Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts.
2026/08/12 16:51:39 parsed 1 programs
2026/08/12 16:51:39 serving rpc on tcp://36321
[ 24.754893][ T28] audit: type=1400 audit(1786553499.473:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.775723][ T28] audit: type=1400 audit(1786553499.473:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.931153][ T28] audit: type=1400 audit(1786553500.643:66): avc: denied { mounton } for pid=300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.934602][ T300] cgroup: Unknown subsys name 'net'
[ 25.953948][ T28] audit: type=1400 audit(1786553500.643:67): avc: denied { mount } for pid=300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.981277][ T28] audit: type=1400 audit(1786553500.683:68): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.981660][ T300] cgroup: Unknown subsys name 'devices'
[ 26.124388][ T300] cgroup: Unknown subsys name 'hugetlb'
[ 26.130022][ T300] cgroup: Unknown subsys name 'rlimit'
[ 26.245054][ T28] audit: type=1400 audit(1786553500.963:69): avc: denied { setattr } for pid=300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.268281][ T28] audit: type=1400 audit(1786553500.963:70): avc: denied { create } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.289443][ T28] audit: type=1400 audit(1786553500.963:71): avc: denied { write } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.309799][ T28] audit: type=1400 audit(1786553500.963:72): avc: denied { read } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.330174][ T28] audit: type=1400 audit(1786553500.963:73): avc: denied { mounton } for pid=300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.339243][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.371585][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 27.121851][ T311] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.649514][ T337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.722248][ T337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.730355][ T337] device bridge_slave_0 entered promiscuous mode
[ 27.750574][ T337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.757706][ T337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.765279][ T337] device bridge_slave_1 entered promiscuous mode
[ 27.933146][ T337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.940264][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.947685][ T337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.954778][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.980744][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.988968][ T327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.996952][ T327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.014326][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.023343][ T327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.031233][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.039100][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.047983][ T327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.055120][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.073020][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.081340][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.092790][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.107691][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.116331][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.124752][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.133505][ T337] device veth0_vlan entered promiscuous mode
[ 28.146575][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.156413][ T337] device veth1_macvtap entered promiscuous mode
[ 28.168623][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.181152][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/08/12 16:51:42 executed programs: 0
[ 28.291145][ T337] syz-executor (337) used greatest stack depth: 21856 bytes left
[ 28.462895][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.469979][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.477858][ T378] device bridge_slave_0 entered promiscuous mode
[ 28.498088][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.505250][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.512809][ T378] device bridge_slave_1 entered promiscuous mode
[ 28.570544][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.578092][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.585789][ T372] device bridge_slave_0 entered promiscuous mode
[ 28.592897][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.599953][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.607769][ T377] device bridge_slave_0 entered promiscuous mode
[ 28.621721][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.628855][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.636428][ T377] device bridge_slave_1 entered promiscuous mode
[ 28.653219][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.660284][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.667922][ T372] device bridge_slave_1 entered promiscuous mode
[ 28.722005][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.729375][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.737188][ T379] device bridge_slave_0 entered promiscuous mode
[ 28.761430][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.768808][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.776333][ T374] device bridge_slave_0 entered promiscuous mode
[ 28.783177][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.790231][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.797748][ T379] device bridge_slave_1 entered promiscuous mode
[ 28.833255][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.840692][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.848361][ T374] device bridge_slave_1 entered promiscuous mode
[ 28.967716][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.974831][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.982170][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.989219][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.051642][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.058750][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.066062][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.073126][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.091159][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.098267][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.105591][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.112663][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.148300][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.155481][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.162805][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.169848][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.187177][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.194365][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.201663][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.208739][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.247870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.255605][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.263287][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.270686][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.278216][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.285718][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.293373][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.301087][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.308474][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.315991][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.323378][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.355114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.363129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.370665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.379456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.387989][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.395105][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.402819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.411163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.420273][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.427374][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.434981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.443495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.451661][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.458762][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.466377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.474669][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.482351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.490705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.499087][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.506221][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.514002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.522779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.531003][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.538109][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.545649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.554360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.562826][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.569861][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.577348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.585770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.634813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.645223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.652850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.661207][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.669862][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.676995][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.685310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.693550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.701535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.709972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.718281][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.725355][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.733079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.741153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.749254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.757527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.765749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.773893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.781883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.790091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.798116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.806359][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.815320][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.832032][ T372] device veth0_vlan entered promiscuous mode
[ 29.847100][ T378] device veth0_vlan entered promiscuous mode
[ 29.858943][ T379] device veth0_vlan entered promiscuous mode
[ 29.866140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.875347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.882959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.890488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.898915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.906707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.914596][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.923218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.931635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.940388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.948971][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.957436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.965580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.973806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.981326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.999404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.011428][ T378] device veth1_macvtap entered promiscuous mode
[ 30.025662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.034213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.042759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.050368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.058136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.065891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.074458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.082897][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.089953][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.097542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.106033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.114299][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.121330][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.128784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.143646][ T372] device veth1_macvtap entered promiscuous mode
[ 30.161425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.170074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.179137][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.188092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.198050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.206463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.215005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.223267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.257046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.271033][ T28] kauditd_printk_skb: 31 callbacks suppressed
[ 30.271052][ T28] audit: type=1400 audit(1786553504.993:105): avc: denied { create } for pid=397 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 30.304786][ T403] ==================================================================
[ 30.312983][ T403] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 30.313761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.321105][ T403] Read of size 4 at addr ffff88812d098800 by task syz.3.24/403
[ 30.330538][ T28] audit: type=1400 audit(1786553504.993:106): avc: denied { connect } for pid=397 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 30.336809][ T403]
[ 30.336830][ T403] CPU: 0 PID: 403 Comm: syz.3.24 Not tainted syzkaller #0
[ 30.359341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.366111][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.366149][ T403] Call Trace:
[ 30.366158][ T403]
[ 30.366166][ T403] __dump_stack+0x21/0x24
[ 30.375772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.384322][ T403] dump_stack_lvl+0x110/0x170
[ 30.384360][ T403] ? __cfi_dump_stack_lvl+0x8/0x8
[ 30.388280][ T28] audit: type=1400 audit(1786553504.993:107): avc: denied { ioctl } for pid=397 comm="syz.3.20" path="socket:[16712]" dev="sockfs" ino=16712 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 30.390691][ T403] ? _raw_spin_lock_bh+0x94/0xf0
[ 30.396704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.403096][ T403] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 30.403132][ T403] print_address_description+0x71/0x200
[ 30.403157][ T403] print_report+0x4a/0x60
[ 30.403178][ T403] kasan_report+0x122/0x150
[ 30.425207][ T379] device veth1_macvtap entered promiscuous mode
[ 30.437360][ T403] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 30.437403][ T403] __asan_report_load4_noabort+0x14/0x20
[ 30.488313][ T403] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 30.493892][ T403] pppol2tp_release+0x150/0x2b0
[ 30.498760][ T403] sock_close+0xc9/0x220
[ 30.503018][ T403] ? __cfi_sock_close+0x10/0x10
[ 30.507891][ T403] __fput+0x1fd/0x8f0
[ 30.511900][ T403] ____fput+0x15/0x20
[ 30.515896][ T403] task_work_run+0x1e1/0x250
[ 30.520504][ T403] ? __cfi_task_work_run+0x10/0x10
[ 30.525619][ T403] ? __cfi___close_range+0x10/0x10
[ 30.530746][ T403] exit_to_user_mode_loop+0x9b/0xb0
[ 30.535959][ T403] exit_to_user_mode_prepare+0x87/0xd0
[ 30.541422][ T403] syscall_exit_to_user_mode+0x1a/0x30
[ 30.546880][ T403] do_syscall_64+0x58/0xa0
[ 30.551300][ T403] ? clear_bhb_loop+0x30/0x80
[ 30.555971][ T403] ? clear_bhb_loop+0x30/0x80
[ 30.560647][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.566548][ T403] RIP: 0033:0x7fabc9b9e0d9
[ 30.570981][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.590589][ T403] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.599086][ T403] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 30.607075][ T403] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.615058][ T403] RBP: 000000000000763f R08: 0000000000000001 R09: 0000000000000000
[ 30.623030][ T403] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 30.630999][ T403] R13: 00007fabc9e25fac R14: 0000000000007672 R15: 00007fabc9e25fa0
[ 30.638975][ T403]
[ 30.641989][ T403]
[ 30.644308][ T403] Allocated by task 404:
[ 30.648550][ T403] kasan_set_track+0x4b/0x70
[ 30.653148][ T403] kasan_save_alloc_info+0x1f/0x30
[ 30.658273][ T403] __kasan_kmalloc+0x95/0xb0
[ 30.662871][ T403] __kmalloc+0xb4/0x1e0
[ 30.667031][ T403] l2tp_session_create+0x38/0xbd0
[ 30.672063][ T403] pppol2tp_connect+0xbf5/0x1640
[ 30.677225][ T403] __sys_connect+0x3da/0x460
[ 30.681859][ T403] __x64_sys_connect+0x7a/0x90
[ 30.686798][ T403] x64_sys_call+0x88d/0x9a0
[ 30.691309][ T403] do_syscall_64+0x4c/0xa0
[ 30.695727][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.701631][ T403]
[ 30.703953][ T403] Freed by task 327:
[ 30.707842][ T403] kasan_set_track+0x4b/0x70
[ 30.712436][ T403] kasan_save_free_info+0x2b/0x40
[ 30.717458][ T403] ____kasan_slab_free+0x132/0x180
[ 30.722576][ T403] __kasan_slab_free+0x11/0x20
[ 30.727374][ T403] slab_free_freelist_hook+0xc2/0x190
[ 30.732780][ T403] __kmem_cache_free+0xb7/0x1b0
[ 30.737632][ T403] kfree+0x6f/0xf0
[ 30.741614][ T403] l2tp_session_put+0xaf/0x1a0
[ 30.746390][ T403] l2tp_session_delete+0x3df/0x4d0
[ 30.751499][ T403] l2tp_tunnel_del_work+0x199/0x410
[ 30.756707][ T403] process_one_work+0x717/0xc30
[ 30.761656][ T403] worker_thread+0xa4d/0x11d0
[ 30.766334][ T403] kthread+0x281/0x320
[ 30.770420][ T403] ret_from_fork+0x1f/0x30
[ 30.774847][ T403]
[ 30.777193][ T403] The buggy address belongs to the object at ffff88812d098800
[ 30.777193][ T403] which belongs to the cache kmalloc-512 of size 512
[ 30.791247][ T403] The buggy address is located 0 bytes inside of
[ 30.791247][ T403] 512-byte region [ffff88812d098800, ffff88812d098a00)
[ 30.804376][ T403]
[ 30.806706][ T403] The buggy address belongs to the physical page:
[ 30.813128][ T403] page:ffffea0004b42600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d098
[ 30.823828][ T403] head:ffffea0004b42600 order:2 compound_mapcount:0 compound_pincount:0
[ 30.832185][ T403] flags: 0x4000000000010200(slab|head|zone=1)
[ 30.838305][ T403] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 30.847012][ T403] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 30.855595][ T403] page dumped because: kasan: bad access detected
[ 30.862006][ T403] page_owner tracks the page as allocated
[ 30.867726][ T403] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 372, tgid 372 (syz-executor), ts 30253538952, free_ts 27678879692
[ 30.888223][ T403] post_alloc_hook+0x1f5/0x210
[ 30.893005][ T403] prep_new_page+0x1c/0x110
[ 30.897519][ T403] get_page_from_freelist+0x2ca9/0x2d20
[ 30.903079][ T403] __alloc_pages+0x1fa/0x610
[ 30.907674][ T403] alloc_slab_page+0x6e/0xf0
[ 30.912269][ T403] new_slab+0x98/0x3e0
[ 30.916362][ T403] ___slab_alloc+0x70f/0xb70
[ 30.920956][ T403] __slab_alloc+0x5e/0xa0
[ 30.925300][ T403] __kmem_cache_alloc_node+0x204/0x2d0
[ 30.930764][ T403] __kmalloc+0xa4/0x1e0
[ 30.935027][ T403] fib6_info_alloc+0x34/0xe0
[ 30.939625][ T403] ip6_route_info_create+0x51b/0x14d0
[ 30.945005][ T403] addrconf_f6i_alloc+0x19c/0x3f0
[ 30.950055][ T403] addrconf_permanent_addr+0x237/0x940
[ 30.955521][ T403] addrconf_notify+0x7ca/0xe30
[ 30.960289][ T403] raw_notifier_call_chain+0xa1/0x110
[ 30.965668][ T403] page last free stack trace:
[ 30.970353][ T403] free_unref_page_prepare+0x80c/0x820
[ 30.975817][ T403] free_unref_page+0x93/0x530
[ 30.980500][ T403] __free_pages+0x67/0x100
[ 30.984918][ T403] free_pages+0x82/0x90
[ 30.989079][ T403] kasan_depopulate_vmalloc_pte+0x6b/0x90
[ 30.994802][ T403] __apply_to_page_range+0x8db/0xc80
[ 31.000094][ T403] apply_to_existing_page_range+0x38/0x50
[ 31.005820][ T403] kasan_release_vmalloc+0x97/0xb0
[ 31.010939][ T403] __purge_vmap_area_lazy+0xf09/0x1870
[ 31.016418][ T403] drain_vmap_area_work+0x3e/0xd0
[ 31.021446][ T403] process_one_work+0x717/0xc30
[ 31.026309][ T403] worker_thread+0xa4d/0x11d0
[ 31.031000][ T403] kthread+0x281/0x320
[ 31.035085][ T403] ret_from_fork+0x1f/0x30
[ 31.039517][ T403]
[ 31.041869][ T403] Memory state around the buggy address:
[ 31.047510][ T403] ffff88812d098700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 31.055580][ T403] ffff88812d098780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 31.063643][ T403] >ffff88812d098800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.071717][ T403] ^
[ 31.075781][ T403] ffff88812d098880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.083844][ T403] ffff88812d098900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.091923][ T403] ==================================================================
[ 31.101035][ T403] Disabling lock debugging due to kernel taint
[ 31.115180][ T403] ------------[ cut here ]------------
[ 31.118457][ T28] audit: type=1400 audit(1786553505.833:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 31.120688][ T403] WARNING: CPU: 0 PID: 403 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.150551][ T28] audit: type=1400 audit(1786553505.863:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.152644][ T403] Modules linked in:
[ 31.152660][ T403] CPU: 0 PID: 403 Comm: syz.3.24 Tainted: G B syzkaller #0
[ 31.152683][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.152694][ T403] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.152730][ T403] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.152748][ T403] RSP: 0018:ffffc90000a57cb0 EFLAGS: 00010293
[ 31.152765][ T403] RAX: ffffffff849bb307 RBX: ffff888118488000 RCX: ffff8881184e5100
[ 31.152780][ T403] RDX: 0000000000000000 RSI: 0000000015291540 RDI: 000000000c04eb7d
[ 31.152794][ T403] RBP: ffffc90000a57cd0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[ 31.152809][ T403] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000
[ 31.152824][ T403] R13: dffffc0000000000 R14: 0000000015291540 R15: ffff88812d098800
[ 31.152838][ T403] FS: 0000555566ca6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.152856][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.152871][ T403] CR2: 000039ce2aebf000 CR3: 000000012f227000 CR4: 00000000003506b0
[ 31.152889][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.152901][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.152914][ T403] Call Trace:
[ 31.152920][ T403]
[ 31.152927][ T403] pppol2tp_release+0x150/0x2b0
[ 31.152951][ T403] sock_close+0xc9/0x220
[ 31.152981][ T403] ? __cfi_sock_close+0x10/0x10
[ 31.153009][ T403] __fput+0x1fd/0x8f0
[ 31.153037][ T403] ____fput+0x15/0x20
[ 31.153061][ T403] task_work_run+0x1e1/0x250
[ 31.153087][ T403] ? __cfi_task_work_run+0x10/0x10
[ 31.153111][ T403] ? __cfi___close_range+0x10/0x10
[ 31.153134][ T403] exit_to_user_mode_loop+0x9b/0xb0
[ 31.153157][ T403] exit_to_user_mode_prepare+0x87/0xd0
[ 31.153179][ T403] syscall_exit_to_user_mode+0x1a/0x30
[ 31.153201][ T403] do_syscall_64+0x58/0xa0
[ 31.153225][ T403] ? clear_bhb_loop+0x30/0x80
[ 31.185039][ T28] audit: type=1400 audit(1786553505.863:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.187706][ T403] ? clear_bhb_loop+0x30/0x80
[ 31.198295][ T28] audit: type=1400 audit(1786553505.863:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.204488][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.224769][ T28] audit: type=1400 audit(1786553505.863:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.229942][ T403] RIP: 0033:0x7fabc9b9e0d9
[ 31.239085][ T28] audit: type=1400 audit(1786553505.863:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.246298][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.246324][ T403] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246
[ 31.255091][ T28] audit: type=1400 audit(1786553505.863:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.262362][ T403] ORIG_RAX: 00000000000001b4
[ 31.532430][ T403] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 31.540408][ T403] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.548452][ T403] RBP: 000000000000763f R08: 0000000000000001 R09: 0000000000000000
[ 31.556457][ T403] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 31.564491][ T403] R13: 00007fabc9e25fac R14: 0000000000007672 R15: 00007fabc9e25fa0
[ 31.572505][ T403]
[ 31.575554][ T403] ---[ end trace 0000000000000000 ]---
[ 31.602377][ T408] ------------[ cut here ]------------
[ 31.607890][ T408] WARNING: CPU: 0 PID: 408 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.607947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.618200][ T408] Modules linked in:
[ 31.630123][ T408] CPU: 0 PID: 408 Comm: syz.3.26 Tainted: G B W syzkaller #0
[ 31.638867][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.649297][ T408] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.655687][ T408] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.675371][ T408] RSP: 0018:ffffc90000a57cb0 EFLAGS: 00010293
[ 31.681495][ T408] RAX: ffffffff849bb307 RBX: ffff8881184f7000 RCX: ffff8881189abcc0
[ 31.689523][ T408] RDX: 0000000000000000 RSI: 000000002a6e4580 RDI: 000000000c04eb7d
[ 31.697546][ T408] RBP: ffffc90000a57cd0 R08: ffff8881184f7083 R09: 1ffff1102309ee10
[ 31.705570][ T408] R10: dffffc0000000000 R11: ffffed102309ee11 R12: dffffc0000000000
[ 31.713681][ T408] R13: dffffc0000000000 R14: 000000002a6e4580 R15: ffff88813245b800
[ 31.721660][ T408] FS: 0000555566ca6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.730740][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.737363][ T408] CR2: 0000000000000000 CR3: 000000012f1a5000 CR4: 00000000003506b0
[ 31.745489][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.753498][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.761562][ T408] Call Trace:
[ 31.764880][ T408]
[ 31.767831][ T408] pppol2tp_release+0x150/0x2b0
[ 31.772758][ T408] sock_close+0xc9/0x220
[ 31.777039][ T408] ? __cfi_sock_close+0x10/0x10
[ 31.782084][ T408] __fput+0x1fd/0x8f0
[ 31.786144][ T408] ____fput+0x15/0x20
[ 31.790138][ T408] task_work_run+0x1e1/0x250
[ 31.794780][ T408] ? __cfi_task_work_run+0x10/0x10
[ 31.799943][ T408] ? __cfi___close_range+0x10/0x10
[ 31.805106][ T408] exit_to_user_mode_loop+0x9b/0xb0
[ 31.810329][ T408] exit_to_user_mode_prepare+0x87/0xd0
[ 31.815855][ T408] syscall_exit_to_user_mode+0x1a/0x30
[ 31.821348][ T408] do_syscall_64+0x58/0xa0
[ 31.825839][ T408] ? clear_bhb_loop+0x30/0x80
[ 31.830550][ T408] ? clear_bhb_loop+0x30/0x80
[ 31.835304][ T408] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.841245][ T408] RIP: 0033:0x7fabc9b9e0d9
[ 31.846036][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.865739][ T408] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.874246][ T408] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 31.882286][ T408] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.890304][ T408] RBP: 0000000000007b51 R08: 0000000000000001 R09: 0000000000000000
[ 31.898333][ T408] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 31.906531][ T408] R13: 00007fabc9e25fac R14: 0000000000007b83 R15: 00007fabc9e25fa0
[ 31.914564][ T408]
[ 31.917687][ T408] ---[ end trace 0000000000000000 ]---
[ 31.926698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.935296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.944871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.953582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.967601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 31.976335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.994744][ T413] ------------[ cut here ]------------
[ 32.000289][ T413] WARNING: CPU: 1 PID: 413 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.010547][ T413] Modules linked in:
[ 32.014557][ T413] CPU: 1 PID: 413 Comm: syz.3.27 Tainted: G B W syzkaller #0
[ 32.023245][ T413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.033445][ T413] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.040136][ T413] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.059861][ T413] RSP: 0018:ffffc90000ac7cb0 EFLAGS: 00010293
[ 32.066077][ T413] RAX: ffffffff849bb307 RBX: ffff888118de2000 RCX: ffff88811849e540
[ 32.074150][ T413] RDX: 0000000000000000 RSI: 0000000018d3e000 RDI: 000000000c04eb7d
[ 32.082268][ T413] RBP: ffffc90000ac7cd0 R08: ffff888118de2083 R09: 1ffff110231bc410
[ 32.090253][ T413] R10: dffffc0000000000 R11: ffffed10231bc411 R12: dffffc0000000000
[ 32.098314][ T413] R13: dffffc0000000000 R14: 0000000018d3e000 R15: ffff888131659000
[ 32.106340][ T413] FS: 0000555566ca6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.115426][ T413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.122033][ T413] CR2: 0000000000000000 CR3: 000000012e689000 CR4: 00000000003506a0
[ 32.130155][ T413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.138376][ T413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.146438][ T413] Call Trace:
[ 32.149769][ T413]
[ 32.152756][ T413] pppol2tp_release+0x150/0x2b0
[ 32.157641][ T413] sock_close+0xc9/0x220
[ 32.161909][ T413] ? __cfi_sock_close+0x10/0x10
[ 32.167191][ T413] __fput+0x1fd/0x8f0
[ 32.171200][ T413] ____fput+0x15/0x20
[ 32.175261][ T413] task_work_run+0x1e1/0x250
[ 32.179904][ T413] ? __cfi_task_work_run+0x10/0x10
[ 32.185080][ T413] ? __cfi___close_range+0x10/0x10
[ 32.190221][ T413] exit_to_user_mode_loop+0x9b/0xb0
[ 32.195475][ T413] exit_to_user_mode_prepare+0x87/0xd0
[ 32.200964][ T413] syscall_exit_to_user_mode+0x1a/0x30
[ 32.206490][ T413] do_syscall_64+0x58/0xa0
[ 32.210927][ T413] ? clear_bhb_loop+0x30/0x80
[ 32.215697][ T413] ? clear_bhb_loop+0x30/0x80
[ 32.220396][ T413] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.226359][ T413] RIP: 0033:0x7fabc9b9e0d9
[ 32.230825][ T413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.251011][ T413] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.259501][ T413] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 32.267602][ T413] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.275620][ T413] RBP: 0000000000007cd0 R08: 0000000000000001 R09: 0000000000000000
[ 32.283641][ T413] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 32.291631][ T413] R13: 00007fabc9e25fac R14: 0000000000007d07 R15: 00007fabc9e25fa0
[ 32.299666][ T413]
[ 32.302749][ T413] ---[ end trace 0000000000000000 ]---
[ 32.319298][ T377] device veth0_vlan entered promiscuous mode
[ 32.328395][ T374] device veth0_vlan entered promiscuous mode
[ 32.335803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.354968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.363395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.371605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.394697][ T420] ------------[ cut here ]------------
[ 32.400204][ T420] WARNING: CPU: 0 PID: 420 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.410339][ T420] Modules linked in:
[ 32.414571][ T420] CPU: 0 PID: 420 Comm: syz.4.21 Tainted: G B W syzkaller #0
[ 32.423474][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.433684][ T420] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.440060][ T420] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.459784][ T420] RSP: 0018:ffffc90000ac7cb0 EFLAGS: 00010293
[ 32.465975][ T420] RAX: ffffffff849bb307 RBX: ffff888118e16000 RCX: ffff888118e7a880
[ 32.474130][ T420] RDX: 0000000000000000 RSI: 000000001924a200 RDI: 000000000c04eb7d
[ 32.482102][ T420] RBP: ffffc90000ac7cd0 R08: ffff888118e16083 R09: 1ffff110231c2c10
[ 32.490246][ T420] R10: dffffc0000000000 R11: ffffed10231c2c11 R12: dffffc0000000000
[ 32.498447][ T420] R13: dffffc0000000000 R14: 000000001924a200 R15: ffff88812f606c00
[ 32.506508][ T420] FS: 0000555593a49500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.515822][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.522529][ T420] CR2: 0000555566cc1908 CR3: 000000012f431000 CR4: 00000000003506b0
[ 32.530532][ T420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.538615][ T420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.546695][ T420] Call Trace:
[ 32.549970][ T420]
[ 32.552978][ T420] pppol2tp_release+0x150/0x2b0
[ 32.557947][ T420] sock_close+0xc9/0x220
[ 32.562494][ T420] ? __cfi_sock_close+0x10/0x10
[ 32.567377][ T420] __fput+0x1fd/0x8f0
[ 32.571379][ T420] ____fput+0x15/0x20
[ 32.575429][ T420] task_work_run+0x1e1/0x250
[ 32.580067][ T420] ? __cfi_task_work_run+0x10/0x10
[ 32.585374][ T420] ? __cfi___close_range+0x10/0x10
[ 32.590514][ T420] exit_to_user_mode_loop+0x9b/0xb0
[ 32.595764][ T420] exit_to_user_mode_prepare+0x87/0xd0
[ 32.601241][ T420] syscall_exit_to_user_mode+0x1a/0x30
[ 32.606754][ T420] do_syscall_64+0x58/0xa0
[ 32.611208][ T420] ? clear_bhb_loop+0x30/0x80
[ 32.615927][ T420] ? clear_bhb_loop+0x30/0x80
[ 32.620623][ T420] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.626563][ T420] RIP: 0033:0x7f499219e0d9
[ 32.631015][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.650692][ T420] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.659244][ T420] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 32.667320][ T420] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.675333][ T420] RBP: 0000000000007e3c R08: 0000000000000001 R09: 0000000000000000
[ 32.683349][ T420] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 32.691343][ T420] R13: 00007f4992425fac R14: 0000000000007e87 R15: 00007f4992425fa0
[ 32.699372][ T420]
[ 32.702427][ T420] ---[ end trace 0000000000000000 ]---
[ 32.722468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.730131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.738091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.747049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.761461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 32.770119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.780150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 32.788937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.798114][ T432] ------------[ cut here ]------------
[ 32.803847][ T432] WARNING: CPU: 0 PID: 432 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.813913][ T432] Modules linked in:
[ 32.818211][ T432] CPU: 0 PID: 432 Comm: syz.3.37 Tainted: G B W syzkaller #0
[ 32.826877][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.837093][ T432] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.838022][ T377] device veth1_macvtap entered promiscuous mode
[ 32.843524][ T432] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.869518][ T432] RSP: 0018:ffffc90000b17cb0 EFLAGS: 00010293
[ 32.875663][ T432] RAX: ffffffff849bb307 RBX: ffff8881196da000 RCX: ffff888119445100
[ 32.883908][ T432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 32.891920][ T432] RBP: ffffc90000b17cd0 R08: ffff8881196da083 R09: 1ffff110232db410
[ 32.900041][ T432] R10: dffffc0000000000 R11: ffffed10232db411 R12: dffffc0000000000
[ 32.908073][ T432] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888118fea400
[ 32.916113][ T432] FS: 0000555566ca6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.925174][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.931793][ T432] CR2: 0000200000000000 CR3: 0000000117ae6000 CR4: 00000000003506b0
[ 32.939854][ T432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.947895][ T432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.955935][ T432] Call Trace:
[ 32.959244][ T432]
[ 32.962244][ T432] pppol2tp_release+0x150/0x2b0
[ 32.967147][ T432] sock_close+0xc9/0x220
[ 32.971432][ T432] ? __cfi_sock_close+0x10/0x10
[ 32.976385][ T432] __fput+0x1fd/0x8f0
[ 32.980407][ T432] ____fput+0x15/0x20
[ 32.984471][ T432] task_work_run+0x1e1/0x250
[ 32.989104][ T432] ? __cfi_task_work_run+0x10/0x10
[ 32.994310][ T432] ? __cfi___close_range+0x10/0x10
[ 32.999461][ T432] exit_to_user_mode_loop+0x9b/0xb0
[ 33.005243][ T432] exit_to_user_mode_prepare+0x87/0xd0
[ 33.010754][ T432] syscall_exit_to_user_mode+0x1a/0x30
[ 33.016311][ T432] do_syscall_64+0x58/0xa0
[ 33.020784][ T432] ? clear_bhb_loop+0x30/0x80
[ 33.025547][ T432] ? clear_bhb_loop+0x30/0x80
[ 33.030271][ T432] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.036247][ T432] RIP: 0033:0x7fabc9b9e0d9
[ 33.040690][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.060926][ T432] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.069431][ T432] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 33.077497][ T432] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.085564][ T432] RBP: 0000000000007feb R08: 0000000000000001 R09: 0000000000000000
[ 33.093601][ T432] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 33.101642][ T432] R13: 00007fabc9e25fac R14: 000000000000802f R15: 00007fabc9e25fa0
[ 33.109726][ T432]
[ 33.112800][ T432] ---[ end trace 0000000000000000 ]---
[ 33.126097][ T374] device veth1_macvtap entered promiscuous mode
[ 33.140851][ T449] ------------[ cut here ]------------
[ 33.146508][ T449] WARNING: CPU: 1 PID: 449 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.156597][ T449] Modules linked in:
[ 33.160518][ T449] CPU: 1 PID: 449 Comm: syz.4.44 Tainted: G B W syzkaller #0
[ 33.169179][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.179335][ T449] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.185880][ T449] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.205822][ T449] RSP: 0018:ffffc90000b47cb0 EFLAGS: 00010293
[ 33.211934][ T449] RAX: ffffffff849bb307 RBX: ffff88811a29f000 RCX: ffff888119f75100
[ 33.219980][ T449] RDX: 0000000000000000 RSI: 000000002a569580 RDI: 000000000c04eb7d
[ 33.228060][ T449] RBP: ffffc90000b47cd0 R08: ffff88811a29f083 R09: 1ffff11023453e10
[ 33.236100][ T449] R10: dffffc0000000000 R11: ffffed1023453e11 R12: dffffc0000000000
[ 33.244167][ T449] R13: dffffc0000000000 R14: 000000002a569580 R15: ffff888112a5bc00
[ 33.252213][ T449] FS: 0000555593a49500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.261186][ T449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.267832][ T449] CR2: 0000555566ca64e8 CR3: 0000000108fb0000 CR4: 00000000003506a0
[ 33.275905][ T449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.284405][ T449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.292609][ T449] Call Trace:
[ 33.295969][ T449]
[ 33.298939][ T449] pppol2tp_release+0x150/0x2b0
[ 33.303875][ T449] sock_close+0xc9/0x220
[ 33.308185][ T449] ? __cfi_sock_close+0x10/0x10
[ 33.313127][ T449] __fput+0x1fd/0x8f0
[ 33.317184][ T449] ____fput+0x15/0x20
[ 33.321209][ T449] task_work_run+0x1e1/0x250
2026/08/12 16:51:48 executed programs: 42
[ 33.325881][ T449] ? __cfi_task_work_run+0x10/0x10
[ 33.331090][ T449] ? __cfi___close_range+0x10/0x10
[ 33.336388][ T449] exit_to_user_mode_loop+0x9b/0xb0
[ 33.341642][ T449] exit_to_user_mode_prepare+0x87/0xd0
[ 33.347229][ T449] syscall_exit_to_user_mode+0x1a/0x30
[ 33.352783][ T449] do_syscall_64+0x58/0xa0
[ 33.357247][ T449] ? clear_bhb_loop+0x30/0x80
[ 33.361962][ T449] ? clear_bhb_loop+0x30/0x80
[ 33.367208][ T449] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.373492][ T449] RIP: 0033:0x7f499219e0d9
[ 33.377951][ T449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.397689][ T449] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.406276][ T449] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 33.414420][ T449] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.422480][ T449] RBP: 0000000000008141 R08: 0000000000000001 R09: 0000000000000000
[ 33.430490][ T449] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 33.438631][ T449] R13: 00007f4992425fac R14: 0000000000008185 R15: 00007f4992425fa0
[ 33.447080][ T449]
[ 33.450139][ T449] ---[ end trace 0000000000000000 ]---
[ 33.477028][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 33.491684][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 33.504634][ T470] ------------[ cut here ]------------
[ 33.507229][ T469] ------------[ cut here ]------------
[ 33.510139][ T470] WARNING: CPU: 1 PID: 470 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.515675][ T469] WARNING: CPU: 0 PID: 469 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.515711][ T469] Modules linked in:
[ 33.515723][ T469] CPU: 0 PID: 469 Comm: syz.6.56 Tainted: G B W syzkaller #0
[ 33.526622][ T470] Modules linked in:
[ 33.536018][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.536046][ T469] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.536084][ T469] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.536101][ T469] RSP: 0018:ffffc90000c4fcb0 EFLAGS: 00010293
[ 33.536120][ T469] RAX: ffffffff849bb307 RBX: ffff88812a248000 RCX: ffff88811a9d0000
[ 33.536135][ T469] RDX: 0000000000000000 RSI: 000000002f3a7680 RDI: 000000000c04eb7d
[ 33.536148][ T469] RBP: ffffc90000c4fcd0 R08: ffff88812a248083 R09: 1ffff11025449010
[ 33.536161][ T469] R10: dffffc0000000000 R11: ffffed1025449011 R12: dffffc0000000000
[ 33.536174][ T469] R13: dffffc0000000000 R14: 000000002f3a7680 R15: ffff88812e17e000
[ 33.536189][ T469] FS: 00005555776b2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.540347][ T470]
[ 33.540356][ T470] CPU: 1 PID: 470 Comm: syz.4.55 Tainted: G B W syzkaller #0
[ 33.549006][ T469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.552944][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.552956][ T470] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.563251][ T469] CR2: 00007ffe08bc30c8 CR3: 0000000109aac000 CR4: 00000000003506b0
[ 33.569411][ T470] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.589168][ T469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.589191][ T469] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.589204][ T469] Call Trace:
[ 33.589209][ T469]
[ 33.589217][ T469] pppol2tp_release+0x150/0x2b0
[ 33.595538][ T470] RSP: 0018:ffffc90000b07cb0 EFLAGS: 00010293
[ 33.603628][ T469] sock_close+0xc9/0x220
[ 33.611630][ T470]
[ 33.611637][ T470] RAX: ffffffff849bb307 RBX: ffff88811ad1d000 RCX: ffff88811ad25100
[ 33.619646][ T469] ? __cfi_sock_close+0x10/0x10
[ 33.619680][ T469] __fput+0x1fd/0x8f0
[ 33.619705][ T469] ____fput+0x15/0x20
[ 33.619729][ T469] task_work_run+0x1e1/0x250
[ 33.627727][ T470] RDX: 0000000000000000 RSI: 000000002a6ef680 RDI: 000000000c04eb7d
[ 33.635723][ T469] ? __cfi_task_work_run+0x10/0x10
[ 33.644734][ T470] RBP: ffffc90000b07cd0 R08: ffff88811ad1d083 R09: 1ffff110235a3a10
[ 33.647051][ T469] ? __cfi___close_range+0x10/0x10
[ 33.655656][ T470] R10: dffffc0000000000 R11: ffffed10235a3a11 R12: dffffc0000000000
[ 33.655672][ T470] R13: dffffc0000000000 R14: 000000002a6ef680 R15: ffff88812cda1400
[ 33.662280][ T469] exit_to_user_mode_loop+0x9b/0xb0
[ 33.672384][ T470] FS: 0000555593a49500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.678710][ T469] exit_to_user_mode_prepare+0x87/0xd0
[ 33.686969][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.706503][ T469] syscall_exit_to_user_mode+0x1a/0x30
[ 33.706526][ T469] do_syscall_64+0x58/0xa0
[ 33.706550][ T469] ? clear_bhb_loop+0x30/0x80
[ 33.706567][ T469] ? clear_bhb_loop+0x30/0x80
[ 33.714607][ T470] CR2: 0000000000000000 CR3: 000000012a526000 CR4: 00000000003506a0
[ 33.722720][ T469] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.726016][ T470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.728971][ T469] RIP: 0033:0x7f87e019e0d9
[ 33.733921][ T470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.733944][ T470] Call Trace:
[ 33.733949][ T470]
[ 33.733957][ T470] pppol2tp_release+0x150/0x2b0
[ 33.740034][ T469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.744308][ T470] sock_close+0xc9/0x220
[ 33.746654][ T469] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246
[ 33.754749][ T470] ? __cfi_sock_close+0x10/0x10
[ 33.759600][ T469] ORIG_RAX: 00000000000001b4
[ 33.763830][ T470] __fput+0x1fd/0x8f0
[ 33.767815][ T469] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 33.772386][ T470] ____fput+0x15/0x20
[ 33.780384][ T469] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.785650][ T470] task_work_run+0x1e1/0x250
[ 33.793677][ T469] RBP: 00000000000082bf R08: 0000000000000001 R09: 0000000000000000
[ 33.798807][ T470] ? __cfi_task_work_run+0x10/0x10
[ 33.806847][ T469] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 33.814859][ T470] ? __cfi___close_range+0x10/0x10
[ 33.814893][ T470] exit_to_user_mode_loop+0x9b/0xb0
[ 33.820089][ T469] R13: 00007f87e0425fac R14: 00000000000082f1 R15: 00007f87e0425fa0
[ 33.829101][ T470] exit_to_user_mode_prepare+0x87/0xd0
[ 33.834658][ T469]
[ 33.841158][ T470] syscall_exit_to_user_mode+0x1a/0x30
[ 33.846824][ T469] ---[ end trace 0000000000000000 ]---
[ 33.862518][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 33.868897][ T470] do_syscall_64+0x58/0xa0
[ 33.886528][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 33.887241][ T470] ? clear_bhb_loop+0x30/0x80
[ 34.060253][ T470] ? clear_bhb_loop+0x30/0x80
[ 34.065016][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.070954][ T470] RIP: 0033:0x7f499219e0d9
[ 34.075443][ T470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.095316][ T470] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.103863][ T470] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 34.111873][ T470] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.119926][ T470] RBP: 00000000000082bf R08: 0000000000000001 R09: 0000000000000000
[ 34.127955][ T470] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 34.136083][ T470] R13: 00007f4992425fac R14: 00000000000082f2 R15: 00007f4992425fa0
[ 34.144133][ T470]
[ 34.147194][ T470] ---[ end trace 0000000000000000 ]---
[ 34.180945][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.203024][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 34.208113][ T493] ------------[ cut here ]------------
[ 34.216827][ T493] WARNING: CPU: 0 PID: 493 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.227133][ T493] Modules linked in:
[ 34.231068][ T493] CPU: 0 PID: 493 Comm: syz.4.66 Tainted: G B W syzkaller #0
[ 34.239081][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.239846][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.257908][ T493] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.264434][ T493] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.273780][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 34.284104][ T493] RSP: 0018:ffffc90000c4fcb0 EFLAGS: 00010293
[ 34.284128][ T493] RAX: ffffffff849bb307 RBX: ffff88811b23e000 RCX: ffff88811afc9440
[ 34.306348][ T493] RDX: 0000000000000000 RSI: 000000001b23a000 RDI: 000000000c04eb7d
[ 34.314398][ T493] RBP: ffffc90000c4fcd0 R08: ffff88811b23e083 R09: 1ffff11023647c10
[ 34.322456][ T493] R10: dffffc0000000000 R11: ffffed1023647c11 R12: dffffc0000000000
[ 34.330482][ T493] R13: dffffc0000000000 R14: 000000001b23a000 R15: ffff8881193a5400
[ 34.338716][ T493] FS: 0000555593a49500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.347721][ T493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.354422][ T493] CR2: 0000000000000000 CR3: 00000001325e0000 CR4: 00000000003506b0
[ 34.362461][ T493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.370595][ T493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.378751][ T493] Call Trace:
[ 34.382068][ T493]
[ 34.385089][ T493] pppol2tp_release+0x150/0x2b0
[ 34.389984][ T493] sock_close+0xc9/0x220
[ 34.394315][ T493] ? __cfi_sock_close+0x10/0x10
[ 34.399209][ T493] __fput+0x1fd/0x8f0
[ 34.403424][ T493] ____fput+0x15/0x20
[ 34.407445][ T493] task_work_run+0x1e1/0x250
[ 34.412070][ T493] ? __cfi_task_work_run+0x10/0x10
[ 34.417266][ T493] ? __cfi___close_range+0x10/0x10
[ 34.422442][ T493] exit_to_user_mode_loop+0x9b/0xb0
[ 34.427682][ T493] exit_to_user_mode_prepare+0x87/0xd0
[ 34.433196][ T493] syscall_exit_to_user_mode+0x1a/0x30
[ 34.438679][ T493] do_syscall_64+0x58/0xa0
[ 34.443370][ T493] ? clear_bhb_loop+0x30/0x80
[ 34.448083][ T493] ? clear_bhb_loop+0x30/0x80
[ 34.453301][ T493] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.459243][ T493] RIP: 0033:0x7f499219e0d9
[ 34.463727][ T493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.483706][ T493] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.492574][ T493] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 34.500579][ T493] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.508616][ T493] RBP: 0000000000008578 R08: 0000000000000001 R09: 0000000000000000
[ 34.516626][ T493] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 34.524740][ T493] R13: 00007f4992425fac R14: 00000000000085ab R15: 00007f4992425fa0
[ 34.532765][ T493]
[ 34.535820][ T493] ---[ end trace 0000000000000000 ]---
[ 34.603713][ T514] ------------[ cut here ]------------
[ 34.609270][ T514] WARNING: CPU: 1 PID: 514 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.619460][ T514] Modules linked in:
[ 34.623518][ T514] CPU: 1 PID: 514 Comm: syz.6.77 Tainted: G B W syzkaller #0
[ 34.632340][ T514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.642644][ T514] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.649025][ T514] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.668976][ T514] RSP: 0018:ffffc9000135fcb0 EFLAGS: 00010293
[ 34.675231][ T514] RAX: ffffffff849bb307 RBX: ffff88811bfab000 RCX: ffff88810e8c8000
[ 34.683386][ T514] RDX: 0000000000000000 RSI: 000000001bf80000 RDI: 000000000c04eb7d
[ 34.691397][ T514] RBP: ffffc9000135fcd0 R08: ffff88811bfab083 R09: 1ffff110237f5610
[ 34.699590][ T514] R10: dffffc0000000000 R11: ffffed10237f5611 R12: dffffc0000000000
[ 34.707649][ T514] R13: dffffc0000000000 R14: 000000001bf80000 R15: ffff88810d30bc00
[ 34.715682][ T514] FS: 00005555776b2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.724707][ T514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.731337][ T514] CR2: 0000000000000000 CR3: 000000012ff39000 CR4: 00000000003506a0
[ 34.739411][ T514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.747444][ T514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.755514][ T514] Call Trace:
[ 34.758824][ T514]
[ 34.761793][ T514] pppol2tp_release+0x150/0x2b0
[ 34.766724][ T514] sock_close+0xc9/0x220
[ 34.771011][ T514] ? __cfi_sock_close+0x10/0x10
[ 34.775937][ T514] __fput+0x1fd/0x8f0
[ 34.779971][ T514] ____fput+0x15/0x20
[ 34.784049][ T514] task_work_run+0x1e1/0x250
[ 34.788677][ T514] ? __cfi_task_work_run+0x10/0x10
[ 34.793858][ T516] ------------[ cut here ]------------
[ 34.793862][ T514] ? __cfi___close_range+0x10/0x10
[ 34.799681][ T516] WARNING: CPU: 0 PID: 516 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.804845][ T514] exit_to_user_mode_loop+0x9b/0xb0
[ 34.804872][ T514] exit_to_user_mode_prepare+0x87/0xd0
[ 34.804893][ T514] syscall_exit_to_user_mode+0x1a/0x30
[ 34.804913][ T514] do_syscall_64+0x58/0xa0
[ 34.804934][ T514] ? clear_bhb_loop+0x30/0x80
[ 34.804951][ T514] ? clear_bhb_loop+0x30/0x80
[ 34.804969][ T514] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.815157][ T516] Modules linked in:
[ 34.820342][ T514] RIP: 0033:0x7f87e019e0d9
[ 34.825842][ T516]
[ 34.825850][ T516] CPU: 0 PID: 516 Comm: syz.3.75 Tainted: G B W syzkaller #0
[ 34.831410][ T514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.835930][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.840614][ T514] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246
[ 34.845331][ T516] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.845361][ T516] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.845375][ T516] RSP: 0018:ffffc900012c7cb0 EFLAGS: 00010293
[ 34.845392][ T516] RAX: ffffffff849bb307 RBX: ffff88811bf28000 RCX: ffff88811b360000
[ 34.845406][ T516] RDX: 0000000000000000 RSI: 000000002f1a3e80 RDI: 000000000c04eb7d
[ 34.851311][ T514] ORIG_RAX: 00000000000001b4
[ 34.855230][ T516] RBP: ffffc900012c7cd0 R08: ffff88811bf28083 R09: 1ffff110237e5010
[ 34.859644][ T514] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 34.861973][ T516] R10: dffffc0000000000 R11: ffffed10237e5011 R12: dffffc0000000000
[ 34.870581][ T514] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.890306][ T516] R13: dffffc0000000000 R14: 000000002f1a3e80 R15: ffff88810d30b000
[ 34.900298][ T514] RBP: 0000000000008707 R08: 0000000000000001 R09: 0000000000000000
[ 34.906384][ T516] FS: 0000555566ca6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.906404][ T516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.912752][ T514] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 34.912767][ T514] R13: 00007f87e0425fac R14: 000000000000873a R15: 00007f87e0425fa0
[ 34.932493][ T516] CR2: 0000555593a64908 CR3: 000000012d3bd000 CR4: 00000000003506b0
[ 34.938654][ T514]
[ 34.946650][ T516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.946664][ T516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.946675][ T516] Call Trace:
[ 34.946680][ T516]
[ 34.946687][ T516] pppol2tp_release+0x150/0x2b0
[ 34.954710][ T514] ---[ end trace 0000000000000000 ]---
[ 34.959389][ T516] sock_close+0xc9/0x220
[ 35.087557][ T516] ? __cfi_sock_close+0x10/0x10
[ 35.092595][ T516] __fput+0x1fd/0x8f0
[ 35.096622][ T516] ____fput+0x15/0x20
[ 35.100648][ T516] task_work_run+0x1e1/0x250
[ 35.105349][ T516] ? __cfi_task_work_run+0x10/0x10
[ 35.110506][ T516] ? __cfi___close_range+0x10/0x10
[ 35.115696][ T516] exit_to_user_mode_loop+0x9b/0xb0
[ 35.120935][ T516] exit_to_user_mode_prepare+0x87/0xd0
[ 35.126592][ T516] syscall_exit_to_user_mode+0x1a/0x30
[ 35.132098][ T516] do_syscall_64+0x58/0xa0
[ 35.136611][ T516] ? clear_bhb_loop+0x30/0x80
[ 35.141323][ T516] ? clear_bhb_loop+0x30/0x80
[ 35.146073][ T516] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.152011][ T516] RIP: 0033:0x7fabc9b9e0d9
[ 35.156519][ T516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.176211][ T516] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.184746][ T516] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 35.192908][ T516] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.200926][ T516] RBP: 000000000000870a R08: 0000000000000001 R09: 0000000000000000
[ 35.209028][ T516] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 35.217120][ T516] R13: 00007fabc9e25fac R14: 000000000000873d R15: 00007fabc9e25fa0
[ 35.225192][ T516]
[ 35.228280][ T516] ---[ end trace 0000000000000000 ]---
[ 35.256377][ T541] ------------[ cut here ]------------
[ 35.261960][ T541] WARNING: CPU: 0 PID: 541 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.272213][ T541] Modules linked in:
[ 35.276138][ T541] CPU: 0 PID: 541 Comm: syz.5.87 Tainted: G B W syzkaller #0
[ 35.284957][ T541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.295151][ T541] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.301531][ T541] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.321305][ T541] RSP: 0018:ffffc9000155fcb0 EFLAGS: 00010293
[ 35.327533][ T541] RAX: ffffffff849bb307 RBX: ffff88811cb08000 RCX: ffff88811c340000
[ 35.336450][ T541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 35.344594][ T541] RBP: ffffc9000155fcd0 R08: ffff88811cb08083 R09: 1ffff11023961010
[ 35.353679][ T541] R10: dffffc0000000000 R11: ffffed1023961011 R12: dffffc0000000000
[ 35.361986][ T541] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812eb66c00
[ 35.370149][ T541] FS: 000055558d299500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.379826][ T541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.386879][ T541] CR2: 0000000000000000 CR3: 000000011299c000 CR4: 00000000003506b0
[ 35.394942][ T541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.403098][ T541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.411116][ T541] Call Trace:
[ 35.414472][ T541]
[ 35.417438][ T541] pppol2tp_release+0x150/0x2b0
[ 35.422387][ T541] sock_close+0xc9/0x220
[ 35.426675][ T541] ? __cfi_sock_close+0x10/0x10
[ 35.431572][ T541] __fput+0x1fd/0x8f0
[ 35.435649][ T541] ____fput+0x15/0x20
[ 35.439665][ T541] task_work_run+0x1e1/0x250
[ 35.444454][ T541] ? __cfi_task_work_run+0x10/0x10
[ 35.449617][ T541] ? __cfi___close_range+0x10/0x10
[ 35.454822][ T541] exit_to_user_mode_loop+0x9b/0xb0
[ 35.460077][ T541] exit_to_user_mode_prepare+0x87/0xd0
[ 35.465633][ T541] syscall_exit_to_user_mode+0x1a/0x30
[ 35.471143][ T541] do_syscall_64+0x58/0xa0
[ 35.475688][ T541] ? clear_bhb_loop+0x30/0x80
[ 35.480399][ T541] ? clear_bhb_loop+0x30/0x80
[ 35.485151][ T541] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.491110][ T541] RIP: 0033:0x7fd57c79e0d9
[ 35.495621][ T541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.515293][ T541] RSP: 002b:00007ffc431ff398 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.523998][ T541] RAX: 0000000000000000 RBX: 00007ffc431ff480 RCX: 00007fd57c79e0d9
[ 35.532007][ T541] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.540047][ T541] RBP: 0000000000008993 R08: 0000000000000001 R09: 0000000000000000
[ 35.548167][ T541] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc431ff4c0
[ 35.556602][ T541] R13: 00007fd57ca25fac R14: 00000000000089c9 R15: 00007fd57ca25fa0
[ 35.564641][ T541]
[ 35.567696][ T541] ---[ end trace 0000000000000000 ]---
[ 35.606243][ T569] ------------[ cut here ]------------
[ 35.611852][ T569] WARNING: CPU: 1 PID: 569 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.622098][ T569] Modules linked in:
[ 35.626252][ T569] CPU: 1 PID: 569 Comm: syz.4.101 Tainted: G B W syzkaller #0
[ 35.635166][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.645427][ T569] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.651828][ T569] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.671729][ T569] RSP: 0018:ffffc9000156fcb0 EFLAGS: 00010293
[ 35.677959][ T569] RAX: ffffffff849bb307 RBX: ffff88811caed000 RCX: ffff88811b2dd100
[ 35.686093][ T569] RDX: 0000000000000000 RSI: 000000002d783e00 RDI: 000000000c04eb7d
[ 35.694502][ T569] RBP: ffffc9000156fcd0 R08: ffff88811caed083 R09: 1ffff1102395da10
[ 35.702632][ T569] R10: dffffc0000000000 R11: ffffed102395da11 R12: dffffc0000000000
[ 35.710767][ T569] R13: dffffc0000000000 R14: 000000002d783e00 R15: ffff88811b90b000
[ 35.718939][ T569] FS: 0000555593a49500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.728004][ T569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.734727][ T569] CR2: 0000000000000000 CR3: 000000010ffe1000 CR4: 00000000003506a0
[ 35.742943][ T569] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.750963][ T569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.759107][ T569] Call Trace:
[ 35.762560][ T569]
[ 35.765527][ T569] pppol2tp_release+0x150/0x2b0
[ 35.770416][ T569] sock_close+0xc9/0x220
[ 35.774836][ T569] ? __cfi_sock_close+0x10/0x10
[ 35.779727][ T569] __fput+0x1fd/0x8f0
[ 35.783848][ T569] ____fput+0x15/0x20
[ 35.787895][ T569] task_work_run+0x1e1/0x250
[ 35.792630][ T569] ? __cfi_task_work_run+0x10/0x10
[ 35.797767][ T569] ? __cfi___close_range+0x10/0x10
[ 35.803092][ T569] exit_to_user_mode_loop+0x9b/0xb0
[ 35.808340][ T569] exit_to_user_mode_prepare+0x87/0xd0
[ 35.813884][ T569] syscall_exit_to_user_mode+0x1a/0x30
[ 35.819376][ T569] do_syscall_64+0x58/0xa0
[ 35.823891][ T569] ? clear_bhb_loop+0x30/0x80
[ 35.828598][ T569] ? clear_bhb_loop+0x30/0x80
[ 35.833328][ T569] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.839264][ T569] RIP: 0033:0x7f499219e0d9
[ 35.843743][ T569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.863490][ T569] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.872094][ T569] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 35.880186][ T569] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.888616][ T569] RBP: 0000000000008ae8 R08: 0000000000000001 R09: 0000000000000000
[ 35.896673][ T569] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 35.904704][ T569] R13: 00007f4992425fac R14: 0000000000008b27 R15: 00007f4992425fa0
[ 35.912743][ T569]
[ 35.915776][ T569] ---[ end trace 0000000000000000 ]---
[ 35.954136][ T43] device bridge_slave_1 left promiscuous mode
[ 35.961377][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.985414][ T594] ------------[ cut here ]------------
[ 35.990946][ T594] WARNING: CPU: 1 PID: 594 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.001123][ T594] Modules linked in:
[ 36.005192][ T594] CPU: 1 PID: 594 Comm: syz.3.113 Tainted: G B W syzkaller #0
[ 36.014093][ T594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.024423][ T594] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.030807][ T594] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.050823][ T594] RSP: 0018:ffffc90000b17cb0 EFLAGS: 00010293
[ 36.057032][ T594] RAX: ffffffff849bb307 RBX: ffff88811a1d4000 RCX: ffff88811d1ca880
[ 36.065069][ T594] RDX: 0000000000000000 RSI: 00000000344ad330 RDI: 000000000c04eb7d
[ 36.073150][ T594] RBP: ffffc90000b17cd0 R08: ffff88811a1d4083 R09: 1ffff1102343a810
[ 36.081175][ T594] R10: dffffc0000000000 R11: ffffed102343a811 R12: dffffc0000000000
[ 36.089810][ T594] R13: dffffc0000000000 R14: 00000000344ad330 R15: ffff88813043e000
[ 36.098211][ T594] FS: 0000555566ca6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.107507][ T594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.114157][ T594] CR2: 00007f4992427dac CR3: 00000001100f2000 CR4: 00000000003506a0
[ 36.122207][ T594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.130214][ T594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.138267][ T594] Call Trace:
[ 36.141576][ T594]
[ 36.144581][ T594] pppol2tp_release+0x150/0x2b0
[ 36.149475][ T594] sock_close+0xc9/0x220
[ 36.153796][ T594] ? __cfi_sock_close+0x10/0x10
[ 36.158702][ T594] __fput+0x1fd/0x8f0
[ 36.163107][ T594] ____fput+0x15/0x20
[ 36.167140][ T594] task_work_run+0x1e1/0x250
[ 36.171875][ T594] ? __cfi_task_work_run+0x10/0x10
[ 36.177111][ T594] ? __cfi___close_range+0x10/0x10
[ 36.182459][ T594] exit_to_user_mode_loop+0x9b/0xb0
[ 36.187691][ T594] exit_to_user_mode_prepare+0x87/0xd0
[ 36.193218][ T594] syscall_exit_to_user_mode+0x1a/0x30
[ 36.198721][ T594] do_syscall_64+0x58/0xa0
[ 36.203475][ T594] ? clear_bhb_loop+0x30/0x80
[ 36.208216][ T594] ? clear_bhb_loop+0x30/0x80
[ 36.212949][ T594] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.218877][ T594] RIP: 0033:0x7fabc9b9e0d9
[ 36.223360][ T594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.243262][ T594] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.251814][ T594] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 36.259976][ T594] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.268040][ T594] RBP: 0000000000008c6c R08: 0000000000000001 R09: 0000000000000000
[ 36.276164][ T594] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 36.284271][ T594] R13: 00007fabc9e25fac R14: 0000000000008c9f R15: 00007fabc9e25fa0
[ 36.292305][ T594]
[ 36.295356][ T594] ---[ end trace 0000000000000000 ]---
[ 36.318144][ T43] device bridge_slave_0 left promiscuous mode
[ 36.340619][ T615] ------------[ cut here ]------------
[ 36.346355][ T615] WARNING: CPU: 1 PID: 615 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.355644][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 36.356809][ T615] Modules linked in:
[ 36.367730][ T615] CPU: 1 PID: 615 Comm: syz.6.123 Tainted: G B W syzkaller #0
[ 36.376575][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.386799][ T615] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.393301][ T615] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.413346][ T615] RSP: 0018:ffffc900017d7cb0 EFLAGS: 00010293
[ 36.419461][ T615] RAX: ffffffff849bb307 RBX: ffff88811db5d000 RCX: ffff88811e450000
[ 36.427726][ T615] RDX: 0000000000000000 RSI: 000000001df6e800 RDI: 000000000c04eb7d
[ 36.435801][ T615] RBP: ffffc900017d7cd0 R08: ffff88811db5d083 R09: 1ffff11023b6ba10
[ 36.443847][ T615] R10: dffffc0000000000 R11: ffffed1023b6ba11 R12: dffffc0000000000
[ 36.451859][ T615] R13: dffffc0000000000 R14: 000000001df6e800 R15: ffff88811df34800
[ 36.459909][ T615] FS: 00005555776b2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.468894][ T615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.475664][ T615] CR2: 0000000000000000 CR3: 000000011d833000 CR4: 00000000003506a0
[ 36.483729][ T615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.491735][ T615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.499809][ T615] Call Trace:
[ 36.503136][ T615]
[ 36.506112][ T615] pppol2tp_release+0x150/0x2b0
[ 36.511003][ T615] sock_close+0xc9/0x220
[ 36.515331][ T615] ? __cfi_sock_close+0x10/0x10
[ 36.520226][ T615] __fput+0x1fd/0x8f0
[ 36.524283][ T615] ____fput+0x15/0x20
[ 36.528305][ T615] task_work_run+0x1e1/0x250
[ 36.532962][ T615] ? __cfi_task_work_run+0x10/0x10
[ 36.538107][ T615] ? __cfi___close_range+0x10/0x10
[ 36.543274][ T615] exit_to_user_mode_loop+0x9b/0xb0
[ 36.548624][ T615] exit_to_user_mode_prepare+0x87/0xd0
[ 36.554296][ T615] syscall_exit_to_user_mode+0x1a/0x30
[ 36.559971][ T615] do_syscall_64+0x58/0xa0
[ 36.564693][ T615] ? clear_bhb_loop+0x30/0x80
[ 36.569405][ T615] ? clear_bhb_loop+0x30/0x80
[ 36.574323][ T615] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.580272][ T615] RIP: 0033:0x7f87e019e0d9
[ 36.584769][ T615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.604634][ T615] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.613249][ T615] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 36.621253][ T615] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.629295][ T615] RBP: 0000000000008dd1 R08: 0000000000000001 R09: 0000000000000000
[ 36.637341][ T615] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 36.645787][ T615] R13: 00007f87e0425fac R14: 0000000000008e03 R15: 00007f87e0425fa0
[ 36.653943][ T615]
[ 36.657006][ T615] ---[ end trace 0000000000000000 ]---
[ 36.673392][ T43] device veth1_macvtap left promiscuous mode
[ 36.679473][ T43] device veth0_vlan left promiscuous mode
[ 36.689966][ T647] ------------[ cut here ]------------
[ 36.695485][ T647] WARNING: CPU: 1 PID: 647 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.705617][ T647] Modules linked in:
[ 36.709544][ T647] CPU: 1 PID: 647 Comm: syz.6.137 Tainted: G B W syzkaller #0
[ 36.718395][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.728852][ T647] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.735406][ T647] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.755274][ T647] RSP: 0018:ffffc90001837cb0 EFLAGS: 00010293
[ 36.761390][ T647] RAX: ffffffff849bb307 RBX: ffff88811dc34000 RCX: ffff88811e05d100
[ 36.769425][ T647] RDX: 0000000000000000 RSI: 00000000197356c0 RDI: 000000000c04eb7d
[ 36.777547][ T647] RBP: ffffc90001837cd0 R08: ffff88811dc34083 R09: 1ffff11023b86810
[ 36.785594][ T647] R10: dffffc0000000000 R11: ffffed1023b86811 R12: dffffc0000000000
[ 36.793666][ T647] R13: dffffc0000000000 R14: 00000000197356c0 R15: ffff88811df5c800
[ 36.801865][ T647] FS: 00005555776b2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.811196][ T647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.818032][ T647] CR2: 0000000000000000 CR3: 000000011e042000 CR4: 00000000003506a0
[ 36.826076][ T647] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.834111][ T647] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.842145][ T647] Call Trace:
[ 36.845460][ T647]
[ 36.848465][ T647] pppol2tp_release+0x150/0x2b0
[ 36.853414][ T647] sock_close+0xc9/0x220
[ 36.857705][ T647] ? __cfi_sock_close+0x10/0x10
[ 36.862637][ T647] __fput+0x1fd/0x8f0
[ 36.866668][ T647] ____fput+0x15/0x20
[ 36.870689][ T647] task_work_run+0x1e1/0x250
[ 36.875358][ T647] ? __cfi_task_work_run+0x10/0x10
[ 36.880515][ T647] ? __cfi___close_range+0x10/0x10
[ 36.885835][ T647] exit_to_user_mode_loop+0x9b/0xb0
[ 36.891106][ T647] exit_to_user_mode_prepare+0x87/0xd0
[ 36.896650][ T647] syscall_exit_to_user_mode+0x1a/0x30
[ 36.902186][ T647] do_syscall_64+0x58/0xa0
[ 36.906730][ T647] ? clear_bhb_loop+0x30/0x80
[ 36.911526][ T647] ? clear_bhb_loop+0x30/0x80
[ 36.916285][ T647] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.922244][ T647] RIP: 0033:0x7f87e019e0d9
[ 36.926870][ T647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.946551][ T647] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.955049][ T647] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 36.963364][ T647] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.971377][ T647] RBP: 0000000000008f30 R08: 0000000000000001 R09: 0000000000000000
[ 36.979651][ T647] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 36.987713][ T647] R13: 00007f87e0425fac R14: 0000000000008f63 R15: 00007f87e0425fa0
[ 36.995748][ T647]
[ 36.998801][ T647] ---[ end trace 0000000000000000 ]---
[ 37.030795][ T672] ------------[ cut here ]------------
[ 37.036392][ T672] WARNING: CPU: 1 PID: 672 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.046663][ T672] Modules linked in:
[ 37.050602][ T672] CPU: 1 PID: 672 Comm: syz.3.151 Tainted: G B W syzkaller #0
[ 37.059601][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.069808][ T672] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.076292][ T672] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.096054][ T672] RSP: 0018:ffffc90001a4fcb0 EFLAGS: 00010293
[ 37.102289][ T672] RAX: ffffffff849bb307 RBX: ffff888120145000 RCX: ffff88811e379440
[ 37.110292][ T672] RDX: 0000000000000000 RSI: 000000001a589280 RDI: 000000000c04eb7d
[ 37.118403][ T672] RBP: ffffc90001a4fcd0 R08: ffff888120145083 R09: 1ffff11024028a10
[ 37.126996][ T672] R10: dffffc0000000000 R11: ffffed1024028a11 R12: dffffc0000000000
[ 37.135491][ T672] R13: dffffc0000000000 R14: 000000001a589280 R15: ffff88811f86dc00
[ 37.143538][ T672] FS: 0000555566ca6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.152533][ T672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.159202][ T672] CR2: 00005555848fe4e8 CR3: 0000000120437000 CR4: 00000000003506a0
[ 37.167522][ T672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.175728][ T672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.183768][ T672] Call Trace:
[ 37.187189][ T672]
[ 37.190151][ T672] pppol2tp_release+0x150/0x2b0
[ 37.195084][ T672] sock_close+0xc9/0x220
[ 37.199392][ T672] ? __cfi_sock_close+0x10/0x10
[ 37.204460][ T672] __fput+0x1fd/0x8f0
[ 37.208496][ T672] ____fput+0x15/0x20
[ 37.212646][ T672] task_work_run+0x1e1/0x250
[ 37.217277][ T672] ? __cfi_task_work_run+0x10/0x10
[ 37.222485][ T672] ? __cfi___close_range+0x10/0x10
[ 37.227644][ T672] exit_to_user_mode_loop+0x9b/0xb0
[ 37.233002][ T672] exit_to_user_mode_prepare+0x87/0xd0
[ 37.238506][ T672] syscall_exit_to_user_mode+0x1a/0x30
[ 37.244053][ T672] do_syscall_64+0x58/0xa0
[ 37.248549][ T672] ? clear_bhb_loop+0x30/0x80
[ 37.253381][ T672] ? clear_bhb_loop+0x30/0x80
[ 37.258091][ T672] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.264056][ T672] RIP: 0033:0x7fabc9b9e0d9
[ 37.268535][ T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.288482][ T672] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.297110][ T672] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 37.305153][ T672] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.313193][ T672] RBP: 0000000000009083 R08: 0000000000000001 R09: 0000000000000000
[ 37.321191][ T672] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 37.329228][ T672] R13: 00007fabc9e25fac R14: 00000000000090b6 R15: 00007fabc9e25fa0
[ 37.337520][ T672]
[ 37.340578][ T672] ---[ end trace 0000000000000000 ]---
[ 37.355116][ T693] ------------[ cut here ]------------
[ 37.360616][ T693] WARNING: CPU: 1 PID: 693 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.371090][ T693] Modules linked in:
[ 37.375233][ T693] CPU: 1 PID: 693 Comm: syz.4.161 Tainted: G B W syzkaller #0
[ 37.384138][ T693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.395777][ T693] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.402304][ T693] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.422077][ T693] RSP: 0018:ffffc90001a1fcb0 EFLAGS: 00010293
[ 37.428318][ T693] RAX: ffffffff849bb307 RBX: ffff888120140000 RCX: ffff88811e37e540
[ 37.436430][ T693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 37.444657][ T693] RBP: ffffc90001a1fcd0 R08: ffff888120140083 R09: 1ffff11024028010
[ 37.452929][ T693] R10: dffffc0000000000 R11: ffffed1024028011 R12: dffffc0000000000
[ 37.460945][ T693] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811f85f000
[ 37.469114][ T693] FS: 0000555593a49500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.478187][ T693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.484936][ T693] CR2: 0000000000000000 CR3: 00000001224b8000 CR4: 00000000003506a0
[ 37.493050][ T693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.501063][ T693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.509181][ T693] Call Trace:
[ 37.512524][ T693]
[ 37.515492][ T693] pppol2tp_release+0x150/0x2b0
[ 37.520398][ T693] sock_close+0xc9/0x220
[ 37.524919][ T693] ? __cfi_sock_close+0x10/0x10
[ 37.529818][ T693] __fput+0x1fd/0x8f0
[ 37.533947][ T693] ____fput+0x15/0x20
[ 37.537968][ T693] task_work_run+0x1e1/0x250
[ 37.542725][ T693] ? __cfi_task_work_run+0x10/0x10
[ 37.547878][ T693] ? __cfi___close_range+0x10/0x10
[ 37.553066][ T693] exit_to_user_mode_loop+0x9b/0xb0
[ 37.558338][ T693] exit_to_user_mode_prepare+0x87/0xd0
[ 37.563877][ T693] syscall_exit_to_user_mode+0x1a/0x30
[ 37.569374][ T693] do_syscall_64+0x58/0xa0
[ 37.573866][ T693] ? clear_bhb_loop+0x30/0x80
[ 37.578576][ T693] ? clear_bhb_loop+0x30/0x80
[ 37.583364][ T693] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.589311][ T693] RIP: 0033:0x7f499219e0d9
[ 37.593797][ T693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.613539][ T693] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.621994][ T693] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 37.630288][ T693] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.638466][ T693] RBP: 00000000000091c9 R08: 0000000000000001 R09: 0000000000000000
[ 37.646557][ T693] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 37.654740][ T693] R13: 00007f4992425fac R14: 00000000000091fc R15: 00007f4992425fa0
[ 37.662803][ T693]
[ 37.665845][ T693] ---[ end trace 0000000000000000 ]---
[ 37.687730][ T717] ------------[ cut here ]------------
[ 37.693295][ T717] WARNING: CPU: 1 PID: 717 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.703507][ T717] Modules linked in:
[ 37.707438][ T717] CPU: 1 PID: 717 Comm: syz.6.170 Tainted: G B W syzkaller #0
[ 37.716227][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.726452][ T717] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.732876][ T717] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.752584][ T717] RSP: 0018:ffffc90001e0fcb0 EFLAGS: 00010293
[ 37.758684][ T717] RAX: ffffffff849bb307 RBX: ffff8881172e7000 RCX: ffff88811ed28000
[ 37.767032][ T717] RDX: 0000000000000000 RSI: 000000001a7d4540 RDI: 000000000c04eb7d
[ 37.775309][ T717] RBP: ffffc90001e0fcd0 R08: ffff8881172e7083 R09: 1ffff11022e5ce10
[ 37.783366][ T717] R10: dffffc0000000000 R11: ffffed1022e5ce11 R12: dffffc0000000000
[ 37.791497][ T717] R13: dffffc0000000000 R14: 000000001a7d4540 R15: ffff888120fc1c00
[ 37.799646][ T717] FS: 00005555776b2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.808657][ T717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.815313][ T717] CR2: 0000000000000000 CR3: 0000000121c41000 CR4: 00000000003506a0
[ 37.823346][ T717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.831351][ T717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.839418][ T717] Call Trace:
[ 37.842859][ T717]
[ 37.845824][ T717] pppol2tp_release+0x150/0x2b0
[ 37.850718][ T717] sock_close+0xc9/0x220
[ 37.855161][ T717] ? __cfi_sock_close+0x10/0x10
[ 37.860069][ T717] __fput+0x1fd/0x8f0
[ 37.864156][ T717] ____fput+0x15/0x20
[ 37.868183][ T717] task_work_run+0x1e1/0x250
[ 37.872863][ T717] ? __cfi_task_work_run+0x10/0x10
[ 37.878015][ T717] ? __cfi___close_range+0x10/0x10
[ 37.883210][ T717] exit_to_user_mode_loop+0x9b/0xb0
[ 37.888467][ T717] exit_to_user_mode_prepare+0x87/0xd0
[ 37.894038][ T717] syscall_exit_to_user_mode+0x1a/0x30
[ 37.899544][ T717] do_syscall_64+0x58/0xa0
[ 37.904039][ T717] ? clear_bhb_loop+0x30/0x80
[ 37.908760][ T717] ? clear_bhb_loop+0x30/0x80
[ 37.913506][ T717] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.919453][ T717] RIP: 0033:0x7f87e019e0d9
[ 37.923985][ T717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.943668][ T717] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.952171][ T717] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 37.960182][ T717] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.968235][ T717] RBP: 0000000000009316 R08: 0000000000000001 R09: 0000000000000000
[ 37.976302][ T717] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 37.984389][ T717] R13: 00007f87e0425fac R14: 0000000000009349 R15: 00007f87e0425fa0
[ 37.992430][ T717]
[ 37.995494][ T717] ---[ end trace 0000000000000000 ]---
[ 38.038921][ T735] ------------[ cut here ]------------
[ 38.044557][ T735] WARNING: CPU: 0 PID: 735 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.054763][ T735] Modules linked in:
[ 38.058699][ T735] CPU: 0 PID: 735 Comm: syz.6.178 Tainted: G B W syzkaller #0
[ 38.066792][ T739] ------------[ cut here ]------------
[ 38.068287][ T735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.072919][ T739] WARNING: CPU: 1 PID: 739 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.083097][ T735] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.083126][ T735] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.083143][ T735] RSP: 0018:ffffc90001f4fcb0 EFLAGS: 00010293
[ 38.083161][ T735] RAX: ffffffff849bb307 RBX: ffff88810bf62000 RCX: ffff88812272a880
[ 38.083175][ T735] RDX: 0000000000000000 RSI: 000000000f3c2200 RDI: 000000000c04eb7d
[ 38.083188][ T735] RBP: ffffc90001f4fcd0 R08: ffff88810bf62083 R09: 1ffff110217ec410
[ 38.083202][ T735] R10: dffffc0000000000 R11: ffffed10217ec411 R12: dffffc0000000000
[ 38.083216][ T735] R13: dffffc0000000000 R14: 000000000f3c2200 R15: ffff88810df6c400
[ 38.093361][ T739] Modules linked in:
[ 38.099679][ T735] FS: 00005555776b2500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.119317][ T739]
[ 38.119328][ T739] CPU: 1 PID: 739 Comm: syz.3.176 Tainted: G B W syzkaller #0
[ 38.119351][ T739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.119362][ T739] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.119395][ T739] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.125713][ T735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.133630][ T739] RSP: 0018:ffffc90001b8fcb0 EFLAGS: 00010293
[ 38.141709][ T735] CR2: 0000000000000000 CR3: 00000001094b9000 CR4: 00000000003506b0
[ 38.149733][ T739]
[ 38.149744][ T739] RAX: ffffffff849bb307 RBX: ffff88810b377000 RCX: ffff888108d7a880
[ 38.149762][ T739] RDX: 0000000000000000 RSI: 000000001a7d4480 RDI: 000000000c04eb7d
[ 38.149776][ T739] RBP: ffffc90001b8fcd0 R08: ffff88810b377083 R09: 1ffff1102166ee10
[ 38.149791][ T739] R10: dffffc0000000000 R11: ffffed102166ee11 R12: dffffc0000000000
[ 38.149806][ T739] R13: dffffc0000000000 R14: 000000001a7d4480 R15: ffff88810df69000
[ 38.149822][ T739] FS: 0000555566ca6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.149841][ T739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.149855][ T739] CR2: 0000000000000000 CR3: 000000011eb76000 CR4: 00000000003506a0
[ 38.157860][ T735] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.165963][ T739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.169848][ T735] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
2026/08/12 16:51:53 executed programs: 167
[ 38.178817][ T739] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.178836][ T739] Call Trace:
[ 38.178842][ T739]
[ 38.178851][ T739] pppol2tp_release+0x150/0x2b0
[ 38.181190][ T735] Call Trace:
[ 38.181198][ T735]
[ 38.189913][ T739] sock_close+0xc9/0x220
[ 38.200017][ T735] pppol2tp_release+0x150/0x2b0
[ 38.200054][ T735] sock_close+0xc9/0x220
[ 38.206618][ T739] ? __cfi_sock_close+0x10/0x10
[ 38.226287][ T735] ? __cfi_sock_close+0x10/0x10
[ 38.232899][ T739] __fput+0x1fd/0x8f0
[ 38.238963][ T735] __fput+0x1fd/0x8f0
[ 38.247575][ T739] ____fput+0x15/0x20
[ 38.249337][ T735] ____fput+0x15/0x20
[ 38.257829][ T739] task_work_run+0x1e1/0x250
[ 38.265436][ T735] task_work_run+0x1e1/0x250
[ 38.273581][ T739] ? __cfi_task_work_run+0x10/0x10
[ 38.281569][ T735] ? __cfi_task_work_run+0x10/0x10
[ 38.289574][ T739] ? __cfi___close_range+0x10/0x10
[ 38.298545][ T735] ? __cfi___close_range+0x10/0x10
[ 38.305174][ T739] exit_to_user_mode_loop+0x9b/0xb0
[ 38.313276][ T735] exit_to_user_mode_loop+0x9b/0xb0
[ 38.321283][ T739] exit_to_user_mode_prepare+0x87/0xd0
[ 38.329454][ T735] exit_to_user_mode_prepare+0x87/0xd0
[ 38.329494][ T735] syscall_exit_to_user_mode+0x1a/0x30
[ 38.329516][ T735] do_syscall_64+0x58/0xa0
[ 38.329540][ T735] ? clear_bhb_loop+0x30/0x80
[ 38.329560][ T735] ? clear_bhb_loop+0x30/0x80
[ 38.329579][ T735] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.329608][ T735] RIP: 0033:0x7f87e019e0d9
[ 38.329627][ T735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.329646][ T735] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.329668][ T735] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 38.329683][ T735] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.337845][ T739] syscall_exit_to_user_mode+0x1a/0x30
[ 38.345772][ T735] RBP: 0000000000009472 R08: 0000000000000001 R09: 0000000000000000
[ 38.349100][ T739] do_syscall_64+0x58/0xa0
[ 38.352043][ T735] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 38.356949][ T739] ? clear_bhb_loop+0x30/0x80
[ 38.360400][ T735] R13: 00007f87e0425fac R14: 00000000000094a5 R15: 00007f87e0425fa0
[ 38.363392][ T739] ? clear_bhb_loop+0x30/0x80
[ 38.367817][ T735]
[ 38.372738][ T739] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.376933][ T735] ---[ end trace 0000000000000000 ]---
[ 38.381789][ T739] RIP: 0033:0x7fabc9b9e0d9
[ 38.592582][ T739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.612389][ T739] RSP: 002b:00007ffe08bc2ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.621287][ T739] RAX: 0000000000000000 RBX: 00007ffe08bc2fb0 RCX: 00007fabc9b9e0d9
[ 38.629353][ T739] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.637397][ T739] RBP: 0000000000009474 R08: 0000000000000001 R09: 0000000000000000
[ 38.645671][ T739] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffe08bc2ff0
[ 38.653833][ T739] R13: 00007fabc9e25fac R14: 00000000000094a7 R15: 00007fabc9e25fa0
[ 38.661859][ T739]
[ 38.665045][ T739] ---[ end trace 0000000000000000 ]---
[ 38.696498][ T764] ------------[ cut here ]------------
[ 38.702024][ T764] WARNING: CPU: 1 PID: 764 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.712484][ T764] Modules linked in:
[ 38.716403][ T764] CPU: 1 PID: 764 Comm: syz.6.191 Tainted: G B W syzkaller #0
[ 38.725762][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.736134][ T764] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.742626][ T764] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.762516][ T764] RSP: 0018:ffffc900020cfcb0 EFLAGS: 00010293
[ 38.768638][ T764] RAX: ffffffff849bb307 RBX: ffff8881170dc000 RCX: ffff88810fa29440
[ 38.776764][ T764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 38.784887][ T764] RBP: ffffc900020cfcd0 R08: ffff8881170dc083 R09: 1ffff11022e1b810
[ 38.793045][ T764] R10: dffffc0000000000 R11: ffffed1022e1b811 R12: dffffc0000000000
[ 38.801053][ T764] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88810f0b3c00
[ 38.809381][ T764] FS: 00005555776b2500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.818486][ T764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.825158][ T764] CR2: 0000000000000000 CR3: 00000001090e9000 CR4: 00000000003506a0
[ 38.833306][ T764] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.841316][ T764] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.849382][ T764] Call Trace:
[ 38.852720][ T764]
[ 38.855693][ T764] pppol2tp_release+0x150/0x2b0
[ 38.860599][ T764] sock_close+0xc9/0x220
[ 38.864953][ T764] ? __cfi_sock_close+0x10/0x10
[ 38.869844][ T764] __fput+0x1fd/0x8f0
[ 38.873911][ T764] ____fput+0x15/0x20
[ 38.877958][ T764] task_work_run+0x1e1/0x250
[ 38.882737][ T764] ? __cfi_task_work_run+0x10/0x10
[ 38.887991][ T764] ? __cfi___close_range+0x10/0x10
[ 38.893188][ T764] exit_to_user_mode_loop+0x9b/0xb0
[ 38.898427][ T764] exit_to_user_mode_prepare+0x87/0xd0
[ 38.903968][ T764] syscall_exit_to_user_mode+0x1a/0x30
[ 38.909666][ T764] do_syscall_64+0x58/0xa0
[ 38.914194][ T764] ? clear_bhb_loop+0x30/0x80
[ 38.918992][ T764] ? clear_bhb_loop+0x30/0x80
[ 38.923760][ T764] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.929873][ T764] RIP: 0033:0x7f87e019e0d9
[ 38.934374][ T764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.954751][ T764] RSP: 002b:00007ffdbbbf2918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.963269][ T764] RAX: 0000000000000000 RBX: 00007ffdbbbf2a00 RCX: 00007f87e019e0d9
[ 38.971284][ T764] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.979353][ T764] RBP: 0000000000009707 R08: 0000000000000001 R09: 0000000000000000
[ 38.987431][ T764] R10: 0000001b32820000 R11: 0000000000000246 R12: 00007ffdbbbf2a40
[ 38.995465][ T764] R13: 00007f87e0425fac R14: 000000000000973a R15: 00007f87e0425fa0
[ 39.003738][ T764]
[ 39.006799][ T764] ---[ end trace 0000000000000000 ]---
[ 39.030114][ T784] ------------[ cut here ]------------
[ 39.035769][ T784] WARNING: CPU: 0 PID: 784 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.046077][ T784] Modules linked in:
[ 39.050006][ T784] CPU: 0 PID: 784 Comm: syz.5.200 Tainted: G B W syzkaller #0
[ 39.059105][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 39.069301][ T784] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.075808][ T784] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.095769][ T784] RSP: 0018:ffffc9000215fcb0 EFLAGS: 00010293
[ 39.101879][ T784] RAX: ffffffff849bb307 RBX: ffff8881170db000 RCX: ffff88812fa9d100
[ 39.110286][ T784] RDX: 0000000000000000 RSI: 000000002ffa9100 RDI: 000000000c04eb7d
[ 39.118489][ T784] RBP: ffffc9000215fcd0 R08: ffff8881170db083 R09: 1ffff11022e1b610
[ 39.126699][ T784] R10: dffffc0000000000 R11: ffffed1022e1b611 R12: dffffc0000000000
[ 39.134895][ T784] R13: dffffc0000000000 R14: 000000002ffa9100 R15: ffff8881101a8800
[ 39.143342][ T784] FS: 000055558d299500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 39.152445][ T784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.159069][ T784] CR2: 00007ffe08bc30c8 CR3: 00000001100d0000 CR4: 00000000003506b0
[ 39.167411][ T784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.175557][ T784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.183703][ T784] Call Trace:
[ 39.187018][ T784]
[ 39.190012][ T784] pppol2tp_release+0x150/0x2b0
[ 39.195050][ T784] sock_close+0xc9/0x220
[ 39.199365][ T784] ? __cfi_sock_close+0x10/0x10
[ 39.204368][ T784] __fput+0x1fd/0x8f0
[ 39.208397][ T784] ____fput+0x15/0x20
[ 39.212608][ T784] task_work_run+0x1e1/0x250
[ 39.217504][ T784] ? __cfi_task_work_run+0x10/0x10
[ 39.222753][ T784] ? __cfi___close_range+0x10/0x10
[ 39.227926][ T784] exit_to_user_mode_loop+0x9b/0xb0
[ 39.233323][ T784] exit_to_user_mode_prepare+0x87/0xd0
[ 39.238816][ T784] syscall_exit_to_user_mode+0x1a/0x30
[ 39.244347][ T784] do_syscall_64+0x58/0xa0
[ 39.248802][ T784] ? clear_bhb_loop+0x30/0x80
[ 39.253546][ T784] ? clear_bhb_loop+0x30/0x80
[ 39.258254][ T784] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.264484][ T784] RIP: 0033:0x7fd57c79e0d9
[ 39.268929][ T784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.288913][ T784] RSP: 002b:00007ffc431ff398 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 39.297540][ T784] RAX: 0000000000000000 RBX: 00007ffc431ff480 RCX: 00007fd57c79e0d9
[ 39.306469][ T784] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.314683][ T784] RBP: 0000000000009824 R08: 0000000000000001 R09: 0000000000000000
[ 39.322757][ T784] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffc431ff4c0
[ 39.331091][ T784] R13: 00007fd57ca25fac R14: 0000000000009882 R15: 00007fd57ca25fa0
[ 39.339361][ T784]
[ 39.342431][ T784] ---[ end trace 0000000000000000 ]---
[ 39.368943][ T810] ------------[ cut here ]------------
[ 39.374612][ T810] WARNING: CPU: 1 PID: 810 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.385059][ T810] Modules linked in:
[ 39.388999][ T810] CPU: 1 PID: 810 Comm: syz.4.217 Tainted: G B W syzkaller #0
[ 39.397825][ T810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 39.408035][ T810] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.414549][ T810] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.434571][ T810] RSP: 0018:ffffc90001f77cb0 EFLAGS: 00010293
[ 39.440685][ T810] RAX: ffffffff849bb307 RBX: ffff888109463000 RCX: ffff8881107ebcc0
[ 39.447272][ T814] ------------[ cut here ]------------
[ 39.449019][ T810] RDX: 0000000000000000 RSI: 000000001bc54100 RDI: 000000000c04eb7d
[ 39.454628][ T814] WARNING: CPU: 0 PID: 814 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.462403][ T810] RBP: ffffc90001f77cd0 R08: ffff888109463083 R09: 1ffff1102128c610
[ 39.462425][ T810] R10: dffffc0000000000 R11: ffffed102128c611 R12: dffffc0000000000
[ 39.462441][ T810] R13: dffffc0000000000 R14: 000000001bc54100 R15: ffff88812252c800
[ 39.472439][ T814] Modules linked in:
[ 39.472454][ T814] CPU: 0 PID: 814 Comm: syz.2.214 Tainted: G B W syzkaller #0
[ 39.472476][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 39.472487][ T814] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.472519][ T814] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.472538][ T814] RSP: 0018:ffffc900021f7cb0 EFLAGS: 00010293
[ 39.472556][ T814] RAX: ffffffff849bb307 RBX: ffff88810bcfe000 RCX: ffff88811001d100
[ 39.472571][ T814] RDX: 0000000000000000 RSI: 000000002252c800 RDI: 000000000c04eb7d
[ 39.480543][ T810] FS: 0000555593a49500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.488567][ T814] RBP: ffffc900021f7cd0 R08: ffff88810bcfe083 R09: 1ffff1102179fc10
[ 39.488592][ T814] R10: dffffc0000000000 R11: ffffed102179fc11 R12: dffffc0000000000
[ 39.488608][ T814] R13: dffffc0000000000 R14: 000000002252c800 R15: ffff88812252e000
[ 39.488624][ T814] FS: 00005555848fe500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 39.488643][ T814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.488658][ T814] CR2: 0000000000000000 CR3: 0000000121df4000 CR4: 00000000003506b0
[ 39.497263][ T810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.501084][ T814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.510185][ T810] CR2: 0000000000000000 CR3: 0000000111c80000 CR4: 00000000003506a0
[ 39.520041][ T814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.526658][ T810] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.546061][ T814] Call Trace:
[ 39.546072][ T814]
[ 39.546080][ T814] pppol2tp_release+0x150/0x2b0
[ 39.546115][ T814] sock_close+0xc9/0x220
[ 39.552401][ T810] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.560166][ T814] ? __cfi_sock_close+0x10/0x10
[ 39.568535][ T810] Call Trace:
[ 39.577119][ T814] __fput+0x1fd/0x8f0
[ 39.577152][ T814] ____fput+0x15/0x20
[ 39.577177][ T814] task_work_run+0x1e1/0x250
[ 39.585557][ T810]
[ 39.593783][ T814] ? __cfi_task_work_run+0x10/0x10
[ 39.593826][ T814] ? __cfi___close_range+0x10/0x10
[ 39.593851][ T814] exit_to_user_mode_loop+0x9b/0xb0
[ 39.593875][ T814] exit_to_user_mode_prepare+0x87/0xd0
[ 39.593897][ T814] syscall_exit_to_user_mode+0x1a/0x30
[ 39.601882][ T810] pppol2tp_release+0x150/0x2b0
[ 39.611288][ T814] do_syscall_64+0x58/0xa0
[ 39.618180][ T810] sock_close+0xc9/0x220
[ 39.625960][ T814] ? clear_bhb_loop+0x30/0x80
[ 39.625987][ T814] ? clear_bhb_loop+0x30/0x80
[ 39.626006][ T814] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.626036][ T814] RIP: 0033:0x7f190b19e0d9
[ 39.632792][ T810] ? __cfi_sock_close+0x10/0x10
[ 39.640643][ T814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.648854][ T810] __fput+0x1fd/0x8f0
[ 39.656641][ T814] RSP: 002b:00007ffee51b5c88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 39.656665][ T814] RAX: 0000000000000000 RBX: 00007ffee51b5d70 RCX: 00007f190b19e0d9
[ 39.656678][ T814] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.656690][ T814] RBP: 00000000000099a5 R08: 0000000000000001 R09: 0000000000000000
[ 39.656703][ T814] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffee51b5db0
[ 39.656717][ T814] R13: 00007f190b425fac R14: 00000000000099d9 R15: 00007f190b425fa0
[ 39.656735][ T814]
[ 39.656743][ T814] ---[ end trace 0000000000000000 ]---
[ 39.860135][ T810] ____fput+0x15/0x20
[ 39.864312][ T810] task_work_run+0x1e1/0x250
[ 39.869030][ T810] ? __cfi_task_work_run+0x10/0x10
[ 39.874289][ T810] ? __cfi___close_range+0x10/0x10
[ 39.879434][ T810] exit_to_user_mode_loop+0x9b/0xb0
[ 39.884776][ T810] exit_to_user_mode_prepare+0x87/0xd0
[ 39.890277][ T810] syscall_exit_to_user_mode+0x1a/0x30
[ 39.896142][ T810] do_syscall_64+0x58/0xa0
[ 39.900598][ T810] ? clear_bhb_loop+0x30/0x80
[ 39.905418][ T810] ? clear_bhb_loop+0x30/0x80
[ 39.910130][ T810] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.916265][ T810] RIP: 0033:0x7f499219e0d9
[ 39.920721][ T810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.940756][ T810] RSP: 002b:00007ffcaf561998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 39.949420][ T810] RAX: 0000000000000000 RBX: 00007ffcaf561a80 RCX: 00007f499219e0d9
[ 39.957593][ T810] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.965717][ T810] RBP: 00000000000099a1 R08: 0000000000000001 R09: 0000000000000000
[ 39.973865][ T810] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffcaf561ac0
[ 39.981932][ T810] R13: 00007f4992425fac R14: 00000000000099da R15: 00007f4992425fa0
[ 39.990083][ T810]
[ 39.993228][ T810] ---[ end trace 0000000000000000 ]---
[ 40.018375][ T840] ------------[ cut here ]------------
[ 40.024016][ T840] WARNING: CPU: 0 PID: 840 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.034421][ T840] Modules linked in:
[ 40.038354][ T840] CPU: 0 PID: 840 Comm: syz.5.227 Tainted: G B W syzkaller #0
[ 40.047164][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 40.057351][ T840] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.063856][ T840] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.083801][ T840] RSP: 0018:ffffc90001d47cb0 EFLAGS: 00010293
[ 40.087894][ T839] ------------[ cut here ]------------
[ 40.089904][ T840] RAX: ffffffff849bb307 RBX: ffff88810e2cb000 RCX: ffff88811001a880
[ 40.095398][ T839] WARNING: CPU: 1 PID: 839 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.095443][ T839] Modules linked in:
[ 40.095454][ T839] CPU: 1 PID: 839 Comm: syz.3.230 Tainted: G B W syzkaller #0
[ 40.095472][ T839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 40.095482][ T839] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.095507][ T839] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.095525][ T839] RSP: 0018:ffffc90003757cb0 EFLAGS: 00010293
[ 40.095542][ T839] RAX: ffffffff849bb307 RBX: ffff88810e2c8000 RCX: ffff888112073cc0
[ 40.095558][ T839] RDX: 0000000000000000 RSI: 000000002dbcec00 RDI: 000000000c04eb7d
[ 40.095572][ T839] RBP: ffffc90003757cd0 R08: ffff88810e2c8083 R09: 1ffff11021c59010
[ 40.095587][ T839] R10: dffffc0000000000 R11: ffffed1021c59011 R12: dffffc0000000000
[ 40.103637][ T840] RDX: 0000000000000000 RSI: 000000001e590840 RDI: 000000000c04eb7d
[ 40.113740][ T839] R13: dffffc0000000000 R14: 000000002dbcec00 R15: ffff88812dbcf800
[ 40.117576][ T840] RBP: ffffc90001d47cd0 R08: ffff88810e2cb083 R09: 1ffff11021c59610
[ 40.126818][ T839] FS: 0000555566ca6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 40.137352][ T840] R10: dffffc0000000000 R11: ffffed1021c59611 R12: dffffc0000000000
[ 40.144079][ T839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.144105][ T839] CR2: 00007f49930ecd58 CR3: 000000010e5d5000 CR4: 00000000003506a0
[ 40.144125][ T839] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.144138][ T839] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.144152][ T839] Call Trace:
[ 40.144158][ T839]
[ 40.144166][ T839] pppol2tp_release+0x150/0x2b0
[ 40.165106][ T840] R13: dffffc0000000000 R14: 000000001e590840 R15: ffff88812dbcec00
[ 40.170652][ T839] sock_close+0xc9/0x220
[ 40.179238][ T840] FS: 000055558d299500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 40.186776][ T839] ? __cfi_sock_close+0x10/0x10
[ 40.186815][ T839] __fput+0x1fd/0x8f0
[ 40.186844][ T839] ____fput+0x15/0x20