Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts.
2026/07/04 19:31:56 parsed 1 programs
2026/07/04 19:31:56 serving rpc on tcp://43733
[ 31.216338][ T30] audit: type=1400 audit(1783193516.178:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 31.237293][ T30] audit: type=1400 audit(1783193516.178:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 31.881589][ T30] audit: type=1400 audit(1783193516.838:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 31.882738][ T299] cgroup: Unknown subsys name 'net'
[ 31.904381][ T30] audit: type=1400 audit(1783193516.838:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.931721][ T30] audit: type=1400 audit(1783193516.868:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 31.932199][ T299] cgroup: Unknown subsys name 'devices'
[ 32.046550][ T299] cgroup: Unknown subsys name 'hugetlb'
[ 32.052445][ T299] cgroup: Unknown subsys name 'rlimit'
[ 32.164236][ T30] audit: type=1400 audit(1783193517.128:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 32.187904][ T30] audit: type=1400 audit(1783193517.128:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.209034][ T30] audit: type=1400 audit(1783193517.128:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 32.211678][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 32.229669][ T30] audit: type=1400 audit(1783193517.128:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 32.258980][ T30] audit: type=1400 audit(1783193517.128:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 32.281237][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 32.804500][ T310] request_module fs-gadgetfs succeeded, but still no fs?
[ 32.969332][ T310] syz-executor (310) used greatest stack depth: 21736 bytes left
[ 33.151297][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.174897][ T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.182458][ T320] device bridge_slave_0 entered promiscuous mode
[ 33.194383][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.201438][ T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.208833][ T320] device bridge_slave_1 entered promiscuous mode
[ 33.339735][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.346832][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.354342][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.361366][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.405061][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 33.414874][ T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.422168][ T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.469015][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 33.481988][ T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.489093][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 33.497593][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 33.506586][ T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.513625][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 33.521732][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 33.529908][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 33.553985][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 33.564643][ T320] device veth0_vlan entered promiscuous mode
[ 33.570938][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 33.579394][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 33.586886][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 33.599748][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 33.609398][ T320] device veth1_macvtap entered promiscuous mode
2026/07/04 19:31:58 executed programs: 0
[ 33.618257][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 33.627951][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 33.775666][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.782833][ T373] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.790351][ T373] device bridge_slave_0 entered promiscuous mode
[ 33.809241][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.816406][ T373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.823724][ T373] device bridge_slave_1 entered promiscuous mode
[ 33.848603][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.856359][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.863659][ T378] device bridge_slave_0 entered promiscuous mode
[ 33.891568][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.898791][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.906278][ T378] device bridge_slave_1 entered promiscuous mode
[ 33.933510][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 33.940695][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 33.948182][ T374] device bridge_slave_0 entered promiscuous mode
[ 33.968880][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 33.975983][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 33.983473][ T374] device bridge_slave_1 entered promiscuous mode
[ 33.997551][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.004677][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 34.012167][ T379] device bridge_slave_0 entered promiscuous mode
[ 34.019330][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.026541][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.033994][ T379] device bridge_slave_1 entered promiscuous mode
[ 34.089805][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.098017][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 34.105529][ T377] device bridge_slave_0 entered promiscuous mode
[ 34.133872][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.140936][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.148439][ T377] device bridge_slave_1 entered promiscuous mode
[ 34.292838][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.299930][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.334386][ T324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.342738][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 34.350415][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 34.359238][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 34.366693][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 34.394873][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 34.403255][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 34.411720][ T324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.418863][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.426966][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 34.435592][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 34.443703][ T324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.450755][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.458177][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 34.466362][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 34.474641][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 34.482780][ T324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.489919][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.497632][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 34.508596][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 34.516830][ T324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.524041][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.531747][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 34.539247][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 34.546680][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 34.555141][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 34.563258][ T324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.570300][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.577690][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 34.585813][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 34.593717][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 34.602146][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 34.610306][ T324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.617422][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.626991][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 34.634663][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 34.642210][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 34.650129][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 34.679099][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 34.687934][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 34.697777][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 34.705361][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 34.712835][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 34.721495][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 34.729695][ T324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.736723][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 34.744220][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 34.752438][ T324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.759489][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 34.766873][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 34.777028][ T373] device veth0_vlan entered promiscuous mode
[ 34.796714][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 34.805364][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 34.812834][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 34.821275][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 34.832772][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 34.846739][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 34.858484][ T373] device veth1_macvtap entered promiscuous mode
[ 34.869572][ T378] device veth0_vlan entered promiscuous mode
[ 34.876328][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 34.885077][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 34.893003][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 34.903017][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 34.910682][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 34.932748][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 34.941869][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 34.950693][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.959570][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 34.972928][ T374] device veth0_vlan entered promiscuous mode
[ 34.988188][ T379] device veth0_vlan entered promiscuous mode
[ 34.996371][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 35.004926][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 35.013227][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 35.022493][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 35.030131][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 35.040558][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 35.050128][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 35.062940][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 35.074496][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 35.086856][ T378] device veth1_macvtap entered promiscuous mode
[ 35.125238][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 35.133037][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 35.142333][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 35.150865][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 35.159332][ T324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.166408][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 35.174232][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 35.182652][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 35.191006][ T324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.198085][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 35.206134][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 35.214486][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 35.236983][ T374] device veth1_macvtap entered promiscuous mode
[ 35.253723][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 35.261505][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 35.272918][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 35.281092][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 35.290061][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 35.299678][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 35.308137][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 35.316665][ T399] ==================================================================
[ 35.316842][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 35.324732][ T399] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 35.324771][ T399] Read of size 4 at addr ffff88812d9de000 by task syz.0.22/399
[ 35.324785][ T399]
[ 35.324794][ T399] CPU: 0 PID: 399 Comm: syz.0.22 Not tainted syzkaller #0
[ 35.324809][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 35.324820][ T399] Call Trace:
[ 35.324825][ T399]
[ 35.324831][ T399] __dump_stack+0x21/0x30
[ 35.333450][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 35.340746][ T399] dump_stack_lvl+0x110/0x170
[ 35.340767][ T399] ? show_regs_print_info+0x20/0x20
[ 35.340781][ T399] ? load_image+0x3f0/0x3f0
[ 35.340798][ T399] ? __local_bh_enable_ip+0x58/0x80
[ 35.340815][ T399] print_address_description+0x7f/0x2c0
[ 35.348952][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 35.350645][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 35.424321][ T399] kasan_report+0x10f/0x150
[ 35.428819][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 35.434530][ T399] __asan_report_load4_noabort+0x14/0x20
[ 35.440254][ T399] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 35.445875][ T399] pppol2tp_release+0x150/0x2b0
[ 35.450728][ T399] sock_close+0xb8/0x200
[ 35.455224][ T399] ? sock_mmap+0xa0/0xa0
[ 35.459545][ T399] __fput+0x22b/0x900
[ 35.463515][ T399] ____fput+0x15/0x20
[ 35.467578][ T399] task_work_run+0x127/0x190
[ 35.472173][ T399] do_exit+0xb70/0x29a0
[ 35.477297][ T399] ? _raw_spin_lock_bh+0x94/0xf0
[ 35.482240][ T399] ? put_task_struct+0x90/0x90
[ 35.487038][ T399] ? __kasan_check_write+0x14/0x20
[ 35.492153][ T399] ? l2tp_session_put+0xa0/0x1a0
[ 35.497075][ T399] ? __kasan_check_write+0x14/0x20
[ 35.502169][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 35.507179][ T399] do_group_exit+0x149/0x310
[ 35.511762][ T399] ? __kasan_check_write+0x14/0x20
[ 35.516859][ T399] ? recalc_sigpending+0x1ac/0x230
[ 35.521958][ T399] get_signal+0x64f/0x1430
[ 35.526365][ T399] arch_do_signal_or_restart+0xe2/0x1100
[ 35.532016][ T399] ? selinux_file_ioctl+0x3ad/0x4c0
[ 35.537207][ T399] ? get_sigframe_size+0x10/0x10
[ 35.542133][ T399] ? __se_sys_futex+0x135/0x330
[ 35.546977][ T399] exit_to_user_mode_loop+0xa7/0xe0
[ 35.552167][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 35.557700][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 35.563448][ T399] do_syscall_64+0x58/0xa0
[ 35.567898][ T399] ? clear_bhb_loop+0x50/0xa0
[ 35.572582][ T399] ? clear_bhb_loop+0x50/0xa0
[ 35.577364][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.583262][ T399] RIP: 0033:0x7f950aecee59
[ 35.587770][ T399] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 35.595123][ T399] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 35.603520][ T399] RAX: fffffffffffffe00 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 35.611564][ T399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f950b156fa8
[ 35.619557][ T399] RBP: 00007f950b156fa0 R08: 0000000000000000 R09: 0000000000000000
[ 35.627513][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.635472][ T399] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 35.643433][ T399]
[ 35.646440][ T399]
[ 35.648743][ T399] Allocated by task 399:
[ 35.652972][ T399] __kasan_kmalloc+0xd4/0x100
[ 35.657639][ T399] __kmalloc+0x13d/0x2c0
[ 35.661876][ T399] l2tp_session_create+0x39/0xb60
[ 35.666885][ T399] pppol2tp_connect+0xbf5/0x1640
[ 35.671808][ T399] __sys_connect+0x3cb/0x450
[ 35.676387][ T399] __x64_sys_connect+0x7a/0x90
[ 35.681139][ T399] x64_sys_call+0x7c/0x9a0
[ 35.685538][ T399] do_syscall_64+0x4c/0xa0
[ 35.690123][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.696340][ T399]
[ 35.698661][ T399] Freed by task 10:
[ 35.702445][ T399] kasan_set_track+0x4a/0x70
[ 35.707020][ T399] kasan_set_free_info+0x23/0x40
[ 35.711943][ T399] ____kasan_slab_free+0x125/0x160
[ 35.717038][ T399] __kasan_slab_free+0x11/0x20
[ 35.721784][ T399] slab_free_freelist_hook+0xc2/0x190
[ 35.727137][ T399] kfree+0xc4/0x270
[ 35.730933][ T399] l2tp_session_put+0xaf/0x1a0
[ 35.735682][ T399] l2tp_session_delete+0x3a9/0x4a0
[ 35.740778][ T399] l2tp_tunnel_del_work+0x180/0x3d0
[ 35.745978][ T399] process_one_work+0x6c8/0xbb0
[ 35.750830][ T399] worker_thread+0xaa0/0x1250
[ 35.755490][ T399] kthread+0x3f5/0x4f0
[ 35.759544][ T399] ret_from_fork+0x1f/0x30
[ 35.764301][ T399]
[ 35.766606][ T399] The buggy address belongs to the object at ffff88812d9de000
[ 35.766606][ T399] which belongs to the cache kmalloc-512 of size 512
[ 35.780733][ T399] The buggy address is located 0 bytes inside of
[ 35.780733][ T399] 512-byte region [ffff88812d9de000, ffff88812d9de200)
[ 35.793817][ T399] The buggy address belongs to the page:
[ 35.799437][ T399] page:ffffea0004b67700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d9dc
[ 35.809667][ T399] head:ffffea0004b67700 order:2 compound_mapcount:0 compound_pincount:0
[ 35.817976][ T399] flags: 0x4000000000010200(slab|head|zone=1)
[ 35.824193][ T399] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 35.832776][ T399] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 35.841352][ T399] page dumped because: kasan: bad access detected
[ 35.848180][ T399] page_owner tracks the page as allocated
[ 35.853915][ T399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 399, ts 35251063745, free_ts 33139721439
[ 35.874311][ T399] post_alloc_hook+0x192/0x1b0
[ 35.879069][ T399] prep_new_page+0x1c/0x110
[ 35.883565][ T399] get_page_from_freelist+0x2c3a/0x2cd0
[ 35.889214][ T399] __alloc_pages+0x1a2/0x460
[ 35.894253][ T399] new_slab+0xa0/0x4d0
[ 35.898314][ T399] ___slab_alloc+0x3ac/0x840
[ 35.902886][ T399] __slab_alloc+0x49/0x90
[ 35.907295][ T399] __kmalloc+0x16a/0x2c0
[ 35.911610][ T399] l2tp_session_create+0x39/0xb60
[ 35.916731][ T399] pppol2tp_connect+0xbf5/0x1640
[ 35.921668][ T399] __sys_connect+0x3cb/0x450
[ 35.926249][ T399] __x64_sys_connect+0x7a/0x90
[ 35.930996][ T399] x64_sys_call+0x7c/0x9a0
[ 35.937637][ T399] do_syscall_64+0x4c/0xa0
[ 35.942071][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.947950][ T399] page last free stack trace:
[ 35.952698][ T399] free_unref_page_prepare+0x5fa/0x600
[ 35.958160][ T399] free_unref_page+0xae/0x540
[ 35.962834][ T399] __free_pages+0x6c/0x100
[ 35.967324][ T399] __vunmap+0x801/0x980
[ 35.971480][ T399] vfree+0x8b/0xc0
[ 35.975200][ T399] kcov_close+0x2b/0x50
[ 35.979358][ T399] __fput+0x22b/0x900
[ 35.983332][ T399] ____fput+0x15/0x20
[ 35.987498][ T399] task_work_run+0x127/0x190
[ 35.992071][ T399] do_exit+0xb70/0x29a0
[ 35.996219][ T399] do_group_exit+0x149/0x310
[ 36.000798][ T399] get_signal+0x64f/0x1430
[ 36.005198][ T399] arch_do_signal_or_restart+0xe2/0x1100
[ 36.010836][ T399] exit_to_user_mode_loop+0xa7/0xe0
[ 36.016208][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 36.021703][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 36.027260][ T399]
[ 36.029565][ T399] Memory state around the buggy address:
[ 36.035197][ T399] ffff88812d9ddf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 36.043614][ T399] ffff88812d9ddf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 36.052192][ T399] >ffff88812d9de000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 36.060250][ T399] ^
[ 36.064385][ T399] ffff88812d9de080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 36.072427][ T399] ffff88812d9de100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 36.080466][ T399] ==================================================================
[ 36.088678][ T399] Disabling lock debugging due to kernel taint
[ 36.109139][ T399] ------------[ cut here ]------------
[ 36.114757][ T399] WARNING: CPU: 0 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.126728][ T399] Modules linked in:
[ 36.130754][ T399] CPU: 0 PID: 399 Comm: syz.0.22 Tainted: G B syzkaller #0
[ 36.136969][ T379] device veth1_macvtap entered promiscuous mode
[ 36.145669][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 36.156013][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.162408][ T399] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 36.185290][ T399] RSP: 0018:ffffc90000d17890 EFLAGS: 00010293
[ 36.187918][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 36.191640][ T399] RAX: ffffffff845dbbf7 RBX: ffff8881139d5000 RCX: ffff88812b9d13c0
[ 36.205622][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.207861][ T399] RDX: 0000000000000000 RSI: 000000000ac643a0 RDI: 000000000c04eb7d
[ 36.217252][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 36.224314][ T399] RBP: ffffc90000d178b0 R08: 0000000000000003 R09: 0000000000000004
[ 36.232336][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 36.240431][ T399] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: dffffc0000000000
[ 36.249118][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 36.256623][ T399] R13: dffffc0000000000 R14: 000000000ac643a0 R15: ffff88812d9de000
[ 36.264913][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 36.273088][ T399] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 36.281377][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 36.289959][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.304645][ T399] CR2: 00007f950ad0eff8 CR3: 000000012c799000 CR4: 00000000003506b0
[ 36.312874][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.332949][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.333898][ T377] device veth0_vlan entered promiscuous mode
[ 36.341204][ T399] Call Trace:
[ 36.352878][ T399]
[ 36.356678][ T399] pppol2tp_release+0x150/0x2b0
[ 36.361612][ T399] sock_close+0xb8/0x200
[ 36.366104][ T399] ? sock_mmap+0xa0/0xa0
[ 36.370371][ T399] __fput+0x22b/0x900
[ 36.374719][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 36.374884][ T399] ____fput+0x15/0x20
[ 36.382911][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 36.386663][ T399] task_work_run+0x127/0x190
[ 36.399035][ T399] do_exit+0xb70/0x29a0
[ 36.403274][ T399] ? _raw_spin_lock_bh+0x94/0xf0
[ 36.404486][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 36.416707][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 36.424006][ T399] ? put_task_struct+0x90/0x90
[ 36.425494][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 36.429566][ T399] ? __kasan_check_write+0x14/0x20
[ 36.438185][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 36.452337][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 36.459453][ T399] ? l2tp_session_put+0xa0/0x1a0
[ 36.461739][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 36.465393][ T399] ? __kasan_check_write+0x14/0x20
[ 36.478596][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 36.487950][ T377] device veth1_macvtap entered promiscuous mode
[ 36.490916][ T399] do_group_exit+0x149/0x310
[ 36.501552][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 36.509471][ T399] ? __kasan_check_write+0x14/0x20
[ 36.510479][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 36.515852][ T399] ? recalc_sigpending+0x1ac/0x230
[ 36.527311][ T399] get_signal+0x64f/0x1430
[ 36.531746][ T399] arch_do_signal_or_restart+0xe2/0x1100
[ 36.534539][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 36.543848][ T399] ? selinux_file_ioctl+0x3ad/0x4c0
[ 36.550652][ T399] ? get_sigframe_size+0x10/0x10
[ 36.554522][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 36.555914][ T399] ? __se_sys_futex+0x135/0x330
[ 36.564591][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 36.574859][ T399] exit_to_user_mode_loop+0xa7/0xe0
[ 36.613989][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 36.622995][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 36.630492][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 36.639018][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 36.654397][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 36.662493][ T399] do_syscall_64+0x58/0xa0
[ 36.667237][ T399] ? clear_bhb_loop+0x50/0xa0
[ 36.671924][ T399] ? clear_bhb_loop+0x50/0xa0
[ 36.684231][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 36.693906][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.718456][ T399] RIP: 0033:0x7f950aecee59
[ 36.723220][ T399] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 36.740923][ T399] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 36.756084][ T407] ------------[ cut here ]------------
[ 36.761576][ T407] WARNING: CPU: 1 PID: 407 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.763801][ T399] RAX: fffffffffffffe00 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 36.810189][ T399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f950b156fa8
[ 36.818684][ T399] RBP: 00007f950b156fa0 R08: 0000000000000000 R09: 0000000000000000
[ 36.843912][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.844072][ T407] Modules linked in:
[ 36.866451][ T399] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 36.904465][ T399]
[ 36.907541][ T399] ---[ end trace 9fea2f7e510b027c ]---
[ 36.907664][ T407]
[ 36.943848][ T407] CPU: 1 PID: 407 Comm: syz.4.21 Tainted: G B W syzkaller #0
[ 36.953908][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 36.968019][ T407] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.990036][ T407] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.010971][ T416] ------------[ cut here ]------------
[ 37.030007][ T416] WARNING: CPU: 0 PID: 416 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.050294][ T407] RSP: 0018:ffffc90000d47890 EFLAGS: 00010293
[ 37.056739][ T416] Modules linked in:
[ 37.060691][ T416] CPU: 0 PID: 416 Comm: syz.6.24 Tainted: G B W syzkaller #0
[ 37.069404][ T407] RAX: ffffffff845dbbf7 RBX: ffff88810ac2e000 RCX: ffff888114dfbb40
[ 37.078032][ T422] ------------[ cut here ]------------
[ 37.084966][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.095272][ T407] RDX: 0000000000000000 RSI: 00000000073d1440 RDI: 000000000c04eb7d
[ 37.103829][ T416] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.112460][ T407] RBP: ffffc90000d478b0 R08: ffff88810ac2e083 R09: 1ffff11021585c10
[ 37.134374][ T422] WARNING: CPU: 0 PID: 422 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.144319][ T416] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.153801][ T407] R10: dffffc0000000000 R11: ffffed1021585c11 R12: dffffc0000000000
[ 37.193235][ T422] Modules linked in:
[ 37.194631][ T416] RSP: 0018:ffffc90000da7890 EFLAGS: 00010293
[ 37.203325][ T422] CPU: 0 PID: 422 Comm: syz.0.26 Tainted: G B W syzkaller #0
[ 37.212504][ T407] R13: dffffc0000000000 R14: 00000000073d1440 R15: ffff88812899e400
[ 37.220769][ T416] RAX: ffffffff845dbbf7 RBX: ffff888115093000 RCX: ffff888114dfcf00
[ 37.229823][ T426] ------------[ cut here ]------------
[ 37.237064][ T426] WARNING: CPU: 1 PID: 426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.239052][ T407] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.247462][ T416] RDX: 0000000000000000 RSI: 000000001595d500 RDI: 000000000c04eb7d
[ 37.256256][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.274506][ T407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.281514][ T407] CR2: 0000200000000000 CR3: 00000001150e8000 CR4: 00000000003506b0
[ 37.284539][ T416] RBP: ffffc90000da78b0 R08: ffff888115093083 R09: 1ffff11022a12610
[ 37.290673][ T407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.303979][ T426] Modules linked in:
[ 37.310141][ T416] R10: dffffc0000000000 R11: ffffed1022a12611 R12: dffffc0000000000
[ 37.314040][ T422] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.319756][ T426] CPU: 1 PID: 426 Comm: syz.2.27 Tainted: G B W syzkaller #0
[ 37.326206][ T407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.333694][ T416] R13: dffffc0000000000 R14: 000000001595d500 R15: ffff88812fc26c00
[ 37.349678][ T422] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.357533][ T416] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 37.378649][ T407] Call Trace:
[ 37.380323][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 37.383923][ T407]
[ 37.392436][ T426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.396919][ T422] RSP: 0018:ffffc90000db7890 EFLAGS: 00010293
[ 37.407716][ T407] pppol2tp_release+0x150/0x2b0
[ 37.409261][ T426] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 37.423815][ T407] sock_close+0xb8/0x200
[ 37.432993][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.443594][ T416] CR2: 00007f5ae178dff8 CR3: 000000012ebda000 CR4: 00000000003506a0
[ 37.444454][ T422] RAX: ffffffff845dbbf7 RBX: ffff8881158f0000 RCX: ffff8881152dbb40
[ 37.452923][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.467810][ T407] ? sock_mmap+0xa0/0xa0
[ 37.467847][ T426] RSP: 0018:ffffc90000d87890 EFLAGS: 00010293
[ 37.472067][ T407] __fput+0x22b/0x900
[ 37.478695][ T426] RAX: ffffffff845dbbf7 RBX: ffff8881152ef000 RCX: ffff88811514e2c0
[ 37.490489][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.494010][ T422] RDX: 0000000000000000 RSI: 000000000ac85c00 RDI: 000000000c04eb7d
[ 37.498683][ T416] Call Trace:
[ 37.506479][ T407] ____fput+0x15/0x20
[ 37.510175][ T426] RDX: 0000000000000000 RSI: 0000000030619220 RDI: 000000000c04eb7d
[ 37.513715][ T407] task_work_run+0x127/0x190
[ 37.521926][ T416]
[ 37.530379][ T426] RBP: ffffc90000d878b0 R08: ffff8881152ef083 R09: 1ffff11022a5de10
[ 37.530499][ T8] device bridge_slave_1 left promiscuous mode
[ 37.538667][ T416] pppol2tp_release+0x150/0x2b0
[ 37.549671][ T426] R10: dffffc0000000000 R11: ffffed1022a5de11 R12: dffffc0000000000
[ 37.553797][ T422] RBP: ffffc90000db78b0 R08: ffff8881158f0083 R09: 1ffff11022b1e010
[ 37.558095][ T416] sock_close+0xb8/0x200
[ 37.565814][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.570220][ T426] R13: dffffc0000000000 R14: 0000000030619220 R15: ffff88811409d000
[ 37.583387][ T407] do_exit+0xb70/0x29a0
[ 37.585670][ T416] ? sock_mmap+0xa0/0xa0
[ 37.589177][ T407] ? __local_bh_enable_ip+0x80/0x80
[ 37.593407][ T416] __fput+0x22b/0x900
[ 37.598795][ T422] R10: dffffc0000000000 R11: ffffed1022b1e011 R12: dffffc0000000000
[ 37.603008][ T426] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 37.611145][ T422] R13: dffffc0000000000 R14: 000000000ac85c00 R15: ffff888123041400
[ 37.620376][ T416] ____fput+0x15/0x20
[ 37.631863][ T416] task_work_run+0x127/0x190
[ 37.633999][ T8] device bridge_slave_0 left promiscuous mode
[ 37.636813][ T407] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.642572][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.647640][ T426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.658688][ T422] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.661244][ T416] do_exit+0xb70/0x29a0
[ 37.670585][ T422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.674350][ T407] ? put_task_struct+0x90/0x90
[ 37.685946][ T8] device veth1_macvtap left promiscuous mode
[ 37.686099][ T426] CR2: 00007f7fe1aa9ff8 CR3: 000000012b99d000 CR4: 00000000003506a0
[ 37.700001][ T8] device veth0_vlan left promiscuous mode
[ 37.700253][ T407] ? __kasan_check_write+0x14/0x20
[ 37.710996][ T416] ? put_task_struct+0x90/0x90
[ 37.715845][ T416] ? __kasan_check_write+0x14/0x20
[ 37.716017][ T422] CR2: 00007f7fe1aaad58 CR3: 000000012db02000 CR4: 00000000003506b0
[ 37.720961][ T416] ? l2tp_session_put+0xa0/0x1a0
[ 37.734476][ T426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.747375][ T407] ? l2tp_session_put+0xa0/0x1a0
[ 37.752422][ T407] ? __kasan_check_write+0x14/0x20
[ 37.754488][ T422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.757661][ T426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.774058][ T407] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.779238][ T407] do_group_exit+0x149/0x310
[ 37.784171][ T416] ? __kasan_check_write+0x14/0x20
[ 37.789305][ T416] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.794454][ T407] ? __kasan_check_write+0x14/0x20
[ 37.794618][ T422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.799575][ T407] ? recalc_sigpending+0x1ac/0x230
[ 37.799596][ T407] get_signal+0x64f/0x1430
[ 37.817289][ T426] Call Trace:
[ 37.820640][ T426]
[ 37.823576][ T426] pppol2tp_release+0x150/0x2b0
[ 37.823924][ T407] arch_do_signal_or_restart+0xe2/0x1100
[ 37.828699][ T426] sock_close+0xb8/0x200
[ 37.834260][ T416] do_group_exit+0x149/0x310
[ 37.838388][ T426] ? sock_mmap+0xa0/0xa0
[ 37.843318][ T416] ? __kasan_check_write+0x14/0x20
[ 37.843346][ T416] ? recalc_sigpending+0x1ac/0x230
[ 37.843362][ T416] get_signal+0x64f/0x1430
[ 37.843379][ T416] arch_do_signal_or_restart+0xe2/0x1100
[ 37.847936][ T426] __fput+0x22b/0x900
[ 37.866786][ T422] Call Trace:
[ 37.868522][ T426] ____fput+0x15/0x20
[ 37.872438][ T422]
[ 37.875772][ T426] task_work_run+0x127/0x190
[ 37.875793][ T426] do_exit+0xb70/0x29a0
[ 37.880095][ T407] ? selinux_file_ioctl+0x3ad/0x4c0
[ 37.882678][ T426] ? _raw_spin_lock_bh+0x94/0xf0
[ 37.900234][ T416] ? selinux_file_ioctl+0x3ad/0x4c0
[ 37.902436][ T426] ? put_task_struct+0x90/0x90
[ 37.910318][ T407] ? get_sigframe_size+0x10/0x10
[ 37.912333][ T422] pppol2tp_release+0x150/0x2b0
[ 37.922321][ T426] ? __kasan_check_write+0x14/0x20
[ 37.922333][ T416] ? get_sigframe_size+0x10/0x10
[ 37.922353][ T416] ? __se_sys_futex+0x135/0x330
[ 37.927837][ T426] ? l2tp_session_put+0xa0/0x1a0
[ 37.942632][ T407] ? __se_sys_futex+0x135/0x330
[ 37.947596][ T422] sock_close+0xb8/0x200
[ 37.949639][ T416] exit_to_user_mode_loop+0xa7/0xe0
[ 37.951998][ T422] ? sock_mmap+0xa0/0xa0
[ 37.961612][ T407] exit_to_user_mode_loop+0xa7/0xe0
[ 37.967073][ T426] ? __kasan_check_write+0x14/0x20
[ 37.967307][ T416] exit_to_user_mode_prepare+0x87/0xd0
[ 37.972214][ T426] ? _raw_spin_lock_irq+0x95/0xf0
[ 37.972239][ T426] do_group_exit+0x149/0x310
[ 37.972255][ T426] ? __kasan_check_write+0x14/0x20
[ 37.987951][ T416] syscall_exit_to_user_mode+0x1a/0x30
[ 37.992807][ T407] exit_to_user_mode_prepare+0x87/0xd0
[ 38.008455][ T422] __fput+0x22b/0x900
[ 38.012487][ T422] ____fput+0x15/0x20
[ 38.016427][ T416] do_syscall_64+0x58/0xa0
[ 38.016522][ T407] syscall_exit_to_user_mode+0x1a/0x30
[ 38.026524][ T422] task_work_run+0x127/0x190
[ 38.031176][ T422] do_exit+0xb70/0x29a0
[ 38.035478][ T426] ? recalc_sigpending+0x1ac/0x230
[ 38.035570][ T416] ? clear_bhb_loop+0x50/0xa0
[ 38.040681][ T426] get_signal+0x64f/0x1430
[ 38.050200][ T422] ? _raw_spin_lock_bh+0x94/0xf0
[ 38.055252][ T407] do_syscall_64+0x58/0xa0
[ 38.059681][ T407] ? clear_bhb_loop+0x50/0xa0
[ 38.063998][ T416] ? clear_bhb_loop+0x50/0xa0
[ 38.064562][ T426] arch_do_signal_or_restart+0xe2/0x1100
[ 38.069345][ T416] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.074697][ T422] ? put_task_struct+0x90/0x90
[ 38.074718][ T422] ? __kasan_check_write+0x14/0x20
[ 38.074734][ T422] ? l2tp_session_put+0xa0/0x1a0
[ 38.074749][ T422] ? __kasan_check_write+0x14/0x20
[ 38.074764][ T422] ? _raw_spin_lock_irq+0x95/0xf0
[ 38.074783][ T422] do_group_exit+0x149/0x310
[ 38.074799][ T422] ? __kasan_check_write+0x14/0x20
[ 38.074815][ T422] ? recalc_sigpending+0x1ac/0x230
[ 38.094556][ T416] RIP: 0033:0x7f0752b5be59
[ 38.096629][ T407] ? clear_bhb_loop+0x50/0xa0
[ 38.111621][ T416] Code: Unable to access opcode bytes at RIP 0x7f0752b5be2f.
[ 38.115767][ T426] ? selinux_file_ioctl+0x3ad/0x4c0
[ 38.121070][ T416] RSP: 002b:00007f07529bd0e8 EFLAGS: 00000246
[ 38.125321][ T426] ? get_sigframe_size+0x10/0x10
[ 38.140169][ T416] ORIG_RAX: 00000000000000ca
[ 38.142582][ T422] get_signal+0x64f/0x1430
[ 38.155302][ T416] RAX: 0000000000000001 RBX: 00007f0752de3fa8 RCX: 00007f0752b5be59
[ 38.158461][ T407] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.170825][ T416] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0752de3fac
[ 38.170878][ T416] RBP: 00007f0752de3fa0 R08: 0037bc5014941128 R09: 0000000000000000
[ 38.177390][ T422] arch_do_signal_or_restart+0xe2/0x1100
[ 38.184977][ T426] ? __se_sys_futex+0x135/0x330
[ 38.193021][ T407] RIP: 0033:0x7fd10961ae59
[ 38.208333][ T439] ------------[ cut here ]------------
[ 38.213796][ T416] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.213813][ T416] R13: 00007f0752de4038 R14: 00007ffd499360c0 R15: 00007ffd499361a8
[ 38.213826][ T416]
[ 38.213833][ T416] ---[ end trace 9fea2f7e510b027d ]---
[ 38.223840][ T422] ? selinux_file_ioctl+0x3ad/0x4c0
[ 38.238387][ T426] exit_to_user_mode_loop+0xa7/0xe0
[ 38.245832][ T439] WARNING: CPU: 1 PID: 439 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.249360][ T426] exit_to_user_mode_prepare+0x87/0xd0
[ 38.263796][ T407] Code: Unable to access opcode bytes at RIP 0x7fd10961ae2f.
[ 38.264919][ T426] syscall_exit_to_user_mode+0x1a/0x30
[ 38.278053][ T439] Modules linked in:
[ 38.282339][ T439] CPU: 0 PID: 439 Comm: syz.5.31 Tainted: G B W syzkaller #0
[ 38.292183][ T422] ? get_sigframe_size+0x10/0x10
[ 38.296743][ T426] do_syscall_64+0x58/0xa0
[ 38.297630][ T407] RSP: 002b:00007fd10947c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.301948][ T426] ? clear_bhb_loop+0x50/0xa0
[ 38.310370][ T422] ? __se_sys_futex+0x135/0x330
[ 38.315086][ T426] ? clear_bhb_loop+0x50/0xa0
[ 38.324755][ T422] exit_to_user_mode_loop+0xa7/0xe0
[ 38.332338][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 38.340312][ T407] RAX: 0000000000000001 RBX: 00007fd1098a2fa8 RCX: 00007fd10961ae59
[ 38.342803][ T426] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.356968][ T439] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.362619][ T422] exit_to_user_mode_prepare+0x87/0xd0
[ 38.363371][ T439] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 38.381003][ T422] syscall_exit_to_user_mode+0x1a/0x30
[ 38.394088][ T426] RIP: 0033:0x7f5ae194de59
[ 38.394785][ T407] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd1098a2fac
[ 38.410733][ T426] Code: Unable to access opcode bytes at RIP 0x7f5ae194de2f.
[ 38.416949][ T422] do_syscall_64+0x58/0xa0
[ 38.425568][ T422] ? clear_bhb_loop+0x50/0xa0
[ 38.429285][ T426] RSP: 002b:00007f5ae17af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.430284][ T422] ? clear_bhb_loop+0x50/0xa0
[ 38.444894][ T407] RBP: 00007fd1098a2fa0 R08: 002b37f78fec1030 R09: 0000000000000000
[ 38.449480][ T426] RAX: 0000000000000001 RBX: 00007f5ae1bd5fa8 RCX: 00007f5ae194de59
[ 38.452990][ T407] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.469525][ T422] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.471242][ T426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ae1bd5fac
[ 38.475705][ T407] R13: 00007fd1098a3038 R14: 00007ffd3a6ddcb0 R15: 00007ffd3a6ddd98
[ 38.491780][ T422] RIP: 0033:0x7f950aecee59
[ 38.491880][ T442] ------------[ cut here ]------------
[ 38.496674][ T422] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 38.502273][ T426] RBP: 00007f5ae1bd5fa0 R08: 000a6fa219e65b68 R09: 0000000000000000
[ 38.509755][ T407]
[ 38.520914][ T422] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 38.524063][ T442] WARNING: CPU: 0 PID: 442 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.529711][ T422] RAX: 0000000000000001 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 38.539847][ T439] RSP: 0018:ffffc90000df7890 EFLAGS: 00010293
[ 38.548027][ T426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.548341][ T407] ---[ end trace 9fea2f7e510b027e ]---
[ 38.554536][ T439]
[ 38.563016][ T422] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f950b156fac
[ 38.568486][ T426] R13: 00007f5ae1bd6038 R14: 00007ffecd468720 R15: 00007ffecd468808
[ 38.583841][ T422] RBP: 00007f950b156fa0 R08: 0002176716cbb018 R09: 0000000000000000
[ 38.591861][ T442] Modules linked in:
[ 38.599012][ T442] CPU: 0 PID: 442 Comm: syz.6.32 Tainted: G B W syzkaller #0
[ 38.599048][ T422] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 38.607658][ T439] RAX: ffffffff845dbbf7 RBX: ffff8881165f8000 RCX: ffff888116604f00
[ 38.623629][ T439] RDX: 0000000000000000 RSI: 000000001f72e1c0 RDI: 000000000c04eb7d
[ 38.625812][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 38.641792][ T426]
[ 38.642036][ T422] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 38.645194][ T426] ---[ end trace 9fea2f7e510b027f ]---
[ 38.653480][ T422]
[ 38.658704][ T439] RBP: ffffc90000df78b0 R08: ffff8881165f8083 R09: 1ffff11022cbf010
[ 38.663510][ T422] ---[ end trace 9fea2f7e510b0280 ]---
[ 38.678966][ T442] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.683811][ T439] R10: dffffc0000000000 R11: ffffed1022cbf011 R12: dffffc0000000000
[ 38.685575][ T442] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 38.693434][ T439] R13: dffffc0000000000 R14: 000000001f72e1c0 R15: ffff8881139cc000
[ 38.713313][ T442] RSP: 0018:ffffc90000de7890 EFLAGS: 00010293
[ 38.734822][ T439] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 38.744335][ T439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2026/07/04 19:32:03 executed programs: 27
[ 38.753955][ T442] RAX: ffffffff845dbbf7 RBX: ffff88812cee4000 RCX: ffff888116603b40
[ 38.765231][ T439] CR2: 00007f950bc89060 CR3: 000000012db02000 CR4: 00000000003506b0
[ 38.772158][ T442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 38.773322][ T439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.792324][ T442] RBP: ffffc90000de78b0 R08: ffff88812cee4083 R09: 1ffff110259dc810
[ 38.807035][ T442] R10: dffffc0000000000 R11: ffffed10259dc811 R12: dffffc0000000000
[ 38.816111][ T445] ------------[ cut here ]------------
[ 38.821600][ T445] WARNING: CPU: 1 PID: 445 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.829845][ T439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.831888][ T442] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812f378c00
[ 38.853805][ T442] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 38.859823][ T439] Call Trace:
[ 38.872948][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.876370][ T439]
[ 38.880149][ T445] Modules linked in:
[ 38.883920][ T439] pppol2tp_release+0x150/0x2b0
[ 38.890190][ T442] CR2: 00007fd10945aff8 CR3: 000000012ebda000 CR4: 00000000003506a0
[ 38.891878][ T439] sock_close+0xb8/0x200
[ 38.903777][ T445] CPU: 1 PID: 445 Comm: syz.4.33 Tainted: G B W syzkaller #0
[ 38.914733][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.923987][ T439] ? sock_mmap+0xa0/0xa0
[ 38.928268][ T439] __fput+0x22b/0x900
[ 38.932255][ T439] ____fput+0x15/0x20
[ 38.932941][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 38.946859][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.954916][ T439] task_work_run+0x127/0x190
[ 38.956809][ T442] Call Trace:
[ 38.959523][ T439] do_exit+0xb70/0x29a0
[ 38.964118][ T442]
[ 38.973789][ T442] pppol2tp_release+0x150/0x2b0
[ 38.983056][ T442] sock_close+0xb8/0x200
[ 38.988574][ T445] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.994337][ T439] ? _raw_spin_lock_bh+0x94/0xf0
[ 38.997807][ T442] ? sock_mmap+0xa0/0xa0
[ 39.001516][ T439] ? put_task_struct+0x90/0x90
[ 39.005233][ T442] __fput+0x22b/0x900
[ 39.009499][ T439] ? __kasan_check_write+0x14/0x20
[ 39.013664][ T442] ____fput+0x15/0x20
[ 39.018811][ T439] ? l2tp_session_put+0xa0/0x1a0
[ 39.023120][ T442] task_work_run+0x127/0x190
[ 39.028845][ T439] ? __kasan_check_write+0x14/0x20
[ 39.033581][ T445] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 39.058969][ T442] do_exit+0xb70/0x29a0
[ 39.063159][ T442] ? _raw_spin_lock_bh+0x94/0xf0
[ 39.064702][ T439] ? _raw_spin_lock_irq+0x95/0xf0
[ 39.068562][ T442] ? put_task_struct+0x90/0x90
[ 39.078222][ T442] ? __kasan_check_write+0x14/0x20
[ 39.083375][ T439] do_group_exit+0x149/0x310
[ 39.083533][ T442] ? l2tp_session_put+0xa0/0x1a0
[ 39.088139][ T439] ? __kasan_check_write+0x14/0x20
[ 39.093370][ T445] RSP: 0018:ffffc90000d97890 EFLAGS: 00010293
[ 39.104518][ T442] ? __kasan_check_write+0x14/0x20
[ 39.109642][ T442] ? _raw_spin_lock_irq+0x95/0xf0
[ 39.113785][ T439] ? recalc_sigpending+0x1ac/0x230
[ 39.115473][ T445] RAX: ffffffff845dbbf7 RBX: ffff88811e6f7000 RCX: ffff888115d2e2c0
[ 39.129708][ T442] do_group_exit+0x149/0x310
[ 39.134518][ T439] get_signal+0x64f/0x1430
[ 39.139123][ T439] arch_do_signal_or_restart+0xe2/0x1100
[ 39.145501][ T442] ? __kasan_check_write+0x14/0x20
[ 39.150653][ T442] ? recalc_sigpending+0x1ac/0x230
[ 39.156467][ T439] ? selinux_file_ioctl+0x3ad/0x4c0
[ 39.161854][ T439] ? get_sigframe_size+0x10/0x10
[ 39.167328][ T445] RDX: 0000000000000000 RSI: 000000001f72e0c0 RDI: 000000000c04eb7d
[ 39.175749][ T442] get_signal+0x64f/0x1430
[ 39.180514][ T442] arch_do_signal_or_restart+0xe2/0x1100
[ 39.180725][ T454] ------------[ cut here ]------------
[ 39.186597][ T439] ? __se_sys_futex+0x135/0x330
[ 39.197384][ T445] RBP: ffffc90000d978b0 R08: ffff88811e6f7083 R09: 1ffff11023cdee10
[ 39.205656][ T454] WARNING: CPU: 0 PID: 454 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.205974][ T442] ? selinux_file_ioctl+0x3ad/0x4c0
[ 39.221733][ T445] R10: dffffc0000000000 R11: ffffed1023cdee11 R12: dffffc0000000000
[ 39.229905][ T439] exit_to_user_mode_loop+0xa7/0xe0
[ 39.235870][ T442] ? get_sigframe_size+0x10/0x10
[ 39.240913][ T442] ? __se_sys_futex+0x135/0x330
[ 39.246039][ T445] R13: dffffc0000000000 R14: 000000001f72e0c0 R15: ffff888114c01000
[ 39.254488][ T439] exit_to_user_mode_prepare+0x87/0xd0
[ 39.260053][ T439] syscall_exit_to_user_mode+0x1a/0x30
[ 39.264402][ T454] Modules linked in:
[ 39.266049][ T445] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 39.268845][ T454]
[ 39.270124][ T445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.290400][ T442] exit_to_user_mode_loop+0xa7/0xe0
[ 39.295844][ T439] do_syscall_64+0x58/0xa0
[ 39.300372][ T439] ? clear_bhb_loop+0x50/0xa0
[ 39.305415][ T442] exit_to_user_mode_prepare+0x87/0xd0
[ 39.309595][ T454] CPU: 0 PID: 454 Comm: syz.0.36 Tainted: G B W syzkaller #0
[ 39.310965][ T442] syscall_exit_to_user_mode+0x1a/0x30
[ 39.326193][ T439] ? clear_bhb_loop+0x50/0xa0
[ 39.330886][ T439] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 39.331391][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 39.337020][ T445] CR2: 0000200000000000 CR3: 000000010d6ec000 CR4: 00000000003506a0
[ 39.355540][ T439] RIP: 0033:0x7f7fe1c69e59
[ 39.359998][ T439] Code: Unable to access opcode bytes at RIP 0x7f7fe1c69e2f.
[ 39.363849][ T454] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.367771][ T442] do_syscall_64+0x58/0xa0
[ 39.378394][ T442] ? clear_bhb_loop+0x50/0xa0
[ 39.383141][ T439] RSP: 002b:00007f7fe1acb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 39.383429][ T454] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 39.391639][ T442] ? clear_bhb_loop+0x50/0xa0
[ 39.391664][ T442] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 39.391680][ T442] RIP: 0033:0x7f0752b5be59
[ 39.391693][ T442] Code: Unable to access opcode bytes at RIP 0x7f0752b5be2f.
[ 39.391701][ T442] RSP: 002b:00007f07529bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 39.391717][ T442] RAX: 0000000000000001 RBX: 00007f0752de3fa8 RCX: 00007f0752b5be59
[ 39.440564][ T454] RSP: 0018:ffffc90000e87890 EFLAGS: 00010293
[ 39.442847][ T445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.464994][ T439] RAX: 0000000000000001 RBX: 00007f7fe1ef1fa8 RCX: 00007f7fe1c69e59
[ 39.473191][ T439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fe1ef1fac
[ 39.481172][ T454]
[ 39.481183][ T454] RAX: ffffffff845dbbf7 RBX: ffff8881172eb000 RCX: ffff88812e6b8000
[ 39.481197][ T454] RDX: 0000000000000000 RSI: 0000000015a51ee0 RDI: 000000000c04eb7d
[ 39.481207][ T454] RBP: ffffc90000e878b0 R08: ffff8881172eb083 R09: 1ffff11022e5d610
[ 39.481217][ T454] R10: dffffc0000000000 R11: ffffed1022e5d611 R12: dffffc0000000000
[ 39.483972][ T439] RBP: 00007f7fe1ef1fa0 R08: 000774b1aef6c150 R09: 0000000000000000
[ 39.501870][ T454] R13: dffffc0000000000 R14: 0000000015a51ee0 R15: ffff8881140c0c00
[ 39.507711][ T445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.533842][ T454] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 39.540039][ T442] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0752de3fac
[ 39.549040][ T439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 39.557148][ T445] Call Trace:
[ 39.568521][ T442] RBP: 00007f0752de3fa0 R08: 001a8781b60f2450 R09: 0000000000000000
[ 39.575106][ T439] R13: 00007f7fe1ef2038 R14: 00007ffccc8ada10 R15: 00007ffccc8adaf8
[ 39.576676][ T445]
[ 39.585187][ T454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.587611][ T442] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 39.599895][ T439]
[ 39.602562][ T445] pppol2tp_release+0x150/0x2b0
[ 39.605565][ T454] CR2: 0000200000000000 CR3: 000000012c799000 CR4: 00000000003506b0
[ 39.618130][ T445] sock_close+0xb8/0x200
[ 39.618432][ T439] ---[ end trace 9fea2f7e510b0281 ]---
[ 39.622457][ T442] R13: 00007f0752de4038 R14: 00007ffd499360c0 R15: 00007ffd499361a8
[ 39.627908][ T454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.636164][ T445] ? sock_mmap+0xa0/0xa0
[ 39.653786][ T445] __fput+0x22b/0x900
[ 39.657823][ T445] ____fput+0x15/0x20
[ 39.661814][ T445] task_work_run+0x127/0x190
[ 39.673837][ T442]
[ 39.677028][ T442] ---[ end trace 9fea2f7e510b0282 ]---
[ 39.682632][ T445] do_exit+0xb70/0x29a0
[ 39.690950][ T454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.699355][ T445] ? _raw_spin_lock_bh+0x94/0xf0
[ 39.709298][ T454] Call Trace:
[ 39.710969][ T445] ? put_task_struct+0x90/0x90
[ 39.712793][ T454]
[ 39.725812][ T445] ? __kasan_check_write+0x14/0x20
[ 39.730982][ T445] ? l2tp_session_put+0xa0/0x1a0
[ 39.736056][ T454] pppol2tp_release+0x150/0x2b0
[ 39.741098][ T454] sock_close+0xb8/0x200
[ 39.743880][ T445] ? __kasan_check_write+0x14/0x20
[ 39.750708][ T454] ? sock_mmap+0xa0/0xa0
[ 39.760696][ T445] ? _raw_spin_lock_irq+0x95/0xf0
[ 39.760867][ T454] __fput+0x22b/0x900
[ 39.770079][ T445] do_group_exit+0x149/0x310
[ 39.777910][ T454] ____fput+0x15/0x20
[ 39.783109][ T454] task_work_run+0x127/0x190
[ 39.787909][ T445] ? __kasan_check_write+0x14/0x20
[ 39.794409][ T454] do_exit+0xb70/0x29a0
[ 39.798634][ T454] ? _raw_spin_lock_bh+0x94/0xf0
[ 39.803583][ T454] ? put_task_struct+0x90/0x90
[ 39.808565][ T445] ? recalc_sigpending+0x1ac/0x230
[ 39.816948][ T445] get_signal+0x64f/0x1430
[ 39.820233][ T454] ? __kasan_check_write+0x14/0x20
[ 39.826574][ T445] arch_do_signal_or_restart+0xe2/0x1100
[ 39.832748][ T454] ? l2tp_session_put+0xa0/0x1a0
[ 39.837997][ T454] ? __kasan_check_write+0x14/0x20
[ 39.844850][ T445] ? selinux_file_ioctl+0x3ad/0x4c0
[ 39.850101][ T445] ? get_sigframe_size+0x10/0x10
[ 39.851525][ T454] ? _raw_spin_lock_irq+0x95/0xf0
[ 39.873870][ T445] ? __se_sys_futex+0x135/0x330
[ 39.883813][ T445] exit_to_user_mode_loop+0xa7/0xe0
[ 39.884072][ T454] do_group_exit+0x149/0x310
[ 39.893627][ T454] ? __kasan_check_write+0x14/0x20
[ 39.903803][ T445] exit_to_user_mode_prepare+0x87/0xd0
[ 39.909328][ T445] syscall_exit_to_user_mode+0x1a/0x30
[ 39.910072][ T454] ? recalc_sigpending+0x1ac/0x230
[ 39.923980][ T454] get_signal+0x64f/0x1430
[ 39.928087][ T445] do_syscall_64+0x58/0xa0
[ 39.932830][ T445] ? clear_bhb_loop+0x50/0xa0
[ 39.943937][ T454] arch_do_signal_or_restart+0xe2/0x1100
[ 39.949691][ T454] ? selinux_file_ioctl+0x3ad/0x4c0
[ 39.955757][ T454] ? get_sigframe_size+0x10/0x10
[ 39.960759][ T454] ? __se_sys_futex+0x135/0x330
[ 39.965857][ T454] exit_to_user_mode_loop+0xa7/0xe0
[ 39.971205][ T454] exit_to_user_mode_prepare+0x87/0xd0
[ 39.974022][ T445] ? clear_bhb_loop+0x50/0xa0
[ 39.977466][ T454] syscall_exit_to_user_mode+0x1a/0x30
[ 39.981379][ T445] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 39.981400][ T445] RIP: 0033:0x7fd10961ae59
[ 39.987335][ T454] do_syscall_64+0x58/0xa0
[ 40.001825][ T454] ? clear_bhb_loop+0x50/0xa0
[ 40.011893][ T454] ? clear_bhb_loop+0x50/0xa0
[ 40.013987][ T445] Code: Unable to access opcode bytes at RIP 0x7fd10961ae2f.
[ 40.021995][ T454] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 40.030163][ T454] RIP: 0033:0x7f950aecee59
[ 40.034804][ T454] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 40.036285][ T445] RSP: 002b:00007fd10947c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 40.042527][ T454] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 40.071237][ T445] RAX: 0000000000000001 RBX: 00007fd1098a2fa8 RCX: 00007fd10961ae59
[ 40.072748][ T454] RAX: fffffffffffffe00 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 40.089556][ T445] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd1098a2fac
[ 40.108407][ T445] RBP: 00007fd1098a2fa0 R08: 002ecb7ebd990d80 R09: 0000000000000000
[ 40.116739][ T454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f950b156fa8
[ 40.126997][ T445] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 40.143348][ T454] RBP: 00007f950b156fa0 R08: 0000000000000000 R09: 0000000000000000
[ 40.143825][ T445] R13: 00007fd1098a3038 R14: 00007ffd3a6ddcb0 R15: 00007ffd3a6ddd98
[ 40.161775][ T480] ------------[ cut here ]------------
[ 40.169903][ T445]
[ 40.171101][ T454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 40.180040][ T445] ---[ end trace 9fea2f7e510b0283 ]---
[ 40.183557][ T454] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 40.187801][ T480] WARNING: CPU: 1 PID: 480 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.196566][ T454]
[ 40.221431][ T454] ---[ end trace 9fea2f7e510b0284 ]---
[ 40.283226][ T480] Modules linked in:
[ 40.303418][ T480] CPU: 1 PID: 480 Comm: syz.2.45 Tainted: G B W syzkaller #0
[ 40.336244][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 40.366769][ T480] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.373169][ T480] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 40.393562][ T488] ------------[ cut here ]------------
[ 40.414188][ T490] ------------[ cut here ]------------
[ 40.423343][ T488] WARNING: CPU: 0 PID: 488 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.425059][ T480] RSP: 0018:ffffc90000f4f890 EFLAGS: 00010293
[ 40.440450][ T490] WARNING: CPU: 0 PID: 490 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.453715][ T480] RAX: ffffffff845dbbf7 RBX: ffff8881177d2000 RCX: ffff8881178bcf00
[ 40.461791][ T480] RDX: 0000000000000000 RSI: 000000002d972640 RDI: 000000000c04eb7d
[ 40.464060][ T488] Modules linked in:
[ 40.480042][ T480] RBP: ffffc90000f4f8b0 R08: ffff8881177d2083 R09: 1ffff11022efa410
[ 40.489893][ T488] CPU: 0 PID: 488 Comm: syz.0.48 Tainted: G B W syzkaller #0
[ 40.499677][ T490] Modules linked in:
[ 40.503623][ T490] CPU: 0 PID: 490 Comm: syz.6.49 Tainted: G B W syzkaller #0
[ 40.504282][ T480] R10: dffffc0000000000 R11: ffffed1022efa411 R12: dffffc0000000000
[ 40.520170][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 40.520183][ T488] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.520212][ T488] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 40.520226][ T488] RSP: 0018:ffffc90000df7890 EFLAGS: 00010293
[ 40.520243][ T488] RAX: ffffffff845dbbf7 RBX: ffff88811743a000 RCX: ffff88811818bb40
[ 40.520255][ T488] RDX: 0000000000000000 RSI: 000000001f783a60 RDI: 000000000c04eb7d
[ 40.520265][ T488] RBP: ffffc90000df78b0 R08: ffff88811743a083 R09: 1ffff11022e87410
[ 40.543827][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 40.565654][ T488] R10: dffffc0000000000 R11: ffffed1022e87411 R12: dffffc0000000000
[ 40.580923][ T480] R13: dffffc0000000000 R14: 000000002d972640 R15: ffff88812f0f0c00
[ 40.587251][ T488] R13: dffffc0000000000 R14: 000000001f783a60 R15: ffff8881302db000
[ 40.613825][ T480] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 40.621574][ T488] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 40.640191][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.650279][ T480] CR2: 0000200000000000 CR3: 000000012b99d000 CR4: 00000000003506a0
[ 40.654081][ T488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.662125][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.680251][ T490] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.683791][ T488] CR2: 00007f7fe1ef3dac CR3: 000000010d6ec000 CR4: 00000000003506b0
[ 40.690280][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.702933][ T488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.713057][ T490] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 40.721580][ T488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.733079][ T480] Call Trace:
[ 40.733090][ T480]
[ 40.733096][ T480] pppol2tp_release+0x150/0x2b0
[ 40.733120][ T480] sock_close+0xb8/0x200
[ 40.733139][ T480] ? sock_mmap+0xa0/0xa0
[ 40.733152][ T480] __fput+0x22b/0x900
[ 40.761764][ T488] Call Trace:
[ 40.768752][ T488]
[ 40.771714][ T488] pppol2tp_release+0x150/0x2b0
[ 40.775855][ T490] RSP: 0018:ffffc90000ecf890 EFLAGS: 00010293
[ 40.788124][ T490] RAX: ffffffff845dbbf7 RBX: ffff88811743d000 RCX: ffff88811818e2c0
[ 40.793778][ T488] sock_close+0xb8/0x200
[ 40.796406][ T480] ____fput+0x15/0x20
[ 40.805379][ T490] RDX: 0000000000000000 RSI: 000000001f7838e0 RDI: 000000000c04eb7d
[ 40.813483][ T480] task_work_run+0x127/0x190
[ 40.818603][ T480] do_exit+0xb70/0x29a0
[ 40.820622][ T488] ? sock_mmap+0xa0/0xa0
[ 40.827390][ T480] ? _raw_spin_lock_bh+0x94/0xf0
[ 40.833571][ T490] RBP: ffffc90000ecf8b0 R08: ffff88811743d083 R09: 1ffff11022e87a10
[ 40.834058][ T488] __fput+0x22b/0x900
[ 40.841969][ T480] ? put_task_struct+0x90/0x90
[ 40.850717][ T480] ? __kasan_check_write+0x14/0x20
[ 40.856067][ T490] R10: dffffc0000000000 R11: ffffed1022e87a11 R12: dffffc0000000000
[ 40.864243][ T480] ? l2tp_session_put+0xa0/0x1a0
[ 40.869288][ T480] ? __kasan_check_write+0x14/0x20
[ 40.873828][ T488] ____fput+0x15/0x20
[ 40.875067][ T490] R13: dffffc0000000000 R14: 000000001f7838e0 R15: ffff8881302d8000
[ 40.887957][ T480] ? _raw_spin_lock_irq+0x95/0xf0
[ 40.889466][ T488] task_work_run+0x127/0x190
[ 40.893013][ T480] do_group_exit+0x149/0x310
[ 40.902567][ T490] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 40.907237][ T488] do_exit+0xb70/0x29a0
[ 40.911964][ T490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.923491][ T480] ? __kasan_check_write+0x14/0x20
[ 40.928994][ T480] ? recalc_sigpending+0x1ac/0x230
[ 40.934465][ T490] CR2: 0000200000000000 CR3: 000000010d6ec000 CR4: 00000000003506a0
[ 40.936018][ T488] ? _raw_spin_lock_bh+0x94/0xf0
[ 40.942458][ T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.955729][ T480] get_signal+0x64f/0x1430
[ 40.960167][ T480] arch_do_signal_or_restart+0xe2/0x1100
[ 40.966394][ T480] ? selinux_file_ioctl+0x3ad/0x4c0
[ 40.967712][ T488] ? put_task_struct+0x90/0x90
[ 40.971632][ T480] ? get_sigframe_size+0x10/0x10
[ 40.981699][ T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.989887][ T480] ? __se_sys_futex+0x135/0x330
[ 40.995023][ T490] Call Trace:
[ 40.998311][ T490]
[ 41.000562][ T488] ? __kasan_check_write+0x14/0x20
[ 41.008061][ T488] ? l2tp_session_put+0xa0/0x1a0
[ 41.013027][ T488] ? __kasan_check_write+0x14/0x20
[ 41.015751][ T480] exit_to_user_mode_loop+0xa7/0xe0
[ 41.023416][ T480] exit_to_user_mode_prepare+0x87/0xd0
[ 41.029235][ T490] pppol2tp_release+0x150/0x2b0
[ 41.034702][ T490] sock_close+0xb8/0x200
[ 41.039108][ T490] ? sock_mmap+0xa0/0xa0
[ 41.043441][ T480] syscall_exit_to_user_mode+0x1a/0x30
[ 41.043838][ T488] ? _raw_spin_lock_irq+0x95/0xf0
[ 41.049932][ T480] do_syscall_64+0x58/0xa0
[ 41.059660][ T490] __fput+0x22b/0x900
[ 41.063672][ T490] ____fput+0x15/0x20
[ 41.067952][ T480] ? clear_bhb_loop+0x50/0xa0
[ 41.072776][ T480] ? clear_bhb_loop+0x50/0xa0
[ 41.073821][ T488] do_group_exit+0x149/0x310
[ 41.077752][ T490] task_work_run+0x127/0x190
[ 41.087020][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 41.092997][ T490] do_exit+0xb70/0x29a0
[ 41.097450][ T488] ? __kasan_check_write+0x14/0x20
[ 41.097606][ T480] RIP: 0033:0x7f5ae194de59
[ 41.107198][ T490] ? _raw_spin_lock_bh+0x94/0xf0
[ 41.112188][ T488] ? recalc_sigpending+0x1ac/0x230
[ 41.117458][ T490] ? put_task_struct+0x90/0x90
[ 41.121220][ T488] get_signal+0x64f/0x1430
[ 41.122482][ T490] ? __kasan_check_write+0x14/0x20
[ 41.131331][ T488] arch_do_signal_or_restart+0xe2/0x1100
[ 41.132355][ T480] Code: Unable to access opcode bytes at RIP 0x7f5ae194de2f.
[ 41.141430][ T488] ? selinux_file_ioctl+0x3ad/0x4c0
[ 41.145376][ T490] ? l2tp_session_put+0xa0/0x1a0
[ 41.159536][ T488] ? get_sigframe_size+0x10/0x10
[ 41.164375][ T480] RSP: 002b:00007f5ae17af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 41.169638][ T488] ? __se_sys_futex+0x135/0x330
[ 41.173632][ T480] RAX: 0000000000000001 RBX: 00007f5ae1bd5fa8 RCX: 00007f5ae194de59
[ 41.184225][ T488] exit_to_user_mode_loop+0xa7/0xe0
[ 41.186102][ T490] ? __kasan_check_write+0x14/0x20
[ 41.201540][ T488] exit_to_user_mode_prepare+0x87/0xd0
[ 41.204133][ T480] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ae1bd5fac
[ 41.207209][ T490] ? _raw_spin_lock_irq+0x95/0xf0
[ 41.223784][ T480] RBP: 00007f5ae1bd5fa0 R08: 00080d485b87ef28 R09: 0000000000000000
[ 41.230281][ T490] do_group_exit+0x149/0x310
[ 41.231881][ T480] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 41.231894][ T480] R13: 00007f5ae1bd6038 R14: 00007ffecd468720 R15: 00007ffecd468808
[ 41.236798][ T490] ? __kasan_check_write+0x14/0x20
[ 41.244524][ T488] syscall_exit_to_user_mode+0x1a/0x30
[ 41.272913][ T490] ? recalc_sigpending+0x1ac/0x230
[ 41.283001][ T490] get_signal+0x64f/0x1430
[ 41.284180][ T488] do_syscall_64+0x58/0xa0
[ 41.292065][ T488] ? clear_bhb_loop+0x50/0xa0
[ 41.293102][ T490] arch_do_signal_or_restart+0xe2/0x1100
[ 41.296812][ T480]
[ 41.296820][ T480] ---[ end trace 9fea2f7e510b0285 ]---
[ 41.311948][ T488] ? clear_bhb_loop+0x50/0xa0
[ 41.334227][ T510] ------------[ cut here ]------------
[ 41.338289][ T490] ? selinux_file_ioctl+0x3ad/0x4c0
[ 41.339733][ T510] WARNING: CPU: 1 PID: 510 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 41.355293][ T488] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 41.355417][ T490] ? get_sigframe_size+0x10/0x10
[ 41.361209][ T488] RIP: 0033:0x7f950aecee59
[ 41.361227][ T488] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 41.361234][ T488] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 41.376680][ T490] ? __se_sys_futex+0x135/0x330
[ 41.393873][ T513] ------------[ cut here ]------------
[ 41.399352][ T513] WARNING: CPU: 0 PID: 513 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 41.409716][ T490] exit_to_user_mode_loop+0xa7/0xe0
[ 41.413827][ T488] RAX: 0000000000000001 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 41.415221][ T490] exit_to_user_mode_prepare+0x87/0xd0
[ 41.422994][ T488] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f950b156fac
[ 41.438892][ T490] syscall_exit_to_user_mode+0x1a/0x30
[ 41.444783][ T510] Modules linked in:
[ 41.448780][ T510] CPU: 0 PID: 510 Comm: syz.4.55 Tainted: G B W syzkaller #0
[ 41.457670][ T488] RBP: 00007f950b156fa0 R08: 0013f90a5ff72d08 R09: 0000000000000000
[ 41.463823][ T490] do_syscall_64+0x58/0xa0
[ 41.470168][ T513] Modules linked in:
[ 41.474430][ T513] CPU: 0 PID: 513 Comm: syz.5.56 Tainted: G B W syzkaller #0
[ 41.474645][ T488] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 41.483231][ T490] ? clear_bhb_loop+0x50/0xa0
[ 41.496999][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 41.497039][ T516] ------------[ cut here ]------------
[ 41.507838][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 41.523866][ T490] ? clear_bhb_loop+0x50/0xa0
[ 41.527229][ T488] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 41.528641][ T490] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 41.537109][ T516] WARNING: CPU: 1 PID: 516 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 41.543150][ T510] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 41.553120][ T488]
[ 41.559369][ T490] RIP: 0033:0x7f0752b5be59
[ 41.559388][ T490] Code: Unable to access opcode bytes at RIP 0x7f0752b5be2f.
[ 41.559396][ T490] RSP: 002b:00007f07529bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 41.559414][ T490] RAX: 0000000000000001 RBX: 00007f0752de3fa8 RCX: 00007f0752b5be59
[ 41.562862][ T488] ---[ end trace 9fea2f7e510b0286 ]---
[ 41.566863][ T513] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 41.602942][ T490] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0752de3fac
[ 41.607745][ T516] Modules linked in:
[ 41.611377][ T510] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 41.618365][ T516] CPU: 1 PID: 516 Comm: syz.2.57 Tainted: G B W syzkaller #0
[ 41.635141][ T490] RBP: 00007f0752de3fa0 R08: 00165b6460da3968 R09: 0000000000000000
[ 41.644791][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 41.652677][ T490] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 41.662677][ T516] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 41.670458][ T513] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 41.677100][ T516] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 41.696478][ T490] R13: 00007f0752de4038 R14: 00007ffd499360c0 R15: 00007ffd499361a8
[ 41.696497][ T490]
[ 41.696503][ T490] ---[ end trace 9fea2f7e510b0287 ]---
[ 41.696616][ T513] RSP: 0018:ffffc90000f6f890 EFLAGS: 00010293
[ 41.716195][ T510] RSP: 0018:ffffc90000f7f890 EFLAGS: 00010293
[ 41.724410][ T516] RSP: 0018:ffffc90000d97890 EFLAGS: 00010293
[ 41.733969][ T510]
[ 41.753909][ T513]
[ 41.756246][ T513] RAX: ffffffff845dbbf7 RBX: ffff8881189dc000 RCX: ffff8881189e4f00
[ 41.764577][ T516]
[ 41.766910][ T516] RAX: ffffffff845dbbf7 RBX: ffff8881183da000 RCX: ffff8881184893c0
[ 41.773797][ T510] RAX: ffffffff845dbbf7 RBX: ffff8881183d9000 RCX: ffff888118520000
[ 41.783190][ T510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 41.783781][ T513] RDX: 0000000000000000 RSI: 000000000d482380 RDI: 000000000c04eb7d
[ 41.800068][ T516] RDX: 0000000000000000 RSI: 000000000dd9ca60 RDI: 000000000c04eb7d
[ 41.803357][ T510] RBP: ffffc90000f7f8b0 R08: ffff8881183d9083 R09: 1ffff1102307b210
[ 41.813798][ T516] RBP: ffffc90000d978b0 R08: ffff8881183da083 R09: 1ffff1102307b410
[ 41.833797][ T513] RBP: ffffc90000f6f8b0 R08: ffff8881189dc083 R09: 1ffff1102313b810
[ 41.833805][ T510] R10: dffffc0000000000 R11: ffffed102307b211 R12: dffffc0000000000
[ 41.833822][ T510] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810c8e5c00
[ 41.833834][ T510] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 41.841883][ T516] R10: dffffc0000000000 R11: ffffed102307b411 R12: dffffc0000000000
[ 41.870292][ T510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.882557][ T516] R13: dffffc0000000000 R14: 000000000dd9ca60 R15: ffff88810c8e7000
[ 41.888075][ T513] R10: dffffc0000000000 R11: ffffed102313b811 R12: dffffc0000000000
[ 41.898594][ T516] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 41.907744][ T513] R13: dffffc0000000000 R14: 000000000d482380 R15: ffff88812be08000
[ 41.913967][ T510] CR2: 0000200000000000 CR3: 000000012cec5000 CR4: 00000000003506a0
[ 41.923879][ T513] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 41.923900][ T513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.923911][ T513] CR2: 00007f950ad0eff8 CR3: 000000012b99d000 CR4: 00000000003506b0
[ 41.923927][ T513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.923936][ T513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.923948][ T513] Call Trace:
[ 41.923952][ T513]
[ 41.923959][ T513] pppol2tp_release+0x150/0x2b0
[ 41.923982][ T513] sock_close+0xb8/0x200
[ 41.923997][ T513] ? sock_mmap+0xa0/0xa0
[ 41.924011][ T513] __fput+0x22b/0x900
[ 41.924030][ T513] ____fput+0x15/0x20
[ 41.924043][ T513] task_work_run+0x127/0x190
[ 41.941161][ T510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.962184][ T513] do_exit+0xb70/0x29a0
[ 41.975480][ T510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.979487][ T516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.985914][ T510] Call Trace:
[ 41.989425][ T516] CR2: 00007f075299bff8 CR3: 000000010dc81000 CR4: 00000000003506a0
[ 41.992189][ T510]
[ 41.997649][ T516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.004996][ T510] pppol2tp_release+0x150/0x2b0
[ 42.008879][ T513] ? _raw_spin_lock_bh+0x94/0xf0
[ 42.016905][ T510] sock_close+0xb8/0x200
[ 42.023569][ T516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.027076][ T510] ? sock_mmap+0xa0/0xa0
[ 42.043852][ T513] ? put_task_struct+0x90/0x90
[ 42.056115][ T510] __fput+0x22b/0x900
[ 42.060123][ T516] Call Trace:
[ 42.076810][ T510] ____fput+0x15/0x20
[ 42.094015][ T513] ? __kasan_check_write+0x14/0x20
[ 42.099189][ T510] task_work_run+0x127/0x190
[ 42.099309][ T516]
[ 42.104155][ T510] do_exit+0xb70/0x29a0
[ 42.106846][ T516] pppol2tp_release+0x150/0x2b0
[ 42.116402][ T513] ? l2tp_session_put+0xa0/0x1a0
[ 42.121361][ T513] ? __kasan_check_write+0x14/0x20
[ 42.121626][ T510] ? _raw_spin_lock_bh+0x94/0xf0
[ 42.131955][ T510] ? put_task_struct+0x90/0x90
[ 42.133810][ T516] sock_close+0xb8/0x200
[ 42.141069][ T516] ? sock_mmap+0xa0/0xa0
[ 42.141984][ T510] ? __kasan_check_write+0x14/0x20
[ 42.145729][ T513] ? _raw_spin_lock_irq+0x95/0xf0
[ 42.161327][ T510] ? l2tp_session_put+0xa0/0x1a0
[ 42.163812][ T516] __fput+0x22b/0x900
[ 42.170536][ T516] ____fput+0x15/0x20
[ 42.171416][ T510] ? __kasan_check_write+0x14/0x20
[ 42.174736][ T513] do_group_exit+0x149/0x310
[ 42.185614][ T528] ------------[ cut here ]------------
[ 42.191558][ T510] ? _raw_spin_lock_irq+0x95/0xf0
[ 42.193825][ T516] task_work_run+0x127/0x190
[ 42.201279][ T516] do_exit+0xb70/0x29a0
[ 42.201668][ T510] do_group_exit+0x149/0x310
[ 42.207491][ T513] ? __kasan_check_write+0x14/0x20
[ 42.210307][ T516] ? _raw_spin_lock_bh+0x94/0xf0
[ 42.221604][ T528] WARNING: CPU: 1 PID: 528 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 42.221737][ T527] ------------[ cut here ]------------
[ 42.232139][ T516] ? put_task_struct+0x90/0x90
[ 42.237447][ T513] ? recalc_sigpending+0x1ac/0x230
[ 42.242803][ T510] ? __kasan_check_write+0x14/0x20
[ 42.248865][ T513] get_signal+0x64f/0x1430
[ 42.253267][ T510] ? recalc_sigpending+0x1ac/0x230
[ 42.262650][ T516] ? __kasan_check_write+0x14/0x20
[ 42.264818][ T513] arch_do_signal_or_restart+0xe2/0x1100
[ 42.273737][ T510] get_signal+0x64f/0x1430
[ 42.278526][ T510] arch_do_signal_or_restart+0xe2/0x1100
[ 42.283842][ T513] ? selinux_file_ioctl+0x3ad/0x4c0
[ 42.289543][ T513] ? get_sigframe_size+0x10/0x10
[ 42.293803][ T516] ? l2tp_session_put+0xa0/0x1a0
[ 42.294666][ T513] ? __se_sys_futex+0x135/0x330
[ 42.299619][ T516] ? __kasan_check_write+0x14/0x20
[ 42.304919][ T527] WARNING: CPU: 0 PID: 527 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 42.314577][ T528] Modules linked in:
[ 42.324963][ T510] ? selinux_file_ioctl+0x3ad/0x4c0
[ 42.333198][ T513] exit_to_user_mode_loop+0xa7/0xe0
[ 42.339014][ T528]
[ 42.348824][ T516] ? _raw_spin_lock_irq+0x95/0xf0
[ 42.353851][ T513] exit_to_user_mode_prepare+0x87/0xd0
[ 42.353877][ T513] syscall_exit_to_user_mode+0x1a/0x30
[ 42.353893][ T513] do_syscall_64+0x58/0xa0
[ 42.353910][ T513] ? clear_bhb_loop+0x50/0xa0
[ 42.361169][ T510] ? get_sigframe_size+0x10/0x10
[ 42.369055][ T527] Modules linked in:
[ 42.370916][ T516] do_group_exit+0x149/0x310
[ 42.375675][ T513] ? clear_bhb_loop+0x50/0xa0
[ 42.381000][ T528] CPU: 1 PID: 528 Comm: syz.6.60 Tainted: G B W syzkaller #0
[ 42.385021][ T527]
[ 42.389519][ T510] ? __se_sys_futex+0x135/0x330
[ 42.394540][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 42.403047][ T516] ? __kasan_check_write+0x14/0x20
[ 42.405597][ T513] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 42.411574][ T516] ? recalc_sigpending+0x1ac/0x230
[ 42.420441][ T527] CPU: 0 PID: 527 Comm: syz.0.61 Tainted: G B W syzkaller #0
[ 42.425820][ T510] exit_to_user_mode_loop+0xa7/0xe0
[ 42.431535][ T528] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 42.436788][ T510] exit_to_user_mode_prepare+0x87/0xd0
[ 42.445346][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 42.451214][ T516] get_signal+0x64f/0x1430
[ 42.457630][ T513] RIP: 0033:0x7f7fe1c69e59
[ 42.463226][ T510] syscall_exit_to_user_mode+0x1a/0x30
[ 42.473708][ T528] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 42.478388][ T516] arch_do_signal_or_restart+0xe2/0x1100
[ 42.482645][ T527] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 42.488270][ T510] do_syscall_64+0x58/0xa0
[ 42.507872][ T513] Code: Unable to access opcode bytes at RIP 0x7f7fe1c69e2f.
[ 42.513730][ T516] ? selinux_file_ioctl+0x3ad/0x4c0
[ 42.520034][ T528] RSP: 0018:ffffc9000110f890 EFLAGS: 00010293
[ 42.524469][ T516] ? get_sigframe_size+0x10/0x10
[ 42.532248][ T513] RSP: 002b:00007f7fe1acb0e8 EFLAGS: 00000246
[ 42.538023][ T510] ? clear_bhb_loop+0x50/0xa0
[ 42.543878][ T528]
[ 42.549024][ T510] ? clear_bhb_loop+0x50/0xa0
[ 42.555022][ T527] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 42.560084][ T516] ? __se_sys_futex+0x135/0x330
[ 42.562141][ T527] RSP: 0018:ffffc9000125f890 EFLAGS: 00010293
[ 42.566984][ T516] exit_to_user_mode_loop+0xa7/0xe0
[ 42.586721][ T513] ORIG_RAX: 00000000000000ca
[ 42.591740][ T510] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 42.597747][ T528] RAX: ffffffff845dbbf7 RBX: ffff888118cfc000 RCX: ffff8881189e62c0
[ 42.603472][ T510] RIP: 0033:0x7fd10961ae59
[ 42.607775][ T528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 42.614985][ T516] exit_to_user_mode_prepare+0x87/0xd0
[ 42.622810][ T513] RAX: 0000000000000001 RBX: 00007f7fe1ef1fa8 RCX: 00007f7fe1c69e59
[ 42.628388][ T510] Code: Unable to access opcode bytes at RIP 0x7fd10961ae2f.
[ 42.636237][ T527]
[ 42.642010][ T510] RSP: 002b:00007fd10947c0e8 EFLAGS: 00000246
[ 42.649953][ T528] RBP: ffffc9000110f8b0 R08: ffff888118cfc083 R09: 1ffff1102319f810
[ 42.649970][ T528] R10: dffffc0000000000 R11: ffffed102319f811 R12: dffffc0000000000
[ 42.649982][ T528] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881176d4800
[ 42.649992][ T528] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 42.650006][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.650016][ T528] CR2: 00007f950ad0eff8 CR3: 000000012b99d000 CR4: 00000000003506b0
[ 42.650030][ T528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.650039][ T528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.658180][ T516] syscall_exit_to_user_mode+0x1a/0x30
[ 42.659917][ T513] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7fe1ef1fac
[ 42.666140][ T516] do_syscall_64+0x58/0xa0
[ 42.674171][ T527] RAX: ffffffff845dbbf7 RBX: ffff8881189df000 RCX: ffff888118d08000
[ 42.674194][ T527] RDX: 0000000000000000 RSI: 000000000d482d80 RDI: 000000000c04eb7d
[ 42.674204][ T527] RBP: ffffc9000125f8b0 R08: ffff8881189df083 R09: 1ffff1102313be10
[ 42.682575][ T510] ORIG_RAX: 00000000000000ca
[ 42.690228][ T528] Call Trace:
[ 42.699483][ T516] ? clear_bhb_loop+0x50/0xa0
[ 42.705852][ T513] RBP: 00007f7fe1ef1fa0 R08: 0013f90a76236268 R09: 0000000000000000
[ 42.714329][ T510] RAX: 0000000000000001 RBX: 00007fd1098a2fa8 RCX: 00007fd10961ae59
[ 42.721985][ T527] R10: dffffc0000000000 R11: ffffed102313be11 R12: dffffc0000000000
[ 42.730250][ T516] ? clear_bhb_loop+0x50/0xa0
[ 42.735513][ T528]
[ 42.743833][ T510] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd1098a2fac
[ 42.747966][ T513] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 42.756487][ T516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 42.764251][ T528] pppol2tp_release+0x150/0x2b0
[ 42.772445][ T510] RBP: 00007fd1098a2fa0 R08: 0010658374cecfd8 R09: 0000000000000000
[ 42.776910][ T527] R13: dffffc0000000000 R14: 000000000d482d80 R15: ffff88812cba7c00
[ 42.780345][ T510] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 42.785554][ T527] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 42.785571][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.793882][ T516] RIP: 0033:0x7f5ae194de59
[ 42.801848][ T513] R13: 00007f7fe1ef2038 R14: 00007ffccc8ada10 R15: 00007ffccc8adaf8
[ 42.810688][ T510] R13: 00007fd1098a3038 R14: 00007ffd3a6ddcb0 R15: 00007ffd3a6ddd98
[ 42.815280][ T528] sock_close+0xb8/0x200
[ 42.818639][ T510]
[ 42.826888][ T528] ? sock_mmap+0xa0/0xa0
[ 42.835840][ T516] Code: Unable to access opcode bytes at RIP 0x7f5ae194de2f.
[ 42.841893][ T513]
[ 42.847149][ T510] ---[ end trace 9fea2f7e510b0288 ]---
[ 42.863018][ T527] CR2: 00007f950ad0eff8 CR3: 000000012b99d000 CR4: 00000000003506b0
[ 42.871416][ T516] RSP: 002b:00007f5ae17af0e8 EFLAGS: 00000246
[ 42.886783][ T528] __fput+0x22b/0x900
[ 42.896882][ T516] ORIG_RAX: 00000000000000ca
[ 42.909430][ T513] ---[ end trace 9fea2f7e510b0289 ]---
[ 42.931803][ T516] RAX: 0000000000000001 RBX: 00007f5ae1bd5fa8 RCX: 00007f5ae194de59
[ 42.934846][ T527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.953231][ T516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ae1bd5fac
[ 42.955511][ T527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.960735][ T528] ____fput+0x15/0x20
[ 42.966497][ T527] Call Trace:
[ 42.966513][ T527]
[ 42.966520][ T527] pppol2tp_release+0x150/0x2b0
[ 42.966549][ T527] sock_close+0xb8/0x200
[ 42.966566][ T527] ? sock_mmap+0xa0/0xa0
[ 42.977159][ T516] RBP: 00007f5ae1bd5fa0 R08: 001a8781f893c470 R09: 0000000000000000
[ 43.003806][ T527] __fput+0x22b/0x900
[ 43.011127][ T528] task_work_run+0x127/0x190
[ 43.022420][ T527] ____fput+0x15/0x20
[ 43.025862][ T528] do_exit+0xb70/0x29a0
[ 43.030135][ T527] task_work_run+0x127/0x190
[ 43.039599][ T516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 43.039621][ T516] R13: 00007f5ae1bd6038 R14: 00007ffecd468720 R15: 00007ffecd468808
[ 43.039636][ T516]
[ 43.048638][ T527] do_exit+0xb70/0x29a0
[ 43.050175][ T528] ? _raw_spin_lock_bh+0x94/0xf0
[ 43.053995][ T527] ? _raw_spin_lock_bh+0x94/0xf0
[ 43.058187][ T528] ? put_task_struct+0x90/0x90
[ 43.078807][ T527] ? put_task_struct+0x90/0x90
[ 43.091803][ T516] ---[ end trace 9fea2f7e510b028a ]---
[ 43.097459][ T527] ? __kasan_check_write+0x14/0x20
[ 43.140360][ T527] ? l2tp_session_put+0xa0/0x1a0
[ 43.152698][ T528] ? __kasan_check_write+0x14/0x20
[ 43.157462][ T527] ? __kasan_check_write+0x14/0x20
[ 43.163835][ T528] ? l2tp_session_put+0xa0/0x1a0
[ 43.167537][ T527] ? _raw_spin_lock_irq+0x95/0xf0
[ 43.183811][ T528] ? __kasan_check_write+0x14/0x20
[ 43.183817][ T527] do_group_exit+0x149/0x310
[ 43.183844][ T528] ? _raw_spin_lock_irq+0x95/0xf0
[ 43.194198][ T527] ? __kasan_check_write+0x14/0x20
[ 43.213801][ T527] ? recalc_sigpending+0x1ac/0x230
[ 43.218815][ T528] do_group_exit+0x149/0x310
[ 43.223674][ T528] ? __kasan_check_write+0x14/0x20
[ 43.224021][ T527] get_signal+0x64f/0x1430
[ 43.238985][ T528] ? recalc_sigpending+0x1ac/0x230
[ 43.243498][ T527] arch_do_signal_or_restart+0xe2/0x1100
[ 43.250179][ T527] ? selinux_file_ioctl+0x3ad/0x4c0
[ 43.255465][ T528] get_signal+0x64f/0x1430
[ 43.259909][ T528] arch_do_signal_or_restart+0xe2/0x1100
[ 43.260474][ T527] ? get_sigframe_size+0x10/0x10
[ 43.272455][ T539] ------------[ cut here ]------------
[ 43.273880][ T528] ? selinux_file_ioctl+0x3ad/0x4c0
[ 43.280916][ T527] ? __se_sys_futex+0x135/0x330
[ 43.290999][ T539] WARNING: CPU: 0 PID: 539 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 43.301156][ T528] ? get_sigframe_size+0x10/0x10
[ 43.301386][ T527] exit_to_user_mode_loop+0xa7/0xe0
[ 43.317228][ T527] exit_to_user_mode_prepare+0x87/0xd0
[ 43.320617][ T528] ? __se_sys_futex+0x135/0x330
[ 43.327878][ T527] syscall_exit_to_user_mode+0x1a/0x30
[ 43.333656][ T539] Modules linked in:
[ 43.338006][ T527] do_syscall_64+0x58/0xa0
[ 43.342442][ T527] ? clear_bhb_loop+0x50/0xa0
[ 43.343839][ T528] exit_to_user_mode_loop+0xa7/0xe0
[ 43.352350][ T528] exit_to_user_mode_prepare+0x87/0xd0
[ 43.353794][ T539] CPU: 0 PID: 539 Comm: syz.4.65 Tainted: G B W syzkaller #0
[ 43.367179][ T527] ? clear_bhb_loop+0x50/0xa0
[ 43.372320][ T527] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 43.378747][ T527] RIP: 0033:0x7f950aecee59
[ 43.383183][ T527] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 43.387707][ T528] syscall_exit_to_user_mode+0x1a/0x30
[ 43.397781][ T528] do_syscall_64+0x58/0xa0
[ 43.402273][ T528] ? clear_bhb_loop+0x50/0xa0
[ 43.408363][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 43.417933][ T528] ? clear_bhb_loop+0x50/0xa0
[ 43.423827][ T527] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 43.427347][ T528] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 43.433964][ T527] RAX: fffffffffffffe00 RBX: 00007f950b156fa8 RCX: 00007f950aecee59
[ 43.448619][ T528] RIP: 0033:0x7f0752b5be59
[ 43.453090][ T528] Code: Unable to access opcode bytes at RIP 0x7f0752b5be2f.
[ 43.453839][ T539] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 43.473777][ T527] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f950b156fa8
[ 43.478950][ T528] RSP: 002b:00007f07529bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 43.481855][ T539] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 43.500658][ T528] RAX: fffffffffffffe00 RBX: 00007f0752de3fa8 RCX: 00007f0752b5be59
[ 43.518165][ T527] RBP: 00007f950b156fa0 R08: 0000000000000000 R09: 0000000000000000
[ 43.533786][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 43.538424][ T528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0752de3fa8
[ 43.551268][ T527] R13: 00007f950b157038 R14: 00007ffce7160d30 R15: 00007ffce7160e18
[ 43.559426][ T539] RSP: 0018:ffffc90000f7f890 EFLAGS: 00010293
[ 43.565557][ T539] RAX: ffffffff845dbbf7 RBX: ffff888118ee1000 RCX: ffff888118ee8000
[ 43.573815][ T528] RBP: 00007f0752de3fa0 R08: 0000000000000000 R09: 0000000000000000
[ 43.575925][ T527]
[ 43.592088][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 43.594057][ T539] RDX: 0000000000000000 RSI: 000000000d482aa0 RDI: 000000000c04eb7d
[ 43.608374][ T528] R13: 00007f0752de4038 R14: 00007ffd499360c0 R15: 00007ffd499361a8
[ 43.608460][ T527] ---[ end trace 9fea2f7e510b028b ]---
[ 43.623998][ T539] RBP: ffffc90000f7f8b0 R08: ffff888118ee1083 R09: 1ffff110231dc210
[ 43.626687][ T528]
[ 43.632120][ T539] R10: dffffc0000000000 R11: ffffed10231dc211 R12: dffffc0000000000
[ 43.632145][ T539] R13: dffffc0000000000 R14: 000000000d482aa0 R15: ffff88812e7b5800
[ 43.632155][ T539] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 43.653864][ T528] ---[ end trace 9fea2f7e510b028c ]---
[ 43.660917][ T539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.686373][ T549] ------------[ cut here ]------------
[ 43.703848][ T539] CR2: 00007f7fe1b2fda0 CR3: 000000012db02000 CR4: 00000000003506b0
[ 43.714339][ T549] WARNING: CPU: 1 PID: 549 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 43.723596][ T539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 43.743813][ T539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
2026/07/04 19:32:08 executed programs: 64
[ 43.751834][ T539] Call Trace:
[ 43.763873][ T539]
[ 43.766881][ T539] pppol2tp_release+0x150/0x2b0
[ 43.771750][ T539] sock_close+0xb8/0x200
[ 43.783503][ T549] Modules linked in:
[ 43.786699][ T539] ? sock_mmap+0xa0/0xa0
[ 43.791830][ T539] __fput+0x22b/0x900
[ 43.793606][ T549] CPU: 1 PID: 549 Comm: syz.2.68 Tainted: G B W syzkaller #0
[ 43.801965][ T539] ____fput+0x15/0x20
[ 43.810297][ T552] ------------[ cut here ]------------
[ 43.815867][ T539] task_work_run+0x127/0x190
[ 43.824012][ T539] do_exit+0xb70/0x29a0
[ 43.830670][ T539] ? _raw_spin_lock_bh+0x94/0xf0
[ 43.835989][ T552] WARNING: CPU: 0 PID: 552 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 43.846718][ T539] ? put_task_struct+0x90/0x90
[ 43.851533][ T539] ? __kasan_check_write+0x14/0x20
[ 43.862037][ T539] ? l2tp_session_put+0xa0/0x1a0
[ 43.863904][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 43.873814][ T539] ? __kasan_check_write+0x14/0x20
[ 43.882538][ T552] Modules linked in:
[ 43.892636][ T539] ? _raw_spin_lock_irq+0x95/0xf0
[ 43.898295][ T549] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 43.898472][ T552] CPU: 0 PID: 552 Comm: syz.0.69 Tainted: G B W syzkaller #0
[ 43.914211][ T549] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 43.923486][ T539] do_group_exit+0x149/0x310
[ 43.937643][ T549] RSP: 0018:ffffc900013b7890 EFLAGS: 00010293
[ 43.943793][ T539] ? __kasan_check_write+0x14/0x20
[ 43.950046][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 43.959078][ T539] ? recalc_sigpending+0x1ac/0x230
[ 43.961125][ T549] RAX: ffffffff845dbbf7 RBX: ffff88811993c000 RCX: ffff8881199c13c0
[ 43.973595][ T552] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 43.980140][ T549] RDX: 0000000000000000 RSI: 00000000167de460 RDI: 000000000c04eb7d
[ 43.988354][ T539] get_signal+0x64f/0x1430
[ 43.988438][ T552] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 43.993344][ T539] arch_do_signal_or_restart+0xe2/0x1100
[ 43.993365][ T539] ? selinux_file_ioctl+0x3ad/0x4c0
[ 44.014501][ T549] RBP: ffffc900013b78b0 R08: ffff88811993c083 R09: 1ffff11023327810
[ 44.032665][ T549] R10: dffffc0000000000 R11: ffffed1023327811 R12: dffffc0000000000
[ 44.048620][ T549] R13: dffffc0000000000 R14: 00000000167de460 R15: ffff888119028c00
[ 44.057163][ T552] RSP: 0018:ffffc900013f7890 EFLAGS: 00010293
[ 44.063432][ T539] ? get_sigframe_size+0x10/0x10
[ 44.063486][ T549] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 44.072856][ T539] ? __se_sys_futex+0x135/0x330
[ 44.077675][ T552] RAX: ffffffff845dbbf7 RBX: ffff8881192b3000 RCX: ffff888119900000
[ 44.091663][ T562] ------------[ cut here ]------------
[ 44.097264][ T539] exit_to_user_mode_loop+0xa7/0xe0
[ 44.100846][ T549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.102480][ T539] exit_to_user_mode_prepare+0x87/0xd0
[ 44.102501][ T539] syscall_exit_to_user_mode+0x1a/0x30
[ 44.109165][ T552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 44.114980][ T562] WARNING: CPU: 0 PID: 562 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 44.130189][ T549] CR2: 00007f7fe1b2fda0 CR3: 000000012b99d000 CR4: 00000000003506a0
[ 44.138510][ T539] do_syscall_64+0x58/0xa0
[ 44.146314][ T552] RBP: ffffc900013f78b0 R08: ffff8881192b3083 R09: 1ffff11023256610
[ 44.146332][ T552] R10: dffffc0000000000 R11: ffffed1023256611 R12: dffffc0000000000
[ 44.146345][ T552] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812ea6b000
[ 44.146357][ T552] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 44.171363][ T539] ? clear_bhb_loop+0x50/0xa0
[ 44.185817][ T562] Modules linked in:
[ 44.188471][ T539] ? clear_bhb_loop+0x50/0xa0
[ 44.192307][ T562] CPU: 1 PID: 562 Comm: syz.6.72 Tainted: G B W syzkaller #0
[ 44.197170][ T539] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 44.212044][ T539] RIP: 0033:0x7fd10961ae59
[ 44.213871][ T549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.216548][ T539] Code: Unable to access opcode bytes at RIP 0x7fd10961ae2f.
[ 44.232094][ T539] RSP: 002b:00007fd10947c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 44.233995][ T549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.240742][ T539] RAX: 0000000000000001 RBX: 00007fd1098a2fa8 RCX: 00007fd10961ae59
[ 44.249083][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 44.256925][ T539] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd1098a2fac
[ 44.256948][ T539] RBP: 00007fd1098a2fa0 R08: 000e0329a0442e38 R09: 0000000000000000
[ 44.274740][ T552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.277581][ T539] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 44.285715][ T549] Call Trace:
[ 44.293892][ T539] R13: 00007fd1098a3038 R14: 00007ffd3a6ddcb0 R15: 00007ffd3a6ddd98
[ 44.300691][ T552] CR2: 00007f7fe1b2fda0 CR3: 000000012ebda000 CR4: 00000000003506a0
[ 44.303279][ T539]
[ 44.311840][ T562] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 44.329915][ T549]
[ 44.332864][ T549] pppol2tp_release+0x150/0x2b0
[ 44.333786][ T539] ---[ end trace 9fea2f7e510b028d ]---
[ 44.338030][ T552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.349270][ T562] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 44.351907][ T549] sock_close+0xb8/0x200
[ 44.375506][ T552] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.383950][ T552] Call Trace:
[ 44.387320][ T552]
[ 44.389307][ T562] RSP: 0018:ffffc900012af890 EFLAGS: 00010293
[ 44.391839][ T552] pppol2tp_release+0x150/0x2b0
[ 44.411725][ T552] sock_close+0xb8/0x200
[ 44.416509][ T549] ? sock_mmap+0xa0/0xa0
[ 44.420767][ T549] __fput+0x22b/0x900
[ 44.421761][ T562] RAX: ffffffff845dbbf7 RBX: ffff8881192b7000 RCX: ffff888118e6cf00
[ 44.433979][ T552] ? sock_mmap+0xa0/0xa0
[ 44.438414][ T549] ____fput+0x15/0x20
[ 44.442448][ T549] task_work_run+0x127/0x190
[ 44.447462][ T552] __fput+0x22b/0x900
[ 44.451614][ T552] ____fput+0x15/0x20
[ 44.453441][ T562] RDX: 0000000000000000 RSI: 000000000cb34cc0 RDI: 000000000c04eb7d
[ 44.461775][ T552] task_work_run+0x127/0x190
[ 44.469034][ T549] do_exit+0xb70/0x29a0
[ 44.473814][ T552] do_exit+0xb70/0x29a0
[ 44.473923][ T562] RBP: ffffc900012af8b0 R08: ffff8881192b7083 R09: 1ffff11023256e10
[ 44.478462][ T552] ? _raw_spin_lock_bh+0x94/0xf0
[ 44.495283][ T549] ? put_task_struct+0x90/0x90
[ 44.500528][ T570] ------------[ cut here ]------------
[ 44.506360][ T562] R10: dffffc0000000000 R11: ffffed1023256e11 R12: dffffc0000000000
[ 44.506346][ T549] ? __kasan_check_write+0x14/0x20
[ 44.506380][ T549] ? _raw_spin_lock_irq+0x95/0xf0
[ 44.523825][ T562] R13: dffffc0000000000 R14: 000000000cb34cc0 R15: ffff888117759000
[ 44.533820][ T552] ? put_task_struct+0x90/0x90
[ 44.534645][ T570] WARNING: CPU: 0 PID: 570 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 44.540791][ T552] ? __kasan_check_write+0x14/0x20
[ 44.551549][ T562] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 44.566823][ T549] do_group_exit+0x149/0x310
[ 44.571784][ T549] ? __kasan_check_write+0x14/0x20
[ 44.573839][ T562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.582658][ T552] ? l2tp_session_put+0xa0/0x1a0
[ 44.589364][ T570] Modules linked in:
[ 44.593777][ T552] ? __kasan_check_write+0x14/0x20
[ 44.594098][ T570] CPU: 0 PID: 570 Comm: syz.5.75 Tainted: G B W syzkaller #0
[ 44.599679][ T552] ? _raw_spin_lock_irq+0x95/0xf0
[ 44.609281][ T562] CR2: 00007f7fe1aa9ff8 CR3: 000000012ebda000 CR4: 00000000003506b0
[ 44.614246][ T549] ? recalc_sigpending+0x1ac/0x230
[ 44.633048][ T562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.641477][ T562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.649764][ T570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 44.653806][ T552] do_group_exit+0x149/0x310
[ 44.660910][ T562] Call Trace:
[ 44.665353][ T549] get_signal+0x64f/0x1430
[ 44.669002][ T570] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 44.673134][ T549] arch_do_signal_or_restart+0xe2/0x1100
[ 44.673156][ T549] ? _raw_spin_unlock+0x4d/0x70
[ 44.679822][ T562]
[ 44.687467][ T552] ? __kasan_check_write+0x14/0x20
[ 44.698009][ T570] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 44.703828][ T552] ? recalc_sigpending+0x1ac/0x230
[ 44.718382][ T562] pppol2tp_release+0x150/0x2b0
[ 44.723189][ T549] ? finish_task_switch+0x16b/0x790
[ 44.728536][ T562] sock_close+0xb8/0x200
[ 44.738650][ T570] RSP: 0018:ffffc90000f7f890 EFLAGS: 00010293
[ 44.743923][ T549] ? switch_mm_irqs_off+0x730/0x960
[ 44.745231][ T562] ? sock_mmap+0xa0/0xa0
[ 44.754014][ T552] get_signal+0x64f/0x1430
[ 44.754974][ T570] RAX: ffffffff845dbbf7 RBX: ffff888119d66000 RCX: ffff8881192ae2c0
[ 44.759110][ T552] arch_do_signal_or_restart+0xe2/0x1100
[ 44.767815][ T562] __fput+0x22b/0x900
[ 44.777373][ T570] RDX: 0000000000000000 RSI: 000000000cb34740 RDI: 000000000c04eb7d
[ 44.783295][ T549] ? __schedule+0xbd7/0x14a0
[ 44.785698][ T570] RBP: ffffc90000f7f8b0 R08: ffff888119d66083 R09: 1ffff110233acc10
[ 44.790088][ T549] ? get_sigframe_size+0x10/0x10
[ 44.798270][ T562] ____fput+0x15/0x20
[ 44.807387][ T552] ? selinux_file_ioctl+0x3ad/0x4c0
[ 44.812748][ T552] ? get_sigframe_size+0x10/0x10
[ 44.817939][ T570] R10: dffffc0000000000 R11: ffffed10233acc11 R12: dffffc0000000000
[ 44.823262][ T549] ? __kasan_check_read+0x11/0x20
[ 44.828787][ T562] task_work_run+0x127/0x190
[ 44.841924][ T552] ? __se_sys_futex+0x135/0x330
[ 44.841940][ T549] exit_to_user_mode_loop+0xa7/0xe0
[ 44.847438][ T574] ------------[ cut here ]------------
[ 44.852525][ T570] R13: dffffc0000000000 R14: 000000000cb34740 R15: ffff8881191ccc00
[ 44.858284][ T549] exit_to_user_mode_prepare+0x87/0xd0
[ 44.866507][ T552] exit_to_user_mode_loop+0xa7/0xe0
[ 44.877961][ T562] do_exit+0xb70/0x29a0
[ 44.880863][ T549] syscall_exit_to_user_mode+0x1a/0x30
[ 44.882332][ T562] ? _raw_spin_lock_bh+0x94/0xf0
[ 44.888378][ T574] WARNING: CPU: 1 PID: 574 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 44.893266][ T552] exit_to_user_mode_prepare+0x87/0xd0
[ 44.903617][ T549] do_syscall_64+0x58/0xa0
[ 44.909840][ T570] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 44.923808][ T549] ? clear_bhb_loop+0x50/0xa0
[ 44.925098][ T562] ? put_task_struct+0x90/0x90
[ 44.929750][ T549] ? clear_bhb_loop+0x50/0xa0
[ 44.935086][ T552] syscall_exit_to_user_mode+0x1a/0x30
[ 44.945700][ T562] ? __kasan_check_write+0x14/0x20
[ 44.950458][ T549] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 44.952725][ T562] ? l2tp_session_put+0xa0/0x1a0
[ 44.966561][ T570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.966619][ T552] do_syscall_64+0x58/0xa0
[ 44.975084][ T570] CR2: 00007fd1098a4dac CR3: 000000012db02000 CR4: 00000000003506b0
[ 44.975110][ T570] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.989931][ T574] Modules linked in:
[ 44.999593][ T549] RIP: 0033:0x7f5ae194de59
[ 44.999607][ T562] ? __kasan_check_write+0x14/0x20
[ 45.004930][ T552] ? clear_bhb_loop+0x50/0xa0
[ 45.009276][ T562] ? _raw_spin_lock_irq+0x95/0xf0
[ 45.016983][ T574]
[ 45.023306][ T570] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 45.029058][ T549] Code: Unable to access opcode bytes at RIP 0x7f5ae194de2f.
[ 45.032286][ T562] do_group_exit+0x149/0x310
[ 45.041693][ T574] CPU: 1 PID: 574 Comm: syz.4.76 Tainted: G B W syzkaller #0
[ 45.050533][ T570] Call Trace:
[ 45.055489][ T552] ? clear_bhb_loop+0x50/0xa0
[ 45.064743][ T562] ? __kasan_check_write+0x14/0x20
[ 45.067901][ T549] RSP: 002b:00007f5ae17af0e8 EFLAGS: 00000246
[ 45.072670][ T562] ? recalc_sigpending+0x1ac/0x230
[ 45.080566][ T574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 45.089075][ T570]
[ 45.094392][ T552] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 45.105520][ T570] pppol2tp_release+0x150/0x2b0
[ 45.108413][ T549] ORIG_RAX: 00000000000000ca
[ 45.114787][ T570] sock_close+0xb8/0x200
[ 45.119648][ T552] RIP: 0033:0x7f950aecee59
[ 45.125734][ T562] get_signal+0x64f/0x1430
[ 45.129838][ T549] RAX: 0000000000000001 RBX: 00007f5ae1bd5fa8 RCX: 00007f5ae194de59
[ 45.134442][ T570] ? sock_mmap+0xa0/0xa0
[ 45.138724][ T574] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 45.147531][ T562] arch_do_signal_or_restart+0xe2/0x1100
[ 45.151481][ T552] Code: Unable to access opcode bytes at RIP 0x7f950aecee2f.
[ 45.158174][ T562] ? selinux_file_ioctl+0x3ad/0x4c0
[ 45.163621][ T549] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ae1bd5fac
[ 45.172671][ T570] __fput+0x22b/0x900
[ 45.179135][ T574] Code: 5d c3 e8 1c f1 0b fd be 02 00 00 00 eb 0a e8 10 f1 0b fd be 01 00 00 00 4c 89 f7 e8 a3 60 f2 fd e9 0f ff ff ff e8 f9 f0 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 e8 f0 0b fd 4c 89 f7 be 03
[ 45.187794][ T562] ? get_sigframe_size+0x10/0x10
[ 45.191513][ T552] RSP: 002b:00007f950ad300e8 EFLAGS: 00000246
[ 45.212605][ T570] ____fput+0x15/0x20
[ 45.217306][ T574] RSP: 0018:ffffc900014c7890 EFLAGS: 00010293
[ 45.224104][ T570] task_work_run+0x127/0x190
[ 45.227904][ T549] RBP: 00007f5ae1bd5fa0 R08: 00267344295b6d10 R09: 0000000000000000
[ 45.234572][ T570] do_exit+0xb70/0x29a0
[ 45.240751][ T574]
[ 45.249577][ T562] ? __se_sys_futex+0x135/0x330
[ 45.253625][ T549] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 45.256389][ T562] exit_to_user_mode_loop+0xa7/0xe0
[ 45.260834][ T549] R13: 00007f5ae1bd6038 R14: 00007ffecd468720 R15: 00007ffecd468808
[ 45.260859][ T549]
[ 45.260865][ T549] ---[ end trace 9fea2f7e510b028e ]---
[ 45.261077][ T552] ORIG_RAX: 00000000000000ca
[ 45.277635][ T570] ? _raw_spin_lock_bh+0x94/0xf0
[ 45.286378][ T574] RAX: ffffffff845dbbf7 RBX: ffff888119cde000 RCX: ffff888119eae2c0
[ 45.288459][ T562] exit_to_user_mode_prepare+0x87/0xd0
[ 45.293520][ T574] RDX: 0000000000000000 RSI: 0000000023067c40 RDI: 000000000c04eb7d
[ 45.298764][ T570] ? put_task_struct+0x90/0x90
[ 45.323806][ T574] RBP: ffffc900014c78b0 R08: ffff888119cde083 R09: 1ffff1102339bc10
[ 45.329133][ T562] syscall_exit_to_user_mode+0x1a/0x30
[ 45.332926][ T574] R10: dffffc0000000000 R11: ffffed102339bc11 R12: dffffc0000000000
[ 45.341737][ T562] do_syscall_64+0x58/0xa0