Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts.
2026/08/06 10:42:41 parsed 1 programs
2026/08/06 10:42:41 serving rpc on tcp://45775
[ 23.286088][ T28] audit: type=1400 audit(1786012961.949:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 23.306835][ T28] audit: type=1400 audit(1786012961.949:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 24.045933][ T28] audit: type=1400 audit(1786012962.709:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.046933][ T301] cgroup: Unknown subsys name 'net'
[ 24.068613][ T28] audit: type=1400 audit(1786012962.709:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.095896][ T28] audit: type=1400 audit(1786012962.739:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 24.096047][ T301] cgroup: Unknown subsys name 'devices'
[ 24.241005][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 24.246619][ T301] cgroup: Unknown subsys name 'rlimit'
[ 24.353585][ T28] audit: type=1400 audit(1786012963.019:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 24.376748][ T28] audit: type=1400 audit(1786012963.019:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.397161][ T28] audit: type=1400 audit(1786012963.019:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.406557][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 24.417440][ T28] audit: type=1400 audit(1786012963.019:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 24.446139][ T28] audit: type=1400 audit(1786012963.019:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.480240][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 25.157432][ T309] request_module fs-gadgetfs succeeded, but still no fs?
[ 25.420826][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.427870][ T334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.435272][ T334] device bridge_slave_0 entered promiscuous mode
[ 25.442075][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.449083][ T334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.456447][ T334] device bridge_slave_1 entered promiscuous mode
[ 25.491973][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.499016][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.506314][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.513401][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.530392][ T335] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.537635][ T335] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.545032][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 25.552816][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 25.562460][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 25.570680][ T335] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.577686][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.586318][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 25.594492][ T335] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.601549][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.614382][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 25.623379][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 25.636122][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 25.646705][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 25.654874][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 25.662454][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 25.671203][ T334] device veth0_vlan entered promiscuous mode
[ 25.680622][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 25.689602][ T334] device veth1_macvtap entered promiscuous mode
[ 25.698481][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 25.708275][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 25.740881][ T334] syz-executor (334) used greatest stack depth: 21696 bytes left
2026/08/06 10:42:44 executed programs: 0
[ 26.284329][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.291520][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.298823][ T372] device bridge_slave_0 entered promiscuous mode
[ 26.309587][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.316626][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.324035][ T372] device bridge_slave_1 entered promiscuous mode
[ 26.358830][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.365901][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.373182][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.380213][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.402267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.409855][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.417008][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.431651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 26.439989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.448071][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.455101][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.464001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 26.472457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 26.480684][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.487700][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.502256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 26.510390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 26.519146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 26.527397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 26.540764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 26.549068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 26.563206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 26.571131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 26.579896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 26.587374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 26.594981][ T372] device veth0_vlan entered promiscuous mode
[ 26.601670][ T43] device bridge_slave_1 left promiscuous mode
[ 26.607781][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.615526][ T43] device bridge_slave_0 left promiscuous mode
[ 26.621668][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.629675][ T43] device veth1_macvtap left promiscuous mode
[ 26.635689][ T43] device veth0_vlan left promiscuous mode
[ 26.735855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 26.744038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 26.752942][ T372] device veth1_macvtap entered promiscuous mode
[ 26.761697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 26.769289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 26.777528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 26.786661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 26.795037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 26.817868][ T376] ==================================================================
[ 26.825945][ T376] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0
[ 26.833567][ T376] Write of size 8 at addr ffff888121633990 by task syz.2.17/376
[ 26.841168][ T376]
[ 26.843478][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0
[ 26.850560][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 26.860601][ T376] Call Trace:
[ 26.863855][ T376]
[ 26.866766][ T376] __dump_stack+0x21/0x24
[ 26.871080][ T376] dump_stack_lvl+0x110/0x170
[ 26.875740][ T376] ? __cfi_dump_stack_lvl+0x8/0x8
[ 26.880743][ T376] ? rcu_segcblist_enqueue+0x9c/0xb0
[ 26.886007][ T376] print_address_description+0x71/0x200
[ 26.891528][ T376] print_report+0x4a/0x60
[ 26.895836][ T376] kasan_report+0x122/0x150
[ 26.900316][ T376] ? rcu_segcblist_enqueue+0x9c/0xb0
[ 26.905583][ T376] __asan_report_store8_noabort+0x17/0x20
[ 26.911277][ T376] rcu_segcblist_enqueue+0x9c/0xb0
[ 26.916363][ T376] call_rcu+0x554/0xf50
[ 26.920499][ T376] ? __cfi_call_rcu+0x10/0x10
[ 26.925156][ T376] ? __kasan_check_write+0x14/0x20
[ 26.930263][ T376] ? selinux_inode_free_security+0x21f/0x230
[ 26.936224][ T376] security_inode_free+0xc5/0xe0
[ 26.941156][ T376] __destroy_inode+0x175/0x500
[ 26.945912][ T376] evict+0x777/0x8c0
[ 26.949799][ T376] ? proc_nr_inodes+0x2f0/0x2f0
[ 26.954634][ T376] ? _raw_spin_lock+0x94/0xf0
[ 26.959298][ T376] ? __cfi__raw_spin_lock+0x10/0x10
[ 26.964480][ T376] ? __kasan_check_write+0x14/0x20
[ 26.969572][ T376] iput+0x633/0x690
[ 26.973375][ T376] dentry_unlink_inode+0x346/0x3f0
[ 26.978463][ T376] __dentry_kill+0x46c/0x680
[ 26.983030][ T376] dentry_kill+0xc0/0x2a0
[ 26.987334][ T376] dput+0x42/0x80
[ 26.990943][ T376] __fput+0x5c0/0x8f0
[ 26.994904][ T376] ____fput+0x15/0x20
[ 26.998863][ T376] task_work_run+0x1e1/0x250
[ 27.003432][ T376] ? __cfi_task_work_run+0x10/0x10
[ 27.008523][ T376] ? __cfi___close_range+0x10/0x10
[ 27.013609][ T376] exit_to_user_mode_loop+0x9b/0xb0
[ 27.018782][ T376] exit_to_user_mode_prepare+0x87/0xd0
[ 27.024216][ T376] syscall_exit_to_user_mode+0x1a/0x30
[ 27.029653][ T376] do_syscall_64+0x58/0xa0
[ 27.034045][ T376] ? clear_bhb_loop+0x30/0x80
[ 27.038695][ T376] ? clear_bhb_loop+0x30/0x80
[ 27.043348][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 27.049223][ T376] RIP: 0033:0x7fc904d9e0d9
[ 27.053622][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 27.073204][ T376] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 27.081599][ T376] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 27.089547][ T376] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 27.097507][ T376] RBP: 00000000000068ac R08: 0000000000000001 R09: 0000000000000000
[ 27.105453][ T376] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 27.113607][ T376] R13: 00007fc905025fac R14: 00000000000068e0 R15: 00007fc905025fa0
[ 27.121596][ T376]
[ 27.124598][ T376]
[ 27.126904][ T376] Allocated by task 377:
[ 27.131122][ T376] kasan_set_track+0x4b/0x70
[ 27.135697][ T376] kasan_save_alloc_info+0x1f/0x30
[ 27.140786][ T376] __kasan_kmalloc+0x95/0xb0
[ 27.145358][ T376] __kmalloc+0xb4/0x1e0
[ 27.149508][ T376] l2tp_session_create+0x38/0xbd0
[ 27.154527][ T376] pppol2tp_connect+0xbf5/0x1640
[ 27.159443][ T376] __sys_connect+0x3da/0x460
[ 27.164014][ T376] __x64_sys_connect+0x7a/0x90
[ 27.168844][ T376] x64_sys_call+0x88d/0x9a0
[ 27.173331][ T376] do_syscall_64+0x4c/0xa0
[ 27.177727][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 27.183602][ T376]
[ 27.185901][ T376] Freed by task 340:
[ 27.189789][ T376] kasan_set_track+0x4b/0x70
[ 27.194360][ T376] kasan_save_free_info+0x2b/0x40
[ 27.199364][ T376] ____kasan_slab_free+0x132/0x180
[ 27.204457][ T376] __kasan_slab_free+0x11/0x20
[ 27.209204][ T376] slab_free_freelist_hook+0xc2/0x190
[ 27.214551][ T376] __kmem_cache_free+0xb7/0x1b0
[ 27.219392][ T376] kfree+0x6f/0xf0
[ 27.223093][ T376] l2tp_session_put+0xaf/0x1a0
[ 27.227835][ T376] l2tp_session_delete+0x3df/0x4d0
[ 27.232925][ T376] l2tp_tunnel_del_work+0x199/0x410
[ 27.238100][ T376] process_one_work+0x717/0xc30
[ 27.242930][ T376] worker_thread+0xa4d/0x11d0
[ 27.247625][ T376] kthread+0x281/0x320
[ 27.251698][ T376] ret_from_fork+0x1f/0x30
[ 27.256096][ T376]
[ 27.258398][ T376] Last potentially related work creation:
[ 27.264088][ T376] kasan_save_stack+0x3a/0x60
[ 27.268745][ T376] __kasan_record_aux_stack+0xb6/0xc0
[ 27.274095][ T376] kasan_record_aux_stack_noalloc+0xb/0x10
[ 27.279881][ T376] call_rcu+0xcf/0xf50
[ 27.283931][ T376] pppol2tp_release+0x1e3/0x2b0
[ 27.288762][ T376] sock_close+0xc9/0x220
[ 27.292988][ T376] __fput+0x1fd/0x8f0
[ 27.296949][ T376] ____fput+0x15/0x20
[ 27.300911][ T376] task_work_run+0x1e1/0x250
[ 27.305483][ T376] exit_to_user_mode_loop+0x9b/0xb0
[ 27.310662][ T376] exit_to_user_mode_prepare+0x87/0xd0
[ 27.316099][ T376] syscall_exit_to_user_mode+0x1a/0x30
[ 27.321553][ T376] do_syscall_64+0x58/0xa0
[ 27.325953][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 27.331832][ T376]
[ 27.334135][ T376] The buggy address belongs to the object at ffff888121633800
[ 27.334135][ T376] which belongs to the cache kmalloc-512 of size 512
[ 27.348163][ T376] The buggy address is located 400 bytes inside of
[ 27.348163][ T376] 512-byte region [ffff888121633800, ffff888121633a00)
[ 27.361417][ T376]
[ 27.363717][ T376] The buggy address belongs to the physical page:
[ 27.370109][ T376] page:ffffea0004858c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121630
[ 27.380365][ T376] head:ffffea0004858c00 order:2 compound_mapcount:0 compound_pincount:0
[ 27.388685][ T376] flags: 0x4000000000010200(slab|head|zone=1)
[ 27.394746][ T376] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 27.403307][ T376] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 27.411868][ T376] page dumped because: kasan: bad access detected
[ 27.418255][ T376] page_owner tracks the page as allocated
[ 27.423948][ T376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 372, tgid 372 (syz-executor), ts 26807230898, free_ts 25983478383
[ 27.446502][ T376] post_alloc_hook+0x1f5/0x210
[ 27.451254][ T376] prep_new_page+0x1c/0x110
[ 27.455738][ T376] get_page_from_freelist+0x2ca9/0x2d20
[ 27.461270][ T376] __alloc_pages+0x1fa/0x610
[ 27.465857][ T376] alloc_slab_page+0x6e/0xf0
[ 27.470445][ T376] new_slab+0x98/0x3e0
[ 27.474499][ T376] ___slab_alloc+0x70f/0xb70
[ 27.479077][ T376] __slab_alloc+0x5e/0xa0
[ 27.483387][ T376] __kmem_cache_alloc_node+0x204/0x2d0
[ 27.488827][ T376] __kmalloc+0xa4/0x1e0
[ 27.492962][ T376] fib6_info_alloc+0x34/0xe0
[ 27.497533][ T376] ip6_route_info_create+0x51b/0x14d0
[ 27.502890][ T376] ip6_route_add+0x27/0x130
[ 27.507397][ T376] addrconf_prefix_route+0x233/0x310
[ 27.512666][ T376] inet6_addr_add+0x527/0x9c0
[ 27.517325][ T376] inet6_rtm_newaddr+0x74a/0xa10
[ 27.522246][ T376] page last free stack trace:
[ 27.526896][ T376] free_unref_page_prepare+0x80c/0x820
[ 27.532339][ T376] free_unref_page+0x93/0x530
[ 27.537006][ T376] __free_pages+0x67/0x100
[ 27.541404][ T376] __vunmap+0xa3c/0xc00
[ 27.545535][ T376] vfree+0x61/0x90
[ 27.549236][ T376] kcov_close+0x2b/0x50
[ 27.553367][ T376] __fput+0x1fd/0x8f0
[ 27.557332][ T376] ____fput+0x15/0x20
[ 27.561291][ T376] task_work_run+0x1e1/0x250
[ 27.565862][ T376] do_exit+0xaf2/0x2850
[ 27.569998][ T376] do_group_exit+0x21b/0x2e0
[ 27.574571][ T376] get_signal+0x167c/0x1700
[ 27.579055][ T376] arch_do_signal_or_restart+0xd1/0x11c0
[ 27.584666][ T376] exit_to_user_mode_loop+0x7a/0xb0
[ 27.589842][ T376] exit_to_user_mode_prepare+0x87/0xd0
[ 27.595627][ T376] syscall_exit_to_user_mode+0x1a/0x30
[ 27.601072][ T376]
[ 27.603373][ T376] Memory state around the buggy address:
[ 27.608990][ T376] ffff888121633880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 27.617046][ T376] ffff888121633900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 27.625093][ T376] >ffff888121633980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 27.633134][ T376] ^
[ 27.637720][ T376] ffff888121633a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 27.645781][ T376] ffff888121633a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 27.653825][ T376] ==================================================================
[ 27.661869][ T376] Disabling lock debugging due to kernel taint
[ 27.681853][ T378] ------------[ cut here ]------------
[ 27.687336][ T378] WARNING: CPU: 1 PID: 378 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 27.697394][ T378] Modules linked in:
[ 27.701308][ T378] CPU: 1 PID: 378 Comm: syz.2.18 Tainted: G B syzkaller #0
[ 27.709895][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 27.719971][ T378] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 27.726288][ T378] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 27.745918][ T378] RSP: 0018:ffffc90000767cb0 EFLAGS: 00010293
[ 27.752004][ T378] RAX: ffffffff849bb307 RBX: ffff888115c02000 RCX: ffff88812169a880
[ 27.759995][ T378] RDX: 0000000000000000 RSI: 000000001293da40 RDI: 000000000c04eb7d
[ 27.767955][ T378] RBP: ffffc90000767cd0 R08: ffff888115c02083 R09: 1ffff11022b80410
[ 27.775929][ T378] R10: dffffc0000000000 R11: ffffed1022b80411 R12: dffffc0000000000
[ 27.783909][ T378] R13: dffffc0000000000 R14: 000000001293da40 R15: ffff88812d085000
[ 27.791904][ T378] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 27.800841][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.807402][ T378] CR2: 0000000000000000 CR3: 00000001154f3000 CR4: 00000000003506a0
[ 27.815457][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 27.823437][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 27.831571][ T378] Call Trace:
[ 27.834890][ T378]
[ 27.837981][ T378] pppol2tp_release+0x150/0x2b0
[ 27.842858][ T378] sock_close+0xc9/0x220
[ 27.847097][ T378] ? __cfi_sock_close+0x10/0x10
[ 27.851961][ T378] __fput+0x1fd/0x8f0
[ 27.855938][ T378] ____fput+0x15/0x20
[ 27.859931][ T378] task_work_run+0x1e1/0x250
[ 27.864515][ T378] ? __cfi_task_work_run+0x10/0x10
[ 27.869645][ T378] ? __cfi___close_range+0x10/0x10
[ 27.874744][ T378] exit_to_user_mode_loop+0x9b/0xb0
[ 27.879946][ T378] exit_to_user_mode_prepare+0x87/0xd0
[ 27.885394][ T378] syscall_exit_to_user_mode+0x1a/0x30
[ 27.890861][ T378] do_syscall_64+0x58/0xa0
[ 27.895267][ T378] ? clear_bhb_loop+0x30/0x80
[ 27.899959][ T378] ? clear_bhb_loop+0x30/0x80
[ 27.904627][ T378] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 27.910532][ T378] RIP: 0033:0x7fc904d9e0d9
[ 27.914948][ T378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 27.934572][ T378] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 27.942993][ T378] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 27.950963][ T378] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 27.958921][ T378] RBP: 0000000000006c0d R08: 0000000000000001 R09: 0000000000000000
[ 27.966903][ T378] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 27.974882][ T378] R13: 00007fc905025fac R14: 0000000000006c40 R15: 00007fc905025fa0
[ 27.982861][ T378]
[ 27.985866][ T378] ---[ end trace 0000000000000000 ]---
[ 28.003126][ T382] ------------[ cut here ]------------
[ 28.008609][ T382] WARNING: CPU: 1 PID: 382 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 28.018617][ T382] Modules linked in:
[ 28.022526][ T382] CPU: 1 PID: 382 Comm: syz.2.20 Tainted: G B W syzkaller #0
[ 28.031112][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 28.041201][ T382] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 28.047524][ T382] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 28.067145][ T382] RSP: 0018:ffffc90000a27cb0 EFLAGS: 00010293
[ 28.073242][ T382] RAX: ffffffff849bb307 RBX: ffff888115f37000 RCX: ffff888115c2e540
[ 28.081233][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 28.089193][ T382] RBP: ffffc90000a27cd0 R08: ffff888115f37083 R09: 1ffff11022be6e10
[ 28.097173][ T382] R10: dffffc0000000000 R11: ffffed1022be6e11 R12: dffffc0000000000
[ 28.105164][ T382] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812cc6ac00
[ 28.113134][ T382] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 28.122071][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.128633][ T382] CR2: 0000200000000240 CR3: 000000012d445000 CR4: 00000000003506a0
[ 28.136617][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.144601][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.152583][ T382] Call Trace:
[ 28.155848][ T382]
[ 28.158756][ T382] pppol2tp_release+0x150/0x2b0
[ 28.163610][ T382] sock_close+0xc9/0x220
[ 28.167851][ T382] ? __cfi_sock_close+0x10/0x10
[ 28.172702][ T382] __fput+0x1fd/0x8f0
[ 28.176682][ T382] ____fput+0x15/0x20
[ 28.180673][ T382] task_work_run+0x1e1/0x250
[ 28.185257][ T382] ? __cfi_task_work_run+0x10/0x10
[ 28.190376][ T382] ? __cfi___close_range+0x10/0x10
[ 28.195480][ T382] exit_to_user_mode_loop+0x9b/0xb0
[ 28.200720][ T382] exit_to_user_mode_prepare+0x87/0xd0
[ 28.206176][ T382] syscall_exit_to_user_mode+0x1a/0x30
[ 28.211653][ T382] do_syscall_64+0x58/0xa0
[ 28.216078][ T382] ? clear_bhb_loop+0x30/0x80
[ 28.220757][ T382] ? clear_bhb_loop+0x30/0x80
[ 28.225428][ T382] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.231323][ T382] RIP: 0033:0x7fc904d9e0d9
[ 28.235726][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 28.255437][ T382] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 28.263870][ T382] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 28.271866][ T382] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 28.279846][ T382] RBP: 0000000000006d4d R08: 0000000000000001 R09: 0000000000000000
[ 28.287795][ T382] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 28.295800][ T382] R13: 00007fc905025fac R14: 0000000000006d81 R15: 00007fc905025fa0
[ 28.303791][ T382]
[ 28.306793][ T382] ---[ end trace 0000000000000000 ]---
[ 28.412043][ T394] ------------[ cut here ]------------
[ 28.417507][ T394] WARNING: CPU: 1 PID: 394 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 28.427519][ T394] Modules linked in:
[ 28.431509][ T394] CPU: 1 PID: 394 Comm: syz.2.26 Tainted: G B W syzkaller #0
[ 28.440094][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 28.450154][ T394] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 28.456468][ T394] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 28.476091][ T394] RSP: 0018:ffffc90000a97cb0 EFLAGS: 00010293
[ 28.482172][ T394] RAX: ffffffff849bb307 RBX: ffff8881169df000 RCX: ffff8881169d1440
[ 28.490151][ T394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 28.498112][ T394] RBP: ffffc90000a97cd0 R08: ffff8881169df083 R09: 1ffff11022d3be10
[ 28.506087][ T394] R10: dffffc0000000000 R11: ffffed1022d3be11 R12: dffffc0000000000
[ 28.514067][ T394] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812115ac00
[ 28.522040][ T394] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 28.530978][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.537538][ T394] CR2: 0000200000000240 CR3: 0000000115095000 CR4: 00000000003506a0
[ 28.545516][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.553489][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.561464][ T394] Call Trace:
[ 28.564732][ T394]
[ 28.567640][ T394] pppol2tp_release+0x150/0x2b0
[ 28.572496][ T394] sock_close+0xc9/0x220
[ 28.576730][ T394] ? __cfi_sock_close+0x10/0x10
[ 28.581584][ T394] __fput+0x1fd/0x8f0
[ 28.585561][ T394] ____fput+0x15/0x20
[ 28.589552][ T394] task_work_run+0x1e1/0x250
[ 28.594134][ T394] ? __cfi_task_work_run+0x10/0x10
[ 28.599218][ T394] ? __cfi___close_range+0x10/0x10
[ 28.604335][ T394] exit_to_user_mode_loop+0x9b/0xb0
[ 28.609537][ T394] exit_to_user_mode_prepare+0x87/0xd0
[ 28.614993][ T394] syscall_exit_to_user_mode+0x1a/0x30
[ 28.620466][ T394] do_syscall_64+0x58/0xa0
[ 28.624875][ T394] ? clear_bhb_loop+0x30/0x80
[ 28.629551][ T394] ? clear_bhb_loop+0x30/0x80
[ 28.634221][ T394] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.640139][ T394] RIP: 0033:0x7fc904d9e0d9
[ 28.644545][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 28.664172][ T394] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 28.672597][ T394] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 28.680584][ T394] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 28.688544][ T394] RBP: 0000000000006ee7 R08: 0000000000000001 R09: 0000000000000000
[ 28.696624][ T394] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 28.704631][ T394] R13: 00007fc905025fac R14: 0000000000006f1a R15: 00007fc905025fa0
[ 28.712783][ T394]
[ 28.715843][ T394] ---[ end trace 0000000000000000 ]---
[ 28.734686][ T396] ------------[ cut here ]------------
[ 28.757094][ T396] WARNING: CPU: 0 PID: 396 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 28.767156][ T396] Modules linked in:
[ 28.771145][ T396] CPU: 0 PID: 396 Comm: syz.2.27 Tainted: G B W syzkaller #0
[ 28.779933][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 28.790139][ T396] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 28.796653][ T396] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 28.816304][ T396] RSP: 0018:ffffc90000a67cb0 EFLAGS: 00010293
[ 28.822392][ T396] RAX: ffffffff849bb307 RBX: ffff888110073000 RCX: ffff8881169d5100
[ 28.830371][ T396] RDX: 0000000000000000 RSI: 0000000021be3c40 RDI: 000000000c04eb7d
[ 28.838363][ T396] RBP: ffffc90000a67cd0 R08: ffff888110073083 R09: 1ffff1102200e610
[ 28.846373][ T396] R10: dffffc0000000000 R11: ffffed102200e611 R12: dffffc0000000000
[ 28.854368][ T396] R13: dffffc0000000000 R14: 0000000021be3c40 R15: ffff88811430d800
[ 28.862347][ T396] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 28.871293][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.877854][ T396] CR2: 0000000000000000 CR3: 0000000121d59000 CR4: 00000000003506b0
[ 28.885831][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.893810][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.901808][ T396] Call Trace:
[ 28.905072][ T396]
[ 28.907980][ T396] pppol2tp_release+0x150/0x2b0
[ 28.912850][ T396] sock_close+0xc9/0x220
[ 28.917086][ T396] ? __cfi_sock_close+0x10/0x10
[ 28.921946][ T396] __fput+0x1fd/0x8f0
[ 28.925922][ T396] ____fput+0x15/0x20
[ 28.929926][ T396] task_work_run+0x1e1/0x250
[ 28.934514][ T396] ? __cfi_task_work_run+0x10/0x10
[ 28.939629][ T396] ? __cfi___close_range+0x10/0x10
[ 28.944731][ T396] exit_to_user_mode_loop+0x9b/0xb0
[ 28.949940][ T396] exit_to_user_mode_prepare+0x87/0xd0
[ 28.955405][ T396] syscall_exit_to_user_mode+0x1a/0x30
[ 28.960883][ T396] do_syscall_64+0x58/0xa0
[ 28.965290][ T396] ? clear_bhb_loop+0x30/0x80
[ 28.969972][ T396] ? clear_bhb_loop+0x30/0x80
[ 28.974642][ T396] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.980566][ T396] RIP: 0033:0x7fc904d9e0d9
[ 28.984974][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.004609][ T396] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.013042][ T396] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 29.021024][ T396] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.029001][ T396] RBP: 000000000000702a R08: 0000000000000001 R09: 0000000000000000
[ 29.036975][ T396] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 29.044946][ T396] R13: 00007fc905025fac R14: 000000000000705d R15: 00007fc905025fa0
[ 29.052920][ T396]
[ 29.055929][ T396] ---[ end trace 0000000000000000 ]---
[ 29.071341][ T400] ------------[ cut here ]------------
[ 29.076808][ T400] refcount_t: underflow; use-after-free.
[ 29.082561][ T400] WARNING: CPU: 0 PID: 400 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 29.091905][ T400] Modules linked in:
[ 29.095776][ T400] CPU: 0 PID: 400 Comm: syz.2.29 Tainted: G B W syzkaller #0
[ 29.104423][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.114516][ T400] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 29.120728][ T400] Code: 05 01 48 c7 c7 80 0c ca 85 e8 bc 28 d9 fe 0f 0b eb c3 e8 13 9a 08 ff c6 05 f4 c9 26 05 01 48 c7 c7 e0 0c ca 85 e8 a0 28 d9 fe <0f> 0b eb a7 e8 f7 99 08 ff c6 05 d5 c9 26 05 01 48 c7 c7 20 0c ca
[ 29.140371][ T400] RSP: 0018:ffffc90000ac7c60 EFLAGS: 00010246
[ 29.146431][ T400] RAX: 1c63d241f9809b00 RBX: 0000000000000003 RCX: ffff8881169d2880
[ 29.154419][ T400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 29.162406][ T400] RBP: ffffc90000ac7c70 R08: ffffc90000ac7847 R09: 1ffff92000158f08
[ 29.170379][ T400] R10: dffffc0000000000 R11: fffff52000158f09 R12: 1ffff11022b91610
[ 29.178339][ T400] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[ 29.186313][ T400] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 29.195242][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.201836][ T400] CR2: 0000000000000000 CR3: 0000000121cf3000 CR4: 00000000003506b0
[ 29.209841][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.217800][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.225788][ T400] Call Trace:
[ 29.229066][ T400]
[ 29.232005][ T400] l2tp_session_put+0xc8/0x1a0
[ 29.236763][ T400] l2tp_session_delete+0x3df/0x4d0
[ 29.241886][ T400] pppol2tp_release+0x169/0x2b0
[ 29.246752][ T400] sock_close+0xc9/0x220
[ 29.250996][ T400] ? __cfi_sock_close+0x10/0x10
[ 29.255842][ T400] __fput+0x1fd/0x8f0
[ 29.259828][ T400] ____fput+0x15/0x20
[ 29.263801][ T400] task_work_run+0x1e1/0x250
[ 29.268364][ T400] ? __cfi_task_work_run+0x10/0x10
[ 29.273482][ T400] ? __cfi___close_range+0x10/0x10
[ 29.278602][ T400] exit_to_user_mode_loop+0x9b/0xb0
[ 29.283803][ T400] exit_to_user_mode_prepare+0x87/0xd0
[ 29.289255][ T400] syscall_exit_to_user_mode+0x1a/0x30
[ 29.294716][ T400] do_syscall_64+0x58/0xa0
[ 29.299128][ T400] ? clear_bhb_loop+0x30/0x80
[ 29.303802][ T400] ? clear_bhb_loop+0x30/0x80
[ 29.308465][ T400] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.314366][ T400] RIP: 0033:0x7fc904d9e0d9
[ 29.318772][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.338387][ T400] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.346832][ T400] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 29.354806][ T400] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.362779][ T400] RBP: 000000000000717b R08: 0000000000000001 R09: 0000000000000000
[ 29.370754][ T400] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 29.378700][ T400] R13: 00007fc905025fac R14: 00000000000071ad R15: 00007fc905025fa0
[ 29.386675][ T400]
[ 29.389698][ T400] ---[ end trace 0000000000000000 ]---
[ 29.400763][ T402] ------------[ cut here ]------------
[ 29.406246][ T402] WARNING: CPU: 1 PID: 402 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.416336][ T402] Modules linked in:
[ 29.420313][ T402] CPU: 1 PID: 402 Comm: syz.2.30 Tainted: G B W syzkaller #0
[ 29.428875][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.439012][ T402] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.445388][ T402] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 29.465053][ T402] RSP: 0018:ffffc90000ab7cb0 EFLAGS: 00010293
[ 29.471130][ T402] RAX: ffffffff849bb307 RBX: ffff888116bd0000 RCX: ffff888116bdbcc0
[ 29.479078][ T402] RDX: 0000000000000000 RSI: 0000000021bec100 RDI: 000000000c04eb7d
[ 29.487055][ T402] RBP: ffffc90000ab7cd0 R08: ffff888116bd0083 R09: 1ffff11022d7a010
[ 29.495047][ T402] R10: dffffc0000000000 R11: ffffed1022d7a011 R12: dffffc0000000000
[ 29.503022][ T402] R13: dffffc0000000000 R14: 0000000021bec100 R15: ffff8881215ec000
[ 29.511010][ T402] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.519963][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.526556][ T402] CR2: 0000000000000000 CR3: 00000001150a8000 CR4: 00000000003506a0
[ 29.534562][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.542551][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.550546][ T402] Call Trace:
[ 29.553816][ T402]
[ 29.556727][ T402] pppol2tp_release+0x150/0x2b0
[ 29.561591][ T402] sock_close+0xc9/0x220
[ 29.565828][ T402] ? __cfi_sock_close+0x10/0x10
[ 29.570728][ T402] __fput+0x1fd/0x8f0
[ 29.574706][ T402] ____fput+0x15/0x20
[ 29.578664][ T402] task_work_run+0x1e1/0x250
[ 29.583266][ T402] ? __cfi_task_work_run+0x10/0x10
[ 29.588372][ T402] ? __cfi___close_range+0x10/0x10
[ 29.593492][ T402] exit_to_user_mode_loop+0x9b/0xb0
[ 29.598683][ T402] exit_to_user_mode_prepare+0x87/0xd0
[ 29.604149][ T402] syscall_exit_to_user_mode+0x1a/0x30
[ 29.609611][ T402] do_syscall_64+0x58/0xa0
[ 29.614005][ T402] ? clear_bhb_loop+0x30/0x80
[ 29.618652][ T402] ? clear_bhb_loop+0x30/0x80
[ 29.623327][ T402] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.629220][ T402] RIP: 0033:0x7fc904d9e0d9
[ 29.633675][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.653291][ T402] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.661723][ T402] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 29.669712][ T402] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.677663][ T402] RBP: 00000000000072c3 R08: 0000000000000001 R09: 0000000000000000
[ 29.685635][ T402] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 29.693613][ T402] R13: 00007fc905025fac R14: 00000000000072f6 R15: 00007fc905025fa0
[ 29.701610][ T402]
[ 29.704617][ T402] ---[ end trace 0000000000000000 ]---
[ 29.715426][ T404] ------------[ cut here ]------------
[ 29.720934][ T404] WARNING: CPU: 1 PID: 404 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.730958][ T404] Modules linked in:
[ 29.734862][ T404] CPU: 1 PID: 404 Comm: syz.2.31 Tainted: G B W syzkaller #0
[ 29.743893][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.753959][ T404] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.760305][ T404] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 29.779939][ T404] RSP: 0018:ffffc90000a67cb0 EFLAGS: 00010293
[ 29.786010][ T404] RAX: ffffffff849bb307 RBX: ffff8881178d3000 RCX: ffff888116bde540
[ 29.793998][ T404] RDX: 0000000000000000 RSI: 00000000150a44c0 RDI: 000000000c04eb7d
[ 29.801988][ T404] RBP: ffffc90000a67cd0 R08: ffff8881178d3083 R09: 1ffff11022f1a610
[ 29.809983][ T404] R10: dffffc0000000000 R11: ffffed1022f1a611 R12: dffffc0000000000
[ 29.817949][ T404] R13: dffffc0000000000 R14: 00000000150a44c0 R15: ffff8881215ef800
[ 29.825925][ T404] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 29.834860][ T404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.841445][ T404] CR2: 0000000000000000 CR3: 0000000114e07000 CR4: 00000000003506a0
[ 29.849427][ T404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.857378][ T404] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.865352][ T404] Call Trace:
[ 29.868618][ T404]
[ 29.871549][ T404] pppol2tp_release+0x150/0x2b0
[ 29.876398][ T404] sock_close+0xc9/0x220
[ 29.880660][ T404] ? __cfi_sock_close+0x10/0x10
[ 29.885507][ T404] __fput+0x1fd/0x8f0
[ 29.889505][ T404] ____fput+0x15/0x20
[ 29.893478][ T404] task_work_run+0x1e1/0x250
[ 29.898064][ T404] ? __cfi_task_work_run+0x10/0x10
[ 29.903196][ T404] ? __cfi___close_range+0x10/0x10
[ 29.908297][ T404] exit_to_user_mode_loop+0x9b/0xb0
[ 29.913513][ T404] exit_to_user_mode_prepare+0x87/0xd0
[ 29.918968][ T404] syscall_exit_to_user_mode+0x1a/0x30
[ 29.924456][ T404] do_syscall_64+0x58/0xa0
[ 29.928871][ T404] ? clear_bhb_loop+0x30/0x80
[ 29.933555][ T404] ? clear_bhb_loop+0x30/0x80
[ 29.938221][ T404] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.944127][ T404] RIP: 0033:0x7fc904d9e0d9
[ 29.948534][ T404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.968174][ T404] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.976601][ T404] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 29.984576][ T404] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.992559][ T404] RBP: 00000000000073fe R08: 0000000000000001 R09: 0000000000000000
[ 30.000538][ T404] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 30.008499][ T404] R13: 00007fc905025fac R14: 0000000000007431 R15: 00007fc905025fa0
[ 30.016475][ T404]
[ 30.019501][ T404] ---[ end trace 0000000000000000 ]---
[ 30.035914][ T408] ------------[ cut here ]------------
[ 30.041422][ T408] WARNING: CPU: 1 PID: 408 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.051446][ T408] Modules linked in:
[ 30.055345][ T408] CPU: 1 PID: 408 Comm: syz.2.33 Tainted: G B W syzkaller #0
[ 30.063942][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.074004][ T408] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.080345][ T408] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 30.099961][ T408] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 30.106007][ T408] RAX: ffffffff849bb307 RBX: ffff888114d8e000 RCX: ffff888117898000
[ 30.113985][ T408] RDX: 0000000000000000 RSI: 00000000150a4600 RDI: 000000000c04eb7d
[ 30.121964][ T408] RBP: ffffc90000ae7cd0 R08: ffff888114d8e083 R09: 1ffff110229b1c10
[ 30.129946][ T408] R10: dffffc0000000000 R11: ffffed10229b1c11 R12: dffffc0000000000
[ 30.137909][ T408] R13: dffffc0000000000 R14: 00000000150a4600 R15: ffff8881215ecc00
[ 30.145885][ T408] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 30.154827][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.161410][ T408] CR2: 0000000000000000 CR3: 00000001171f0000 CR4: 00000000003506a0
[ 30.169402][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.177363][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.185353][ T408] Call Trace:
[ 30.188620][ T408]
[ 30.191554][ T408] pppol2tp_release+0x150/0x2b0
[ 30.196402][ T408] sock_close+0xc9/0x220
[ 30.200650][ T408] ? __cfi_sock_close+0x10/0x10
[ 30.205494][ T408] __fput+0x1fd/0x8f0
[ 30.209479][ T408] ____fput+0x15/0x20
[ 30.213456][ T408] task_work_run+0x1e1/0x250
[ 30.218024][ T408] ? __cfi_task_work_run+0x10/0x10
[ 30.223139][ T408] ? __cfi___close_range+0x10/0x10
[ 30.228243][ T408] exit_to_user_mode_loop+0x9b/0xb0
[ 30.233452][ T408] exit_to_user_mode_prepare+0x87/0xd0
[ 30.238994][ T408] syscall_exit_to_user_mode+0x1a/0x30
[ 30.244464][ T408] do_syscall_64+0x58/0xa0
[ 30.248876][ T408] ? clear_bhb_loop+0x30/0x80
[ 30.253560][ T408] ? clear_bhb_loop+0x30/0x80
[ 30.258226][ T408] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.264127][ T408] RIP: 0033:0x7fc904d9e0d9
[ 30.268532][ T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.288145][ T408] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.296585][ T408] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 30.304595][ T408] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.312581][ T408] RBP: 000000000000753f R08: 0000000000000001 R09: 0000000000000000
[ 30.320567][ T408] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 30.328528][ T408] R13: 00007fc905025fac R14: 0000000000007572 R15: 00007fc905025fa0
[ 30.336512][ T408]
[ 30.339536][ T408] ---[ end trace 0000000000000000 ]---
[ 30.392861][ T414] ------------[ cut here ]------------
[ 30.398342][ T414] WARNING: CPU: 1 PID: 414 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.408426][ T414] Modules linked in:
[ 30.412364][ T414] CPU: 1 PID: 414 Comm: syz.2.36 Tainted: G B W syzkaller #0
[ 30.421021][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.431119][ T414] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.437432][ T414] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 30.457148][ T414] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 30.463371][ T414] RAX: ffffffff849bb307 RBX: ffff888114d8b000 RCX: ffff88811789a880
[ 30.471410][ T414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 30.479404][ T414] RBP: ffffc90000ae7cd0 R08: ffff888114d8b083 R09: 1ffff110229b1610
[ 30.487461][ T414] R10: dffffc0000000000 R11: ffffed10229b1611 R12: dffffc0000000000
[ 30.495441][ T414] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811431d000
[ 30.503443][ T414] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 30.512477][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.519054][ T414] CR2: 0000000000000000 CR3: 000000010fa69000 CR4: 00000000003506a0
[ 30.527080][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.535177][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.543210][ T414] Call Trace:
[ 30.546502][ T414]
[ 30.549447][ T414] pppol2tp_release+0x150/0x2b0
[ 30.554319][ T414] sock_close+0xc9/0x220
[ 30.558563][ T414] ? __cfi_sock_close+0x10/0x10
[ 30.563422][ T414] __fput+0x1fd/0x8f0
[ 30.567402][ T414] ____fput+0x15/0x20
[ 30.571398][ T414] task_work_run+0x1e1/0x250
[ 30.575984][ T414] ? __cfi_task_work_run+0x10/0x10
[ 30.581105][ T414] ? __cfi___close_range+0x10/0x10
[ 30.586209][ T414] exit_to_user_mode_loop+0x9b/0xb0
[ 30.591411][ T414] exit_to_user_mode_prepare+0x87/0xd0
[ 30.596862][ T414] syscall_exit_to_user_mode+0x1a/0x30
[ 30.602352][ T414] do_syscall_64+0x58/0xa0
[ 30.606763][ T414] ? clear_bhb_loop+0x30/0x80
[ 30.611531][ T414] ? clear_bhb_loop+0x30/0x80
[ 30.616196][ T414] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.622094][ T414] RIP: 0033:0x7fc904d9e0d9
[ 30.626499][ T414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.646133][ T414] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.654558][ T414] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 30.662627][ T414] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.670601][ T414] RBP: 00000000000076a4 R08: 0000000000000001 R09: 0000000000000000
[ 30.678552][ T414] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 30.686530][ T414] R13: 00007fc905025fac R14: 00000000000076d7 R15: 00007fc905025fa0
[ 30.694513][ T414]
[ 30.697511][ T414] ---[ end trace 0000000000000000 ]---
[ 30.708521][ T416] ------------[ cut here ]------------
[ 30.714003][ T416] WARNING: CPU: 0 PID: 416 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.724004][ T416] Modules linked in:
[ 30.727887][ T416] CPU: 0 PID: 416 Comm: syz.2.37 Tainted: G B W syzkaller #0
[ 30.736496][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.746565][ T416] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.752922][ T416] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 30.772558][ T416] RSP: 0018:ffffc90000aa7cb0 EFLAGS: 00010293
[ 30.778610][ T416] RAX: ffffffff849bb307 RBX: ffff88811613b000 RCX: ffff888117300000
[ 30.786590][ T416] RDX: 0000000000000000 RSI: 0000000015093380 RDI: 000000000c04eb7d
[ 30.794567][ T416] RBP: ffffc90000aa7cd0 R08: ffff88811613b083 R09: 1ffff11022c27610
[ 30.802543][ T416] R10: dffffc0000000000 R11: ffffed1022c27611 R12: dffffc0000000000
[ 30.810605][ T416] R13: dffffc0000000000 R14: 0000000015093380 R15: ffff88812c04e800
[ 30.818570][ T416] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.827504][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.834105][ T416] CR2: 0000000000000000 CR3: 00000001224cb000 CR4: 00000000003506b0
[ 30.842098][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.850173][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.858128][ T416] Call Trace:
[ 30.861521][ T416]
[ 30.864454][ T416] pppol2tp_release+0x150/0x2b0
[ 30.869336][ T416] sock_close+0xc9/0x220
[ 30.873612][ T416] ? __cfi_sock_close+0x10/0x10
[ 30.878444][ T416] __fput+0x1fd/0x8f0
[ 30.882428][ T416] ____fput+0x15/0x20
[ 30.886407][ T416] task_work_run+0x1e1/0x250
[ 30.891023][ T416] ? __cfi_task_work_run+0x10/0x10
[ 30.896129][ T416] ? __cfi___close_range+0x10/0x10
[ 30.901247][ T416] exit_to_user_mode_loop+0x9b/0xb0
[ 30.906437][ T416] exit_to_user_mode_prepare+0x87/0xd0
[ 30.911900][ T416] syscall_exit_to_user_mode+0x1a/0x30
[ 30.917350][ T416] do_syscall_64+0x58/0xa0
[ 30.921769][ T416] ? clear_bhb_loop+0x30/0x80
[ 30.926438][ T416] ? clear_bhb_loop+0x30/0x80
[ 30.931122][ T416] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.937015][ T416] RIP: 0033:0x7fc904d9e0d9
[ 30.941429][ T416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.961075][ T416] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.969505][ T416] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 30.977484][ T416] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.985461][ T416] RBP: 00000000000077e0 R08: 0000000000000001 R09: 0000000000000000
[ 30.993439][ T416] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 31.001411][ T416] R13: 00007fc905025fac R14: 0000000000007812 R15: 00007fc905025fa0
[ 31.009401][ T416]
[ 31.012402][ T416] ---[ end trace 0000000000000000 ]---
[ 31.027326][ T420] ------------[ cut here ]------------
[ 31.032867][ T420] WARNING: CPU: 0 PID: 420 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.042947][ T420] Modules linked in:
[ 31.046843][ T420] CPU: 0 PID: 420 Comm: syz.2.39 Tainted: G B W syzkaller #0
[ 31.055545][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.065662][ T420] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.072156][ T420] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.091792][ T420] RSP: 0018:ffffc90000b07cb0 EFLAGS: 00010293
[ 31.097857][ T420] RAX: ffffffff849bb307 RBX: ffff888114e91000 RCX: ffff888115d4a880
[ 31.105837][ T420] RDX: 0000000000000000 RSI: 0000000015093280 RDI: 000000000c04eb7d
[ 31.113842][ T420] RBP: ffffc90000b07cd0 R08: ffff888114e91083 R09: 1ffff110229d2210
[ 31.121816][ T420] R10: dffffc0000000000 R11: ffffed10229d2211 R12: dffffc0000000000
[ 31.129802][ T420] R13: dffffc0000000000 R14: 0000000015093280 R15: ffff88812c04f000
[ 31.137753][ T420] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.146684][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.153274][ T420] CR2: 0000000000000000 CR3: 0000000121ce5000 CR4: 00000000003506b0
[ 31.161255][ T420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.169217][ T420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.177202][ T420] Call Trace:
[ 31.180485][ T420]
[ 31.183396][ T420] pppol2tp_release+0x150/0x2b0
[ 31.188230][ T420] sock_close+0xc9/0x220
[ 31.192473][ T420] ? __cfi_sock_close+0x10/0x10
[ 31.197318][ T420] __fput+0x1fd/0x8f0
[ 31.201308][ T420] ____fput+0x15/0x20
[ 31.205284][ T420] task_work_run+0x1e1/0x250
[ 31.209879][ T420] ? __cfi_task_work_run+0x10/0x10
[ 31.214980][ T420] ? __cfi___close_range+0x10/0x10
[ 31.220096][ T420] exit_to_user_mode_loop+0x9b/0xb0
[ 31.225288][ T420] exit_to_user_mode_prepare+0x87/0xd0
[ 31.230758][ T420] syscall_exit_to_user_mode+0x1a/0x30
[ 31.236206][ T420] do_syscall_64+0x58/0xa0
[ 31.240629][ T420] ? clear_bhb_loop+0x30/0x80
[ 31.245295][ T420] ? clear_bhb_loop+0x30/0x80
[ 31.249975][ T420] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.255950][ T420] RIP: 0033:0x7fc904d9e0d9
[ 31.260371][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.279988][ T420] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.288382][ T420] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 31.296394][ T420] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.304373][ T420] RBP: 000000000000791e R08: 0000000000000001 R09: 0000000000000000
[ 31.312350][ T420] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 31.320324][ T420] R13: 00007fc905025fac R14: 0000000000007951 R15: 00007fc905025fa0
[ 31.328281][ T420]
[ 31.331316][ T420] ---[ end trace 0000000000000000 ]---
[ 31.342892][ T422] ------------[ cut here ]------------
[ 31.348363][ T422] WARNING: CPU: 1 PID: 422 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.358417][ T422] Modules linked in:
[ 31.362436][ T422] CPU: 1 PID: 422 Comm: syz.2.40 Tainted: G B W syzkaller #0
[ 31.371078][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.381221][ T422] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
2026/08/06 10:42:50 executed programs: 25
[ 31.387552][ T422] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.390215][ T28] kauditd_printk_skb: 41 callbacks suppressed
[ 31.390225][ T28] audit: type=1400 audit(1786012970.049:115): avc: denied { write } for pid=295 comm="syz-execprog" path="pipe:[15545]" dev="pipefs" ino=15545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 31.407276][ T422] RSP: 0018:ffffc90000b07cb0 EFLAGS: 00010293
[ 31.442649][ T422] RAX: ffffffff849bb307 RBX: ffff88811848b000 RCX: ffff888115d49440
[ 31.450657][ T422] RDX: 0000000000000000 RSI: 0000000015093080 RDI: 000000000c04eb7d
[ 31.458619][ T422] RBP: ffffc90000b07cd0 R08: ffff88811848b083 R09: 1ffff11023091610
[ 31.466607][ T422] R10: dffffc0000000000 R11: ffffed1023091611 R12: dffffc0000000000
[ 31.474602][ T422] R13: dffffc0000000000 R14: 0000000015093080 R15: ffff888113996c00
[ 31.482634][ T422] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.491698][ T422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.498302][ T422] CR2: 0000000000000000 CR3: 00000001228a8000 CR4: 00000000003506a0
[ 31.506294][ T422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.514278][ T422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.522258][ T422] Call Trace:
[ 31.525530][ T422]
[ 31.528442][ T422] pppol2tp_release+0x150/0x2b0
[ 31.533300][ T422] sock_close+0xc9/0x220
[ 31.537538][ T422] ? __cfi_sock_close+0x10/0x10
[ 31.542396][ T422] __fput+0x1fd/0x8f0
[ 31.546376][ T422] ____fput+0x15/0x20
[ 31.550395][ T422] task_work_run+0x1e1/0x250
[ 31.554992][ T422] ? __cfi_task_work_run+0x10/0x10
[ 31.560117][ T422] ? __cfi___close_range+0x10/0x10
[ 31.565223][ T422] exit_to_user_mode_loop+0x9b/0xb0
[ 31.570430][ T422] exit_to_user_mode_prepare+0x87/0xd0
[ 31.575882][ T422] syscall_exit_to_user_mode+0x1a/0x30
[ 31.581347][ T422] do_syscall_64+0x58/0xa0
[ 31.585771][ T422] ? clear_bhb_loop+0x30/0x80
[ 31.590453][ T422] ? clear_bhb_loop+0x30/0x80
[ 31.595120][ T422] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.601017][ T422] RIP: 0033:0x7fc904d9e0d9
[ 31.605424][ T422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.625043][ T422] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.633467][ T422] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 31.641444][ T422] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.649599][ T422] RBP: 0000000000007a5a R08: 0000000000000001 R09: 0000000000000000
[ 31.657558][ T422] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 31.665638][ T422] R13: 00007fc905025fac R14: 0000000000007a8d R15: 00007fc905025fa0
[ 31.673636][ T422]
[ 31.676647][ T422] ---[ end trace 0000000000000000 ]---
[ 31.691939][ T426] ------------[ cut here ]------------
[ 31.697409][ T426] WARNING: CPU: 1 PID: 426 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.707510][ T426] Modules linked in:
[ 31.711488][ T426] CPU: 1 PID: 426 Comm: syz.2.42 Tainted: G B W syzkaller #0
[ 31.720146][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.730280][ T426] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.736594][ T426] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.756372][ T426] RSP: 0018:ffffc90000ac7cb0 EFLAGS: 00010293
[ 31.762475][ T426] RAX: ffffffff849bb307 RBX: ffff888118489000 RCX: ffff8881181f6540
[ 31.770462][ T426] RDX: 0000000000000000 RSI: 00000000154fc6c0 RDI: 000000000c04eb7d
[ 31.778416][ T426] RBP: ffffc90000ac7cd0 R08: ffff888118489083 R09: 1ffff11023091210
[ 31.786396][ T426] R10: dffffc0000000000 R11: ffffed1023091211 R12: dffffc0000000000
[ 31.794373][ T426] R13: dffffc0000000000 R14: 00000000154fc6c0 R15: ffff888113995800
[ 31.802346][ T426] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.811379][ T426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.817943][ T426] CR2: 0000000000000000 CR3: 0000000114e01000 CR4: 00000000003506a0
[ 31.825980][ T426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.833966][ T426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.841943][ T426] Call Trace:
[ 31.845211][ T426]
[ 31.848122][ T426] pppol2tp_release+0x150/0x2b0
[ 31.852977][ T426] sock_close+0xc9/0x220
[ 31.857216][ T426] ? __cfi_sock_close+0x10/0x10
[ 31.862095][ T426] __fput+0x1fd/0x8f0
[ 31.866095][ T426] ____fput+0x15/0x20
[ 31.870082][ T426] task_work_run+0x1e1/0x250
[ 31.874665][ T426] ? __cfi_task_work_run+0x10/0x10
[ 31.879777][ T426] ? __cfi___close_range+0x10/0x10
[ 31.884882][ T426] exit_to_user_mode_loop+0x9b/0xb0
[ 31.890183][ T426] exit_to_user_mode_prepare+0x87/0xd0
[ 31.895626][ T426] syscall_exit_to_user_mode+0x1a/0x30
[ 31.901149][ T426] do_syscall_64+0x58/0xa0
[ 31.905562][ T426] ? clear_bhb_loop+0x30/0x80
[ 31.910252][ T426] ? clear_bhb_loop+0x30/0x80
[ 31.914932][ T426] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.920830][ T426] RIP: 0033:0x7fc904d9e0d9
[ 31.925271][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.944890][ T426] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.953313][ T426] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 31.961308][ T426] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.969271][ T426] RBP: 0000000000007bb7 R08: 0000000000000001 R09: 0000000000000000
[ 31.977332][ T426] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 31.985364][ T426] R13: 00007fc905025fac R14: 0000000000007bea R15: 00007fc905025fa0
[ 31.993346][ T426]
[ 31.996357][ T426] ---[ end trace 0000000000000000 ]---
[ 32.064079][ T436] ------------[ cut here ]------------
[ 32.069580][ T436] WARNING: CPU: 1 PID: 436 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.079585][ T436] Modules linked in:
[ 32.083470][ T436] CPU: 1 PID: 436 Comm: syz.2.47 Tainted: G B W syzkaller #0
[ 32.092064][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.102177][ T436] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.108502][ T436] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.128306][ T436] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 32.134419][ T436] RAX: ffffffff849bb307 RBX: ffff8881188c2000 RCX: ffff888118889440
[ 32.142412][ T436] RDX: 0000000000000000 RSI: 000000000ff92a40 RDI: 000000000c04eb7d
[ 32.150393][ T436] RBP: ffffc90000ae7cd0 R08: ffff8881188c2083 R09: 1ffff11023118410
[ 32.158374][ T436] R10: dffffc0000000000 R11: ffffed1023118411 R12: dffffc0000000000
[ 32.166353][ T436] R13: dffffc0000000000 R14: 000000000ff92a40 R15: ffff888122841400
[ 32.174334][ T436] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.183365][ T436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.189958][ T436] CR2: 0000000000000000 CR3: 000000010998f000 CR4: 00000000003506a0
[ 32.197915][ T436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.205899][ T436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.213880][ T436] Call Trace:
[ 32.217142][ T436]
[ 32.220077][ T436] pppol2tp_release+0x150/0x2b0
[ 32.224923][ T436] sock_close+0xc9/0x220
[ 32.229150][ T436] ? __cfi_sock_close+0x10/0x10
[ 32.234019][ T436] __fput+0x1fd/0x8f0
[ 32.238022][ T436] ____fput+0x15/0x20
[ 32.242016][ T436] task_work_run+0x1e1/0x250
[ 32.246614][ T436] ? __cfi_task_work_run+0x10/0x10
[ 32.251741][ T436] ? __cfi___close_range+0x10/0x10
[ 32.256875][ T436] exit_to_user_mode_loop+0x9b/0xb0
[ 32.262100][ T436] exit_to_user_mode_prepare+0x87/0xd0
[ 32.267564][ T436] syscall_exit_to_user_mode+0x1a/0x30
[ 32.273036][ T436] do_syscall_64+0x58/0xa0
[ 32.277445][ T436] ? clear_bhb_loop+0x30/0x80
[ 32.282129][ T436] ? clear_bhb_loop+0x30/0x80
[ 32.286800][ T436] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.292832][ T436] RIP: 0033:0x7fc904d9e0d9
[ 32.297290][ T436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.316981][ T436] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.325415][ T436] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 32.333392][ T436] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.341389][ T436] RBP: 0000000000007d2b R08: 0000000000000001 R09: 0000000000000000
[ 32.349382][ T436] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 32.357349][ T436] R13: 00007fc905025fac R14: 0000000000007d5e R15: 00007fc905025fa0
[ 32.365352][ T436]
[ 32.368361][ T436] ---[ end trace 0000000000000000 ]---
[ 32.431254][ T446] ------------[ cut here ]------------
[ 32.436737][ T446] WARNING: CPU: 0 PID: 446 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.446747][ T446] Modules linked in:
[ 32.450701][ T446] CPU: 0 PID: 446 Comm: syz.2.52 Tainted: G B W syzkaller #0
[ 32.459290][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.469421][ T446] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.475751][ T446] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.495432][ T446] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 32.501639][ T446] RAX: ffffffff849bb307 RBX: ffff888118702000 RCX: ffff88811888bcc0
[ 32.509674][ T446] RDX: 0000000000000000 RSI: 0000000015089e80 RDI: 000000000c04eb7d
[ 32.517645][ T446] RBP: ffffc90000ae7cd0 R08: ffff888118702083 R09: 1ffff110230e0410
[ 32.525639][ T446] R10: dffffc0000000000 R11: ffffed10230e0411 R12: dffffc0000000000
[ 32.533686][ T446] R13: dffffc0000000000 R14: 0000000015089e80 R15: ffff8881225f6800
[ 32.541741][ T446] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.550683][ T446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.557244][ T446] CR2: 0000000000000000 CR3: 0000000117140000 CR4: 00000000003506b0
[ 32.565223][ T446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.573210][ T446] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.581211][ T446] Call Trace:
[ 32.584480][ T446]
[ 32.587396][ T446] pppol2tp_release+0x150/0x2b0
[ 32.592251][ T446] sock_close+0xc9/0x220
[ 32.596503][ T446] ? __cfi_sock_close+0x10/0x10
[ 32.601358][ T446] __fput+0x1fd/0x8f0
[ 32.605337][ T446] ____fput+0x15/0x20
[ 32.609297][ T446] task_work_run+0x1e1/0x250
[ 32.614080][ T446] ? __cfi_task_work_run+0x10/0x10
[ 32.619205][ T446] ? __cfi___close_range+0x10/0x10
[ 32.624382][ T446] exit_to_user_mode_loop+0x9b/0xb0
[ 32.629593][ T446] exit_to_user_mode_prepare+0x87/0xd0
[ 32.635032][ T446] syscall_exit_to_user_mode+0x1a/0x30
[ 32.640496][ T446] do_syscall_64+0x58/0xa0
[ 32.644926][ T446] ? clear_bhb_loop+0x30/0x80
[ 32.649604][ T446] ? clear_bhb_loop+0x30/0x80
[ 32.654273][ T446] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.660175][ T446] RIP: 0033:0x7fc904d9e0d9
[ 32.664582][ T446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.684196][ T446] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.692679][ T446] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 32.700734][ T446] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.708722][ T446] RBP: 0000000000007e9a R08: 0000000000000001 R09: 0000000000000000
[ 32.716722][ T446] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 32.724725][ T446] R13: 00007fc905025fac R14: 0000000000007ecd R15: 00007fc905025fa0
[ 32.732704][ T446]
[ 32.735714][ T446] ---[ end trace 0000000000000000 ]---
[ 32.746501][ T448] ------------[ cut here ]------------
[ 32.752006][ T448] WARNING: CPU: 0 PID: 448 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.762007][ T448] Modules linked in:
[ 32.765894][ T448] CPU: 0 PID: 448 Comm: syz.2.53 Tainted: G B W syzkaller #0
[ 32.774493][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.784568][ T448] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.790929][ T448] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.810551][ T448] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 32.816599][ T448] RAX: ffffffff849bb307 RBX: ffff888118f11000 RCX: ffff888118f0a880
[ 32.824577][ T448] RDX: 0000000000000000 RSI: 0000000015e00240 RDI: 000000000c04eb7d
[ 32.832556][ T448] RBP: ffffc90000ae7cd0 R08: ffff888118f11083 R09: 1ffff110231e2210
[ 32.840530][ T448] R10: dffffc0000000000 R11: ffffed10231e2211 R12: dffffc0000000000
[ 32.848495][ T448] R13: dffffc0000000000 R14: 0000000015e00240 R15: ffff8881225f4c00
[ 32.856494][ T448] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.865432][ T448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.872020][ T448] CR2: 0000000000000000 CR3: 0000000114de8000 CR4: 00000000003506b0
[ 32.879996][ T448] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.887964][ T448] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.895959][ T448] Call Trace:
[ 32.899225][ T448]
[ 32.902156][ T448] pppol2tp_release+0x150/0x2b0
[ 32.907004][ T448] sock_close+0xc9/0x220
[ 32.911253][ T448] ? __cfi_sock_close+0x10/0x10
[ 32.916118][ T448] __fput+0x1fd/0x8f0
[ 32.920105][ T448] ____fput+0x15/0x20
[ 32.924078][ T448] task_work_run+0x1e1/0x250
[ 32.928649][ T448] ? __cfi_task_work_run+0x10/0x10
[ 32.933779][ T448] ? __cfi___close_range+0x10/0x10
[ 32.938888][ T448] exit_to_user_mode_loop+0x9b/0xb0
[ 32.944107][ T448] exit_to_user_mode_prepare+0x87/0xd0
[ 32.949579][ T448] syscall_exit_to_user_mode+0x1a/0x30
[ 32.955030][ T448] do_syscall_64+0x58/0xa0
[ 32.959458][ T448] ? clear_bhb_loop+0x30/0x80
[ 32.964129][ T448] ? clear_bhb_loop+0x30/0x80
[ 32.968782][ T448] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.974694][ T448] RIP: 0033:0x7fc904d9e0d9
[ 32.979099][ T448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.998733][ T448] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.007157][ T448] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 33.015129][ T448] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.023105][ T448] RBP: 0000000000007fd5 R08: 0000000000000001 R09: 0000000000000000
[ 33.031083][ T448] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 33.039045][ T448] R13: 00007fc905025fac R14: 0000000000008008 R15: 00007fc905025fa0
[ 33.047052][ T448]
[ 33.050079][ T448] ---[ end trace 0000000000000000 ]---
[ 33.061451][ T450] ------------[ cut here ]------------
[ 33.066932][ T450] WARNING: CPU: 0 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.076951][ T450] Modules linked in:
[ 33.080861][ T450] CPU: 0 PID: 450 Comm: syz.2.54 Tainted: G B W syzkaller #0
[ 33.089557][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.099688][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.106017][ T450] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.125714][ T450] RSP: 0018:ffffc90000d07cb0 EFLAGS: 00010293
[ 33.131788][ T450] RAX: ffffffff849bb307 RBX: ffff888118f10000 RCX: ffff888118f09440
[ 33.139762][ T450] RDX: 0000000000000000 RSI: 000000000fa6b680 RDI: 000000000c04eb7d
[ 33.147725][ T450] RBP: ffffc90000d07cd0 R08: ffff888118f10083 R09: 1ffff110231e2010
[ 33.155700][ T450] R10: dffffc0000000000 R11: ffffed10231e2011 R12: dffffc0000000000
[ 33.163677][ T450] R13: dffffc0000000000 R14: 000000000fa6b680 R15: ffff888118761c00
[ 33.171648][ T450] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.180584][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.187146][ T450] CR2: 0000000000000000 CR3: 0000000122a9c000 CR4: 00000000003506b0
[ 33.195117][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.203093][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.211083][ T450] Call Trace:
[ 33.214351][ T450]
[ 33.217259][ T450] pppol2tp_release+0x150/0x2b0
[ 33.222109][ T450] sock_close+0xc9/0x220
[ 33.226349][ T450] ? __cfi_sock_close+0x10/0x10
[ 33.231199][ T450] __fput+0x1fd/0x8f0
[ 33.235177][ T450] ____fput+0x15/0x20
[ 33.239137][ T450] task_work_run+0x1e1/0x250
[ 33.243729][ T450] ? __cfi_task_work_run+0x10/0x10
[ 33.248835][ T450] ? __cfi___close_range+0x10/0x10
[ 33.253948][ T450] exit_to_user_mode_loop+0x9b/0xb0
[ 33.259166][ T450] exit_to_user_mode_prepare+0x87/0xd0
[ 33.264634][ T450] syscall_exit_to_user_mode+0x1a/0x30
[ 33.270124][ T450] do_syscall_64+0x58/0xa0
[ 33.274520][ T450] ? clear_bhb_loop+0x30/0x80
[ 33.279171][ T450] ? clear_bhb_loop+0x30/0x80
[ 33.283876][ T450] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.289794][ T450] RIP: 0033:0x7fc904d9e0d9
[ 33.294200][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.313844][ T450] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.322268][ T450] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 33.330239][ T450] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.338198][ T450] RBP: 0000000000008110 R08: 0000000000000001 R09: 0000000000000000
[ 33.346180][ T450] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 33.354161][ T450] R13: 00007fc905025fac R14: 0000000000008143 R15: 00007fc905025fa0
[ 33.362137][ T450]
[ 33.365143][ T450] ---[ end trace 0000000000000000 ]---
[ 33.426172][ T458] ------------[ cut here ]------------
[ 33.431680][ T458] WARNING: CPU: 1 PID: 458 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.441701][ T458] Modules linked in:
[ 33.445587][ T458] CPU: 1 PID: 458 Comm: syz.2.58 Tainted: G B W syzkaller #0
[ 33.454177][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.464329][ T458] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.470760][ T458] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.490589][ T458] RSP: 0018:ffffc90000d07cb0 EFLAGS: 00010293
[ 33.496652][ T458] RAX: ffffffff849bb307 RBX: ffff888119547000 RCX: ffff8881196c2880
[ 33.504635][ T458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 33.512615][ T458] RBP: ffffc90000d07cd0 R08: ffff888119547083 R09: 1ffff110232a8e10
[ 33.520614][ T458] R10: dffffc0000000000 R11: ffffed10232a8e11 R12: dffffc0000000000
[ 33.528579][ T458] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811230b400
[ 33.536553][ T458] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.545489][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.552077][ T458] CR2: 0000000000000000 CR3: 0000000120580000 CR4: 00000000003506a0
[ 33.560054][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.568025][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.576023][ T458] Call Trace:
[ 33.579298][ T458]
[ 33.582228][ T458] pppol2tp_release+0x150/0x2b0
[ 33.587076][ T458] sock_close+0xc9/0x220
[ 33.591343][ T458] ? __cfi_sock_close+0x10/0x10
[ 33.596187][ T458] __fput+0x1fd/0x8f0
[ 33.600173][ T458] ____fput+0x15/0x20
[ 33.604146][ T458] task_work_run+0x1e1/0x250
[ 33.608714][ T458] ? __cfi_task_work_run+0x10/0x10
[ 33.613825][ T458] ? __cfi___close_range+0x10/0x10
[ 33.618929][ T458] exit_to_user_mode_loop+0x9b/0xb0
[ 33.624129][ T458] exit_to_user_mode_prepare+0x87/0xd0
[ 33.629594][ T458] syscall_exit_to_user_mode+0x1a/0x30
[ 33.635028][ T458] do_syscall_64+0x58/0xa0
[ 33.639439][ T458] ? clear_bhb_loop+0x30/0x80
[ 33.644108][ T458] ? clear_bhb_loop+0x30/0x80
[ 33.648759][ T458] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.654655][ T458] RIP: 0033:0x7fc904d9e0d9
[ 33.659060][ T458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.678674][ T458] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.687093][ T458] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 33.695069][ T458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.703044][ T458] RBP: 000000000000827d R08: 0000000000000001 R09: 0000000000000000
[ 33.711014][ T458] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 33.718974][ T458] R13: 00007fc905025fac R14: 00000000000082b0 R15: 00007fc905025fa0
[ 33.726972][ T458]
[ 33.729992][ T458] ---[ end trace 0000000000000000 ]---
[ 33.746464][ T462] ------------[ cut here ]------------
[ 33.752135][ T462] WARNING: CPU: 1 PID: 462 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.762129][ T462] Modules linked in:
[ 33.766014][ T462] CPU: 1 PID: 462 Comm: syz.2.60 Tainted: G B W syzkaller #0
[ 33.774603][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.784666][ T462] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.791003][ T462] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.810669][ T462] RSP: 0018:ffffc90000e47cb0 EFLAGS: 00010293
[ 33.816721][ T462] RAX: ffffffff849bb307 RBX: ffff8881196b8000 RCX: ffff888119995100
[ 33.824720][ T462] RDX: 0000000000000000 RSI: 000000001713d7c0 RDI: 000000000c04eb7d
[ 33.832708][ T462] RBP: ffffc90000e47cd0 R08: ffff8881196b8083 R09: 1ffff110232d7010
[ 33.840688][ T462] R10: dffffc0000000000 R11: ffffed10232d7011 R12: dffffc0000000000
[ 33.848670][ T462] R13: dffffc0000000000 R14: 000000001713d7c0 R15: ffff888113fdf800
[ 33.856648][ T462] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.865615][ T462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.872209][ T462] CR2: 0000000000000000 CR3: 00000001219a7000 CR4: 00000000003506a0
[ 33.880188][ T462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.888148][ T462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.896150][ T462] Call Trace:
[ 33.899466][ T462]
[ 33.902393][ T462] pppol2tp_release+0x150/0x2b0
[ 33.907232][ T462] sock_close+0xc9/0x220
[ 33.911481][ T462] ? __cfi_sock_close+0x10/0x10
[ 33.916332][ T462] __fput+0x1fd/0x8f0
[ 33.920321][ T462] ____fput+0x15/0x20
[ 33.924296][ T462] task_work_run+0x1e1/0x250
[ 33.928875][ T462] ? __cfi_task_work_run+0x10/0x10
[ 33.934026][ T462] ? __cfi___close_range+0x10/0x10
[ 33.939134][ T462] exit_to_user_mode_loop+0x9b/0xb0
[ 33.944345][ T462] exit_to_user_mode_prepare+0x87/0xd0
[ 33.949825][ T462] syscall_exit_to_user_mode+0x1a/0x30
[ 33.955278][ T462] do_syscall_64+0x58/0xa0
[ 33.959698][ T462] ? clear_bhb_loop+0x30/0x80
[ 33.964369][ T462] ? clear_bhb_loop+0x30/0x80
[ 33.969024][ T462] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.974924][ T462] RIP: 0033:0x7fc904d9e0d9
[ 33.979376][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.999030][ T462] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.007461][ T462] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 34.015454][ T462] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.023518][ T462] RBP: 00000000000083be R08: 0000000000000001 R09: 0000000000000000
[ 34.031521][ T462] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 34.039503][ T462] R13: 00007fc905025fac R14: 00000000000083f0 R15: 00007fc905025fa0
[ 34.047463][ T462]
[ 34.050504][ T462] ---[ end trace 0000000000000000 ]---
[ 34.066294][ T466] ------------[ cut here ]------------
[ 34.071835][ T466] WARNING: CPU: 1 PID: 466 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.081919][ T466] Modules linked in:
[ 34.085808][ T466] CPU: 1 PID: 466 Comm: syz.2.62 Tainted: G B W syzkaller #0
[ 34.094400][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.104502][ T466] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.111043][ T466] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.130689][ T466] RSP: 0018:ffffc90000b87cb0 EFLAGS: 00010293
[ 34.136755][ T466] RAX: ffffffff849bb307 RBX: ffff8881196bf000 RCX: ffff888119990000
[ 34.144743][ T466] RDX: 0000000000000000 RSI: 000000001713d040 RDI: 000000000c04eb7d
[ 34.152765][ T466] RBP: ffffc90000b87cd0 R08: ffff8881196bf083 R09: 1ffff110232d7e10
[ 34.160750][ T466] R10: dffffc0000000000 R11: ffffed10232d7e11 R12: dffffc0000000000
[ 34.168719][ T466] R13: dffffc0000000000 R14: 000000001713d040 R15: ffff888113fdec00
[ 34.176822][ T466] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.185782][ T466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.192388][ T466] CR2: 0000000000000000 CR3: 0000000121f24000 CR4: 00000000003506a0
[ 34.200399][ T466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.208441][ T466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.216422][ T466] Call Trace:
[ 34.219710][ T466]
[ 34.222623][ T466] pppol2tp_release+0x150/0x2b0
[ 34.227482][ T466] sock_close+0xc9/0x220
[ 34.231732][ T466] ? __cfi_sock_close+0x10/0x10
[ 34.236601][ T466] __fput+0x1fd/0x8f0
[ 34.240589][ T466] ____fput+0x15/0x20
[ 34.244568][ T466] task_work_run+0x1e1/0x250
[ 34.249139][ T466] ? __cfi_task_work_run+0x10/0x10
[ 34.254258][ T466] ? __cfi___close_range+0x10/0x10
[ 34.259385][ T466] exit_to_user_mode_loop+0x9b/0xb0
[ 34.264577][ T466] exit_to_user_mode_prepare+0x87/0xd0
[ 34.270065][ T466] syscall_exit_to_user_mode+0x1a/0x30
[ 34.275515][ T466] do_syscall_64+0x58/0xa0
[ 34.279940][ T466] ? clear_bhb_loop+0x30/0x80
[ 34.284610][ T466] ? clear_bhb_loop+0x30/0x80
[ 34.289263][ T466] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.295160][ T466] RIP: 0033:0x7fc904d9e0d9
[ 34.299579][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.319185][ T466] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.327603][ T466] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 34.335591][ T466] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.343567][ T466] RBP: 00000000000084fe R08: 0000000000000001 R09: 0000000000000000
[ 34.351544][ T466] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 34.359548][ T466] R13: 00007fc905025fac R14: 0000000000008530 R15: 00007fc905025fa0
[ 34.367520][ T466]
[ 34.370558][ T466] ---[ end trace 0000000000000000 ]---
[ 34.386062][ T470] ------------[ cut here ]------------
[ 34.391597][ T470] WARNING: CPU: 1 PID: 470 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.401662][ T470] Modules linked in:
[ 34.405548][ T470] CPU: 1 PID: 470 Comm: syz.2.64 Tainted: G B W syzkaller #0
[ 34.414184][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.424327][ T470] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.430874][ T470] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.450583][ T470] RSP: 0018:ffffc90000b87cb0 EFLAGS: 00010293
[ 34.456650][ T470] RAX: ffffffff849bb307 RBX: ffff8881196bd000 RCX: ffff8881198cbcc0
[ 34.464677][ T470] RDX: 0000000000000000 RSI: 000000001479fb00 RDI: 000000000c04eb7d
[ 34.472689][ T470] RBP: ffffc90000b87cd0 R08: ffff8881196bd083 R09: 1ffff110232d7a10
[ 34.480743][ T470] R10: dffffc0000000000 R11: ffffed10232d7a11 R12: dffffc0000000000
[ 34.488712][ T470] R13: dffffc0000000000 R14: 000000001479fb00 R15: ffff8881142f2c00
[ 34.496744][ T470] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.505766][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.512367][ T470] CR2: 0000000000000000 CR3: 000000010d632000 CR4: 00000000003506a0
[ 34.520785][ T470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.528743][ T470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.536728][ T470] Call Trace:
[ 34.540040][ T470]
[ 34.542965][ T470] pppol2tp_release+0x150/0x2b0
[ 34.547818][ T470] sock_close+0xc9/0x220
[ 34.552081][ T470] ? __cfi_sock_close+0x10/0x10
[ 34.556928][ T470] __fput+0x1fd/0x8f0
[ 34.560921][ T470] ____fput+0x15/0x20
[ 34.564921][ T470] task_work_run+0x1e1/0x250
[ 34.569536][ T470] ? __cfi_task_work_run+0x10/0x10
[ 34.574641][ T470] ? __cfi___close_range+0x10/0x10
[ 34.579771][ T470] exit_to_user_mode_loop+0x9b/0xb0
[ 34.585002][ T470] exit_to_user_mode_prepare+0x87/0xd0
[ 34.590463][ T470] syscall_exit_to_user_mode+0x1a/0x30
[ 34.595913][ T470] do_syscall_64+0x58/0xa0
[ 34.600333][ T470] ? clear_bhb_loop+0x30/0x80
[ 34.605001][ T470] ? clear_bhb_loop+0x30/0x80
[ 34.609674][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.615561][ T470] RIP: 0033:0x7fc904d9e0d9
[ 34.619972][ T470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.639586][ T470] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.647981][ T470] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 34.655955][ T470] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.663954][ T470] RBP: 000000000000863d R08: 0000000000000001 R09: 0000000000000000
[ 34.671933][ T470] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 34.679906][ T470] R13: 00007fc905025fac R14: 0000000000008670 R15: 00007fc905025fa0
[ 34.687858][ T470]
[ 34.690873][ T470] ---[ end trace 0000000000000000 ]---
[ 34.751473][ T480] ------------[ cut here ]------------
[ 34.756953][ T480] WARNING: CPU: 0 PID: 480 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.767009][ T480] Modules linked in:
[ 34.770946][ T480] CPU: 0 PID: 480 Comm: syz.2.69 Tainted: G B W syzkaller #0
[ 34.779579][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.790674][ T480] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.796989][ T480] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.816800][ T480] RSP: 0018:ffffc90000ecfcb0 EFLAGS: 00010293
[ 34.822926][ T480] RAX: ffffffff849bb307 RBX: ffff888119b1a000 RCX: ffff88811a2b5100
[ 34.830945][ T480] RDX: 0000000000000000 RSI: 0000000017201dc0 RDI: 000000000c04eb7d
[ 34.838906][ T480] RBP: ffffc90000ecfcd0 R08: ffff888119b1a083 R09: 1ffff11023363410
[ 34.846880][ T480] R10: dffffc0000000000 R11: ffffed1023363411 R12: dffffc0000000000
[ 34.854870][ T480] R13: dffffc0000000000 R14: 0000000017201dc0 R15: ffff88812a301400
[ 34.862847][ T480] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.871784][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.878345][ T480] CR2: 0000000000000000 CR3: 0000000114e03000 CR4: 00000000003506b0
[ 34.886329][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.894317][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.902343][ T480] Call Trace:
[ 34.905609][ T480]
[ 34.908522][ T480] pppol2tp_release+0x150/0x2b0
[ 34.913378][ T480] sock_close+0xc9/0x220
[ 34.917616][ T480] ? __cfi_sock_close+0x10/0x10
[ 34.922471][ T480] __fput+0x1fd/0x8f0
[ 34.926447][ T480] ____fput+0x15/0x20
[ 34.930440][ T480] task_work_run+0x1e1/0x250
[ 34.935026][ T480] ? __cfi_task_work_run+0x10/0x10
[ 34.940146][ T480] ? __cfi___close_range+0x10/0x10
[ 34.945250][ T480] exit_to_user_mode_loop+0x9b/0xb0
[ 34.950464][ T480] exit_to_user_mode_prepare+0x87/0xd0
[ 34.955914][ T480] syscall_exit_to_user_mode+0x1a/0x30
[ 34.961390][ T480] do_syscall_64+0x58/0xa0
[ 34.965924][ T480] ? clear_bhb_loop+0x30/0x80
[ 34.970653][ T480] ? clear_bhb_loop+0x30/0x80
[ 34.975328][ T480] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.981227][ T480] RIP: 0033:0x7fc904d9e0d9
[ 34.985632][ T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.005249][ T480] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.013681][ T480] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 35.021661][ T480] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.029635][ T480] RBP: 00000000000087ab R08: 0000000000000001 R09: 0000000000000000
[ 35.037584][ T480] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 35.045555][ T480] R13: 00007fc905025fac R14: 00000000000087dd R15: 00007fc905025fa0
[ 35.053560][ T480]
[ 35.056570][ T480] ---[ end trace 0000000000000000 ]---
[ 35.066773][ T482] ------------[ cut here ]------------
[ 35.072257][ T482] WARNING: CPU: 0 PID: 482 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.082254][ T482] Modules linked in:
[ 35.086137][ T482] CPU: 0 PID: 482 Comm: syz.2.70 Tainted: G B W syzkaller #0
[ 35.094741][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.104807][ T482] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.111143][ T482] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.130768][ T482] RSP: 0018:ffffc90000c57cb0 EFLAGS: 00010293
[ 35.136819][ T482] RAX: ffffffff849bb307 RBX: ffff88811a50f000 RCX: ffff88811a523cc0
[ 35.144803][ T482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 35.152786][ T482] RBP: ffffc90000c57cd0 R08: ffff88811a50f083 R09: 1ffff110234a1e10
[ 35.160762][ T482] R10: dffffc0000000000 R11: ffffed10234a1e11 R12: dffffc0000000000
[ 35.168725][ T482] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881142fa400
[ 35.176739][ T482] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.185677][ T482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.192262][ T482] CR2: 0000000000000000 CR3: 000000011364c000 CR4: 00000000003506b0
[ 35.200245][ T482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.208214][ T482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.216184][ T482] Call Trace:
[ 35.219489][ T482]
[ 35.222398][ T482] pppol2tp_release+0x150/0x2b0
[ 35.227234][ T482] sock_close+0xc9/0x220
[ 35.231485][ T482] ? __cfi_sock_close+0x10/0x10
[ 35.236332][ T482] __fput+0x1fd/0x8f0
[ 35.240322][ T482] ____fput+0x15/0x20
[ 35.244294][ T482] task_work_run+0x1e1/0x250
[ 35.248861][ T482] ? __cfi_task_work_run+0x10/0x10
[ 35.254069][ T482] ? __cfi___close_range+0x10/0x10
[ 35.259171][ T482] exit_to_user_mode_loop+0x9b/0xb0
[ 35.264435][ T482] exit_to_user_mode_prepare+0x87/0xd0
[ 35.269933][ T482] syscall_exit_to_user_mode+0x1a/0x30
[ 35.275376][ T482] do_syscall_64+0x58/0xa0
[ 35.279831][ T482] ? clear_bhb_loop+0x30/0x80
[ 35.284501][ T482] ? clear_bhb_loop+0x30/0x80
[ 35.289162][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.295082][ T482] RIP: 0033:0x7fc904d9e0d9
[ 35.299510][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.319135][ T482] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.327564][ T482] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 35.335706][ T482] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.343798][ T482] RBP: 00000000000088e6 R08: 0000000000000001 R09: 0000000000000000
[ 35.351808][ T482] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 35.359792][ T482] R13: 00007fc905025fac R14: 0000000000008919 R15: 00007fc905025fa0
[ 35.367768][ T482]
[ 35.370804][ T482] ---[ end trace 0000000000000000 ]---
[ 35.386921][ T486] ------------[ cut here ]------------
[ 35.392452][ T486] WARNING: CPU: 0 PID: 486 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.402472][ T486] Modules linked in:
[ 35.406361][ T486] CPU: 0 PID: 486 Comm: syz.2.72 Tainted: G B W syzkaller #0
[ 35.414967][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.425090][ T486] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.431610][ T486] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.451267][ T486] RSP: 0018:ffffc90000c57cb0 EFLAGS: 00010293
[ 35.457338][ T486] RAX: ffffffff849bb307 RBX: ffff88811a50e000 RCX: ffff88811a2b3cc0
[ 35.465350][ T486] RDX: 0000000000000000 RSI: 000000001721cb00 RDI: 000000000c04eb7d
[ 35.473334][ T486] RBP: ffffc90000c57cd0 R08: ffff88811a50e083 R09: 1ffff110234a1c10
[ 35.481340][ T486] R10: dffffc0000000000 R11: ffffed10234a1c11 R12: dffffc0000000000
[ 35.489320][ T486] R13: dffffc0000000000 R14: 000000001721cb00 R15: ffff8881142f9400
[ 35.497311][ T486] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.506250][ T486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.512858][ T486] CR2: 0000000000000000 CR3: 00000001103b6000 CR4: 00000000003506b0
[ 35.520847][ T486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.528804][ T486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.536820][ T486] Call Trace:
[ 35.540197][ T486]
[ 35.543115][ T486] pppol2tp_release+0x150/0x2b0
[ 35.547953][ T486] sock_close+0xc9/0x220
[ 35.552223][ T486] ? __cfi_sock_close+0x10/0x10
[ 35.557072][ T486] __fput+0x1fd/0x8f0
[ 35.561072][ T486] ____fput+0x15/0x20
[ 35.565048][ T486] task_work_run+0x1e1/0x250
[ 35.569679][ T486] ? __cfi_task_work_run+0x10/0x10
[ 35.574788][ T486] ? __cfi___close_range+0x10/0x10
[ 35.579922][ T486] exit_to_user_mode_loop+0x9b/0xb0
[ 35.585116][ T486] exit_to_user_mode_prepare+0x87/0xd0
[ 35.590587][ T486] syscall_exit_to_user_mode+0x1a/0x30
[ 35.596142][ T486] do_syscall_64+0x58/0xa0
[ 35.600629][ T486] ? clear_bhb_loop+0x30/0x80
[ 35.605300][ T486] ? clear_bhb_loop+0x30/0x80
[ 35.609987][ T486] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.615877][ T486] RIP: 0033:0x7fc904d9e0d9
[ 35.620296][ T486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.639920][ T486] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.648314][ T486] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 35.656295][ T486] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.664274][ T486] RBP: 0000000000008a26 R08: 0000000000000001 R09: 0000000000000000
[ 35.672250][ T486] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 35.680226][ T486] R13: 00007fc905025fac R14: 0000000000008a59 R15: 00007fc905025fa0
[ 35.688175][ T486]
[ 35.691214][ T486] ---[ end trace 0000000000000000 ]---
[ 35.701391][ T488] ------------[ cut here ]------------
[ 35.706857][ T488] WARNING: CPU: 0 PID: 488 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.717018][ T488] Modules linked in:
[ 35.721022][ T488] CPU: 0 PID: 488 Comm: syz.2.73 Tainted: G B W syzkaller #0
[ 35.729700][ T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.739883][ T488] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.746228][ T488] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.766080][ T488] RSP: 0018:ffffc90000c57cb0 EFLAGS: 00010293
[ 35.772235][ T488] RAX: ffffffff849bb307 RBX: ffff88811a50d000 RCX: ffff88811a525100
[ 35.780290][ T488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 35.788246][ T488] RBP: ffffc90000c57cd0 R08: ffff88811a50d083 R09: 1ffff110234a1a10
[ 35.796290][ T488] R10: dffffc0000000000 R11: ffffed10234a1a11 R12: dffffc0000000000
[ 35.804278][ T488] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881142f8000
[ 35.812255][ T488] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.821197][ T488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.827761][ T488] CR2: 0000000000000000 CR3: 000000011507b000 CR4: 00000000003506b0
[ 35.835739][ T488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.843839][ T488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.851823][ T488] Call Trace:
[ 35.855126][ T488]
[ 35.858039][ T488] pppol2tp_release+0x150/0x2b0
[ 35.862905][ T488] sock_close+0xc9/0x220
[ 35.867146][ T488] ? __cfi_sock_close+0x10/0x10
[ 35.872009][ T488] __fput+0x1fd/0x8f0
[ 35.875989][ T488] ____fput+0x15/0x20
[ 35.879977][ T488] task_work_run+0x1e1/0x250
[ 35.884561][ T488] ? __cfi_task_work_run+0x10/0x10
[ 35.889678][ T488] ? __cfi___close_range+0x10/0x10
[ 35.894780][ T488] exit_to_user_mode_loop+0x9b/0xb0
[ 35.899994][ T488] exit_to_user_mode_prepare+0x87/0xd0
[ 35.905447][ T488] syscall_exit_to_user_mode+0x1a/0x30
[ 35.910912][ T488] do_syscall_64+0x58/0xa0
[ 35.915320][ T488] ? clear_bhb_loop+0x30/0x80
[ 35.920005][ T488] ? clear_bhb_loop+0x30/0x80
[ 35.924680][ T488] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.930584][ T488] RIP: 0033:0x7fc904d9e0d9
[ 35.934994][ T488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.955135][ T488] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.963561][ T488] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 35.971555][ T488] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.979534][ T488] RBP: 0000000000008b60 R08: 0000000000000001 R09: 0000000000000000
[ 35.987485][ T488] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 35.995460][ T488] R13: 00007fc905025fac R14: 0000000000008b93 R15: 00007fc905025fa0
[ 36.003552][ T488]
[ 36.006570][ T488] ---[ end trace 0000000000000000 ]---
[ 36.021128][ T490] ------------[ cut here ]------------
[ 36.026607][ T490] WARNING: CPU: 1 PID: 490 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.036754][ T490] Modules linked in:
[ 36.040765][ T490] CPU: 1 PID: 490 Comm: syz.2.74 Tainted: G B W syzkaller #0
[ 36.049338][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.059554][ T490] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.065869][ T490] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.085691][ T490] RSP: 0018:ffffc90000ecfcb0 EFLAGS: 00010293
[ 36.091852][ T490] RAX: ffffffff849bb307 RBX: ffff88811a508000 RCX: ffff88811a3d0000
[ 36.099890][ T490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 36.107854][ T490] RBP: ffffc90000ecfcd0 R08: ffff88811a508083 R09: 1ffff110234a1010
[ 36.115919][ T490] R10: dffffc0000000000 R11: ffffed10234a1011 R12: dffffc0000000000
[ 36.124009][ T490] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812bd68000
[ 36.132080][ T490] FS: 00005555812b6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.141041][ T490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.147608][ T490] CR2: 0000200000000240 CR3: 000000011507b000 CR4: 00000000003506a0
[ 36.155590][ T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.163570][ T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.171547][ T490] Call Trace:
[ 36.174819][ T490]
[ 36.177731][ T490] pppol2tp_release+0x150/0x2b0
[ 36.182594][ T490] sock_close+0xc9/0x220
[ 36.186859][ T490] ? __cfi_sock_close+0x10/0x10
[ 36.191714][ T490] __fput+0x1fd/0x8f0
[ 36.195690][ T490] ____fput+0x15/0x20
[ 36.199681][ T490] task_work_run+0x1e1/0x250
[ 36.204265][ T490] ? __cfi_task_work_run+0x10/0x10
[ 36.209384][ T490] ? __cfi___close_range+0x10/0x10
[ 36.214491][ T490] exit_to_user_mode_loop+0x9b/0xb0
[ 36.219702][ T490] exit_to_user_mode_prepare+0x87/0xd0
[ 36.225151][ T490] syscall_exit_to_user_mode+0x1a/0x30
[ 36.230612][ T490] do_syscall_64+0x58/0xa0
[ 36.235031][ T490] ? clear_bhb_loop+0x30/0x80
[ 36.239706][ T490] ? clear_bhb_loop+0x30/0x80
[ 36.244373][ T490] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.250272][ T490] RIP: 0033:0x7fc904d9e0d9
[ 36.254680][ T490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.274298][ T490] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.282722][ T490] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
[ 36.290705][ T490] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.298667][ T490] RBP: 0000000000008ca0 R08: 0000000000000001 R09: 0000000000000000
[ 36.306645][ T490] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 36.314630][ T490] R13: 00007fc905025fac R14: 0000000000008cd3 R15: 00007fc905025fa0
[ 36.322631][ T490]
[ 36.325665][ T490] ---[ end trace 0000000000000000 ]---
[ 36.336134][ T492] ------------[ cut here ]------------
[ 36.341750][ T492] WARNING: CPU: 0 PID: 492 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.351853][ T492] Modules linked in:
[ 36.355737][ T492] CPU: 0 PID: 492 Comm: syz.2.75 Tainted: G B W syzkaller #0
[ 36.364410][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.374567][ T492] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.380949][ T492] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.400630][ T492] RSP: 0018:ffffc90000d07cb0 EFLAGS: 00010293
[ 36.406691][ T492] RAX: ffffffff849bb307 RBX: ffff88811ac1c000 RCX: ffff88811a3d3cc0
[ 36.414722][ T492] RDX: 0000000000000000 RSI: 0000000017160940 RDI: 000000000c04eb7d
[ 36.422741][ T492] RBP: ffffc90000d07cd0 R08: ffff88811ac1c083 R09: 1ffff11023583810
[ 36.430785][ T492] R10: dffffc0000000000 R11: ffffed1023583811 R12: dffffc0000000000
[ 36.438779][ T492] R13: dffffc0000000000 R14: 0000000017160940 R15: ffff888117b6d800
[ 36.446858][ T492] FS: 00005555812b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.455869][ T492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.462505][ T492] CR2: 0000000000000000 CR3: 0000000120e2d000 CR4: 00000000003506b0
[ 36.470527][ T492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.478484][ T492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.486557][ T492] Call Trace:
[ 36.489910][ T492]
[ 36.492829][ T492] pppol2tp_release+0x150/0x2b0
[ 36.497663][ T492] sock_close+0xc9/0x220
[ 36.502009][ T492] ? __cfi_sock_close+0x10/0x10
[ 36.506868][ T492] __fput+0x1fd/0x8f0
[ 36.510929][ T492] ____fput+0x15/0x20
[ 36.514907][ T492] task_work_run+0x1e1/0x250
[ 36.519575][ T492] ? __cfi_task_work_run+0x10/0x10
[ 36.524681][ T492] ? __cfi___close_range+0x10/0x10
[ 36.529869][ T492] exit_to_user_mode_loop+0x9b/0xb0
[ 36.535063][ T492] exit_to_user_mode_prepare+0x87/0xd0
[ 36.540624][ T492] syscall_exit_to_user_mode+0x1a/0x30
[ 36.546073][ T492] do_syscall_64+0x58/0xa0
[ 36.550571][ T492] ? clear_bhb_loop+0x30/0x80
[ 36.555240][ T492] ? clear_bhb_loop+0x30/0x80
[ 36.559950][ T492] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.565843][ T492] RIP: 0033:0x7fc904d9e0d9
[ 36.570265][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.589881][ T492] RSP: 002b:00007ffe339b50a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.598285][ T492] RAX: 0000000000000000 RBX: 00007ffe339b5190 RCX: 00007fc904d9e0d9
2026/08/06 10:42:55 executed programs: 61
[ 36.606357][ T492] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.614336][ T492] RBP: 0000000000008ddb R08: 0000000000000001 R09: 0000000000000000
[ 36.622308][ T492] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffe339b51d0
[ 36.630298][ T492] R13: 00007fc905025fac R14: 0000000000008e0e R15: 00007fc905025fa0
[ 36.638267][ T492]
[ 36.641298][ T492] ---[ end trace 0000000000000000 ]---
[ 36.742113][ T504] ------------[ cut here ]------------
[ 36.747581][ T504] WARNING: CPU: 0 PID: 504 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.757600][ T504] Modules linked in:
[ 36.761688][ T504] CPU: 0 PID: 504 Comm: syz.2.81 Tainted: G B W syzkaller #0
[ 36.770288][ T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.780359][ T504] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0