Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts.
2026/06/20 14:16:43 parsed 1 programs
2026/06/20 14:16:43 serving rpc on tcp://36759
[ 20.188121][ T28] audit: type=1400 audit(1781965003.086:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 20.209332][ T28] audit: type=1400 audit(1781965003.086:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 20.912796][ T28] audit: type=1400 audit(1781965003.816:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 20.913856][ T301] cgroup: Unknown subsys name 'net'
[ 20.935454][ T28] audit: type=1400 audit(1781965003.816:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 20.962730][ T28] audit: type=1400 audit(1781965003.846:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 20.962875][ T301] cgroup: Unknown subsys name 'devices'
[ 21.102923][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 21.108514][ T301] cgroup: Unknown subsys name 'rlimit'
[ 21.216134][ T28] audit: type=1400 audit(1781965004.116:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 21.239307][ T28] audit: type=1400 audit(1781965004.116:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 21.259727][ T28] audit: type=1400 audit(1781965004.116:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 21.268112][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 21.280022][ T28] audit: type=1400 audit(1781965004.116:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 21.308848][ T28] audit: type=1400 audit(1781965004.116:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 21.336648][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 22.019124][ T314] request_module fs-gadgetfs succeeded, but still no fs?
[ 22.296076][ T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.303221][ T331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.310642][ T331] device bridge_slave_0 entered promiscuous mode
[ 22.318500][ T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.325565][ T331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.332987][ T331] device bridge_slave_1 entered promiscuous mode
[ 22.578393][ T331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.585568][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.592869][ T331] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.599884][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.668750][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 22.690424][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 22.701259][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 22.714471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 22.742399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 22.750625][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 22.757690][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 22.765126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 22.774296][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 22.781366][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 22.788783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 22.797551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 22.812318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 22.823558][ T331] device veth0_vlan entered promiscuous mode
[ 22.831450][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 22.839432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 22.846921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 22.856664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 22.866462][ T331] device veth1_macvtap entered promiscuous mode
[ 22.876048][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
2026/06/20 14:16:45 executed programs: 0
[ 22.885626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 22.946425][ T331] syz-executor (331) used greatest stack depth: 21536 bytes left
[ 23.027745][ T375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.035190][ T375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.042655][ T375] device bridge_slave_0 entered promiscuous mode
[ 23.061417][ T375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.068447][ T375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.075976][ T375] device bridge_slave_1 entered promiscuous mode
[ 23.160377][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.167521][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.175035][ T377] device bridge_slave_0 entered promiscuous mode
[ 23.181943][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.188962][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.196373][ T377] device bridge_slave_1 entered promiscuous mode
[ 23.274868][ T381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.281974][ T381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.289410][ T381] device bridge_slave_0 entered promiscuous mode
[ 23.312329][ T382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.319376][ T382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.327061][ T382] device bridge_slave_0 entered promiscuous mode
[ 23.333923][ T381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.340947][ T381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.348360][ T381] device bridge_slave_1 entered promiscuous mode
[ 23.379369][ T382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.386493][ T382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.393898][ T382] device bridge_slave_1 entered promiscuous mode
[ 23.406513][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.413617][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.420899][ T380] device bridge_slave_0 entered promiscuous mode
[ 23.455408][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.462505][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.469819][ T380] device bridge_slave_1 entered promiscuous mode
[ 23.607568][ T381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.614639][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.621919][ T381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.628937][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.647579][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.654657][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.662012][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.669022][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.677164][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.684713][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.691945][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.699194][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.706938][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 23.714419][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.722207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 23.729653][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.759811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 23.768318][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.776581][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.783621][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.791401][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 23.799733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 23.808062][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.815209][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.822579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 23.830810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.839029][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.846048][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.854054][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 23.861735][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 23.869266][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 23.877579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 23.885810][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.892831][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.921698][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 23.929640][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 23.946221][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 23.954959][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 23.967066][ T377] device veth0_vlan entered promiscuous mode
[ 23.988276][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 23.996321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 24.003937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 24.012306][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 24.019683][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 24.028040][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.035115][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.042668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 24.050772][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.057800][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.065169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 24.073350][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.080361][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.087840][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 24.100498][ T377] device veth1_macvtap entered promiscuous mode
[ 24.117009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 24.125352][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 24.133535][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.140560][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.148030][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 24.156252][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 24.164237][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 24.172335][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 24.201146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 24.209802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 24.217998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 24.227066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 24.235582][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.242609][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.249978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 24.258098][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.265118][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.272557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 24.280441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 24.297493][ T380] device veth0_vlan entered promiscuous mode
[ 24.312327][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 24.320666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.329076][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 24.337307][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 24.345791][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.354215][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.362745][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.370832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.378959][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 24.387070][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 24.395115][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 24.403252][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 24.411300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 24.419576][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.427916][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.435786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.443820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 24.451265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 24.458622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 24.466153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 24.482183][ T381] device veth0_vlan entered promiscuous mode
[ 24.496686][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 24.505166][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.513517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 24.522847][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 24.536943][ T380] device veth1_macvtap entered promiscuous mode
[ 24.546043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 24.554312][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 24.562477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 24.570004][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 24.578373][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 24.591765][ T382] device veth0_vlan entered promiscuous mode
[ 24.603956][ T381] device veth1_macvtap entered promiscuous mode
[ 24.611938][ T375] device veth0_vlan entered promiscuous mode
[ 24.622933][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 24.630584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.639703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.648573][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 24.656800][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 24.665140][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 24.673574][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 24.682294][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 24.690559][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 24.699151][ T399] ==================================================================
[ 24.707214][ T399] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 24.715303][ T399] Read of size 4 at addr ffff888130196400 by task syz.6.18/399
[ 24.722841][ T399]
[ 24.725166][ T399] CPU: 0 PID: 399 Comm: syz.6.18 Not tainted syzkaller #0
[ 24.732249][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 24.742294][ T399] Call Trace:
[ 24.745556][ T399]
[ 24.748463][ T399] __dump_stack+0x21/0x24
[ 24.752779][ T399] dump_stack_lvl+0x110/0x170
[ 24.757439][ T399] ? __cfi_dump_stack_lvl+0x8/0x8
[ 24.762445][ T399] ? _raw_spin_lock_bh+0x94/0xf0
[ 24.767374][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 24.773076][ T399] print_address_description+0x71/0x200
[ 24.778610][ T399] print_report+0x4a/0x60
[ 24.782919][ T399] kasan_report+0x122/0x150
[ 24.787408][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 24.793106][ T399] __asan_report_load4_noabort+0x14/0x20
[ 24.798717][ T399] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 24.804240][ T399] pppol2tp_release+0x150/0x2b0
[ 24.809067][ T399] sock_close+0xc9/0x220
[ 24.813293][ T399] ? __cfi_sock_close+0x10/0x10
[ 24.818126][ T399] __fput+0x1fd/0x8f0
[ 24.822091][ T399] ____fput+0x15/0x20
[ 24.826049][ T399] task_work_run+0x1e1/0x250
[ 24.830617][ T399] ? __cfi_task_work_run+0x10/0x10
[ 24.835712][ T399] ? free_nsproxy+0x21f/0x270
[ 24.840371][ T399] do_exit+0xaf2/0x2850
[ 24.844511][ T399] ? _raw_spin_lock+0x94/0xf0
[ 24.849168][ T399] ? __cfi_do_exit+0x10/0x10
[ 24.853738][ T399] ? plist_del+0x3ec/0x400
[ 24.858133][ T399] ? _raw_spin_unlock+0x4c/0x70
[ 24.862974][ T399] ? __kasan_check_write+0x14/0x20
[ 24.868072][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 24.873099][ T399] do_group_exit+0x21b/0x2e0
[ 24.877678][ T399] ? __kasan_check_write+0x14/0x20
[ 24.882782][ T399] ? recalc_sigpending+0x168/0x1c0
[ 24.887874][ T399] get_signal+0x1382/0x14f0
[ 24.892361][ T399] arch_do_signal_or_restart+0xd1/0x11c0
[ 24.897973][ T399] ? do_futex+0x2e2/0x430
[ 24.902297][ T399] ? __cfi_do_futex+0x10/0x10
[ 24.906952][ T399] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 24.913085][ T399] ? __se_sys_futex+0x136/0x310
[ 24.917927][ T399] exit_to_user_mode_loop+0x7a/0xb0
[ 24.923108][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 24.928547][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 24.933982][ T399] do_syscall_64+0x58/0xa0
[ 24.938381][ T399] ? clear_bhb_loop+0x30/0x80
[ 24.943037][ T399] ? clear_bhb_loop+0x30/0x80
[ 24.947710][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 24.953581][ T399] RIP: 0033:0x7f494f39ce59
[ 24.957992][ T399] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 24.964984][ T399] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 24.973387][ T399] RAX: fffffffffffffe00 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 24.981339][ T399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f494f615fa8
[ 24.989295][ T399] RBP: 00007f494f615fa0 R08: 0000000000000000 R09: 0000000000000000
[ 24.997264][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 25.005216][ T399] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 25.013167][ T399]
[ 25.016163][ T399]
[ 25.018461][ T399] Allocated by task 399:
[ 25.022682][ T399] kasan_set_track+0x4b/0x70
[ 25.027252][ T399] kasan_save_alloc_info+0x1f/0x30
[ 25.032335][ T399] __kasan_kmalloc+0x95/0xb0
[ 25.036904][ T399] __kmalloc+0xb4/0x1e0
[ 25.041047][ T399] l2tp_session_create+0x38/0xbd0
[ 25.046060][ T399] pppol2tp_connect+0xbf5/0x1640
[ 25.050979][ T399] __sys_connect+0x3da/0x460
[ 25.055554][ T399] __x64_sys_connect+0x7a/0x90
[ 25.060296][ T399] x64_sys_call+0x88d/0x9a0
[ 25.064778][ T399] do_syscall_64+0x4c/0xa0
[ 25.069176][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 25.075046][ T399]
[ 25.077350][ T399] Freed by task 366:
[ 25.081221][ T399] kasan_set_track+0x4b/0x70
[ 25.085803][ T399] kasan_save_free_info+0x2b/0x40
[ 25.090801][ T399] ____kasan_slab_free+0x132/0x180
[ 25.095894][ T399] __kasan_slab_free+0x11/0x20
[ 25.100635][ T399] slab_free_freelist_hook+0xc2/0x190
[ 25.105985][ T399] __kmem_cache_free+0xb7/0x1b0
[ 25.110814][ T399] kfree+0x6f/0xf0
[ 25.114508][ T399] l2tp_session_put+0xaf/0x1a0
[ 25.119249][ T399] l2tp_session_delete+0x3df/0x4d0
[ 25.124339][ T399] l2tp_tunnel_del_work+0x199/0x410
[ 25.129513][ T399] process_one_work+0x717/0xc30
[ 25.134336][ T399] worker_thread+0xa4d/0x11d0
[ 25.138986][ T399] kthread+0x281/0x320
[ 25.143032][ T399] ret_from_fork+0x1f/0x30
[ 25.147423][ T399]
[ 25.149721][ T399] The buggy address belongs to the object at ffff888130196400
[ 25.149721][ T399] which belongs to the cache kmalloc-512 of size 512
[ 25.163746][ T399] The buggy address is located 0 bytes inside of
[ 25.163746][ T399] 512-byte region [ffff888130196400, ffff888130196600)
[ 25.176824][ T399]
[ 25.179127][ T399] The buggy address belongs to the physical page:
[ 25.185520][ T399] page:ffffea0004c06500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130194
[ 25.195736][ T399] head:ffffea0004c06500 order:2 compound_mapcount:0 compound_pincount:0
[ 25.204052][ T399] flags: 0x4000000000010200(slab|head|zone=1)
[ 25.210108][ T399] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 25.218669][ T399] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 25.227225][ T399] page dumped because: kasan: bad access detected
[ 25.233611][ T399] page_owner tracks the page as allocated
[ 25.239298][ T399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 41, tgid 41 (kworker/u4:2), ts 24630331796, free_ts 24621796031
[ 25.261668][ T399] post_alloc_hook+0x1f5/0x210
[ 25.266419][ T399] prep_new_page+0x1c/0x110
[ 25.270901][ T399] get_page_from_freelist+0x2ca9/0x2d20
[ 25.276423][ T399] __alloc_pages+0x1fa/0x610
[ 25.280995][ T399] alloc_slab_page+0x6e/0xf0
[ 25.285577][ T399] new_slab+0x98/0x3e0
[ 25.289620][ T399] ___slab_alloc+0x70f/0xb70
[ 25.294186][ T399] __slab_alloc+0x5e/0xa0
[ 25.298496][ T399] __kmem_cache_alloc_node+0x204/0x2d0
[ 25.303937][ T399] __kmalloc+0xa4/0x1e0
[ 25.308078][ T399] fib6_info_alloc+0x34/0xe0
[ 25.312643][ T399] ip6_route_info_create+0x51b/0x14d0
[ 25.317994][ T399] ip6_route_add+0x27/0x130
[ 25.322481][ T399] addrconf_add_dev+0x388/0x4a0
[ 25.327311][ T399] addrconf_init_auto_addrs+0x7b9/0xbc0
[ 25.332832][ T399] addrconf_notify+0x7fe/0xe30
[ 25.337580][ T399] page last free stack trace:
[ 25.342225][ T399] free_unref_page_prepare+0x80c/0x820
[ 25.347661][ T399] free_unref_page+0x93/0x530
[ 25.352312][ T399] __free_pages+0x67/0x100
[ 25.356709][ T399] free_pages+0x82/0x90
[ 25.360842][ T399] __stack_depot_save+0x45f/0x490
[ 25.365847][ T399] kasan_set_track+0x60/0x70
[ 25.370448][ T399] kasan_save_alloc_info+0x1f/0x30
[ 25.375541][ T399] __kasan_kmalloc+0x95/0xb0
[ 25.380114][ T399] __kmalloc_node+0xb2/0x1e0
[ 25.384681][ T399] __vmalloc_node_range+0x564/0x1440
[ 25.389938][ T399] vzalloc+0x78/0x90
[ 25.393808][ T399] xt_counters_alloc+0x44/0x50
[ 25.398551][ T399] __do_replace+0xb1/0x960
[ 25.402955][ T399] do_ip6t_set_ctl+0xb2c/0xe00
[ 25.407698][ T399] nf_setsockopt+0x284/0x2b0
[ 25.412267][ T399] ipv6_setsockopt+0x170/0x1a0
[ 25.417111][ T399]
[ 25.419409][ T399] Memory state around the buggy address:
[ 25.425016][ T399] ffff888130196300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 25.433050][ T399] ffff888130196380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 25.441083][ T399] >ffff888130196400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 25.449115][ T399] ^
[ 25.453159][ T399] ffff888130196480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 25.461286][ T399] ffff888130196500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 25.469321][ T399] ==================================================================
[ 25.481717][ T399] Disabling lock debugging due to kernel taint
[ 25.486518][ T375] device veth1_macvtap entered promiscuous mode
[ 25.488050][ T399] ------------[ cut here ]------------
[ 25.499627][ T28] kauditd_printk_skb: 35 callbacks suppressed
[ 25.499637][ T28] audit: type=1400 audit(1781965008.396:109): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 25.499627][ T399] WARNING: CPU: 0 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 25.499659][ T399] Modules linked in:
[ 25.506753][ T28] audit: type=1400 audit(1781965008.396:110): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 25.527429][ T399]
[ 25.527440][ T399] CPU: 0 PID: 399 Comm: syz.6.18 Tainted: G B syzkaller #0
[ 25.527459][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 25.537455][ T28] audit: type=1400 audit(1781965008.396:111): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 25.541328][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 25.563354][ T28] audit: type=1400 audit(1781965008.396:112): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 25.564991][ T399] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 25.573714][ T28] audit: type=1400 audit(1781965008.396:113): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 25.583636][ T399] RSP: 0018:ffffc90000a777f0 EFLAGS: 00010293
[ 25.583655][ T399] RAX: ffffffff849ba2a7 RBX: ffff888117355000 RCX: ffff88811431d100
[ 25.583667][ T399] RDX: 0000000000000000 RSI: 0000000014a277c0 RDI: 000000000c04eb7d
[ 25.605207][ T28] audit: type=1400 audit(1781965008.396:114): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 25.611168][ T399] RBP: ffffc90000a77810 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[ 25.631878][ T28] audit: type=1400 audit(1781965008.396:115): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 25.651329][ T399] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000
[ 25.754867][ T399] R13: dffffc0000000000 R14: 0000000014a277c0 R15: ffff888130196400
[ 25.762838][ T399] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 25.771777][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 25.778342][ T399] CR2: 00007f49502f4ff8 CR3: 0000000122863000 CR4: 00000000003506b0
[ 25.786324][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 25.794302][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 25.802291][ T399] Call Trace:
[ 25.805557][ T399]
[ 25.808467][ T399] pppol2tp_release+0x150/0x2b0
[ 25.813325][ T399] sock_close+0xc9/0x220
[ 25.817653][ T399] ? __cfi_sock_close+0x10/0x10
[ 25.822509][ T399] __fput+0x1fd/0x8f0
[ 25.826494][ T399] ____fput+0x15/0x20
[ 25.830461][ T399] task_work_run+0x1e1/0x250
[ 25.835063][ T399] ? __cfi_task_work_run+0x10/0x10
[ 25.840169][ T399] ? free_nsproxy+0x21f/0x270
[ 25.844938][ T399] do_exit+0xaf2/0x2850
[ 25.849089][ T399] ? _raw_spin_lock+0x94/0xf0
[ 25.853769][ T399] ? __cfi_do_exit+0x10/0x10
[ 25.858361][ T399] ? plist_del+0x3ec/0x400
[ 25.862783][ T399] ? _raw_spin_unlock+0x4c/0x70
[ 25.867633][ T399] ? __kasan_check_write+0x14/0x20
[ 25.872754][ T399] ? _raw_spin_lock_irq+0x95/0xf0
[ 25.877774][ T399] do_group_exit+0x21b/0x2e0
[ 25.882367][ T399] ? __kasan_check_write+0x14/0x20
[ 25.887472][ T399] ? recalc_sigpending+0x168/0x1c0
[ 25.892595][ T399] get_signal+0x1382/0x14f0
[ 25.897096][ T399] arch_do_signal_or_restart+0xd1/0x11c0
[ 25.902733][ T399] ? do_futex+0x2e2/0x430
[ 25.907056][ T399] ? __cfi_do_futex+0x10/0x10
[ 25.911732][ T399] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 25.917879][ T399] ? __se_sys_futex+0x136/0x310
[ 25.922737][ T399] exit_to_user_mode_loop+0x7a/0xb0
[ 25.927927][ T399] exit_to_user_mode_prepare+0x87/0xd0
[ 25.933390][ T399] syscall_exit_to_user_mode+0x1a/0x30
[ 25.938844][ T399] do_syscall_64+0x58/0xa0
[ 25.943280][ T399] ? clear_bhb_loop+0x30/0x80
[ 25.947946][ T399] ? clear_bhb_loop+0x30/0x80
[ 25.952633][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 25.958526][ T399] RIP: 0033:0x7f494f39ce59
[ 25.962953][ T399] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 25.969961][ T399] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 25.978387][ T399] RAX: fffffffffffffe00 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 25.986363][ T399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f494f615fa8
[ 25.994347][ T399] RBP: 00007f494f615fa0 R08: 0000000000000000 R09: 0000000000000000
[ 26.002326][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 26.010289][ T399] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 26.018289][ T399]
[ 26.021309][ T399] ---[ end trace 0000000000000000 ]---
[ 26.031913][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 26.039401][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 26.049220][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 26.056902][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 26.064622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 26.073169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 26.081767][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 26.090033][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 26.098657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 26.106891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 26.115117][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 26.115303][ T402] ------------[ cut here ]------------
[ 26.127963][ T402] WARNING: CPU: 1 PID: 402 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 26.137960][ T402] Modules linked in:
[ 26.141862][ T402] CPU: 1 PID: 402 Comm: syz.6.22 Tainted: G B W syzkaller #0
[ 26.150425][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 26.160497][ T402] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 26.166850][ T402] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 26.186486][ T402] RSP: 0018:ffffc90000a777f0 EFLAGS: 00010293
[ 26.192561][ T402] RAX: ffffffff849ba2a7 RBX: ffff888118de7000 RCX: ffff888111e1bcc0
[ 26.200515][ T402] RDX: 0000000000000000 RSI: 00000000331d9080 RDI: 000000000c04eb7d
[ 26.208515][ T402] RBP: ffffc90000a77810 R08: ffff888118de7083 R09: 1ffff110231bce10
[ 26.216506][ T402] R10: dffffc0000000000 R11: ffffed10231bce11 R12: dffffc0000000000
[ 26.224484][ T402] R13: dffffc0000000000 R14: 00000000331d9080 R15: ffff88813001e400
[ 26.232467][ T402] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 26.241407][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.247974][ T402] CR2: 00007f49502f4ff8 CR3: 000000010f266000 CR4: 00000000003506a0
[ 26.255955][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 26.263944][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 26.271924][ T402] Call Trace:
[ 26.275198][ T402]
[ 26.278111][ T402] pppol2tp_release+0x150/0x2b0
[ 26.282986][ T402] sock_close+0xc9/0x220
[ 26.287256][ T402] ? __cfi_sock_close+0x10/0x10
[ 26.292139][ T402] __fput+0x1fd/0x8f0
[ 26.296118][ T402] ____fput+0x15/0x20
[ 26.300261][ T402] task_work_run+0x1e1/0x250
[ 26.304875][ T402] ? __cfi_task_work_run+0x10/0x10
[ 26.309979][ T402] ? free_nsproxy+0x21f/0x270
[ 26.314690][ T402] do_exit+0xaf2/0x2850
[ 26.318846][ T402] ? __cfi_do_exit+0x10/0x10
[ 26.323444][ T402] ? try_to_wake_up+0x6c6/0x1250
[ 26.328376][ T402] ? __kasan_check_write+0x14/0x20
[ 26.333495][ T402] ? _raw_spin_lock_irq+0x95/0xf0
[ 26.338516][ T402] do_group_exit+0x21b/0x2e0
[ 26.343119][ T402] ? __kasan_check_write+0x14/0x20
[ 26.348222][ T402] ? recalc_sigpending+0x168/0x1c0
[ 26.353342][ T402] get_signal+0x1382/0x14f0
[ 26.357839][ T402] arch_do_signal_or_restart+0xd1/0x11c0
[ 26.363504][ T402] ? do_futex+0x2bf/0x430
[ 26.367826][ T402] ? __cfi_do_futex+0x10/0x10
[ 26.372521][ T402] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 26.378667][ T402] ? __se_sys_futex+0x136/0x310
[ 26.383524][ T402] exit_to_user_mode_loop+0x7a/0xb0
[ 26.388713][ T402] exit_to_user_mode_prepare+0x87/0xd0
[ 26.394193][ T402] syscall_exit_to_user_mode+0x1a/0x30
[ 26.399640][ T402] do_syscall_64+0x58/0xa0
[ 26.404068][ T402] ? clear_bhb_loop+0x30/0x80
[ 26.408733][ T402] ? clear_bhb_loop+0x30/0x80
[ 26.413417][ T402] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 26.419306][ T402] RIP: 0033:0x7f494f39ce59
[ 26.423730][ T402] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 26.430735][ T402] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 26.439157][ T402] RAX: 0000000000000001 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 26.447155][ T402] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f494f615fac
[ 26.455129][ T402] RBP: 00007f494f615fa0 R08: 000469afde443320 R09: 0000000000000000
[ 26.463111][ T402] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 26.471111][ T402] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 26.479072][ T402]
[ 26.482100][ T402] ---[ end trace 0000000000000000 ]---
[ 26.535486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 26.552229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 26.570770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 26.589364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 26.602518][ T407] ------------[ cut here ]------------
[ 26.607992][ T407] WARNING: CPU: 1 PID: 407 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 26.618042][ T407] Modules linked in:
[ 26.621972][ T407] CPU: 1 PID: 407 Comm: syz.6.23 Tainted: G B W syzkaller #0
[ 26.630549][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 26.640657][ T407] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 26.647023][ T407] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 26.666664][ T407] RSP: 0018:ffffc90000a677f0 EFLAGS: 00010293
[ 26.672738][ T407] RAX: ffffffff849ba2a7 RBX: ffff88812fce1000 RCX: ffff888114318000
[ 26.680704][ T407] RDX: 0000000000000000 RSI: 00000000331d9180 RDI: 000000000c04eb7d
[ 26.688703][ T407] RBP: ffffc90000a67810 R08: ffff88812fce1083 R09: 1ffff11025f9c210
[ 26.696891][ T407] R10: dffffc0000000000 R11: ffffed1025f9c211 R12: dffffc0000000000
[ 26.704893][ T407] R13: dffffc0000000000 R14: 00000000331d9180 R15: ffff888117908c00
[ 26.712882][ T407] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 26.721848][ T407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 26.728425][ T407] CR2: 00007f49502f4ff8 CR3: 000000000700f000 CR4: 00000000003506a0
[ 26.736469][ T407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 26.744465][ T407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 26.752451][ T407] Call Trace:
[ 26.755717][ T407]
[ 26.758626][ T407] pppol2tp_release+0x150/0x2b0
[ 26.763674][ T407] sock_close+0xc9/0x220
[ 26.767906][ T407] ? __cfi_sock_close+0x10/0x10
[ 26.772764][ T407] __fput+0x1fd/0x8f0
[ 26.776752][ T407] ____fput+0x15/0x20
[ 26.780732][ T407] task_work_run+0x1e1/0x250
[ 26.785328][ T407] ? __cfi_task_work_run+0x10/0x10
[ 26.790447][ T407] ? free_nsproxy+0x21f/0x270
[ 26.795136][ T407] do_exit+0xaf2/0x2850
[ 26.799291][ T407] ? ttwu_do_wakeup+0x102/0x490
[ 26.804148][ T407] ? __cfi_do_exit+0x10/0x10
[ 26.808734][ T407] ? try_to_wake_up+0x6c6/0x1250
[ 26.813682][ T407] ? __kasan_check_write+0x14/0x20
[ 26.818783][ T407] ? _raw_spin_lock_irq+0x95/0xf0
[ 26.823841][ T407] do_group_exit+0x21b/0x2e0
[ 26.828429][ T407] ? __kasan_check_write+0x14/0x20
[ 26.833545][ T407] ? recalc_sigpending+0x168/0x1c0
[ 26.838649][ T407] get_signal+0x1382/0x14f0
[ 26.843354][ T407] arch_do_signal_or_restart+0xd1/0x11c0
[ 26.848973][ T407] ? do_futex+0x2bf/0x430
[ 26.853319][ T407] ? __cfi_do_futex+0x10/0x10
[ 26.857989][ T407] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 26.864162][ T407] ? __se_sys_futex+0x136/0x310
[ 26.869006][ T407] exit_to_user_mode_loop+0x7a/0xb0
[ 26.874217][ T407] exit_to_user_mode_prepare+0x87/0xd0
[ 26.879667][ T407] syscall_exit_to_user_mode+0x1a/0x30
[ 26.885131][ T407] do_syscall_64+0x58/0xa0
[ 26.889540][ T407] ? clear_bhb_loop+0x30/0x80
[ 26.894229][ T407] ? clear_bhb_loop+0x30/0x80
[ 26.898896][ T407] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 26.904847][ T407] RIP: 0033:0x7f494f39ce59
[ 26.909249][ T407] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 26.916286][ T407] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 26.924796][ T407] RAX: 0000000000000001 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 26.932811][ T407] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f494f615fac
[ 26.940773][ T407] RBP: 00007f494f615fa0 R08: 00223714e064f040 R09: 0000000000000000
[ 26.948783][ T407] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 26.956782][ T407] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 26.964782][ T407]
[ 26.967791][ T407] ---[ end trace 0000000000000000 ]---
[ 26.986629][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 26.998826][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.046352][ T382] device veth1_macvtap entered promiscuous mode
[ 27.101312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 27.119790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.139962][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 27.157246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.168447][ T414] ------------[ cut here ]------------
[ 27.173962][ T414] WARNING: CPU: 1 PID: 414 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 27.184030][ T414] Modules linked in:
[ 27.187916][ T414] CPU: 1 PID: 414 Comm: syz.6.24 Tainted: G B W syzkaller #0
[ 27.196546][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 27.206625][ T414] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 27.213045][ T414] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 27.232866][ T414] RSP: 0018:ffffc90000af77f0 EFLAGS: 00010293
[ 27.238941][ T414] RAX: ffffffff849ba2a7 RBX: ffff88812d7d8000 RCX: ffff88812f245100
[ 27.246996][ T414] RDX: 0000000000000000 RSI: 00000000331d9600 RDI: 000000000c04eb7d
[ 27.254996][ T414] RBP: ffffc90000af7810 R08: ffff88812d7d8083 R09: 1ffff11025afb010
[ 27.263002][ T414] R10: dffffc0000000000 R11: ffffed1025afb011 R12: dffffc0000000000
[ 27.270995][ T414] R13: dffffc0000000000 R14: 00000000331d9600 R15: ffff88812cea0c00
[ 27.278967][ T414] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 27.287958][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.294551][ T414] CR2: 00007f49502f4ff8 CR3: 0000000122863000 CR4: 00000000003506a0
[ 27.302551][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 27.310513][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 27.318532][ T414] Call Trace:
[ 27.321873][ T414]
[ 27.324798][ T414] pppol2tp_release+0x150/0x2b0
[ 27.329659][ T414] sock_close+0xc9/0x220
[ 27.333931][ T414] ? __cfi_sock_close+0x10/0x10
[ 27.338785][ T414] __fput+0x1fd/0x8f0
[ 27.342784][ T414] ____fput+0x15/0x20
[ 27.346768][ T414] task_work_run+0x1e1/0x250
[ 27.351374][ T414] ? __cfi_task_work_run+0x10/0x10
[ 27.356483][ T414] ? free_nsproxy+0x21f/0x270
[ 27.361177][ T414] do_exit+0xaf2/0x2850
[ 27.365333][ T414] ? ttwu_do_wakeup+0x102/0x490
[ 27.370163][ T414] ? __cfi_do_exit+0x10/0x10
[ 27.374776][ T414] ? try_to_wake_up+0x6c6/0x1250
[ 27.379716][ T414] ? __kasan_check_write+0x14/0x20
[ 27.384839][ T414] ? _raw_spin_lock_irq+0x95/0xf0
[ 27.389860][ T414] do_group_exit+0x21b/0x2e0
[ 27.394477][ T414] ? __kasan_check_write+0x14/0x20
[ 27.399593][ T414] ? recalc_sigpending+0x168/0x1c0
[ 27.404898][ T414] get_signal+0x1382/0x14f0
[ 27.409392][ T414] arch_do_signal_or_restart+0xd1/0x11c0
[ 27.415032][ T414] ? do_futex+0x2bf/0x430
[ 27.419358][ T414] ? __cfi_do_futex+0x10/0x10
[ 27.424042][ T414] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 27.430193][ T414] ? __se_sys_futex+0x136/0x310
[ 27.435074][ T414] exit_to_user_mode_loop+0x7a/0xb0
[ 27.440265][ T414] exit_to_user_mode_prepare+0x87/0xd0
[ 27.445739][ T414] syscall_exit_to_user_mode+0x1a/0x30
[ 27.451208][ T414] do_syscall_64+0x58/0xa0
[ 27.455603][ T414] ? clear_bhb_loop+0x30/0x80
[ 27.460264][ T414] ? clear_bhb_loop+0x30/0x80
[ 27.464965][ T414] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 27.470862][ T414] RIP: 0033:0x7f494f39ce59
[ 27.475281][ T414] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 27.482437][ T414] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 27.490833][ T414] RAX: 0000000000000001 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 27.498853][ T414] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f494f615fac
[ 27.506845][ T414] RBP: 00007f494f615fa0 R08: 000895cd62d1f0d0 R09: 0000000000000000
[ 27.514828][ T414] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 27.522810][ T414] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 27.530767][ T414]
[ 27.533814][ T414] ---[ end trace 0000000000000000 ]---
[ 27.702422][ T426] ------------[ cut here ]------------
[ 27.707924][ T426] WARNING: CPU: 1 PID: 426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 27.717964][ T426] Modules linked in:
[ 27.722096][ T426] CPU: 1 PID: 426 Comm: syz.0.27 Tainted: G B W syzkaller #0
[ 27.730683][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 27.740826][ T426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 27.747213][ T426] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 27.766893][ T426] RSP: 0018:ffffc90000ae77f0 EFLAGS: 00010293
[ 27.773008][ T426] RAX: ffffffff849ba2a7 RBX: ffff888119ca4000 RCX: ffff8881172e9440
[ 27.781011][ T426] RDX: 0000000000000000 RSI: 000000001716c2c0 RDI: 000000000c04eb7d
[ 27.788983][ T426] RBP: ffffc90000ae7810 R08: ffff888119ca4083 R09: 1ffff11023394810
[ 27.797104][ T426] R10: dffffc0000000000 R11: ffffed1023394811 R12: dffffc0000000000
[ 27.805358][ T426] R13: dffffc0000000000 R14: 000000001716c2c0 R15: ffff88811791ec00
[ 27.813424][ T426] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 27.822377][ T426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.828960][ T426] CR2: 00007f9aa2b11ff8 CR3: 000000000700f000 CR4: 00000000003506a0
[ 27.836980][ T426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 27.844976][ T426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 27.853005][ T426] Call Trace:
[ 27.856272][ T426]
[ 27.859194][ T426] pppol2tp_release+0x150/0x2b0
[ 27.864076][ T426] sock_close+0xc9/0x220
[ 27.868322][ T426] ? __cfi_sock_close+0x10/0x10
[ 27.873199][ T426] __fput+0x1fd/0x8f0
[ 27.877180][ T426] ____fput+0x15/0x20
[ 27.881509][ T426] task_work_run+0x1e1/0x250
[ 27.886110][ T426] ? __cfi_task_work_run+0x10/0x10
[ 27.891358][ T426] ? free_nsproxy+0x21f/0x270
[ 27.896056][ T426] do_exit+0xaf2/0x2850
[ 27.900201][ T426] ? ttwu_do_wakeup+0x102/0x490
[ 27.905069][ T426] ? __cfi_do_exit+0x10/0x10
[ 27.909659][ T426] ? try_to_wake_up+0x6c6/0x1250
[ 27.914619][ T426] ? __kasan_check_write+0x14/0x20
[ 27.919855][ T426] ? _raw_spin_lock_irq+0x95/0xf0
[ 27.924917][ T426] do_group_exit+0x21b/0x2e0
[ 27.929514][ T426] ? __kasan_check_write+0x14/0x20
[ 27.934655][ T426] ? recalc_sigpending+0x168/0x1c0
[ 27.939763][ T426] get_signal+0x1382/0x14f0
[ 27.944287][ T426] arch_do_signal_or_restart+0xd1/0x11c0
[ 27.949923][ T426] ? do_futex+0x2bf/0x430
[ 27.954277][ T426] ? __cfi_do_futex+0x10/0x10
[ 27.958952][ T426] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 27.965433][ T426] ? __se_sys_futex+0x136/0x310
[ 27.970275][ T426] exit_to_user_mode_loop+0x7a/0xb0
[ 27.975652][ T426] exit_to_user_mode_prepare+0x87/0xd0
[ 27.981141][ T426] syscall_exit_to_user_mode+0x1a/0x30
[ 27.986595][ T426] do_syscall_64+0x58/0xa0
[ 27.991026][ T426] ? clear_bhb_loop+0x30/0x80
[ 27.995692][ T426] ? clear_bhb_loop+0x30/0x80
[ 28.000351][ T426] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.006271][ T426] RIP: 0033:0x7f9aa1b9ce59
[ 28.010714][ T426] Code: Unable to access opcode bytes at 0x7f9aa1b9ce2f.
[ 28.017763][ T426] RSP: 002b:00007f9aa2b330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 28.026195][ T426] RAX: 0000000000000001 RBX: 00007f9aa1e15fa8 RCX: 00007f9aa1b9ce59
[ 28.034188][ T426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9aa1e15fac
[ 28.042280][ T426] RBP: 00007f9aa1e15fa0 R08: 00282cf5e5135d20 R09: 0000000000000000
[ 28.050249][ T426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 28.058424][ T426] R13: 00007f9aa1e16038 R14: 00007ffe72fffea0 R15: 00007ffe72ffff88
[ 28.066469][ T426]
[ 28.069482][ T426] ---[ end trace 0000000000000000 ]---
2026/06/20 14:16:51 executed programs: 24
[ 28.141088][ T28] audit: type=1400 audit(1781965011.036:116): avc: denied { write } for pid=295 comm="syz-execprog" path="pipe:[14521]" dev="pipefs" ino=14521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 28.223773][ T441] ------------[ cut here ]------------
[ 28.229254][ T441] WARNING: CPU: 1 PID: 441 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 28.239325][ T441] Modules linked in:
[ 28.243241][ T441] CPU: 1 PID: 441 Comm: syz.3.32 Tainted: G B W syzkaller #0
[ 28.251860][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 28.261944][ T441] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 28.268303][ T441] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 28.288259][ T441] RSP: 0018:ffffc90000b577f0 EFLAGS: 00010293
[ 28.294498][ T441] RAX: ffffffff849ba2a7 RBX: ffff88811a1ae000 RCX: ffff88811a23d100
[ 28.302507][ T441] RDX: 0000000000000000 RSI: 0000000015583480 RDI: 000000000c04eb7d
[ 28.310559][ T441] RBP: ffffc90000b57810 R08: ffff88811a1ae083 R09: 1ffff11023435c10
[ 28.318580][ T441] R10: dffffc0000000000 R11: ffffed1023435c11 R12: dffffc0000000000
[ 28.326700][ T441] R13: dffffc0000000000 R14: 0000000015583480 R15: ffff8881166ce400
[ 28.334708][ T441] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 28.343679][ T441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.350261][ T441] CR2: 00007f28bddd2ff8 CR3: 000000000700f000 CR4: 00000000003506a0
[ 28.358377][ T441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.366531][ T441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.374589][ T441] Call Trace:
[ 28.377865][ T441]
[ 28.380791][ T441] pppol2tp_release+0x150/0x2b0
[ 28.385675][ T441] sock_close+0xc9/0x220
[ 28.389912][ T441] ? __cfi_sock_close+0x10/0x10
[ 28.394797][ T441] __fput+0x1fd/0x8f0
[ 28.398778][ T441] ____fput+0x15/0x20
[ 28.402793][ T441] task_work_run+0x1e1/0x250
[ 28.407465][ T441] ? __cfi_task_work_run+0x10/0x10
[ 28.412622][ T441] ? free_nsproxy+0x21f/0x270
[ 28.417302][ T441] do_exit+0xaf2/0x2850
[ 28.421497][ T441] ? ttwu_do_wakeup+0x102/0x490
[ 28.426350][ T441] ? __cfi_do_exit+0x10/0x10
[ 28.430951][ T441] ? try_to_wake_up+0x6c6/0x1250
[ 28.435941][ T441] ? __kasan_check_write+0x14/0x20
[ 28.441102][ T441] ? _raw_spin_lock_irq+0x95/0xf0
[ 28.446125][ T441] do_group_exit+0x21b/0x2e0
[ 28.450746][ T441] ? __kasan_check_write+0x14/0x20
[ 28.455874][ T441] ? recalc_sigpending+0x168/0x1c0
[ 28.461010][ T441] get_signal+0x1382/0x14f0
[ 28.465518][ T441] arch_do_signal_or_restart+0xd1/0x11c0
[ 28.471172][ T441] ? do_futex+0x2bf/0x430
[ 28.475495][ T441] ? __cfi_do_futex+0x10/0x10
[ 28.480151][ T441] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 28.486311][ T441] ? __se_sys_futex+0x136/0x310
[ 28.491167][ T441] exit_to_user_mode_loop+0x7a/0xb0
[ 28.496349][ T441] exit_to_user_mode_prepare+0x87/0xd0
[ 28.501816][ T441] syscall_exit_to_user_mode+0x1a/0x30
[ 28.507270][ T441] do_syscall_64+0x58/0xa0
[ 28.511718][ T441] ? clear_bhb_loop+0x30/0x80
[ 28.516409][ T441] ? clear_bhb_loop+0x30/0x80
[ 28.521211][ T441] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.527100][ T441] RIP: 0033:0x7f28bcf9ce59
[ 28.531525][ T441] Code: Unable to access opcode bytes at 0x7f28bcf9ce2f.
[ 28.538526][ T441] RSP: 002b:00007f28bddf40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 28.546944][ T441] RAX: 0000000000000001 RBX: 00007f28bd215fa8 RCX: 00007f28bcf9ce59
[ 28.554927][ T441] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28bd215fac
[ 28.562907][ T441] RBP: 00007f28bd215fa0 R08: 000b90bde749e460 R09: 0000000000000000
[ 28.570871][ T441] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 28.578880][ T441] R13: 00007f28bd216038 R14: 00007ffe787118e0 R15: 00007ffe787119c8
[ 28.586878][ T441]
[ 28.589893][ T441] ---[ end trace 0000000000000000 ]---
[ 28.604567][ T8] device bridge_slave_1 left promiscuous mode
[ 28.610742][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.667188][ T8] device bridge_slave_0 left promiscuous mode
[ 28.691063][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.709153][ T8] device veth1_macvtap left promiscuous mode
[ 28.738712][ T8] device veth0_vlan left promiscuous mode
[ 28.769207][ T456] ------------[ cut here ]------------
[ 28.774731][ T456] WARNING: CPU: 0 PID: 456 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 28.784801][ T456] Modules linked in:
[ 28.788694][ T456] CPU: 0 PID: 456 Comm: syz.3.36 Tainted: G B W syzkaller #0
[ 28.797301][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 28.807384][ T456] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 28.813746][ T456] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 28.833394][ T456] RSP: 0018:ffffc90000ac77f0 EFLAGS: 00010293
[ 28.839457][ T456] RAX: ffffffff849ba2a7 RBX: ffff88811ad9f000 RCX: ffff88811a5a6540
[ 28.847528][ T456] RDX: 0000000000000000 RSI: 0000000015583f40 RDI: 000000000c04eb7d
[ 28.855516][ T456] RBP: ffffc90000ac7810 R08: ffff88811ad9f083 R09: 1ffff110235b3e10
[ 28.863524][ T456] R10: dffffc0000000000 R11: ffffed10235b3e11 R12: dffffc0000000000
[ 28.871523][ T456] R13: dffffc0000000000 R14: 0000000015583f40 R15: ffff888118f4b800
[ 28.879497][ T456] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 28.888465][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.895078][ T456] CR2: 00007f9aa2b11ff8 CR3: 000000012d97a000 CR4: 00000000003506b0
[ 28.903087][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.911079][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.919045][ T456] Call Trace:
[ 28.922360][ T456]
[ 28.925284][ T456] pppol2tp_release+0x150/0x2b0
[ 28.930158][ T456] sock_close+0xc9/0x220
[ 28.934435][ T456] ? __cfi_sock_close+0x10/0x10
[ 28.939294][ T456] __fput+0x1fd/0x8f0
[ 28.943303][ T456] ____fput+0x15/0x20
[ 28.947286][ T456] task_work_run+0x1e1/0x250
[ 28.951895][ T456] ? __cfi_task_work_run+0x10/0x10
[ 28.957007][ T456] ? free_nsproxy+0x21f/0x270
[ 28.961707][ T456] do_exit+0xaf2/0x2850
[ 28.965873][ T456] ? ttwu_do_wakeup+0x102/0x490
[ 28.970726][ T456] ? __cfi_do_exit+0x10/0x10
[ 28.975344][ T456] ? try_to_wake_up+0x6c6/0x1250
[ 28.980290][ T456] ? __kasan_check_write+0x14/0x20
[ 28.984713][ T28] audit: type=1400 audit(1781965011.876:117): avc: denied { ioctl } for pid=470 comm="syz.0.41" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16768 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 28.985414][ T456] ? _raw_spin_lock_irq+0x95/0xf0
[ 29.016020][ T456] do_group_exit+0x21b/0x2e0
[ 29.020682][ T456] ? __kasan_check_write+0x14/0x20
[ 29.025865][ T456] ? recalc_sigpending+0x168/0x1c0
[ 29.031013][ T456] get_signal+0x1382/0x14f0
[ 29.035519][ T456] arch_do_signal_or_restart+0xd1/0x11c0
[ 29.041176][ T456] ? do_futex+0x2bf/0x430
[ 29.045496][ T456] ? __cfi_do_futex+0x10/0x10
[ 29.050150][ T456] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 29.056321][ T456] ? __se_sys_futex+0x136/0x310
[ 29.061188][ T456] exit_to_user_mode_loop+0x7a/0xb0
[ 29.066369][ T456] exit_to_user_mode_prepare+0x87/0xd0
[ 29.071839][ T456] syscall_exit_to_user_mode+0x1a/0x30
[ 29.077288][ T456] do_syscall_64+0x58/0xa0
[ 29.081737][ T456] ? clear_bhb_loop+0x30/0x80
[ 29.086405][ T456] ? clear_bhb_loop+0x30/0x80
[ 29.091087][ T456] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.096978][ T456] RIP: 0033:0x7f28bcf9ce59
[ 29.101587][ T456] Code: Unable to access opcode bytes at 0x7f28bcf9ce2f.
[ 29.108594][ T456] RSP: 002b:00007f28bddf40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 29.117028][ T456] RAX: 0000000000000001 RBX: 00007f28bd215fa8 RCX: 00007f28bcf9ce59
[ 29.125008][ T456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28bd215fac
[ 29.132981][ T456] RBP: 00007f28bd215fa0 R08: 002b27e6698b50b0 R09: 0000000000000000
[ 29.140943][ T456] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 29.148937][ T456] R13: 00007f28bd216038 R14: 00007ffe787118e0 R15: 00007ffe787119c8
[ 29.156919][ T456]
[ 29.159916][ T456] ---[ end trace 0000000000000000 ]---
[ 29.165874][ T463] ------------[ cut here ]------------
[ 29.171386][ T463] WARNING: CPU: 1 PID: 463 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.181409][ T463] Modules linked in:
[ 29.185302][ T463] CPU: 1 PID: 463 Comm: syz.5.37 Tainted: G B W syzkaller #0
[ 29.193917][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 29.203996][ T463] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.210335][ T463] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 29.229957][ T463] RSP: 0018:ffffc90000c0f7f0 EFLAGS: 00010293
[ 29.236035][ T463] RAX: ffffffff849ba2a7 RBX: ffff88811ad9c000 RCX: ffff88811a5a1440
[ 29.244039][ T463] RDX: 0000000000000000 RSI: 00000000330b4228 RDI: 000000000c04eb7d
[ 29.252028][ T463] RBP: ffffc90000c0f810 R08: ffff88811ad9c083 R09: 1ffff110235b3810
[ 29.260006][ T463] R10: dffffc0000000000 R11: ffffed10235b3811 R12: dffffc0000000000
[ 29.267998][ T463] R13: dffffc0000000000 R14: 00000000330b4228 R15: ffff888118f48400
[ 29.275985][ T463] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.284923][ T463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.291518][ T463] CR2: 0000000000000000 CR3: 0000000110462000 CR4: 00000000003506a0
[ 29.299471][ T463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.307450][ T463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.315441][ T463] Call Trace:
[ 29.318700][ T463]
[ 29.321638][ T463] pppol2tp_release+0x150/0x2b0
[ 29.326489][ T463] sock_close+0xc9/0x220
[ 29.330722][ T463] ? __cfi_sock_close+0x10/0x10
[ 29.335583][ T463] __fput+0x1fd/0x8f0
[ 29.339565][ T463] ____fput+0x15/0x20
[ 29.343554][ T463] task_work_run+0x1e1/0x250
[ 29.348138][ T463] ? __cfi_task_work_run+0x10/0x10
[ 29.353257][ T463] ? free_nsproxy+0x21f/0x270
[ 29.357932][ T463] do_exit+0xaf2/0x2850
[ 29.362122][ T463] ? ttwu_do_wakeup+0x102/0x490
[ 29.366974][ T463] ? __cfi_do_exit+0x10/0x10
[ 29.371584][ T463] ? try_to_wake_up+0x6c6/0x1250
[ 29.376523][ T463] ? __kasan_check_write+0x14/0x20
[ 29.381656][ T463] ? _raw_spin_lock_irq+0x95/0xf0
[ 29.386679][ T463] do_group_exit+0x21b/0x2e0
[ 29.391284][ T463] ? __kasan_check_write+0x14/0x20
[ 29.396387][ T463] ? recalc_sigpending+0x168/0x1c0
[ 29.401508][ T463] get_signal+0x1382/0x14f0
[ 29.406011][ T463] arch_do_signal_or_restart+0xd1/0x11c0
[ 29.411650][ T463] ? do_futex+0x2bf/0x430
[ 29.415974][ T463] ? __cfi_do_futex+0x10/0x10
[ 29.420626][ T463] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 29.426795][ T463] ? __se_sys_futex+0x136/0x310
[ 29.431665][ T463] exit_to_user_mode_loop+0x7a/0xb0
[ 29.436845][ T463] exit_to_user_mode_prepare+0x87/0xd0
[ 29.442305][ T463] syscall_exit_to_user_mode+0x1a/0x30
[ 29.447772][ T463] do_syscall_64+0x58/0xa0
[ 29.452212][ T463] ? clear_bhb_loop+0x30/0x80
[ 29.456899][ T463] ? clear_bhb_loop+0x30/0x80
[ 29.461596][ T463] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.467492][ T463] RIP: 0033:0x7f387379ce59
[ 29.471930][ T463] Code: Unable to access opcode bytes at 0x7f387379ce2f.
[ 29.478931][ T463] RSP: 002b:00007f38746a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 29.487352][ T463] RAX: 0000000000000001 RBX: 00007f3873a15fa8 RCX: 00007f387379ce59
[ 29.495876][ T463] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3873a15fac
[ 29.503857][ T463] RBP: 00007f3873a15fa0 R08: 002c591369a11ad0 R09: 0000000000000000
[ 29.511838][ T463] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 29.519793][ T463] R13: 00007f3873a16038 R14: 00007ffc75b16500 R15: 00007ffc75b165e8
[ 29.527792][ T463]
[ 29.530808][ T463] ---[ end trace 0000000000000000 ]---
[ 29.746152][ T479] ------------[ cut here ]------------
[ 29.751677][ T479] WARNING: CPU: 0 PID: 479 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.761715][ T479] Modules linked in:
[ 29.765604][ T479] CPU: 0 PID: 479 Comm: syz.6.43 Tainted: G B W syzkaller #0
[ 29.774224][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 29.784288][ T479] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.790628][ T479] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 29.791303][ T480] ------------[ cut here ]------------
[ 29.810290][ T479] RSP: 0018:ffffc90000d377f0 EFLAGS: 00010293
[ 29.810313][ T479] RAX: ffffffff849ba2a7 RBX: ffff88811b5d2000 RCX: ffff88811b049440
[ 29.815785][ T480] WARNING: CPU: 1 PID: 480 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.821889][ T479] RDX: 0000000000000000 RSI: 000000002fbbbd80 RDI: 000000000c04eb7d
[ 29.829809][ T480] Modules linked in:
[ 29.839788][ T479] RBP: ffffc90000d37810 R08: ffff88811b5d2083 R09: 1ffff110236ba410
[ 29.847762][ T480] CPU: 1 PID: 480 Comm: syz.5.45 Tainted: G B W syzkaller #0
[ 29.851664][ T479] R10: dffffc0000000000 R11: ffffed10236ba411 R12: dffffc0000000000
[ 29.859606][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 29.868193][ T479] R13: dffffc0000000000 R14: 000000002fbbbd80 R15: ffff88811b1f8800
[ 29.876175][ T480] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.886240][ T479] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 29.886257][ T479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.886266][ T479] CR2: 00007f49502f4ff8 CR3: 000000012e1c4000 CR4: 00000000003506b0
[ 29.886279][ T479] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.894256][ T480] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 29.894272][ T480] RSP: 0018:ffffc90000b577f0 EFLAGS: 00010293
[ 29.900567][ T479] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.909502][ T480]
[ 29.909509][ T480] RAX: ffffffff849ba2a7 RBX: ffff88811b5d5000 RCX: ffff88811b075100
[ 29.916114][ T479] Call Trace:
[ 29.924075][ T480] RDX: 0000000000000000 RSI: 000000002e4c8900 RDI: 000000000c04eb7d
[ 29.932053][ T479]
[ 29.932064][ T479] pppol2tp_release+0x150/0x2b0
[ 29.951673][ T480] RBP: ffffc90000b57810 R08: ffff88811b5d5083 R09: 1ffff110236baa10
[ 29.951690][ T480] R10: dffffc0000000000 R11: ffffed10236baa11 R12: dffffc0000000000
[ 29.957735][ T479] sock_close+0xc9/0x220
[ 29.965747][ T480] R13: dffffc0000000000 R14: 000000002e4c8900 R15: ffff88811b1fb800
[ 29.965770][ T480] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.968080][ T479] ? __cfi_sock_close+0x10/0x10
[ 29.976082][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.979320][ T479] __fput+0x1fd/0x8f0
[ 29.987296][ T480] CR2: 00007f28bddd2ff8 CR3: 000000012e1c4000 CR4: 00000000003506a0
[ 29.990216][ T479] ____fput+0x15/0x20
[ 29.995059][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.003028][ T479] task_work_run+0x1e1/0x250
[ 30.011011][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.011030][ T480] Call Trace:
[ 30.015246][ T479] ? __cfi_task_work_run+0x10/0x10
[ 30.023223][ T480]
[ 30.032151][ T479] ? free_nsproxy+0x21f/0x270
[ 30.036980][ T480] pppol2tp_release+0x150/0x2b0
[ 30.043734][ T479] do_exit+0xaf2/0x2850
[ 30.047561][ T480] sock_close+0xc9/0x220
[ 30.055632][ T479] ? __cfi_do_exit+0x10/0x10
[ 30.059497][ T480] ? __cfi_sock_close+0x10/0x10
[ 30.067477][ T479] ? try_to_wake_up+0x6c6/0x1250
[ 30.072073][ T480] __fput+0x1fd/0x8f0
[ 30.080124][ T479] ? __kasan_check_write+0x14/0x20
[ 30.083457][ T480] ____fput+0x15/0x20
[ 30.088518][ T479] ? _raw_spin_lock_irq+0x95/0xf0
[ 30.091457][ T480] task_work_run+0x1e1/0x250
[ 30.096115][ T479] do_group_exit+0x21b/0x2e0
[ 30.100948][ T480] ? __cfi_task_work_run+0x10/0x10
[ 30.105105][ T479] ? __kasan_check_write+0x14/0x20
[ 30.109305][ T480] ? free_nsproxy+0x21f/0x270
[ 30.113921][ T479] ? recalc_sigpending+0x168/0x1c0
[ 30.118716][ T480] do_exit+0xaf2/0x2850
[ 30.123657][ T479] get_signal+0x1382/0x14f0
[ 30.123684][ T479] arch_do_signal_or_restart+0xd1/0x11c0
[ 30.123703][ T479] ? do_futex+0x2bf/0x430
[ 30.123716][ T479] ? __cfi_do_futex+0x10/0x10
[ 30.127675][ T480] ? __cfi_do_exit+0x10/0x10
[ 30.132792][ T479] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 30.136741][ T480] ? try_to_wake_up+0x6c6/0x1250
[ 30.141760][ T479] ? __se_sys_futex+0x136/0x310
[ 30.146327][ T480] ? __kasan_check_write+0x14/0x20
[ 30.150891][ T479] exit_to_user_mode_loop+0x7a/0xb0
[ 30.156008][ T480] ? _raw_spin_lock_irq+0x95/0xf0
[ 30.161108][ T479] exit_to_user_mode_prepare+0x87/0xd0
[ 30.165764][ T480] do_group_exit+0x21b/0x2e0
[ 30.170852][ T479] syscall_exit_to_user_mode+0x1a/0x30
[ 30.175003][ T480] ? __kasan_check_write+0x14/0x20
[ 30.179478][ T479] do_syscall_64+0x58/0xa0
[ 30.185150][ T480] ? recalc_sigpending+0x168/0x1c0
[ 30.189409][ T479] ? clear_bhb_loop+0x30/0x80
[ 30.194082][ T480] get_signal+0x1382/0x14f0
[ 30.198653][ T479] ? clear_bhb_loop+0x30/0x80
[ 30.205156][ T480] arch_do_signal_or_restart+0xd1/0x11c0
[ 30.209913][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.214797][ T480] ? do_futex+0x2bf/0x430
[ 30.214819][ T480] ? try_to_wake_up+0x622/0x1250
[ 30.214836][ T480] ? __cfi_do_futex+0x10/0x10
[ 30.214851][ T480] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 30.219938][ T479] RIP: 0033:0x7f494f39ce59
[ 30.225140][ T480] ? __se_sys_futex+0x136/0x310
[ 30.230138][ T479] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 30.235592][ T480] exit_to_user_mode_loop+0x7a/0xb0
[ 30.240157][ T479] RSP: 002b:00007f49503160e8 EFLAGS: 00000246
[ 30.245624][ T480] exit_to_user_mode_prepare+0x87/0xd0
[ 30.250706][ T479] ORIG_RAX: 00000000000000ca
[ 30.255117][ T480] syscall_exit_to_user_mode+0x1a/0x30
[ 30.260209][ T479] RAX: 0000000000000001 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 30.264889][ T480] do_syscall_64+0x58/0xa0
[ 30.269356][ T479] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f494f615fac
[ 30.274045][ T480] ? clear_bhb_loop+0x30/0x80
[ 30.279636][ T479] RBP: 00007f494f615fa0 R08: 002a8f4fedc1e5e0 R09: 0000000000000000
[ 30.285794][ T480] ? clear_bhb_loop+0x30/0x80
[ 30.285816][ T480] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.285836][ T480] RIP: 0033:0x7f387379ce59
[ 30.290303][ T479] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 30.295338][ T480] Code: Unable to access opcode bytes at 0x7f387379ce2f.
[ 30.299726][ T479] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 30.305876][ T480] RSP: 002b:00007f38746a60e8 EFLAGS: 00000246
[ 30.310269][ T479]
[ 30.315108][ T480] ORIG_RAX: 00000000000000ca
[ 30.315116][ T480] RAX: 0000000000000001 RBX: 00007f3873a15fa8 RCX: 00007f387379ce59
[ 30.322128][ T479] ---[ end trace 0000000000000000 ]---
[ 30.327293][ T480] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3873a15fac
[ 30.456230][ T480] RBP: 00007f3873a15fa0 R08: 0029f6b96db700d0 R09: 0000000000000000
[ 30.464243][ T480] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 30.472246][ T480] R13: 00007f3873a16038 R14: 00007ffc75b16500 R15: 00007ffc75b165e8
[ 30.480238][ T480]
[ 30.483309][ T480] ---[ end trace 0000000000000000 ]---
[ 30.652349][ T497] ------------[ cut here ]------------
[ 30.657834][ T497] WARNING: CPU: 1 PID: 497 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.667975][ T497] Modules linked in:
[ 30.671991][ T497] CPU: 1 PID: 497 Comm: syz.2.52 Tainted: G B W syzkaller #0
[ 30.680578][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 30.691001][ T497] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.697348][ T497] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 30.717096][ T497] RSP: 0018:ffffc90000ac77f0 EFLAGS: 00010293
[ 30.723198][ T497] RAX: ffffffff849ba2a7 RBX: ffff88811bd0b000 RCX: ffff88811b761440
[ 30.731192][ T497] RDX: 0000000000000000 RSI: 000000001772b540 RDI: 000000000c04eb7d
[ 30.739159][ T497] RBP: ffffc90000ac7810 R08: ffff88811bd0b083 R09: 1ffff110237a1610
[ 30.747174][ T497] R10: dffffc0000000000 R11: ffffed10237a1611 R12: dffffc0000000000
[ 30.755176][ T497] R13: dffffc0000000000 R14: 000000001772b540 R15: ffff88811a140c00
[ 30.763656][ T497] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 30.772857][ T497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.779451][ T497] CR2: 00007f694adb0ff8 CR3: 000000012fb6c000 CR4: 00000000003506a0
[ 30.787485][ T497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.795483][ T497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.803486][ T497] Call Trace:
[ 30.806759][ T497]
[ 30.809693][ T497] pppol2tp_release+0x150/0x2b0
[ 30.814605][ T497] sock_close+0xc9/0x220
[ 30.818857][ T497] ? __cfi_sock_close+0x10/0x10
[ 30.823758][ T497] __fput+0x1fd/0x8f0
[ 30.827746][ T497] ____fput+0x15/0x20
[ 30.831776][ T497] task_work_run+0x1e1/0x250
[ 30.836368][ T497] ? __cfi_task_work_run+0x10/0x10
[ 30.841785][ T497] ? free_nsproxy+0x21f/0x270
[ 30.846475][ T497] do_exit+0xaf2/0x2850
[ 30.850638][ T497] ? ttwu_do_wakeup+0x102/0x490
[ 30.855661][ T497] ? __cfi_do_exit+0x10/0x10
[ 30.860259][ T497] ? try_to_wake_up+0x6c6/0x1250
[ 30.865241][ T497] ? __kasan_check_write+0x14/0x20
[ 30.870347][ T497] ? _raw_spin_lock_irq+0x95/0xf0
[ 30.875411][ T497] do_group_exit+0x21b/0x2e0
[ 30.879995][ T497] ? __kasan_check_write+0x14/0x20
[ 30.885116][ T497] ? recalc_sigpending+0x168/0x1c0
[ 30.890222][ T497] get_signal+0x1382/0x14f0
[ 30.894732][ T497] arch_do_signal_or_restart+0xd1/0x11c0
[ 30.900358][ T497] ? do_futex+0x2bf/0x430
[ 30.904695][ T497] ? __cfi_do_futex+0x10/0x10
[ 30.909366][ T497] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 30.915528][ T497] ? __se_sys_futex+0x136/0x310
[ 30.920373][ T497] exit_to_user_mode_loop+0x7a/0xb0
[ 30.925720][ T497] exit_to_user_mode_prepare+0x87/0xd0
[ 30.931300][ T497] syscall_exit_to_user_mode+0x1a/0x30
[ 30.936758][ T497] do_syscall_64+0x58/0xa0
[ 30.941188][ T497] ? clear_bhb_loop+0x30/0x80
[ 30.945852][ T497] ? clear_bhb_loop+0x30/0x80
[ 30.950513][ T497] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.956416][ T497] RIP: 0033:0x7f6949f9ce59
[ 30.960836][ T497] Code: Unable to access opcode bytes at 0x7f6949f9ce2f.
[ 30.967870][ T497] RSP: 002b:00007f694add20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 30.976302][ T497] RAX: 0000000000000001 RBX: 00007f694a215fa8 RCX: 00007f6949f9ce59
[ 30.984304][ T497] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f694a215fac
[ 30.992296][ T497] RBP: 00007f694a215fa0 R08: 0024996ef1966d80 R09: 0000000000000000
[ 31.000260][ T497] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.008243][ T497] R13: 00007f694a216038 R14: 00007fff6739f320 R15: 00007fff6739f408
[ 31.016228][ T497]
[ 31.019228][ T497] ---[ end trace 0000000000000000 ]---
[ 31.171741][ T516] ------------[ cut here ]------------
[ 31.177246][ T516] WARNING: CPU: 0 PID: 516 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.187293][ T516] Modules linked in:
[ 31.191211][ T516] CPU: 0 PID: 516 Comm: syz.0.58 Tainted: G B W syzkaller #0
[ 31.199794][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.209875][ T516] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.216223][ T516] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 31.235867][ T516] RSP: 0018:ffffc900023e77f0 EFLAGS: 00010293
[ 31.242144][ T516] RAX: ffffffff849ba2a7 RBX: ffff88811c91f000 RCX: ffff88811c90d100
[ 31.250122][ T516] RDX: 0000000000000000 RSI: 0000000011ee3ea8 RDI: 000000000c04eb7d
[ 31.258307][ T516] RBP: ffffc900023e7810 R08: ffff88811c91f083 R09: 1ffff11023923e10
[ 31.266309][ T516] R10: dffffc0000000000 R11: ffffed1023923e11 R12: dffffc0000000000
[ 31.274298][ T516] R13: dffffc0000000000 R14: 0000000011ee3ea8 R15: ffff88811a0b7800
[ 31.282292][ T516] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.291244][ T516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.297819][ T516] CR2: 00007f9aa2b11ff8 CR3: 000000012e1c4000 CR4: 00000000003506b0
[ 31.305800][ T516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.313786][ T516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.322137][ T516] Call Trace:
[ 31.325401][ T516]
[ 31.328308][ T516] pppol2tp_release+0x150/0x2b0
[ 31.333354][ T516] sock_close+0xc9/0x220
[ 31.337596][ T516] ? __cfi_sock_close+0x10/0x10
[ 31.342447][ T516] __fput+0x1fd/0x8f0
[ 31.346429][ T516] ____fput+0x15/0x20
[ 31.350392][ T516] task_work_run+0x1e1/0x250
[ 31.354994][ T516] ? __cfi_task_work_run+0x10/0x10
[ 31.360098][ T516] ? free_nsproxy+0x21f/0x270
[ 31.364787][ T516] do_exit+0xaf2/0x2850
[ 31.368944][ T516] ? ttwu_do_wakeup+0x102/0x490
[ 31.373810][ T516] ? __cfi_do_exit+0x10/0x10
[ 31.378399][ T516] ? try_to_wake_up+0x6c6/0x1250
[ 31.383370][ T516] ? __kasan_check_write+0x14/0x20
[ 31.388483][ T516] ? _raw_spin_lock_irq+0x95/0xf0
[ 31.393517][ T516] do_group_exit+0x21b/0x2e0
[ 31.398106][ T516] ? __kasan_check_write+0x14/0x20
[ 31.403559][ T516] ? recalc_sigpending+0x168/0x1c0
[ 31.408664][ T516] get_signal+0x1382/0x14f0
[ 31.413351][ T516] arch_do_signal_or_restart+0xd1/0x11c0
[ 31.418984][ T516] ? do_futex+0x2bf/0x430
[ 31.423319][ T516] ? __cfi_do_futex+0x10/0x10
[ 31.427987][ T516] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 31.434165][ T516] ? __se_sys_futex+0x136/0x310
[ 31.439013][ T516] exit_to_user_mode_loop+0x7a/0xb0
[ 31.444214][ T516] exit_to_user_mode_prepare+0x87/0xd0
[ 31.449665][ T516] syscall_exit_to_user_mode+0x1a/0x30
[ 31.455127][ T516] do_syscall_64+0x58/0xa0
[ 31.459542][ T516] ? clear_bhb_loop+0x30/0x80
[ 31.464226][ T516] ? clear_bhb_loop+0x30/0x80
[ 31.468897][ T516] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.474797][ T516] RIP: 0033:0x7f9aa1b9ce59
[ 31.479203][ T516] Code: Unable to access opcode bytes at 0x7f9aa1b9ce2f.
[ 31.486392][ T516] RSP: 002b:00007f9aa2b330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 31.494948][ T516] RAX: 0000000000000001 RBX: 00007f9aa1e15fa8 RCX: 00007f9aa1b9ce59
[ 31.502952][ T516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9aa1e15fac
[ 31.510923][ T516] RBP: 00007f9aa1e15fa0 R08: 0007fd36f3ccf4c0 R09: 0000000000000000
[ 31.518917][ T516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.526912][ T516] R13: 00007f9aa1e16038 R14: 00007ffe72fffea0 R15: 00007ffe72ffff88
[ 31.534896][ T516]
[ 31.537903][ T516] ---[ end trace 0000000000000000 ]---
[ 31.543763][ T513] ------------[ cut here ]------------
[ 31.549229][ T513] WARNING: CPU: 1 PID: 513 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.559305][ T513] Modules linked in:
[ 31.563468][ T513] CPU: 1 PID: 513 Comm: syz.6.56 Tainted: G B W syzkaller #0
[ 31.572183][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.582270][ T513] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.588695][ T513] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 31.608361][ T513] RSP: 0018:ffffc90000ed77f0 EFLAGS: 00010293
[ 31.614438][ T513] RAX: ffffffff849ba2a7 RBX: ffff88811c78b000 RCX: ffff88811c780000
[ 31.622419][ T513] RDX: 0000000000000000 RSI: 0000000011ee3368 RDI: 000000000c04eb7d
[ 31.630382][ T513] RBP: ffffc90000ed7810 R08: ffff88811c78b083 R09: 1ffff110238f1610
[ 31.638371][ T513] R10: dffffc0000000000 R11: ffffed10238f1611 R12: dffffc0000000000
[ 31.646424][ T513] R13: dffffc0000000000 R14: 0000000011ee3368 R15: ffff88811b1a8400
[ 31.654426][ T513] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.663375][ T513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.669938][ T513] CR2: 00007f694adb0ff8 CR3: 0000000110462000 CR4: 00000000003506a0
[ 31.677924][ T513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.685910][ T513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.693881][ T513] Call Trace:
[ 31.697151][ T513]
[ 31.700063][ T513] pppol2tp_release+0x150/0x2b0
[ 31.704922][ T513] sock_close+0xc9/0x220
[ 31.709169][ T513] ? __cfi_sock_close+0x10/0x10
[ 31.714034][ T513] __fput+0x1fd/0x8f0
[ 31.718014][ T513] ____fput+0x15/0x20
[ 31.722011][ T513] task_work_run+0x1e1/0x250
[ 31.726598][ T513] ? __cfi_task_work_run+0x10/0x10
[ 31.731726][ T513] ? free_nsproxy+0x21f/0x270
[ 31.736417][ T513] do_exit+0xaf2/0x2850
[ 31.740560][ T513] ? __cfi_do_exit+0x10/0x10
[ 31.745160][ T513] ? try_to_wake_up+0x6c6/0x1250
[ 31.750094][ T513] ? __kasan_check_write+0x14/0x20
[ 31.755216][ T513] ? _raw_spin_lock_irq+0x95/0xf0
[ 31.760235][ T513] do_group_exit+0x21b/0x2e0
[ 31.764846][ T513] ? __kasan_check_write+0x14/0x20
[ 31.769957][ T513] ? recalc_sigpending+0x168/0x1c0
[ 31.775086][ T513] get_signal+0x1382/0x14f0
[ 31.779588][ T513] arch_do_signal_or_restart+0xd1/0x11c0
[ 31.785237][ T513] ? do_futex+0x2bf/0x430
[ 31.789555][ T513] ? __cfi_do_futex+0x10/0x10
[ 31.794238][ T513] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 31.800392][ T513] ? __se_sys_futex+0x136/0x310
[ 31.805619][ T513] exit_to_user_mode_loop+0x7a/0xb0
[ 31.810820][ T513] exit_to_user_mode_prepare+0x87/0xd0
[ 31.816507][ T513] syscall_exit_to_user_mode+0x1a/0x30
[ 31.821986][ T513] do_syscall_64+0x58/0xa0
[ 31.826399][ T513] ? clear_bhb_loop+0x30/0x80
[ 31.831082][ T513] ? clear_bhb_loop+0x30/0x80
[ 31.835749][ T513] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.841662][ T513] RIP: 0033:0x7f494f39ce59
[ 31.846066][ T513] Code: Unable to access opcode bytes at 0x7f494f39ce2f.
[ 31.853089][ T513] RSP: 002b:00007f49503160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 31.861521][ T513] RAX: 0000000000000001 RBX: 00007f494f615fa8 RCX: 00007f494f39ce59
[ 31.869488][ T513] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f494f615fac
[ 31.877481][ T513] RBP: 00007f494f615fa0 R08: 0007fd36f3ccf4c0 R09: 0000000000000000
[ 31.885670][ T513] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 31.893851][ T513] R13: 00007f494f616038 R14: 00007ffe3dadcf40 R15: 00007ffe3dadd028
[ 31.901846][ T513]
[ 31.904854][ T513] ---[ end trace 0000000000000000 ]---
[ 31.911201][ T518] ------------[ cut here ]------------
[ 31.911404][ T520] ------------[ cut here ]------------
[ 31.916659][ T518] WARNING: CPU: 1 PID: 518 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.922300][ T520] WARNING: CPU: 0 PID: 520 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.932145][ T518] Modules linked in:
[ 31.932158][ T518] CPU: 1 PID: 518 Comm: syz.3.57 Tainted: G B W syzkaller #0
[ 31.932177][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.932187][ T518] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.932211][ T518] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 31.932226][ T518] RSP: 0018:ffffc90000ef77f0 EFLAGS: 00010293
[ 31.932240][ T518] RAX: ffffffff849ba2a7 RBX: ffff88811c919000 RCX: ffff88811c908000
[ 31.932253][ T518] RDX: 0000000000000000 RSI: 000000002da375e8 RDI: 000000000c04eb7d
[ 31.932265][ T518] RBP: ffffc90000ef7810 R08: ffff88811c919083 R09: 1ffff11023923210
[ 31.932278][ T518] R10: dffffc0000000000 R11: ffffed1023923211 R12: dffffc0000000000
[ 31.932290][ T518] R13: dffffc0000000000 R14: 000000002da375e8 R15: ffff88811a0b6400
[ 31.942323][ T520] Modules linked in:
[ 31.946135][ T518] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.954787][ T520]
[ 31.964928][ T518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.971235][ T520] CPU: 0 PID: 520 Comm: syz.5.59 Tainted: G B W syzkaller #0
[ 31.971255][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 31.990866][ T518] CR2: 00007f694adb0ff8 CR3: 0000000110462000 CR4: 00000000003506a0
[ 31.990887][ T518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.990896][ T518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.990906][ T518] Call Trace:
[ 31.990918][ T518]
[ 31.990923][ T518] pppol2tp_release+0x150/0x2b0
[ 31.990947][ T518] sock_close+0xc9/0x220
[ 31.990993][ T518] ? __cfi_sock_close+0x10/0x10
[ 31.991015][ T518] __fput+0x1fd/0x8f0
[ 31.991037][ T518] ____fput+0x15/0x20
[ 31.997090][ T520] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.005068][ T518] task_work_run+0x1e1/0x250
[ 32.005095][ T518] ? __cfi_task_work_run+0x10/0x10
[ 32.005115][ T518] ? free_nsproxy+0x21f/0x270
[ 32.013181][ T520] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 32.021116][ T518] do_exit+0xaf2/0x2850
[ 32.029163][ T520] RSP: 0018:ffffc90000f1f7f0 EFLAGS: 00010293
[ 32.037160][ T518] ? _raw_spin_lock+0x94/0xf0
[ 32.041046][ T520]
[ 32.041051][ T520] RAX: ffffffff849ba2a7 RBX: ffff88811c76a000 RCX: ffff88811c786540
[ 32.041063][ T520] RDX: 0000000000000000 RSI: 000000002da374a8 RDI: 000000000c04eb7d
[ 32.041073][ T520] RBP: ffffc90000f1f810 R08: ffff88811c76a083 R09: 1ffff110238ed410
[ 32.041082][ T520] R10: dffffc0000000000 R11: ffffed10238ed411 R12: dffffc0000000000
[ 32.041094][ T520] R13: dffffc0000000000 R14: 000000002da374a8 R15: ffff88811b1a9000
[ 32.041106][ T520] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.041120][ T520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.041131][ T520] CR2: 0000000000000000 CR3: 00000001236e7000 CR4: 00000000003506b0
[ 32.041142][ T520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.041151][ T520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.041162][ T520] Call Trace:
[ 32.041167][ T520]
[ 32.041173][ T520] pppol2tp_release+0x150/0x2b0
[ 32.041191][ T520] sock_close+0xc9/0x220
[ 32.041210][ T520] ? __cfi_sock_close+0x10/0x10
[ 32.041228][ T520] __fput+0x1fd/0x8f0
[ 32.050141][ T518] ? __cfi_do_exit+0x10/0x10
[ 32.052481][ T520] ____fput+0x15/0x20
[ 32.052502][ T520] task_work_run+0x1e1/0x250
[ 32.052519][ T520] ? __cfi_task_work_run+0x10/0x10
[ 32.059078][ T518] ? plist_del+0x3ec/0x400
[ 32.067665][ T520] ? free_nsproxy+0x21f/0x270
[ 32.077813][ T518] ? _raw_spin_unlock+0x4c/0x70
[ 32.077839][ T518] ? __kasan_check_write+0x14/0x20
[ 32.085904][ T520] do_exit+0xaf2/0x2850
[ 32.093877][ T518] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.101866][ T520] ? _raw_spin_lock+0x94/0xf0
[ 32.105113][ T518] do_group_exit+0x21b/0x2e0
[ 32.108024][ T520] ? __cfi_do_exit+0x10/0x10
[ 32.112878][ T518] ? __kasan_check_write+0x14/0x20
[ 32.117088][ T520] ? plist_del+0x3ec/0x400
[ 32.122029][ T518] ? recalc_sigpending+0x168/0x1c0
[ 32.125987][ T520] ? _raw_spin_unlock+0x4c/0x70
[ 32.129940][ T518] get_signal+0x1382/0x14f0
[ 32.136351][ T520] ? __kasan_check_write+0x14/0x20
[ 32.140900][ T518] arch_do_signal_or_restart+0xd1/0x11c0
[ 32.146001][ T520] ? _raw_spin_lock_irq+0x95/0xf0
[ 32.150653][ T518] ? do_futex+0x2e2/0x430
[ 32.170277][ T520] do_group_exit+0x21b/0x2e0
[ 32.174437][ T518] ? __cfi_do_futex+0x10/0x10
[ 32.180478][ T520] ? __kasan_check_write+0x14/0x20
[ 32.185151][ T518] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 32.187457][ T520] ? recalc_sigpending+0x168/0x1c0
[ 32.195425][ T518] ? __se_sys_futex+0x136/0x310
[ 32.203399][ T520] get_signal+0x1382/0x14f0
[ 32.203426][ T520] arch_do_signal_or_restart+0xd1/0x11c0
[ 32.211394][ T518] exit_to_user_mode_loop+0x7a/0xb0
[ 32.219360][ T520] ? do_futex+0x2e2/0x430
[ 32.227331][ T518] exit_to_user_mode_prepare+0x87/0xd0
[ 32.236262][ T520] ? __cfi_do_futex+0x10/0x10
[ 32.242848][ T518] syscall_exit_to_user_mode+0x1a/0x30
[ 32.250796][ T520] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 32.258775][ T518] do_syscall_64+0x58/0xa0
[ 32.266746][ T520] ? __se_sys_futex+0x136/0x310
[ 32.270006][ T518] ? clear_bhb_loop+0x30/0x80
[ 32.272942][ T520] exit_to_user_mode_loop+0x7a/0xb0
[ 32.277767][ T518] ? clear_bhb_loop+0x30/0x80
[ 32.282144][ T520] exit_to_user_mode_prepare+0x87/0xd0
[ 32.286835][ T518] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.290876][ T520] syscall_exit_to_user_mode+0x1a/0x30
[ 32.295385][ T518] RIP: 0033:0x7f28bcf9ce59
[ 32.299342][ T520] do_syscall_64+0x58/0xa0
[ 32.299364][ T520] ? clear_bhb_loop+0x30/0x80
[ 32.299377][ T520] ? clear_bhb_loop+0x30/0x80
[ 32.299393][ T520] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.299413][ T520] RIP: 0033:0x7f387379ce59
[ 32.299425][ T520] Code: Unable to access opcode bytes at 0x7f387379ce2f.
[ 32.299432][ T520] RSP: 002b:00007f38746a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 32.299449][ T520] RAX: fffffffffffffe00 RBX: 00007f3873a15fa8 RCX: 00007f387379ce59
[ 32.299460][ T520] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3873a15fa8
[ 32.304051][ T518] Code: Unable to access opcode bytes at 0x7f28bcf9ce2f.
[ 32.309125][ T520] RBP: 00007f3873a15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 32.313550][ T518] RSP: 002b:00007f28bddf40e8 EFLAGS: 00000246
[ 32.318182][ T520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.323025][ T518] ORIG_RAX: 00000000000000ca
[ 32.328109][ T520] R13: 00007f3873a16038 R14: 00007ffc75b16500 R15: 00007ffc75b165e8
[ 32.332252][ T518] RAX: fffffffffffffe00 RBX: 00007f28bd215fa8 RCX: 00007f28bcf9ce59
[ 32.337249][ T520]
[ 32.341917][ T518] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28bd215fa8
[ 32.341929][ T518] RBP: 00007f28bd215fa0 R08: 0000000000000000 R09: 0000000000000000
[ 32.346495][ T520] ---[ end trace 0000000000000000 ]---
[ 32.351109][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.649737][ T518] R13: 00007f28bd216038 R14: 00007ffe787118e0 R15: 00007ffe787119c8
[ 32.657813][ T518]
[ 32.660820][ T518] ---[ end trace 0000000000000000 ]---
[ 32.781056][ T542] ------------[ cut here ]------------
[ 32.786548][ T542] refcount_t: underflow; use-after-free.
[ 32.801131][ T542] WARNING: CPU: 0 PID: 542 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 32.810455][ T542] Modules linked in:
[ 32.814384][ T542] CPU: 0 PID: 542 Comm: syz.0.66 Tainted: G B W syzkaller #0
[ 32.822989][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 32.833074][ T542] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 32.839246][ T542] Code: 05 01 48 c7 c7 00 0a ca 85 e8 cc 30 d9 fe 0f 0b eb c3 e8 13 a0 08 ff c6 05 84 d0 26 05 01 48 c7 c7 60 0a ca 85 e8 b0 30 d9 fe <0f> 0b eb a7 e8 f7 9f 08 ff c6 05 65 d0 26 05 01 48 c7 c7 a0 09 ca
[ 32.858900][ T542] RSP: 0018:ffffc90000c1f7a0 EFLAGS: 00010246
[ 32.864990][ T542] RAX: 4985c13274f25f00 RBX: 0000000000000003 RCX: ffff88811c752880
[ 32.872985][ T542] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 32.881010][ T542] RBP: ffffc90000c1f7b0 R08: ffffc90000c1f387 R09: 1ffff92000183e70
[ 32.888991][ T542] R10: dffffc0000000000 R11: fffff52000183e71 R12: 0000000000000000
[ 32.897003][ T542] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[ 32.904994][ T542] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.914044][ T542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.920620][ T542] CR2: 00007f9aa2b11ff8 CR3: 000000011a404000 CR4: 00000000003506b0
[ 32.928641][ T542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.936624][ T542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.944617][ T542] Call Trace:
[ 32.947888][ T542]
[ 32.950811][ T542] l2tp_session_put+0xc8/0x1a0
[ 32.955594][ T542] l2tp_session_delete+0x3df/0x4d0
[ 32.960710][ T542] pppol2tp_release+0x169/0x2b0
[ 32.965590][ T542] sock_close+0xc9/0x220
[ 32.969839][ T542] ? __cfi_sock_close+0x10/0x10
[ 32.974738][ T542] __fput+0x1fd/0x8f0
[ 32.978723][ T542] ____fput+0x15/0x20
[ 32.982926][ T542] task_work_run+0x1e1/0x250
[ 32.987519][ T542] ? __cfi_task_work_run+0x10/0x10
[ 32.992688][ T542] ? free_nsproxy+0x21f/0x270
[ 32.997371][ T542] do_exit+0xaf2/0x2850
[ 33.001561][ T542] ? _raw_spin_lock+0x94/0xf0
[ 33.006230][ T542] ? __cfi_do_exit+0x10/0x10
[ 33.010802][ T542] ? plist_del+0x3ec/0x400
[ 33.015236][ T542] ? _raw_spin_unlock+0x4c/0x70
[ 33.020085][ T542] ? __kasan_check_write+0x14/0x20
[ 33.025208][ T542] ? _raw_spin_lock_irq+0x95/0xf0
[ 33.030233][ T542] do_group_exit+0x21b/0x2e0
[ 33.034839][ T542] ? __kasan_check_write+0x14/0x20
[ 33.039947][ T542] ? recalc_sigpending+0x168/0x1c0
[ 33.045068][ T542] get_signal+0x1382/0x14f0
[ 33.049572][ T542] arch_do_signal_or_restart+0xd1/0x11c0
[ 33.055216][ T542] ? do_futex+0x2e2/0x430
[ 33.059540][ T542] ? __cfi_do_futex+0x10/0x10
[ 33.064222][ T542] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 33.070371][ T542] ? __se_sys_futex+0x136/0x310
[ 33.075244][ T542] exit_to_user_mode_loop+0x7a/0xb0
[ 33.080436][ T542] exit_to_user_mode_prepare+0x87/0xd0
[ 33.085906][ T542] syscall_exit_to_user_mode+0x1a/0x30
[ 33.091374][ T542] do_syscall_64+0x58/0xa0
[ 33.095771][ T542] ? clear_bhb_loop+0x30/0x80
[ 33.100423][ T542] ? clear_bhb_loop+0x30/0x80
[ 33.105106][ T542] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.111018][ T542] RIP: 0033:0x7f9aa1b9ce59
[ 33.115416][ T542] Code: Unable to access opcode bytes at 0x7f9aa1b9ce2f.
[ 33.122453][ T542] RSP: 002b:00007f9aa2b330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 33.130862][ T542] RAX: fffffffffffffe00 RBX: 00007f9aa1e15fa8 RCX: 00007f9aa1b9ce59
[ 33.138854][ T542] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9aa1e15fa8
[ 33.146829][ T542] RBP: 00007f9aa1e15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 33.154810][ T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.162796][ T542] R13: 00007f9aa1e16038 R14: 00007ffe72fffea0 R15: 00007ffe72ffff88
[ 33.170755][ T542]
[ 33.173779][ T542] ---[ end trace 0000000000000000 ]---
2026/06/20 14:16:56 executed programs: 61
[ 33.311301][ T551] ------------[ cut here ]------------
[ 33.316783][ T551] WARNING: CPU: 0 PID: 551 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.326830][ T551] Modules linked in:
[ 33.330729][ T551] CPU: 0 PID: 551 Comm: syz.2.68 Tainted: G B W syzkaller #0
[ 33.339360][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.349505][ T551] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.355939][ T551] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 33.375768][ T551] RSP: 0018:ffffc90000c3f7f0 EFLAGS: 00010293
[ 33.381866][ T551] RAX: ffffffff849ba2a7 RBX: ffff88811d507000 RCX: ffff88811d201440
[ 33.389929][ T551] RDX: 0000000000000000 RSI: 000000003317cb40 RDI: 000000000c04eb7d
[ 33.397932][ T551] RBP: ffffc90000c3f810 R08: ffff88811d507083 R09: 1ffff11023aa0e10
[ 33.405953][ T551] R10: dffffc0000000000 R11: ffffed1023aa0e11 R12: dffffc0000000000
[ 33.413975][ T551] R13: dffffc0000000000 R14: 000000003317cb40 R15: ffff88811c684400
[ 33.421980][ T551] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.430914][ T551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.437540][ T551] CR2: 00007f694adb0ff8 CR3: 000000012fb6c000 CR4: 00000000003506b0
[ 33.445531][ T551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.453552][ T551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.461536][ T551] Call Trace:
[ 33.464818][ T551]
[ 33.467748][ T551] pppol2tp_release+0x150/0x2b0
[ 33.472634][ T551] sock_close+0xc9/0x220
[ 33.476879][ T551] ? __cfi_sock_close+0x10/0x10
[ 33.481775][ T551] __fput+0x1fd/0x8f0
[ 33.485769][ T551] ____fput+0x15/0x20
[ 33.489748][ T551] task_work_run+0x1e1/0x250
[ 33.494374][ T551] ? __cfi_task_work_run+0x10/0x10
[ 33.499484][ T551] ? free_nsproxy+0x21f/0x270
[ 33.504198][ T551] do_exit+0xaf2/0x2850
[ 33.508356][ T551] ? ttwu_do_wakeup+0x102/0x490
[ 33.513244][ T551] ? __cfi_do_exit+0x10/0x10
[ 33.517833][ T551] ? try_to_wake_up+0x6c6/0x1250
[ 33.522778][ T551] ? __kasan_check_write+0x14/0x20
[ 33.527895][ T551] ? _raw_spin_lock_irq+0x95/0xf0
[ 33.532927][ T551] do_group_exit+0x21b/0x2e0
[ 33.537511][ T551] ? __kasan_check_write+0x14/0x20
[ 33.542632][ T551] ? recalc_sigpending+0x168/0x1c0
[ 33.547738][ T551] get_signal+0x1382/0x14f0
[ 33.552260][ T551] arch_do_signal_or_restart+0xd1/0x11c0
[ 33.557891][ T551] ? do_futex+0x2bf/0x430
[ 33.562227][ T551] ? __cfi_do_futex+0x10/0x10
[ 33.566900][ T551] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 33.573062][ T551] ? __se_sys_futex+0x136/0x310
[ 33.577910][ T551] exit_to_user_mode_loop+0x7a/0xb0
[ 33.583113][ T551] exit_to_user_mode_prepare+0x87/0xd0
[ 33.588569][ T551] syscall_exit_to_user_mode+0x1a/0x30
[ 33.594031][ T551] do_syscall_64+0x58/0xa0
[ 33.599224][ T551] ? clear_bhb_loop+0x30/0x80
[ 33.603920][ T551] ? clear_bhb_loop+0x30/0x80
[ 33.608594][ T551] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.614511][ T551] RIP: 0033:0x7f6949f9ce59
[ 33.618915][ T551] Code: Unable to access opcode bytes at 0x7f6949f9ce2f.
[ 33.625935][ T551] RSP: 002b:00007f694add20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 33.634359][ T551] RAX: 0000000000000001 RBX: 00007f694a215fa8 RCX: 00007f6949f9ce59
[ 33.642367][ T551] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f694a215fac
[ 33.650332][ T551] RBP: 00007f694a215fa0 R08: 00105571fce87020 R09: 0000000000000000
[ 33.658313][ T551] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 33.666314][ T551] R13: 00007f694a216038 R14: 00007fff6739f320 R15: 00007fff6739f408
[ 33.674316][ T551]
[ 33.677325][ T551] ---[ end trace 0000000000000000 ]---
[ 33.803691][ T566] ------------[ cut here ]------------
[ 33.809195][ T566] WARNING: CPU: 0 PID: 566 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.819238][ T566] Modules linked in:
[ 33.823167][ T566] CPU: 0 PID: 566 Comm: syz.2.73 Tainted: G B W syzkaller #0
[ 33.831768][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 33.841834][ T566] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.848171][ T566] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 33.867817][ T566] RSP: 0018:ffffc900010677f0 EFLAGS: 00010293
[ 33.873998][ T566] RAX: ffffffff849ba2a7 RBX: ffff88811dc6e000 RCX: ffff888111e19440
[ 33.882002][ T566] RDX: 0000000000000000 RSI: 000000003317cfc0 RDI: 000000000c04eb7d
[ 33.889976][ T566] RBP: ffffc90001067810 R08: ffff88811dc6e083 R09: 1ffff11023b8dc10
[ 33.897966][ T566] R10: dffffc0000000000 R11: ffffed1023b8dc11 R12: dffffc0000000000
[ 33.905964][ T566] R13: dffffc0000000000 R14: 000000003317cfc0 R15: ffff88811c6a5400
[ 33.913952][ T566] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.922908][ T566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.929491][ T566] CR2: 00007f694adb0ff8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.937488][ T566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.945474][ T566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.953461][ T566] Call Trace:
[ 33.956736][ T566]
[ 33.959664][ T566] pppol2tp_release+0x150/0x2b0
[ 33.964551][ T566] sock_close+0xc9/0x220
[ 33.968792][ T566] ? __cfi_sock_close+0x10/0x10
[ 33.973680][ T566] __fput+0x1fd/0x8f0
[ 33.977664][ T566] ____fput+0x15/0x20
[ 33.981688][ T566] task_work_run+0x1e1/0x250
[ 33.986275][ T566] ? __cfi_task_work_run+0x10/0x10
[ 33.991418][ T566] ? free_nsproxy+0x21f/0x270
[ 33.996096][ T566] do_exit+0xaf2/0x2850
[ 34.000244][ T566] ? ttwu_do_wakeup+0x102/0x490
[ 34.005104][ T566] ? __cfi_do_exit+0x10/0x10
[ 34.009701][ T566] ? try_to_wake_up+0x6c6/0x1250
[ 34.014771][ T566] ? __kasan_check_write+0x14/0x20
[ 34.019878][ T566] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.024936][ T566] do_group_exit+0x21b/0x2e0
[ 34.029521][ T566] ? __kasan_check_write+0x14/0x20
[ 34.034643][ T566] ? recalc_sigpending+0x168/0x1c0
[ 34.039752][ T566] get_signal+0x1382/0x14f0
[ 34.044271][ T566] arch_do_signal_or_restart+0xd1/0x11c0
[ 34.049904][ T566] ? do_futex+0x2bf/0x430
[ 34.054241][ T566] ? __cfi_do_futex+0x10/0x10
[ 34.058914][ T566] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 34.065077][ T566] ? __se_sys_futex+0x136/0x310
[ 34.069931][ T566] exit_to_user_mode_loop+0x7a/0xb0
[ 34.075136][ T566] exit_to_user_mode_prepare+0x87/0xd0
[ 34.080591][ T566] syscall_exit_to_user_mode+0x1a/0x30
[ 34.086067][ T566] do_syscall_64+0x58/0xa0
[ 34.090474][ T566] ? clear_bhb_loop+0x30/0x80
[ 34.095153][ T566] ? clear_bhb_loop+0x30/0x80
[ 34.099822][ T566] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.105734][ T566] RIP: 0033:0x7f6949f9ce59
[ 34.110141][ T566] Code: Unable to access opcode bytes at 0x7f6949f9ce2f.
[ 34.117157][ T566] RSP: 002b:00007f694add20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 34.125723][ T566] RAX: 0000000000000001 RBX: 00007f694a215fa8 RCX: 00007f6949f9ce59
[ 34.133825][ T566] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f694a215fac
[ 34.141811][ T566] RBP: 00007f694a215fa0 R08: 002e22d6ff092d40 R09: 0000000000000000
[ 34.149777][ T566] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 34.157751][ T566] R13: 00007f694a216038 R14: 00007fff6739f320 R15: 00007fff6739f408
[ 34.165739][ T566]
[ 34.168746][ T566] ---[ end trace 0000000000000000 ]---
[ 34.320750][ T584] ------------[ cut here ]------------
[ 34.326281][ T584] WARNING: CPU: 1 PID: 584 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.336318][ T584] Modules linked in:
[ 34.340210][ T584] CPU: 1 PID: 584 Comm: syz.0.80 Tainted: G B W syzkaller #0
[ 34.348828][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 34.358903][ T584] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.365284][ T584] Code: 5d c3 e8 ac c1 d5 fc be 02 00 00 00 eb 0a e8 a0 c1 d5 fc be 01 00 00 00 4c 89 f7 e8 73 20 cd fd e9 0f ff ff ff e8 89 c1 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 78 c1 d5 fc 4c 89 f7 be 03
[ 34.384950][ T584] RSP: 0018:ffffc9000119f7f0 EFLAGS: 00010293
[ 34.391056][ T584] RAX: ffffffff849ba2a7 RBX: ffff88811de2b000 RCX: ffff88811e0e5100
[ 34.399035][ T584] RDX: 0000000000000000 RSI: 00000000183aa900 RDI: 000000000c04eb7d
[ 34.407122][ T584] RBP: ffffc9000119f810 R08: ffff88811de2b083 R09: 1ffff11023bc5610
[ 34.415123][ T584] R10: dffffc0000000000 R11: ffffed1023bc5611 R12: dffffc0000000000
[ 34.423118][ T584] R13: dffffc0000000000 R14: 00000000183aa900 R15: ffff8881154e9800
[ 34.431112][ T584] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.440040][ T584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.446690][ T584] CR2: 00007f9aa2b11ff8 CR3: 000000012d97a000 CR4: 00000000003506a0
[ 34.454681][ T584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.462674][ T584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.470640][ T584] Call Trace:
[ 34.473945][ T584]
[ 34.476873][ T584] pppol2tp_release+0x150/0x2b0
[ 34.481736][ T584] sock_close+0xc9/0x220
[ 34.485976][ T584] ? __cfi_sock_close+0x10/0x10
[ 34.490807][ T584] __fput+0x1fd/0x8f0
[ 34.494798][ T584] ____fput+0x15/0x20
[ 34.498774][ T584] task_work_run+0x1e1/0x250
[ 34.503371][ T584] ? __cfi_task_work_run+0x10/0x10
[ 34.508476][ T584] ? free_nsproxy+0x21f/0x270
[ 34.513157][ T584] do_exit+0xaf2/0x2850
[ 34.517313][ T584] ? ttwu_do_wakeup+0x102/0x490
[ 34.522164][ T584] ? __cfi_do_exit+0x10/0x10
[ 34.526751][ T584] ? try_to_wake_up+0x6c6/0x1250
[ 34.531708][ T584] ? __kasan_check_write+0x14/0x20
[ 34.536822][ T584] ? _raw_spin_lock_irq+0x95/0xf0
[ 34.541860][ T584] do_group_exit+0x21b/0x2e0
[ 34.546449][ T584] ? __kasan_check_write+0x14/0x20
[ 34.551567][ T584] ? recalc_sigpending+0x168/0x1c0
[ 34.556670][ T584] get_signal+0x1382/0x14f0
[ 34.561186][ T584] arch_do_signal_or_restart+0xd1/0x11c0
[ 34.566812][ T584] ? do_futex+0x2bf/0x430
[ 34.571143][ T584] ? __cfi_do_futex+0x10/0x10
[ 34.575852][ T584] ? __cfi_arch_do_signal_or_restart+0x10/0x10
[ 34.582020][ T584] ? __se_sys_futex+0x136/0x310
[ 34.586861][ T584] exit_to_user_mode_loop+0x7a/0xb0
[ 34.592074][ T584] exit_to_user_mode_prepare+0x87/0xd0
[ 34.597525][ T584] syscall_exit_to_user_mode+0x1a/0x30
[ 34.602990][ T584] do_syscall_64+0x58/0xa0
[ 34.607402][ T584] ? clear_bhb_loop+0x30/0x80
[ 34.612088][ T584] ? clear_bhb_loop+0x30/0x80
[ 34.616756][ T584] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.622660][ T584] RIP: 0033:0x7f9aa1b9ce59
[ 34.627158][ T584] Code: Unable to access opcode bytes at 0x7f9aa1b9ce2f.
[ 34.634186][ T584] RSP: 002b:00007f9aa2b330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 34.642608][ T584] RAX: 0000000000000001 RBX: 00007f9aa1e15fa8 RCX: 00007f9aa1b9ce59
[ 34.650561][ T584] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9aa1e15fac
[ 34.658555][ T584] RBP: 00007f9aa1e15fa0 R08: 0010ee088134cf70 R09: 0000000000000000
[ 34.666538][ T584] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 34.674523][ T584] R13: 00007f9aa1e16038 R14: 00007ffe72fffea0 R15: 00007ffe72ffff88
[ 34.682517][ T584]
[ 34.685517][ T584] ---[ end trace 0000000000000000 ]---