Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
2026/07/04 18:52:16 parsed 1 programs
2026/07/04 18:52:16 serving rpc on tcp://34313
[ 24.831979][ T30] audit: type=1400 audit(1783191136.749:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.853373][ T30] audit: type=1400 audit(1783191136.749:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.487617][ T30] audit: type=1400 audit(1783191137.409:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.488949][ T300] cgroup: Unknown subsys name 'net'
[ 25.510562][ T30] audit: type=1400 audit(1783191137.409:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.538272][ T30] audit: type=1400 audit(1783191137.439:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.538434][ T300] cgroup: Unknown subsys name 'devices'
[ 25.677845][ T300] cgroup: Unknown subsys name 'hugetlb'
[ 25.683487][ T300] cgroup: Unknown subsys name 'rlimit'
[ 25.826249][ T30] audit: type=1400 audit(1783191137.749:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.849936][ T30] audit: type=1400 audit(1783191137.749:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.870459][ T30] audit: type=1400 audit(1783191137.749:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.875952][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 25.890931][ T30] audit: type=1400 audit(1783191137.749:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 25.919823][ T30] audit: type=1400 audit(1783191137.749:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.956369][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.435561][ T311] request_module fs-gadgetfs succeeded, but still no fs?
[ 26.762000][ T323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.786204][ T323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.793955][ T323] device bridge_slave_0 entered promiscuous mode
[ 26.802150][ T323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.809384][ T323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.823004][ T323] device bridge_slave_1 entered promiscuous mode
[ 26.984968][ T323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.992064][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.999390][ T323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.006435][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.041979][ T336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.066412][ T336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.076394][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.096154][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.119846][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.128147][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.135185][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.142952][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.151342][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.158418][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.182467][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.191484][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.199496][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.208607][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.216995][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.224418][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.232666][ T323] device veth0_vlan entered promiscuous mode
2026/07/04 18:52:19 executed programs: 0
[ 27.243479][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.253168][ T323] device veth1_macvtap entered promiscuous mode
[ 27.262385][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.272082][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.317589][ T323] syz-executor (323) used greatest stack depth: 21344 bytes left
[ 27.439635][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.446812][ T373] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.454091][ T373] device bridge_slave_0 entered promiscuous mode
[ 27.470691][ T376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.477874][ T376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.485172][ T376] device bridge_slave_0 entered promiscuous mode
[ 27.493334][ T376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.500402][ T376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.507835][ T376] device bridge_slave_1 entered promiscuous mode
[ 27.514382][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.521474][ T373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.528821][ T373] device bridge_slave_1 entered promiscuous mode
[ 27.591064][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.598448][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.605760][ T377] device bridge_slave_0 entered promiscuous mode
[ 27.612689][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.619765][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.627238][ T377] device bridge_slave_1 entered promiscuous mode
[ 27.680667][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.687835][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.695196][ T378] device bridge_slave_0 entered promiscuous mode
[ 27.704606][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.711734][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.719273][ T378] device bridge_slave_1 entered promiscuous mode
[ 27.726321][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.733349][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.740724][ T379] device bridge_slave_0 entered promiscuous mode
[ 27.766879][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.773927][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.781484][ T379] device bridge_slave_1 entered promiscuous mode
[ 27.961220][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.969293][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.989364][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 27.998085][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.006481][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.013495][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.021072][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.036754][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.045088][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.053278][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.060317][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.069936][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.077468][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.104932][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.112485][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.120070][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.129065][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.137477][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.144505][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.152107][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.160605][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.168815][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.175846][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.183294][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.196954][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.204540][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.211945][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.220259][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.228582][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.235586][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.243107][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.251194][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.259224][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.279451][ T373] device veth0_vlan entered promiscuous mode
[ 28.286129][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.294480][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.302737][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.310334][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.318136][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.326601][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.334697][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.341754][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.349464][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.357705][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.365760][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.374246][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.382267][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.390384][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.420028][ T377] device veth0_vlan entered promiscuous mode
[ 28.428368][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.437269][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.445192][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.452782][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.460468][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.469001][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.477535][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.484563][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.492075][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.500581][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.508832][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.515850][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.523349][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.530856][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.538318][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.546658][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.554731][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.561763][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.569133][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.577426][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.585516][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.592548][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.599962][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.607973][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.615876][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.623890][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.631509][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.645486][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.661806][ T377] device veth1_macvtap entered promiscuous mode
[ 28.674602][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.693428][ T373] device veth1_macvtap entered promiscuous mode
[ 28.700727][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.709346][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.717447][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.724782][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.732491][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.740804][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.749434][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.765285][ T376] device veth0_vlan entered promiscuous mode
[ 28.776896][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.785197][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.794550][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.803062][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.816729][ T376] device veth1_macvtap entered promiscuous mode
[ 28.826327][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.834530][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.843083][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 28.850771][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.859156][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.872060][ T379] device veth0_vlan entered promiscuous mode
[ 28.885333][ T379] device veth1_macvtap entered promiscuous mode
[ 28.900186][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.908467][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.917034][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 28.925239][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.933632][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.941565][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.949700][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.958045][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.966387][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 28.973995][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 28.982322][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.990612][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.998972][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.007437][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.015616][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.024150][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.031758][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.046356][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.055812][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.072755][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.083296][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.109394][ T378] device veth0_vlan entered promiscuous mode
[ 29.144961][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.162133][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.200811][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.226448][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.255700][ T378] device veth1_macvtap entered promiscuous mode
[ 29.276821][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.293469][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.303742][ T399] ==================================================================
[ 29.311825][ T399] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.319924][ T399] Read of size 4 at addr ffff888112440c00 by task syz.0.17/399
[ 29.322047][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.327469][ T399]
[ 29.327490][ T399] CPU: 1 PID: 399 Comm: syz.0.17 Not tainted syzkaller #0
[ 29.327508][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 29.354320][ T399] Call Trace:
[ 29.357608][ T399]
[ 29.360541][ T399] __dump_stack+0x21/0x30
[ 29.364871][ T399] dump_stack_lvl+0x110/0x170
[ 29.369551][ T399] ? show_regs_print_info+0x20/0x20
[ 29.374754][ T399] ? load_image+0x3f0/0x3f0
[ 29.379270][ T399] ? __local_bh_enable_ip+0x58/0x80
[ 29.384473][ T399] print_address_description+0x7f/0x2c0
[ 29.390027][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.395750][ T399] kasan_report+0x10f/0x150
[ 29.400260][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.405994][ T399] __asan_report_load4_noabort+0x14/0x20
[ 29.411641][ T399] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 29.417200][ T399] pppol2tp_release+0x150/0x2b0
[ 29.422055][ T399] sock_close+0xb8/0x200
[ 29.426582][ T399] ? sock_mmap+0xa0/0xa0
[ 29.430844][ T399] __fput+0x22b/0x900
[ 29.435011][ T399] ____fput+0x15/0x20
[ 29.439008][ T399] task_work_run+0x127/0x190
[ 29.443602][ T399] do_exit+0xb70/0x29a0
[ 29.447761][ T399] ? _raw_spin_lock_bh+0x94/0xf0
[ 29.452706][ T399] ? put_task_struct+0x90/0x90
[ 29.457472][ T399] ? __kasan_check_write+0x14/0x20
[ 29.463017][ T399] ? l2tp_session_put+0xa0/0x1a0
[ 29.467974][ T399] ? __kasan_check_write+0x14/0x20
[ 29.473103][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 29.478139][ T399] do_group_exit+0x149/0x310
[ 29.482724][ T399] ? __kasan_check_write+0x14/0x20
[ 29.487826][ T399] ? recalc_sigpending+0x1ac/0x230
[ 29.492923][ T399] get_signal+0x64f/0x1430
[ 29.497323][ T399] arch_do_signal_or_restart+0xe2/0x1100
[ 29.503077][ T399] ? selinux_file_ioctl+0x3ad/0x4c0
[ 29.508274][ T399] ? get_sigframe_size+0x10/0x10
[ 29.513288][ T399] ? __se_sys_futex+0x135/0x330
[ 29.518124][ T399] exit_to_user_mode_loop+0xa7/0xe0
[ 29.523301][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 29.528736][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 29.534184][ T399] do_syscall_64+0x58/0xa0
[ 29.538580][ T399] ? clear_bhb_loop+0x50/0xa0
[ 29.543234][ T399] ? clear_bhb_loop+0x50/0xa0
[ 29.547902][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.553776][ T399] RIP: 0033:0x7f3feb742e59
[ 29.558186][ T399] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 29.565536][ T399] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 29.573932][ T399] RAX: 0000000000000001 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 29.581893][ T399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feb9cafac
[ 29.589850][ T399] RBP: 00007f3feb9cafa0 R08: 000f1e1c7bf84377 R09: 0000000000000000
[ 29.597803][ T399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 29.605842][ T399] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 29.613817][ T399]
[ 29.616832][ T399]
[ 29.619153][ T399] Allocated by task 399:
[ 29.623368][ T399] __kasan_kmalloc+0xd4/0x100
[ 29.628030][ T399] __kmalloc+0x13d/0x2c0
[ 29.632258][ T399] l2tp_session_create+0x39/0xb60
[ 29.637264][ T399] pppol2tp_connect+0xbf5/0x1640
[ 29.642184][ T399] __sys_connect+0x3cb/0x450
[ 29.646785][ T399] __x64_sys_connect+0x7a/0x90
[ 29.651536][ T399] x64_sys_call+0x7c/0x9a0
[ 29.655968][ T399] do_syscall_64+0x4c/0xa0
[ 29.660378][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.666282][ T399]
[ 29.668591][ T399] Freed by task 10:
[ 29.672370][ T399] kasan_set_track+0x4a/0x70
[ 29.677037][ T399] kasan_set_free_info+0x23/0x40
[ 29.681954][ T399] ____kasan_slab_free+0x125/0x160
[ 29.687048][ T399] __kasan_slab_free+0x11/0x20
[ 29.691808][ T399] slab_free_freelist_hook+0xc2/0x190
[ 29.697156][ T399] kfree+0xc4/0x270
[ 29.700948][ T399] l2tp_session_put+0xaf/0x1a0
[ 29.705713][ T399] l2tp_session_delete+0x3a9/0x4a0
[ 29.710801][ T399] l2tp_tunnel_del_work+0x180/0x3d0
[ 29.715983][ T399] process_one_work+0x6c8/0xbb0
[ 29.720831][ T399] worker_thread+0xaa0/0x1250
[ 29.725494][ T399] kthread+0x3f5/0x4f0
[ 29.729547][ T399] ret_from_fork+0x1f/0x30
[ 29.733940][ T399]
[ 29.736242][ T399] The buggy address belongs to the object at ffff888112440c00
[ 29.736242][ T399] which belongs to the cache kmalloc-512 of size 512
[ 29.750289][ T399] The buggy address is located 0 bytes inside of
[ 29.750289][ T399] 512-byte region [ffff888112440c00, ffff888112440e00)
[ 29.763375][ T399] The buggy address belongs to the page:
[ 29.768995][ T399] page:ffffea0004491000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112440
[ 29.779230][ T399] head:ffffea0004491000 order:2 compound_mapcount:0 compound_pincount:0
[ 29.787543][ T399] flags: 0x4000000000010200(slab|head|zone=1)
[ 29.793603][ T399] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 29.802304][ T399] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 29.810954][ T399] page dumped because: kasan: bad access detected
[ 29.817347][ T399] page_owner tracks the page as allocated
[ 29.823050][ T399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 378, ts 29108814729, free_ts 28128756905
[ 29.843455][ T399] post_alloc_hook+0x192/0x1b0
[ 29.848213][ T399] prep_new_page+0x1c/0x110
[ 29.852784][ T399] get_page_from_freelist+0x2c3a/0x2cd0
[ 29.858314][ T399] __alloc_pages+0x1a2/0x460
[ 29.862896][ T399] new_slab+0xa0/0x4d0
[ 29.866951][ T399] ___slab_alloc+0x3ac/0x840
[ 29.871531][ T399] __slab_alloc+0x49/0x90
[ 29.875842][ T399] __kmalloc_track_caller+0x169/0x2c0
[ 29.881217][ T399] __alloc_skb+0x210/0x730
[ 29.885615][ T399] netlink_sendmsg+0x611/0xb80
[ 29.890359][ T399] __sys_sendto+0x46d/0x620
[ 29.894860][ T399] __x64_sys_sendto+0xe5/0x100
[ 29.899757][ T399] x64_sys_call+0x178/0x9a0
[ 29.904255][ T399] do_syscall_64+0x4c/0xa0
[ 29.908814][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.914778][ T399] page last free stack trace:
[ 29.919434][ T399] free_unref_page_prepare+0x5fa/0x600
[ 29.924888][ T399] free_unref_page+0xae/0x540
[ 29.929554][ T399] __free_pages+0x6c/0x100
[ 29.934162][ T399] __free_slab+0xe5/0x1e0
[ 29.938485][ T399] __unfreeze_partials+0x15a/0x190
[ 29.943607][ T399] put_cpu_partial+0xc6/0x120
[ 29.948270][ T399] __slab_free+0x1d4/0x290
[ 29.952667][ T399] ___cache_free+0x104/0x120
[ 29.957239][ T399] qlink_free+0x4d/0x90
[ 29.961373][ T399] qlist_free_all+0x5f/0xb0
[ 29.965859][ T399] kasan_quarantine_reduce+0x14a/0x170
[ 29.971306][ T399] __kasan_slab_alloc+0x2f/0xe0
[ 29.976134][ T399] slab_post_alloc_hook+0x4f/0x2b0
[ 29.981224][ T399] kmem_cache_alloc+0xf7/0x260
[ 29.986050][ T399] __alloc_skb+0xe4/0x730
[ 29.990404][ T399] mld_newpack+0x143/0x9e0
[ 29.994808][ T399]
[ 29.997110][ T399] Memory state around the buggy address:
[ 30.002715][ T399] ffff888112440b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.010752][ T399] ffff888112440b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.018795][ T399] >ffff888112440c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.026833][ T399] ^
[ 30.030880][ T399] ffff888112440c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.038920][ T399] ffff888112440d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.046971][ T399] ==================================================================
[ 30.055011][ T399] Disabling lock debugging due to kernel taint
[ 30.066253][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.074738][ T399] ------------[ cut here ]------------
[ 30.080645][ T399] WARNING: CPU: 1 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.084103][ T30] kauditd_printk_skb: 33 callbacks suppressed
[ 30.084117][ T30] audit: type=1400 audit(1783191142.009:107): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 30.092121][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.099728][ T399] Modules linked in:
[ 30.120309][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.138194][ T30] audit: type=1400 audit(1783191142.009:108): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.163062][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.170942][ T30] audit: type=1400 audit(1783191142.009:109): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.196027][ T399]
[ 30.217310][ T399] CPU: 0 PID: 399 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 30.225894][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 30.240618][ T30] audit: type=1400 audit(1783191142.009:110): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.280260][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.287464][ T399] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 30.307681][ T30] audit: type=1400 audit(1783191142.009:111): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.331334][ T399] RSP: 0018:ffffc900018d7890 EFLAGS: 00010293
[ 30.344497][ T30] audit: type=1400 audit(1783191142.009:112): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.344553][ T411] ------------[ cut here ]------------
[ 30.367905][ T399] RAX: ffffffff845dbbf7 RBX: ffff888113e34000 RCX: ffff888113c7e2c0
[ 30.381707][ T413] ------------[ cut here ]------------
[ 30.391394][ T399] RDX: 0000000000000000 RSI: 000000000acbfbe0 RDI: 000000000c04eb7d
[ 30.397493][ T413] WARNING: CPU: 1 PID: 413 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.405992][ T30] audit: type=1400 audit(1783191142.009:113): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.432512][ T399] RBP: ffffc900018d78b0 R08: 0000000000000003 R09: 0000000000000004
[ 30.449375][ T399] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: dffffc0000000000
[ 30.462056][ T399] R13: dffffc0000000000 R14: 000000000acbfbe0 R15: ffff888112440c00
[ 30.470364][ T413] Modules linked in:
[ 30.470392][ T399] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 30.503634][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.503771][ T411] WARNING: CPU: 1 PID: 411 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.516224][ T399] CR2: 00002000000000c0 CR3: 000000010d6ca000 CR4: 00000000003506b0
[ 30.526459][ T413] CPU: 1 PID: 413 Comm: syz.1.24 Tainted: G B syzkaller #0
[ 30.539367][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.555630][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 30.565909][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.574119][ T411] Modules linked in:
[ 30.579496][ T399] Call Trace:
[ 30.584219][ T411] CPU: 1 PID: 411 Comm: syz.5.23 Tainted: G B syzkaller #0
[ 30.597609][ T399]
[ 30.600590][ T399] pppol2tp_release+0x150/0x2b0
[ 30.602963][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 30.615577][ T399] sock_close+0xb8/0x200
[ 30.619851][ T413] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.619878][ T413] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 30.619890][ T413] RSP: 0018:ffffc90001967890 EFLAGS: 00010293
[ 30.619904][ T413] RAX: ffffffff845dbbf7 RBX: ffff88811422b000 RCX: ffff88811423cf00
[ 30.646132][ T399] ? sock_mmap+0xa0/0xa0
[ 30.658990][ T411] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.670155][ T399] __fput+0x22b/0x900
[ 30.670996][ T411] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 30.689797][ T399] ____fput+0x15/0x20
[ 30.694824][ T413] RDX: 0000000000000000 RSI: 00000000019eaea0 RDI: 000000000c04eb7d
[ 30.711200][ T411] RSP: 0018:ffffc90001957890 EFLAGS: 00010293
[ 30.716822][ T399] task_work_run+0x127/0x190
[ 30.717789][ T411] RAX: ffffffff845dbbf7 RBX: ffff888114242000 RCX: ffff888114238000
[ 30.722511][ T399] do_exit+0xb70/0x29a0
[ 30.734767][ T413] RBP: ffffc900019678b0 R08: ffff88811422b083 R09: 1ffff11022845610
[ 30.755982][ T413] R10: dffffc0000000000 R11: ffffed1022845611 R12: dffffc0000000000
[ 30.763998][ T413] R13: dffffc0000000000 R14: 00000000019eaea0 R15: ffff888112464400
[ 30.772323][ T411] RDX: 0000000000000000 RSI: 00000000019eacc0 RDI: 000000000c04eb7d
[ 30.772316][ T399] ? _raw_spin_lock_bh+0x94/0xf0
[ 30.772342][ T399] ? put_task_struct+0x90/0x90
[ 30.786089][ T411] RBP: ffffc900019578b0 R08: ffff888114242083 R09: 1ffff11022848410
[ 30.806000][ T413] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 30.806239][ T399] ? __kasan_check_write+0x14/0x20
[ 30.815142][ T413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.815156][ T413] CR2: 00007f7278db1ff8 CR3: 0000000130e60000 CR4: 00000000003506a0
[ 30.815170][ T413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.815179][ T413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.836080][ T399] ? l2tp_session_put+0xa0/0x1a0
[ 30.848023][ T411] R10: dffffc0000000000 R11: ffffed1022848411 R12: dffffc0000000000
[ 30.876282][ T399] ? __kasan_check_write+0x14/0x20
[ 30.876579][ T411] R13: dffffc0000000000 R14: 00000000019eacc0 R15: ffff888112465000
[ 30.881682][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 30.895012][ T411] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 30.908983][ T411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.915716][ T413] Call Trace:
[ 30.919091][ T413]
[ 30.919302][ T399] do_group_exit+0x149/0x310
[ 30.922070][ T413] pppol2tp_release+0x150/0x2b0
[ 30.931568][ T411] CR2: 0000200000000000 CR3: 000000012e6be000 CR4: 00000000003506a0
[ 30.939602][ T411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.939785][ T399] ? __kasan_check_write+0x14/0x20
[ 30.947918][ T413] sock_close+0xb8/0x200
[ 30.972315][ T399] ? recalc_sigpending+0x1ac/0x230
[ 30.977507][ T411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.986023][ T399] get_signal+0x64f/0x1430
[ 30.995703][ T413] ? sock_mmap+0xa0/0xa0
[ 30.996137][ T399] arch_do_signal_or_restart+0xe2/0x1100
[ 31.000059][ T411] Call Trace:
[ 31.009326][ T413] __fput+0x22b/0x900
[ 31.014982][ T399] ? selinux_file_ioctl+0x3ad/0x4c0
[ 31.020590][ T411]
[ 31.022237][ T413] ____fput+0x15/0x20
[ 31.023595][ T411] pppol2tp_release+0x150/0x2b0
[ 31.027646][ T413] task_work_run+0x127/0x190
[ 31.037593][ T399] ? get_sigframe_size+0x10/0x10
[ 31.042770][ T399] ? __se_sys_futex+0x135/0x330
[ 31.048527][ T411] sock_close+0xb8/0x200
[ 31.052823][ T399] exit_to_user_mode_loop+0xa7/0xe0
[ 31.058343][ T411] ? sock_mmap+0xa0/0xa0
[ 31.060289][ T413] do_exit+0xb70/0x29a0
[ 31.062607][ T411] __fput+0x22b/0x900
[ 31.071116][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 31.076935][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 31.078463][ T413] ? _raw_spin_lock_bh+0x94/0xf0
[ 31.082458][ T399] do_syscall_64+0x58/0xa0
[ 31.092693][ T45] device bridge_slave_1 left promiscuous mode
[ 31.098834][ T411] ____fput+0x15/0x20
[ 31.102824][ T411] task_work_run+0x127/0x190
[ 31.106116][ T413] ? put_task_struct+0x90/0x90
[ 31.107786][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.122296][ T399] ? clear_bhb_loop+0x50/0xa0
[ 31.127306][ T399] ? clear_bhb_loop+0x50/0xa0
[ 31.128374][ T413] ? __kasan_check_write+0x14/0x20
[ 31.132072][ T411] do_exit+0xb70/0x29a0
[ 31.141802][ T45] device bridge_slave_0 left promiscuous mode
[ 31.147991][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.153942][ T413] ? l2tp_session_put+0xa0/0x1a0
[ 31.153955][ T399] RIP: 0033:0x7f3feb742e59
[ 31.153970][ T399] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 31.171354][ T411] ? _raw_spin_lock_bh+0x94/0xf0
[ 31.176036][ T413] ? __kasan_check_write+0x14/0x20
[ 31.176474][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.188666][ T411] ? put_task_struct+0x90/0x90
[ 31.191797][ T413] ? _raw_spin_lock_irq+0x95/0xf0
[ 31.193439][ T411] ? __kasan_check_write+0x14/0x20
[ 31.204845][ T45] device veth1_macvtap left promiscuous mode
[ 31.210872][ T399] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 31.216018][ T413] do_group_exit+0x149/0x310
[ 31.219335][ T411] ? l2tp_session_put+0xa0/0x1a0
[ 31.229118][ T45] device veth0_vlan left promiscuous mode
[ 31.234932][ T399] RAX: 0000000000000001 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 31.242979][ T411] ? __kasan_check_write+0x14/0x20
[ 31.243200][ T413] ? __kasan_check_write+0x14/0x20
[ 31.248286][ T411] ? _raw_spin_lock_irq+0x95/0xf0
[ 31.265982][ T399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feb9cafac
[ 31.273992][ T399] RBP: 00007f3feb9cafa0 R08: 000f1e1c7bf84377 R09: 0000000000000000
[ 31.276791][ T413] ? recalc_sigpending+0x1ac/0x230
[ 31.291064][ T411] do_group_exit+0x149/0x310
[ 31.295695][ T411] ? __kasan_check_write+0x14/0x20
[ 31.296445][ T413] get_signal+0x64f/0x1430
[ 31.306106][ T435] ------------[ cut here ]------------
[ 31.319124][ T399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.321876][ T435] WARNING: CPU: 1 PID: 435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.337744][ T413] arch_do_signal_or_restart+0xe2/0x1100
[ 31.343400][ T413] ? selinux_file_ioctl+0x3ad/0x4c0
[ 31.345987][ T411] ? recalc_sigpending+0x1ac/0x230
[ 31.353760][ T411] get_signal+0x64f/0x1430
[ 31.359253][ T399] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 31.366056][ T413] ? get_sigframe_size+0x10/0x10
[ 31.372434][ T413] ? __se_sys_futex+0x135/0x330
[ 31.375991][ T411] arch_do_signal_or_restart+0xe2/0x1100
[ 31.382496][ T413] exit_to_user_mode_loop+0xa7/0xe0
[ 31.388190][ T399]
[ 31.391283][ T399] ---[ end trace 922d4d6386054d98 ]---
[ 31.392610][ T435] Modules linked in:
[ 31.401444][ T413] exit_to_user_mode_prepare+0x87/0xd0
[ 31.403925][ T411] ? selinux_file_ioctl+0x3ad/0x4c0
[ 31.405465][ T435]
[ 31.416059][ T411] ? get_sigframe_size+0x10/0x10
[ 31.416085][ T411] ? __se_sys_futex+0x135/0x330
[ 31.435026][ T413] syscall_exit_to_user_mode+0x1a/0x30
[ 31.441013][ T413] do_syscall_64+0x58/0xa0
[ 31.449388][ T411] exit_to_user_mode_loop+0xa7/0xe0
[ 31.455480][ T411] exit_to_user_mode_prepare+0x87/0xd0
[ 31.461184][ T413] ? clear_bhb_loop+0x50/0xa0
[ 31.465582][ T435] CPU: 0 PID: 435 Comm: syz.6.30 Tainted: G B W syzkaller #0
[ 31.470700][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.490088][ T411] syscall_exit_to_user_mode+0x1a/0x30
[ 31.495805][ T411] do_syscall_64+0x58/0xa0
[ 31.501564][ T411] ? clear_bhb_loop+0x50/0xa0
[ 31.503227][ T413] ? clear_bhb_loop+0x50/0xa0
[ 31.516201][ T411] ? clear_bhb_loop+0x50/0xa0
[ 31.520922][ T411] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.521732][ T413] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.533115][ T411] RIP: 0033:0x7fbe0130be59
[ 31.537915][ T435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.546117][ T413] RIP: 0033:0x7fb70cb9be59
[ 31.547860][ T411] Code: Unable to access opcode bytes at RIP 0x7fbe0130be2f.
[ 31.550570][ T413] Code: Unable to access opcode bytes at RIP 0x7fb70cb9be2f.
[ 31.550579][ T413] RSP: 002b:00007fb70c9fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 31.560410][ T435] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 31.582826][ T413] RAX: 0000000000000001 RBX: 00007fb70ce23fa8 RCX: 00007fb70cb9be59
[ 31.593744][ T411] RSP: 002b:00007fbe0116d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 31.611377][ T411] RAX: 0000000000000001 RBX: 00007fbe01593fa8 RCX: 00007fbe0130be59
[ 31.626031][ T435] RSP: 0018:ffffc900018f7890 EFLAGS: 00010293
[ 31.632141][ T435] RAX: ffffffff845dbbf7 RBX: ffff888116180000 RCX: ffff888116158000
[ 31.632384][ T413] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb70ce23fac
[ 31.645972][ T411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe01593fac
[ 31.666011][ T435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 31.674103][ T411] RBP: 00007fbe01593fa0 R08: 0012190d0a83e694 R09: 0000000000000000
[ 31.682557][ T435] RBP: ffffc900018f78b0 R08: ffff888116180083 R09: 1ffff11022c30010
[ 31.693054][ T413] RBP: 00007fb70ce23fa0 R08: 00147b670b11c0e8 R09: 0000000000000000
[ 31.693201][ T411] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.716036][ T435] R10: dffffc0000000000 R11: ffffed1022c30011 R12: dffffc0000000000
[ 31.724456][ T444] ------------[ cut here ]------------
[ 31.729995][ T435] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881208e0000
[ 31.733413][ T413] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.738232][ T444] refcount_t: underflow; use-after-free.
[ 31.752039][ T411] R13: 00007fbe01594038 R14: 00007ffe74302c80 R15: 00007ffe74302d68
[ 31.760105][ T435] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 31.766559][ T413] R13: 00007fb70ce24038 R14: 00007ffd4d812f00 R15: 00007ffd4d812fe8
[ 31.769332][ T411]
[ 31.780189][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.787613][ T447] ------------[ cut here ]------------
[ 31.793084][ T447] WARNING: CPU: 1 PID: 447 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.796009][ T435] CR2: 00007f66ca9e3ff8 CR3: 000000013022e000 CR4: 00000000003506b0
[ 31.803804][ T413]
[ 31.811198][ T411] ---[ end trace 922d4d6386054d99 ]---
[ 31.814371][ T413] ---[ end trace 922d4d6386054d9a ]---
[ 31.826072][ T444] WARNING: CPU: 0 PID: 444 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 31.835584][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.858340][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.867225][ T444] Modules linked in:
[ 31.871220][ T444] CPU: 0 PID: 444 Comm: syz.4.33 Tainted: G B W syzkaller #0
[ 31.875860][ T447] Modules linked in:
[ 31.884423][ T447] CPU: 1 PID: 447 Comm: syz.0.34 Tainted: G B W syzkaller #0
[ 31.886188][ T435] Call Trace:
[ 31.905884][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.922324][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.926026][ T435]
[ 31.935481][ T444] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 31.941813][ T447] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.948459][ T435] pppol2tp_release+0x150/0x2b0
[ 31.953385][ T444] Code: 04 01 48 c7 c7 c0 46 63 85 e8 ac 00 5a 02 0f 0b eb c3 e8 53 8f 19 ff c6 05 c0 01 96 04 01 48 c7 c7 20 47 63 85 e8 90 00 5a 02 <0f> 0b eb a7 e8 37 8f 19 ff c6 05 a1 01 96 04 01 48 c7 c7 60 46 63
[ 31.958463][ T447] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 31.983246][ T435] sock_close+0xb8/0x200
[ 32.003764][ T444] RSP: 0018:ffffc900019c7840 EFLAGS: 00010246
[ 32.016025][ T435] ? sock_mmap+0xa0/0xa0
[ 32.020386][ T444] RAX: 2fa05b4516d3a600 RBX: 0000000000000003 RCX: ffff888116654f00
[ 32.028473][ T435] __fput+0x22b/0x900
[ 32.036767][ T435] ____fput+0x15/0x20
[ 32.040796][ T435] task_work_run+0x127/0x190
[ 32.045892][ T453] ------------[ cut here ]------------
[ 32.051588][ T447] RSP: 0018:ffffc900019a7890 EFLAGS: 00010293
[ 32.051595][ T444] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 32.051607][ T444] RBP: ffffc900019c7850 R08: ffff8881f7032f3f R09: 1ffff1103ee065e7
[ 32.066667][ T447]
[ 32.073717][ T453] WARNING: CPU: 0 PID: 453 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.085987][ T447] RAX: ffffffff845dbbf7 RBX: ffff88811da3b000 RCX: ffff888116a513c0
[ 32.086127][ T435] do_exit+0xb70/0x29a0
[ 32.098930][ T453] Modules linked in:
[ 32.102880][ T453] CPU: 0 PID: 453 Comm: syz.1.36 Tainted: G B W syzkaller #0
[ 32.104215][ T447] RDX: 0000000000000000 RSI: 0000000006591520 RDI: 000000000c04eb7d
[ 32.119435][ T444] R10: dffffc0000000000 R11: ffffed103ee065e8 R12: 0000000000000000
[ 32.119452][ T444] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[ 32.119462][ T444] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 32.119477][ T444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.119489][ T444] CR2: 00007fb70c9dcd58 CR3: 000000000660f000 CR4: 00000000003506b0
[ 32.119504][ T444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.167581][ T435] ? _raw_spin_lock_bh+0x94/0xf0
[ 32.171283][ T447] RBP: ffffc900019a78b0 R08: ffff88811da3b083 R09: 1ffff11023b47610
[ 32.172547][ T435] ? put_task_struct+0x90/0x90
[ 32.185437][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 32.190881][ T447] R10: dffffc0000000000 R11: ffffed1023b47611 R12: dffffc0000000000
[ 32.195993][ T453] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.210314][ T435] ? __kasan_check_write+0x14/0x20
[ 32.215447][ T435] ? l2tp_session_put+0xa0/0x1a0
[ 32.220451][ T435] ? __kasan_check_write+0x14/0x20
[ 32.225852][ T435] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.229045][ T447] R13: dffffc0000000000 R14: 0000000006591520 R15: ffff88812e2d8c00
[ 32.231537][ T453] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 32.240524][ T447] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 32.258920][ T435] do_group_exit+0x149/0x310
[ 32.272397][ T444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.280444][ T435] ? __kasan_check_write+0x14/0x20
[ 32.280620][ T447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.285560][ T435] ? recalc_sigpending+0x1ac/0x230
[ 32.297332][ T444] Call Trace:
[ 32.300610][ T444]
[ 32.302585][ T447] CR2: 0000001b34063fff CR3: 0000000130e48000 CR4: 00000000003506a0
[ 32.303608][ T444] l2tp_session_put+0xc8/0x1a0
[ 32.316599][ T453] RSP: 0018:ffffc90001957890 EFLAGS: 00010293
[ 32.316661][ T447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.322695][ T453] RAX: ffffffff845dbbf7 RBX: ffff88811d9f5000 RCX: ffff888116653b40
[ 32.322715][ T453] RDX: 0000000000000000 RSI: 0000000014946ce0 RDI: 000000000c04eb7d
[ 32.322726][ T453] RBP: ffffc900019578b0 R08: ffff88811d9f5083 R09: 1ffff11023b3ea10
[ 32.322737][ T453] R10: dffffc0000000000 R11: ffffed1023b3ea11 R12: dffffc0000000000
[ 32.322747][ T453] R13: dffffc0000000000 R14: 0000000014946ce0 R15: ffff88812382a000
[ 32.351089][ T447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.354791][ T435] get_signal+0x64f/0x1430
[ 32.371019][ T447] Call Trace:
[ 32.378772][ T444] l2tp_session_delete+0x3a9/0x4a0
[ 32.378798][ T444] pppol2tp_release+0x169/0x2b0
[ 32.378815][ T444] sock_close+0xb8/0x200
[ 32.378831][ T444] ? sock_mmap+0xa0/0xa0
[ 32.378846][ T444] __fput+0x22b/0x900
[ 32.393454][ T447]
[ 32.396641][ T453] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 32.396659][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.396670][ T453] CR2: 00007fbe013be57e CR3: 000000000660f000 CR4: 00000000003506b0
[ 32.396691][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.396700][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.396709][ T453] Call Trace:
[ 32.396713][ T453]
[ 32.396718][ T453] pppol2tp_release+0x150/0x2b0
[ 32.396738][ T453] sock_close+0xb8/0x200
[ 32.396753][ T453] ? sock_mmap+0xa0/0xa0
[ 32.396765][ T453] __fput+0x22b/0x900
[ 32.396782][ T453] ____fput+0x15/0x20
2026/07/04 18:52:24 executed programs: 32
[ 32.396796][ T453] task_work_run+0x127/0x190
[ 32.396810][ T453] do_exit+0xb70/0x29a0
[ 32.396828][ T453] ? put_task_struct+0x90/0x90
[ 32.396843][ T453] ? __kasan_check_write+0x14/0x20
[ 32.396861][ T453] ? l2tp_session_put+0xa0/0x1a0
[ 32.396875][ T453] ? __kasan_check_write+0x14/0x20
[ 32.396890][ T453] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.396909][ T453] do_group_exit+0x149/0x310
[ 32.403545][ T447] pppol2tp_release+0x150/0x2b0
[ 32.405489][ T435] arch_do_signal_or_restart+0xe2/0x1100
[ 32.422327][ T447] sock_close+0xb8/0x200
[ 32.428095][ T444] ____fput+0x15/0x20
[ 32.456415][ T447] ? sock_mmap+0xa0/0xa0
[ 32.458145][ T453] ? __kasan_check_write+0x14/0x20
[ 32.466564][ T447] __fput+0x22b/0x900
[ 32.467254][ T453] ? recalc_sigpending+0x1ac/0x230
[ 32.471641][ T447] ____fput+0x15/0x20
[ 32.475398][ T453] get_signal+0x64f/0x1430
[ 32.475420][ T453] arch_do_signal_or_restart+0xe2/0x1100
[ 32.475437][ T453] ? selinux_file_ioctl+0x3ad/0x4c0
[ 32.489809][ T447] task_work_run+0x127/0x190
[ 32.493273][ T30] audit: type=1400 audit(1783191144.409:114): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[15059]" dev="pipefs" ino=15059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 32.508749][ T447] do_exit+0xb70/0x29a0
[ 32.513260][ T435] ? selinux_file_ioctl+0x3ad/0x4c0
[ 32.526040][ T447] ? _raw_spin_lock_bh+0x94/0xf0
[ 32.528361][ T444] task_work_run+0x127/0x190
[ 32.542789][ T447] ? put_task_struct+0x90/0x90
[ 32.545883][ T435] ? get_sigframe_size+0x10/0x10
[ 32.552881][ T447] ? __kasan_check_write+0x14/0x20
[ 32.554996][ T453] ? get_sigframe_size+0x10/0x10
[ 32.570237][ T447] ? l2tp_session_put+0xa0/0x1a0
[ 32.574232][ T435] ? __se_sys_futex+0x135/0x330
[ 32.574255][ T435] exit_to_user_mode_loop+0xa7/0xe0
[ 32.589013][ T447] ? __kasan_check_write+0x14/0x20
[ 32.602492][ T444] do_exit+0xb70/0x29a0
[ 32.616020][ T453] ? __se_sys_futex+0x135/0x330
[ 32.616856][ T444] ? _raw_spin_lock_bh+0x94/0xf0
[ 32.621494][ T453] exit_to_user_mode_loop+0xa7/0xe0
[ 32.626550][ T435] exit_to_user_mode_prepare+0x87/0xd0
[ 32.631545][ T447] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.636551][ T444] ? put_task_struct+0x90/0x90
[ 32.641341][ T453] exit_to_user_mode_prepare+0x87/0xd0
[ 32.646377][ T435] syscall_exit_to_user_mode+0x1a/0x30
[ 32.655987][ T447] do_group_exit+0x149/0x310
[ 32.656592][ T444] ? __kasan_check_write+0x14/0x20
[ 32.661485][ T453] syscall_exit_to_user_mode+0x1a/0x30
[ 32.665560][ T444] ? l2tp_session_put+0xa0/0x1a0
[ 32.680683][ T447] ? __kasan_check_write+0x14/0x20
[ 32.686523][ T435] do_syscall_64+0x58/0xa0
[ 32.697521][ T453] do_syscall_64+0x58/0xa0
[ 32.713569][ T435] ? clear_bhb_loop+0x50/0xa0
[ 32.722297][ T447] ? recalc_sigpending+0x1ac/0x230
[ 32.736160][ T444] ? __kasan_check_write+0x14/0x20
[ 32.736852][ T447] get_signal+0x64f/0x1430
[ 32.746154][ T435] ? clear_bhb_loop+0x50/0xa0
[ 32.750956][ T453] ? clear_bhb_loop+0x50/0xa0
[ 32.756820][ T444] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.760438][ T453] ? clear_bhb_loop+0x50/0xa0
[ 32.765064][ T444] do_group_exit+0x149/0x310
[ 32.765081][ T444] ? __kasan_check_write+0x14/0x20
[ 32.770077][ T447] arch_do_signal_or_restart+0xe2/0x1100
[ 32.794973][ T453] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.795212][ T435] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.800952][ T453] RIP: 0033:0x7fb70cb9be59
[ 32.800967][ T453] Code: Unable to access opcode bytes at RIP 0x7fb70cb9be2f.
[ 32.800973][ T453] RSP: 002b:00007fb70c9fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 32.800989][ T453] RAX: 0000000000000001 RBX: 00007fb70ce23fa8 RCX: 00007fb70cb9be59
[ 32.800999][ T453] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb70ce23fac
[ 32.801009][ T453] RBP: 00007fb70ce23fa0 R08: 003a0870a1a641c7 R09: 0000000000000000
[ 32.801057][ T453] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 32.801068][ T453] R13: 00007fb70ce24038 R14: 00007ffd4d812f00 R15: 00007ffd4d812fe8
[ 32.801082][ T453]
[ 32.801087][ T453] ---[ end trace 922d4d6386054d9b ]---
[ 32.815157][ T447] ? selinux_file_ioctl+0x3ad/0x4c0
[ 32.819577][ T444] ? recalc_sigpending+0x1ac/0x230
[ 32.833329][ T447] ? get_sigframe_size+0x10/0x10
[ 32.845919][ T444] get_signal+0x64f/0x1430
[ 32.857338][ T447] ? __se_sys_futex+0x135/0x330
[ 32.860056][ T435] RIP: 0033:0x7f7278f71e59
[ 32.881098][ T447] exit_to_user_mode_loop+0xa7/0xe0
[ 32.881129][ T447] exit_to_user_mode_prepare+0x87/0xd0
[ 32.881152][ T447] syscall_exit_to_user_mode+0x1a/0x30
[ 32.887472][ T444] arch_do_signal_or_restart+0xe2/0x1100
[ 32.901694][ T447] do_syscall_64+0x58/0xa0
[ 32.905312][ T444] ? selinux_file_ioctl+0x3ad/0x4c0
[ 32.920531][ T447] ? clear_bhb_loop+0x50/0xa0
[ 32.921236][ T435] Code: Unable to access opcode bytes at RIP 0x7f7278f71e2f.
[ 32.927052][ T447] ? clear_bhb_loop+0x50/0xa0
[ 32.936050][ T435] RSP: 002b:00007f7278dd30e8 EFLAGS: 00000246
[ 32.953272][ T444] ? get_sigframe_size+0x10/0x10
[ 32.966187][ T444] ? __se_sys_futex+0x135/0x330
[ 32.966440][ T447] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.971205][ T444] exit_to_user_mode_loop+0xa7/0xe0
[ 32.982325][ T435] ORIG_RAX: 00000000000000ca
[ 32.987526][ T435] RAX: 0000000000000001 RBX: 00007f72791f9fa8 RCX: 00007f7278f71e59
[ 32.995670][ T444] exit_to_user_mode_prepare+0x87/0xd0
[ 33.001229][ T444] syscall_exit_to_user_mode+0x1a/0x30
[ 33.006869][ T435] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f72791f9fac
[ 33.007344][ T447] RIP: 0033:0x7f3feb742e59
[ 33.014848][ T435] RBP: 00007f72791f9fa0 R08: 000fb6b317d05e74 R09: 0000000000000000
[ 33.027367][ T444] do_syscall_64+0x58/0xa0
[ 33.031800][ T444] ? clear_bhb_loop+0x50/0xa0
[ 33.036908][ T444] ? clear_bhb_loop+0x50/0xa0
[ 33.039691][ T447] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 33.041658][ T444] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 33.055128][ T435] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 33.063500][ T435] R13: 00007f72791fa038 R14: 00007fff2c614470 R15: 00007fff2c614558
[ 33.070383][ T447] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 33.076023][ T444] RIP: 0033:0x7f66caba3e59
[ 33.089661][ T435]
[ 33.090284][ T447] RAX: 0000000000000001 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 33.092703][ T435] ---[ end trace 922d4d6386054d9c ]---
[ 33.092831][ T444] Code: Unable to access opcode bytes at RIP 0x7f66caba3e2f.
[ 33.126037][ T444] RSP: 002b:00007f66caa050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 33.132731][ T447] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feb9cafac
[ 33.142893][ T444] RAX: 0000000000000001 RBX: 00007f66cae2bfa8 RCX: 00007f66caba3e59
[ 33.151632][ T447] RBP: 00007f3feb9cafa0 R08: 002ceb819e9a10f9 R09: 0000000000000000
[ 33.177845][ T444] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66cae2bfac
[ 33.190048][ T447] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 33.196103][ T444] RBP: 00007f66cae2bfa0 R08: 0026f5a09d376f27 R09: 0000000000000000
[ 33.218622][ T444] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 33.220320][ T447] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 33.245139][ T444] R13: 00007f66cae2c038 R14: 00007ffef11adce0 R15: 00007ffef11addc8
[ 33.263373][ T444]
[ 33.263610][ T447]
[ 33.273477][ T444] ---[ end trace 922d4d6386054d9d ]---
[ 33.276360][ T447] ---[ end trace 922d4d6386054d9e ]---
[ 33.393404][ T479] ------------[ cut here ]------------
[ 33.416011][ T479] WARNING: CPU: 0 PID: 479 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.466093][ T479] Modules linked in:
[ 33.476307][ T485] ------------[ cut here ]------------
[ 33.480227][ T479] CPU: 0 PID: 479 Comm: syz.5.45 Tainted: G B W syzkaller #0
[ 33.496318][ T485] WARNING: CPU: 1 PID: 485 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.534480][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.544834][ T485] Modules linked in:
[ 33.545513][ T479] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.555310][ T485] CPU: 1 PID: 485 Comm: syz.0.47 Tainted: G B W syzkaller #0
[ 33.556126][ T479] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 33.605497][ T479] RSP: 0018:ffffc90001ac7890 EFLAGS: 00010293
[ 33.614694][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.626375][ T479] RAX: ffffffff845dbbf7 RBX: ffff888117a84000 RCX: ffff888117924f00
[ 33.643287][ T485] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.644562][ T479] RDX: 0000000000000000 RSI: 00000000077914e0 RDI: 000000000c04eb7d
[ 33.652162][ T485] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 33.669122][ T479] RBP: ffffc90001ac78b0 R08: ffff888117a84083 R09: 1ffff11022f50810
[ 33.682325][ T485] RSP: 0018:ffffc900019a7890 EFLAGS: 00010293
[ 33.693117][ T485] RAX: ffffffff845dbbf7 RBX: ffff888117a80000 RCX: ffff888117a7bb40
[ 33.713283][ T485] RDX: 0000000000000000 RSI: 0000000007791f80 RDI: 000000000c04eb7d
[ 33.729640][ T479] R10: dffffc0000000000 R11: ffffed1022f50811 R12: dffffc0000000000
[ 33.731688][ T485] RBP: ffffc900019a78b0 R08: ffff888117a80083 R09: 1ffff11022f50010
[ 33.742874][ T479] R13: dffffc0000000000 R14: 00000000077914e0 R15: ffff88810ffa2c00
[ 33.754621][ T498] ------------[ cut here ]------------
[ 33.767727][ T485] R10: dffffc0000000000 R11: ffffed1022f50011 R12: dffffc0000000000
[ 33.775737][ T485] R13: dffffc0000000000 R14: 0000000007791f80 R15: ffff88810ffa2800
[ 33.775892][ T479] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 33.793072][ T485] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 33.793121][ T498] WARNING: CPU: 0 PID: 498 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.816939][ T479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.824417][ T485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.826210][ T498] Modules linked in:
[ 33.835338][ T501] ------------[ cut here ]------------
[ 33.841268][ T485] CR2: 0000001b34363fff CR3: 0000000130e48000 CR4: 00000000003506a0
[ 33.845080][ T479] CR2: 00007f66caa04ff8 CR3: 000000010acbe000 CR4: 00000000003506b0
[ 33.855555][ T485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.865573][ T501] WARNING: CPU: 1 PID: 501 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.866010][ T498] CPU: 0 PID: 498 Comm: syz.6.51 Tainted: G B W syzkaller #0
[ 33.875909][ T485] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.892733][ T479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.900989][ T501] Modules linked in:
[ 33.904981][ T485] Call Trace:
[ 33.911064][ T479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.915083][ T485]
[ 33.920266][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.922733][ T485] pppol2tp_release+0x150/0x2b0
[ 33.935976][ T479] Call Trace:
[ 33.937632][ T501] CPU: 1 PID: 501 Comm: syz.1.52 Tainted: G B W syzkaller #0
[ 33.940571][ T479]
[ 33.949419][ T485] sock_close+0xb8/0x200
[ 33.962213][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.962345][ T498] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.972631][ T485] ? sock_mmap+0xa0/0xa0
[ 33.978839][ T479] pppol2tp_release+0x150/0x2b0
[ 33.983414][ T485] __fput+0x22b/0x900
[ 33.989037][ T479] sock_close+0xb8/0x200
[ 33.992684][ T501] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.996625][ T498] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 34.022568][ T501] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 34.022588][ T501] RSP: 0018:ffffc90001be7890 EFLAGS: 00010293
[ 34.022604][ T501] RAX: ffffffff845dbbf7 RBX: ffff88811809c000 RCX: ffff888117e913c0
[ 34.022615][ T501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 34.022625][ T501] RBP: ffffc90001be78b0 R08: ffff88811809c083 R09: 1ffff11023013810
[ 34.022637][ T501] R10: dffffc0000000000 R11: ffffed1023013811 R12: dffffc0000000000
[ 34.022648][ T501] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881175dcc00
[ 34.022660][ T501] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 34.022673][ T501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.022684][ T501] CR2: 00007f66ca9e3ff8 CR3: 000000013022e000 CR4: 00000000003506a0
[ 34.022707][ T501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.022717][ T501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.022726][ T501] Call Trace:
[ 34.022730][ T501]
[ 34.022737][ T501] pppol2tp_release+0x150/0x2b0
[ 34.022759][ T501] sock_close+0xb8/0x200
[ 34.022773][ T501] ? sock_mmap+0xa0/0xa0
[ 34.022787][ T501] __fput+0x22b/0x900
[ 34.022804][ T501] ____fput+0x15/0x20
[ 34.022818][ T501] task_work_run+0x127/0x190
[ 34.022831][ T501] do_exit+0xb70/0x29a0
[ 34.022847][ T501] ? _raw_spin_lock_bh+0x94/0xf0
[ 34.042922][ T479] ? sock_mmap+0xa0/0xa0
[ 34.049925][ T485] ____fput+0x15/0x20
[ 34.057182][ T479] __fput+0x22b/0x900
[ 34.075117][ T485] task_work_run+0x127/0x190
[ 34.081491][ T479] ____fput+0x15/0x20
[ 34.096009][ T501] ? put_task_struct+0x90/0x90
[ 34.098391][ T498] RSP: 0018:ffffc90001b3f890 EFLAGS: 00010293
[ 34.104725][ T485] do_exit+0xb70/0x29a0
[ 34.112948][ T498]
[ 34.125158][ T501] ? __kasan_check_write+0x14/0x20
[ 34.140692][ T479] task_work_run+0x127/0x190
[ 34.144420][ T485] ? _raw_spin_lock_bh+0x94/0xf0
[ 34.156017][ T479] do_exit+0xb70/0x29a0
[ 34.156769][ T501] ? l2tp_session_put+0xa0/0x1a0
[ 34.160925][ T498] RAX: ffffffff845dbbf7 RBX: ffff8881168f8000 RCX: ffff888117e92780
[ 34.164989][ T501] ? __kasan_check_write+0x14/0x20
[ 34.170169][ T479] ? _raw_spin_lock_bh+0x94/0xf0
[ 34.174497][ T485] ? put_task_struct+0x90/0x90
[ 34.188452][ T498] RDX: 0000000000000000 RSI: 0000000016b6eac0 RDI: 000000000c04eb7d
[ 34.191165][ T501] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.195673][ T479] ? put_task_struct+0x90/0x90
[ 34.201912][ T485] ? __kasan_check_write+0x14/0x20
[ 34.216008][ T498] RBP: ffffc90001b3f8b0 R08: ffff8881168f8083 R09: 1ffff11022d1f010
[ 34.218497][ T501] do_group_exit+0x149/0x310
[ 34.223266][ T498] R10: dffffc0000000000 R11: ffffed1022d1f011 R12: dffffc0000000000
[ 34.227581][ T501] ? __kasan_check_write+0x14/0x20
[ 34.232610][ T479] ? __kasan_check_write+0x14/0x20
[ 34.242187][ T485] ? l2tp_session_put+0xa0/0x1a0
[ 34.255974][ T498] R13: dffffc0000000000 R14: 0000000016b6eac0 R15: ffff888116a25800
[ 34.263840][ T501] ? recalc_sigpending+0x1ac/0x230
[ 34.286605][ T479] ? l2tp_session_put+0xa0/0x1a0
[ 34.291396][ T485] ? __kasan_check_write+0x14/0x20
[ 34.300722][ T498] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 34.304805][ T501] get_signal+0x64f/0x1430
[ 34.309831][ T498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.322575][ T485] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.328270][ T479] ? __kasan_check_write+0x14/0x20
[ 34.333141][ T501] arch_do_signal_or_restart+0xe2/0x1100
[ 34.338253][ T479] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.347076][ T485] do_group_exit+0x149/0x310
[ 34.351313][ T498] CR2: 00007f66ca9e4d58 CR3: 000000012e65e000 CR4: 00000000003506b0
[ 34.358176][ T485] ? __kasan_check_write+0x14/0x20
[ 34.373174][ T479] do_group_exit+0x149/0x310
[ 34.374121][ T501] ? selinux_file_ioctl+0x3ad/0x4c0
[ 34.386238][ T498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.391880][ T485] ? recalc_sigpending+0x1ac/0x230
[ 34.397521][ T479] ? __kasan_check_write+0x14/0x20
[ 34.402563][ T501] ? get_sigframe_size+0x10/0x10
[ 34.412080][ T498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.417170][ T485] get_signal+0x64f/0x1430
[ 34.435647][ T479] ? recalc_sigpending+0x1ac/0x230
[ 34.438765][ T501] ? __se_sys_futex+0x135/0x330
[ 34.442964][ T479] get_signal+0x64f/0x1430
[ 34.448176][ T501] exit_to_user_mode_loop+0xa7/0xe0
[ 34.452898][ T498] Call Trace:
[ 34.466176][ T485] arch_do_signal_or_restart+0xe2/0x1100
[ 34.466646][ T479] arch_do_signal_or_restart+0xe2/0x1100
[ 34.471897][ T485] ? selinux_file_ioctl+0x3ad/0x4c0
[ 34.477737][ T498]
[ 34.477747][ T498] pppol2tp_release+0x150/0x2b0
[ 34.477795][ T498] sock_close+0xb8/0x200
[ 34.477811][ T498] ? sock_mmap+0xa0/0xa0
[ 34.477825][ T498] __fput+0x22b/0x900
[ 34.477869][ T498] ____fput+0x15/0x20
[ 34.477884][ T498] task_work_run+0x127/0x190
[ 34.477900][ T498] do_exit+0xb70/0x29a0
[ 34.477943][ T498] ? _raw_spin_lock_bh+0x94/0xf0
[ 34.477964][ T498] ? put_task_struct+0x90/0x90
[ 34.477980][ T498] ? __kasan_check_write+0x14/0x20
[ 34.478042][ T498] ? l2tp_session_put+0xa0/0x1a0
[ 34.478061][ T498] ? __kasan_check_write+0x14/0x20
[ 34.478076][ T498] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.478094][ T498] do_group_exit+0x149/0x310
[ 34.478110][ T498] ? __kasan_check_write+0x14/0x20
[ 34.478126][ T498] ? recalc_sigpending+0x1ac/0x230
[ 34.484629][ T501] exit_to_user_mode_prepare+0x87/0xd0
[ 34.486444][ T479] ? selinux_file_ioctl+0x3ad/0x4c0
[ 34.491312][ T501] syscall_exit_to_user_mode+0x1a/0x30
[ 34.495435][ T498] get_signal+0x64f/0x1430
[ 34.506064][ T485] ? get_sigframe_size+0x10/0x10
[ 34.507793][ T479] ? get_sigframe_size+0x10/0x10
[ 34.512915][ T501] do_syscall_64+0x58/0xa0
[ 34.517268][ T498] arch_do_signal_or_restart+0xe2/0x1100
[ 34.522221][ T501] ? clear_bhb_loop+0x50/0xa0
[ 34.527227][ T479] ? __se_sys_futex+0x135/0x330
[ 34.532172][ T485] ? __se_sys_futex+0x135/0x330
[ 34.537288][ T498] ? selinux_file_ioctl+0x3ad/0x4c0
[ 34.546062][ T501] ? clear_bhb_loop+0x50/0xa0
[ 34.547932][ T479] exit_to_user_mode_loop+0xa7/0xe0
[ 34.552121][ T501] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.558155][ T498] ? get_sigframe_size+0x10/0x10
[ 34.573209][ T485] exit_to_user_mode_loop+0xa7/0xe0
[ 34.573758][ T479] exit_to_user_mode_prepare+0x87/0xd0
[ 34.579043][ T501] RIP: 0033:0x7fb70cb9be59
[ 34.583623][ T498] ? __se_sys_futex+0x135/0x330
[ 34.588440][ T485] exit_to_user_mode_prepare+0x87/0xd0
[ 34.593558][ T479] syscall_exit_to_user_mode+0x1a/0x30
[ 34.606013][ T501] Code: Unable to access opcode bytes at RIP 0x7fb70cb9be2f.
[ 34.608344][ T498] exit_to_user_mode_loop+0xa7/0xe0
[ 34.612943][ T485] syscall_exit_to_user_mode+0x1a/0x30
[ 34.617990][ T498] exit_to_user_mode_prepare+0x87/0xd0
[ 34.626809][ T501] RSP: 002b:00007fb70c9fd0e8 EFLAGS: 00000246
[ 34.628525][ T479] do_syscall_64+0x58/0xa0
[ 34.632926][ T501] ORIG_RAX: 00000000000000ca
[ 34.639085][ T498] syscall_exit_to_user_mode+0x1a/0x30
[ 34.644580][ T485] do_syscall_64+0x58/0xa0
[ 34.656300][ T479] ? clear_bhb_loop+0x50/0xa0
[ 34.659517][ T501] RAX: 0000000000000001 RBX: 00007fb70ce23fa8 RCX: 00007fb70cb9be59
[ 34.664079][ T498] do_syscall_64+0x58/0xa0
[ 34.679834][ T501] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb70ce23fac
[ 34.682795][ T479] ? clear_bhb_loop+0x50/0xa0
[ 34.689918][ T485] ? clear_bhb_loop+0x50/0xa0
[ 34.693348][ T479] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.698691][ T501] RBP: 00007fb70ce23fa0 R08: 002eb5453ab91920 R09: 0000000000000000
[ 34.704880][ T498] ? clear_bhb_loop+0x50/0xa0
[ 34.719241][ T501] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 34.723844][ T479] RIP: 0033:0x7fbe0130be59
[ 34.728309][ T485] ? clear_bhb_loop+0x50/0xa0
[ 34.728330][ T485] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.728347][ T485] RIP: 0033:0x7f3feb742e59
[ 34.728359][ T485] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 34.728366][ T485] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246
[ 34.736701][ T498] ? clear_bhb_loop+0x50/0xa0
[ 34.744933][ T501] R13: 00007fb70ce24038 R14: 00007ffd4d812f00 R15: 00007ffd4d812fe8
[ 34.754630][ T479] Code: Unable to access opcode bytes at RIP 0x7fbe0130be2f.
[ 34.758954][ T485] ORIG_RAX: 00000000000000ca
[ 34.764624][ T498] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.772500][ T501]
[ 34.777174][ T479] RSP: 002b:00007fbe0116d0e8 EFLAGS: 00000246
[ 34.795631][ T485] RAX: 0000000000000001 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 34.811832][ T498] RIP: 0033:0x7f7278f71e59
[ 34.825990][ T501] ---[ end trace 922d4d6386054d9f ]---
[ 34.837947][ T479] ORIG_RAX: 00000000000000ca
[ 34.837959][ T479] RAX: 0000000000000001 RBX: 00007fbe01593fa8 RCX: 00007fbe0130be59
[ 34.852933][ T485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feb9cafac
[ 34.869728][ T498] Code: Unable to access opcode bytes at RIP 0x7f7278f71e2f.
[ 34.904015][ T479] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe01593fac
[ 34.912413][ T479] RBP: 00007fbe01593fa0 R08: 0013e2d0b47d40ef R09: 0000000000000000
[ 34.920536][ T485] RBP: 00007f3feb9cafa0 R08: 0019d8b1b5dfe2c1 R09: 0000000000000000
[ 34.926264][ T498] RSP: 002b:00007f7278dd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 34.936041][ T479] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 34.945039][ T485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 34.953185][ T498] RAX: 0000000000000001 RBX: 00007f72791f9fa8 RCX: 00007f7278f71e59
[ 34.955147][ T479] R13: 00007fbe01594038 R14: 00007ffe74302c80 R15: 00007ffe74302d68
[ 34.970305][ T498] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f72791f9fac
[ 34.979491][ T485] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 34.979693][ T516] ------------[ cut here ]------------
[ 34.991746][ T479]
[ 34.993354][ T498] RBP: 00007f72791f9fa0 R08: 0029f091399d6478 R09: 0000000000000000
[ 34.998264][ T485]
[ 35.007238][ T479] ---[ end trace 922d4d6386054da0 ]---
[ 35.009849][ T498] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 35.021123][ T485] ---[ end trace 922d4d6386054da1 ]---
[ 35.049684][ T498] R13: 00007f72791fa038 R14: 00007fff2c614470 R15: 00007fff2c614558
[ 35.066512][ T498]
[ 35.069570][ T498] ---[ end trace 922d4d6386054da2 ]---
[ 35.078681][ T516] WARNING: CPU: 0 PID: 516 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.116179][ T516] Modules linked in:
[ 35.133152][ T516] CPU: 0 PID: 516 Comm: syz.1.57 Tainted: G B W syzkaller #0
[ 35.149463][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 35.173461][ T516] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.193423][ T516] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 35.225931][ T524] ------------[ cut here ]------------
[ 35.237040][ T526] ------------[ cut here ]------------
[ 35.241999][ T524] WARNING: CPU: 0 PID: 524 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.242519][ T526] WARNING: CPU: 1 PID: 526 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.253204][ T516] RSP: 0018:ffffc90001d2f890 EFLAGS: 00010293
[ 35.268826][ T524] Modules linked in:
[ 35.275328][ T516]
[ 35.281930][ T516] RAX: ffffffff845dbbf7 RBX: ffff88811f924000 RCX: ffff88811f934f00
[ 35.300300][ T524]
[ 35.302670][ T524] CPU: 0 PID: 524 Comm: syz.0.60 Tainted: G B W syzkaller #0
[ 35.315973][ T516] RDX: 0000000000000000 RSI: 00000000083f15c0 RDI: 000000000c04eb7d
[ 35.326135][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 35.336889][ T531] ------------[ cut here ]------------
[ 35.343335][ T526] Modules linked in:
[ 35.345992][ T516] RBP: ffffc90001d2f8b0 R08: ffff88811f924083 R09: 1ffff11023f24810
[ 35.355366][ T516] R10: dffffc0000000000 R11: ffffed1023f24811 R12: dffffc0000000000
[ 35.356777][ T531] WARNING: CPU: 1 PID: 531 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.363613][ T524] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.379725][ T516] R13: dffffc0000000000 R14: 00000000083f15c0 R15: ffff88812e566c00
[ 35.381451][ T526] CPU: 1 PID: 526 Comm: syz.6.61 Tainted: G B W syzkaller #0
[ 35.396011][ T516] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 35.405122][ T516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.408241][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 35.415995][ T524] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 35.436410][ T526] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.447892][ T531] Modules linked in:
[ 35.451780][ T516] CR2: 00007fbe013be57e CR3: 000000013023d000 CR4: 00000000003506b0
[ 35.451786][ T531] CPU: 1 PID: 531 Comm: syz.4.62 Tainted: G B W syzkaller #0
[ 35.451805][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 35.461943][ T516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.469467][ T526] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 35.479348][ T524] RSP: 0018:ffffc900019a7890 EFLAGS: 00010293
[ 35.502023][ T526] RSP: 0018:ffffc90001b3f890 EFLAGS: 00010293
[ 35.507836][ T516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.514092][ T531] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.520148][ T516] Call Trace:
[ 35.536052][ T526]
[ 35.537983][ T524]
[ 35.542329][ T524] RAX: ffffffff845dbbf7 RBX: ffff8881179a4000 RCX: ffff8881179ecf00
[ 35.546011][ T526] RAX: ffffffff845dbbf7 RBX: ffff8881179a2000 RCX: ffff88811867bb40
[ 35.550620][ T516]
[ 35.558500][ T531] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 35.561695][ T524] RDX: 0000000000000000 RSI: 0000000016b627e0 RDI: 000000000c04eb7d
[ 35.581351][ T526] RDX: 0000000000000000 RSI: 0000000016b62fe0 RDI: 000000000c04eb7d
[ 35.597703][ T516] pppol2tp_release+0x150/0x2b0
[ 35.602637][ T516] sock_close+0xb8/0x200
[ 35.606551][ T531] RSP: 0018:ffffc90001de7890 EFLAGS: 00010293
[ 35.607208][ T516] ? sock_mmap+0xa0/0xa0
[ 35.613021][ T526] RBP: ffffc90001b3f8b0 R08: ffff8881179a2083 R09: 1ffff11022f34410
[ 35.617452][ T516] __fput+0x22b/0x900
[ 35.629506][ T524] RBP: ffffc900019a78b0 R08: ffff8881179a4083 R09: 1ffff11022f34810
[ 35.635432][ T531] RAX: ffffffff845dbbf7 RBX: ffff8881179a0000 RCX: ffff8881179e8000
[ 35.637888][ T524] R10: dffffc0000000000 R11: ffffed1022f34811 R12: dffffc0000000000
[ 35.653895][ T531] RDX: 0000000000000000 RSI: 0000000016b62100 RDI: 000000000c04eb7d
[ 35.654109][ T516] ____fput+0x15/0x20
[ 35.662007][ T526] R10: dffffc0000000000 R11: ffffed1022f34411 R12: dffffc0000000000
[ 35.666185][ T516] task_work_run+0x127/0x190
[ 35.678857][ T524] R13: dffffc0000000000 R14: 0000000016b627e0 R15: ffff88811f97dc00
[ 35.684100][ T531] RBP: ffffc90001de78b0 R08: ffff8881179a0083 R09: 1ffff11022f34010
[ 35.687179][ T524] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 35.704110][ T526] R13: dffffc0000000000 R14: 0000000016b62fe0 R15: ffff88811f97d000
[ 35.704325][ T516] do_exit+0xb70/0x29a0
[ 35.712209][ T531] R10: dffffc0000000000 R11: ffffed1022f34011 R12: dffffc0000000000
[ 35.716524][ T516] ? _raw_spin_lock_bh+0x94/0xf0
[ 35.729489][ T524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.734432][ T526] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 35.736344][ T524] CR2: 00007fbe0155b2f8 CR3: 000000010d6ca000 CR4: 00000000003506b0
[ 35.745323][ T531] R13: dffffc0000000000 R14: 0000000016b62100 R15: ffff888117c21400
[ 35.753427][ T516] ? put_task_struct+0x90/0x90
[ 35.764590][ T526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.767330][ T524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.773625][ T526] CR2: 0000200000000000 CR3: 0000000130e48000 CR4: 00000000003506a0
[ 35.786193][ T516] ? __kasan_check_write+0x14/0x20
[ 35.789199][ T531] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 35.799205][ T516] ? l2tp_session_put+0xa0/0x1a0
[ 35.803567][ T526] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.815982][ T524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.816360][ T531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.824340][ T524] Call Trace:
[ 35.831149][ T526] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.834186][ T516] ? __kasan_check_write+0x14/0x20
[ 35.842546][ T531] CR2: 00007fbe0114cd58 CR3: 0000000130e48000 CR4: 00000000003506a0
[ 35.847531][ T524]
[ 35.855597][ T526] Call Trace:
[ 35.861798][ T526]
[ 35.864728][ T526] pppol2tp_release+0x150/0x2b0
[ 35.866071][ T516] ? _raw_spin_lock_irq+0x95/0xf0
[ 35.874771][ T524] pppol2tp_release+0x150/0x2b0
[ 35.879788][ T524] sock_close+0xb8/0x200
[ 35.884149][ T524] ? sock_mmap+0xa0/0xa0
[ 35.886697][ T531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.895998][ T516] do_group_exit+0x149/0x310
[ 35.896660][ T526] sock_close+0xb8/0x200
[ 35.900993][ T516] ? __kasan_check_write+0x14/0x20
[ 35.905149][ T526] ? sock_mmap+0xa0/0xa0
[ 35.910379][ T524] __fput+0x22b/0x900
[ 35.919337][ T531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.926014][ T516] ? recalc_sigpending+0x1ac/0x230
[ 35.928128][ T531] Call Trace:
[ 35.932799][ T516] get_signal+0x64f/0x1430
[ 35.936164][ T526] __fput+0x22b/0x900
[ 35.940499][ T524] ____fput+0x15/0x20
[ 35.944479][ T526] ____fput+0x15/0x20
[ 35.948428][ T516] arch_do_signal_or_restart+0xe2/0x1100
[ 35.952583][ T531]
[ 35.961199][ T526] task_work_run+0x127/0x190
[ 35.965854][ T531] pppol2tp_release+0x150/0x2b0
[ 35.965991][ T524] task_work_run+0x127/0x190
[ 35.970918][ T526] do_exit+0xb70/0x29a0
[ 35.979786][ T531] sock_close+0xb8/0x200
[ 35.979792][ T524] do_exit+0xb70/0x29a0
[ 35.979812][ T524] ? put_task_struct+0x90/0x90
[ 35.984037][ T531] ? sock_mmap+0xa0/0xa0
[ 35.988213][ T516] ? selinux_file_ioctl+0x3ad/0x4c0
[ 35.988236][ T516] ? get_sigframe_size+0x10/0x10
[ 35.993297][ T526] ? _raw_spin_lock_bh+0x94/0xf0
[ 36.005969][ T524] ? __kasan_check_write+0x14/0x20
[ 36.007520][ T531] __fput+0x22b/0x900
[ 36.012295][ T516] ? __se_sys_futex+0x135/0x330
[ 36.017485][ T526] ? put_task_struct+0x90/0x90
[ 36.021371][ T524] ? l2tp_session_put+0xa0/0x1a0
[ 36.026452][ T531] ____fput+0x15/0x20
[ 36.036031][ T516] exit_to_user_mode_loop+0xa7/0xe0
[ 36.040174][ T526] ? __kasan_check_write+0x14/0x20
[ 36.045222][ T524] ? __kasan_check_write+0x14/0x20
[ 36.050468][ T531] task_work_run+0x127/0x190
[ 36.055442][ T516] exit_to_user_mode_prepare+0x87/0xd0
[ 36.060099][ T526] ? l2tp_session_put+0xa0/0x1a0
[ 36.065426][ T524] ? _raw_spin_lock_irq+0x95/0xf0
[ 36.065449][ T524] do_group_exit+0x149/0x310
[ 36.070580][ T531] do_exit+0xb70/0x29a0
[ 36.084329][ T516] syscall_exit_to_user_mode+0x1a/0x30
[ 36.090164][ T516] do_syscall_64+0x58/0xa0
[ 36.090190][ T524] ? __kasan_check_write+0x14/0x20
[ 36.094629][ T526] ? __kasan_check_write+0x14/0x20
[ 36.104908][ T516] ? clear_bhb_loop+0x50/0xa0
[ 36.109665][ T516] ? clear_bhb_loop+0x50/0xa0
[ 36.109802][ T524] ? recalc_sigpending+0x1ac/0x230
[ 36.114345][ T516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.114363][ T516] RIP: 0033:0x7fb70cb9be59
[ 36.129666][ T524] get_signal+0x64f/0x1430
[ 36.129856][ T531] ? _raw_spin_lock_bh+0x94/0xf0
[ 36.134182][ T524] arch_do_signal_or_restart+0xe2/0x1100
[ 36.139142][ T526] ? _raw_spin_lock_irq+0x95/0xf0
[ 36.139163][ T526] do_group_exit+0x149/0x310
[ 36.139179][ T526] ? __kasan_check_write+0x14/0x20
[ 36.139198][ T526] ? recalc_sigpending+0x1ac/0x230
[ 36.139215][ T526] get_signal+0x64f/0x1430
[ 36.139235][ T526] arch_do_signal_or_restart+0xe2/0x1100
[ 36.139252][ T526] ? selinux_file_ioctl+0x3ad/0x4c0
[ 36.139271][ T526] ? get_sigframe_size+0x10/0x10
[ 36.151734][ T524] ? selinux_file_ioctl+0x3ad/0x4c0
[ 36.161884][ T531] ? put_task_struct+0x90/0x90
[ 36.175186][ T524] ? get_sigframe_size+0x10/0x10
[ 36.176386][ T526] ? __se_sys_futex+0x135/0x330
[ 36.181797][ T524] ? __se_sys_futex+0x135/0x330
[ 36.186443][ T516] Code: Unable to access opcode bytes at RIP 0x7fb70cb9be2f.
[ 36.186454][ T516] RSP: 002b:00007fb70c9fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 36.186474][ T516] RAX: 0000000000000001 RBX: 00007fb70ce23fa8 RCX: 00007fb70cb9be59
[ 36.186486][ T516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb70ce23fac
[ 36.186498][ T516] RBP: 00007fb70ce23fa0 R08: 00383ead4acad4a4 R09: 0000000000000000
[ 36.201863][ T524] exit_to_user_mode_loop+0xa7/0xe0
[ 36.206899][ T531] ? __kasan_check_write+0x14/0x20
[ 36.211263][ T524] exit_to_user_mode_prepare+0x87/0xd0
[ 36.218738][ T526] exit_to_user_mode_loop+0xa7/0xe0
[ 36.237169][ T524] syscall_exit_to_user_mode+0x1a/0x30
[ 36.242970][ T531] ? l2tp_session_put+0xa0/0x1a0
[ 36.261239][ T524] do_syscall_64+0x58/0xa0
[ 36.266749][ T516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 36.282218][ T524] ? clear_bhb_loop+0x50/0xa0
[ 36.282298][ T516] R13: 00007fb70ce24038 R14: 00007ffd4d812f00 R15: 00007ffd4d812fe8
[ 36.286896][ T524] ? clear_bhb_loop+0x50/0xa0
[ 36.294683][ T526] exit_to_user_mode_prepare+0x87/0xd0
[ 36.309598][ T524] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.312092][ T531] ? __kasan_check_write+0x14/0x20
[ 36.326013][ T524] RIP: 0033:0x7f3feb742e59
[ 36.329608][ T516]
[ 36.333138][ T524] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 36.336335][ T526] syscall_exit_to_user_mode+0x1a/0x30
[ 36.336358][ T526] do_syscall_64+0x58/0xa0
[ 36.353691][ T516] ---[ end trace 922d4d6386054da3 ]---
[ 36.354182][ T524] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246
[ 36.359288][ T526] ? clear_bhb_loop+0x50/0xa0
[ 36.359312][ T526] ? clear_bhb_loop+0x50/0xa0
[ 36.365709][ T531] ? _raw_spin_lock_irq+0x95/0xf0
[ 36.370207][ T526] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.377061][ T531] do_group_exit+0x149/0x310
[ 36.394768][ T524] ORIG_RAX: 00000000000000ca
[ 36.400209][ T531] ? __kasan_check_write+0x14/0x20
[ 36.402570][ T526] RIP: 0033:0x7f7278f71e59
[ 36.415522][ T524] RAX: fffffffffffffe00 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 36.422730][ T526] Code: Unable to access opcode bytes at RIP 0x7f7278f71e2f.
[ 36.423793][ T531] ? recalc_sigpending+0x1ac/0x230
[ 36.441889][ T526] RSP: 002b:00007f7278dd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 36.445991][ T524] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3feb9cafa8
[ 36.458356][ T526] RAX: fffffffffffffe00 RBX: 00007f72791f9fa8 RCX: 00007f7278f71e59
[ 36.458410][ T531] get_signal+0x64f/0x1430
[ 36.475989][ T531] arch_do_signal_or_restart+0xe2/0x1100
[ 36.476004][ T526] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f72791f9fa8
[ 36.488167][ T526] RBP: 00007f72791f9fa0 R08: 0000000000000000 R09: 0000000000000000
[ 36.495976][ T524] RBP: 00007f3feb9cafa0 R08: 0000000000000000 R09: 0000000000000000
[ 36.506103][ T524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.514135][ T524] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 36.516025][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.525995][ T531] ? selinux_file_ioctl+0x3ad/0x4c0
[ 36.542751][ T526] R13: 00007f72791fa038 R14: 00007fff2c614470 R15: 00007fff2c614558
[ 36.545452][ T531] ? get_sigframe_size+0x10/0x10
[ 36.555917][ T524]
[ 36.564077][ T531] ? __se_sys_futex+0x135/0x330
[ 36.564492][ T526]
[ 36.569241][ T524] ---[ end trace 922d4d6386054da4 ]---
[ 36.577706][ T531] exit_to_user_mode_loop+0xa7/0xe0
[ 36.582305][ T526] ---[ end trace 922d4d6386054da5 ]---
[ 36.586148][ T531] exit_to_user_mode_prepare+0x87/0xd0
[ 36.604258][ T531] syscall_exit_to_user_mode+0x1a/0x30
[ 36.622499][ T531] do_syscall_64+0x58/0xa0
[ 36.632625][ T531] ? clear_bhb_loop+0x50/0xa0
[ 36.642637][ T531] ? clear_bhb_loop+0x50/0xa0
[ 36.647907][ T531] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.664193][ T531] RIP: 0033:0x7f66caba3e59
[ 36.669096][ T531] Code: Unable to access opcode bytes at RIP 0x7f66caba3e2f.
[ 36.686039][ T531] RSP: 002b:00007f66caa050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 36.714596][ T531] RAX: 0000000000000001 RBX: 00007f66cae2bfa8 RCX: 00007f66caba3e59
[ 36.745973][ T531] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66cae2bfac
[ 36.757833][ T531] RBP: 00007f66cae2bfa0 R08: 00118076cfa40b03 R09: 0000000000000000
[ 36.777660][ T557] ------------[ cut here ]------------
[ 36.783643][ T531] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 36.803107][ T531] R13: 00007f66cae2c038 R14: 00007ffef11adce0 R15: 00007ffef11addc8
[ 36.807287][ T557] WARNING: CPU: 1 PID: 557 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.821181][ T531]
[ 36.829488][ T531] ---[ end trace 922d4d6386054da6 ]---
[ 36.885379][ T557] Modules linked in:
[ 36.907812][ T557] CPU: 1 PID: 557 Comm: syz.0.71 Tainted: G B W syzkaller #0
[ 36.929240][ T557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 36.940046][ T564] ------------[ cut here ]------------
[ 36.945516][ T564] WARNING: CPU: 0 PID: 564 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.965973][ T557] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.985973][ T557] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 36.986261][ T564] Modules linked in:
[ 37.026301][ T567] ------------[ cut here ]------------
[ 37.035665][ T567] WARNING: CPU: 1 PID: 567 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.044540][ T564]
[ 37.046099][ T557] RSP: 0018:ffffc90001f77890 EFLAGS: 00010293
[ 37.048855][ T564] CPU: 0 PID: 564 Comm: syz.5.73 Tainted: G B W syzkaller #0
[ 37.062794][ T557] RAX: ffffffff845dbbf7 RBX: ffff88811967d000 RCX: ffff88811955a780
[ 37.071499][ T571] ------------[ cut here ]------------
[ 37.076198][ T557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 37.084979][ T567] Modules linked in:
[ 37.086153][ T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.088906][ T567] CPU: 1 PID: 567 Comm: syz.4.74 Tainted: G B W syzkaller #0
[ 37.099303][ T571] WARNING: CPU: 0 PID: 571 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.116331][ T557] RBP: ffffc90001f778b0 R08: ffff88811967d083 R09: 1ffff110232cfa10
[ 37.122443][ T564] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.132619][ T557] R10: dffffc0000000000 R11: ffffed10232cfa11 R12: dffffc0000000000
[ 37.135997][ T564] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.158701][ T557] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881192e3400
[ 37.178612][ T557] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 37.194067][ T571] Modules linked in:
[ 37.196001][ T567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.198520][ T564] RSP: 0018:ffffc90001f87890 EFLAGS: 00010293
[ 37.211432][ T571] CPU: 0 PID: 571 Comm: syz.1.76 Tainted: G B W syzkaller #0
[ 37.215994][ T557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.217892][ T564]
[ 37.235402][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.236099][ T557] CR2: 0000200000000000 CR3: 0000000130a2a000 CR4: 00000000003506a0
[ 37.245976][ T571] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.260056][ T564] RAX: ffffffff845dbbf7 RBX: ffff888118612000 RCX: ffff88811855cf00
[ 37.265994][ T567] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.268346][ T564] RDX: 0000000000000000 RSI: 000000002e39b5a0 RDI: 000000000c04eb7d
[ 37.274349][ T567] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.274366][ T567] RSP: 0018:ffffc90001f17890 EFLAGS: 00010293
[ 37.274381][ T567] RAX: ffffffff845dbbf7 RBX: ffff8881197d0000 RCX: ffff888119c04f00
[ 37.282727][ T571] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.302062][ T557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.302077][ T557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.308446][ T564] RBP: ffffc90001f878b0 R08: ffff888118612083 R09: 1ffff110230c2410
[ 37.335987][ T557] Call Trace:
[ 37.344162][ T571] RSP: 0018:ffffc90001b3f890 EFLAGS: 00010293
[ 37.363225][ T567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 37.363398][ T571]
[ 37.369404][ T557]
[ 37.377642][ T564] R10: dffffc0000000000 R11: ffffed10230c2411 R12: dffffc0000000000
[ 37.390789][ T571] RAX: ffffffff845dbbf7 RBX: ffff888119dfa000 RCX: ffff8881101293c0
[ 37.396022][ T567] RBP: ffffc90001f178b0 R08: ffff8881197d0083 R09: 1ffff110232fa010
[ 37.399038][ T564] R13: dffffc0000000000 R14: 000000002e39b5a0 R15: ffff888114111000
[ 37.407079][ T557] pppol2tp_release+0x150/0x2b0
[ 37.415185][ T571] RDX: 0000000000000000 RSI: 000000002e39ba80 RDI: 000000000c04eb7d
[ 37.426666][ T567] R10: dffffc0000000000 R11: ffffed10232fa011 R12: dffffc0000000000
[ 37.427980][ T564] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.445002][ T571] RBP: ffffc90001b3f8b0 R08: ffff888119dfa083 R09: 1ffff110233bf410
[ 37.445006][ T557] sock_close+0xb8/0x200
[ 37.453201][ T571] R10: dffffc0000000000 R11: ffffed10233bf411 R12: dffffc0000000000
[ 37.465452][ T571] R13: dffffc0000000000 R14: 000000002e39ba80 R15: ffff888114113800
[ 37.465977][ T567] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888119039800
[ 37.481558][ T564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.488420][ T571] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.491564][ T557] ? sock_mmap+0xa0/0xa0
[ 37.497631][ T564] CR2: 00007fb70c9dbff8 CR3: 0000000130e60000 CR4: 00000000003506b0
[ 37.505975][ T567] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 37.509867][ T571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.524295][ T557] __fput+0x22b/0x900
[ 37.525406][ T564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.535984][ T557] ____fput+0x15/0x20
[ 37.537414][ T571] CR2: 00007fb70c9dbff8 CR3: 0000000130a2a000 CR4: 00000000003506b0
[ 37.541078][ T567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.549242][ T564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.563817][ T557] task_work_run+0x127/0x190
[ 37.564073][ T571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.576001][ T557] do_exit+0xb70/0x29a0
[ 37.576700][ T564] Call Trace:
[ 37.580669][ T557] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.583918][ T564]
[ 37.589108][ T567] CR2: 0000200000000000 CR3: 000000012e307000 CR4: 00000000003506a0
[ 37.592069][ T571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.607977][ T564] pppol2tp_release+0x150/0x2b0
[ 37.614167][ T557] ? put_task_struct+0x90/0x90
[ 37.617290][ T564] sock_close+0xb8/0x200
2026/07/04 18:52:29 executed programs: 72
[ 37.619422][ T567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.623388][ T564] ? sock_mmap+0xa0/0xa0
[ 37.631515][ T557] ? __kasan_check_write+0x14/0x20
[ 37.635648][ T571] Call Trace:
[ 37.640942][ T567] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.643985][ T571]
[ 37.652495][ T557] ? l2tp_session_put+0xa0/0x1a0
[ 37.654913][ T564] __fput+0x22b/0x900
[ 37.663918][ T564] ____fput+0x15/0x20
[ 37.668035][ T571] pppol2tp_release+0x150/0x2b0
[ 37.672905][ T571] sock_close+0xb8/0x200
[ 37.673124][ T557] ? __kasan_check_write+0x14/0x20
[ 37.677230][ T564] task_work_run+0x127/0x190
[ 37.682557][ T567] Call Trace:
[ 37.686961][ T571] ? sock_mmap+0xa0/0xa0
[ 37.690288][ T557] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.694409][ T571] __fput+0x22b/0x900
[ 37.703508][ T564] do_exit+0xb70/0x29a0
[ 37.705987][ T567]
[ 37.707752][ T564] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.710822][ T567] pppol2tp_release+0x150/0x2b0
[ 37.715590][ T571] ____fput+0x15/0x20
[ 37.720364][ T557] do_group_exit+0x149/0x310
[ 37.724575][ T564] ? put_task_struct+0x90/0x90
[ 37.733905][ T571] task_work_run+0x127/0x190
[ 37.735979][ T567] sock_close+0xb8/0x200
[ 37.738680][ T564] ? __kasan_check_write+0x14/0x20
[ 37.748057][ T571] do_exit+0xb70/0x29a0
[ 37.752244][ T571] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.752835][ T557] ? __kasan_check_write+0x14/0x20
[ 37.757442][ T564] ? l2tp_session_put+0xa0/0x1a0
[ 37.762314][ T567] ? sock_mmap+0xa0/0xa0
[ 37.762333][ T567] __fput+0x22b/0x900
[ 37.767526][ T571] ? put_task_struct+0x90/0x90
[ 37.775977][ T557] ? recalc_sigpending+0x1ac/0x230
[ 37.780438][ T564] ? __kasan_check_write+0x14/0x20
[ 37.790601][ T571] ? __kasan_check_write+0x14/0x20
[ 37.793673][ T567] ____fput+0x15/0x20
[ 37.796455][ T571] ? l2tp_session_put+0xa0/0x1a0
[ 37.799862][ T557] get_signal+0x64f/0x1430
[ 37.805045][ T564] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.809173][ T567] task_work_run+0x127/0x190
[ 37.814357][ T564] do_group_exit+0x149/0x310
[ 37.819339][ T557] arch_do_signal_or_restart+0xe2/0x1100
[ 37.826169][ T571] ? __kasan_check_write+0x14/0x20
[ 37.829646][ T567] do_exit+0xb70/0x29a0
[ 37.834468][ T564] ? __kasan_check_write+0x14/0x20
[ 37.838800][ T557] ? selinux_file_ioctl+0x3ad/0x4c0
[ 37.843954][ T571] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.854365][ T564] ? recalc_sigpending+0x1ac/0x230
[ 37.856038][ T567] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.859663][ T564] get_signal+0x64f/0x1430
[ 37.864450][ T567] ? put_task_struct+0x90/0x90
[ 37.869084][ T571] do_group_exit+0x149/0x310
[ 37.873925][ T567] ? __kasan_check_write+0x14/0x20
[ 37.878511][ T564] arch_do_signal_or_restart+0xe2/0x1100
[ 37.883712][ T557] ? get_sigframe_size+0x10/0x10
[ 37.889442][ T571] ? __kasan_check_write+0x14/0x20
[ 37.899621][ T564] ? selinux_file_ioctl+0x3ad/0x4c0
[ 37.904388][ T567] ? l2tp_session_put+0xa0/0x1a0
[ 37.904828][ T564] ? get_sigframe_size+0x10/0x10
[ 37.909800][ T567] ? __kasan_check_write+0x14/0x20
[ 37.909820][ T567] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.915096][ T571] ? recalc_sigpending+0x1ac/0x230
[ 37.919984][ T557] ? __se_sys_futex+0x135/0x330
[ 37.925255][ T564] ? __se_sys_futex+0x135/0x330
[ 37.940080][ T567] do_group_exit+0x149/0x310
[ 37.940167][ T571] get_signal+0x64f/0x1430
[ 37.944691][ T567] ? __kasan_check_write+0x14/0x20
[ 37.949306][ T571] arch_do_signal_or_restart+0xe2/0x1100
[ 37.954404][ T557] exit_to_user_mode_loop+0xa7/0xe0
[ 37.960462][ T564] exit_to_user_mode_loop+0xa7/0xe0
[ 37.970961][ T571] ? selinux_file_ioctl+0x3ad/0x4c0
[ 37.972024][ T567] ? recalc_sigpending+0x1ac/0x230
[ 37.981000][ T564] exit_to_user_mode_prepare+0x87/0xd0
[ 37.981587][ T567] get_signal+0x64f/0x1430
[ 37.991088][ T571] ? get_sigframe_size+0x10/0x10
[ 37.992047][ T557] exit_to_user_mode_prepare+0x87/0xd0
[ 38.002655][ T564] syscall_exit_to_user_mode+0x1a/0x30
[ 38.006742][ T567] arch_do_signal_or_restart+0xe2/0x1100
[ 38.013748][ T567] ? selinux_file_ioctl+0x3ad/0x4c0
[ 38.013789][ T571] ? __se_sys_futex+0x135/0x330
[ 38.024140][ T564] do_syscall_64+0x58/0xa0
[ 38.026265][ T557] syscall_exit_to_user_mode+0x1a/0x30
[ 38.028872][ T564] ? clear_bhb_loop+0x50/0xa0
[ 38.034035][ T557] do_syscall_64+0x58/0xa0
[ 38.039160][ T571] exit_to_user_mode_loop+0xa7/0xe0
[ 38.048686][ T564] ? clear_bhb_loop+0x50/0xa0
[ 38.053432][ T567] ? get_sigframe_size+0x10/0x10
[ 38.053442][ T571] exit_to_user_mode_prepare+0x87/0xd0
[ 38.058429][ T567] ? __se_sys_futex+0x135/0x330
[ 38.064190][ T564] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.068857][ T557] ? clear_bhb_loop+0x50/0xa0
[ 38.074928][ T571] syscall_exit_to_user_mode+0x1a/0x30
[ 38.085106][ T564] RIP: 0033:0x7fbe0130be59
[ 38.085997][ T567] exit_to_user_mode_loop+0xa7/0xe0
[ 38.089726][ T564] Code: Unable to access opcode bytes at RIP 0x7fbe0130be2f.
[ 38.102255][ T571] do_syscall_64+0x58/0xa0
[ 38.104829][ T557] ? clear_bhb_loop+0x50/0xa0
[ 38.106860][ T571] ? clear_bhb_loop+0x50/0xa0
[ 38.111450][ T557] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.116272][ T567] exit_to_user_mode_prepare+0x87/0xd0
[ 38.127689][ T564] RSP: 002b:00007fbe0116d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.132156][ T557] RIP: 0033:0x7f3feb742e59
[ 38.136359][ T571] ? clear_bhb_loop+0x50/0xa0
[ 38.145344][ T557] Code: Unable to access opcode bytes at RIP 0x7f3feb742e2f.
[ 38.145369][ T571] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.158945][ T564] RAX: 0000000000000001 RBX: 00007fbe01593fa8 RCX: 00007fbe0130be59
[ 38.162876][ T557] RSP: 002b:00007f3feb5a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.167131][ T567] syscall_exit_to_user_mode+0x1a/0x30
[ 38.181138][ T564] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe01593fac
[ 38.186321][ T557] RAX: 0000000000000001 RBX: 00007f3feb9cafa8 RCX: 00007f3feb742e59
[ 38.189317][ T571] RIP: 0033:0x7fb70cb9be59
[ 38.201707][ T564] RBP: 00007fbe01593fa0 R08: 003543bce5ce2823 R09: 0000000000000000
[ 38.210201][ T571] Code: Unable to access opcode bytes at RIP 0x7fb70cb9be2f.
[ 38.217783][ T564] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.225763][ T564] R13: 00007fbe01594038 R14: 00007ffe74302c80 R15: 00007ffe74302d68
[ 38.226150][ T557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3feb9cafac
[ 38.234034][ T567] do_syscall_64+0x58/0xa0
[ 38.246478][ T571] RSP: 002b:00007fb70c9fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.254989][ T571] RAX: fffffffffffffe00 RBX: 00007fb70ce23fa8 RCX: 00007fb70cb9be59
[ 38.262121][ T557] RBP: 00007f3feb9cafa0 R08: 002c52eb63ba3568 R09: 0000000000000000
[ 38.263227][ T564]
[ 38.274061][ T567] ? clear_bhb_loop+0x50/0xa0
[ 38.278878][ T567] ? clear_bhb_loop+0x50/0xa0
[ 38.282304][ T557] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.283550][ T567] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.297648][ T564] ---[ end trace 922d4d6386054da7 ]---
[ 38.301878][ T557] R13: 00007f3feb9cb038 R14: 00007fffb64f7220 R15: 00007fffb64f7308
[ 38.303214][ T571] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb70ce23fa8
[ 38.319141][ T567] RIP: 0033:0x7f66caba3e59
[ 38.321072][ T557]
[ 38.324273][ T571] RBP: 00007fb70ce23fa0 R08: 0000000000000000 R09: 0000000000000000
[ 38.327064][ T557] ---[ end trace 922d4d6386054da8 ]---
[ 38.334888][ T567] Code: Unable to access opcode bytes at RIP 0x7f66caba3e2f.
[ 38.348255][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.356472][ T571] R13: 00007fb70ce24038 R14: 00007ffd4d812f00 R15: 00007ffd4d812fe8
[ 38.366266][ T571]
[ 38.369303][ T571] ---[ end trace 922d4d6386054da9 ]---
[ 38.374939][ T567] RSP: 002b:00007f66caa050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.392587][ T567] RAX: 0000000000000001 RBX: 00007f66cae2bfa8 RCX: 00007f66caba3e59
[ 38.400735][ T567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66cae2bfac
[ 38.416059][ T567] RBP: 00007f66cae2bfa0 R08: 003aa107670d5360 R09: 0000000000000000
[ 38.434245][ T567] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.442408][ T567] R13: 00007f66cae2c038 R14: 00007ffef11adce0 R15: 00007ffef11addc8
[ 38.472453][ T567]
[ 38.475650][ T567] ---[ end trace 922d4d6386054daa ]---
[ 38.506944][ T594] ------------[ cut here ]------------
[ 38.516052][ T594] WARNING: CPU: 1 PID: 594 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.572682][ T594] Modules linked in:
[ 38.582774][ T594] CPU: 0 PID: 594 Comm: syz.0.83 Tainted: G B W syzkaller #0
[ 38.613564][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 38.630037][ T594] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.646040][ T594] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 38.676035][ T594] RSP: 0018:ffffc90001f77890 EFLAGS: 00010293
[ 38.689164][ T594] RAX: ffffffff845dbbf7 RBX: ffff88811a19a000 RCX: ffff88811a3e13c0
[ 38.710263][ T594] RDX: 0000000000000000 RSI: 000000002e303f20 RDI: 000000000c04eb7d
[ 38.719140][ T594] RBP: ffffc90001f778b0 R08: ffff88811a19a083 R09: 1ffff11023433410
[ 38.746912][ T594] R10: dffffc0000000000 R11: ffffed1023433411 R12: dffffc0000000000
[ 38.754931][ T594] R13: dffffc0000000000 R14: 000000002e303f20 R15: ffff888119055800
[ 38.773136][ T594] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 38.793374][ T594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.803527][ T594] CR2: 0000200000000000 CR3: 0000000130e48000 CR4: 00000000003506b0
[ 38.836010][ T594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.852431][ T594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.864013][ T611] ------------[ cut here ]------------
[ 38.879721][ T611] WARNING: CPU: 0 PID: 611 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.886213][ T594] Call Trace:
[ 38.896506][ T613] ------------[ cut here ]------------
[ 38.903373][ T594]
[ 38.906940][ T594] pppol2tp_release+0x150/0x2b0
[ 38.911806][ T594] sock_close+0xb8/0x200
[ 38.916806][ T613] WARNING: CPU: 0 PID: 613 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.926703][ T594] ? sock_mmap+0xa0/0xa0
[ 38.935730][ T611] Modules linked in:
[ 38.946031][ T594] __fput+0x22b/0x900
[ 38.949876][ T611] CPU: 0 PID: 611 Comm: syz.6.89 Tainted: G B W syzkaller #0
[ 38.956472][ T594] ____fput+0x15/0x20
[ 38.959977][ T613] Modules linked in:
[ 38.966022][ T594] task_work_run+0x127/0x190
[ 38.971074][ T594] do_exit+0xb70/0x29a0
[ 38.976686][ T613] CPU: 0 PID: 613 Comm: syz.4.90 Tainted: G B W syzkaller #0
[ 38.981172][ T594] ? _raw_spin_lock_bh+0x94/0xf0
[ 38.993332][ T611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 39.001325][ T594] ? put_task_struct+0x90/0x90
[ 39.003650][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 39.020701][ T594] ? __kasan_check_write+0x14/0x20
[ 39.025891][ T594] ? l2tp_session_put+0xa0/0x1a0
[ 39.026061][ T611] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.036005][ T594] ? __kasan_check_write+0x14/0x20
[ 39.037606][ T613] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.050442][ T594] ? _raw_spin_lock_irq+0x95/0xf0
[ 39.055995][ T611] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 39.065675][ T594] do_group_exit+0x149/0x310
[ 39.080348][ T613] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 39.080370][ T613] RSP: 0018:ffffc900021a7890 EFLAGS: 00010293
[ 39.110147][ T611] RSP: 0018:ffffc90002237890 EFLAGS: 00010293
[ 39.124556][ T613]
[ 39.134449][ T613] RAX: ffffffff845dbbf7 RBX: ffff88811aa7f000 RCX: ffff88811aa82780
[ 39.140612][ T594] ? __kasan_check_write+0x14/0x20
[ 39.142496][ T611] RAX: ffffffff845dbbf7 RBX: ffff88811a6c3000 RCX: ffff88811012a780
[ 39.150700][ T594] ? recalc_sigpending+0x1ac/0x230
[ 39.155704][ T611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 39.169031][ T613] RDX: 0000000000000000 RSI: 0000000021519d60 RDI: 000000000c04eb7d
[ 39.177233][ T594] get_signal+0x64f/0x1430
[ 39.179596][ T613] RBP: ffffc900021a78b0 R08: ffff88811aa7f083 R09: 1ffff1102354fe10
[ 39.181766][ T594] arch_do_signal_or_restart+0xe2/0x1100
[ 39.189713][ T611] RBP: ffffc900022378b0 R08: ffff88811a6c3083 R09: 1ffff110234d8610
[ 39.203666][ T613] R10: dffffc0000000000 R11: ffffed102354fe11 R12: dffffc0000000000
[ 39.211846][ T613] R13: dffffc0000000000 R14: 0000000021519d60 R15: ffff888119d1dc00
[ 39.220000][ T611] R10: dffffc0000000000 R11: ffffed10234d8611 R12: dffffc0000000000
[ 39.226198][ T594] ? selinux_file_ioctl+0x3ad/0x4c0
[ 39.228135][ T613] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 39.247347][ T611] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888119307400
[ 39.251828][ T594] ? get_sigframe_size+0x10/0x10
[ 39.265226][ T611] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 39.274377][ T594] ? __se_sys_futex+0x135/0x330
[ 39.284430][ T613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.286323][ T594] exit_to_user_mode_loop+0xa7/0xe0
[ 39.292015][ T611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.306261][ T594] exit_to_user_mode_prepare+0x87/0xd0
[ 39.313063][ T613] CR2: 00007f7278db1ff8 CR3: 0000000130a2a000 CR4: 00000000003506b0
[ 39.321112][ T594] syscall_exit_to_user_mode+0x1a/0x30
[ 39.321157][ T613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000