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
2026/11/01 07:58:17 parsed 1 programs
2026/11/01 07:58:17 serving rpc on tcp://37861
[ 24.445419][ T28] audit: type=1400 audit(1793519897.416:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.466289][ T28] audit: type=1400 audit(1793519897.416:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.598882][ T28] audit: type=1400 audit(1793519898.566:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.602229][ T301] cgroup: Unknown subsys name 'net'
[ 25.621742][ T28] audit: type=1400 audit(1793519898.566:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.648889][ T28] audit: type=1400 audit(1793519898.596:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.649229][ T301] cgroup: Unknown subsys name 'devices'
[ 25.792573][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 25.798200][ T301] cgroup: Unknown subsys name 'rlimit'
[ 25.910262][ T28] audit: type=1400 audit(1793519898.876:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.933490][ T28] audit: type=1400 audit(1793519898.876:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.953900][ T28] audit: type=1400 audit(1793519898.876:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.974230][ T28] audit: type=1400 audit(1793519898.876:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 25.994573][ T28] audit: type=1400 audit(1793519898.876:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.999296][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.038532][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.751509][ T307] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.090398][ T335] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.097499][ T335] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.105017][ T335] device bridge_slave_0 entered promiscuous mode
[ 27.112158][ T335] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.119188][ T335] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.126618][ T335] device bridge_slave_1 entered promiscuous mode
[ 27.173553][ T335] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.180602][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.187921][ T335] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.194971][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.215292][ T336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.222532][ T336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.229848][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.237750][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.246723][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.255077][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.262168][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.271733][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.279911][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.286986][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.301566][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.309468][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.323948][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.334943][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.343016][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.350371][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.358749][ T335] device veth0_vlan entered promiscuous mode
[ 27.369330][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.378473][ T335] device veth1_macvtap entered promiscuous mode
[ 27.389232][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.399689][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/11/01 07:58:20 executed programs: 0
[ 27.967134][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.974228][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.981712][ T370] device bridge_slave_0 entered promiscuous mode
[ 27.988555][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.995633][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.005306][ T370] device bridge_slave_1 entered promiscuous mode
[ 28.055063][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.062126][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.069357][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.076414][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.101158][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.108752][ T336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.116362][ T336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.129001][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.137532][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.145768][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.152831][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.172924][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.181316][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.189416][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.196471][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.204129][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.212346][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.220255][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.228357][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.236252][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.244588][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.254970][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.262989][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.277209][ T370] device veth0_vlan entered promiscuous mode
[ 28.284296][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.291805][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.303544][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.311795][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.321717][ T370] device veth1_macvtap entered promiscuous mode
[ 28.336048][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 28.343908][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.352283][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.361679][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 28.369995][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.545761][ T376] ==================================================================
[ 28.553874][ T376] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.561997][ T376] Read of size 4 at addr ffff88812777f000 by task syz.2.17/376
[ 28.569573][ T376]
[ 28.571929][ T376] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0
[ 28.579072][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 28.589161][ T376] Call Trace:
[ 28.592463][ T376]
[ 28.595396][ T376] __dump_stack+0x21/0x24
[ 28.599753][ T376] dump_stack_lvl+0x110/0x170
[ 28.604454][ T376] ? __cfi_dump_stack_lvl+0x8/0x8
[ 28.609480][ T376] ? _raw_spin_lock_bh+0x94/0xf0
[ 28.614421][ T376] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.620149][ T376] print_address_description+0x71/0x200
[ 28.625715][ T376] print_report+0x4a/0x60
[ 28.630061][ T376] kasan_report+0x122/0x150
[ 28.634568][ T376] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.640308][ T376] __asan_report_load4_noabort+0x14/0x20
[ 28.645967][ T376] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.651560][ T376] pppol2tp_release+0x150/0x2b0
[ 28.656447][ T376] sock_close+0xc9/0x220
[ 28.660703][ T376] ? __cfi_sock_close+0x10/0x10
[ 28.665570][ T376] __fput+0x1fd/0x8f0
[ 28.669611][ T376] ____fput+0x15/0x20
[ 28.673603][ T376] task_work_run+0x1e1/0x250
[ 28.678205][ T376] ? __cfi_task_work_run+0x10/0x10
[ 28.683323][ T376] ? free_nsproxy+0x21f/0x270
[ 28.688021][ T376] do_exit+0xb0d/0x29f0
[ 28.692193][ T376] ? __cfi_do_exit+0x10/0x10
[ 28.696826][ T376] ? xfd_validate_state+0x70/0x150
[ 28.701975][ T376] ? __kasan_check_write+0x14/0x20
[ 28.707089][ T376] __x64_sys_exit+0x40/0x40
[ 28.711603][ T376] x64_sys_call+0x67/0x9a0
[ 28.716022][ T376] do_syscall_64+0x4c/0xa0
[ 28.720456][ T376] ? clear_bhb_loop+0x30/0x80
[ 28.725173][ T376] ? clear_bhb_loop+0x30/0x80
[ 28.729854][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.735749][ T376] RIP: 0033:0x7fc4de79f559
[ 28.740181][ T376] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 28.747195][ T376] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 28.755612][ T376] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 28.763579][ T376] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 28.771561][ T376] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 28.779526][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 28.787487][ T376] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 28.795473][ T376]
[ 28.798516][ T376]
[ 28.800858][ T376] Allocated by task 375:
[ 28.805108][ T376] kasan_set_track+0x4b/0x70
[ 28.809721][ T376] kasan_save_alloc_info+0x1f/0x30
[ 28.814843][ T376] __kasan_kmalloc+0x95/0xb0
[ 28.819440][ T376] __kmalloc+0xb4/0x1e0
[ 28.823595][ T376] l2tp_session_create+0x38/0xbd0
[ 28.828619][ T376] pppol2tp_connect+0xbf5/0x1640
[ 28.833556][ T376] __sys_connect+0x3da/0x460
[ 28.838163][ T376] __x64_sys_connect+0x7a/0x90
[ 28.842937][ T376] x64_sys_call+0x88d/0x9a0
[ 28.847446][ T376] do_syscall_64+0x4c/0xa0
[ 28.851879][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.857770][ T376]
[ 28.860088][ T376] Freed by task 10:
[ 28.863882][ T376] kasan_set_track+0x4b/0x70
[ 28.868502][ T376] kasan_save_free_info+0x2b/0x40
[ 28.873517][ T376] ____kasan_slab_free+0x132/0x180
[ 28.878632][ T376] __kasan_slab_free+0x11/0x20
[ 28.883433][ T376] slab_free_freelist_hook+0xc2/0x190
[ 28.888838][ T376] __kmem_cache_free+0xb7/0x1b0
[ 28.893717][ T376] kfree+0x6f/0xf0
[ 28.897457][ T376] l2tp_session_put+0xaf/0x1a0
[ 28.902261][ T376] l2tp_session_delete+0x3df/0x4d0
[ 28.907407][ T376] l2tp_tunnel_del_work+0x199/0x410
[ 28.912658][ T376] process_one_work+0x717/0xc30
[ 28.917557][ T376] worker_thread+0xa4d/0x11d0
[ 28.922273][ T376] kthread+0x281/0x320
[ 28.926369][ T376] ret_from_fork+0x1f/0x30
[ 28.930826][ T376]
[ 28.933146][ T376] The buggy address belongs to the object at ffff88812777f000
[ 28.933146][ T376] which belongs to the cache kmalloc-512 of size 512
[ 28.947213][ T376] The buggy address is located 0 bytes inside of
[ 28.947213][ T376] 512-byte region [ffff88812777f000, ffff88812777f200)
[ 28.960405][ T376]
[ 28.962758][ T376] The buggy address belongs to the physical page:
[ 28.969180][ T376] page:ffffea00049ddf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12777c
[ 28.979451][ T376] head:ffffea00049ddf00 order:2 compound_mapcount:0 compound_pincount:0
[ 28.987778][ T376] flags: 0x4000000000010200(slab|head|zone=1)
[ 28.993892][ T376] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 29.002499][ T376] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 29.011094][ T376] page dumped because: kasan: bad access detected
[ 29.017535][ T376] page_owner tracks the page as allocated
[ 29.023268][ T376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 375, tgid 375 (syz.2.17), ts 28392005206, free_ts 28391947088
[ 29.045532][ T376] post_alloc_hook+0x1f5/0x210
[ 29.050337][ T376] prep_new_page+0x1c/0x110
[ 29.054884][ T376] get_page_from_freelist+0x2ca9/0x2d20
[ 29.060465][ T376] __alloc_pages+0x1fa/0x610
[ 29.065086][ T376] alloc_slab_page+0x6e/0xf0
[ 29.069699][ T376] new_slab+0x98/0x3e0
[ 29.073789][ T376] ___slab_alloc+0x70f/0xb70
[ 29.078416][ T376] __slab_alloc+0x5e/0xa0
[ 29.082782][ T376] __kmem_cache_alloc_node+0x204/0x2d0
[ 29.088274][ T376] __kmalloc+0xa4/0x1e0
[ 29.092460][ T376] l2tp_session_create+0x38/0xbd0
[ 29.097517][ T376] pppol2tp_connect+0xbf5/0x1640
[ 29.102492][ T376] __sys_connect+0x3da/0x460
[ 29.107123][ T376] __x64_sys_connect+0x7a/0x90
[ 29.111918][ T376] x64_sys_call+0x88d/0x9a0
[ 29.116456][ T376] do_syscall_64+0x4c/0xa0
[ 29.120904][ T376] page last free stack trace:
[ 29.125592][ T376] free_unref_page_prepare+0x81b/0x820
[ 29.131086][ T376] free_unref_page+0x93/0x530
[ 29.135800][ T376] __free_pages+0x67/0x100
[ 29.140244][ T376] free_pages+0x82/0x90
[ 29.144419][ T376] __stack_depot_save+0x45f/0x490
[ 29.149445][ T376] kasan_set_track+0x60/0x70
[ 29.154037][ T376] kasan_save_free_info+0x2b/0x40
[ 29.159068][ T376] ____kasan_slab_free+0x132/0x180
[ 29.164240][ T376] __kasan_slab_free+0x11/0x20
[ 29.169031][ T376] slab_free_freelist_hook+0xc2/0x190
[ 29.174441][ T376] kmem_cache_free+0x12d/0x300
[ 29.179238][ T376] audit_log_end+0x1eb/0x240
[ 29.183834][ T376] common_lsm_audit+0x134e/0x1730
[ 29.188850][ T376] slow_avc_audit+0x1c4/0x240
[ 29.193549][ T376] avc_has_perm+0x1fb/0x250
[ 29.198076][ T376] selinux_socket_connect_helper+0x27d/0x8f0
[ 29.204100][ T376]
[ 29.206448][ T376] Memory state around the buggy address:
[ 29.212096][ T376] ffff88812777ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.220171][ T376] ffff88812777ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.228251][ T376] >ffff88812777f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.236330][ T376] ^
[ 29.240394][ T376] ffff88812777f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.248473][ T376] ffff88812777f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.256565][ T376] ==================================================================
[ 29.265724][ T376] Disabling lock debugging due to kernel taint
[ 29.272430][ T376] ------------[ cut here ]------------
[ 29.277938][ T376] WARNING: CPU: 1 PID: 376 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.287990][ T376] Modules linked in:
[ 29.291978][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Tainted: G B syzkaller #0
[ 29.300594][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 29.310729][ T376] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.317092][ T376] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 29.336738][ T376] RSP: 0018:ffffc900009e7b90 EFLAGS: 00010293
[ 29.342889][ T376] RAX: ffffffff849cb1c7 RBX: ffff88811403d000 RCX: ffff888114036540
[ 29.350905][ T376] RDX: 0000000000000000 RSI: 000000002ad480c0 RDI: 000000000c04eb7d
[ 29.358898][ T376] RBP: ffffc900009e7bb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
[ 29.366928][ T376] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: dffffc0000000000
[ 29.374940][ T376] R13: dffffc0000000000 R14: 000000002ad480c0 R15: ffff88812777f000
[ 29.382963][ T376] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.391958][ T376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.398566][ T376] CR2: 00007fc4de75a670 CR3: 000000000700f000 CR4: 00000000003506a0
[ 29.406634][ T376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.414642][ T376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.422668][ T376] Call Trace:
[ 29.425964][ T376]
[ 29.428927][ T376] pppol2tp_release+0x150/0x2b0
[ 29.433860][ T376] sock_close+0xc9/0x220
[ 29.438125][ T376] ? __cfi_sock_close+0x10/0x10
[ 29.443030][ T376] __fput+0x1fd/0x8f0
[ 29.447041][ T376] ____fput+0x15/0x20
[ 29.451083][ T376] task_work_run+0x1e1/0x250
[ 29.455700][ T376] ? __cfi_task_work_run+0x10/0x10
[ 29.460935][ T376] ? free_nsproxy+0x21f/0x270
[ 29.465651][ T376] do_exit+0xb0d/0x29f0
[ 29.469835][ T376] ? __cfi_do_exit+0x10/0x10
[ 29.474493][ T376] ? xfd_validate_state+0x70/0x150
[ 29.479629][ T376] ? __kasan_check_write+0x14/0x20
[ 29.484843][ T376] __x64_sys_exit+0x40/0x40
[ 29.489367][ T376] x64_sys_call+0x67/0x9a0
[ 29.493816][ T376] do_syscall_64+0x4c/0xa0
[ 29.498260][ T376] ? clear_bhb_loop+0x30/0x80
[ 29.502998][ T376] ? clear_bhb_loop+0x30/0x80
[ 29.507704][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.513683][ T376] RIP: 0033:0x7fc4de79f559
[ 29.518116][ T376] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 29.525186][ T376] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 29.533633][ T376] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 29.541639][ T376] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 29.549630][ T376] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 29.557667][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 29.565679][ T376] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 29.573711][ T376]
[ 29.576752][ T376] ---[ end trace 0000000000000000 ]---
[ 29.851914][ T43] device bridge_slave_1 left promiscuous mode
[ 29.858172][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.865680][ T43] device bridge_slave_0 left promiscuous mode
[ 29.871888][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.879854][ T43] device veth1_macvtap left promiscuous mode
[ 29.887038][ T43] device veth0_vlan left promiscuous mode
[ 30.559334][ T526] ------------[ cut here ]------------
[ 30.564827][ T526] WARNING: CPU: 0 PID: 526 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.574869][ T526] Modules linked in:
[ 30.578769][ T526] CPU: 0 PID: 526 Comm: syz.2.92 Tainted: G B W syzkaller #0
[ 30.587415][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 30.597523][ T526] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.604011][ T526] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 30.623710][ T526] RSP: 0018:ffffc90000d37b90 EFLAGS: 00010293
[ 30.629825][ T526] RAX: ffffffff849cb1c7 RBX: ffff888116386000 RCX: ffff8881163fa880
[ 30.637852][ T526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 30.645889][ T526] RBP: ffffc90000d37bb0 R08: ffff888116386083 R09: 1ffff11022c70c10
[ 30.653909][ T526] R10: dffffc0000000000 R11: ffffed1022c70c11 R12: dffffc0000000000
[ 30.661914][ T526] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888115942c00
[ 30.669898][ T526] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.678884][ T526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.685500][ T526] CR2: 00007ffda75dfc00 CR3: 000000000700f000 CR4: 00000000003506b0
[ 30.693557][ T526] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.701565][ T526] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.709560][ T526] Call Trace:
[ 30.712893][ T526]
[ 30.715833][ T526] pppol2tp_release+0x150/0x2b0
[ 30.720716][ T526] sock_close+0xc9/0x220
[ 30.724976][ T526] ? __cfi_sock_close+0x10/0x10
[ 30.729852][ T526] __fput+0x1fd/0x8f0
[ 30.733895][ T526] ____fput+0x15/0x20
[ 30.737907][ T526] task_work_run+0x1e1/0x250
[ 30.742578][ T526] ? __cfi_task_work_run+0x10/0x10
[ 30.747723][ T526] ? free_nsproxy+0x21f/0x270
[ 30.752465][ T526] do_exit+0xb0d/0x29f0
[ 30.756661][ T526] ? __cfi_do_exit+0x10/0x10
[ 30.761333][ T526] ? xfd_validate_state+0x70/0x150
[ 30.766481][ T526] ? __kasan_check_write+0x14/0x20
[ 30.771621][ T526] __x64_sys_exit+0x40/0x40
[ 30.776141][ T526] x64_sys_call+0x67/0x9a0
[ 30.780573][ T526] do_syscall_64+0x4c/0xa0
[ 30.785030][ T526] ? clear_bhb_loop+0x30/0x80
[ 30.789776][ T526] ? clear_bhb_loop+0x30/0x80
[ 30.794510][ T526] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.800505][ T526] RIP: 0033:0x7fc4de79f559
[ 30.804999][ T526] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 30.812063][ T526] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 30.820517][ T526] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 30.828561][ T526] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.836581][ T526] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 30.844602][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 30.852595][ T526] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 30.860594][ T526]
[ 30.863694][ T526] ---[ end trace 0000000000000000 ]---
2026/11/01 07:58:25 executed programs: 181
[ 33.105024][ T738] ------------[ cut here ]------------
[ 33.110636][ T738] WARNING: CPU: 1 PID: 738 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.120719][ T738] Modules linked in:
[ 33.124663][ T738] CPU: 1 PID: 738 Comm: syz.2.198 Tainted: G B W syzkaller #0
[ 33.133396][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 33.143499][ T738] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.149860][ T738] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 33.169531][ T738] RSP: 0018:ffffc900018bfb90 EFLAGS: 00010293
[ 33.175624][ T738] RAX: ffffffff849cb1c7 RBX: ffff888118b13000 RCX: ffff888118b23cc0
[ 33.183624][ T738] RDX: 0000000000000000 RSI: 000000002b715a40 RDI: 000000000c04eb7d
[ 33.191639][ T738] RBP: ffffc900018bfbb0 R08: ffff888118b13083 R09: 1ffff11023162610
[ 33.199630][ T738] R10: dffffc0000000000 R11: ffffed1023162611 R12: dffffc0000000000
[ 33.207655][ T738] R13: dffffc0000000000 R14: 000000002b715a40 R15: ffff88810f77f000
[ 33.215686][ T738] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.224649][ T738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.231274][ T738] CR2: 00007fc4de75a670 CR3: 000000000700f000 CR4: 00000000003506a0
[ 33.239266][ T738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.247315][ T738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.255349][ T738] Call Trace:
[ 33.258638][ T738]
[ 33.261606][ T738] pppol2tp_release+0x150/0x2b0
[ 33.266482][ T738] sock_close+0xc9/0x220
[ 33.270746][ T738] ? __cfi_sock_close+0x10/0x10
[ 33.275621][ T738] __fput+0x1fd/0x8f0
[ 33.279626][ T738] ____fput+0x15/0x20
[ 33.283662][ T738] task_work_run+0x1e1/0x250
[ 33.288301][ T738] ? __cfi_task_work_run+0x10/0x10
[ 33.293475][ T738] ? free_nsproxy+0x21f/0x270
[ 33.298190][ T738] do_exit+0xb0d/0x29f0
[ 33.302414][ T738] ? __cfi_do_exit+0x10/0x10
[ 33.307032][ T738] ? xfd_validate_state+0x70/0x150
[ 33.312223][ T738] ? __kasan_check_write+0x14/0x20
[ 33.317366][ T738] __x64_sys_exit+0x40/0x40
[ 33.321953][ T738] x64_sys_call+0x67/0x9a0
[ 33.326397][ T738] do_syscall_64+0x4c/0xa0
[ 33.330911][ T738] ? clear_bhb_loop+0x30/0x80
[ 33.335613][ T738] ? clear_bhb_loop+0x30/0x80
[ 33.340308][ T738] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.346275][ T738] RIP: 0033:0x7fc4de79f559
[ 33.350720][ T738] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 33.357752][ T738] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.366225][ T738] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 33.374228][ T738] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.382221][ T738] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 33.390230][ T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.398255][ T738] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 33.406272][ T738]
[ 33.409305][ T738] ---[ end trace 0000000000000000 ]---
[ 33.460146][ T766] ------------[ cut here ]------------
[ 33.465664][ T766] WARNING: CPU: 0 PID: 766 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.475839][ T766] Modules linked in:
[ 33.479837][ T766] CPU: 0 PID: 766 Comm: syz.2.212 Tainted: G B W syzkaller #0
[ 33.488673][ T766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 33.499041][ T766] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.505510][ T766] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 33.525240][ T766] RSP: 0018:ffffc90001777b90 EFLAGS: 00010293
[ 33.531449][ T766] RAX: ffffffff849cb1c7 RBX: ffff888118e40000 RCX: ffff888114b08000
[ 33.539446][ T766] RDX: 0000000000000000 RSI: 000000002bd36300 RDI: 000000000c04eb7d
[ 33.547536][ T766] RBP: ffffc90001777bb0 R08: ffff888118e40083 R09: 1ffff110231c8010
[ 33.555666][ T766] R10: dffffc0000000000 R11: ffffed10231c8011 R12: dffffc0000000000
[ 33.563924][ T766] R13: dffffc0000000000 R14: 000000002bd36300 R15: ffff8881163dec00
[ 33.572117][ T766] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.581156][ T766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.587777][ T766] CR2: 00007fc4dea27dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.595860][ T766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.603941][ T766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.612063][ T766] Call Trace:
[ 33.615359][ T766]
[ 33.618308][ T766] pppol2tp_release+0x150/0x2b0
[ 33.623301][ T766] sock_close+0xc9/0x220
[ 33.627576][ T766] ? __cfi_sock_close+0x10/0x10
[ 33.632557][ T766] __fput+0x1fd/0x8f0
[ 33.636565][ T766] ____fput+0x15/0x20
[ 33.640570][ T766] task_work_run+0x1e1/0x250
[ 33.645299][ T766] ? __cfi_task_work_run+0x10/0x10
[ 33.650438][ T766] ? free_nsproxy+0x21f/0x270
[ 33.655258][ T766] do_exit+0xb0d/0x29f0
[ 33.659476][ T766] ? __cfi_do_exit+0x10/0x10
[ 33.664185][ T766] ? xfd_validate_state+0x70/0x150
[ 33.669321][ T766] ? __kasan_check_write+0x14/0x20
[ 33.674561][ T766] __x64_sys_exit+0x40/0x40
[ 33.679084][ T766] x64_sys_call+0x67/0x9a0
[ 33.683677][ T766] do_syscall_64+0x4c/0xa0
[ 33.688123][ T766] ? clear_bhb_loop+0x30/0x80
[ 33.692923][ T766] ? clear_bhb_loop+0x30/0x80
[ 33.697620][ T766] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.703677][ T766] RIP: 0033:0x7fc4de79f559
[ 33.708115][ T766] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 33.715304][ T766] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.723867][ T766] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 33.731972][ T766] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.739977][ T766] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 33.748092][ T766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.756146][ T766] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 33.764245][ T766]
[ 33.767300][ T766] ---[ end trace 0000000000000000 ]---
[ 33.938079][ T804] ------------[ cut here ]------------
[ 33.943695][ T804] WARNING: CPU: 0 PID: 804 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.953762][ T804] Modules linked in:
[ 33.957680][ T804] CPU: 0 PID: 804 Comm: syz.2.231 Tainted: G B W syzkaller #0
[ 33.966596][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 33.976700][ T804] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.983180][ T804] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 34.002828][ T804] RSP: 0018:ffffc90001bafb90 EFLAGS: 00010293
[ 34.008944][ T804] RAX: ffffffff849cb1c7 RBX: ffff888118e96000 RCX: ffff888118ef8000
[ 34.016977][ T804] RDX: 0000000000000000 RSI: 000000002b777800 RDI: 000000000c04eb7d
[ 34.024980][ T804] RBP: ffffc90001bafbb0 R08: ffff888118e96083 R09: 1ffff110231d2c10
[ 34.032980][ T804] R10: dffffc0000000000 R11: ffffed10231d2c11 R12: dffffc0000000000
[ 34.041013][ T804] R13: dffffc0000000000 R14: 000000002b777800 R15: ffff8881163d9000
[ 34.048991][ T804] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.058315][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.064937][ T804] CR2: 00005555655744e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 34.072942][ T804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.080939][ T804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.088904][ T804] Call Trace:
[ 34.092304][ T804]
[ 34.095247][ T804] pppol2tp_release+0x150/0x2b0
[ 34.100107][ T804] sock_close+0xc9/0x220
[ 34.104396][ T804] ? __cfi_sock_close+0x10/0x10
[ 34.109269][ T804] __fput+0x1fd/0x8f0
[ 34.113299][ T804] ____fput+0x15/0x20
[ 34.117312][ T804] task_work_run+0x1e1/0x250
[ 34.121972][ T804] ? __cfi_task_work_run+0x10/0x10
[ 34.127104][ T804] ? free_nsproxy+0x21f/0x270
[ 34.131821][ T804] do_exit+0xb0d/0x29f0
[ 34.136000][ T804] ? __cfi_do_exit+0x10/0x10
[ 34.140588][ T804] ? xfd_validate_state+0x70/0x150
[ 34.145738][ T804] ? __kasan_check_write+0x14/0x20
[ 34.150879][ T804] __x64_sys_exit+0x40/0x40
[ 34.155394][ T804] x64_sys_call+0x67/0x9a0
[ 34.159818][ T804] do_syscall_64+0x4c/0xa0
[ 34.164304][ T804] ? clear_bhb_loop+0x30/0x80
[ 34.169008][ T804] ? clear_bhb_loop+0x30/0x80
[ 34.173715][ T804] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.179643][ T804] RIP: 0033:0x7fc4de79f559
[ 34.184101][ T804] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 34.191155][ T804] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.199557][ T804] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 34.207876][ T804] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.215927][ T804] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 34.223932][ T804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.231970][ T804] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 34.239975][ T804]
[ 34.243040][ T804] ---[ end trace 0000000000000000 ]---
[ 35.265012][ T892] ------------[ cut here ]------------
[ 35.270509][ T892] WARNING: CPU: 1 PID: 892 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.280616][ T892] Modules linked in:
[ 35.284554][ T892] CPU: 1 PID: 892 Comm: syz.2.275 Tainted: G B W syzkaller #0
[ 35.293274][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 35.303392][ T892] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.309783][ T892] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 35.329426][ T892] RSP: 0018:ffffc90001f8fb90 EFLAGS: 00010293
[ 35.335541][ T892] RAX: ffffffff849cb1c7 RBX: ffff888119f81000 RCX: ffff888119f39440
[ 35.343542][ T892] RDX: 0000000000000000 RSI: 000000002b630700 RDI: 000000000c04eb7d
[ 35.351555][ T892] RBP: ffffc90001f8fbb0 R08: ffff888119f81083 R09: 1ffff110233f0210
[ 35.359571][ T892] R10: dffffc0000000000 R11: ffffed10233f0211 R12: dffffc0000000000
[ 35.367604][ T892] R13: dffffc0000000000 R14: 000000002b630700 R15: ffff8881124e7800
[ 35.375626][ T892] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.384606][ T892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.391227][ T892] CR2: 00007fc4dea27dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 35.399226][ T892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.407282][ T892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.415348][ T892] Call Trace:
[ 35.418651][ T892]
[ 35.421633][ T892] pppol2tp_release+0x150/0x2b0
[ 35.426515][ T892] sock_close+0xc9/0x220
[ 35.430801][ T892] ? __cfi_sock_close+0x10/0x10
[ 35.435681][ T892] __fput+0x1fd/0x8f0
[ 35.439733][ T892] ____fput+0x15/0x20
[ 35.443799][ T892] task_work_run+0x1e1/0x250
[ 35.448437][ T892] ? __cfi_task_work_run+0x10/0x10
[ 35.453652][ T892] ? free_nsproxy+0x21f/0x270
[ 35.458380][ T892] do_exit+0xb0d/0x29f0
[ 35.462593][ T892] ? __cfi_do_exit+0x10/0x10
[ 35.467215][ T892] ? xfd_validate_state+0x70/0x150
[ 35.472397][ T892] ? __kasan_check_write+0x14/0x20
[ 35.477536][ T892] __x64_sys_exit+0x40/0x40
[ 35.482121][ T892] x64_sys_call+0x67/0x9a0
[ 35.486589][ T892] do_syscall_64+0x4c/0xa0
[ 35.491060][ T892] ? clear_bhb_loop+0x30/0x80
[ 35.495768][ T892] ? clear_bhb_loop+0x30/0x80
[ 35.500479][ T892] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.506450][ T892] RIP: 0033:0x7fc4de79f559
[ 35.510908][ T892] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 35.517949][ T892] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.526423][ T892] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 35.534433][ T892] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.542455][ T892] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 35.550450][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.558513][ T892] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 35.566528][ T892]
[ 35.569555][ T892] ---[ end trace 0000000000000000 ]---
[ 35.914864][ T950] ------------[ cut here ]------------
[ 35.920368][ T950] WARNING: CPU: 0 PID: 950 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.930442][ T950] Modules linked in:
[ 35.934383][ T950] CPU: 0 PID: 950 Comm: syz.2.304 Tainted: G B W syzkaller #0
[ 35.943100][ T950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 35.953199][ T950] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.959564][ T950] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 35.979299][ T950] RSP: 0018:ffffc90001e7fb90 EFLAGS: 00010293
[ 35.985421][ T950] RAX: ffffffff849cb1c7 RBX: ffff88811a11d000 RCX: ffff88811a135100
[ 35.993425][ T950] RDX: 0000000000000000 RSI: 0000000019247280 RDI: 000000000c04eb7d
[ 36.001451][ T950] RBP: ffffc90001e7fbb0 R08: ffff88811a11d083 R09: 1ffff11023423a10
[ 36.009436][ T950] R10: dffffc0000000000 R11: ffffed1023423a11 R12: dffffc0000000000
[ 36.017444][ T950] R13: dffffc0000000000 R14: 0000000019247280 R15: ffff888114ae9c00
[ 36.025473][ T950] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.034494][ T950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.041112][ T950] CR2: 00007fc4df558060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 36.049083][ T950] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.057074][ T950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.065065][ T950] Call Trace:
[ 36.068350][ T950]
[ 36.071318][ T950] pppol2tp_release+0x150/0x2b0
[ 36.076192][ T950] sock_close+0xc9/0x220
[ 36.080429][ T950] ? __cfi_sock_close+0x10/0x10
[ 36.085310][ T950] __fput+0x1fd/0x8f0
[ 36.089312][ T950] ____fput+0x15/0x20
[ 36.093341][ T950] task_work_run+0x1e1/0x250
[ 36.097960][ T950] ? __cfi_task_work_run+0x10/0x10
[ 36.103109][ T950] ? free_nsproxy+0x21f/0x270
[ 36.107812][ T950] do_exit+0xb0d/0x29f0
[ 36.112017][ T950] ? __cfi_do_exit+0x10/0x10
[ 36.116669][ T950] ? xfd_validate_state+0x70/0x150
[ 36.121835][ T950] ? __kasan_check_write+0x14/0x20
[ 36.126968][ T950] __x64_sys_exit+0x40/0x40
[ 36.131519][ T950] x64_sys_call+0x67/0x9a0
[ 36.135958][ T950] do_syscall_64+0x4c/0xa0
[ 36.140367][ T950] ? clear_bhb_loop+0x30/0x80
[ 36.145130][ T950] ? clear_bhb_loop+0x30/0x80
[ 36.149839][ T950] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.155774][ T950] RIP: 0033:0x7fc4de79f559
[ 36.160206][ T950] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 36.167266][ T950] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.175751][ T950] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 36.183760][ T950] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.191757][ T950] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 36.199720][ T950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.207738][ T950] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 36.215757][ T950]
[ 36.218770][ T950] ---[ end trace 0000000000000000 ]---
[ 37.097427][ T1024] ------------[ cut here ]------------
[ 37.102994][ T1024] WARNING: CPU: 1 PID: 1024 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.113121][ T1024] Modules linked in:
[ 37.117032][ T1024] CPU: 1 PID: 1024 Comm: syz.2.341 Tainted: G B W syzkaller #0
[ 37.125830][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 37.135935][ T1024] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.142326][ T1024] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 37.161986][ T1024] RSP: 0018:ffffc90002477b90 EFLAGS: 00010293
[ 37.168079][ T1024] RAX: ffffffff849cb1c7 RBX: ffff888117aa3000 RCX: ffff88811aa2bcc0
[ 37.176103][ T1024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 37.184098][ T1024] RBP: ffffc90002477bb0 R08: ffff888117aa3083 R09: 1ffff11022f54610
[ 37.192100][ T1024] R10: dffffc0000000000 R11: ffffed1022f54611 R12: dffffc0000000000
[ 37.200090][ T1024] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888119189400
[ 37.208124][ T1024] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.217096][ T1024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.223753][ T1024] CR2: 00007ffda75dfc00 CR3: 000000000700f000 CR4: 00000000003506a0
[ 37.231767][ T1024] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.239756][ T1024] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.247759][ T1024] Call Trace:
[ 37.251090][ T1024]
[ 37.254036][ T1024] pppol2tp_release+0x150/0x2b0
[ 37.258893][ T1024] sock_close+0xc9/0x220
[ 37.263186][ T1024] ? __cfi_sock_close+0x10/0x10
[ 37.268077][ T1024] __fput+0x1fd/0x8f0
[ 37.272123][ T1024] ____fput+0x15/0x20
[ 37.276142][ T1024] task_work_run+0x1e1/0x250
[ 37.280831][ T1024] ? __cfi_task_work_run+0x10/0x10
[ 37.285965][ T1024] ? free_nsproxy+0x21f/0x270
[ 37.290705][ T1024] do_exit+0xb0d/0x29f0
[ 37.294885][ T1024] ? __cfi_do_exit+0x10/0x10
[ 37.299490][ T1024] ? xfd_validate_state+0x70/0x150
[ 37.304663][ T1024] ? __kasan_check_write+0x14/0x20
[ 37.309803][ T1024] __x64_sys_exit+0x40/0x40
[ 37.314376][ T1024] x64_sys_call+0x67/0x9a0
[ 37.318817][ T1024] do_syscall_64+0x4c/0xa0
[ 37.323282][ T1024] ? clear_bhb_loop+0x30/0x80
[ 37.327991][ T1024] ? clear_bhb_loop+0x30/0x80
[ 37.332731][ T1024] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.338742][ T1024] RIP: 0033:0x7fc4de79f559
[ 37.343186][ T1024] Code: Unable to access opcode bytes at 0x7fc4de79f52f.
[ 37.350220][ T1024] RSP: 002b:00007ffda75e0f58 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.358679][ T1024] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc4de79f559
[ 37.366693][ T1024] RDX: 00007fc4de75a6d7 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.374713][ T1024] RBP: 00007fc4de836b50 R08: 0000000000000000 R09: 0000000000000058
[ 37.382718][ T1024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.390728][ T1024] R13: 00007fc4dea25fac R14: 00007fc4dea25fa0 R15: 00007fc4dea25fa0
[ 37.398736][ T1024]
[ 37.401807][ T1024] ---[ end trace 0000000000000000 ]---
2026/11/01 07:58:30 executed programs: 370
[ 38.414938][ T1140] ------------[ cut here ]------------
[ 38.420545][ T1140] WARNING: CPU: 0 PID: 1140 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.430829][ T1140] Modules linked in:
[ 38.434749][ T1140] CPU: 0 PID: 1140 Comm: syz.2.399 Tainted: G B W syzkaller #0
[ 38.443707][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 38.453878][ T1140] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.460257][ T1140] Code: 5d c3 e8 7c c0 d4 fc be 02 00 00 00 eb 0a e8 70 c0 d4 fc be 01 00 00 00 4c 89 f7 e8 03 c4 cc fd e9 0f ff ff ff e8 59 c0 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 c0 d4 fc 4c 89 f7 be 03
[ 38.480059][ T1140] RSP: 0018:ffffc90002adfb90 EFLAGS: 00010293
[ 38.486413][ T1140] RAX: ffffffff849cb1c7 RBX: ffff88811baa0000 RCX: ffff88811baa8000
[ 38.494528][ T1140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 38.502611][ T1140] RBP: ffffc90002adfbb0 R08: ffff88811baa0083 R09: 1ffff11023754010
[ 38.510601][ T1140] R10: dffffc0000000000 R11: ffffed1023754011 R12: dffffc0000000000
[ 38.518687][ T1140] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888119357000
[ 38.526711][ T1140] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.535741][ T1140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.542375][ T1140] CR2: 00007fc4de75a670 CR3: 000000000700f000 CR4: 00000000003506b0
[ 38.550383][ T1140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000