Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts.
2026/09/23 05:47:53 parsed 1 programs
2026/09/23 05:47:53 serving rpc on tcp://35289
[ 24.526688][ T28] audit: type=1400 audit(1790142473.089:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.547484][ T28] audit: type=1400 audit(1790142473.089:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.371904][ T28] audit: type=1400 audit(1790142473.939:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.372873][ T301] cgroup: Unknown subsys name 'net'
[ 25.394611][ T28] audit: type=1400 audit(1790142473.939:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.421969][ T28] audit: type=1400 audit(1790142473.969:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.422047][ T301] cgroup: Unknown subsys name 'devices'
[ 25.530492][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 25.536188][ T301] cgroup: Unknown subsys name 'rlimit'
[ 25.673774][ T28] audit: type=1400 audit(1790142474.239:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.693573][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 25.697008][ T28] audit: type=1400 audit(1790142474.239:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.726119][ T28] audit: type=1400 audit(1790142474.239:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.730190][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 25.746514][ T28] audit: type=1400 audit(1790142474.239:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.775454][ T28] audit: type=1400 audit(1790142474.239:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.581604][ T314] request_module fs-gadgetfs succeeded, but still no fs?
[ 26.786318][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.793499][ T319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.809219][ T319] device bridge_slave_0 entered promiscuous mode
[ 26.849760][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.856840][ T319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.864452][ T319] device bridge_slave_1 entered promiscuous mode
[ 27.171501][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.178586][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.185896][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.192961][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.272419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.280870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.290498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.312120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.321694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.335781][ T319] device veth0_vlan entered promiscuous mode
[ 27.342733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.351258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.358948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.366464][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.381342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.390994][ T319] device veth1_macvtap entered promiscuous mode
[ 27.401872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.418481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/09/23 05:47:56 executed programs: 0
[ 27.497172][ T319] syz-executor (319) used greatest stack depth: 21152 bytes left
[ 27.601451][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.608607][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.616393][ T374] device bridge_slave_0 entered promiscuous mode
[ 27.648570][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.655687][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.663107][ T374] device bridge_slave_1 entered promiscuous mode
[ 27.739157][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.746239][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.754197][ T372] device bridge_slave_0 entered promiscuous mode
[ 27.762871][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.770037][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.777361][ T372] device bridge_slave_1 entered promiscuous mode
[ 27.862199][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.869382][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.876676][ T377] device bridge_slave_0 entered promiscuous mode
[ 27.885306][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.892613][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.900258][ T377] device bridge_slave_1 entered promiscuous mode
[ 27.912784][ T376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.919868][ T376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.927162][ T376] device bridge_slave_0 entered promiscuous mode
[ 27.951229][ T376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.958292][ T376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.965808][ T376] device bridge_slave_1 entered promiscuous mode
[ 27.974534][ T381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.981691][ T381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.989607][ T381] device bridge_slave_0 entered promiscuous mode
[ 28.029370][ T381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.036430][ T381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.043929][ T381] device bridge_slave_1 entered promiscuous mode
[ 28.120555][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.128009][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.169975][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.178215][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.186456][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.193485][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.219804][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.227469][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.236048][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.244488][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.251552][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.287223][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.311682][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.352863][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.367849][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.376327][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.383961][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.400510][ T374] device veth0_vlan entered promiscuous mode
[ 28.413712][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.430827][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.438304][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.447613][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.460992][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.469130][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.476187][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.483625][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.492122][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.499184][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.506579][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.514771][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.521864][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.531836][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.539710][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.570853][ T374] device veth1_macvtap entered promiscuous mode
[ 28.582363][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.591717][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.600160][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.608014][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.616423][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.623469][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.630979][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.639033][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.647125][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.654158][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.661524][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.669752][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.677126][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.684498][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.692569][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.700539][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.708155][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.744490][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.753521][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.761948][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.769099][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.776557][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.785177][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.793297][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.801723][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.808787][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.816179][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.824434][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.832771][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.847360][ T372] device veth0_vlan entered promiscuous mode
[ 28.865679][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.873857][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.882599][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.891414][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.900624][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.909422][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.942125][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.951948][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.964515][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.977675][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.991362][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.000009][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.010408][ T376] device veth0_vlan entered promiscuous mode
[ 29.021000][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.029639][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.037946][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.046579][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.055324][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.063427][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.073290][ T377] device veth0_vlan entered promiscuous mode
[ 29.088757][ C0] ==================================================================
[ 29.096855][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[ 29.104223][ C0] Read of size 8 at addr ffff88812c964590 by task kworker/0:0/6
[ 29.111836][ C0]
[ 29.114148][ C0] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted syzkaller #0
[ 29.121326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.131370][ C0] Workqueue: ipv6_addrconf addrconf_dad_work
[ 29.137354][ C0] Call Trace:
[ 29.140636][ C0]
[ 29.143488][ C0] __dump_stack+0x21/0x24
[ 29.147811][ C0] dump_stack_lvl+0x110/0x170
[ 29.152478][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 29.157502][ C0] ? debug_smp_processor_id+0x17/0x20
[ 29.162892][ C0] ? rcu_cblist_dequeue+0x6c/0xb0
[ 29.167918][ C0] print_address_description+0x71/0x200
[ 29.173463][ C0] print_report+0x4a/0x60
[ 29.177791][ C0] kasan_report+0x122/0x150
[ 29.182293][ C0] ? rcu_cblist_dequeue+0x6c/0xb0
[ 29.187318][ C0] __asan_report_load8_noabort+0x14/0x20
[ 29.192947][ C0] rcu_cblist_dequeue+0x6c/0xb0
[ 29.197796][ C0] rcu_do_batch+0x4bc/0xc30
[ 29.202299][ C0] ? rcu_core+0xf00/0xf00
[ 29.206708][ C0] ? __kasan_check_write+0x14/0x20
[ 29.211813][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 29.217280][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 29.223200][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 29.229012][ C0] ? rcu_report_qs_rnp+0x2b9/0x390
[ 29.234141][ C0] rcu_core+0x486/0xf00
[ 29.238302][ C0] ? rcu_cpu_kthread_park+0x90/0x90
[ 29.243506][ C0] ? kvm_sched_clock_read+0x18/0x40
[ 29.248720][ C0] ? run_rebalance_domains+0xf7/0x1c0
[ 29.254092][ C0] rcu_core_si+0x9/0x10
[ 29.258247][ C0] handle_softirqs+0x1d7/0x600
[ 29.263010][ C0] __irq_exit_rcu+0x52/0xf0
[ 29.267509][ C0] irq_exit_rcu+0x9/0x10
[ 29.271744][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 29.277375][ C0]
[ 29.280303][ C0]
[ 29.283227][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 29.289218][ C0] RIP: 0010:__stack_depot_save+0x171/0x490
[ 29.295036][ C0] Code: c1 c7 04 29 fe 31 f2 c1 c6 0e 29 f2 41 31 d7 c1 c2 18 41 29 d7 4c 8b 15 95 5c 2e 05 44 8b 25 8a 5c 2e 05 45 21 fc 4f 8b 2c e2 <4d> 85 ed 74 62 89 ca eb 09 4d 8b 6d 00 4d 85 ed 74 55 45 39 7d 08
[ 29.314638][ C0] RSP: 0018:ffffc900000674c0 EFLAGS: 00000202
[ 29.320699][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000d
[ 29.328664][ C0] RDX: 0000000013569e02 RSI: 0000000091795c51 RDI: 000000000c8bc4c2
[ 29.336630][ C0] RBP: ffffc90000067520 R08: 0000000000000a20 R09: 0000000000000001
[ 29.344607][ C0] R10: ffff8881f5a00000 R11: 000000008b98d404 R12: 000000000000205d
[ 29.352574][ C0] R13: ffff88811d7a2f50 R14: ffffc90000067530 R15: 000000006300205d
[ 29.360808][ C0] kasan_set_track+0x60/0x70
[ 29.365397][ C0] ? kasan_set_track+0x4b/0x70
[ 29.370154][ C0] ? kasan_save_alloc_info+0x1f/0x30
[ 29.375433][ C0] ? __kasan_slab_alloc+0x72/0x80
[ 29.380457][ C0] ? slab_post_alloc_hook+0x4f/0x2d0
[ 29.385742][ C0] ? kmem_cache_alloc_node+0x179/0x330
[ 29.391198][ C0] ? __alloc_skb+0xe8/0x4a0
[ 29.395699][ C0] ? __ipv6_ifa_notify+0x200/0xe80
[ 29.400806][ C0] ? addrconf_dad_completed+0x192/0xe80
[ 29.406348][ C0] ? addrconf_dad_work+0xc1b/0x14a0
[ 29.411542][ C0] ? process_one_work+0x717/0xc30
[ 29.416558][ C0] ? worker_thread+0xa4d/0x11d0
[ 29.421400][ C0] ? kthread+0x281/0x320
[ 29.425637][ C0] ? ret_from_fork+0x1f/0x30
[ 29.430229][ C0] kasan_save_alloc_info+0x1f/0x30
[ 29.435425][ C0] __kasan_slab_alloc+0x72/0x80
[ 29.440278][ C0] slab_post_alloc_hook+0x4f/0x2d0
[ 29.445402][ C0] kmem_cache_alloc_node+0x179/0x330
[ 29.450689][ C0] ? __alloc_skb+0xe8/0x4a0
[ 29.455281][ C0] __alloc_skb+0xe8/0x4a0
[ 29.459608][ C0] ? __kasan_check_read+0x11/0x20
[ 29.464626][ C0] __ipv6_ifa_notify+0x200/0xe80
[ 29.469560][ C0] ? snmp6_fill_stats+0x6c0/0x6c0
[ 29.474579][ C0] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20
[ 29.481340][ C0] ? __kasan_check_write+0x14/0x20
[ 29.486449][ C0] ? try_to_grab_pending+0x1a4/0x580
[ 29.491735][ C0] ? __virt_addr_valid+0x224/0x2d0
[ 29.496929][ C0] ? mod_delayed_work_on+0xe0/0xe0
[ 29.502038][ C0] ? kasan_addr_to_slab+0xd/0x80
[ 29.506981][ C0] ? __kasan_check_write+0x14/0x20
[ 29.512083][ C0] ? __cancel_work+0x198/0x200
[ 29.516845][ C0] addrconf_dad_completed+0x192/0xe80
[ 29.522217][ C0] ? addrconf_dad_stop+0x440/0x440
[ 29.527410][ C0] addrconf_dad_work+0xc1b/0x14a0
[ 29.532437][ C0] ? srcu_reschedule+0x7c/0xf0
[ 29.537207][ C0] ? __cfi_addrconf_dad_work+0x10/0x10
[ 29.542667][ C0] ? __kasan_check_write+0x14/0x20
[ 29.547778][ C0] ? _raw_spin_lock_irq+0x95/0xf0
[ 29.552813][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 29.558364][ C0] process_one_work+0x717/0xc30
[ 29.563209][ C0] worker_thread+0xa4d/0x11d0
[ 29.567882][ C0] kthread+0x281/0x320
[ 29.571945][ C0] ? __cfi_worker_thread+0x10/0x10
[ 29.577053][ C0] ? __cfi_kthread+0x10/0x10
[ 29.581639][ C0] ret_from_fork+0x1f/0x30
[ 29.586055][ C0]
[ 29.589066][ C0]
[ 29.591381][ C0] Allocated by task 397:
[ 29.595612][ C0] kasan_set_track+0x4b/0x70
[ 29.600196][ C0] kasan_save_alloc_info+0x1f/0x30
[ 29.605297][ C0] __kasan_kmalloc+0x95/0xb0
[ 29.609883][ C0] __kmalloc+0xb4/0x1e0
[ 29.614032][ C0] l2tp_session_create+0x38/0xbd0
[ 29.619057][ C0] pppol2tp_connect+0xbf5/0x1640
[ 29.623992][ C0] __sys_connect+0x3da/0x460
[ 29.628576][ C0] __x64_sys_connect+0x7a/0x90
[ 29.633336][ C0] x64_sys_call+0x88d/0x9a0
[ 29.637835][ C0] do_syscall_64+0x4c/0xa0
[ 29.642248][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.648143][ C0]
[ 29.650457][ C0] Freed by task 405:
[ 29.654337][ C0] kasan_set_track+0x4b/0x70
[ 29.658920][ C0] kasan_save_free_info+0x2b/0x40
[ 29.663934][ C0] ____kasan_slab_free+0x132/0x180
[ 29.669040][ C0] __kasan_slab_free+0x11/0x20
[ 29.673910][ C0] slab_free_freelist_hook+0xc2/0x190
[ 29.679304][ C0] __kmem_cache_free+0xb7/0x1b0
[ 29.684175][ C0] kfree+0x6f/0xf0
[ 29.687903][ C0] l2tp_session_put+0xaf/0x1a0
[ 29.692663][ C0] l2tp_session_delete+0x3df/0x4d0
[ 29.697771][ C0] l2tp_tunnel_del_work+0x199/0x410
[ 29.702964][ C0] process_one_work+0x717/0xc30
[ 29.707807][ C0] worker_thread+0xa4d/0x11d0
[ 29.712476][ C0] kthread+0x281/0x320
[ 29.716538][ C0] ret_from_fork+0x1f/0x30
[ 29.720948][ C0]
[ 29.723264][ C0] Last potentially related work creation:
[ 29.728970][ C0] kasan_save_stack+0x3a/0x60
[ 29.733640][ C0] __kasan_record_aux_stack+0xb6/0xc0
[ 29.739012][ C0] kasan_record_aux_stack_noalloc+0xb/0x10
[ 29.744827][ C0] call_rcu+0xcf/0xf50
[ 29.748898][ C0] pppol2tp_release+0x1e3/0x2b0
[ 29.753756][ C0] sock_close+0xc9/0x220
[ 29.757998][ C0] __fput+0x1fd/0x8f0
[ 29.762154][ C0] ____fput+0x15/0x20
[ 29.766133][ C0] task_work_run+0x1e1/0x250
[ 29.770720][ C0] do_exit+0xb0d/0x29f0
[ 29.774883][ C0] __cfi___ia32_sys_exit+0x0/0x10
[ 29.779909][ C0] x64_sys_call+0x67/0x9a0
[ 29.784322][ C0] do_syscall_64+0x4c/0xa0
[ 29.788736][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.794632][ C0]
[ 29.796951][ C0] The buggy address belongs to the object at ffff88812c964400
[ 29.796951][ C0] which belongs to the cache kmalloc-512 of size 512
[ 29.810999][ C0] The buggy address is located 400 bytes inside of
[ 29.810999][ C0] 512-byte region [ffff88812c964400, ffff88812c964600)
[ 29.824267][ C0]
[ 29.826585][ C0] The buggy address belongs to the physical page:
[ 29.832987][ C0] page:ffffea0004b25900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c964
[ 29.843215][ C0] head:ffffea0004b25900 order:2 compound_mapcount:0 compound_pincount:0
[ 29.851528][ C0] flags: 0x4000000000010200(slab|head|zone=1)
[ 29.857596][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 29.866175][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 29.874745][ C0] page dumped because: kasan: bad access detected
[ 29.881142][ C0] page_owner tracks the page as allocated
[ 29.886843][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 374, tgid 374 (syz-executor), ts 28861066735, free_ts 27095937487
[ 29.909408][ C0] post_alloc_hook+0x1f5/0x210
[ 29.914175][ C0] prep_new_page+0x1c/0x110
[ 29.918674][ C0] get_page_from_freelist+0x2ca9/0x2d20
[ 29.924221][ C0] __alloc_pages+0x1fa/0x610
[ 29.928808][ C0] alloc_slab_page+0x6e/0xf0
[ 29.933390][ C0] new_slab+0x98/0x3e0
[ 29.937452][ C0] ___slab_alloc+0x70f/0xb70
[ 29.942037][ C0] __slab_alloc+0x5e/0xa0
[ 29.946393][ C0] __kmem_cache_alloc_node+0x204/0x2d0
[ 29.951850][ C0] __kmalloc+0xa4/0x1e0
[ 29.955999][ C0] fib6_info_alloc+0x34/0xe0
[ 29.960586][ C0] ip6_route_info_create+0x51b/0x14d0
[ 29.965956][ C0] ip6_route_add+0x27/0x130
[ 29.970449][ C0] addrconf_add_dev+0x388/0x4a0
[ 29.975296][ C0] addrconf_init_auto_addrs+0x7b9/0xbc0
[ 29.980924][ C0] addrconf_notify+0x7fe/0xe30
[ 29.985683][ C0] page last free stack trace:
[ 29.990344][ C0] free_unref_page_prepare+0x81b/0x820
[ 29.995802][ C0] free_unref_page+0x93/0x530
[ 30.000476][ C0] __free_pages+0x67/0x100
[ 30.004890][ C0] __vunmap+0xa3c/0xc00
[ 30.009037][ C0] vfree+0x61/0x90
[ 30.012749][ C0] kcov_close+0x2b/0x50
[ 30.016893][ C0] __fput+0x1fd/0x8f0
[ 30.020869][ C0] ____fput+0x15/0x20
[ 30.024851][ C0] task_work_run+0x1e1/0x250
[ 30.029436][ C0] do_exit+0xb0d/0x29f0
[ 30.033597][ C0] do_group_exit+0x21b/0x2e0
[ 30.038192][ C0] get_signal+0x167c/0x1700
[ 30.042695][ C0] arch_do_signal_or_restart+0xd1/0x11c0
[ 30.048325][ C0] exit_to_user_mode_loop+0x7a/0xb0
[ 30.053516][ C0] exit_to_user_mode_prepare+0x87/0xd0
[ 30.058966][ C0] syscall_exit_to_user_mode+0x1a/0x30
[ 30.064421][ C0]
[ 30.066742][ C0] Memory state around the buggy address:
[ 30.072365][ C0] ffff88812c964480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.080421][ C0] ffff88812c964500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.088472][ C0] >ffff88812c964580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.096521][ C0] ^
[ 30.101098][ C0] ffff88812c964600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.109154][ C0] ffff88812c964680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.117202][ C0] ==================================================================
[ 30.125316][ C0] Disabling lock debugging due to kernel taint
[ 30.153336][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 30.153350][ T28] audit: type=1400 audit(1790142478.719:108): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 30.154638][ T376] device veth1_macvtap entered promiscuous mode
[ 30.161852][ T28] audit: type=1400 audit(1790142478.729:109): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.214210][ T372] device veth1_macvtap entered promiscuous mode
[ 30.216339][ T28] audit: type=1400 audit(1790142478.729:110): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.229591][ T381] device veth0_vlan entered promiscuous mode
[ 30.255456][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.263252][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.271739][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.279930][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.288151][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.291500][ T28] audit: type=1400 audit(1790142478.729:111): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.296470][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.324022][ T28] audit: type=1400 audit(1790142478.729:112): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.324366][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.353329][ T28] audit: type=1400 audit(1790142478.729:113): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.353837][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.384669][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.394797][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.398248][ T28] audit: type=1400 audit(1790142478.729:114): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.410771][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.433911][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.443258][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.451213][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.459450][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.467249][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.476125][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.483827][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.498239][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.506822][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.526862][ T377] device veth1_macvtap entered promiscuous mode
[ 30.554743][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.570940][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.573686][ T463] ------------[ cut here ]------------
[ 30.584599][ T463] WARNING: CPU: 0 PID: 463 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.590459][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.594643][ T463] Modules linked in:
[ 30.605182][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.606607][ T463] CPU: 0 PID: 463 Comm: syz.5.42 Tainted: G B syzkaller #0
[ 30.615194][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.623241][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.641406][ T463] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.647762][ T463] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 30.667436][ T463] RSP: 0018:ffffc90000ca7b90 EFLAGS: 00010293
[ 30.673559][ T463] RAX: ffffffff849c74c7 RBX: ffff888119c71000 RCX: ffff8881188a5100
[ 30.681575][ T463] RDX: 0000000000000000 RSI: 000000001a2ce000 RDI: 000000000c04eb7d
[ 30.689603][ T463] RBP: ffffc90000ca7bb0 R08: ffff888119c71083 R09: 1ffff1102338e210
[ 30.697617][ T463] R10: dffffc0000000000 R11: ffffed102338e211 R12: dffffc0000000000
[ 30.705677][ T463] R13: dffffc0000000000 R14: 000000001a2ce000 R15: ffff888116aef000
[ 30.713700][ T463] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.722698][ T463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.729353][ T463] CR2: 00007f7a13759270 CR3: 000000013007b000 CR4: 00000000003506b0
[ 30.737443][ T463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.745483][ T463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.753520][ T463] Call Trace:
[ 30.756816][ T463]
[ 30.759794][ T463] pppol2tp_release+0x150/0x2b0
[ 30.764670][ T463] sock_close+0xc9/0x220
[ 30.768978][ T463] ? __cfi_sock_close+0x10/0x10
[ 30.773856][ T463] __fput+0x1fd/0x8f0
[ 30.777867][ T463] ____fput+0x15/0x20
[ 30.781901][ T463] task_work_run+0x1e1/0x250
[ 30.786518][ T463] ? __cfi_task_work_run+0x10/0x10
[ 30.791712][ T463] ? free_nsproxy+0x21f/0x270
[ 30.796424][ T463] do_exit+0xb0d/0x29f0
[ 30.800636][ T463] ? __cfi_do_exit+0x10/0x10
[ 30.805255][ T463] ? xfd_validate_state+0x70/0x150
[ 30.810425][ T463] ? __kasan_check_write+0x14/0x20
[ 30.815559][ T463] __x64_sys_exit+0x40/0x40
[ 30.820136][ T463] x64_sys_call+0x67/0x9a0
[ 30.824581][ T463] do_syscall_64+0x4c/0xa0
[ 30.829055][ T463] ? clear_bhb_loop+0x30/0x80
[ 30.833761][ T463] ? clear_bhb_loop+0x30/0x80
[ 30.838462][ T463] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.844407][ T463] RIP: 0033:0x7f7a1379e159
[ 30.848891][ T463] Code: Unable to access opcode bytes at 0x7f7a1379e12f.
[ 30.855929][ T463] RSP: 002b:00007f7a14662ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 30.864406][ T463] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7a1379e159
[ 30.872441][ T463] RDX: 00007f7a146639c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.880497][ T463] RBP: 00007f7a1383506b R08: 0000000000000000 R09: 0000000000000058
[ 30.888494][ T463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 30.896522][ T463] R13: 00007f7a13a26038 R14: 00007f7a13a25fa0 R15: 00007ffe876c02d8
[ 30.904554][ T463]
[ 30.907590][ T463] ---[ end trace 0000000000000000 ]---
[ 30.930860][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.941213][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.981636][ T381] device veth1_macvtap entered promiscuous mode
[ 30.995289][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 31.007254][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.018433][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 31.027684][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.037388][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.089464][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.099335][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.114706][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.124545][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.179998][ T584] ------------[ cut here ]------------
[ 31.185506][ T584] WARNING: CPU: 0 PID: 584 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.195987][ T584] Modules linked in:
[ 31.200003][ T584] CPU: 0 PID: 584 Comm: syz.2.81 Tainted: G B W syzkaller #0
[ 31.208613][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.218821][ T584] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.225192][ T584] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 31.245213][ T584] RSP: 0018:ffffc90001077b90 EFLAGS: 00010293
[ 31.251428][ T584] RAX: ffffffff849c74c7 RBX: ffff88811c644000 RCX: ffff88811c7e5100
[ 31.259527][ T584] RDX: 0000000000000000 RSI: 000000002ba3b4c0 RDI: 000000000c04eb7d
[ 31.267613][ T584] RBP: ffffc90001077bb0 R08: ffff88811c644083 R09: 1ffff110238c8810
[ 31.275709][ T584] R10: dffffc0000000000 R11: ffffed10238c8811 R12: dffffc0000000000
[ 31.283737][ T584] R13: dffffc0000000000 R14: 000000002ba3b4c0 R15: ffff88811bafa800
[ 31.291762][ T584] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.300764][ T584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.307371][ T584] CR2: 00007f94a4d28ff8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 31.315418][ T584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.323449][ T584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.331513][ T584] Call Trace:
[ 31.334818][ T584]
[ 31.337766][ T584] pppol2tp_release+0x150/0x2b0
[ 31.342685][ T584] sock_close+0xc9/0x220
[ 31.346947][ T584] ? __cfi_sock_close+0x10/0x10
[ 31.351910][ T584] __fput+0x1fd/0x8f0
[ 31.355923][ T584] ____fput+0x15/0x20
[ 31.359986][ T584] task_work_run+0x1e1/0x250
[ 31.364602][ T584] ? __cfi_task_work_run+0x10/0x10
[ 31.369776][ T584] ? free_nsproxy+0x21f/0x270
[ 31.374491][ T584] do_exit+0xb0d/0x29f0
[ 31.378806][ T584] ? __cfi_do_exit+0x10/0x10
[ 31.383423][ T584] ? xfd_validate_state+0x70/0x150
[ 31.388563][ T584] ? __kasan_check_write+0x14/0x20
[ 31.393748][ T584] __x64_sys_exit+0x40/0x40
[ 31.398279][ T584] x64_sys_call+0x67/0x9a0
[ 31.402769][ T584] do_syscall_64+0x4c/0xa0
[ 31.407305][ T584] ? clear_bhb_loop+0x30/0x80
[ 31.412052][ T584] ? clear_bhb_loop+0x30/0x80
[ 31.416752][ T584] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.422704][ T584] RIP: 0033:0x7fb089d9e159
[ 31.427147][ T584] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 31.434255][ T584] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.442738][ T584] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 31.450771][ T584] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.458791][ T584] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 31.466791][ T584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.474833][ T584] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 31.482854][ T584]
[ 31.485891][ T584] ---[ end trace 0000000000000000 ]---
[ 31.540049][ T8] device bridge_slave_1 left promiscuous mode
[ 31.546266][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.589498][ T8] device bridge_slave_0 left promiscuous mode
[ 31.623018][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.655935][ T682] ------------[ cut here ]------------
[ 31.661504][ T682] WARNING: CPU: 0 PID: 682 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.671815][ T682] Modules linked in:
[ 31.675870][ T682] CPU: 0 PID: 682 Comm: syz.6.97 Tainted: G B W syzkaller #0
[ 31.684530][ T682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.694649][ T682] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.701079][ T682] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 31.720803][ T682] RSP: 0018:ffffc90001497b90 EFLAGS: 00010293
[ 31.726910][ T682] RAX: ffffffff849c74c7 RBX: ffff888117d7c000 RCX: ffff888117cda880
[ 31.735095][ T682] RDX: 0000000000000000 RSI: 0000000020211800 RDI: 000000000c04eb7d
[ 31.743124][ T682] RBP: ffffc90001497bb0 R08: ffff888117d7c083 R09: 1ffff11022faf810
[ 31.751179][ T682] R10: dffffc0000000000 R11: ffffed1022faf811 R12: dffffc0000000000
[ 31.759217][ T682] R13: dffffc0000000000 R14: 0000000020211800 R15: ffff88811ddc2000
[ 31.767256][ T682] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.776341][ T682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.783077][ T682] CR2: 00007f6f60227dac CR3: 000000011047d000 CR4: 00000000003506b0
[ 31.791118][ T682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.799147][ T682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.807142][ T682] Call Trace:
[ 31.810475][ T682]
[ 31.813514][ T682] pppol2tp_release+0x150/0x2b0
[ 31.818403][ T682] sock_close+0xc9/0x220
[ 31.822731][ T682] ? __cfi_sock_close+0x10/0x10
[ 31.827611][ T682] __fput+0x1fd/0x8f0
[ 31.831716][ T682] ____fput+0x15/0x20
[ 31.835722][ T682] task_work_run+0x1e1/0x250
[ 31.840373][ T682] ? __cfi_task_work_run+0x10/0x10
[ 31.845508][ T682] ? free_nsproxy+0x21f/0x270
[ 31.850263][ T682] do_exit+0xb0d/0x29f0
[ 31.854445][ T682] ? __cfi_do_exit+0x10/0x10
[ 31.859094][ T682] ? xfd_validate_state+0x70/0x150
[ 31.864237][ T682] ? __kasan_check_write+0x14/0x20
[ 31.869509][ T682] __x64_sys_exit+0x40/0x40
[ 31.874045][ T682] x64_sys_call+0x67/0x9a0
[ 31.878493][ T682] do_syscall_64+0x4c/0xa0
[ 31.882990][ T682] ? clear_bhb_loop+0x30/0x80
[ 31.887693][ T682] ? clear_bhb_loop+0x30/0x80
[ 31.892429][ T682] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.898346][ T682] RIP: 0033:0x7f94a3d9e159
[ 31.902819][ T682] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 31.910026][ T682] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.918468][ T682] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 31.926511][ T682] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.934536][ T682] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 31.942571][ T682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.950589][ T682] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 31.958587][ T682]
[ 31.961667][ T682] ---[ end trace 0000000000000000 ]---
[ 31.967359][ T8] device veth1_macvtap left promiscuous mode
[ 31.986340][ T8] device veth0_vlan left promiscuous mode
[ 32.133468][ T849] ------------[ cut here ]------------
[ 32.139035][ T849] WARNING: CPU: 0 PID: 849 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.149311][ T849] Modules linked in:
[ 32.153234][ T849] CPU: 0 PID: 849 Comm: syz.2.159 Tainted: G B W syzkaller #0
[ 32.162012][ T849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.172182][ T849] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.178549][ T849] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 32.198294][ T849] RSP: 0018:ffffc90001497b90 EFLAGS: 00010293
[ 32.204529][ T849] RAX: ffffffff849c74c7 RBX: ffff88811edaf000 RCX: ffff88811ed98000
[ 32.212657][ T849] RDX: 0000000000000000 RSI: 0000000012c90ba0 RDI: 000000000c04eb7d
[ 32.220783][ T849] RBP: ffffc90001497bb0 R08: ffff88811edaf083 R09: 1ffff11023db5e10
[ 32.229000][ T849] R10: dffffc0000000000 R11: ffffed1023db5e11 R12: dffffc0000000000
[ 32.237005][ T849] R13: dffffc0000000000 R14: 0000000012c90ba0 R15: ffff888119dc8400
[ 32.245042][ T849] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.254047][ T849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.260706][ T849] CR2: 00005555579d94e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 32.268777][ T849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.276779][ T849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.284824][ T849] Call Trace:
[ 32.288120][ T849]
[ 32.291136][ T849] pppol2tp_release+0x150/0x2b0
[ 32.296028][ T849] sock_close+0xc9/0x220
[ 32.300337][ T849] ? __cfi_sock_close+0x10/0x10
[ 32.305230][ T849] __fput+0x1fd/0x8f0
[ 32.309481][ T849] ____fput+0x15/0x20
[ 32.313495][ T849] task_work_run+0x1e1/0x250
[ 32.318117][ T849] ? __cfi_task_work_run+0x10/0x10
[ 32.323294][ T849] ? free_nsproxy+0x21f/0x270
[ 32.327997][ T849] do_exit+0xb0d/0x29f0
[ 32.332292][ T849] ? __cfi_do_exit+0x10/0x10
[ 32.336919][ T849] ? xfd_validate_state+0x70/0x150
[ 32.342106][ T849] ? __kasan_check_write+0x14/0x20
[ 32.347245][ T849] __x64_sys_exit+0x40/0x40
[ 32.351833][ T849] x64_sys_call+0x67/0x9a0
[ 32.356268][ T849] do_syscall_64+0x4c/0xa0
[ 32.360738][ T849] ? clear_bhb_loop+0x30/0x80
[ 32.365437][ T849] ? clear_bhb_loop+0x30/0x80
[ 32.370201][ T849] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.376112][ T849] RIP: 0033:0x7fb089d9e159
[ 32.380581][ T849] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 32.387612][ T849] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.396286][ T849] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 32.404317][ T849] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.412333][ T849] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 32.420365][ T849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.428354][ T849] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 32.436397][ T849]
[ 32.439453][ T849] ---[ end trace 0000000000000000 ]---
2026/09/23 05:48:01 executed programs: 219
[ 32.493001][ T28] audit: type=1400 audit(1790142481.059:115): avc: denied { write } for pid=295 comm="syz-execprog" path="pipe:[14931]" dev="pipefs" ino=14931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 32.602818][ T1037] ------------[ cut here ]------------
[ 32.608358][ T1037] WARNING: CPU: 0 PID: 1037 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.618522][ T1037] Modules linked in:
[ 32.622459][ T1037] CPU: 0 PID: 1037 Comm: syz.6.212 Tainted: G B W syzkaller #0
[ 32.631535][ T1037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.641674][ T1037] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.648062][ T1037] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 32.667759][ T1037] RSP: 0018:ffffc900020a7b90 EFLAGS: 00010293
[ 32.673877][ T1037] RAX: ffffffff849c74c7 RBX: ffff8881234d6000 RCX: ffff888121d4d100
[ 32.681777][ T1035] ------------[ cut here ]------------
[ 32.681916][ T1037] RDX: 0000000000000000 RSI: 0000000022b43a80 RDI: 000000000c04eb7d
[ 32.687349][ T1035] WARNING: CPU: 1 PID: 1035 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.695321][ T1037] RBP: ffffc900020a7bb0 R08: ffff8881234d6083 R09: 1ffff1102469ac10
[ 32.695338][ T1037] R10: dffffc0000000000 R11: ffffed102469ac11 R12: dffffc0000000000
[ 32.695351][ T1037] R13: dffffc0000000000 R14: 0000000022b43a80 R15: ffff8881200f4000
[ 32.695364][ T1037] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.695380][ T1037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.705590][ T1035] Modules linked in:
[ 32.713480][ T1037] CR2: 00007f7a14558060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 32.721464][ T1035]
[ 32.721473][ T1035] CPU: 1 PID: 1035 Comm: syz.3.213 Tainted: G B W syzkaller #0
[ 32.729500][ T1037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.738393][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.744982][ T1037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.744996][ T1037] Call Trace:
[ 32.745002][ T1037]
[ 32.745010][ T1037] pppol2tp_release+0x150/0x2b0
[ 32.748994][ T1035] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.756921][ T1037] sock_close+0xc9/0x220
[ 32.756944][ T1037] ? __cfi_sock_close+0x10/0x10
[ 32.756962][ T1037] __fput+0x1fd/0x8f0
[ 32.756986][ T1037] ____fput+0x15/0x20
[ 32.757007][ T1037] task_work_run+0x1e1/0x250
[ 32.759352][ T1035] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 32.759371][ T1035] RSP: 0018:ffffc900015b7b90 EFLAGS: 00010293
[ 32.759389][ T1035] RAX: ffffffff849c74c7 RBX: ffff888123610000 RCX: ffff88811044e540
[ 32.759404][ T1035] RDX: 0000000000000000 RSI: 000000002f5723c0 RDI: 000000000c04eb7d
[ 32.768159][ T1037] ? __cfi_task_work_run+0x10/0x10
[ 32.776174][ T1035] RBP: ffffc900015b7bb0 R08: ffff888123610083 R09: 1ffff110246c2010
[ 32.786219][ T1037] ? free_nsproxy+0x21f/0x270
[ 32.794202][ T1035] R10: dffffc0000000000 R11: ffffed10246c2011 R12: dffffc0000000000
[ 32.794217][ T1035] R13: dffffc0000000000 R14: 000000002f5723c0 R15: ffff8881209e1000
[ 32.797490][ T1037] do_exit+0xb0d/0x29f0
[ 32.800456][ T1035] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.805296][ T1037] ? __cfi_do_exit+0x10/0x10
[ 32.811635][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.815863][ T1037] ? xfd_validate_state+0x70/0x150
[ 32.820722][ T1035] CR2: 00007ffd738c9e80 CR3: 000000012eee9000 CR4: 00000000003506a0
[ 32.824681][ T1037] ? __kasan_check_write+0x14/0x20
[ 32.828650][ T1035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.833233][ T1037] __x64_sys_exit+0x40/0x40
[ 32.852843][ T1035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.852857][ T1035] Call Trace:
[ 32.852863][ T1035]
[ 32.858919][ T1037] x64_sys_call+0x67/0x9a0
[ 32.858943][ T1037] do_syscall_64+0x4c/0xa0
[ 32.866900][ T1035] pppol2tp_release+0x150/0x2b0
[ 32.874894][ T1037] ? clear_bhb_loop+0x30/0x80
[ 32.874915][ T1037] ? clear_bhb_loop+0x30/0x80
[ 32.874934][ T1037] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.874952][ T1037] RIP: 0033:0x7f94a3d9e159
[ 32.874966][ T1037] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 32.874974][ T1037] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.874993][ T1037] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 32.875006][ T1037] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.875018][ T1037] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 32.875030][ T1037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.880147][ T1035] sock_close+0xc9/0x220
[ 32.888102][ T1037] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 32.892783][ T1035] ? __cfi_sock_close+0x10/0x10
[ 32.901113][ T1037]
[ 32.909106][ T1035] __fput+0x1fd/0x8f0
[ 32.909137][ T1035] ____fput+0x15/0x20
[ 32.909157][ T1035] task_work_run+0x1e1/0x250
[ 32.913310][ T1037] ---[ end trace 0000000000000000 ]---
[ 32.922279][ T1035] ? __cfi_task_work_run+0x10/0x10
[ 33.104654][ T1035] ? free_nsproxy+0x21f/0x270
[ 33.109467][ T1035] do_exit+0xb0d/0x29f0
[ 33.113652][ T1035] ? __cfi_do_exit+0x10/0x10
[ 33.118271][ T1035] ? xfd_validate_state+0x70/0x150
[ 33.123443][ T1035] ? __kasan_check_write+0x14/0x20
[ 33.128574][ T1035] __x64_sys_exit+0x40/0x40
[ 33.133144][ T1035] x64_sys_call+0x67/0x9a0
[ 33.137584][ T1035] do_syscall_64+0x4c/0xa0
[ 33.142055][ T1035] ? clear_bhb_loop+0x30/0x80
[ 33.146751][ T1035] ? clear_bhb_loop+0x30/0x80
[ 33.151486][ T1035] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.157405][ T1035] RIP: 0033:0x7f556cd9e159
[ 33.161867][ T1035] Code: Unable to access opcode bytes at 0x7f556cd9e12f.
[ 33.168911][ T1035] RSP: 002b:00007f556dc41ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.177347][ T1035] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f556cd9e159
[ 33.185395][ T1035] RDX: 00007f556dc429c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.193438][ T1035] RBP: 00007f556ce3506b R08: 0000000000000000 R09: 0000000000000058
[ 33.201471][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.209478][ T1035] R13: 00007f556d026038 R14: 00007f556d025fa0 R15: 00007ffd738c9f68
[ 33.217478][ T1035]
[ 33.220564][ T1035] ---[ end trace 0000000000000000 ]---
[ 33.370273][ T1174] ------------[ cut here ]------------
[ 33.375808][ T1174] WARNING: CPU: 0 PID: 1174 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.386155][ T1174] Modules linked in:
[ 33.390271][ T1174] CPU: 0 PID: 1174 Comm: syz.6.272 Tainted: G B W syzkaller #0
[ 33.399161][ T1174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.409374][ T1174] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.415839][ T1174] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 33.435592][ T1174] RSP: 0018:ffffc90002787b90 EFLAGS: 00010293
[ 33.441818][ T1174] RAX: ffffffff849c74c7 RBX: ffff888131390000 RCX: ffff8881143b3cc0
[ 33.449962][ T1174] RDX: 0000000000000000 RSI: 000000001e94af40 RDI: 000000000c04eb7d
[ 33.457960][ T1174] RBP: ffffc90002787bb0 R08: ffff888131390083 R09: 1ffff11026272010
[ 33.466084][ T1174] R10: dffffc0000000000 R11: ffffed1026272011 R12: dffffc0000000000
[ 33.474181][ T1174] R13: dffffc0000000000 R14: 000000001e94af40 R15: ffff88812c7b3c00
[ 33.482300][ T1174] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.491354][ T1174] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.497962][ T1174] CR2: 00007f7a14662ff8 CR3: 000000012c86f000 CR4: 00000000003506b0
[ 33.506072][ T1174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.514228][ T1174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.522419][ T1174] Call Trace:
[ 33.525722][ T1174]
[ 33.528674][ T1174] pppol2tp_release+0x150/0x2b0
[ 33.533698][ T1174] sock_close+0xc9/0x220
[ 33.537957][ T1174] ? __cfi_sock_close+0x10/0x10
[ 33.542968][ T1174] __fput+0x1fd/0x8f0
[ 33.547061][ T1174] ____fput+0x15/0x20
[ 33.551211][ T1174] task_work_run+0x1e1/0x250
[ 33.555919][ T1174] ? __cfi_task_work_run+0x10/0x10
[ 33.561182][ T1174] ? free_nsproxy+0x21f/0x270
[ 33.565889][ T1174] do_exit+0xb0d/0x29f0
[ 33.570211][ T1174] ? __cfi_do_exit+0x10/0x10
[ 33.574834][ T1174] ? xfd_validate_state+0x70/0x150
[ 33.580082][ T1174] ? __kasan_check_write+0x14/0x20
[ 33.585215][ T1174] __x64_sys_exit+0x40/0x40
[ 33.589853][ T1174] x64_sys_call+0x67/0x9a0
[ 33.594293][ T1174] do_syscall_64+0x4c/0xa0
[ 33.598802][ T1174] ? clear_bhb_loop+0x30/0x80
[ 33.603507][ T1174] ? clear_bhb_loop+0x30/0x80
[ 33.608205][ T1174] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.614185][ T1174] RIP: 0033:0x7f94a3d9e159
[ 33.618624][ T1174] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 33.625701][ T1174] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.634168][ T1174] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 33.642200][ T1174] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.650225][ T1174] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 33.658218][ T1174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.666253][ T1174] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 33.674444][ T1174]
[ 33.677483][ T1174] ---[ end trace 0000000000000000 ]---
[ 33.700925][ T1277] ------------[ cut here ]------------
[ 33.706430][ T1277] WARNING: CPU: 1 PID: 1277 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.716607][ T1277] Modules linked in:
[ 33.720595][ T1277] CPU: 1 PID: 1277 Comm: syz.2.297 Tainted: G B W syzkaller #0
[ 33.729624][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.739750][ T1277] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.746112][ T1277] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 33.765904][ T1277] RSP: 0018:ffffc90002857b90 EFLAGS: 00010293
[ 33.772133][ T1277] RAX: ffffffff849c74c7 RBX: ffff88810e9b2000 RCX: ffff88813043a880
[ 33.779751][ T1283] ------------[ cut here ]------------
[ 33.780239][ T1277] RDX: 0000000000000000 RSI: 0000000010325dc0 RDI: 000000000c04eb7d
[ 33.785704][ T1283] WARNING: CPU: 0 PID: 1283 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.793691][ T1277] RBP: ffffc90002857bb0 R08: ffff88810e9b2083 R09: 1ffff11021d36410
[ 33.793709][ T1277] R10: dffffc0000000000 R11: ffffed1021d36411 R12: dffffc0000000000
[ 33.803785][ T1283] Modules linked in:
[ 33.803800][ T1283] CPU: 0 PID: 1283 Comm: syz.0.307 Tainted: G B W syzkaller #0
[ 33.811788][ T1277] R13: dffffc0000000000 R14: 0000000010325dc0 R15: ffff8881203dd800
[ 33.811804][ T1277] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.811820][ T1277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.811832][ T1277] CR2: 00007f6f6005f90c CR3: 000000000700f000 CR4: 00000000003506a0
[ 33.811849][ T1277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.819939][ T1283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.823778][ T1277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.832578][ T1283] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.840569][ T1277] Call Trace:
[ 33.840576][ T1277]
[ 33.849505][ T1283] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 33.849522][ T1283] RSP: 0018:ffffc90002647b90 EFLAGS: 00010293
[ 33.856175][ T1277] pppol2tp_release+0x150/0x2b0
[ 33.864179][ T1283]
[ 33.872146][ T1277] sock_close+0xc9/0x220
[ 33.872166][ T1277] ? __cfi_sock_close+0x10/0x10
[ 33.872183][ T1277] __fput+0x1fd/0x8f0
[ 33.872206][ T1277] ____fput+0x15/0x20
[ 33.872227][ T1277] task_work_run+0x1e1/0x250
[ 33.882336][ T1283] RAX: ffffffff849c74c7 RBX: ffff8881126d3000 RCX: ffff88810d340000
[ 33.890354][ T1277] ? __cfi_task_work_run+0x10/0x10
[ 33.896669][ T1283] RDX: 0000000000000000 RSI: 000000002c7a1000 RDI: 000000000c04eb7d
[ 33.899957][ T1277] ? free_nsproxy+0x21f/0x270
[ 33.902893][ T1283] RBP: ffffc90002647bb0 R08: ffff8881126d3083 R09: 1ffff110224da610
[ 33.922525][ T1277] do_exit+0xb0d/0x29f0
[ 33.922553][ T1277] ? __cfi_do_exit+0x10/0x10
[ 33.928611][ T1283] R10: dffffc0000000000 R11: ffffed10224da611 R12: dffffc0000000000
[ 33.933700][ T1277] ? xfd_validate_state+0x70/0x150
[ 33.935783][ T1283] R13: dffffc0000000000 R14: 000000002c7a1000 R15: ffff8881203da800
[ 33.940104][ T1277] ? __kasan_check_write+0x14/0x20
[ 33.944881][ T1283] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.948865][ T1277] __x64_sys_exit+0x40/0x40
[ 33.952833][ T1283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.957409][ T1277] x64_sys_call+0x67/0x9a0
[ 33.965432][ T1283] CR2: 00007f556db58060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.970508][ T1277] do_syscall_64+0x4c/0xa0
[ 33.978481][ T1283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.983151][ T1277] ? clear_bhb_loop+0x30/0x80
[ 33.991197][ T1283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.995288][ T1277] ? clear_bhb_loop+0x30/0x80
[ 33.999884][ T1283] Call Trace:
[ 33.999890][ T1283]
[ 34.007842][ T1277] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.012959][ T1283] pppol2tp_release+0x150/0x2b0
[ 34.020993][ T1277] RIP: 0033:0x7fb089d9e159
[ 34.026126][ T1283] sock_close+0xc9/0x220
[ 34.035055][ T1277] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 34.035065][ T1277] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246
[ 34.039564][ T1283] ? __cfi_sock_close+0x10/0x10
[ 34.039585][ T1283] __fput+0x1fd/0x8f0
[ 34.046152][ T1277] ORIG_RAX: 000000000000003c
[ 34.050618][ T1283] ____fput+0x15/0x20
[ 34.058541][ T1277] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 34.062966][ T1283] task_work_run+0x1e1/0x250
[ 34.071111][ T1277] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.075625][ T1283] ? __cfi_task_work_run+0x10/0x10
[ 34.083693][ T1277] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 34.088274][ T1283] ? free_nsproxy+0x21f/0x270
[ 34.091567][ T1277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.094489][ T1283] do_exit+0xb0d/0x29f0
[ 34.100379][ T1277] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 34.105218][ T1283] ? __cfi_do_exit+0x10/0x10
[ 34.109642][ T1277]
[ 34.113862][ T1283] ? xfd_validate_state+0x70/0x150
[ 34.120883][ T1277] ---[ end trace 0000000000000000 ]---
[ 34.126936][ T1283] ? __kasan_check_write+0x14/0x20
[ 34.227428][ T1283] __x64_sys_exit+0x40/0x40
[ 34.232218][ T1283] x64_sys_call+0x67/0x9a0
[ 34.236676][ T1283] do_syscall_64+0x4c/0xa0
[ 34.241280][ T1283] ? clear_bhb_loop+0x30/0x80
[ 34.245993][ T1283] ? clear_bhb_loop+0x30/0x80
[ 34.250737][ T1283] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.256664][ T1283] RIP: 0033:0x7f6f5ff9e159
[ 34.261146][ T1283] Code: Unable to access opcode bytes at 0x7f6f5ff9e12f.
[ 34.268182][ T1283] RSP: 002b:00007f6f60e4fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.276659][ T1283] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6f5ff9e159
[ 34.284768][ T1283] RDX: 00007f6f60e509c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.292798][ T1283] RBP: 00007f6f6003506b R08: 0000000000000000 R09: 0000000000000058
[ 34.300830][ T1283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.309035][ T1283] R13: 00007f6f60226038 R14: 00007f6f60225fa0 R15: 00007fff8f6dc898
[ 34.317073][ T1283]
[ 34.320163][ T1283] ---[ end trace 0000000000000000 ]---
[ 34.337897][ T1317] ------------[ cut here ]------------
[ 34.343525][ T1317] WARNING: CPU: 0 PID: 1317 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.353788][ T1317] Modules linked in:
[ 34.357708][ T1317] CPU: 0 PID: 1317 Comm: syz.2.313 Tainted: G B W syzkaller #0
[ 34.366599][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.376800][ T1317] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.383288][ T1317] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 34.403230][ T1317] RSP: 0018:ffffc90002c57b90 EFLAGS: 00010293
[ 34.409589][ T1317] RAX: ffffffff849c74c7 RBX: ffff888112eac000 RCX: ffff88812c9de540
[ 34.417594][ T1317] RDX: 0000000000000000 RSI: 000000000f2f4700 RDI: 000000000c04eb7d
[ 34.425688][ T1317] RBP: ffffc90002c57bb0 R08: ffff888112eac083 R09: 1ffff110225d5810
[ 34.433788][ T1317] R10: dffffc0000000000 R11: ffffed10225d5811 R12: dffffc0000000000
[ 34.442030][ T1317] R13: dffffc0000000000 R14: 000000000f2f4700 R15: ffff88810db32c00
[ 34.450156][ T1317] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.459225][ T1317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.465832][ T1317] CR2: 0000555583d224e8 CR3: 00000001105a3000 CR4: 00000000003506b0
[ 34.473934][ T1317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.481965][ T1317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.489996][ T1317] Call Trace:
[ 34.493305][ T1317]
[ 34.496254][ T1317] pppol2tp_release+0x150/0x2b0
[ 34.501173][ T1317] sock_close+0xc9/0x220
[ 34.505444][ T1317] ? __cfi_sock_close+0x10/0x10
[ 34.510358][ T1317] __fput+0x1fd/0x8f0
[ 34.514368][ T1317] ____fput+0x15/0x20
[ 34.518377][ T1317] task_work_run+0x1e1/0x250
[ 34.523044][ T1317] ? __cfi_task_work_run+0x10/0x10
[ 34.528201][ T1317] ? free_nsproxy+0x21f/0x270
[ 34.532956][ T1317] do_exit+0xb0d/0x29f0
[ 34.537142][ T1317] ? __cfi_do_exit+0x10/0x10
[ 34.541879][ T1317] ? xfd_validate_state+0x70/0x150
[ 34.547028][ T1317] ? __kasan_check_write+0x14/0x20
[ 34.552395][ T1317] __x64_sys_exit+0x40/0x40
[ 34.556932][ T1317] x64_sys_call+0x67/0x9a0
[ 34.561461][ T1317] do_syscall_64+0x4c/0xa0
[ 34.565907][ T1317] ? clear_bhb_loop+0x30/0x80
[ 34.570653][ T1317] ? clear_bhb_loop+0x30/0x80
[ 34.575350][ T1317] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.581298][ T1317] RIP: 0033:0x7fb089d9e159
[ 34.585727][ T1317] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 34.592809][ T1317] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.601270][ T1317] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 34.609295][ T1317] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.617289][ T1317] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 34.625311][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.633427][ T1317] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 34.641480][ T1317]
[ 34.644514][ T1317] ---[ end trace 0000000000000000 ]---
[ 34.867988][ T1504] ------------[ cut here ]------------
[ 34.873757][ T1504] WARNING: CPU: 0 PID: 1504 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.884075][ T1504] Modules linked in:
[ 34.887998][ T1504] CPU: 0 PID: 1504 Comm: syz.5.371 Tainted: G B W syzkaller #0
[ 34.896946][ T1504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.907164][ T1504] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.913664][ T1504] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 34.933467][ T1504] RSP: 0018:ffffc90003affb90 EFLAGS: 00010293
[ 34.939750][ T1504] RAX: ffffffff849c74c7 RBX: ffff888112225000 RCX: ffff88811b141440
[ 34.947756][ T1504] RDX: 0000000000000000 RSI: 0000000015baa928 RDI: 000000000c04eb7d
[ 34.956145][ T1504] RBP: ffffc90003affbb0 R08: ffff888112225083 R09: 1ffff11022444a10
[ 34.964486][ T1504] R10: dffffc0000000000 R11: ffffed1022444a11 R12: dffffc0000000000
[ 34.972620][ T1504] R13: dffffc0000000000 R14: 0000000015baa928 R15: ffff88811065bc00
[ 34.980794][ T1504] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.989846][ T1504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.996455][ T1504] CR2: 00007ffd738c8b80 CR3: 0000000122b13000 CR4: 00000000003506b0
[ 35.004575][ T1504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.012701][ T1504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.020787][ T1504] Call Trace:
[ 35.024142][ T1504]
[ 35.027091][ T1504] pppol2tp_release+0x150/0x2b0
[ 35.032125][ T1504] sock_close+0xc9/0x220
[ 35.036402][ T1504] ? __cfi_sock_close+0x10/0x10
[ 35.041341][ T1504] __fput+0x1fd/0x8f0
[ 35.045403][ T1504] ____fput+0x15/0x20
[ 35.049443][ T1504] task_work_run+0x1e1/0x250
[ 35.054077][ T1504] ? __cfi_task_work_run+0x10/0x10
[ 35.059254][ T1504] ? free_nsproxy+0x21f/0x270
[ 35.063958][ T1504] do_exit+0xb0d/0x29f0
[ 35.068145][ T1504] ? __cfi_do_exit+0x10/0x10
[ 35.072905][ T1504] ? xfd_validate_state+0x70/0x150
[ 35.078042][ T1504] ? __kasan_check_write+0x14/0x20
[ 35.083221][ T1504] __x64_sys_exit+0x40/0x40
[ 35.087759][ T1504] x64_sys_call+0x67/0x9a0
[ 35.092238][ T1504] do_syscall_64+0x4c/0xa0
[ 35.096691][ T1504] ? clear_bhb_loop+0x30/0x80
[ 35.101433][ T1504] ? clear_bhb_loop+0x30/0x80
[ 35.106131][ T1504] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.112261][ T1504] RIP: 0033:0x7f7a1379e159
[ 35.116703][ T1504] Code: Unable to access opcode bytes at 0x7f7a1379e12f.
[ 35.123831][ T1504] RSP: 002b:00007f7a14662ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.132313][ T1504] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7a1379e159
[ 35.140331][ T1504] RDX: 00007f7a146639c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.148322][ T1504] RBP: 00007f7a1383506b R08: 0000000000000000 R09: 0000000000000058
[ 35.156357][ T1504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.164372][ T1504] R13: 00007f7a13a26038 R14: 00007f7a13a25fa0 R15: 00007ffe876c02d8
[ 35.172410][ T1504]
[ 35.175445][ T1504] ---[ end trace 0000000000000000 ]---
[ 35.368760][ T1672] ------------[ cut here ]------------
[ 35.374293][ T1672] WARNING: CPU: 1 PID: 1672 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.384456][ T1672] Modules linked in:
[ 35.388395][ T1672] CPU: 1 PID: 1672 Comm: syz.2.421 Tainted: G B W syzkaller #0
[ 35.397215][ T1672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.407313][ T1672] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.413705][ T1672] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 35.433581][ T1672] RSP: 0018:ffffc90003f2fb90 EFLAGS: 00010293
[ 35.439833][ T1672] RAX: ffffffff849c74c7 RBX: ffff888117d7d000 RCX: ffff888118071440
[ 35.447844][ T1672] RDX: 0000000000000000 RSI: 000000001febc400 RDI: 000000000c04eb7d
[ 35.455910][ T1672] RBP: ffffc90003f2fbb0 R08: ffff888117d7d083 R09: 1ffff11022fafa10
[ 35.463930][ T1672] R10: dffffc0000000000 R11: ffffed1022fafa11 R12: dffffc0000000000
[ 35.471955][ T1672] R13: dffffc0000000000 R14: 000000001febc400 R15: ffff88811ddc6400
[ 35.480081][ T1672] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.489067][ T1672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.495679][ T1672] CR2: 00007f556db58060 CR3: 000000012eee9000 CR4: 00000000003506a0
[ 35.503710][ T1672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.511963][ T1672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.520123][ T1672] Call Trace:
[ 35.523453][ T1672]
[ 35.526404][ T1672] pppol2tp_release+0x150/0x2b0
[ 35.531314][ T1672] sock_close+0xc9/0x220
[ 35.535582][ T1672] ? __cfi_sock_close+0x10/0x10
[ 35.540539][ T1672] __fput+0x1fd/0x8f0
[ 35.544611][ T1672] ____fput+0x15/0x20
[ 35.548612][ T1672] task_work_run+0x1e1/0x250
[ 35.553247][ T1672] ? __cfi_task_work_run+0x10/0x10
[ 35.558375][ T1672] ? free_nsproxy+0x21f/0x270
[ 35.563183][ T1672] do_exit+0xb0d/0x29f0
[ 35.567366][ T1672] ? __cfi_do_exit+0x10/0x10
[ 35.572005][ T1672] ? xfd_validate_state+0x70/0x150
[ 35.577150][ T1672] ? __kasan_check_write+0x14/0x20
[ 35.582319][ T1672] __x64_sys_exit+0x40/0x40
[ 35.586844][ T1672] x64_sys_call+0x67/0x9a0
[ 35.591453][ T1672] do_syscall_64+0x4c/0xa0
[ 35.595900][ T1672] ? clear_bhb_loop+0x30/0x80
[ 35.600633][ T1672] ? clear_bhb_loop+0x30/0x80
[ 35.605342][ T1672] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.611284][ T1672] RIP: 0033:0x7fb089d9e159
[ 35.615719][ T1672] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 35.622788][ T1672] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.631260][ T1672] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 35.639290][ T1672] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.647279][ T1672] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 35.655309][ T1672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.663318][ T1672] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 35.671341][ T1672]
[ 35.674385][ T1672] ---[ end trace 0000000000000000 ]---
[ 35.775341][ T1790] ------------[ cut here ]------------
[ 35.781008][ T1790] WARNING: CPU: 0 PID: 1790 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.791344][ T1790] Modules linked in:
[ 35.795262][ T1790] CPU: 0 PID: 1790 Comm: syz.6.474 Tainted: G B W syzkaller #0
[ 35.804349][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.814589][ T1790] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.821122][ T1790] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 35.840905][ T1790] RSP: 0018:ffffc90000b37b90 EFLAGS: 00010293
[ 35.847442][ T1790] RAX: ffffffff849c74c7 RBX: ffff8881148ec000 RCX: ffff88811bf43cc0
[ 35.855823][ T1790] RDX: 0000000000000000 RSI: 000000001d772000 RDI: 000000000c04eb7d
[ 35.863940][ T1790] RBP: ffffc90000b37bb0 R08: ffff8881148ec083 R09: 1ffff1102291d810
[ 35.872028][ T1790] R10: dffffc0000000000 R11: ffffed102291d811 R12: dffffc0000000000
[ 35.880143][ T1790] R13: dffffc0000000000 R14: 000000001d772000 R15: ffff88811066b800
[ 35.888142][ T1790] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.897205][ T1790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.903909][ T1790] CR2: 00007f7a13a27dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 35.912030][ T1790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.920153][ T1790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.928232][ T1790] Call Trace:
[ 35.931627][ T1790]
[ 35.934577][ T1790] pppol2tp_release+0x150/0x2b0
[ 35.939562][ T1790] sock_close+0xc9/0x220
[ 35.943831][ T1790] ? __cfi_sock_close+0x10/0x10
[ 35.948803][ T1790] __fput+0x1fd/0x8f0
[ 35.952813][ T1790] ____fput+0x15/0x20
[ 35.956824][ T1790] task_work_run+0x1e1/0x250
[ 35.961537][ T1790] ? __cfi_task_work_run+0x10/0x10
[ 35.966674][ T1790] ? free_nsproxy+0x21f/0x270
[ 35.971498][ T1790] do_exit+0xb0d/0x29f0
[ 35.975687][ T1790] ? __cfi_do_exit+0x10/0x10
[ 35.980415][ T1790] ? xfd_validate_state+0x70/0x150
[ 35.985557][ T1790] ? __kasan_check_write+0x14/0x20
[ 35.990781][ T1790] __x64_sys_exit+0x40/0x40
[ 35.995310][ T1790] x64_sys_call+0x67/0x9a0
[ 35.999790][ T1790] do_syscall_64+0x4c/0xa0
[ 36.004239][ T1790] ? clear_bhb_loop+0x30/0x80
[ 36.008982][ T1790] ? clear_bhb_loop+0x30/0x80
[ 36.013677][ T1790] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.019632][ T1790] RIP: 0033:0x7f94a3d9e159
[ 36.024074][ T1790] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 36.031587][ T1790] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.040065][ T1790] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 36.048067][ T1790] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.056110][ T1790] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 36.064214][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.072281][ T1790] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 36.080307][ T1790]
[ 36.083348][ T1790] ---[ end trace 0000000000000000 ]---
[ 36.113678][ T1888] ------------[ cut here ]------------
[ 36.119365][ T1888] WARNING: CPU: 1 PID: 1888 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.129705][ T1888] Modules linked in:
[ 36.133618][ T1888] CPU: 1 PID: 1888 Comm: syz.2.502 Tainted: G B W syzkaller #0
[ 36.142701][ T1888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.153026][ T1888] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.159542][ T1888] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 36.179345][ T1888] RSP: 0018:ffffc90003f77b90 EFLAGS: 00010293
[ 36.185441][ T1888] RAX: ffffffff849c74c7 RBX: ffff88810e6c1000 RCX: ffff8881091e3cc0
[ 36.193647][ T1888] RDX: 0000000000000000 RSI: 000000002f356640 RDI: 000000000c04eb7d
[ 36.201857][ T1888] RBP: ffffc90003f77bb0 R08: ffff88810e6c1083 R09: 1ffff11021cd8210
[ 36.210040][ T1888] R10: dffffc0000000000 R11: ffffed1021cd8211 R12: dffffc0000000000
[ 36.218219][ T1888] R13: dffffc0000000000 R14: 000000002f356640 R15: ffff88811ff9cc00
[ 36.226393][ T1888] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.235548][ T1888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.242336][ T1888] CR2: 00007f7a14662ff8 CR3: 000000000700f000 CR4: 00000000003506a0
[ 36.250610][ T1888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.258609][ T1888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.266760][ T1888] Call Trace:
[ 36.270237][ T1888]
[ 36.273310][ T1888] pppol2tp_release+0x150/0x2b0
[ 36.278193][ T1888] sock_close+0xc9/0x220
[ 36.282623][ T1888] ? __cfi_sock_close+0x10/0x10
[ 36.287494][ T1888] __fput+0x1fd/0x8f0
[ 36.291664][ T1888] ____fput+0x15/0x20
[ 36.295670][ T1888] task_work_run+0x1e1/0x250
[ 36.300430][ T1888] ? __cfi_task_work_run+0x10/0x10
[ 36.305578][ T1888] ? free_nsproxy+0x21f/0x270
[ 36.310434][ T1888] do_exit+0xb0d/0x29f0
[ 36.314621][ T1888] ? __cfi_do_exit+0x10/0x10
[ 36.319365][ T1888] ? xfd_validate_state+0x70/0x150
[ 36.324507][ T1888] ? __kasan_check_write+0x14/0x20
[ 36.329884][ T1888] __x64_sys_exit+0x40/0x40
[ 36.334419][ T1888] x64_sys_call+0x67/0x9a0
[ 36.339035][ T1888] do_syscall_64+0x4c/0xa0
[ 36.343480][ T1888] ? clear_bhb_loop+0x30/0x80
[ 36.348230][ T1888] ? clear_bhb_loop+0x30/0x80
[ 36.353095][ T1888] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.359137][ T1888] RIP: 0033:0x7fb089d9e159
[ 36.363567][ T1888] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 36.370722][ T1888] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.379288][ T1888] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 36.387275][ T1888] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.395449][ T1888] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 36.403596][ T1888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.411739][ T1888] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 36.419859][ T1888]
[ 36.422889][ T1888] ---[ end trace 0000000000000000 ]---
[ 36.458613][ T1989] ------------[ cut here ]------------
[ 36.464200][ T1989] WARNING: CPU: 0 PID: 1989 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.474350][ T1989] Modules linked in:
[ 36.478283][ T1989] CPU: 0 PID: 1989 Comm: syz.6.538 Tainted: G B W syzkaller #0
[ 36.487121][ T1989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.497236][ T1989] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.503620][ T1989] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 36.523310][ T1989] RSP: 0018:ffffc900040a7b90 EFLAGS: 00010293
[ 36.529440][ T1989] RAX: ffffffff849c74c7 RBX: ffff88812b8c7000 RCX: ffff888110289440
[ 36.537438][ T1989] RDX: 0000000000000000 RSI: 000000002493d688 RDI: 000000000c04eb7d
[ 36.545501][ T1989] RBP: ffffc900040a7bb0 R08: ffff88812b8c7083 R09: 1ffff11025718e10
[ 36.553523][ T1989] R10: dffffc0000000000 R11: ffffed1025718e11 R12: dffffc0000000000
[ 36.561570][ T1989] R13: dffffc0000000000 R14: 000000002493d688 R15: ffff888112a81800
[ 36.569700][ T1989] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.578672][ T1989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.585319][ T1989] CR2: 00007ffe82a00018 CR3: 000000012c86f000 CR4: 00000000003506b0
[ 36.593355][ T1989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.601385][ T1989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.609415][ T1989] Call Trace:
[ 36.612707][ T1989]
[ 36.615659][ T1989] pppol2tp_release+0x150/0x2b0
[ 36.620579][ T1989] sock_close+0xc9/0x220
[ 36.624843][ T1989] ? __cfi_sock_close+0x10/0x10
[ 36.629744][ T1989] __fput+0x1fd/0x8f0
[ 36.633754][ T1989] ____fput+0x15/0x20
[ 36.637757][ T1989] task_work_run+0x1e1/0x250
[ 36.642412][ T1989] ? __cfi_task_work_run+0x10/0x10
[ 36.647632][ T1989] ? free_nsproxy+0x21f/0x270
[ 36.652377][ T1989] do_exit+0xb0d/0x29f0
[ 36.656558][ T1989] ? __cfi_do_exit+0x10/0x10
[ 36.661242][ T1989] ? xfd_validate_state+0x70/0x150
[ 36.666389][ T1989] ? __kasan_check_write+0x14/0x20
[ 36.671564][ T1989] __x64_sys_exit+0x40/0x40
[ 36.676137][ T1989] x64_sys_call+0x67/0x9a0
[ 36.680612][ T1989] do_syscall_64+0x4c/0xa0
[ 36.685058][ T1989] ? clear_bhb_loop+0x30/0x80
[ 36.689812][ T1989] ? clear_bhb_loop+0x30/0x80
[ 36.694509][ T1989] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.700465][ T1989] RIP: 0033:0x7f94a3d9e159
[ 36.704899][ T1989] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 36.711980][ T1989] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.720550][ T1989] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 36.728549][ T1989] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.736584][ T1989] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 36.744606][ T1989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.752650][ T1989] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 36.760677][ T1989]
[ 36.763723][ T1989] ---[ end trace 0000000000000000 ]---
[ 36.825414][ T2063] ------------[ cut here ]------------
[ 36.830948][ T2063] WARNING: CPU: 1 PID: 2063 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.841091][ T2063] Modules linked in:
[ 36.845015][ T2063] CPU: 1 PID: 2063 Comm: syz.6.548 Tainted: G B W syzkaller #0
[ 36.853831][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.863938][ T2063] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.870459][ T2063] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 36.890321][ T2063] RSP: 0018:ffffc90003f77b90 EFLAGS: 00010293
[ 36.896437][ T2063] RAX: ffffffff849c74c7 RBX: ffff88812da96000 RCX: ffff8881100ea880
[ 36.904472][ T2063] RDX: 0000000000000000 RSI: 000000001c91e580 RDI: 000000000c04eb7d
[ 36.912514][ T2063] RBP: ffffc90003f77bb0 R08: ffff88812da96083 R09: 1ffff11025b52c10
[ 36.920642][ T2063] R10: dffffc0000000000 R11: ffffed1025b52c11 R12: dffffc0000000000
[ 36.928911][ T2063] R13: dffffc0000000000 R14: 000000001c91e580 R15: ffff888108dc9800
[ 36.937182][ T2063] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.946221][ T2063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.953434][ T2063] CR2: 00007f6f5fe70050 CR3: 000000010d4ac000 CR4: 00000000003506a0
[ 36.961483][ T2063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.969506][ T2063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.977511][ T2063] Call Trace:
[ 36.980841][ T2063]
[ 36.983787][ T2063] pppol2tp_release+0x150/0x2b0
[ 36.988664][ T2063] sock_close+0xc9/0x220
[ 36.992965][ T2063] ? __cfi_sock_close+0x10/0x10
[ 36.997840][ T2063] __fput+0x1fd/0x8f0
[ 37.001890][ T2063] ____fput+0x15/0x20
[ 37.005895][ T2063] task_work_run+0x1e1/0x250
[ 37.010546][ T2063] ? __cfi_task_work_run+0x10/0x10
[ 37.015682][ T2063] ? free_nsproxy+0x21f/0x270
[ 37.020449][ T2063] do_exit+0xb0d/0x29f0
[ 37.024636][ T2063] ? __cfi_do_exit+0x10/0x10
[ 37.029425][ T2063] ? xfd_validate_state+0x70/0x150
[ 37.034569][ T2063] ? __kasan_check_write+0x14/0x20
[ 37.039839][ T2063] __x64_sys_exit+0x40/0x40
[ 37.044376][ T2063] x64_sys_call+0x67/0x9a0
[ 37.048851][ T2063] do_syscall_64+0x4c/0xa0
[ 37.053293][ T2063] ? clear_bhb_loop+0x30/0x80
[ 37.057992][ T2063] ? clear_bhb_loop+0x30/0x80
[ 37.062727][ T2063] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.068654][ T2063] RIP: 0033:0x7f94a3d9e159
[ 37.073128][ T2063] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 37.080193][ T2063] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.088638][ T2063] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 37.096862][ T2063] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.104874][ T2063] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 37.112902][ T2063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.120914][ T2063] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 37.128942][ T2063]
[ 37.131977][ T2063] ---[ end trace 0000000000000000 ]---
[ 37.187854][ T2193] ------------[ cut here ]------------
[ 37.193613][ T2193] WARNING: CPU: 0 PID: 2193 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.203952][ T2193] Modules linked in:
[ 37.207874][ T2193] CPU: 0 PID: 2193 Comm: syz.5.602 Tainted: G B W syzkaller #0
[ 37.216792][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.227019][ T2193] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.233534][ T2193] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 37.253413][ T2193] RSP: 0018:ffffc900017bfb90 EFLAGS: 00010293
[ 37.259699][ T2193] RAX: ffffffff849c74c7 RBX: ffff888132734000 RCX: ffff88812faa0000
[ 37.267704][ T2193] RDX: 0000000000000000 RSI: 0000000031aa1400 RDI: 000000000c04eb7d
[ 37.276030][ T2193] RBP: ffffc900017bfbb0 R08: ffff888132734083 R09: 1ffff110264e6810
[ 37.284248][ T2193] R10: dffffc0000000000 R11: ffffed10264e6811 R12: dffffc0000000000
[ 37.292311][ T2193] R13: dffffc0000000000 R14: 0000000031aa1400 R15: ffff8881122c1400
[ 37.300344][ T2193] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.309337][ T2193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.315940][ T2193] CR2: 00007fb08a027dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 37.323980][ T2193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.332005][ T2193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.340039][ T2193] Call Trace:
[ 37.343350][ T2193]
[ 37.346299][ T2193] pppol2tp_release+0x150/0x2b0
[ 37.351646][ T2193] sock_close+0xc9/0x220
[ 37.355917][ T2193] ? __cfi_sock_close+0x10/0x10
[ 37.360968][ T2193] __fput+0x1fd/0x8f0
[ 37.364989][ T2193] ____fput+0x15/0x20
[ 37.369025][ T2193] task_work_run+0x1e1/0x250
[ 37.373644][ T2193] ? __cfi_task_work_run+0x10/0x10
[ 37.378836][ T2193] ? free_nsproxy+0x21f/0x270
[ 37.383633][ T2193] do_exit+0xb0d/0x29f0
[ 37.387822][ T2193] ? __cfi_do_exit+0x10/0x10
[ 37.392462][ T2193] ? xfd_validate_state+0x70/0x150
[ 37.397607][ T2193] ? __kasan_check_write+0x14/0x20
[ 37.402769][ T2193] __x64_sys_exit+0x40/0x40
[ 37.407301][ T2193] x64_sys_call+0x67/0x9a0
[ 37.411780][ T2193] do_syscall_64+0x4c/0xa0
[ 37.416228][ T2193] ? clear_bhb_loop+0x30/0x80
[ 37.420953][ T2193] ? clear_bhb_loop+0x30/0x80
[ 37.425658][ T2193] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.431762][ T2193] RIP: 0033:0x7f7a1379e159
[ 37.436370][ T2193] Code: Unable to access opcode bytes at 0x7f7a1379e12f.
[ 37.443441][ T2193] RSP: 002b:00007f7a14662ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.451942][ T2193] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7a1379e159
[ 37.459973][ T2193] RDX: 00007f7a146639c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.467970][ T2193] RBP: 00007f7a1383506b R08: 0000000000000000 R09: 0000000000000058
[ 37.476060][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
2026/09/23 05:48:06 executed programs: 647
[ 37.484081][ T2193] R13: 00007f7a13a26038 R14: 00007f7a13a25fa0 R15: 00007ffe876c02d8
[ 37.492112][ T2193]
[ 37.495240][ T2193] ---[ end trace 0000000000000000 ]---
[ 37.565081][ T2325] ------------[ cut here ]------------
[ 37.570753][ T2325] WARNING: CPU: 1 PID: 2325 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.581026][ T2325] Modules linked in:
[ 37.585085][ T2325] CPU: 1 PID: 2325 Comm: syz.6.648 Tainted: G B W syzkaller #0
[ 37.594229][ T2325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.604727][ T2325] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.611232][ T2325] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 37.631032][ T2325] RSP: 0018:ffffc90001d6fb90 EFLAGS: 00010293
[ 37.637351][ T2325] RAX: ffffffff849c74c7 RBX: ffff88811617c000 RCX: ffff88811514d100
[ 37.645479][ T2325] RDX: 0000000000000000 RSI: 0000000011e6f300 RDI: 000000000c04eb7d
[ 37.653654][ T2325] RBP: ffffc90001d6fbb0 R08: ffff88811617c083 R09: 1ffff11022c2f810
[ 37.661898][ T2325] R10: dffffc0000000000 R11: ffffed1022c2f811 R12: dffffc0000000000
[ 37.670264][ T2325] R13: dffffc0000000000 R14: 0000000011e6f300 R15: ffff888108c8f400
[ 37.678263][ T2325] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.687413][ T2325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.694239][ T2325] CR2: 00007f6f60d58060 CR3: 000000000700f000 CR4: 00000000003506a0
[ 37.702361][ T2325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.710498][ T2325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.718492][ T2325] Call Trace:
[ 37.722001][ T2325]
[ 37.724957][ T2325] pppol2tp_release+0x150/0x2b0
[ 37.729889][ T2325] sock_close+0xc9/0x220
[ 37.734163][ T2325] ? __cfi_sock_close+0x10/0x10
[ 37.739118][ T2325] __fput+0x1fd/0x8f0
[ 37.743133][ T2325] ____fput+0x15/0x20
[ 37.747145][ T2325] task_work_run+0x1e1/0x250
[ 37.751809][ T2325] ? __cfi_task_work_run+0x10/0x10
[ 37.756950][ T2325] ? free_nsproxy+0x21f/0x270
[ 37.761710][ T2325] do_exit+0xb0d/0x29f0
[ 37.765905][ T2325] ? __cfi_do_exit+0x10/0x10
[ 37.770558][ T2325] ? xfd_validate_state+0x70/0x150
[ 37.775705][ T2325] ? __kasan_check_write+0x14/0x20
[ 37.780880][ T2325] __x64_sys_exit+0x40/0x40
[ 37.785410][ T2325] x64_sys_call+0x67/0x9a0
[ 37.789884][ T2325] do_syscall_64+0x4c/0xa0
[ 37.794343][ T2325] ? clear_bhb_loop+0x30/0x80
[ 37.799091][ T2325] ? clear_bhb_loop+0x30/0x80
[ 37.803790][ T2325] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.809750][ T2325] RIP: 0033:0x7f94a3d9e159
[ 37.814187][ T2325] Code: Unable to access opcode bytes at 0x7f94a3d9e12f.
[ 37.821257][ T2325] RSP: 002b:00007f94a4d28ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.829780][ T2325] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f94a3d9e159
[ 37.837775][ T2325] RDX: 00007f94a4d299c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.845801][ T2325] RBP: 00007f94a3e3506b R08: 0000000000000000 R09: 0000000000000058
[ 37.853995][ T2325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.862017][ T2325] R13: 00007f94a4026038 R14: 00007f94a4025fa0 R15: 00007ffe829ffcb8
[ 37.870045][ T2325]
[ 37.873079][ T2325] ---[ end trace 0000000000000000 ]---
[ 37.901640][ T2437] ------------[ cut here ]------------
[ 37.907149][ T2437] WARNING: CPU: 0 PID: 2437 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.917353][ T2437] Modules linked in:
[ 37.921349][ T2437] CPU: 0 PID: 2437 Comm: syz.2.683 Tainted: G B W syzkaller #0
[ 37.930284][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.940397][ T2437] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.946781][ T2437] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 37.966455][ T2437] RSP: 0018:ffffc90001d3fb90 EFLAGS: 00010293
[ 37.972573][ T2437] RAX: ffffffff849c74c7 RBX: ffff888116958000 RCX: ffff88813043d100
[ 37.980633][ T2437] RDX: 0000000000000000 RSI: 000000000f0c9480 RDI: 000000000c04eb7d
[ 37.988754][ T2437] RBP: ffffc90001d3fbb0 R08: ffff888116958083 R09: 1ffff11022d2b010
[ 37.996752][ T2437] R10: dffffc0000000000 R11: ffffed1022d2b011 R12: dffffc0000000000
[ 38.004814][ T2437] R13: dffffc0000000000 R14: 000000000f0c9480 R15: ffff88812bf26800
[ 38.012857][ T2437] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.021940][ T2437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.028553][ T2437] CR2: 0000555570a7c908 CR3: 000000000700f000 CR4: 00000000003506b0
[ 38.036763][ T2437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.044786][ T2437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.052818][ T2437] Call Trace:
[ 38.056113][ T2437]
[ 38.059109][ T2437] pppol2tp_release+0x150/0x2b0
[ 38.064101][ T2437] sock_close+0xc9/0x220
[ 38.068369][ T2437] ? __cfi_sock_close+0x10/0x10
[ 38.073405][ T2437] __fput+0x1fd/0x8f0
[ 38.077419][ T2437] ____fput+0x15/0x20
[ 38.081538][ T2437] task_work_run+0x1e1/0x250
[ 38.086154][ T2437] ? __cfi_task_work_run+0x10/0x10
[ 38.091319][ T2437] ? free_nsproxy+0x21f/0x270
[ 38.096026][ T2437] do_exit+0xb0d/0x29f0
[ 38.100264][ T2437] ? __cfi_do_exit+0x10/0x10
[ 38.104920][ T2437] ? xfd_validate_state+0x70/0x150
[ 38.110101][ T2437] ? __kasan_check_write+0x14/0x20
[ 38.115234][ T2437] __x64_sys_exit+0x40/0x40
[ 38.119799][ T2437] x64_sys_call+0x67/0x9a0
[ 38.124240][ T2437] do_syscall_64+0x4c/0xa0
[ 38.128684][ T2437] ? clear_bhb_loop+0x30/0x80
[ 38.133412][ T2437] ? clear_bhb_loop+0x30/0x80
[ 38.138115][ T2437] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.144076][ T2437] RIP: 0033:0x7fb089d9e159
[ 38.148520][ T2437] Code: Unable to access opcode bytes at 0x7fb089d9e12f.
[ 38.155584][ T2437] RSP: 002b:00007fb089bfeef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.164053][ T2437] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb089d9e159
[ 38.172099][ T2437] RDX: 00007fb089bff9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.180127][ T2437] RBP: 00007fb089e3506b R08: 0000000000000000 R09: 0000000000000058
[ 38.188127][ T2437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.196156][ T2437] R13: 00007fb08a026038 R14: 00007fb08a025fa0 R15: 00007ffc0725c788
[ 38.204184][ T2437]
[ 38.207219][ T2437] ---[ end trace 0000000000000000 ]---
[ 38.251273][ T2521] ------------[ cut here ]------------
[ 38.256794][ T2521] WARNING: CPU: 0 PID: 2521 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.266952][ T2521] Modules linked in:
[ 38.270975][ T2521] CPU: 0 PID: 2521 Comm: syz.3.712 Tainted: G B W syzkaller #0
[ 38.279899][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.290084][ T2521] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.296455][ T2521] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 38.316243][ T2521] RSP: 0018:ffffc90002477b90 EFLAGS: 00010293
[ 38.322499][ T2521] RAX: ffffffff849c74c7 RBX: ffff888117d63000 RCX: ffff888132295100
[ 38.330594][ T2521] RDX: 0000000000000000 RSI: 00000000313466c0 RDI: 000000000c04eb7d
[ 38.338594][ T2521] RBP: ffffc90002477bb0 R08: ffff888117d63083 R09: 1ffff11022fac610
[ 38.346717][ T2521] R10: dffffc0000000000 R11: ffffed1022fac611 R12: dffffc0000000000
[ 38.354820][ T2521] R13: dffffc0000000000 R14: 00000000313466c0 R15: ffff88810debf400
[ 38.362933][ T2521] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.372020][ T2521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.378748][ T2521] CR2: 0000555570a614e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 38.386834][ T2521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.394962][ T2521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.403071][ T2521] Call Trace:
[ 38.406375][ T2521]
[ 38.409363][ T2521] pppol2tp_release+0x150/0x2b0
[ 38.414242][ T2521] sock_close+0xc9/0x220
[ 38.418506][ T2521] ? __cfi_sock_close+0x10/0x10
[ 38.423428][ T2521] __fput+0x1fd/0x8f0
[ 38.427433][ T2521] ____fput+0x15/0x20
[ 38.431490][ T2521] task_work_run+0x1e1/0x250
[ 38.436112][ T2521] ? __cfi_task_work_run+0x10/0x10
[ 38.441286][ T2521] ? free_nsproxy+0x21f/0x270
[ 38.445998][ T2521] do_exit+0xb0d/0x29f0
[ 38.450211][ T2521] ? __cfi_do_exit+0x10/0x10
[ 38.454827][ T2521] ? xfd_validate_state+0x70/0x150
[ 38.460006][ T2521] ? __kasan_check_write+0x14/0x20
[ 38.465146][ T2521] __x64_sys_exit+0x40/0x40
[ 38.469713][ T2521] x64_sys_call+0x67/0x9a0
[ 38.474148][ T2521] do_syscall_64+0x4c/0xa0
[ 38.478589][ T2521] ? clear_bhb_loop+0x30/0x80
[ 38.483328][ T2521] ? clear_bhb_loop+0x30/0x80
[ 38.488024][ T2521] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.493985][ T2521] RIP: 0033:0x7f556cd9e159
[ 38.498423][ T2521] Code: Unable to access opcode bytes at 0x7f556cd9e12f.
[ 38.505480][ T2521] RSP: 002b:00007f556dc41ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.513930][ T2521] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f556cd9e159
[ 38.522040][ T2521] RDX: 00007f556dc429c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.530052][ T2521] RBP: 00007f556ce3506b R08: 0000000000000000 R09: 0000000000000058
[ 38.538095][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.546136][ T2521] R13: 00007f556d026038 R14: 00007f556d025fa0 R15: 00007ffd738c9f68
[ 38.554165][ T2521]
[ 38.557203][ T2521] ---[ end trace 0000000000000000 ]---
[ 38.734741][ T2663] ------------[ cut here ]------------
[ 38.740295][ T2663] WARNING: CPU: 0 PID: 2663 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.750545][ T2663] Modules linked in:
[ 38.754456][ T2663] CPU: 0 PID: 2663 Comm: syz.0.757 Tainted: G B W syzkaller #0
[ 38.763458][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.773580][ T2663] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.779987][ T2663] Code: 5d c3 e8 7c f5 d4 fc be 02 00 00 00 eb 0a e8 70 f5 d4 fc be 01 00 00 00 4c 89 f7 e8 e3 b1 cc fd e9 0f ff ff ff e8 59 f5 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 48 f5 d4 fc 4c 89 f7 be 03
[ 38.799661][ T2663] RSP: 0018:ffffc9000257fb90 EFLAGS: 00010293
[ 38.805759][ T2663] RAX: ffffffff849c74c7 RBX: ffff88811415b000 RCX: ffff88811a1c9440
[ 38.813790][ T2663] RDX: 0000000000000000 RSI: 000000000988e580 RDI: 000000000c04eb7d
[ 38.821825][ T2663] RBP: ffffc9000257fbb0 R08: ffff88811415b083 R09: 1ffff1102282b610
[ 38.829861][ T2663] R10: dffffc0000000000 R11: ffffed102282b611 R12: dffffc0000000000
[ 38.837855][ T2663] R13: dffffc0000000000 R14: 000000000988e580 R15: ffff8881122e3800
[ 38.845893][ T2663] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.854880][ T2663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.861541][ T2663] CR2: 00007f7a13a27dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 38.869566][ T2663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.877558][ T2663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.885592][ T2663] Call Trace:
[ 38.888902][ T2663]
[ 38.891852][ T2663] pppol2tp_release+0x150/0x2b0
[ 38.896730][ T2663] sock_close+0xc9/0x220
[ 38.901031][ T2663] ? __cfi_sock_close+0x10/0x10
[ 38.905915][ T2663] __fput+0x1fd/0x8f0
[ 38.909963][ T2663] ____fput+0x15/0x20
[ 38.913970][ T2663] task_work_run+0x1e1/0x250
[ 38.918588][ T2663] ? __cfi_task_work_run+0x10/0x10
[ 38.923776][ T2663] ? free_nsproxy+0x21f/0x270
[ 38.928481][ T2663] do_exit+0xb0d/0x29f0
[ 38.932715][ T2663] ? __cfi_do_exit+0x10/0x10
[ 38.937333][ T2663] ? xfd_validate_state+0x70/0x150
[ 38.942511][ T2663] ? __kasan_check_write+0x14/0x20
[ 38.947639][ T2663] __x64_sys_exit+0x40/0x40
[ 38.952220][ T2663] x64_sys_call+0x67/0x9a0
[ 38.956657][ T2663] do_syscall_64+0x4c/0xa0
[ 38.961146][ T2663] ? clear_bhb_loop+0x30/0x80
[ 38.965853][ T2663] ? clear_bhb_loop+0x30/0x80
[ 38.970598][ T2663] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.976511][ T2663] RIP: 0033:0x7f6f5ff9e159
[ 38.980991][ T2663] Code: Unable to access opcode bytes at 0x7f6f5ff9e12f.
[ 38.988020][ T2663] RSP: 002b:00007f6f60e4fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.996498][ T2663] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6f5ff9e159
[ 39.004522][ T2663] RDX: 00007f6f60e509c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.012614][ T2663] RBP: 00007f6f6003506b R08: 0000000000000000 R09: 0000000000000058
[ 39.020644][ T2663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.028641][ T2663] R13: 00007f6f60226038 R14: 00007f6f60225fa0 R15: 00007fff8f6dc898
[ 39.036777][ T2663]
[ 39.039856][ T2663] ---[ end trace 0000000000000000 ]---
[ 39.085729][ T2778] ------------[ cut here ]------------
[ 39.091269][ T2778] WARNING: CPU: 1 PID: 2778 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.098997][ T2789] ------------[ cut here ]------------
[ 39.101404][ T2778] Modules linked in:
[ 39.106858][ T2789] WARNING: CPU: 0 PID: 2789 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.110857][ T2778] CPU: 1 PID: 2778 Comm: syz.0.786 Tainted: G B W syzkaller #0