syzkaller
syzkaller login: [ 13.990026][ T28] kauditd_printk_skb: 48 callbacks suppressed
[ 13.990042][ T28] audit: type=1400 audit(1790507185.331:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.994562][ T28] audit: type=1400 audit(1790507185.331:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.997409][ T28] audit: type=1400 audit(1790507185.331:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14047]" dev="pipefs" ino=14047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 14.000521][ T28] audit: type=1400 audit(1790507185.331:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 14.003025][ T28] audit: type=1400 audit(1790507185.331:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts.
2026/09/27 11:06:34 parsed 1 programs
2026/09/27 11:06:34 serving rpc on tcp://44405
[ 23.099168][ T28] audit: type=1400 audit(1790507194.441:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 23.120158][ T28] audit: type=1400 audit(1790507194.441:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 23.881145][ T28] audit: type=1400 audit(1790507195.221:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 23.882207][ T301] cgroup: Unknown subsys name 'net'
[ 23.903865][ T28] audit: type=1400 audit(1790507195.221:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 23.931240][ T28] audit: type=1400 audit(1790507195.251:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 23.931409][ T301] cgroup: Unknown subsys name 'devices'
[ 24.075816][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 24.081444][ T301] cgroup: Unknown subsys name 'rlimit'
[ 24.189024][ T28] audit: type=1400 audit(1790507195.531:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 24.212269][ T28] audit: type=1400 audit(1790507195.531:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.221084][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 24.232833][ T28] audit: type=1400 audit(1790507195.531:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 24.261515][ T28] audit: type=1400 audit(1790507195.531:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 24.281767][ T28] audit: type=1400 audit(1790507195.531:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.308777][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 25.010259][ T314] request_module fs-gadgetfs succeeded, but still no fs?
[ 25.193316][ T312] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.203020][ T312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.217897][ T312] device bridge_slave_0 entered promiscuous mode
[ 25.265305][ T312] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.272364][ T312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.280047][ T312] device bridge_slave_1 entered promiscuous mode
[ 25.518883][ T312] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.526054][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.533391][ T312] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.540454][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.630479][ T351] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.638455][ T351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.645986][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 25.653512][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 25.666851][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 25.678199][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.685280][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.692973][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 25.701235][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.708304][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.744984][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 25.757761][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 25.783921][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 25.796065][ T312] device veth0_vlan entered promiscuous mode
[ 25.806943][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 25.815656][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 25.823174][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 25.833940][ T312] device veth1_macvtap entered promiscuous mode
2026/09/27 11:06:37 executed programs: 0
[ 25.841503][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 25.851900][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 25.861647][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 26.058751][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.065982][ T373] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.073424][ T373] device bridge_slave_0 entered promiscuous mode
[ 26.080660][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.087804][ T373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.097371][ T373] device bridge_slave_1 entered promiscuous mode
[ 26.136044][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.143182][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.150787][ T380] device bridge_slave_0 entered promiscuous mode
[ 26.158940][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.166077][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.173505][ T380] device bridge_slave_1 entered promiscuous mode
[ 26.200884][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.207991][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.215460][ T374] device bridge_slave_0 entered promiscuous mode
[ 26.223490][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.230615][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.237937][ T374] device bridge_slave_1 entered promiscuous mode
[ 26.296593][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.303736][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.311191][ T378] device bridge_slave_0 entered promiscuous mode
[ 26.336045][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.343136][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.350534][ T378] device bridge_slave_1 entered promiscuous mode
[ 26.398122][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.405228][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.412520][ T379] device bridge_slave_0 entered promiscuous mode
[ 26.448217][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.455338][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.462789][ T379] device bridge_slave_1 entered promiscuous mode
[ 26.597338][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.604410][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.611699][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.618744][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.659752][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.666853][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.674160][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.681212][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.693075][ T351] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.701007][ T351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.709199][ T351] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.716827][ T351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.725148][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 26.732530][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.754978][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.762849][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 26.770524][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.778066][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.786972][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.794003][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.801523][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 26.809841][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.816905][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.824825][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 26.833201][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.841431][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.848673][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.863317][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 26.871183][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 26.879513][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.887815][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.894845][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.902422][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 26.911291][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 26.919645][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.926751][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.934549][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 26.974671][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 26.983019][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 26.991271][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 27.000462][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.008748][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.015792][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.024934][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.032842][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.041428][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.049488][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.057550][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.065132][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.072485][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 27.081029][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.089374][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.096414][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.103987][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 27.112478][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.120586][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.127616][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.134977][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 27.153006][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.160544][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.177639][ T380] device veth0_vlan entered promiscuous mode
[ 27.191447][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 27.199833][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.207870][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 27.216196][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.224726][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 27.232653][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.240737][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 27.249036][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.257456][ T351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.264523][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.272058][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 27.280425][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.288558][ T351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.295613][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.303072][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 27.311300][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.319361][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 27.327680][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.336078][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.343506][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.358767][ T373] device veth0_vlan entered promiscuous mode
[ 27.369598][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 27.377766][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.386611][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.394206][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.412765][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 27.421295][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.430294][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 27.438834][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.446861][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 27.455041][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.462967][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 27.471056][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.479260][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.486821][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.498258][ T374] device veth0_vlan entered promiscuous mode
[ 27.512483][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 27.520949][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.533429][ T373] device veth1_macvtap entered promiscuous mode
[ 27.540494][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 27.548758][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.557457][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 27.565393][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 27.573527][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.583071][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 27.591436][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.602375][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 27.610351][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.619558][ T380] device veth1_macvtap entered promiscuous mode
[ 27.632014][ T374] device veth1_macvtap entered promiscuous mode
[ 27.639235][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 27.647187][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 27.654975][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.662367][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.681565][ T378] device veth0_vlan entered promiscuous mode
[ 27.695386][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 27.703663][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.712398][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 27.720775][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.729351][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 27.737749][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.746235][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 27.754735][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.762983][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 27.771492][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.785821][ T378] device veth1_macvtap entered promiscuous mode
[ 27.800250][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 27.810190][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.819903][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 27.828260][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 27.836570][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.849233][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 27.861920][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.878220][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.885960][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.903177][ T379] device veth0_vlan entered promiscuous mode
[ 27.924781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 27.933488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.948487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 27.957314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.965897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 27.974495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.013136][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.023385][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.034342][ C0] ==================================================================
[ 28.042428][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[ 28.049837][ C0] Read of size 8 at addr ffff88812e570590 by task udevd/103
[ 28.057305][ C0]
[ 28.059662][ C0] CPU: 0 PID: 103 Comm: udevd Not tainted syzkaller #0
[ 28.066521][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 28.076601][ C0] Call Trace:
[ 28.079895][ C0]
[ 28.082743][ C0] __dump_stack+0x21/0x24
[ 28.087091][ C0] dump_stack_lvl+0x110/0x170
[ 28.091791][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 28.096861][ C0] ? debug_smp_processor_id+0x17/0x20
[ 28.102257][ C0] ? rcu_cblist_dequeue+0x6c/0xb0
[ 28.107562][ C0] print_address_description+0x71/0x200
[ 28.113140][ C0] print_report+0x4a/0x60
[ 28.118291][ C0] kasan_report+0x122/0x150
[ 28.122879][ C0] ? rcu_cblist_dequeue+0x6c/0xb0
[ 28.128640][ C0] __asan_report_load8_noabort+0x14/0x20
[ 28.134302][ C0] rcu_cblist_dequeue+0x6c/0xb0
[ 28.139273][ C0] rcu_do_batch+0x4bc/0xc30
[ 28.143816][ C0] ? rcu_core+0xf00/0xf00
[ 28.148257][ C0] rcu_core+0x486/0xf00
[ 28.152439][ C0] ? kvm_sched_clock_read+0x18/0x40
[ 28.157675][ C0] ? sched_clock+0x9/0x10
[ 28.162034][ C0] ? rcu_cpu_kthread_park+0x90/0x90
[ 28.167250][ C0] ? kvm_sched_clock_read+0x18/0x40
[ 28.172479][ C0] ? irqtime_account_irq+0x75/0x240
[ 28.177704][ C0] rcu_core_si+0x9/0x10
[ 28.181886][ C0] handle_softirqs+0x1d7/0x600
[ 28.186674][ C0] __irq_exit_rcu+0x52/0xf0
[ 28.191199][ C0] irq_exit_rcu+0x9/0x10
[ 28.195561][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 28.201227][ C0]
[ 28.204168][ C0]
[ 28.207111][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 28.213115][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[ 28.219561][ C0] Code: c0 db 0d 87 e8 dc 72 b5 fc 4c 89 f7 48 83 3d 31 59 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 36 14 4b fc 65 8b 05 17 eb 00 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[ 28.239887][ C0] RSP: 0018:ffffc90000a17760 EFLAGS: 00000206
[ 28.246052][ C0] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000
[ 28.254126][ C0] RDX: 0000000000000001 RSI: 0000000000000a06 RDI: 0000000000000001
[ 28.262112][ C0] RBP: ffffc90000a17770 R08: 0000000000000000 R09: ffffc90000a177c0
[ 28.270185][ C0] R10: dffffc0000000000 R11: fffff52000142edc R12: ffff888110171398
[ 28.278601][ C0] R13: 0000000000000a06 R14: 0000000000000001 R15: 0000000000000000
[ 28.286690][ C0] __wake_up+0x12e/0x1a0
[ 28.290960][ C0] ? __cfi___wake_up+0x10/0x10
[ 28.295762][ C0] ? put_cmsg+0x3f2/0x5d0
[ 28.300124][ C0] netlink_recvmsg+0xade/0xe00
[ 28.304920][ C0] ? __cfi_netlink_recvmsg+0x10/0x10
[ 28.310225][ C0] ? security_socket_recvmsg+0x99/0xc0
[ 28.315700][ C0] ? __cfi_netlink_recvmsg+0x10/0x10
[ 28.321000][ C0] ____sys_recvmsg+0x2d6/0x5c0
[ 28.325789][ C0] ? __sys_recvmsg_sock+0x50/0x50
[ 28.330841][ C0] ? import_iovec+0x7c/0xb0
[ 28.335362][ C0] ___sys_recvmsg+0x210/0x590
[ 28.340091][ C0] ? __sys_recvmsg+0x290/0x290
[ 28.344890][ C0] ? __kasan_check_read+0x11/0x20
[ 28.349929][ C0] ? __fdget+0x15b/0x220
[ 28.354188][ C0] __x64_sys_recvmsg+0x20a/0x2e0
[ 28.359244][ C0] ? __cfi___x64_sys_recvmsg+0x10/0x10
[ 28.364738][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0
[ 28.370830][ C0] x64_sys_call+0x75/0x9a0
[ 28.375439][ C0] do_syscall_64+0x4c/0xa0
[ 28.379916][ C0] ? clear_bhb_loop+0x30/0x80
[ 28.384613][ C0] ? clear_bhb_loop+0x30/0x80
[ 28.389311][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.395227][ C0] RIP: 0033:0x7f5e874a7407
[ 28.399677][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 28.419293][ C0] RSP: 002b:00007ffe9de10450 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
[ 28.427726][ C0] RAX: ffffffffffffffda RBX: 00007f5e87bc5880 RCX: 00007f5e874a7407
[ 28.435797][ C0] RDX: 0000000000000000 RSI: 00007ffe9de104e0 RDI: 0000000000000004
[ 28.443781][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 28.451770][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005611d70e3d80
[ 28.459758][ C0] R13: 00007ffe9de105a0 R14: 00007ffe9de104ec R15: 0000000000000000
[ 28.467743][ C0]
[ 28.470770][ C0]
[ 28.473109][ C0] Allocated by task 398:
[ 28.477535][ C0] kasan_set_track+0x4b/0x70
[ 28.482241][ C0] kasan_save_alloc_info+0x1f/0x30
[ 28.487370][ C0] __kasan_kmalloc+0x95/0xb0
[ 28.491975][ C0] __kmalloc+0xb4/0x1e0
[ 28.496152][ C0] l2tp_session_create+0x38/0xbd0
[ 28.501210][ C0] pppol2tp_connect+0xbf5/0x1640
[ 28.506166][ C0] __sys_connect+0x3da/0x460
[ 28.510781][ C0] __x64_sys_connect+0x7a/0x90
[ 28.515567][ C0] x64_sys_call+0x88d/0x9a0
[ 28.520092][ C0] do_syscall_64+0x4c/0xa0
[ 28.524531][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.530446][ C0]
[ 28.532773][ C0] Freed by task 325:
[ 28.536665][ C0] kasan_set_track+0x4b/0x70
[ 28.541270][ C0] kasan_save_free_info+0x2b/0x40
[ 28.546309][ C0] ____kasan_slab_free+0x132/0x180
[ 28.551443][ C0] __kasan_slab_free+0x11/0x20
[ 28.556229][ C0] slab_free_freelist_hook+0xc2/0x190
[ 28.561612][ C0] __kmem_cache_free+0xb7/0x1b0
[ 28.566481][ C0] kfree+0x6f/0xf0
[ 28.570218][ C0] l2tp_session_put+0xaf/0x1a0
[ 28.575006][ C0] l2tp_session_delete+0x3df/0x4d0
[ 28.580164][ C0] l2tp_tunnel_del_work+0x199/0x410
[ 28.585387][ C0] process_one_work+0x717/0xc30
[ 28.590258][ C0] worker_thread+0xa4d/0x11d0
[ 28.594957][ C0] kthread+0x281/0x320
[ 28.599066][ C0] ret_from_fork+0x1f/0x30
[ 28.603628][ C0]
[ 28.605957][ C0] Last potentially related work creation:
[ 28.611682][ C0] kasan_save_stack+0x3a/0x60
[ 28.616390][ C0] __kasan_record_aux_stack+0xb6/0xc0
[ 28.621775][ C0] kasan_record_aux_stack_noalloc+0xb/0x10
[ 28.627599][ C0] call_rcu+0xcf/0xf50
[ 28.631685][ C0] pppol2tp_release+0x1e3/0x2b0
[ 28.636561][ C0] sock_close+0xc9/0x220
[ 28.640825][ C0] __fput+0x1fd/0x8f0
[ 28.644832][ C0] ____fput+0x15/0x20
[ 28.648827][ C0] task_work_run+0x1e1/0x250
[ 28.653476][ C0] do_exit+0xb0d/0x29f0
[ 28.657651][ C0] __cfi___ia32_sys_exit+0x0/0x10
[ 28.662696][ C0] x64_sys_call+0x67/0x9a0
[ 28.667137][ C0] do_syscall_64+0x4c/0xa0
[ 28.671578][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.677494][ C0]
[ 28.679821][ C0] The buggy address belongs to the object at ffff88812e570400
[ 28.679821][ C0] which belongs to the cache kmalloc-512 of size 512
[ 28.693900][ C0] The buggy address is located 400 bytes inside of
[ 28.693900][ C0] 512-byte region [ffff88812e570400, ffff88812e570600)
[ 28.707187][ C0]
[ 28.709600][ C0] The buggy address belongs to the physical page:
[ 28.716012][ C0] page:ffffea0004b95c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12e570
[ 28.726367][ C0] head:ffffea0004b95c00 order:2 compound_mapcount:0 compound_pincount:0
[ 28.734707][ C0] flags: 0x4000000000010200(slab|head|zone=1)
[ 28.740815][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 28.749496][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 28.758258][ C0] page dumped because: kasan: bad access detected
[ 28.764673][ C0] page_owner tracks the page as allocated
[ 28.770404][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 19, tgid 19 (kworker/0:1), ts 27804211986, free_ts 25977344830
[ 28.790651][ C0] post_alloc_hook+0x1f5/0x210
[ 28.795532][ C0] prep_new_page+0x1c/0x110
[ 28.800058][ C0] get_page_from_freelist+0x2ca9/0x2d20
[ 28.805632][ C0] __alloc_pages+0x1fa/0x610
[ 28.810244][ C0] alloc_slab_page+0x6e/0xf0
[ 28.814848][ C0] new_slab+0x98/0x3e0
[ 28.818930][ C0] ___slab_alloc+0x70f/0xb70
[ 28.823542][ C0] __slab_alloc+0x5e/0xa0
[ 28.827967][ C0] __kmem_cache_alloc_node+0x204/0x2d0
[ 28.833451][ C0] __kmalloc+0xa4/0x1e0
[ 28.837625][ C0] ___neigh_create+0x6e3/0x1db0
[ 28.842505][ C0] __neigh_create+0x31/0x40
[ 28.847122][ C0] ip6_finish_output2+0xaaf/0x18b0
[ 28.852254][ C0] ip6_finish_output+0x60b/0xbe0
[ 28.857213][ C0] ip6_output+0x1fa/0x410
[ 28.861651][ C0] mld_sendpack+0x7ce/0xda0
[ 28.866174][ C0] page last free stack trace:
[ 28.870845][ C0] free_unref_page_prepare+0x81b/0x820
[ 28.876325][ C0] free_unref_page+0x93/0x530
[ 28.881031][ C0] __free_pages+0x67/0x100
[ 28.885495][ C0] __vunmap+0xa3c/0xc00
[ 28.889671][ C0] vfree+0x61/0x90
[ 28.893419][ C0] kcov_close+0x2b/0x50
[ 28.897594][ C0] __fput+0x1fd/0x8f0
[ 28.901600][ C0] ____fput+0x15/0x20
[ 28.905646][ C0] task_work_run+0x1e1/0x250
[ 28.910252][ C0] do_exit+0xb0d/0x29f0
[ 28.914435][ C0] do_group_exit+0x21b/0x2e0
[ 28.919049][ C0] get_signal+0x167c/0x1700
[ 28.923574][ C0] arch_do_signal_or_restart+0xd1/0x11c0
[ 28.929313][ C0] exit_to_user_mode_loop+0x7a/0xb0
[ 28.934540][ C0] exit_to_user_mode_prepare+0x87/0xd0
[ 28.940022][ C0] syscall_exit_to_user_mode+0x1a/0x30
[ 28.945504][ C0]
[ 28.947837][ C0] Memory state around the buggy address:
[ 28.953481][ C0] ffff88812e570480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 28.961565][ C0] ffff88812e570500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 28.969733][ C0] >ffff88812e570580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 28.977801][ C0] ^
[ 28.982409][ C0] ffff88812e570600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 28.990482][ C0] ffff88812e570680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 28.998548][ C0] ==================================================================
[ 29.006677][ C0] Disabling lock debugging due to kernel taint
[ 29.012300][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 29.012314][ T28] audit: type=1400 audit(1790507200.351:108): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 29.046541][ T379] device veth1_macvtap entered promiscuous mode
[ 29.111721][ T28] audit: type=1400 audit(1790507200.351:109): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 29.133711][ T28] audit: type=1400 audit(1790507200.351:110): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 29.155994][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.157951][ T28] audit: type=1400 audit(1790507200.351:111): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 29.200062][ T28] audit: type=1400 audit(1790507200.351:112): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 29.223135][ T28] audit: type=1400 audit(1790507200.351:113): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 29.246179][ T28] audit: type=1400 audit(1790507200.351:114): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 29.292211][ T892] ------------[ cut here ]------------
[ 29.297779][ T892] WARNING: CPU: 0 PID: 892 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.307845][ T892] Modules linked in:
[ 29.311741][ T892] CPU: 0 PID: 892 Comm: syz.3.20 Tainted: G B syzkaller #0
[ 29.313788][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.320355][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.320366][ T892] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.320397][ T892] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 29.364785][ T892] RSP: 0018:ffffc90000cf7b90 EFLAGS: 00010293
[ 29.370974][ T892] RAX: ffffffff849c2987 RBX: ffff88811b9ca000 RCX: ffff88811ba3bcc0
[ 29.379108][ T892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 29.387110][ T892] RBP: ffffc90000cf7bb0 R08: ffff88811b9ca083 R09: 1ffff11023739410
[ 29.388180][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.395148][ T892] R10: dffffc0000000000 R11: ffffed1023739411 R12: dffffc0000000000
[ 29.411391][ T892] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881194c3800
[ 29.419422][ T892] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 29.428521][ T892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.435352][ T892] CR2: 00005611d733e000 CR3: 000000000700f000 CR4: 00000000003506b0
[ 29.443349][ T892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.451635][ T892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.459653][ T892] Call Trace:
[ 29.462937][ T892]
[ 29.465923][ T892] pppol2tp_release+0x150/0x2b0
[ 29.470792][ T892] sock_close+0xc9/0x220
[ 29.475092][ T892] ? __cfi_sock_close+0x10/0x10
[ 29.479953][ T892] __fput+0x1fd/0x8f0
[ 29.483964][ T892] ____fput+0x15/0x20
[ 29.488035][ T892] task_work_run+0x1e1/0x250
[ 29.492646][ T892] ? __cfi_task_work_run+0x10/0x10
[ 29.497819][ T892] ? free_nsproxy+0x21f/0x270
[ 29.502600][ T892] do_exit+0xb0d/0x29f0
[ 29.506839][ T892] ? __cfi_do_exit+0x10/0x10
[ 29.511454][ T892] ? xfd_validate_state+0x70/0x150
[ 29.516624][ T892] ? __kasan_check_write+0x14/0x20
[ 29.521745][ T892] __x64_sys_exit+0x40/0x40
[ 29.526317][ T892] x64_sys_call+0x67/0x9a0
[ 29.530743][ T892] do_syscall_64+0x4c/0xa0
[ 29.535211][ T892] ? clear_bhb_loop+0x30/0x80
[ 29.539916][ T892] ? clear_bhb_loop+0x30/0x80
[ 29.544665][ T892] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.550579][ T892] RIP: 0033:0x7f781fb9e159
[ 29.555082][ T892] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 29.562167][ T892] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 29.570906][ T892] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 29.578953][ T892] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 29.586998][ T892] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 29.595016][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 29.603008][ T892] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 29.611156][ T892]
[ 29.614201][ T892] ---[ end trace 0000000000000000 ]---
[ 29.622646][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.638863][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.737095][ T8] device bridge_slave_1 left promiscuous mode
[ 29.745059][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.768838][ T8] device bridge_slave_0 left promiscuous mode
[ 29.795316][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.820295][ T8] device veth1_macvtap left promiscuous mode
[ 29.830211][ T8] device veth0_vlan left promiscuous mode
[ 30.012285][ T1067] ------------[ cut here ]------------
[ 30.017906][ T1067] WARNING: CPU: 0 PID: 1067 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.028291][ T1067] Modules linked in:
[ 30.032275][ T1067] CPU: 0 PID: 1067 Comm: syz.4.238 Tainted: G B W syzkaller #0
[ 30.041167][ T1067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.051632][ T1067] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.058098][ T1067] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 30.077776][ T1067] RSP: 0018:ffffc900025cfb90 EFLAGS: 00010293
[ 30.084170][ T1067] RAX: ffffffff849c2987 RBX: ffff8881240da000 RCX: ffff88811f5a8000
[ 30.092152][ T1067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 30.100291][ T1067] RBP: ffffc900025cfbb0 R08: ffff8881240da083 R09: 1ffff1102481b410
[ 30.108297][ T1067] R10: dffffc0000000000 R11: ffffed102481b411 R12: dffffc0000000000
[ 30.116665][ T1067] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888120539000
[ 30.124693][ T1067] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.133654][ T1067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.140339][ T1067] CR2: 00007ffefb859de0 CR3: 00000001106dc000 CR4: 00000000003506b0
[ 30.148369][ T1067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.156395][ T1067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.164442][ T1067] Call Trace:
[ 30.167731][ T1067]
[ 30.170667][ T1067] pppol2tp_release+0x150/0x2b0
[ 30.175599][ T1067] sock_close+0xc9/0x220
[ 30.179855][ T1067] ? __cfi_sock_close+0x10/0x10
[ 30.184800][ T1067] __fput+0x1fd/0x8f0
[ 30.188808][ T1067] ____fput+0x15/0x20
[ 30.192894][ T1067] task_work_run+0x1e1/0x250
[ 30.197535][ T1067] ? __cfi_task_work_run+0x10/0x10
[ 30.202661][ T1067] ? free_nsproxy+0x21f/0x270
[ 30.207395][ T1067] do_exit+0xb0d/0x29f0
[ 30.211562][ T1067] ? __cfi_do_exit+0x10/0x10
[ 30.216772][ T1067] ? xfd_validate_state+0x70/0x150
[ 30.221915][ T1067] ? __kasan_check_write+0x14/0x20
[ 30.227088][ T1067] __x64_sys_exit+0x40/0x40
[ 30.231601][ T1067] x64_sys_call+0x67/0x9a0
[ 30.236073][ T1067] do_syscall_64+0x4c/0xa0
[ 30.240508][ T1067] ? clear_bhb_loop+0x30/0x80
[ 30.245240][ T1067] ? clear_bhb_loop+0x30/0x80
[ 30.249929][ T1067] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.255874][ T1067] RIP: 0033:0x7f666459e159
[ 30.260293][ T1067] Code: Unable to access opcode bytes at 0x7f666459e12f.
[ 30.267366][ T1067] RSP: 002b:00007f66654beef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 30.275913][ T1067] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f666459e159
[ 30.283894][ T1067] RDX: 00007f66654bf9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.291915][ T1067] RBP: 00007f666463506b R08: 0000000000000000 R09: 0000000000000058
[ 30.300056][ T1067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 30.308083][ T1067] R13: 00007f6664826038 R14: 00007f6664825fa0 R15: 00007ffefb85b1c8
[ 30.316238][ T1067]
[ 30.319275][ T1067] ---[ end trace 0000000000000000 ]---
[ 30.510699][ T1214] ------------[ cut here ]------------
[ 30.516463][ T1214] WARNING: CPU: 0 PID: 1214 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.526791][ T1214] Modules linked in:
[ 30.530694][ T1214] CPU: 0 PID: 1214 Comm: syz.1.274 Tainted: G B W syzkaller #0
[ 30.539642][ T1214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.549817][ T1214] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.556314][ T1214] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 30.576109][ T1214] RSP: 0018:ffffc90002ad7b90 EFLAGS: 00010293
[ 30.582301][ T1214] RAX: ffffffff849c2987 RBX: ffff88813276e000 RCX: ffff888110262880
[ 30.590422][ T1214] RDX: 0000000000000000 RSI: 000000000fc84298 RDI: 000000000c04eb7d
[ 30.598519][ T1214] RBP: ffffc90002ad7bb0 R08: ffff88813276e083 R09: 1ffff110264edc10
[ 30.606994][ T1214] R10: dffffc0000000000 R11: ffffed10264edc11 R12: dffffc0000000000
[ 30.615261][ T1214] R13: dffffc0000000000 R14: 000000000fc84298 R15: ffff88810f7e3400
[ 30.623354][ T1214] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.632405][ T1214] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.639078][ T1214] CR2: 00007f781fe27dac CR3: 0000000132a13000 CR4: 00000000003506b0
[ 30.647207][ T1214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.655218][ T1214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.663202][ T1214] Call Trace:
[ 30.666530][ T1214]
[ 30.669501][ T1214] pppol2tp_release+0x150/0x2b0
[ 30.674396][ T1214] sock_close+0xc9/0x220
[ 30.678643][ T1214] ? __cfi_sock_close+0x10/0x10
[ 30.683505][ T1214] __fput+0x1fd/0x8f0
[ 30.687556][ T1214] ____fput+0x15/0x20
[ 30.691556][ T1214] task_work_run+0x1e1/0x250
[ 30.696396][ T1214] ? __cfi_task_work_run+0x10/0x10
[ 30.701531][ T1214] ? free_nsproxy+0x21f/0x270
[ 30.706375][ T1214] do_exit+0xb0d/0x29f0
[ 30.710554][ T1214] ? __cfi_do_exit+0x10/0x10
[ 30.715203][ T1214] ? xfd_validate_state+0x70/0x150
[ 30.720322][ T1214] ? __kasan_check_write+0x14/0x20
[ 30.725493][ T1214] __x64_sys_exit+0x40/0x40
[ 30.730010][ T1214] x64_sys_call+0x67/0x9a0
[ 30.734475][ T1214] do_syscall_64+0x4c/0xa0
[ 30.738909][ T1214] ? clear_bhb_loop+0x30/0x80
[ 30.743592][ T1214] ? clear_bhb_loop+0x30/0x80
[ 30.748317][ T1214] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.754338][ T1214] RIP: 0033:0x7f680599e159
[ 30.758848][ T1214] Code: Unable to access opcode bytes at 0x7f680599e12f.
[ 30.765966][ T1214] RSP: 002b:00007f68068f6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 30.774558][ T1214] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f680599e159
[ 30.782629][ T1214] RDX: 00007f68068f79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 30.790674][ T1214] RBP: 00007f6805a3506b R08: 0000000000000000 R09: 0000000000000058
[ 30.798683][ T1214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 30.806984][ T1214] R13: 00007f6805c26038 R14: 00007f6805c25fa0 R15: 00007ffcc01ae3f8
[ 30.815009][ T1214]
[ 30.818033][ T1214] ---[ end trace 0000000000000000 ]---
2026/09/27 11:06:42 executed programs: 340
[ 30.905872][ T28] audit: type=1400 audit(1790507202.251:115): avc: denied { write } for pid=295 comm="syz-execprog" path="pipe:[14858]" dev="pipefs" ino=14858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 30.974080][ T1356] ------------[ cut here ]------------
[ 30.979608][ T1356] WARNING: CPU: 1 PID: 1356 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.989765][ T1356] Modules linked in:
[ 30.993670][ T1356] CPU: 1 PID: 1356 Comm: syz.3.332 Tainted: G B W syzkaller #0
[ 31.002467][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.012598][ T1356] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.019131][ T1356] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 31.038818][ T1356] RSP: 0018:ffffc9000311fb90 EFLAGS: 00010293
[ 31.044915][ T1356] RAX: ffffffff849c2987 RBX: ffff8881146fc000 RCX: ffff8881146ba880
[ 31.052938][ T1356] RDX: 0000000000000000 RSI: 000000000e2b2c00 RDI: 000000000c04eb7d
[ 31.061097][ T1356] RBP: ffffc9000311fbb0 R08: ffff8881146fc083 R09: 1ffff110228df810
[ 31.069119][ T1356] R10: dffffc0000000000 R11: ffffed10228df811 R12: dffffc0000000000
[ 31.077136][ T1356] R13: dffffc0000000000 R14: 000000000e2b2c00 R15: ffff888110702800
[ 31.085158][ T1356] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.094261][ T1356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.100858][ T1356] CR2: 000055555f3154e8 CR3: 00000001106dc000 CR4: 00000000003506a0
[ 31.108873][ T1356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.116876][ T1356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.124903][ T1356] Call Trace:
[ 31.128191][ T1356]
[ 31.131130][ T1356] pppol2tp_release+0x150/0x2b0
[ 31.136023][ T1356] sock_close+0xc9/0x220
[ 31.140270][ T1356] ? __cfi_sock_close+0x10/0x10
[ 31.145151][ T1356] __fput+0x1fd/0x8f0
[ 31.149154][ T1356] ____fput+0x15/0x20
[ 31.153153][ T1356] task_work_run+0x1e1/0x250
[ 31.157803][ T1356] ? __cfi_task_work_run+0x10/0x10
[ 31.162926][ T1356] ? free_nsproxy+0x21f/0x270
[ 31.167658][ T1356] do_exit+0xb0d/0x29f0
[ 31.171838][ T1356] ? __cfi_do_exit+0x10/0x10
[ 31.176619][ T1356] ? xfd_validate_state+0x70/0x150
[ 31.181753][ T1356] ? __kasan_check_write+0x14/0x20
[ 31.186917][ T1356] __x64_sys_exit+0x40/0x40
[ 31.191438][ T1356] x64_sys_call+0x67/0x9a0
[ 31.195882][ T1356] do_syscall_64+0x4c/0xa0
[ 31.200300][ T1356] ? clear_bhb_loop+0x30/0x80
[ 31.205009][ T1356] ? clear_bhb_loop+0x30/0x80
[ 31.209842][ T1356] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.215815][ T1356] RIP: 0033:0x7f781fb9e159
[ 31.220240][ T1356] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 31.227479][ T1356] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.236029][ T1356] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 31.244013][ T1356] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.252037][ T1356] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 31.260515][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.268536][ T1356] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 31.276664][ T1356]
[ 31.279693][ T1356] ---[ end trace 0000000000000000 ]---
[ 31.340315][ T1486] ------------[ cut here ]------------
[ 31.345891][ T1486] WARNING: CPU: 0 PID: 1486 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.356260][ T1486] Modules linked in:
[ 31.360160][ T1486] CPU: 0 PID: 1486 Comm: syz.5.369 Tainted: G B W syzkaller #0
[ 31.369018][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.379174][ T1486] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.385634][ T1486] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 31.405371][ T1486] RSP: 0018:ffffc900037cfb90 EFLAGS: 00010293
[ 31.411451][ T1486] RAX: ffffffff849c2987 RBX: ffff8881173b4000 RCX: ffff888117f1d100
[ 31.419475][ T1486] RDX: 0000000000000000 RSI: 000000000d316b80 RDI: 000000000c04eb7d
[ 31.427474][ T1486] RBP: ffffc900037cfbb0 R08: ffff8881173b4083 R09: 1ffff11022e76810
[ 31.435503][ T1486] R10: dffffc0000000000 R11: ffffed1022e76811 R12: dffffc0000000000
[ 31.443576][ T1486] R13: dffffc0000000000 R14: 000000000d316b80 R15: ffff88811041cc00
[ 31.451604][ T1486] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.460579][ T1486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.467221][ T1486] CR2: 000055555f9f3908 CR3: 000000010f45f000 CR4: 00000000003506b0
[ 31.475328][ T1486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.483479][ T1486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.491504][ T1486] Call Trace:
[ 31.494982][ T1486]
[ 31.497941][ T1486] pppol2tp_release+0x150/0x2b0
[ 31.502812][ T1486] sock_close+0xc9/0x220
[ 31.507117][ T1486] ? __cfi_sock_close+0x10/0x10
[ 31.511996][ T1486] __fput+0x1fd/0x8f0
[ 31.516037][ T1486] ____fput+0x15/0x20
[ 31.520030][ T1486] task_work_run+0x1e1/0x250
[ 31.524688][ T1486] ? __cfi_task_work_run+0x10/0x10
[ 31.529824][ T1486] ? free_nsproxy+0x21f/0x270
[ 31.534588][ T1486] do_exit+0xb0d/0x29f0
[ 31.538770][ T1486] ? __cfi_do_exit+0x10/0x10
[ 31.543378][ T1486] ? xfd_validate_state+0x70/0x150
[ 31.548547][ T1486] ? __kasan_check_write+0x14/0x20
[ 31.553675][ T1486] __x64_sys_exit+0x40/0x40
[ 31.558238][ T1486] x64_sys_call+0x67/0x9a0
[ 31.562666][ T1486] do_syscall_64+0x4c/0xa0
[ 31.567150][ T1486] ? clear_bhb_loop+0x30/0x80
[ 31.571845][ T1486] ? clear_bhb_loop+0x30/0x80
[ 31.576674][ T1486] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.582759][ T1486] RIP: 0033:0x7f241bd9e159
[ 31.587242][ T1486] Code: Unable to access opcode bytes at 0x7f241bd9e12f.
[ 31.594289][ T1486] RSP: 002b:00007f241cd38ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.603156][ T1486] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f241bd9e159
[ 31.611275][ T1486] RDX: 00007f241cd399c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.619303][ T1486] RBP: 00007f241be3506b R08: 0000000000000000 R09: 0000000000000058
[ 31.627342][ T1486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.635453][ T1486] R13: 00007f241c026038 R14: 00007f241c025fa0 R15: 00007fffdbfd2eb8
[ 31.643523][ T1486]
[ 31.646627][ T1486] ---[ end trace 0000000000000000 ]---
[ 31.756197][ T1606] ------------[ cut here ]------------
[ 31.761861][ T1606] WARNING: CPU: 1 PID: 1606 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.772105][ T1606] Modules linked in:
[ 31.776180][ T1606] CPU: 1 PID: 1606 Comm: syz.0.416 Tainted: G B W syzkaller #0
[ 31.785184][ T1606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.795504][ T1606] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.801969][ T1606] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 31.825911][ T1606] RSP: 0000:ffffc90003b57b90 EFLAGS: 00010293
[ 31.832234][ T1606] RAX: ffffffff849c2987 RBX: ffff8881126fb000 RCX: ffff888112e69440
[ 31.840504][ T1606] RDX: 0000000000000000 RSI: 000000002359ef60 RDI: 000000000c04eb7d
[ 31.848673][ T1606] RBP: ffffc90003b57bb0 R08: ffff8881126fb083 R09: 1ffff110224df610
[ 31.857075][ T1606] R10: dffffc0000000000 R11: ffffed10224df611 R12: dffffc0000000000
[ 31.865203][ T1606] R13: dffffc0000000000 R14: 000000002359ef60 R15: ffff88811713fc00
[ 31.873396][ T1606] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.882529][ T1606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.889520][ T1606] CR2: 00007f66644557bd CR3: 000000012d14a000 CR4: 00000000003506a0
[ 31.897977][ T1606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.906345][ T1606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.914615][ T1606] Call Trace:
[ 31.917949][ T1606]
[ 31.920887][ T1606] pppol2tp_release+0x150/0x2b0
[ 31.926176][ T1606] sock_close+0xc9/0x220
[ 31.930611][ T1606] ? __cfi_sock_close+0x10/0x10
[ 31.935573][ T1606] __fput+0x1fd/0x8f0
[ 31.939575][ T1606] ____fput+0x15/0x20
[ 31.943752][ T1606] task_work_run+0x1e1/0x250
[ 31.948827][ T1606] ? __cfi_task_work_run+0x10/0x10
[ 31.954636][ T1606] ? free_nsproxy+0x21f/0x270
[ 31.959530][ T1606] do_exit+0xb0d/0x29f0
[ 31.963713][ T1606] ? __cfi_do_exit+0x10/0x10
[ 31.968434][ T1606] ? xfd_validate_state+0x70/0x150
[ 31.973565][ T1606] ? __kasan_check_write+0x14/0x20
[ 31.978792][ T1606] __x64_sys_exit+0x40/0x40
[ 31.983323][ T1606] x64_sys_call+0x67/0x9a0
[ 31.987885][ T1606] do_syscall_64+0x4c/0xa0
[ 31.992322][ T1606] ? clear_bhb_loop+0x30/0x80
[ 31.997102][ T1606] ? clear_bhb_loop+0x30/0x80
[ 32.001790][ T1606] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.007816][ T1606] RIP: 0033:0x7f261cf9e159
[ 32.012371][ T1606] Code: Unable to access opcode bytes at 0x7f261cf9e12f.
[ 32.019508][ T1606] RSP: 002b:00007f261decdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.028042][ T1606] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f261cf9e159
[ 32.036141][ T1606] RDX: 00007f261dece9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.044428][ T1606] RBP: 00007f261d03506b R08: 0000000000000000 R09: 0000000000000058
[ 32.052960][ T1606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.061197][ T1606] R13: 00007f261d226038 R14: 00007f261d225fa0 R15: 00007ffe60feb3e8
[ 32.069230][ T1606]
[ 32.072274][ T1606] ---[ end trace 0000000000000000 ]---
[ 32.205942][ T1745] ------------[ cut here ]------------
[ 32.211449][ T1745] WARNING: CPU: 0 PID: 1745 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.221738][ T1745] Modules linked in:
[ 32.225824][ T1745] CPU: 0 PID: 1745 Comm: syz.5.461 Tainted: G B W syzkaller #0
[ 32.234658][ T1745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.244870][ T1745] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.251236][ T1745] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 32.270978][ T1745] RSP: 0018:ffffc90003c47b90 EFLAGS: 00010293
[ 32.277117][ T1745] RAX: ffffffff849c2987 RBX: ffff88813316c000 RCX: ffff88811a1e9440
[ 32.285237][ T1745] RDX: 0000000000000000 RSI: 0000000015aac6d0 RDI: 000000000c04eb7d
[ 32.293311][ T1745] RBP: ffffc90003c47bb0 R08: ffff88813316c083 R09: 1ffff1102662d810
[ 32.301452][ T1745] R10: dffffc0000000000 R11: ffffed102662d811 R12: dffffc0000000000
[ 32.309487][ T1745] R13: dffffc0000000000 R14: 0000000015aac6d0 R15: ffff8881187abc00
[ 32.317638][ T1745] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.326618][ T1745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.333233][ T1745] CR2: 00007f6805959270 CR3: 0000000130bcc000 CR4: 00000000003506b0
[ 32.341442][ T1745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.349618][ T1745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.357988][ T1745] Call Trace:
[ 32.361278][ T1745]
[ 32.364254][ T1745] pppol2tp_release+0x150/0x2b0
[ 32.369121][ T1745] sock_close+0xc9/0x220
[ 32.373474][ T1745] ? __cfi_sock_close+0x10/0x10
[ 32.378393][ T1745] __fput+0x1fd/0x8f0
[ 32.382392][ T1745] ____fput+0x15/0x20
[ 32.386435][ T1745] task_work_run+0x1e1/0x250
[ 32.391046][ T1745] ? __cfi_task_work_run+0x10/0x10
[ 32.396212][ T1745] ? free_nsproxy+0x21f/0x270
[ 32.400913][ T1745] do_exit+0xb0d/0x29f0
[ 32.405127][ T1745] ? __cfi_do_exit+0x10/0x10
[ 32.409785][ T1745] ? xfd_validate_state+0x70/0x150
[ 32.414969][ T1745] ? __kasan_check_write+0x14/0x20
[ 32.420115][ T1745] __x64_sys_exit+0x40/0x40
[ 32.424771][ T1745] x64_sys_call+0x67/0x9a0
[ 32.429701][ T1745] do_syscall_64+0x4c/0xa0
[ 32.434216][ T1745] ? clear_bhb_loop+0x30/0x80
[ 32.439279][ T1745] ? clear_bhb_loop+0x30/0x80
[ 32.444120][ T1745] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.450136][ T1745] RIP: 0033:0x7f241bd9e159
[ 32.454600][ T1745] Code: Unable to access opcode bytes at 0x7f241bd9e12f.
[ 32.461628][ T1745] RSP: 002b:00007f241cd38ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.470099][ T1745] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f241bd9e159
[ 32.478193][ T1745] RDX: 00007f241cd399c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.486860][ T1745] RBP: 00007f241be3506b R08: 0000000000000000 R09: 0000000000000058
[ 32.495040][ T1745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.503025][ T1745] R13: 00007f241c026038 R14: 00007f241c025fa0 R15: 00007fffdbfd2eb8
[ 32.511408][ T1745]
[ 32.514627][ T1745] ---[ end trace 0000000000000000 ]---
[ 32.555081][ T1864] ------------[ cut here ]------------
[ 32.560968][ T1864] WARNING: CPU: 1 PID: 1864 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.571196][ T1864] Modules linked in:
[ 32.575248][ T1864] CPU: 1 PID: 1864 Comm: syz.5.499 Tainted: G B W syzkaller #0
[ 32.584349][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.594577][ T1864] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.601212][ T1864] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 32.621193][ T1864] RSP: 0018:ffffc900043afb90 EFLAGS: 00010293
[ 32.627424][ T1864] RAX: ffffffff849c2987 RBX: ffff8881120f1000 RCX: ffff88811e15e540
[ 32.635621][ T1864] RDX: 0000000000000000 RSI: 000000002e3c4800 RDI: 000000000c04eb7d
[ 32.643813][ T1864] RBP: ffffc900043afbb0 R08: ffff8881120f1083 R09: 1ffff1102241e210
[ 32.652146][ T1864] R10: dffffc0000000000 R11: ffffed102241e211 R12: dffffc0000000000
[ 32.660396][ T1864] R13: dffffc0000000000 R14: 000000002e3c4800 R15: ffff88811dcbbc00
[ 32.668539][ T1864] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.677652][ T1864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.684385][ T1864] CR2: 00007f781fe27dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 32.692550][ T1864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.700935][ T1864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.709070][ T1864] Call Trace:
[ 32.712359][ T1864]
[ 32.715458][ T1864] pppol2tp_release+0x150/0x2b0
[ 32.720424][ T1864] sock_close+0xc9/0x220
[ 32.724878][ T1864] ? __cfi_sock_close+0x10/0x10
[ 32.729753][ T1864] __fput+0x1fd/0x8f0
[ 32.733793][ T1864] ____fput+0x15/0x20
[ 32.737972][ T1864] task_work_run+0x1e1/0x250
[ 32.742576][ T1864] ? __cfi_task_work_run+0x10/0x10
[ 32.747863][ T1864] ? free_nsproxy+0x21f/0x270
[ 32.752563][ T1864] do_exit+0xb0d/0x29f0
[ 32.756882][ T1864] ? __cfi_do_exit+0x10/0x10
[ 32.761578][ T1864] ? xfd_validate_state+0x70/0x150
[ 32.766850][ T1864] ? __kasan_check_write+0x14/0x20
[ 32.772065][ T1864] __x64_sys_exit+0x40/0x40
[ 32.776773][ T1864] x64_sys_call+0x67/0x9a0
[ 32.781207][ T1864] do_syscall_64+0x4c/0xa0
[ 32.785791][ T1864] ? clear_bhb_loop+0x30/0x80
[ 32.790486][ T1864] ? clear_bhb_loop+0x30/0x80
[ 32.795315][ T1864] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.801230][ T1864] RIP: 0033:0x7f241bd9e159
[ 32.805784][ T1864] Code: Unable to access opcode bytes at 0x7f241bd9e12f.
[ 32.812806][ T1864] RSP: 002b:00007f241cd38ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.821355][ T1864] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f241bd9e159
[ 32.829466][ T1864] RDX: 00007f241cd399c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.837578][ T1864] RBP: 00007f241be3506b R08: 0000000000000000 R09: 0000000000000058
[ 32.845864][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.853867][ T1864] R13: 00007f241c026038 R14: 00007f241c025fa0 R15: 00007fffdbfd2eb8
[ 32.862037][ T1864]
[ 32.865197][ T1864] ---[ end trace 0000000000000000 ]---
[ 33.049684][ T2014] ------------[ cut here ]------------
[ 33.055281][ T2014] WARNING: CPU: 1 PID: 2014 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.065609][ T2014] Modules linked in:
[ 33.069605][ T2014] CPU: 1 PID: 2014 Comm: syz.0.544 Tainted: G B W syzkaller #0
[ 33.078484][ T2014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.088891][ T2014] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.095622][ T2014] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 33.115718][ T2014] RSP: 0018:ffffc9000449fb90 EFLAGS: 00010293
[ 33.121806][ T2014] RAX: ffffffff849c2987 RBX: ffff8881240de000 RCX: ffff88811ba3bcc0
[ 33.129894][ T2014] RDX: 0000000000000000 RSI: 000000002d10ac00 RDI: 000000000c04eb7d
[ 33.137988][ T2014] RBP: ffffc9000449fbb0 R08: ffff8881240de083 R09: 1ffff1102481bc10
[ 33.146069][ T2014] R10: dffffc0000000000 R11: ffffed102481bc11 R12: dffffc0000000000
[ 33.154225][ T2014] R13: dffffc0000000000 R14: 000000002d10ac00 R15: ffff888120538000
[ 33.162323][ T2014] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.171375][ T2014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.178746][ T2014] CR2: 00007f781fe27dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 33.187305][ T2014] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.195491][ T2014] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.203479][ T2014] Call Trace:
[ 33.206871][ T2014]
[ 33.209815][ T2014] pppol2tp_release+0x150/0x2b0
[ 33.214750][ T2014] sock_close+0xc9/0x220
[ 33.219090][ T2014] ? __cfi_sock_close+0x10/0x10
[ 33.223958][ T2014] __fput+0x1fd/0x8f0
[ 33.228021][ T2014] ____fput+0x15/0x20
[ 33.232033][ T2014] task_work_run+0x1e1/0x250
[ 33.236722][ T2014] ? __cfi_task_work_run+0x10/0x10
[ 33.241862][ T2014] ? free_nsproxy+0x21f/0x270
[ 33.246620][ T2014] do_exit+0xb0d/0x29f0
[ 33.250805][ T2014] ? __cfi_do_exit+0x10/0x10
[ 33.255726][ T2014] ? xfd_validate_state+0x70/0x150
[ 33.261042][ T2014] ? __kasan_check_write+0x14/0x20
[ 33.266499][ T2014] __x64_sys_exit+0x40/0x40
[ 33.271027][ T2014] x64_sys_call+0x67/0x9a0
[ 33.275508][ T2014] do_syscall_64+0x4c/0xa0
[ 33.279943][ T2014] ? clear_bhb_loop+0x30/0x80
[ 33.284668][ T2014] ? clear_bhb_loop+0x30/0x80
[ 33.289358][ T2014] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.295317][ T2014] RIP: 0033:0x7f261cf9e159
[ 33.299744][ T2014] Code: Unable to access opcode bytes at 0x7f261cf9e12f.
[ 33.306802][ T2014] RSP: 002b:00007f261decdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.315335][ T2014] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f261cf9e159
[ 33.323317][ T2014] RDX: 00007f261dece9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.331332][ T2014] RBP: 00007f261d03506b R08: 0000000000000000 R09: 0000000000000058
[ 33.339826][ T2014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.347991][ T2014] R13: 00007f261d226038 R14: 00007f261d225fa0 R15: 00007ffe60feb3e8
[ 33.356028][ T2014]
[ 33.359147][ T2014] ---[ end trace 0000000000000000 ]---
[ 33.539338][ T2195] ------------[ cut here ]------------
[ 33.544989][ T2195] WARNING: CPU: 0 PID: 2195 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.555211][ T2195] Modules linked in:
[ 33.559125][ T2195] CPU: 0 PID: 2195 Comm: syz.3.606 Tainted: G B W syzkaller #0
[ 33.568019][ T2195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.578468][ T2195] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.585499][ T2195] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 33.605377][ T2195] RSP: 0018:ffffc90001127b90 EFLAGS: 00010293
[ 33.611457][ T2195] RAX: ffffffff849c2987 RBX: ffff88812e7d5000 RCX: ffff88812dc86540
[ 33.619501][ T2195] RDX: 0000000000000000 RSI: 000000001acbbfc0 RDI: 000000000c04eb7d
[ 33.627528][ T2195] RBP: ffffc90001127bb0 R08: ffff88812e7d5083 R09: 1ffff11025cfaa10
[ 33.635564][ T2195] R10: dffffc0000000000 R11: ffffed1025cfaa11 R12: dffffc0000000000
[ 33.643911][ T2195] R13: dffffc0000000000 R14: 000000001acbbfc0 R15: ffff8881124a2c00
[ 33.652116][ T2195] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.661260][ T2195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.667995][ T2195] CR2: 00007f261cf59270 CR3: 000000011080e000 CR4: 00000000003506b0
[ 33.676119][ T2195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.684166][ T2195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.692265][ T2195] Call Trace:
[ 33.695598][ T2195]
[ 33.698623][ T2195] pppol2tp_release+0x150/0x2b0
[ 33.703623][ T2195] sock_close+0xc9/0x220
[ 33.707942][ T2195] ? __cfi_sock_close+0x10/0x10
[ 33.712823][ T2195] __fput+0x1fd/0x8f0
[ 33.716961][ T2195] ____fput+0x15/0x20
[ 33.720960][ T2195] task_work_run+0x1e1/0x250
[ 33.725636][ T2195] ? __cfi_task_work_run+0x10/0x10
[ 33.730767][ T2195] ? free_nsproxy+0x21f/0x270
[ 33.735875][ T2195] do_exit+0xb0d/0x29f0
[ 33.740053][ T2195] ? __cfi_do_exit+0x10/0x10
[ 33.744692][ T2195] ? raw_irqentry_exit_cond_resched+0x29/0x30
[ 33.750772][ T2195] ? irqentry_exit+0x37/0x40
[ 33.755438][ T2195] ? sysvec_apic_timer_interrupt+0x64/0xc0
[ 33.761352][ T2195] __x64_sys_exit+0x40/0x40
[ 33.765914][ T2195] x64_sys_call+0x67/0x9a0
[ 33.770372][ T2195] do_syscall_64+0x4c/0xa0
[ 33.774849][ T2195] ? clear_bhb_loop+0x30/0x80
[ 33.779536][ T2195] ? clear_bhb_loop+0x30/0x80
[ 33.784274][ T2195] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.790183][ T2195] RIP: 0033:0x7f781fb9e159
[ 33.794726][ T2195] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 33.802875][ T2195] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.812267][ T2195] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 33.821303][ T2195] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.829500][ T2195] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 33.839189][ T2195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.847849][ T2195] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 33.856315][ T2195]
[ 33.859440][ T2195] ---[ end trace 0000000000000000 ]---
[ 33.926845][ T2333] ------------[ cut here ]------------
[ 33.936062][ T2333] WARNING: CPU: 1 PID: 2333 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.948048][ T2333] Modules linked in:
[ 33.952628][ T2333] CPU: 1 PID: 2333 Comm: syz.3.642 Tainted: G B W syzkaller #0
[ 33.961457][ T2333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.972381][ T2333] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.979865][ T2333] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 34.002428][ T2333] RSP: 0018:ffffc90001cbfb90 EFLAGS: 00010293
[ 34.008991][ T2333] RAX: ffffffff849c2987 RBX: ffff888115794000 RCX: ffff888132b72880
[ 34.017568][ T2333] RDX: 0000000000000000 RSI: 0000000032ab3540 RDI: 000000000c04eb7d
[ 34.027148][ T2333] RBP: ffffc90001cbfbb0 R08: ffff888115794083 R09: 1ffff11022af2810
[ 34.036651][ T2333] R10: dffffc0000000000 R11: ffffed1022af2811 R12: dffffc0000000000
[ 34.044951][ T2333] R13: dffffc0000000000 R14: 0000000032ab3540 R15: ffff8881127bf400
[ 34.053873][ T2333] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.063423][ T2333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.070661][ T2333] CR2: 00007ffcc01acff4 CR3: 000000010f45f000 CR4: 00000000003506a0
[ 34.078700][ T2333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.086719][ T2333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.095629][ T2333] Call Trace:
[ 34.098926][ T2333]
[ 34.101879][ T2333] pppol2tp_release+0x150/0x2b0
[ 34.106849][ T2333] sock_close+0xc9/0x220
[ 34.111218][ T2333] ? __cfi_sock_close+0x10/0x10
[ 34.116657][ T2333] __fput+0x1fd/0x8f0
[ 34.120654][ T2333] ____fput+0x15/0x20
[ 34.124688][ T2333] task_work_run+0x1e1/0x250
[ 34.129311][ T2333] ? __cfi_task_work_run+0x10/0x10
[ 34.135442][ T2333] ? free_nsproxy+0x21f/0x270
[ 34.140263][ T2333] do_exit+0xb0d/0x29f0
[ 34.144613][ T2333] ? __cfi_do_exit+0x10/0x10
[ 34.149664][ T2333] ? xfd_validate_state+0x70/0x150
[ 34.155043][ T2333] ? __kasan_check_write+0x14/0x20
[ 34.160531][ T2333] __x64_sys_exit+0x40/0x40
[ 34.165080][ T2333] x64_sys_call+0x67/0x9a0
[ 34.169734][ T2333] do_syscall_64+0x4c/0xa0
[ 34.174372][ T2333] ? clear_bhb_loop+0x30/0x80
[ 34.179247][ T2333] ? clear_bhb_loop+0x30/0x80
[ 34.184143][ T2333] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.190073][ T2333] RIP: 0033:0x7f781fb9e159
[ 34.194644][ T2333] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 34.201668][ T2333] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.210146][ T2333] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 34.218419][ T2333] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.226587][ T2333] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 34.234605][ T2333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.243024][ T2333] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 34.251052][ T2333]
[ 34.254101][ T2333] ---[ end trace 0000000000000000 ]---
[ 34.301561][ T2425] ------------[ cut here ]------------
[ 34.307193][ T2425] WARNING: CPU: 0 PID: 2425 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.317349][ T2425] Modules linked in:
[ 34.321255][ T2425] CPU: 0 PID: 2425 Comm: syz.3.680 Tainted: G B W syzkaller #0
[ 34.330063][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.340428][ T2425] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.346990][ T2425] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 34.367021][ T2425] RSP: 0018:ffffc9000200fb90 EFLAGS: 00010293
[ 34.373119][ T2425] RAX: ffffffff849c2987 RBX: ffff88811568e000 RCX: ffff888112ec9440
[ 34.381845][ T2425] RDX: 0000000000000000 RSI: 000000001ef8b100 RDI: 000000000c04eb7d
[ 34.390276][ T2425] RBP: ffffc9000200fbb0 R08: ffff88811568e083 R09: 1ffff11022ad1c10
[ 34.398455][ T2425] R10: dffffc0000000000 R11: ffffed1022ad1c11 R12: dffffc0000000000
[ 34.406714][ T2425] R13: dffffc0000000000 R14: 000000001ef8b100 R15: ffff888130109c00
[ 34.414787][ T2425] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.423733][ T2425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.430650][ T2425] CR2: 0000555566bc54e8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 34.439584][ T2425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.448196][ T2425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.457716][ T2425] Call Trace:
[ 34.461626][ T2425]
[ 34.465183][ T2425] pppol2tp_release+0x150/0x2b0
[ 34.471197][ T2425] sock_close+0xc9/0x220
[ 34.475521][ T2425] ? __cfi_sock_close+0x10/0x10
[ 34.480571][ T2425] __fput+0x1fd/0x8f0
[ 34.484719][ T2425] ____fput+0x15/0x20
[ 34.489761][ T2425] task_work_run+0x1e1/0x250
[ 34.494887][ T2425] ? __cfi_task_work_run+0x10/0x10
[ 34.500241][ T2425] ? free_nsproxy+0x21f/0x270
[ 34.505661][ T2425] do_exit+0xb0d/0x29f0
[ 34.509856][ T2425] ? __cfi_do_exit+0x10/0x10
[ 34.514727][ T2425] ? xfd_validate_state+0x70/0x150
[ 34.519970][ T2425] ? __kasan_check_write+0x14/0x20
[ 34.525200][ T2425] __x64_sys_exit+0x40/0x40
[ 34.529737][ T2425] x64_sys_call+0x67/0x9a0
[ 34.534458][ T2425] do_syscall_64+0x4c/0xa0
[ 34.538901][ T2425] ? clear_bhb_loop+0x30/0x80
[ 34.543600][ T2425] ? clear_bhb_loop+0x30/0x80
[ 34.548549][ T2425] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.554578][ T2425] RIP: 0033:0x7f781fb9e159
[ 34.559046][ T2425] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 34.566139][ T2425] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.575402][ T2425] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 34.583395][ T2425] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.591694][ T2425] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 34.599704][ T2425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.608189][ T2425] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 34.616737][ T2425]
[ 34.619946][ T2425] ---[ end trace 0000000000000000 ]---
[ 34.785069][ T2556] ------------[ cut here ]------------
[ 34.790882][ T2556] WARNING: CPU: 0 PID: 2556 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.801287][ T2556] Modules linked in:
[ 34.805431][ T2556] CPU: 0 PID: 2556 Comm: syz.0.721 Tainted: G B W syzkaller #0
[ 34.816111][ T2556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.827106][ T2556] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.834068][ T2556] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 34.854378][ T2556] RSP: 0018:ffffc900024efb90 EFLAGS: 00010293
[ 34.860531][ T2556] RAX: ffffffff849c2987 RBX: ffff888118a6b000 RCX: ffff88812d961440
[ 34.868656][ T2556] RDX: 0000000000000000 RSI: 0000000021fbbac0 RDI: 000000000c04eb7d
[ 34.876773][ T2556] RBP: ffffc900024efbb0 R08: ffff888118a6b083 R09: 1ffff1102314d610
[ 34.884811][ T2556] R10: dffffc0000000000 R11: ffffed102314d611 R12: dffffc0000000000
[ 34.892989][ T2556] R13: dffffc0000000000 R14: 0000000021fbbac0 R15: ffff8881137e7400
[ 34.901132][ T2556] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.910114][ T2556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.917155][ T2556] CR2: 00007f6805beec38 CR3: 000000000700f000 CR4: 00000000003506b0
[ 34.925531][ T2556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.934179][ T2556] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.942195][ T2556] Call Trace:
[ 34.945528][ T2556]
[ 34.948468][ T2556] pppol2tp_release+0x150/0x2b0
[ 34.953339][ T2556] sock_close+0xc9/0x220
[ 34.957745][ T2556] ? __cfi_sock_close+0x10/0x10
[ 34.962608][ T2556] __fput+0x1fd/0x8f0
[ 34.966655][ T2556] ____fput+0x15/0x20
[ 34.970693][ T2556] task_work_run+0x1e1/0x250
[ 34.975520][ T2556] ? __cfi_task_work_run+0x10/0x10
[ 34.980847][ T2556] ? free_nsproxy+0x21f/0x270
[ 34.985665][ T2556] do_exit+0xb0d/0x29f0
[ 34.989852][ T2556] ? __cfi_do_exit+0x10/0x10
[ 34.994585][ T2556] ? xfd_validate_state+0x70/0x150
[ 34.999721][ T2556] ? __kasan_check_write+0x14/0x20
[ 35.004904][ T2556] __x64_sys_exit+0x40/0x40
[ 35.009480][ T2556] x64_sys_call+0x67/0x9a0
[ 35.013917][ T2556] do_syscall_64+0x4c/0xa0
[ 35.018508][ T2556] ? clear_bhb_loop+0x30/0x80
[ 35.023234][ T2556] ? clear_bhb_loop+0x30/0x80
[ 35.028133][ T2556] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.034067][ T2556] RIP: 0033:0x7f261cf9e159
[ 35.038590][ T2556] Code: Unable to access opcode bytes at 0x7f261cf9e12f.
[ 35.045875][ T2556] RSP: 002b:00007f261decdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.055189][ T2556] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f261cf9e159
[ 35.063174][ T2556] RDX: 00007f261dece9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.071296][ T2556] RBP: 00007f261d03506b R08: 0000000000000000 R09: 0000000000000058
[ 35.079614][ T2556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.087881][ T2556] R13: 00007f261d226038 R14: 00007f261d225fa0 R15: 00007ffe60feb3e8
[ 35.096399][ T2556]
[ 35.099528][ T2556] ---[ end trace 0000000000000000 ]---
[ 35.263450][ T2724] ------------[ cut here ]------------
[ 35.269071][ T2724] WARNING: CPU: 0 PID: 2724 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.279709][ T2724] Modules linked in:
[ 35.284111][ T2724] CPU: 0 PID: 2724 Comm: syz.3.769 Tainted: G B W syzkaller #0
[ 35.293075][ T2724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.303951][ T2724] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.310561][ T2724] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 35.330994][ T2724] RSP: 0018:ffffc900027efb90 EFLAGS: 00010293
[ 35.337298][ T2724] RAX: ffffffff849c2987 RBX: ffff888109461000 RCX: ffff888117f9bcc0
[ 35.345517][ T2724] RDX: 0000000000000000 RSI: 000000000f12c1c0 RDI: 000000000c04eb7d
[ 35.353503][ T2724] RBP: ffffc900027efbb0 R08: ffff888109461083 R09: 1ffff1102128c210
[ 35.361605][ T2724] R10: dffffc0000000000 R11: ffffed102128c211 R12: dffffc0000000000
[ 35.369743][ T2724] R13: dffffc0000000000 R14: 000000000f12c1c0 R15: ffff88812d6d4800
[ 35.377826][ T2724] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.386874][ T2724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.393478][ T2724] CR2: 00007f241cb58060 CR3: 000000000700f000 CR4: 00000000003506b0
[ 35.402290][ T2724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.410472][ T2724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.418653][ T2724] Call Trace:
[ 35.421940][ T2724]
[ 35.424984][ T2724] pppol2tp_release+0x150/0x2b0
[ 35.430138][ T2724] sock_close+0xc9/0x220
[ 35.434693][ T2724] ? __cfi_sock_close+0x10/0x10
[ 35.439567][ T2724] __fput+0x1fd/0x8f0
[ 35.443572][ T2724] ____fput+0x15/0x20
[ 35.447641][ T2724] task_work_run+0x1e1/0x250
[ 35.452254][ T2724] ? __cfi_task_work_run+0x10/0x10
[ 35.457430][ T2724] ? free_nsproxy+0x21f/0x270
[ 35.462122][ T2724] do_exit+0xb0d/0x29f0
[ 35.466342][ T2724] ? __cfi_do_exit+0x10/0x10
[ 35.470949][ T2724] ? xfd_validate_state+0x70/0x150
[ 35.476118][ T2724] ? __kasan_check_write+0x14/0x20
[ 35.481238][ T2724] __x64_sys_exit+0x40/0x40
[ 35.485915][ T2724] x64_sys_call+0x67/0x9a0
[ 35.490360][ T2724] do_syscall_64+0x4c/0xa0
[ 35.494921][ T2724] ? clear_bhb_loop+0x30/0x80
[ 35.499619][ T2724] ? clear_bhb_loop+0x30/0x80
[ 35.504350][ T2724] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.510266][ T2724] RIP: 0033:0x7f781fb9e159
[ 35.514735][ T2724] Code: Unable to access opcode bytes at 0x7f781fb9e12f.
[ 35.521754][ T2724] RSP: 002b:00007f7820a3bef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.530226][ T2724] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f781fb9e159
[ 35.538240][ T2724] RDX: 00007f7820a3c9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.546291][ T2724] RBP: 00007f781fc3506b R08: 0000000000000000 R09: 0000000000000058
[ 35.554394][ T2724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.562378][ T2724] R13: 00007f781fe26038 R14: 00007f781fe25fa0 R15: 00007ffc68cde9a8
[ 35.570407][ T2724]
[ 35.573448][ T2724] ---[ end trace 0000000000000000 ]---
[ 35.788767][ T2951] ------------[ cut here ]------------
[ 35.794493][ T2951] WARNING: CPU: 1 PID: 2951 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.804850][ T2951] Modules linked in:
[ 35.808785][ T2951] CPU: 1 PID: 2951 Comm: syz.1.852 Tainted: G B W syzkaller #0
[ 35.817766][ T2951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.827996][ T2951] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.834369][ T2951] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 35.854144][ T2951] RSP: 0018:ffffc9000312fb90 EFLAGS: 00010293
[ 35.860308][ T2951] RAX: ffffffff849c2987 RBX: ffff8881126fe000 RCX: ffff88811e073cc0
[ 35.868445][ T2951] RDX: 0000000000000000 RSI: 000000002d46c400 RDI: 000000000c04eb7d
[ 35.877115][ T2951] RBP: ffffc9000312fbb0 R08: ffff8881126fe083 R09: 1ffff110224dfc10
[ 35.885160][ T2951] R10: dffffc0000000000 R11: ffffed10224dfc11 R12: dffffc0000000000
[ 35.893388][ T2951] R13: dffffc0000000000 R14: 000000002d46c400 R15: ffff88812ee29800
[ 35.901761][ T2951] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.910732][ T2951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.917376][ T2951] CR2: 00007f241cb58060 CR3: 000000000700f000 CR4: 00000000003506a0
[ 35.926290][ T2951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
2026/09/27 11:06:47 executed programs: 879
[ 35.935175][ T2951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.943155][ T2951] Call Trace:
[ 35.946561][ T2951]
[ 35.949506][ T2951] pppol2tp_release+0x150/0x2b0
[ 35.954675][ T2951] sock_close+0xc9/0x220
[ 35.958947][ T2951] ? __cfi_sock_close+0x10/0x10
[ 35.963909][ T2951] __fput+0x1fd/0x8f0
[ 35.968026][ T2951] ____fput+0x15/0x20
[ 35.972029][ T2951] task_work_run+0x1e1/0x250
[ 35.976699][ T2951] ? __cfi_task_work_run+0x10/0x10
[ 35.981832][ T2951] ? free_nsproxy+0x21f/0x270
[ 35.986657][ T2951] do_exit+0xb0d/0x29f0
[ 35.990943][ T2951] ? __cfi_do_exit+0x10/0x10
[ 35.995940][ T2951] ? xfd_validate_state+0x70/0x150
[ 36.001165][ T2951] ? __kasan_check_write+0x14/0x20
[ 36.006340][ T2951] __x64_sys_exit+0x40/0x40
[ 36.010860][ T2951] x64_sys_call+0x67/0x9a0
[ 36.015326][ T2951] do_syscall_64+0x4c/0xa0
[ 36.019762][ T2951] ? clear_bhb_loop+0x30/0x80
[ 36.024494][ T2951] ? clear_bhb_loop+0x30/0x80
[ 36.029190][ T2951] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.035138][ T2951] RIP: 0033:0x7f680599e159
[ 36.039554][ T2951] Code: Unable to access opcode bytes at 0x7f680599e12f.
[ 36.046623][ T2951] RSP: 002b:00007f68068f6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.055507][ T2951] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f680599e159
[ 36.063848][ T2951] RDX: 00007f68068f79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.072751][ T2951] RBP: 00007f6805a3506b R08: 0000000000000000 R09: 0000000000000058
[ 36.080770][ T2951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.089131][ T2951] R13: 00007f6805c26038 R14: 00007f6805c25fa0 R15: 00007ffcc01ae3f8
[ 36.097804][ T2951]
[ 36.101103][ T2951] ---[ end trace 0000000000000000 ]---
[ 36.277930][ T3088] ------------[ cut here ]------------
[ 36.283432][ T3088] WARNING: CPU: 0 PID: 3088 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.293638][ T3088] Modules linked in:
[ 36.297649][ T3088] CPU: 0 PID: 3088 Comm: syz.4.885 Tainted: G B W syzkaller #0
[ 36.306518][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.316684][ T3088] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.323038][ T3088] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 36.342816][ T3088] RSP: 0018:ffffc9000244fb90 EFLAGS: 00010293
[ 36.349110][ T3088] RAX: ffffffff849c2987 RBX: ffff888132caf000 RCX: ffff888131de6540
[ 36.357218][ T3088] RDX: 0000000000000000 RSI: 000000001acb0700 RDI: 000000000c04eb7d
[ 36.365250][ T3088] RBP: ffffc9000244fbb0 R08: ffff888132caf083 R09: 1ffff11026595e10
[ 36.373323][ T3088] R10: dffffc0000000000 R11: ffffed1026595e11 R12: dffffc0000000000
[ 36.381370][ T3088] R13: dffffc0000000000 R14: 000000001acb0700 R15: ffff888130a60c00
[ 36.389396][ T3088] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.398670][ T3088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.405292][ T3088] CR2: 00007f261dd556c8 CR3: 000000010f45f000 CR4: 00000000003506b0
[ 36.413303][ T3088] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.421428][ T3088] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.429443][ T3088] Call Trace:
[ 36.432740][ T3088]
[ 36.435726][ T3088] pppol2tp_release+0x150/0x2b0
[ 36.440785][ T3088] sock_close+0xc9/0x220
[ 36.445099][ T3088] ? __cfi_sock_close+0x10/0x10
[ 36.449963][ T3088] __fput+0x1fd/0x8f0
[ 36.453972][ T3088] ____fput+0x15/0x20
[ 36.458049][ T3088] task_work_run+0x1e1/0x250
[ 36.462658][ T3088] ? __cfi_task_work_run+0x10/0x10
[ 36.467917][ T3088] ? free_nsproxy+0x21f/0x270
[ 36.472626][ T3088] do_exit+0xb0d/0x29f0
[ 36.476935][ T3088] ? __cfi_do_exit+0x10/0x10
[ 36.481543][ T3088] ? xfd_validate_state+0x70/0x150
[ 36.486722][ T3088] ? __kasan_check_write+0x14/0x20
[ 36.491938][ T3088] __x64_sys_exit+0x40/0x40
[ 36.496516][ T3088] x64_sys_call+0x67/0x9a0
[ 36.501051][ T3088] do_syscall_64+0x4c/0xa0
[ 36.505813][ T3088] ? clear_bhb_loop+0x30/0x80
[ 36.510510][ T3088] ? clear_bhb_loop+0x30/0x80
[ 36.515293][ T3088] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.521206][ T3088] RIP: 0033:0x7f666459e159
[ 36.525767][ T3088] Code: Unable to access opcode bytes at 0x7f666459e12f.
[ 36.532979][ T3088] RSP: 002b:00007f66654beef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.541625][ T3088] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f666459e159
[ 36.549732][ T3088] RDX: 00007f66654bf9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.557761][ T3088] RBP: 00007f666463506b R08: 0000000000000000 R09: 0000000000000058
[ 36.565790][ T3088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.573860][ T3088] R13: 00007f6664826038 R14: 00007f6664825fa0 R15: 00007ffefb85b1c8
[ 36.581890][ T3088]
[ 36.584939][ T3088] ---[ end trace 0000000000000000 ]---
[ 36.689935][ T3247] ------------[ cut here ]------------
[ 36.695677][ T3247] WARNING: CPU: 1 PID: 3247 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.705882][ T3247] Modules linked in:
[ 36.709968][ T3247] CPU: 1 PID: 3247 Comm: syz.0.950 Tainted: G B W syzkaller #0
[ 36.718849][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.729047][ T3247] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.735538][ T3247] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 36.755454][ T3247] RSP: 0018:ffffc90003357b90 EFLAGS: 00010293
[ 36.761539][ T3247] RAX: ffffffff849c2987 RBX: ffff888115834000 RCX: ffff888108eebcc0
[ 36.769659][ T3247] RDX: 0000000000000000 RSI: 00000000189300c0 RDI: 000000000c04eb7d
[ 36.777925][ T3247] RBP: ffffc90003357bb0 R08: ffff888115834083 R09: 1ffff11022b06810
[ 36.786211][ T3247] R10: dffffc0000000000 R11: ffffed1022b06811 R12: dffffc0000000000
[ 36.794291][ T3247] R13: dffffc0000000000 R14: 00000000189300c0 R15: ffff88810019a400
[ 36.802365][ T3247] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.811553][ T3247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.818459][ T3247] CR2: 00007f781fb59270 CR3: 000000010f45f000 CR4: 00000000003506a0
[ 36.826746][ T3247] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.834832][ T3247] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.843248][ T3247] Call Trace:
[ 36.846683][ T3247]
[ 36.849641][ T3247] pppol2tp_release+0x150/0x2b0
[ 36.854713][ T3247] sock_close+0xc9/0x220
[ 36.859060][ T3247] ? __cfi_sock_close+0x10/0x10
[ 36.863921][ T3247] __fput+0x1fd/0x8f0
[ 36.867962][ T3247] ____fput+0x15/0x20
[ 36.871967][ T3247] task_work_run+0x1e1/0x250
[ 36.876634][ T3247] ? __cfi_task_work_run+0x10/0x10
[ 36.881770][ T3247] ? free_nsproxy+0x21f/0x270
[ 36.886539][ T3247] do_exit+0xb0d/0x29f0
[ 36.890715][ T3247] ? __cfi_do_exit+0x10/0x10
[ 36.895335][ T3247] ? xfd_validate_state+0x70/0x150
[ 36.900457][ T3247] ? __kasan_check_write+0x14/0x20
[ 36.905791][ T3247] __x64_sys_exit+0x40/0x40
[ 36.910318][ T3247] x64_sys_call+0x67/0x9a0
[ 36.914796][ T3247] do_syscall_64+0x4c/0xa0
[ 36.919330][ T3247] ? clear_bhb_loop+0x30/0x80
[ 36.924045][ T3247] ? clear_bhb_loop+0x30/0x80
[ 36.928752][ T3247] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.934931][ T3247] RIP: 0033:0x7f261cf9e159
[ 36.939445][ T3247] Code: Unable to access opcode bytes at 0x7f261cf9e12f.
[ 36.946588][ T3247] RSP: 002b:00007f261decdef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.955125][ T3247] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f261cf9e159
[ 36.963438][ T3247] RDX: 00007f261dece9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.971457][ T3247] RBP: 00007f261d03506b R08: 0000000000000000 R09: 0000000000000058
[ 36.979641][ T3247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.987666][ T3247] R13: 00007f261d226038 R14: 00007f261d225fa0 R15: 00007ffe60feb3e8
[ 36.995689][ T3247]
[ 36.998715][ T3247] ---[ end trace 0000000000000000 ]---
[ 37.050360][ T3359] ------------[ cut here ]------------
[ 37.056009][ T3359] WARNING: CPU: 0 PID: 3359 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.066341][ T3359] Modules linked in:
[ 37.070243][ T3359] CPU: 0 PID: 3359 Comm: syz.5.981 Tainted: G B W syzkaller #0
[ 37.079171][ T3359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.089658][ T3359] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.096336][ T3359] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 37.116275][ T3359] RSP: 0018:ffffc90003e67b90 EFLAGS: 00010293
[ 37.122540][ T3359] RAX: ffffffff849c2987 RBX: ffff88811804f000 RCX: ffff8881235a0000
[ 37.130671][ T3359] RDX: 0000000000000000 RSI: 00000000101bf9c0 RDI: 000000000c04eb7d
[ 37.138818][ T3359] RBP: ffffc90003e67bb0 R08: ffff88811804f083 R09: 1ffff11023009e10
[ 37.146957][ T3359] R10: dffffc0000000000 R11: ffffed1023009e11 R12: dffffc0000000000
[ 37.155168][ T3359] R13: dffffc0000000000 R14: 00000000101bf9c0 R15: ffff88812e946800
[ 37.163308][ T3359] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.172422][ T3359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.179169][ T3359] CR2: 00007f6664559270 CR3: 000000010f45f000 CR4: 00000000003506b0
[ 37.187305][ T3359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.195443][ T3359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.203556][ T3359] Call Trace:
[ 37.207008][ T3359]
[ 37.209943][ T3359] pppol2tp_release+0x150/0x2b0
[ 37.214952][ T3359] sock_close+0xc9/0x220
[ 37.219327][ T3359] ? __cfi_sock_close+0x10/0x10
[ 37.224337][ T3359] __fput+0x1fd/0x8f0
[ 37.228339][ T3359] ____fput+0x15/0x20
[ 37.232337][ T3359] task_work_run+0x1e1/0x250
[ 37.237100][ T3359] ? __cfi_task_work_run+0x10/0x10
[ 37.242324][ T3359] ? free_nsproxy+0x21f/0x270
[ 37.247155][ T3359] do_exit+0xb0d/0x29f0
[ 37.251344][ T3359] ? __cfi_do_exit+0x10/0x10
[ 37.256085][ T3359] ? xfd_validate_state+0x70/0x150
[ 37.261218][ T3359] ? __kasan_check_write+0x14/0x20
[ 37.266557][ T3359] __x64_sys_exit+0x40/0x40
[ 37.271084][ T3359] x64_sys_call+0x67/0x9a0
[ 37.275766][ T3359] do_syscall_64+0x4c/0xa0
[ 37.280214][ T3359] ? clear_bhb_loop+0x30/0x80
[ 37.285051][ T3359] ? clear_bhb_loop+0x30/0x80
[ 37.289769][ T3359] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.295828][ T3359] RIP: 0033:0x7f241bd9e159
[ 37.300264][ T3359] Code: Unable to access opcode bytes at 0x7f241bd9e12f.
[ 37.307517][ T3359] RSP: 002b:00007f241cd38ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.316147][ T3359] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f241bd9e159
[ 37.324340][ T3359] RDX: 00007f241cd399c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.332333][ T3359] RBP: 00007f241be3506b R08: 0000000000000000 R09: 0000000000000058
[ 37.340481][ T3359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.348591][ T3359] R13: 00007f241c026038 R14: 00007f241c025fa0 R15: 00007fffdbfd2eb8
[ 37.356762][ T3359]
[ 37.359792][ T3359] ---[ end trace 0000000000000000 ]---
[ 37.536880][ T3504] ------------[ cut here ]------------
[ 37.542401][ T3504] WARNING: CPU: 0 PID: 3504 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.552602][ T3504] Modules linked in:
[ 37.556660][ T3504] CPU: 0 PID: 3504 Comm: syz.1.1018 Tainted: G B W syzkaller #0
[ 37.565567][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.575660][ T3504] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.582042][ T3504] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 37.602061][ T3504] RSP: 0018:ffffc90003df7b90 EFLAGS: 00010293
[ 37.606245][ T3502] ------------[ cut here ]------------
[ 37.608170][ T3504] RAX: ffffffff849c2987 RBX: ffff88810941d000 RCX: ffff888120de9440
[ 37.613654][ T3502] WARNING: CPU: 1 PID: 3502 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.621836][ T3504] RDX: 0000000000000000 RSI: 000000001e96bb80 RDI: 000000000c04eb7d
[ 37.621853][ T3504] RBP: ffffc90003df7bb0 R08: ffff88810941d083 R09: 1ffff11021283a10
[ 37.632099][ T3502] Modules linked in:
[ 37.640354][ T3504] R10: dffffc0000000000 R11: ffffed1021283a11 R12: dffffc0000000000
[ 37.640374][ T3504] R13: dffffc0000000000 R14: 000000001e96bb80 R15: ffff88812eda6000
[ 37.640385][ T3504] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.640400][ T3504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.640411][ T3504] CR2: 00007f241bd59270 CR3: 000000000700f000 CR4: 00000000003506b0
[ 37.640425][ T3504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.640434][ T3504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.640443][ T3504] Call Trace:
[ 37.640448][ T3504]
[ 37.640454][ T3504] pppol2tp_release+0x150/0x2b0
[ 37.640479][ T3504] sock_close+0xc9/0x220
[ 37.640494][ T3504] ? __cfi_sock_close+0x10/0x10
[ 37.640509][ T3504] __fput+0x1fd/0x8f0
[ 37.648520][ T3502]
[ 37.652426][ T3504] ____fput+0x15/0x20
[ 37.660391][ T3502] CPU: 1 PID: 3502 Comm: syz.3.1025 Tainted: G B W syzkaller #0
[ 37.660410][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.660419][ T3502] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.660445][ T3502] Code: 5d c3 e8 5c 42 d5 fc be 02 00 00 00 eb 0a e8 50 42 d5 fc be 01 00 00 00 4c 89 f7 e8 d3 03 cd fd e9 0f ff ff ff e8 39 42 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 42 d5 fc 4c 89 f7 be 03
[ 37.668609][ T3504] task_work_run+0x1e1/0x250
[ 37.668631][ T3504] ? __cfi_task_work_run+0x10/0x10
[ 37.668650][ T3504] ? free_nsproxy+0x21f/0x270
[ 37.668672][ T3504] do_exit+0xb0d/0x29f0
[ 37.677720][ T3502] RSP: 0018:ffffc90003a7fb90 EFLAGS: 00010293
[ 37.684439][ T3504] ? __cfi_do_exit+0x10/0x10
[ 37.684472][ T3504] ? xfd_validate_state+0x70/0x150
[ 37.692438][ T3502]
[ 37.692445][ T3502] RAX: ffffffff849c2987 RBX: ffff888113d75000 RCX: ffff88812dcde540
[ 37.692457][ T3502] RDX: 0000000000000000 RSI: 000000001bd8c940 RDI: 000000000c04eb7d
[ 37.692469][ T3502] RBP: ffffc90003a7fbb0 R08: ffff888113d75083 R09: 1ffff110227aea10
[ 37.700459][ T3504] ? __kasan_check_write+0x14/0x20
[ 37.700481][ T3504] __x64_sys_exit+0x40/0x40
[ 37.700499][ T3504] x64_sys_call+0x67/0x9a0
[ 37.700515][ T3504] do_syscall_64+0x4c/0xa0
[ 37.700535][ T3504] ? clear_bhb_loop+0x30/0x80
[ 37.708496][ T3502] R10: dffffc0000000000 R11: ffffed10227aea11 R12: dffffc0000000000
[ 37.711756][ T3504] ? clear_bhb_loop+0x30/0x80
[ 37.714795][ T3502] R13: dffffc0000000000 R14: 000000001bd8c940 R15: ffff88812eda7400
[ 37.719538][ T3504] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.723755][ T3502] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.728595][ T3504] RIP: 0033:0x7f680599e159
[ 37.728609][ T3504] Code: Unable to access opcode bytes at 0x7f680599e12f.
[ 37.732663][ T3502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.735227][ T3504] RSP: 002b:00007f68068f6ef8 EFLAGS: 00000246
[ 37.738937][ T3502] CR2: 00007f7820958060 CR3: 000000013253c000 CR4: 00000000003506a0
[ 37.747831][ T3504] ORIG_RAX: 000000000000003c
[ 37.757882][ T3502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.764193][ T3504] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f680599e159
[ 37.784158][ T3502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.784175][ T3502] Call Trace:
[ 37.788749][ T3504] RDX: 00007f68068f79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.793834][ T3502]
[ 37.798810][ T3504] RBP: 00007f6805a3506b R08: 0000000000000000 R09: 0000000000000058
[ 37.803250][ T3502] pppol2tp_release+0x150/0x2b0
[ 37.809396][ T3504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.809409][ T3504] R13: 00007f6805c26038 R14: 00007f6805c25fa0 R15: 00007ffcc01ae3f8
[ 37.813981][ T3502] sock_close+0xc9/0x220
[ 37.819091][ T3504]
[ 37.819098][ T3504] ---[ end trace 0000000000000000 ]---
[ 38.021584][ T3502] ? __cfi_sock_close+0x10/0x10
[ 38.026804][ T3502] __fput+0x1fd/0x8f0
[ 38.030806][ T3502] ____fput+0x15/0x20