Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 2026/07/29 03:21:36 parsed 1 programs 2026/07/29 03:21:36 serving rpc on tcp://44291 [ 25.920821][ T28] audit: type=1400 audit(1785295296.204:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.941671][ T28] audit: type=1400 audit(1785295296.204:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.050103][ T28] audit: type=1400 audit(1785295297.334:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.053271][ T300] cgroup: Unknown subsys name 'net' [ 27.077964][ T28] audit: type=1400 audit(1785295297.334:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.100202][ T300] cgroup: Unknown subsys name 'devices' [ 27.100601][ T28] audit: type=1400 audit(1785295297.364:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.215489][ T300] cgroup: Unknown subsys name 'hugetlb' [ 27.221104][ T300] cgroup: Unknown subsys name 'rlimit' [ 27.332543][ T28] audit: type=1400 audit(1785295297.614:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.355733][ T28] audit: type=1400 audit(1785295297.624:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.376138][ T28] audit: type=1400 audit(1785295297.624:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.396478][ T28] audit: type=1400 audit(1785295297.624:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.416768][ T28] audit: type=1400 audit(1785295297.624:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.421404][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.500441][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.205409][ T313] request_module fs-gadgetfs succeeded, but still no fs? [ 28.572206][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.608292][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.615963][ T329] device bridge_slave_0 entered promiscuous mode [ 28.632510][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.643203][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.654309][ T329] device bridge_slave_1 entered promiscuous mode [ 28.909426][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.916609][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.923932][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.930986][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.975283][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.982704][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.007325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.015512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.024999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.037312][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.044386][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.063051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.071433][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.078502][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.086278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.094320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.108118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.119972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.128575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.136207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.144819][ T329] device veth0_vlan entered promiscuous mode [ 29.157010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.166289][ T329] device veth1_macvtap entered promiscuous mode [ 29.177160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.192169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/29 03:21:39 executed programs: 0 [ 29.245140][ T329] syz-executor (329) used greatest stack depth: 21632 bytes left [ 29.468011][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.475122][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.482458][ T379] device bridge_slave_0 entered promiscuous mode [ 29.506509][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.513652][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.521047][ T380] device bridge_slave_0 entered promiscuous mode [ 29.527901][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.535116][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.542518][ T379] device bridge_slave_1 entered promiscuous mode [ 29.556150][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.563248][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.570598][ T372] device bridge_slave_0 entered promiscuous mode [ 29.577851][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.585185][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.592557][ T380] device bridge_slave_1 entered promiscuous mode [ 29.614399][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.621462][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.628979][ T372] device bridge_slave_1 entered promiscuous mode [ 29.652909][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.660011][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.667498][ T375] device bridge_slave_0 entered promiscuous mode [ 29.675835][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.682892][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.690472][ T375] device bridge_slave_1 entered promiscuous mode [ 29.771124][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.778307][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.786111][ T378] device bridge_slave_0 entered promiscuous mode [ 29.793360][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.800406][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.807860][ T378] device bridge_slave_1 entered promiscuous mode [ 30.009187][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.016263][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.023525][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.030546][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.049141][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.056199][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.063495][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.070551][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.108910][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.116382][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.125589][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.132822][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.141516][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.148920][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.170539][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.177989][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.185704][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.194215][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.202361][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.209421][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.217189][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.234737][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.242923][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.250005][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.257679][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.266412][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.274831][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.281857][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.289405][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.297581][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.304657][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.317323][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.324980][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.343953][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.351459][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.359085][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.367259][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.375500][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.383894][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.391998][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.399131][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.406657][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.414974][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.423092][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.430173][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.458002][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.467415][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.475687][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.484402][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.491445][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.499772][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.508049][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.515129][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.522486][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.530863][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.539070][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.546124][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.553533][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.561854][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.570133][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.577190][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.595477][ T379] device veth0_vlan entered promiscuous mode [ 30.619844][ T375] device veth0_vlan entered promiscuous mode [ 30.627800][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.635702][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.644998][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.652944][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.661764][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.669830][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.678198][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.686523][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.694437][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.702407][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.710679][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.718806][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.726883][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.734876][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.742928][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.750946][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.759052][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.767239][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.775749][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.784178][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.792018][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.800097][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.807590][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.815211][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.822588][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.836372][ T379] device veth1_macvtap entered promiscuous mode [ 30.851492][ T372] device veth0_vlan entered promiscuous mode [ 30.870436][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.879321][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.889433][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.897606][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.907044][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.915686][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.923915][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.931587][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.945209][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.953690][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.967271][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.975473][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.987986][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.013567][ T375] device veth1_macvtap entered promiscuous mode [ 31.030397][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.040221][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.048786][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.059477][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.068194][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.079000][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.087448][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.096064][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.104303][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.111867][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.120182][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.128537][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.136500][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.146469][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.154261][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.163436][ T378] device veth0_vlan entered promiscuous mode [ 31.174979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.184310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.199037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.207549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.216868][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 31.216880][ T28] audit: type=1400 audit(1785295301.504:105): avc: denied { create } for pid=397 comm="syz.6.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.247000][ T372] device veth1_macvtap entered promiscuous mode [ 31.257920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.266182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.274725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.290488][ T380] device veth0_vlan entered promiscuous mode [ 31.297034][ T28] audit: type=1400 audit(1785295301.504:106): avc: denied { connect } for pid=397 comm="syz.6.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.322523][ T378] device veth1_macvtap entered promiscuous mode [ 31.329507][ T28] audit: type=1400 audit(1785295301.504:107): avc: denied { ioctl } for pid=397 comm="syz.6.20" path="socket:[16218]" dev="sockfs" ino=16218 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.334081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.362573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.371165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.380239][ T399] ================================================================== [ 31.384124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.388321][ T399] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 31.404282][ T399] Read of size 4 at addr ffff88811843c400 by task syz.6.20/399 [ 31.411852][ T399] [ 31.414219][ T399] CPU: 0 PID: 399 Comm: syz.6.20 Not tainted syzkaller #0 [ 31.421390][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 31.426508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.431479][ T399] Call Trace: [ 31.442141][ T399] [ 31.445088][ T399] __dump_stack+0x21/0x24 [ 31.449447][ T399] dump_stack_lvl+0x110/0x170 [ 31.454161][ T399] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.456181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.459214][ T399] ? _raw_spin_lock_bh+0x94/0xf0 [ 31.472136][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 31.477909][ T399] print_address_description+0x71/0x200 [ 31.483496][ T399] print_report+0x4a/0x60 [ 31.487867][ T399] kasan_report+0x122/0x150 [ 31.492443][ T399] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 31.494211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.498203][ T399] __asan_report_load4_noabort+0x14/0x20 [ 31.511901][ T399] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 31.517481][ T399] pppol2tp_release+0x150/0x2b0 [ 31.522362][ T399] sock_close+0xc9/0x220 [ 31.526642][ T399] ? __cfi_sock_close+0x10/0x10 [ 31.531537][ T399] __fput+0x1fd/0x8f0 [ 31.535554][ T399] ____fput+0x15/0x20 [ 31.539594][ T399] task_work_run+0x1e1/0x250 [ 31.544208][ T399] ? __cfi_task_work_run+0x10/0x10 [ 31.549342][ T399] ? free_nsproxy+0x21f/0x270 [ 31.554053][ T399] do_exit+0xaf2/0x2850 [ 31.558238][ T399] ? __cfi_do_exit+0x10/0x10 [ 31.562869][ T399] ? xfd_validate_state+0x70/0x150 [ 31.568014][ T399] ? __kasan_check_write+0x14/0x20 [ 31.573152][ T399] __x64_sys_exit+0x40/0x40 [ 31.577680][ T399] x64_sys_call+0x67/0x9a0 [ 31.582118][ T399] do_syscall_64+0x4c/0xa0 [ 31.586559][ T399] ? clear_bhb_loop+0x30/0x80 [ 31.591262][ T399] ? clear_bhb_loop+0x30/0x80 [ 31.595961][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.601885][ T399] RIP: 0033:0x7f4ef6f9de99 [ 31.606337][ T399] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 31.613362][ T399] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 31.621803][ T399] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 31.629802][ T399] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.637800][ T399] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 31.645824][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.653822][ T399] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 31.661822][ T399] [ 31.664867][ T399] [ 31.667212][ T399] Allocated by task 398: [ 31.671473][ T399] kasan_set_track+0x4b/0x70 [ 31.676102][ T399] kasan_save_alloc_info+0x1f/0x30 [ 31.681246][ T399] __kasan_kmalloc+0x95/0xb0 [ 31.685872][ T399] __kmalloc+0xb4/0x1e0 [ 31.690050][ T399] l2tp_session_create+0x38/0xbd0 [ 31.695107][ T399] pppol2tp_connect+0xbf5/0x1640 [ 31.700076][ T399] __sys_connect+0x3da/0x460 [ 31.704696][ T399] __x64_sys_connect+0x7a/0x90 [ 31.709499][ T399] x64_sys_call+0x88d/0x9a0 [ 31.714052][ T399] do_syscall_64+0x4c/0xa0 [ 31.718512][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.724435][ T399] [ 31.726773][ T399] Freed by task 8: [ 31.730519][ T399] kasan_set_track+0x4b/0x70 [ 31.735138][ T399] kasan_save_free_info+0x2b/0x40 [ 31.740212][ T399] ____kasan_slab_free+0x132/0x180 [ 31.745358][ T399] __kasan_slab_free+0x11/0x20 [ 31.750141][ T399] slab_free_freelist_hook+0xc2/0x190 [ 31.755542][ T399] __kmem_cache_free+0xb7/0x1b0 [ 31.760441][ T399] kfree+0x6f/0xf0 [ 31.764201][ T399] l2tp_session_put+0xaf/0x1a0 [ 31.768980][ T399] l2tp_session_delete+0x3df/0x4d0 [ 31.774116][ T399] l2tp_tunnel_del_work+0x199/0x410 [ 31.779335][ T399] process_one_work+0x717/0xc30 [ 31.784189][ T399] worker_thread+0xa4d/0x11d0 [ 31.788886][ T399] kthread+0x281/0x320 [ 31.792962][ T399] ret_from_fork+0x1f/0x30 [ 31.797396][ T399] [ 31.799723][ T399] The buggy address belongs to the object at ffff88811843c400 [ 31.799723][ T399] which belongs to the cache kmalloc-512 of size 512 [ 31.813874][ T399] The buggy address is located 0 bytes inside of [ 31.813874][ T399] 512-byte region [ffff88811843c400, ffff88811843c600) [ 31.827000][ T399] [ 31.829331][ T399] The buggy address belongs to the physical page: [ 31.835757][ T399] page:ffffea0004610f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11843c [ 31.846011][ T399] head:ffffea0004610f00 order:2 compound_mapcount:0 compound_pincount:0 [ 31.854337][ T399] flags: 0x4000000000010200(slab|head|zone=1) [ 31.860416][ T399] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 31.869013][ T399] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 31.877600][ T399] page dumped because: kasan: bad access detected [ 31.884020][ T399] page_owner tracks the page as allocated [ 31.889744][ T399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6, tgid 6 (kworker/0:0), ts 31195787787, free_ts 30884937632 [ 31.911280][ T399] post_alloc_hook+0x1f5/0x210 [ 31.916060][ T399] prep_new_page+0x1c/0x110 [ 31.920572][ T399] get_page_from_freelist+0x2ca9/0x2d20 [ 31.926135][ T399] __alloc_pages+0x1fa/0x610 [ 31.930733][ T399] alloc_slab_page+0x6e/0xf0 [ 31.935336][ T399] new_slab+0x98/0x3e0 [ 31.939410][ T399] ___slab_alloc+0x70f/0xb70 [ 31.944014][ T399] __slab_alloc+0x5e/0xa0 [ 31.948361][ T399] __kmem_cache_alloc_node+0x204/0x2d0 [ 31.953834][ T399] __kmalloc_node_track_caller+0xa1/0x1e0 [ 31.959567][ T399] __alloc_skb+0x226/0x4a0 [ 31.964007][ T399] ndisc_ns_create+0x26e/0x920 [ 31.968778][ T399] ndisc_send_ns+0xb7/0x160 [ 31.973304][ T399] addrconf_dad_work+0x9d6/0x14a0 [ 31.978331][ T399] process_one_work+0x717/0xc30 [ 31.983179][ T399] worker_thread+0xa4d/0x11d0 [ 31.987868][ T399] page last free stack trace: [ 31.992540][ T399] free_unref_page_prepare+0x80c/0x820 [ 31.998010][ T399] free_unref_page+0x93/0x530 [ 32.002711][ T399] __free_pages+0x67/0x100 [ 32.007136][ T399] __free_slab+0xc7/0x1a0 [ 32.011464][ T399] __unfreeze_partials+0x15a/0x190 [ 32.016577][ T399] put_cpu_partial+0xa9/0x100 [ 32.021262][ T399] __slab_free+0x1c4/0x280 [ 32.025694][ T399] ___cache_free+0xbf/0xd0 [ 32.030122][ T399] qlist_free_all+0xc6/0x140 [ 32.034729][ T399] kasan_quarantine_reduce+0x14a/0x170 [ 32.040196][ T399] __kasan_slab_alloc+0x24/0x80 [ 32.045054][ T399] slab_post_alloc_hook+0x4f/0x2d0 [ 32.050186][ T399] kmem_cache_alloc_node+0x179/0x330 [ 32.055476][ T399] __alloc_skb+0xe8/0x4a0 [ 32.059813][ T399] mld_newpack+0x143/0xa30 [ 32.064269][ T399] add_grec+0xf26/0x13f0 [ 32.068521][ T399] [ 32.070851][ T399] Memory state around the buggy address: [ 32.076497][ T399] ffff88811843c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.084561][ T399] ffff88811843c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.092627][ T399] >ffff88811843c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.100685][ T399] ^ [ 32.104751][ T399] ffff88811843c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.112806][ T399] ffff88811843c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.120874][ T399] ================================================================== [ 32.141754][ T28] audit: type=1400 audit(1785295302.424:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.144567][ T399] Disabling lock debugging due to kernel taint [ 32.171656][ T399] ------------[ cut here ]------------ [ 32.177199][ T399] WARNING: CPU: 0 PID: 399 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.187226][ T399] Modules linked in: [ 32.191140][ T399] CPU: 0 PID: 399 Comm: syz.6.20 Tainted: G B syzkaller #0 [ 32.199882][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.199895][ T28] audit: type=1400 audit(1785295302.424:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.209987][ T399] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.231402][ T28] audit: type=1400 audit(1785295302.424:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.237629][ T399] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 32.267170][ T28] audit: type=1400 audit(1785295302.424:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.278539][ T399] RSP: 0018:ffffc90000a67b90 EFLAGS: 00010293 [ 32.278558][ T399] RAX: ffffffff849bb307 RBX: ffff888118857000 RCX: ffff888110cc1440 [ 32.313168][ T399] RDX: 0000000000000000 RSI: 0000000016f23580 RDI: 000000000c04eb7d [ 32.321177][ T399] RBP: ffffc90000a67bb0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc [ 32.329206][ T399] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000 [ 32.337240][ T399] R13: dffffc0000000000 R14: 0000000016f23580 R15: ffff88811843c400 [ 32.345262][ T399] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.352161][ T28] audit: type=1400 audit(1785295302.424:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.354281][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.377204][ T28] audit: type=1400 audit(1785295302.424:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.381274][ T399] CR2: 00005555858364e8 CR3: 000000012ed3c000 CR4: 00000000003506b0 [ 32.406744][ T28] audit: type=1400 audit(1785295302.424:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.412128][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.442774][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.450811][ T399] Call Trace: [ 32.454132][ T399] [ 32.457084][ T399] pppol2tp_release+0x150/0x2b0 [ 32.461971][ T399] sock_close+0xc9/0x220 [ 32.466304][ T399] ? __cfi_sock_close+0x10/0x10 [ 32.471205][ T399] __fput+0x1fd/0x8f0 [ 32.475260][ T399] ____fput+0x15/0x20 [ 32.479270][ T399] task_work_run+0x1e1/0x250 [ 32.483926][ T399] ? __cfi_task_work_run+0x10/0x10 [ 32.489070][ T399] ? free_nsproxy+0x21f/0x270 [ 32.493819][ T399] do_exit+0xaf2/0x2850 [ 32.498024][ T399] ? __cfi_do_exit+0x10/0x10 [ 32.502648][ T399] ? xfd_validate_state+0x70/0x150 [ 32.507813][ T399] ? __kasan_check_write+0x14/0x20 [ 32.512950][ T399] __x64_sys_exit+0x40/0x40 [ 32.517514][ T399] x64_sys_call+0x67/0x9a0 [ 32.521960][ T399] do_syscall_64+0x4c/0xa0 [ 32.526441][ T399] ? clear_bhb_loop+0x30/0x80 [ 32.531143][ T399] ? clear_bhb_loop+0x30/0x80 [ 32.535881][ T399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.541809][ T399] RIP: 0033:0x7f4ef6f9de99 [ 32.546281][ T399] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 32.553361][ T399] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.561831][ T399] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 32.569874][ T399] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.577900][ T399] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 32.585933][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.593947][ T399] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 32.601956][ T399] [ 32.605020][ T399] ---[ end trace 0000000000000000 ]--- [ 32.611707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.619185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.628906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.642675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.654270][ T450] ------------[ cut here ]------------ [ 32.659752][ T450] WARNING: CPU: 1 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 32.669806][ T450] Modules linked in: [ 32.673750][ T450] CPU: 1 PID: 450 Comm: syz.6.37 Tainted: G B W syzkaller #0 [ 32.682374][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.692512][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 32.699079][ T450] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 32.718737][ T450] RSP: 0018:ffffc90000bc7b90 EFLAGS: 00010293 [ 32.724848][ T450] RAX: ffffffff849bb307 RBX: ffff888114f9f000 RCX: ffff888119ce6540 [ 32.732847][ T450] RDX: 0000000000000000 RSI: 000000001954c800 RDI: 000000000c04eb7d [ 32.740913][ T450] RBP: ffffc90000bc7bb0 R08: ffff888114f9f083 R09: 1ffff110229f3e10 [ 32.748935][ T450] R10: dffffc0000000000 R11: ffffed10229f3e11 R12: dffffc0000000000 [ 32.757000][ T450] R13: dffffc0000000000 R14: 000000001954c800 R15: ffff888119c5c800 [ 32.765032][ T450] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.774024][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.780724][ T450] CR2: 00007f4ef7227dac CR3: 000000000700f000 CR4: 00000000003506a0 [ 32.788797][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.796820][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.804850][ T450] Call Trace: [ 32.808151][ T450] [ 32.811102][ T450] pppol2tp_release+0x150/0x2b0 [ 32.816023][ T450] sock_close+0xc9/0x220 [ 32.820289][ T450] ? __cfi_sock_close+0x10/0x10 [ 32.825190][ T450] __fput+0x1fd/0x8f0 [ 32.829210][ T450] ____fput+0x15/0x20 [ 32.833270][ T450] task_work_run+0x1e1/0x250 [ 32.837897][ T450] ? __cfi_task_work_run+0x10/0x10 [ 32.843047][ T450] ? free_nsproxy+0x21f/0x270 [ 32.847783][ T450] do_exit+0xaf2/0x2850 [ 32.851974][ T450] ? __cfi_do_exit+0x10/0x10 [ 32.856644][ T450] ? xfd_validate_state+0x70/0x150 [ 32.861788][ T450] ? __kasan_check_write+0x14/0x20 [ 32.866961][ T450] __x64_sys_exit+0x40/0x40 [ 32.871501][ T450] x64_sys_call+0x67/0x9a0 [ 32.875971][ T450] do_syscall_64+0x4c/0xa0 [ 32.880432][ T450] ? clear_bhb_loop+0x30/0x80 [ 32.885165][ T450] ? clear_bhb_loop+0x30/0x80 [ 32.889885][ T450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.895853][ T450] RIP: 0033:0x7f4ef6f9de99 [ 32.900299][ T450] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 32.907362][ T450] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.915924][ T450] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 32.923954][ T450] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.931950][ T450] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 32.939980][ T450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.948013][ T450] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 32.956055][ T450] [ 32.959137][ T450] ---[ end trace 0000000000000000 ]--- [ 32.970501][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.981646][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.000701][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.009198][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.018918][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.027233][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.054267][ T380] device veth1_macvtap entered promiscuous mode [ 33.081291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.102495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.111101][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.126232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.135425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.151992][ T499] ------------[ cut here ]------------ [ 33.158025][ T499] WARNING: CPU: 1 PID: 499 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.168222][ T499] Modules linked in: [ 33.172165][ T499] CPU: 1 PID: 499 Comm: syz.6.53 Tainted: G B W syzkaller #0 [ 33.180829][ T499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.190978][ T499] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.197378][ T499] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 33.217030][ T499] RSP: 0018:ffffc90000bf7b90 EFLAGS: 00010293 [ 33.223158][ T499] RAX: ffffffff849bb307 RBX: ffff88811a29d000 RCX: ffff88811a22e540 [ 33.231159][ T499] RDX: 0000000000000000 RSI: 00000000321d2700 RDI: 000000000c04eb7d [ 33.239178][ T499] RBP: ffffc90000bf7bb0 R08: ffff88811a29d083 R09: 1ffff11023453a10 [ 33.247309][ T499] R10: dffffc0000000000 R11: ffffed1023453a11 R12: dffffc0000000000 [ 33.255401][ T499] R13: dffffc0000000000 R14: 00000000321d2700 R15: ffff888111b62000 [ 33.263532][ T499] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.272536][ T499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.279173][ T499] CR2: 00007f9e7efed2f8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 33.287196][ T499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.295220][ T499] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.303233][ T499] Call Trace: [ 33.306530][ T499] [ 33.309477][ T499] pppol2tp_release+0x150/0x2b0 [ 33.314428][ T499] sock_close+0xc9/0x220 [ 33.318709][ T499] ? __cfi_sock_close+0x10/0x10 [ 33.323636][ T499] __fput+0x1fd/0x8f0 [ 33.327648][ T499] ____fput+0x15/0x20 [ 33.331661][ T499] task_work_run+0x1e1/0x250 [ 33.336313][ T499] ? __cfi_task_work_run+0x10/0x10 [ 33.341457][ T499] ? free_nsproxy+0x21f/0x270 [ 33.346202][ T499] do_exit+0xaf2/0x2850 [ 33.350397][ T499] ? __cfi_do_exit+0x10/0x10 [ 33.355053][ T499] ? xfd_validate_state+0x70/0x150 [ 33.360207][ T499] ? __kasan_check_write+0x14/0x20 [ 33.365386][ T499] __x64_sys_exit+0x40/0x40 [ 33.369941][ T499] x64_sys_call+0x67/0x9a0 [ 33.374433][ T499] do_syscall_64+0x4c/0xa0 [ 33.378910][ T499] ? clear_bhb_loop+0x30/0x80 [ 33.383635][ T499] ? clear_bhb_loop+0x30/0x80 [ 33.388335][ T499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.394401][ T499] RIP: 0033:0x7f4ef6f9de99 [ 33.398839][ T499] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 33.406011][ T499] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.414475][ T499] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 33.422491][ T499] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.430526][ T499] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 33.438634][ T499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.446666][ T499] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 33.454696][ T499] [ 33.457754][ T499] ---[ end trace 0000000000000000 ]--- [ 33.535565][ T343] device bridge_slave_1 left promiscuous mode [ 33.541777][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.563520][ T534] ------------[ cut here ]------------ [ 33.569145][ T534] WARNING: CPU: 0 PID: 534 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.579745][ T534] Modules linked in: [ 33.583690][ T534] CPU: 0 PID: 534 Comm: syz.6.61 Tainted: G B W syzkaller #0 [ 33.592309][ T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.602434][ T534] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.608860][ T534] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 33.628661][ T534] RSP: 0000:ffffc90000ecfb90 EFLAGS: 00010293 [ 33.634785][ T534] RAX: ffffffff849bb307 RBX: ffff88811bc02000 RCX: ffff88811bbf5100 [ 33.642781][ T534] RDX: 0000000000000000 RSI: 00000000174109c8 RDI: 000000000c04eb7d [ 33.650828][ T534] RBP: ffffc90000ecfbb0 R08: ffff88811bc02083 R09: 1ffff11023780410 [ 33.658903][ T534] R10: dffffc0000000000 R11: ffffed1023780411 R12: dffffc0000000000 [ 33.666928][ T534] R13: dffffc0000000000 R14: 00000000174109c8 R15: ffff88812e80e000 [ 33.674946][ T534] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.683963][ T534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.690577][ T534] CR2: 00007f8d5c99de99 CR3: 0000000130535000 CR4: 00000000003506b0 [ 33.698259][ T532] ------------[ cut here ]------------ [ 33.698660][ T534] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.704082][ T532] WARNING: CPU: 1 PID: 532 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 33.712056][ T534] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.722096][ T532] Modules linked in: [ 33.722109][ T532] CPU: 1 PID: 532 Comm: syz.1.62 Tainted: G B W syzkaller #0 [ 33.722141][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.722151][ T532] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 33.722174][ T532] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 33.722189][ T532] RSP: 0018:ffffc90000e9fb90 EFLAGS: 00010293 [ 33.722204][ T532] RAX: ffffffff849bb307 RBX: ffff88811bc01000 RCX: ffff88811bc43cc0 [ 33.722218][ T532] RDX: 0000000000000000 RSI: 0000000018335000 RDI: 000000000c04eb7d [ 33.722230][ T532] RBP: ffffc90000e9fbb0 R08: ffff88811bc01083 R09: 1ffff11023780210 [ 33.722244][ T532] R10: dffffc0000000000 R11: ffffed1023780211 R12: dffffc0000000000 [ 33.730230][ T534] Call Trace: [ 33.730238][ T534] [ 33.730245][ T534] pppol2tp_release+0x150/0x2b0 [ 33.734326][ T532] R13: dffffc0000000000 R14: 0000000018335000 R15: ffff88812e80f000 [ 33.742821][ T534] sock_close+0xc9/0x220 [ 33.753313][ T532] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.759303][ T534] ? __cfi_sock_close+0x10/0x10 [ 33.779004][ T532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.779024][ T532] CR2: 00007f1bb1358060 CR3: 000000000700f000 CR4: 00000000003506a0 [ 33.785154][ T534] __fput+0x1fd/0x8f0 [ 33.793541][ T532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.801875][ T534] ____fput+0x15/0x20 [ 33.809121][ T532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.817130][ T534] task_work_run+0x1e1/0x250 [ 33.817158][ T534] ? __cfi_task_work_run+0x10/0x10 [ 33.817182][ T534] ? free_nsproxy+0x21f/0x270 [ 33.817209][ T534] do_exit+0xaf2/0x2850 [ 33.820500][ T532] Call Trace: [ 33.820506][ T532] [ 33.823453][ T534] ? __cfi_do_exit+0x10/0x10 [ 33.828297][ T532] pppol2tp_release+0x150/0x2b0 [ 33.836285][ T534] ? xfd_validate_state+0x70/0x150 [ 33.840518][ T532] sock_close+0xc9/0x220 [ 33.849482][ T534] ? __kasan_check_write+0x14/0x20 [ 33.854334][ T532] ? __cfi_sock_close+0x10/0x10 [ 33.861025][ T534] __x64_sys_exit+0x40/0x40 [ 33.869011][ T532] __fput+0x1fd/0x8f0 [ 33.872982][ T534] x64_sys_call+0x67/0x9a0 [ 33.881605][ T532] ____fput+0x15/0x20 [ 33.885095][ T534] do_syscall_64+0x4c/0xa0 [ 33.893071][ T532] task_work_run+0x1e1/0x250 [ 33.897718][ T534] ? clear_bhb_loop+0x30/0x80 [ 33.902771][ T532] ? __cfi_task_work_run+0x10/0x10 [ 33.907456][ T534] ? clear_bhb_loop+0x30/0x80 [ 33.911618][ T532] ? free_nsproxy+0x21f/0x270 [ 33.914917][ T534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.917862][ T532] do_exit+0xaf2/0x2850 [ 33.922445][ T534] RIP: 0033:0x7f4ef6f9de99 [ 33.927362][ T532] ? __cfi_do_exit+0x10/0x10 [ 33.932410][ T534] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 33.936698][ T532] ? xfd_validate_state+0x70/0x150 [ 33.941805][ T534] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 [ 33.946700][ T532] ? __kasan_check_write+0x14/0x20 [ 33.951177][ T534] ORIG_RAX: 000000000000003c [ 33.955272][ T532] __x64_sys_exit+0x40/0x40 [ 33.955303][ T532] x64_sys_call+0x67/0x9a0 [ 33.955327][ T532] do_syscall_64+0x4c/0xa0 [ 33.955350][ T532] ? clear_bhb_loop+0x30/0x80 [ 33.955368][ T532] ? clear_bhb_loop+0x30/0x80 [ 33.955386][ T532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.955426][ T532] RIP: 0033:0x7f8d5c99de99 [ 33.955440][ T532] Code: Unable to access opcode bytes at 0x7f8d5c99de6f. [ 33.955461][ T532] RSP: 002b:00007f8d5c7feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.955480][ T532] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8d5c99de99 [ 33.955494][ T532] RDX: 00007f8d5c7ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.955505][ T532] RBP: 00007f8d5ca33eaf R08: 0000000000000000 R09: 0000000000000058 [ 33.955516][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.955526][ T532] R13: 00007f8d5cc26038 R14: 00007f8d5cc25fa0 R15: 00007ffcbf44d668 [ 33.955542][ T532] [ 33.955548][ T532] ---[ end trace 0000000000000000 ]--- [ 34.137223][ T534] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 34.145293][ T534] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.153316][ T534] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 34.161314][ T534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.169352][ T534] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 34.177373][ T534] [ 34.180411][ T534] ---[ end trace 0000000000000000 ]--- [ 34.186219][ T343] device bridge_slave_0 left promiscuous mode [ 34.192373][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.234371][ T343] device veth1_macvtap left promiscuous mode [ 34.250661][ T343] device veth0_vlan left promiscuous mode [ 34.273346][ T587] ------------[ cut here ]------------ [ 34.278869][ T587] WARNING: CPU: 1 PID: 587 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.289157][ T587] Modules linked in: [ 34.293186][ T587] CPU: 1 PID: 587 Comm: syz.5.78 Tainted: G B W syzkaller #0 [ 34.301800][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.311992][ T587] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.318464][ T587] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 34.338194][ T587] RSP: 0018:ffffc90000dbfb90 EFLAGS: 00010293 [ 34.344321][ T587] RAX: ffffffff849bb307 RBX: ffff88811ccc8000 RCX: ffff88811cc8a880 [ 34.352329][ T587] RDX: 0000000000000000 RSI: 00000000219150b0 RDI: 000000000c04eb7d [ 34.360379][ T587] RBP: ffffc90000dbfbb0 R08: ffff88811ccc8083 R09: 1ffff11023999010 [ 34.368505][ T587] R10: dffffc0000000000 R11: ffffed1023999011 R12: dffffc0000000000 [ 34.376553][ T587] R13: dffffc0000000000 R14: 00000000219150b0 R15: ffff88811c86e000 2026/07/29 03:21:44 executed programs: 83 [ 34.384579][ T587] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.393552][ T587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.400197][ T587] CR2: 00007fe506e27dac CR3: 0000000131626000 CR4: 00000000003506a0 [ 34.408316][ T587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.416355][ T587] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.424407][ T587] Call Trace: [ 34.427711][ T587] [ 34.430662][ T587] pppol2tp_release+0x150/0x2b0 [ 34.435692][ T587] sock_close+0xc9/0x220 [ 34.439972][ T587] ? __cfi_sock_close+0x10/0x10 [ 34.444921][ T587] __fput+0x1fd/0x8f0 [ 34.448939][ T587] ____fput+0x15/0x20 [ 34.453171][ T587] task_work_run+0x1e1/0x250 [ 34.457791][ T587] ? __cfi_task_work_run+0x10/0x10 [ 34.462931][ T587] ? free_nsproxy+0x21f/0x270 [ 34.467675][ T587] do_exit+0xaf2/0x2850 [ 34.471874][ T587] ? __cfi_do_exit+0x10/0x10 [ 34.476529][ T587] ? xfd_validate_state+0x70/0x150 [ 34.481682][ T587] ? __kasan_check_write+0x14/0x20 [ 34.486854][ T587] __x64_sys_exit+0x40/0x40 [ 34.491387][ T587] x64_sys_call+0x67/0x9a0 [ 34.495887][ T587] do_syscall_64+0x4c/0xa0 [ 34.500329][ T587] ? clear_bhb_loop+0x30/0x80 [ 34.505055][ T587] ? clear_bhb_loop+0x30/0x80 [ 34.509752][ T587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.515880][ T587] RIP: 0033:0x7f1bb059de99 [ 34.520339][ T587] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 34.527410][ T587] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.535870][ T587] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 34.543902][ T587] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.551899][ T587] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 34.559938][ T587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.567963][ T587] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 34.576011][ T587] [ 34.579043][ T587] ---[ end trace 0000000000000000 ]--- [ 34.754657][ T657] ------------[ cut here ]------------ [ 34.760167][ T657] WARNING: CPU: 1 PID: 657 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.770310][ T657] Modules linked in: [ 34.774970][ T657] CPU: 1 PID: 657 Comm: syz.1.95 Tainted: G B W syzkaller #0 [ 34.783688][ T657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.793909][ T657] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.800284][ T657] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 34.820068][ T657] RSP: 0018:ffffc9000136fb90 EFLAGS: 00010293 [ 34.826272][ T657] RAX: ffffffff849bb307 RBX: ffff88811db25000 RCX: ffff88811e476540 [ 34.834382][ T657] RDX: 0000000000000000 RSI: 0000000016f45500 RDI: 000000000c04eb7d [ 34.842477][ T657] RBP: ffffc9000136fbb0 R08: ffff88811db25083 R09: 1ffff11023b64a10 [ 34.847327][ T650] ------------[ cut here ]------------ [ 34.850789][ T657] R10: dffffc0000000000 R11: ffffed1023b64a11 R12: dffffc0000000000 [ 34.856143][ T650] WARNING: CPU: 0 PID: 650 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.864084][ T657] R13: dffffc0000000000 R14: 0000000016f45500 R15: ffff88811b7f7000 [ 34.874136][ T650] Modules linked in: [ 34.874149][ T650] CPU: 0 PID: 650 Comm: syz.6.99 Tainted: G B W syzkaller #0 [ 34.874171][ T650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.874182][ T650] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.874211][ T650] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 34.882297][ T657] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.886212][ T650] RSP: 0018:ffffc900013afb90 EFLAGS: 00010293 [ 34.894829][ T657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.904906][ T650] [ 34.904913][ T650] RAX: ffffffff849bb307 RBX: ffff88811db26000 RCX: ffff88811d5c1440 [ 34.904929][ T650] RDX: 0000000000000000 RSI: 000000001a615e00 RDI: 000000000c04eb7d [ 34.904941][ T650] RBP: ffffc900013afbb0 R08: ffff88811db26083 R09: 1ffff11023b64c10 [ 34.904956][ T650] R10: dffffc0000000000 R11: ffffed1023b64c11 R12: dffffc0000000000 [ 34.911286][ T657] CR2: 0000001b33f63fff CR3: 000000000700f000 CR4: 00000000003506a0 [ 34.931122][ T650] R13: dffffc0000000000 R14: 000000001a615e00 R15: ffff88811b7f5400 [ 34.931143][ T650] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.940102][ T657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.940115][ T657] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.940135][ T657] Call Trace: [ 34.940141][ T657] [ 34.940149][ T657] pppol2tp_release+0x150/0x2b0 [ 34.946389][ T650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.952814][ T657] sock_close+0xc9/0x220 [ 34.955152][ T650] CR2: 00007f8d5cc27dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 34.963154][ T657] ? __cfi_sock_close+0x10/0x10 [ 34.971126][ T650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.979118][ T657] __fput+0x1fd/0x8f0 [ 34.987149][ T650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.995161][ T657] ____fput+0x15/0x20 [ 34.995187][ T657] task_work_run+0x1e1/0x250 [ 34.995212][ T657] ? __cfi_task_work_run+0x10/0x10 [ 34.995235][ T657] ? free_nsproxy+0x21f/0x270 [ 34.995263][ T657] do_exit+0xaf2/0x2850 [ 34.995303][ T657] ? __cfi_do_exit+0x10/0x10 [ 34.995329][ T657] ? xfd_validate_state+0x70/0x150 [ 35.003532][ T650] Call Trace: [ 35.012269][ T657] ? __kasan_check_write+0x14/0x20 [ 35.020266][ T650] [ 35.028243][ T657] __x64_sys_exit+0x40/0x40 [ 35.031524][ T650] pppol2tp_release+0x150/0x2b0 [ 35.034477][ T657] x64_sys_call+0x67/0x9a0 [ 35.039341][ T650] sock_close+0xc9/0x220 [ 35.045945][ T657] do_syscall_64+0x4c/0xa0 [ 35.050183][ T650] ? __cfi_sock_close+0x10/0x10 [ 35.058303][ T657] ? clear_bhb_loop+0x30/0x80 [ 35.063014][ T650] __fput+0x1fd/0x8f0 [ 35.071018][ T657] ? clear_bhb_loop+0x30/0x80 [ 35.075010][ T650] ____fput+0x15/0x20 [ 35.075035][ T650] task_work_run+0x1e1/0x250 [ 35.083031][ T657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.087048][ T650] ? __cfi_task_work_run+0x10/0x10 [ 35.091611][ T657] RIP: 0033:0x7f8d5c99de99 [ 35.091626][ T657] Code: Unable to access opcode bytes at 0x7f8d5c99de6f. [ 35.091636][ T657] RSP: 002b:00007f8d5c7feef8 EFLAGS: 00000246 [ 35.096764][ T650] ? free_nsproxy+0x21f/0x270 [ 35.101437][ T657] ORIG_RAX: 000000000000003c [ 35.105613][ T650] do_exit+0xaf2/0x2850 [ 35.110195][ T657] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8d5c99de99 [ 35.115322][ T650] ? __cfi_do_exit+0x10/0x10 [ 35.118612][ T657] RDX: 00007f8d5c7ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.123737][ T650] ? xfd_validate_state+0x70/0x150 [ 35.126688][ T657] RBP: 00007f8d5ca33eaf R08: 0000000000000000 R09: 0000000000000058 [ 35.131189][ T650] ? __kasan_check_write+0x14/0x20 [ 35.136057][ T657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.140475][ T650] __x64_sys_exit+0x40/0x40 [ 35.144739][ T657] R13: 00007f8d5cc26038 R14: 00007f8d5cc25fa0 R15: 00007ffcbf44d668 [ 35.149143][ T650] x64_sys_call+0x67/0x9a0 [ 35.154115][ T657] [ 35.158728][ T650] do_syscall_64+0x4c/0xa0 [ 35.162709][ T657] ---[ end trace 0000000000000000 ]--- [ 35.167398][ T650] ? clear_bhb_loop+0x30/0x80 [ 35.300056][ T650] ? clear_bhb_loop+0x30/0x80 [ 35.304828][ T650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.310768][ T650] RIP: 0033:0x7f4ef6f9de99 [ 35.315241][ T650] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 35.322287][ T650] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.330767][ T650] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 35.338799][ T650] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.346833][ T650] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 35.354846][ T650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.362846][ T650] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 35.370900][ T650] [ 35.373979][ T650] ---[ end trace 0000000000000000 ]--- [ 35.562732][ T765] ------------[ cut here ]------------ [ 35.568291][ T765] WARNING: CPU: 1 PID: 765 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 35.578349][ T765] Modules linked in: [ 35.582284][ T765] CPU: 1 PID: 765 Comm: syz.6.130 Tainted: G B W syzkaller #0 [ 35.591092][ T765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 35.601387][ T765] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 35.607790][ T765] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 35.627462][ T765] RSP: 0018:ffffc90001837b90 EFLAGS: 00010293 [ 35.633618][ T765] RAX: ffffffff849bb307 RBX: ffff88812004a000 RCX: ffff888120040000 [ 35.641633][ T765] RDX: 0000000000000000 RSI: 000000001fdbfde0 RDI: 000000000c04eb7d [ 35.649679][ T765] RBP: ffffc90001837bb0 R08: ffff88812004a083 R09: 1ffff11024009410 [ 35.657746][ T765] R10: dffffc0000000000 R11: ffffed1024009411 R12: dffffc0000000000 [ 35.665783][ T765] R13: dffffc0000000000 R14: 000000001fdbfde0 R15: ffff88811fcb0c00 [ 35.673816][ T765] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.682786][ T765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.689451][ T765] CR2: 00007f9e7f025fac CR3: 000000000700f000 CR4: 00000000003506a0 [ 35.697487][ T765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.705539][ T765] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.713579][ T765] Call Trace: [ 35.716883][ T765] [ 35.719862][ T765] pppol2tp_release+0x150/0x2b0 [ 35.724785][ T765] sock_close+0xc9/0x220 [ 35.729063][ T765] ? __cfi_sock_close+0x10/0x10 [ 35.733985][ T765] __fput+0x1fd/0x8f0 [ 35.738009][ T765] ____fput+0x15/0x20 [ 35.742033][ T765] task_work_run+0x1e1/0x250 [ 35.746773][ T765] ? __cfi_task_work_run+0x10/0x10 [ 35.751929][ T765] ? free_nsproxy+0x21f/0x270 [ 35.756683][ T765] do_exit+0xaf2/0x2850 [ 35.760886][ T765] ? __cfi_do_exit+0x10/0x10 [ 35.765558][ T765] ? xfd_validate_state+0x70/0x150 [ 35.770699][ T765] ? __kasan_check_write+0x14/0x20 [ 35.776255][ T765] __x64_sys_exit+0x40/0x40 [ 35.780801][ T765] x64_sys_call+0x67/0x9a0 [ 35.785300][ T765] do_syscall_64+0x4c/0xa0 [ 35.789748][ T765] ? clear_bhb_loop+0x30/0x80 [ 35.794588][ T765] ? clear_bhb_loop+0x30/0x80 [ 35.799302][ T765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.805363][ T765] RIP: 0033:0x7f4ef6f9de99 [ 35.809810][ T765] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 35.816885][ T765] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 35.825389][ T765] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 35.833429][ T765] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.841426][ T765] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 35.849456][ T765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.857467][ T765] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 35.865541][ T765] [ 35.868582][ T765] ---[ end trace 0000000000000000 ]--- [ 36.028205][ T887] ------------[ cut here ]------------ [ 36.033763][ T887] WARNING: CPU: 0 PID: 887 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.043817][ T887] Modules linked in: [ 36.047739][ T887] CPU: 0 PID: 887 Comm: syz.2.177 Tainted: G B W syzkaller #0 [ 36.056487][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.066597][ T887] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.072977][ T887] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 36.092639][ T887] RSP: 0018:ffffc90001ca7b90 EFLAGS: 00010293 [ 36.098766][ T887] RAX: ffffffff849bb307 RBX: ffff8881088ec000 RCX: ffff888109180000 [ 36.106790][ T887] RDX: 0000000000000000 RSI: 000000001c76b500 RDI: 000000000c04eb7d [ 36.114827][ T887] RBP: ffffc90001ca7bb0 R08: ffff8881088ec083 R09: 1ffff1102111d810 [ 36.122823][ T887] R10: dffffc0000000000 R11: ffffed102111d811 R12: dffffc0000000000 [ 36.130851][ T887] R13: dffffc0000000000 R14: 000000001c76b500 R15: ffff88810b831000 [ 36.138893][ T887] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.147866][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.154514][ T887] CR2: 00007f1bb0827dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 36.162513][ T887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.170534][ T887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.178575][ T887] Call Trace: [ 36.181871][ T887] [ 36.184845][ T887] pppol2tp_release+0x150/0x2b0 [ 36.189734][ T887] sock_close+0xc9/0x220 [ 36.194068][ T887] ? __cfi_sock_close+0x10/0x10 [ 36.198950][ T887] __fput+0x1fd/0x8f0 [ 36.203029][ T887] ____fput+0x15/0x20 [ 36.207058][ T887] task_work_run+0x1e1/0x250 [ 36.211675][ T887] ? __cfi_task_work_run+0x10/0x10 [ 36.216876][ T887] ? free_nsproxy+0x21f/0x270 [ 36.221592][ T887] do_exit+0xaf2/0x2850 [ 36.225816][ T887] ? __cfi_do_exit+0x10/0x10 [ 36.230462][ T887] ? xfd_validate_state+0x70/0x150 [ 36.235645][ T887] ? __kasan_check_write+0x14/0x20 [ 36.240782][ T887] __x64_sys_exit+0x40/0x40 [ 36.245352][ T887] x64_sys_call+0x67/0x9a0 [ 36.249828][ T887] do_syscall_64+0x4c/0xa0 [ 36.254301][ T887] ? clear_bhb_loop+0x30/0x80 [ 36.259005][ T887] ? clear_bhb_loop+0x30/0x80 [ 36.263731][ T887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.269660][ T887] RIP: 0033:0x7fe506b9de99 [ 36.274159][ T887] Code: Unable to access opcode bytes at 0x7fe506b9de6f. [ 36.281193][ T887] RSP: 002b:00007fe507a42ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.289835][ T887] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe506b9de99 [ 36.297843][ T887] RDX: 00007fe507a439c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.305871][ T887] RBP: 00007fe506c33eaf R08: 0000000000000000 R09: 0000000000000058 [ 36.313880][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.321873][ T887] R13: 00007fe506e26038 R14: 00007fe506e25fa0 R15: 00007ffc40bcee88 [ 36.329904][ T887] [ 36.332937][ T887] ---[ end trace 0000000000000000 ]--- [ 36.456936][ T988] ------------[ cut here ]------------ [ 36.462520][ T988] WARNING: CPU: 1 PID: 988 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.472641][ T988] Modules linked in: [ 36.476749][ T988] CPU: 1 PID: 988 Comm: syz.2.204 Tainted: G B W syzkaller #0 [ 36.485562][ T988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.495815][ T988] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.502182][ T988] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 36.503073][ T986] ------------[ cut here ]------------ [ 36.522892][ T988] RSP: 0018:ffffc90002017b90 EFLAGS: 00010293 [ 36.527531][ T986] WARNING: CPU: 0 PID: 986 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 36.527569][ T986] Modules linked in: [ 36.527580][ T986] CPU: 0 PID: 986 Comm: syz.5.206 Tainted: G B W syzkaller #0 [ 36.527611][ T986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.527621][ T986] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 36.527645][ T986] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 36.533992][ T988] [ 36.543701][ T986] RSP: 0018:ffffc90001f0fb90 EFLAGS: 00010293 [ 36.543720][ T986] RAX: ffffffff849bb307 RBX: ffff88810e4a3000 RCX: ffff88810fe6bcc0 [ 36.543734][ T986] RDX: 0000000000000000 RSI: 000000001c775000 RDI: 000000000c04eb7d [ 36.543746][ T986] RBP: ffffc90001f0fbb0 R08: ffff88810e4a3083 R09: 1ffff11021c94610 [ 36.543760][ T986] R10: dffffc0000000000 R11: ffffed1021c94611 R12: dffffc0000000000 [ 36.547940][ T988] RAX: ffffffff849bb307 RBX: ffff88810e4a6000 RCX: ffff888122745100 [ 36.556342][ T986] R13: dffffc0000000000 R14: 000000001c775000 R15: ffff88812129b400 [ 36.556358][ T986] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.556373][ T986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.556385][ T986] CR2: 0000560bc0827a40 CR3: 000000000700f000 CR4: 00000000003506b0 [ 36.566784][ T988] RDX: 0000000000000000 RSI: 000000001d9cf1c0 RDI: 000000000c04eb7d [ 36.572791][ T986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.572804][ T986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.572814][ T986] Call Trace: [ 36.572818][ T986] [ 36.572841][ T986] pppol2tp_release+0x150/0x2b0 [ 36.572865][ T986] sock_close+0xc9/0x220 [ 36.572891][ T986] ? __cfi_sock_close+0x10/0x10 [ 36.572917][ T986] __fput+0x1fd/0x8f0 [ 36.592832][ T988] RBP: ffffc90002017bb0 R08: ffff88810e4a6083 R09: 1ffff11021c94c10 [ 36.594916][ T986] ____fput+0x15/0x20 [ 36.594942][ T986] task_work_run+0x1e1/0x250 [ 36.594966][ T986] ? __cfi_task_work_run+0x10/0x10 [ 36.594989][ T986] ? free_nsproxy+0x21f/0x270 [ 36.595022][ T986] do_exit+0xaf2/0x2850 [ 36.595050][ T986] ? __cfi_do_exit+0x10/0x10 [ 36.595076][ T986] ? xfd_validate_state+0x70/0x150 [ 36.595104][ T986] ? __kasan_check_write+0x14/0x20 [ 36.595125][ T986] __x64_sys_exit+0x40/0x40 [ 36.595153][ T986] x64_sys_call+0x67/0x9a0 [ 36.601217][ T988] R10: dffffc0000000000 R11: ffffed1021c94c11 R12: dffffc0000000000 [ 36.609216][ T986] do_syscall_64+0x4c/0xa0 [ 36.609243][ T986] ? clear_bhb_loop+0x30/0x80 [ 36.609258][ T986] ? clear_bhb_loop+0x30/0x80 [ 36.609273][ T986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.609301][ T986] RIP: 0033:0x7f1bb059de99 [ 36.609315][ T986] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 36.609324][ T986] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 36.609342][ T986] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 36.609356][ T986] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.609368][ T986] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 36.609381][ T986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.609392][ T986] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 36.609409][ T986] [ 36.609415][ T986] ---[ end trace 0000000000000000 ]--- [ 36.872353][ T988] R13: dffffc0000000000 R14: 000000001d9cf1c0 R15: ffff888121299c00 [ 36.880407][ T988] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.889382][ T988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.896026][ T988] CR2: 00007f1bb13a0d58 CR3: 000000000700f000 CR4: 00000000003506a0 [ 36.904072][ T988] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.912063][ T988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.920335][ T988] Call Trace: [ 36.923868][ T988] [ 36.926830][ T988] pppol2tp_release+0x150/0x2b0 [ 36.931716][ T988] sock_close+0xc9/0x220 [ 36.936028][ T988] ? __cfi_sock_close+0x10/0x10 [ 36.940927][ T988] __fput+0x1fd/0x8f0 [ 36.944984][ T988] ____fput+0x15/0x20 [ 36.948997][ T988] task_work_run+0x1e1/0x250 [ 36.953657][ T988] ? __cfi_task_work_run+0x10/0x10 [ 36.958806][ T988] ? free_nsproxy+0x21f/0x270 [ 36.963569][ T988] do_exit+0xaf2/0x2850 [ 36.967767][ T988] ? __cfi_do_exit+0x10/0x10 [ 36.975276][ T988] ? xfd_validate_state+0x70/0x150 [ 36.980432][ T988] ? __kasan_check_write+0x14/0x20 [ 36.985613][ T988] __x64_sys_exit+0x40/0x40 [ 36.990158][ T988] x64_sys_call+0x67/0x9a0 [ 36.994942][ T988] do_syscall_64+0x4c/0xa0 [ 36.999413][ T988] ? clear_bhb_loop+0x30/0x80 [ 37.004192][ T988] ? clear_bhb_loop+0x30/0x80 [ 37.008908][ T988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.014876][ T988] RIP: 0033:0x7fe506b9de99 [ 37.019315][ T988] Code: Unable to access opcode bytes at 0x7fe506b9de6f. [ 37.026392][ T988] RSP: 002b:00007fe507a42ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.034866][ T988] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe506b9de99 [ 37.042862][ T988] RDX: 00007fe507a439c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.050883][ T988] RBP: 00007fe506c33eaf R08: 0000000000000000 R09: 0000000000000058 [ 37.058935][ T988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.066963][ T988] R13: 00007fe506e26038 R14: 00007fe506e25fa0 R15: 00007ffc40bcee88 [ 37.074985][ T988] [ 37.078033][ T988] ---[ end trace 0000000000000000 ]--- [ 37.281635][ T1057] ------------[ cut here ]------------ [ 37.287169][ T1057] WARNING: CPU: 0 PID: 1057 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.297362][ T1057] Modules linked in: [ 37.301282][ T1057] CPU: 0 PID: 1057 Comm: syz.5.230 Tainted: G B W syzkaller #0 [ 37.310200][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.320511][ T1057] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.327002][ T1057] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 37.346680][ T1057] RSP: 0018:ffffc90002077b90 EFLAGS: 00010293 [ 37.352768][ T1057] RAX: ffffffff849bb307 RBX: ffff88811381b000 RCX: ffff8881181d5100 [ 37.360834][ T1057] RDX: 0000000000000000 RSI: 0000000010181c00 RDI: 000000000c04eb7d [ 37.368986][ T1057] RBP: ffffc90002077bb0 R08: ffff88811381b083 R09: 1ffff11022703610 [ 37.377033][ T1057] R10: dffffc0000000000 R11: ffffed1022703611 R12: dffffc0000000000 [ 37.385032][ T1057] R13: dffffc0000000000 R14: 0000000010181c00 R15: ffff88810d48b800 [ 37.393023][ T1057] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.402516][ T1057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.409381][ T1057] CR2: 00007f1bb13556b8 CR3: 0000000123861000 CR4: 00000000003506b0 [ 37.417460][ T1057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.425593][ T1057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.433623][ T1057] Call Trace: [ 37.436935][ T1057] [ 37.439886][ T1057] pppol2tp_release+0x150/0x2b0 [ 37.444784][ T1057] sock_close+0xc9/0x220 [ 37.449054][ T1057] ? __cfi_sock_close+0x10/0x10 [ 37.453961][ T1057] __fput+0x1fd/0x8f0 [ 37.457979][ T1057] ____fput+0x15/0x20 [ 37.461985][ T1057] task_work_run+0x1e1/0x250 [ 37.466651][ T1057] ? __cfi_task_work_run+0x10/0x10 [ 37.471784][ T1057] ? free_nsproxy+0x21f/0x270 [ 37.476656][ T1057] do_exit+0xaf2/0x2850 [ 37.480865][ T1057] ? __cfi_do_exit+0x10/0x10 [ 37.485678][ T1057] ? xfd_validate_state+0x70/0x150 [ 37.490814][ T1057] ? __kasan_check_write+0x14/0x20 [ 37.495996][ T1057] __x64_sys_exit+0x40/0x40 [ 37.500531][ T1057] x64_sys_call+0x67/0x9a0 [ 37.504998][ T1057] do_syscall_64+0x4c/0xa0 [ 37.509440][ T1057] ? clear_bhb_loop+0x30/0x80 [ 37.514156][ T1057] ? clear_bhb_loop+0x30/0x80 [ 37.518851][ T1057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.524812][ T1057] RIP: 0033:0x7f1bb059de99 [ 37.529245][ T1057] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 37.536335][ T1057] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.544793][ T1057] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 37.552783][ T1057] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.561163][ T1057] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 37.569368][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.577405][ T1057] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 37.585423][ T1057] [ 37.588465][ T1057] ---[ end trace 0000000000000000 ]--- [ 37.695504][ T1160] ------------[ cut here ]------------ [ 37.701032][ T1160] WARNING: CPU: 1 PID: 1160 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 37.711187][ T1160] Modules linked in: [ 37.715297][ T1160] CPU: 1 PID: 1160 Comm: syz.5.258 Tainted: G B W syzkaller #0 [ 37.724201][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.734354][ T1160] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 37.740717][ T1160] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 37.760504][ T1160] RSP: 0018:ffffc90002097b90 EFLAGS: 00010293 [ 37.766617][ T1160] RAX: ffffffff849bb307 RBX: ffff888115698000 RCX: ffff88812f5e2880 [ 37.774643][ T1160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d [ 37.782656][ T1160] RBP: ffffc90002097bb0 R08: ffff888115698083 R09: 1ffff11022ad3010 [ 37.790672][ T1160] R10: dffffc0000000000 R11: ffffed1022ad3011 R12: dffffc0000000000 [ 37.798706][ T1160] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811025b400 [ 37.806760][ T1160] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.815821][ T1160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.822428][ T1160] CR2: 00007f1bb08220c0 CR3: 000000000700f000 CR4: 00000000003506a0 [ 37.830445][ T1160] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.838458][ T1160] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.846481][ T1160] Call Trace: [ 37.849766][ T1160] [ 37.852716][ T1160] pppol2tp_release+0x150/0x2b0 [ 37.857651][ T1160] sock_close+0xc9/0x220 [ 37.861930][ T1160] ? __cfi_sock_close+0x10/0x10 [ 37.866888][ T1160] __fput+0x1fd/0x8f0 [ 37.870923][ T1160] ____fput+0x15/0x20 [ 37.875240][ T1160] task_work_run+0x1e1/0x250 [ 37.879878][ T1160] ? __cfi_task_work_run+0x10/0x10 [ 37.885055][ T1160] ? free_nsproxy+0x21f/0x270 [ 37.889780][ T1160] do_exit+0xaf2/0x2850 [ 37.893999][ T1160] ? __cfi_do_exit+0x10/0x10 [ 37.898624][ T1160] ? xfd_validate_state+0x70/0x150 [ 37.903798][ T1160] ? __kasan_check_write+0x14/0x20 [ 37.908955][ T1160] __x64_sys_exit+0x40/0x40 [ 37.913578][ T1160] x64_sys_call+0x67/0x9a0 [ 37.918024][ T1160] do_syscall_64+0x4c/0xa0 [ 37.922484][ T1160] ? clear_bhb_loop+0x30/0x80 [ 37.927224][ T1160] ? clear_bhb_loop+0x30/0x80 [ 37.931925][ T1160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.937895][ T1160] RIP: 0033:0x7f1bb059de99 [ 37.942322][ T1160] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 37.949388][ T1160] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 37.957863][ T1160] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 37.965884][ T1160] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.973902][ T1160] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 37.983480][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.991481][ T1160] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 37.999525][ T1160] [ 38.002570][ T1160] ---[ end trace 0000000000000000 ]--- [ 38.053318][ T1234] ------------[ cut here ]------------ [ 38.058972][ T1234] WARNING: CPU: 0 PID: 1234 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.069233][ T1234] Modules linked in: [ 38.073413][ T1234] CPU: 0 PID: 1234 Comm: syz.5.287 Tainted: G B W syzkaller #0 [ 38.082555][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.092719][ T1234] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.099113][ T1234] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 38.118766][ T1234] RSP: 0018:ffffc90002907b90 EFLAGS: 00010293 [ 38.124895][ T1234] RAX: ffffffff849bb307 RBX: ffff888114f9a000 RCX: ffff888117459440 [ 38.132880][ T1234] RDX: 0000000000000000 RSI: 000000000e205428 RDI: 000000000c04eb7d [ 38.140960][ T1234] RBP: ffffc90002907bb0 R08: ffff888114f9a083 R09: 1ffff110229f3410 [ 38.148977][ T1234] R10: dffffc0000000000 R11: ffffed10229f3411 R12: dffffc0000000000 [ 38.157106][ T1234] R13: dffffc0000000000 R14: 000000000e205428 R15: ffff88812cacf000 [ 38.165138][ T1234] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.174113][ T1234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.180716][ T1234] CR2: 0000001b34263fff CR3: 000000000700f000 CR4: 00000000003506b0 [ 38.188726][ T1234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.196746][ T1234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.204758][ T1234] Call Trace: [ 38.208059][ T1234] [ 38.211017][ T1234] pppol2tp_release+0x150/0x2b0 [ 38.215948][ T1234] sock_close+0xc9/0x220 [ 38.220227][ T1234] ? __cfi_sock_close+0x10/0x10 [ 38.225137][ T1234] __fput+0x1fd/0x8f0 [ 38.229147][ T1234] ____fput+0x15/0x20 [ 38.233173][ T1234] task_work_run+0x1e1/0x250 [ 38.237785][ T1234] ? __cfi_task_work_run+0x10/0x10 [ 38.242949][ T1234] ? free_nsproxy+0x21f/0x270 [ 38.247691][ T1234] do_exit+0xaf2/0x2850 [ 38.251916][ T1234] ? __cfi_do_exit+0x10/0x10 [ 38.256587][ T1234] ? xfd_validate_state+0x70/0x150 [ 38.261728][ T1234] ? __kasan_check_write+0x14/0x20 [ 38.266922][ T1234] __x64_sys_exit+0x40/0x40 [ 38.271459][ T1234] x64_sys_call+0x67/0x9a0 [ 38.275926][ T1234] do_syscall_64+0x4c/0xa0 [ 38.280374][ T1234] ? clear_bhb_loop+0x30/0x80 [ 38.285120][ T1234] ? clear_bhb_loop+0x30/0x80 [ 38.289828][ T1234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.295797][ T1234] RIP: 0033:0x7f1bb059de99 [ 38.300251][ T1234] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 38.307320][ T1234] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.315785][ T1234] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 38.323833][ T1234] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.332181][ T1234] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 38.340228][ T1234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.348250][ T1234] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 38.356282][ T1234] [ 38.359321][ T1234] ---[ end trace 0000000000000000 ]--- [ 38.397671][ T1289] ------------[ cut here ]------------ [ 38.403266][ T1289] WARNING: CPU: 1 PID: 1289 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.413530][ T1289] Modules linked in: [ 38.417453][ T1289] CPU: 1 PID: 1289 Comm: syz.1.307 Tainted: G B W syzkaller #0 [ 38.426254][ T1289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.436393][ T1289] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.442751][ T1289] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 38.462412][ T1289] RSP: 0018:ffffc90002a17b90 EFLAGS: 00010293 [ 38.468627][ T1289] RAX: ffffffff849bb307 RBX: ffff88811793f000 RCX: ffff88812e162880 [ 38.476766][ T1289] RDX: 0000000000000000 RSI: 0000000030d1b300 RDI: 000000000c04eb7d [ 38.484807][ T1289] RBP: ffffc90002a17bb0 R08: ffff88811793f083 R09: 1ffff11022f27e10 [ 38.492819][ T1289] R10: dffffc0000000000 R11: ffffed1022f27e11 R12: dffffc0000000000 [ 38.497086][ T1299] ------------[ cut here ]------------ [ 38.500904][ T1289] R13: dffffc0000000000 R14: 0000000030d1b300 R15: ffff88812c4c8000 [ 38.506469][ T1299] WARNING: CPU: 0 PID: 1299 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 38.514492][ T1289] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.524379][ T1299] Modules linked in: [ 38.533321][ T1289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.533338][ T1289] CR2: 00007fe507a42ff8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 38.537224][ T1299] [ 38.537234][ T1299] CPU: 0 PID: 1299 Comm: syz.6.311 Tainted: G B W syzkaller #0 [ 38.543827][ T1289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.551805][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.554128][ T1289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.562897][ T1299] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 38.570858][ T1289] Call Trace: [ 38.570865][ T1289] [ 38.580944][ T1299] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 38.588930][ T1289] pppol2tp_release+0x150/0x2b0 [ 38.595290][ T1299] RSP: 0018:ffffc90002abfb90 EFLAGS: 00010293 [ 38.598560][ T1289] sock_close+0xc9/0x220 [ 38.601486][ T1299] [ 38.601492][ T1299] RAX: ffffffff849bb307 RBX: ffff8881177fb000 RCX: ffff888118085100 [ 38.621257][ T1289] ? __cfi_sock_close+0x10/0x10 [ 38.625993][ T1299] RDX: 0000000000000000 RSI: 000000002c4c8000 RDI: 000000000c04eb7d [ 38.632091][ T1289] __fput+0x1fd/0x8f0 [ 38.636337][ T1299] RBP: ffffc90002abfbb0 R08: ffff8881177fb083 R09: 1ffff11022eff610 [ 38.638651][ T1289] ____fput+0x15/0x20 [ 38.646631][ T1299] R10: dffffc0000000000 R11: ffffed1022eff611 R12: dffffc0000000000 [ 38.646649][ T1299] R13: dffffc0000000000 R14: 000000002c4c8000 R15: ffff888112f53400 [ 38.651491][ T1289] task_work_run+0x1e1/0x250 [ 38.659651][ T1299] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.663480][ T1289] ? __cfi_task_work_run+0x10/0x10 [ 38.671486][ T1299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.675546][ T1289] ? free_nsproxy+0x21f/0x270 [ 38.683514][ T1299] CR2: 00007f1bb1358060 CR3: 0000000122f78000 CR4: 00000000003506b0 [ 38.691481][ T1289] do_exit+0xaf2/0x2850 [ 38.696087][ T1299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.705062][ T1289] ? __cfi_do_exit+0x10/0x10 [ 38.710126][ T1299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.716721][ T1289] ? xfd_validate_state+0x70/0x150 [ 38.721395][ T1299] Call Trace: [ 38.721403][ T1299] [ 38.729470][ T1289] ? __kasan_check_write+0x14/0x20 [ 38.733636][ T1299] pppol2tp_release+0x150/0x2b0 [ 38.741612][ T1289] __x64_sys_exit+0x40/0x40 [ 38.746231][ T1299] sock_close+0xc9/0x220 [ 38.754213][ T1289] x64_sys_call+0x67/0x9a0 [ 38.759337][ T1299] ? __cfi_sock_close+0x10/0x10 [ 38.762616][ T1289] do_syscall_64+0x4c/0xa0 [ 38.765566][ T1299] __fput+0x1fd/0x8f0 [ 38.765593][ T1299] ____fput+0x15/0x20 [ 38.765615][ T1299] task_work_run+0x1e1/0x250 [ 38.770724][ T1289] ? clear_bhb_loop+0x30/0x80 [ 38.775583][ T1299] ? __cfi_task_work_run+0x10/0x10 [ 38.780083][ T1289] ? clear_bhb_loop+0x30/0x80 [ 38.784435][ T1299] ? free_nsproxy+0x21f/0x270 [ 38.788852][ T1289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.793730][ T1299] do_exit+0xaf2/0x2850 [ 38.798153][ T1289] RIP: 0033:0x7f8d5c99de99 [ 38.802133][ T1299] ? __cfi_do_exit+0x10/0x10 [ 38.806129][ T1289] Code: Unable to access opcode bytes at 0x7f8d5c99de6f. [ 38.806138][ T1289] RSP: 002b:00007f8d5c7feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.806157][ T1289] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8d5c99de99 [ 38.806180][ T1289] RDX: 00007f8d5c7ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.810760][ T1299] ? xfd_validate_state+0x70/0x150 [ 38.815447][ T1289] RBP: 00007f8d5ca33eaf R08: 0000000000000000 R09: 0000000000000058 [ 38.820551][ T1299] ? __kasan_check_write+0x14/0x20 [ 38.825248][ T1289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.829919][ T1299] __x64_sys_exit+0x40/0x40 [ 38.835804][ T1289] R13: 00007f8d5cc26038 R14: 00007f8d5cc25fa0 R15: 00007ffcbf44d668 [ 38.835828][ T1289] [ 38.839951][ T1299] x64_sys_call+0x67/0x9a0 [ 38.844366][ T1289] ---[ end trace 0000000000000000 ]--- [ 38.932043][ T1299] do_syscall_64+0x4c/0xa0 [ 38.936531][ T1299] ? clear_bhb_loop+0x30/0x80 [ 38.941231][ T1299] ? clear_bhb_loop+0x30/0x80 [ 38.945964][ T1299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.951886][ T1299] RIP: 0033:0x7f4ef6f9de99 [ 38.956364][ T1299] Code: Unable to access opcode bytes at 0x7f4ef6f9de6f. [ 38.963405][ T1299] RSP: 002b:00007f4ef7ecdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 38.971838][ T1299] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ef6f9de99 [ 38.979859][ T1299] RDX: 00007f4ef7ece9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.987876][ T1299] RBP: 00007f4ef7033eaf R08: 0000000000000000 R09: 0000000000000058 [ 38.995912][ T1299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.003933][ T1299] R13: 00007f4ef7226038 R14: 00007f4ef7225fa0 R15: 00007ffca62c5548 [ 39.011953][ T1299] [ 39.015047][ T1299] ---[ end trace 0000000000000000 ]--- [ 39.133869][ T1348] ------------[ cut here ]------------ [ 39.139468][ T1348] WARNING: CPU: 1 PID: 1348 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.149674][ T1348] Modules linked in: [ 39.153712][ T1348] CPU: 1 PID: 1348 Comm: syz.0.327 Tainted: G B W syzkaller #0 [ 39.162523][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.172661][ T1348] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.179065][ T1348] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 39.198761][ T1348] RSP: 0018:ffffc90002de7b90 EFLAGS: 00010293 [ 39.204895][ T1348] RAX: ffffffff849bb307 RBX: ffff888118b54000 RCX: ffff888118b7bcc0 [ 39.212888][ T1348] RDX: 0000000000000000 RSI: 00000000098aefc0 RDI: 000000000c04eb7d [ 39.220931][ T1348] RBP: ffffc90002de7bb0 R08: ffff888118b54083 R09: 1ffff1102316a810 [ 39.228966][ T1348] R10: dffffc0000000000 R11: ffffed102316a811 R12: dffffc0000000000 [ 39.237142][ T1348] R13: dffffc0000000000 R14: 00000000098aefc0 R15: ffff888110c03000 [ 39.245271][ T1348] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 39.254267][ T1348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.260888][ T1348] CR2: 00007fe506e27dac CR3: 000000012d03d000 CR4: 00000000003506a0 [ 39.268934][ T1348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.276958][ T1348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.284992][ T1348] Call Trace: [ 39.288322][ T1348] [ 39.291277][ T1348] pppol2tp_release+0x150/0x2b0 [ 39.296185][ T1348] sock_close+0xc9/0x220 [ 39.300460][ T1348] ? __cfi_sock_close+0x10/0x10 [ 39.305383][ T1348] __fput+0x1fd/0x8f0 [ 39.309397][ T1348] ____fput+0x15/0x20 [ 39.313612][ T1348] task_work_run+0x1e1/0x250 [ 39.318252][ T1348] ? __cfi_task_work_run+0x10/0x10 [ 39.323527][ T1348] ? free_nsproxy+0x21f/0x270 [ 39.328242][ T1348] do_exit+0xaf2/0x2850 2026/07/29 03:21:49 executed programs: 356 [ 39.332437][ T1348] ? __cfi_do_exit+0x10/0x10 [ 39.337077][ T1348] ? xfd_validate_state+0x70/0x150 [ 39.342208][ T1348] ? __kasan_check_write+0x14/0x20 [ 39.347382][ T1348] __x64_sys_exit+0x40/0x40 [ 39.351914][ T1348] x64_sys_call+0x67/0x9a0 [ 39.356390][ T1348] do_syscall_64+0x4c/0xa0 [ 39.360829][ T1348] ? clear_bhb_loop+0x30/0x80 [ 39.365581][ T1348] ? clear_bhb_loop+0x30/0x80 [ 39.370315][ T1348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.376290][ T1348] RIP: 0033:0x7f9e7ed9de99 [ 39.380736][ T1348] Code: Unable to access opcode bytes at 0x7f9e7ed9de6f. [ 39.387982][ T1348] RSP: 002b:00007f9e7fcf8ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 39.396635][ T1348] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9e7ed9de99 [ 39.404734][ T1348] RDX: 00007f9e7fcf99c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.412731][ T1348] RBP: 00007f9e7ee33eaf R08: 0000000000000000 R09: 0000000000000058 [ 39.420766][ T1348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.428794][ T1348] R13: 00007f9e7f026038 R14: 00007f9e7f025fa0 R15: 00007fff6dd8d9d8 [ 39.436832][ T1348] [ 39.439879][ T1348] ---[ end trace 0000000000000000 ]--- [ 39.547801][ T1449] ------------[ cut here ]------------ [ 39.553700][ T1449] WARNING: CPU: 0 PID: 1449 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.564078][ T1449] Modules linked in: [ 39.568010][ T1449] CPU: 0 PID: 1449 Comm: syz.5.361 Tainted: G B W syzkaller #0 [ 39.576898][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.587094][ T1449] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.593722][ T1449] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 39.613451][ T1449] RSP: 0018:ffffc90002e7fb90 EFLAGS: 00010293 [ 39.619549][ T1449] RAX: ffffffff849bb307 RBX: ffff888119eeb000 RCX: ffff888122fc2880 [ 39.627666][ T1449] RDX: 0000000000000000 RSI: 000000002def3800 RDI: 000000000c04eb7d [ 39.636101][ T1449] RBP: ffffc90002e7fbb0 R08: ffff888119eeb083 R09: 1ffff110233dd610 [ 39.644419][ T1449] R10: dffffc0000000000 R11: ffffed10233dd611 R12: dffffc0000000000 [ 39.652423][ T1449] R13: dffffc0000000000 R14: 000000002def3800 R15: ffff888110c1d000 [ 39.660534][ T1449] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.669574][ T1449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.676270][ T1449] CR2: 00007f9e7fb58060 CR3: 000000012ed3c000 CR4: 00000000003506b0 [ 39.684372][ T1449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.692356][ T1449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.700433][ T1449] Call Trace: [ 39.703806][ T1449] [ 39.706751][ T1449] pppol2tp_release+0x150/0x2b0 [ 39.711634][ T1449] sock_close+0xc9/0x220 [ 39.716289][ T1449] ? __cfi_sock_close+0x10/0x10 [ 39.721196][ T1449] __fput+0x1fd/0x8f0 [ 39.725428][ T1449] ____fput+0x15/0x20 [ 39.729447][ T1449] task_work_run+0x1e1/0x250 [ 39.734160][ T1449] ? __cfi_task_work_run+0x10/0x10 [ 39.739305][ T1449] ? free_nsproxy+0x21f/0x270 [ 39.744065][ T1449] do_exit+0xaf2/0x2850 [ 39.748272][ T1449] ? __cfi_do_exit+0x10/0x10 [ 39.752894][ T1449] ? xfd_validate_state+0x70/0x150 [ 39.758082][ T1449] ? __kasan_check_write+0x14/0x20 [ 39.763249][ T1449] __x64_sys_exit+0x40/0x40 [ 39.767786][ T1449] x64_sys_call+0x67/0x9a0 [ 39.772232][ T1449] do_syscall_64+0x4c/0xa0 [ 39.776709][ T1449] ? clear_bhb_loop+0x30/0x80 [ 39.781408][ T1449] ? clear_bhb_loop+0x30/0x80 [ 39.786146][ T1449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.792069][ T1449] RIP: 0033:0x7f1bb059de99 [ 39.796884][ T1449] Code: Unable to access opcode bytes at 0x7f1bb059de6f. [ 39.804139][ T1449] RSP: 002b:00007f1bb139fef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 39.812581][ T1449] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1bb059de99 [ 39.820602][ T1449] RDX: 00007f1bb13a09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.828616][ T1449] RBP: 00007f1bb0633eaf R08: 0000000000000000 R09: 0000000000000058 [ 39.836638][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.844649][ T1449] R13: 00007f1bb0826038 R14: 00007f1bb0825fa0 R15: 00007ffc27225ab8 [ 39.852656][ T1449] [ 39.855718][ T1449] ---[ end trace 0000000000000000 ]--- [ 39.867642][ T1452] ------------[ cut here ]------------ [ 39.873306][ T1452] WARNING: CPU: 0 PID: 1452 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 39.883555][ T1452] Modules linked in: [ 39.887470][ T1452] CPU: 0 PID: 1452 Comm: syz.0.362 Tainted: G B W syzkaller #0 [ 39.896344][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.906502][ T1452] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 39.912889][ T1452] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 39.932628][ T1452] RSP: 0018:ffffc90002d47b90 EFLAGS: 00010293 [ 39.938804][ T1452] RAX: ffffffff849bb307 RBX: ffff88811a0dc000 RCX: ffff888122fc5100 [ 39.946883][ T1452] RDX: 0000000000000000 RSI: 000000002d0a9940 RDI: 000000000c04eb7d [ 39.955009][ T1452] RBP: ffffc90002d47bb0 R08: ffff88811a0dc083 R09: 1ffff1102341b810 [ 39.963008][ T1452] R10: dffffc0000000000 R11: ffffed102341b811 R12: dffffc0000000000 [ 39.971117][ T1452] R13: dffffc0000000000 R14: 000000002d0a9940 R15: ffff88812def3800 [ 39.979207][ T1452] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.988244][ T1452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.994978][ T1452] CR2: 00007fe506e27dac CR3: 00000001303e3000 CR4: 00000000003506b0 [ 40.002981][ T1452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.011060][ T1452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.019182][ T1452] Call Trace: [ 40.022478][ T1452] [ 40.025473][ T1452] pppol2tp_release+0x150/0x2b0 [ 40.030358][ T1452] sock_close+0xc9/0x220 [ 40.034662][ T1452] ? __cfi_sock_close+0x10/0x10 [ 40.039549][ T1452] __fput+0x1fd/0x8f0 [ 40.043575][ T1452] ____fput+0x15/0x20 [ 40.047591][ T1452] task_work_run+0x1e1/0x250 [ 40.052211][ T1452] ? __cfi_task_work_run+0x10/0x10 [ 40.057394][ T1452] ? free_nsproxy+0x21f/0x270 [ 40.062108][ T1452] do_exit+0xaf2/0x2850 [ 40.066347][ T1452] ? __cfi_do_exit+0x10/0x10 [ 40.070969][ T1452] ? xfd_validate_state+0x70/0x150 [ 40.076153][ T1452] ? __kasan_check_write+0x14/0x20 [ 40.081287][ T1452] __x64_sys_exit+0x40/0x40 [ 40.085876][ T1452] x64_sys_call+0x67/0x9a0 [ 40.090327][ T1452] do_syscall_64+0x4c/0xa0 [ 40.094793][ T1452] ? clear_bhb_loop+0x30/0x80 [ 40.099507][ T1452] ? clear_bhb_loop+0x30/0x80 [ 40.104247][ T1452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.110175][ T1452] RIP: 0033:0x7f9e7ed9de99 [ 40.114661][ T1452] Code: Unable to access opcode bytes at 0x7f9e7ed9de6f. [ 40.121696][ T1452] RSP: 002b:00007f9e7fcf8ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 40.130159][ T1452] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9e7ed9de99 [ 40.138179][ T1452] RDX: 00007f9e7fcf99c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.146204][ T1452] RBP: 00007f9e7ee33eaf R08: 0000000000000000 R09: 0000000000000058 [ 40.154214][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.162207][ T1452] R13: 00007f9e7f026038 R14: 00007f9e7f025fa0 R15: 00007fff6dd8d9d8 [ 40.170222][ T1452] [ 40.173272][ T1452] ---[ end trace 0000000000000000 ]--- [ 40.357720][ T1549] ------------[ cut here ]------------ [ 40.363317][ T1549] WARNING: CPU: 0 PID: 1549 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.373534][ T1549] Modules linked in: [ 40.377525][ T1549] CPU: 0 PID: 1549 Comm: syz.1.390 Tainted: G B W syzkaller #0 [ 40.386427][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.396625][ T1549] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.403243][ T1549] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 40.423027][ T1549] RSP: 0018:ffffc90003527b90 EFLAGS: 00010293 [ 40.429230][ T1549] RAX: ffffffff849bb307 RBX: ffff88811385a000 RCX: ffff88811bbf6540 [ 40.437511][ T1549] RDX: 0000000000000000 RSI: 000000001593bd40 RDI: 000000000c04eb7d [ 40.445762][ T1549] RBP: ffffc90003527bb0 R08: ffff88811385a083 R09: 1ffff1102270b410 [ 40.453791][ T1549] R10: dffffc0000000000 R11: ffffed102270b411 R12: dffffc0000000000 [ 40.461808][ T1549] R13: dffffc0000000000 R14: 000000001593bd40 R15: ffff888123637800 [ 40.469843][ T1549] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.478872][ T1549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.485518][ T1549] CR2: 00007fe506e27dac CR3: 000000000700f000 CR4: 00000000003506b0 [ 40.493558][ T1549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.501599][ T1549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.509644][ T1549] Call Trace: [ 40.512944][ T1549] [ 40.515930][ T1549] pppol2tp_release+0x150/0x2b0 [ 40.520827][ T1549] sock_close+0xc9/0x220 [ 40.525139][ T1549] ? __cfi_sock_close+0x10/0x10 [ 40.530031][ T1549] __fput+0x1fd/0x8f0 [ 40.534079][ T1549] ____fput+0x15/0x20 [ 40.538091][ T1549] task_work_run+0x1e1/0x250 [ 40.542712][ T1549] ? __cfi_task_work_run+0x10/0x10 [ 40.547870][ T1549] ? free_nsproxy+0x21f/0x270 [ 40.552578][ T1549] do_exit+0xaf2/0x2850 [ 40.556793][ T1549] ? __cfi_do_exit+0x10/0x10 [ 40.561413][ T1549] ? xfd_validate_state+0x70/0x150 [ 40.566605][ T1549] ? __kasan_check_write+0x14/0x20 [ 40.571739][ T1549] __x64_sys_exit+0x40/0x40 [ 40.576308][ T1549] x64_sys_call+0x67/0x9a0 [ 40.580751][ T1549] do_syscall_64+0x4c/0xa0 [ 40.585211][ T1549] ? clear_bhb_loop+0x30/0x80 [ 40.589914][ T1549] ? clear_bhb_loop+0x30/0x80 [ 40.594733][ T1549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.600675][ T1549] RIP: 0033:0x7f8d5c99de99 [ 40.605219][ T1549] Code: Unable to access opcode bytes at 0x7f8d5c99de6f. [ 40.612258][ T1549] RSP: 002b:00007f8d5c7feef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 40.620742][ T1549] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8d5c99de99 [ 40.628932][ T1549] RDX: 00007f8d5c7ff9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.636967][ T1549] RBP: 00007f8d5ca33eaf R08: 0000000000000000 R09: 0000000000000058 [ 40.645158][ T1549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.653208][ T1549] R13: 00007f8d5cc26038 R14: 00007f8d5cc25fa0 R15: 00007ffcbf44d668 [ 40.661211][ T1549] [ 40.664267][ T1549] ---[ end trace 0000000000000000 ]--- [ 40.854872][ T1674] ------------[ cut here ]------------ [ 40.860392][ T1674] WARNING: CPU: 0 PID: 1674 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 40.870592][ T1674] Modules linked in: [ 40.874601][ T1674] CPU: 0 PID: 1674 Comm: syz.2.431 Tainted: G B W syzkaller #0 [ 40.883515][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.893708][ T1674] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 40.900158][ T1674] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 40.919874][ T1674] RSP: 0018:ffffc90003847b90 EFLAGS: 00010293 [ 40.926095][ T1674] RAX: ffffffff849bb307 RBX: ffff888114297000 RCX: ffff88811d0a1440 [ 40.934296][ T1674] RDX: 0000000000000000 RSI: 0000000018118900 RDI: 000000000c04eb7d [ 40.942314][ T1674] RBP: ffffc90003847bb0 R08: ffff888114297083 R09: 1ffff11022852e10 [ 40.950372][ T1674] R10: dffffc0000000000 R11: ffffed1022852e11 R12: dffffc0000000000 [ 40.958402][ T1674] R13: dffffc0000000000 R14: 0000000018118900 R15: ffff88812ec59800 [ 40.966428][ T1674] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.975419][ T1674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.982073][ T1674] CR2: 00007f1bb0827dac CR3: 000000010f10b000 CR4: 00000000003506b0 [ 40.990143][ T1674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.998442][ T1674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.006468][ T1674] Call Trace: [ 41.009761][ T1674] [ 41.012707][ T1674] pppol2tp_release+0x150/0x2b0 [ 41.017629][ T1674] sock_close+0xc9/0x220 [ 41.021899][ T1674] ? __cfi_sock_close+0x10/0x10 [ 41.026802][ T1674] __fput+0x1fd/0x8f0 [ 41.030813][ T1674] ____fput+0x15/0x20 [ 41.034907][ T1674] task_work_run+0x1e1/0x250 [ 41.039524][ T1674] ? __cfi_task_work_run+0x10/0x10 [ 41.044694][ T1674] ? free_nsproxy+0x21f/0x270 [ 41.049422][ T1674] do_exit+0xaf2/0x2850 [ 41.053622][ T1674] ? __cfi_do_exit+0x10/0x10 [ 41.058245][ T1674] ? xfd_validate_state+0x70/0x150 [ 41.063409][ T1674] ? __kasan_check_write+0x14/0x20 [ 41.068541][ T1674] __x64_sys_exit+0x40/0x40 [ 41.073074][ T1674] x64_sys_call+0x67/0x9a0 [ 41.077543][ T1674] do_syscall_64+0x4c/0xa0 [ 41.081981][ T1674] ? clear_bhb_loop+0x30/0x80 [ 41.086701][ T1674] ? clear_bhb_loop+0x30/0x80 [ 41.091401][ T1674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.097356][ T1674] RIP: 0033:0x7fe506b9de99 [ 41.101790][ T1674] Code: Unable to access opcode bytes at 0x7fe506b9de6f. [ 41.108845][ T1674] RSP: 002b:00007fe507a42ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 41.117307][ T1674] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe506b9de99 [ 41.125338][ T1674] RDX: 00007fe507a439c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.133345][ T1674] RBP: 00007fe506c33eaf R08: 0000000000000000 R09: 0000000000000058 [ 41.141350][ T1674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.149372][ T1674] R13: 00007fe506e26038 R14: 00007fe506e25fa0 R15: 00007ffc40bcee88 [ 41.157399][ T1674] [ 41.160446][ T1674] ---[ end trace 0000000000000000 ]--- [ 41.331242][ T1771] ------------[ cut here ]------------ [ 41.336831][ T1771] WARNING: CPU: 0 PID: 1771 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 41.347060][ T1771] Modules linked in: [ 41.350992][ T1771] CPU: 0 PID: 1771 Comm: syz.5.467 Tainted: G B W syzkaller #0 [ 41.359877][ T1771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 41.370048][ T1771] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 41.376509][ T1771] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03 [ 41.396363][ T1771] RSP: 0018:ffffc90003877b90 EFLAGS: 00010293 [ 41.402516][ T1771] RAX: ffffffff849bb307 RBX: ffff888116817000 RCX: ffff88811eda1440 [ 41.410629][ T1771] RDX: 0000000000000000 RSI: 0000000013b56800 RDI: 000000000c04eb7d [ 41.418765][ T1771] RBP: ffffc90003877bb0 R08: ffff888116817083 R09: 1ffff11022d02e10