Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
2026/08/19 17:22:28 parsed 1 programs
2026/08/19 17:22:28 serving rpc on tcp://37593
[ 24.727063][ T30] audit: type=1400 audit(1787160148.515:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.748273][ T30] audit: type=1400 audit(1787160148.525:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.737324][ T30] audit: type=1400 audit(1787160149.525:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.740906][ T299] cgroup: Unknown subsys name 'net'
[ 25.760303][ T30] audit: type=1400 audit(1787160149.535:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.787575][ T30] audit: type=1400 audit(1787160149.555:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.788234][ T299] cgroup: Unknown subsys name 'devices'
[ 25.929871][ T299] cgroup: Unknown subsys name 'hugetlb'
[ 25.935522][ T299] cgroup: Unknown subsys name 'rlimit'
[ 26.084026][ T30] audit: type=1400 audit(1787160149.875:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.107268][ T30] audit: type=1400 audit(1787160149.875:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.127733][ T30] audit: type=1400 audit(1787160149.875:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.148053][ T30] audit: type=1400 audit(1787160149.875:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.155478][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.168945][ T30] audit: type=1400 audit(1787160149.875:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.268710][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.775744][ T306] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.088312][ T320] syz-executor (320) used greatest stack depth: 21976 bytes left
[ 27.309035][ T348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.316099][ T348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.323657][ T348] device bridge_slave_0 entered promiscuous mode
[ 27.330660][ T348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.337867][ T348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.345271][ T348] device bridge_slave_1 entered promiscuous mode
[ 27.389285][ T348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.396384][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.403705][ T348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.410898][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.434234][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.442224][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.449694][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.459123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.467326][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.474413][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.483199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.491500][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.498567][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.512971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.522064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.535540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.547470][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.555794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.563383][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.571693][ T348] device veth0_vlan entered promiscuous mode
[ 27.581561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.590922][ T348] device veth1_macvtap entered promiscuous mode
[ 27.600543][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.610305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.639497][ T348] syz-executor (348) used greatest stack depth: 20576 bytes left
2026/08/19 17:22:31 executed programs: 0
[ 28.035039][ T368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.042885][ T368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.050494][ T368] device bridge_slave_0 entered promiscuous mode
[ 28.057640][ T368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.064989][ T368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.072436][ T368] device bridge_slave_1 entered promiscuous mode
[ 28.122176][ T368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.129290][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.136552][ T368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.143616][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.169193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.176911][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.184415][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.194034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.202422][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.209499][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.223204][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.231410][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.238478][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.258706][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.268315][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.284563][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.297062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.305394][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.312984][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.322510][ T368] device veth0_vlan entered promiscuous mode
[ 28.335876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.345319][ T368] device veth1_macvtap entered promiscuous mode
[ 28.355907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.366297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.399016][ T373] ==================================================================
[ 28.407143][ T373] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.415263][ T373] Read of size 4 at addr ffff88810f124000 by task syz.2.17/373
[ 28.422839][ T373]
[ 28.425197][ T373] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0
[ 28.432334][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 28.442428][ T373] Call Trace:
[ 28.445735][ T373]
[ 28.448691][ T373] __dump_stack+0x21/0x30
[ 28.453057][ T373] dump_stack_lvl+0x110/0x170
[ 28.457763][ T373] ? show_regs_print_info+0x20/0x20
[ 28.462993][ T373] ? load_image+0x3f0/0x3f0
[ 28.467540][ T373] ? __local_bh_enable_ip+0x58/0x80
[ 28.472800][ T373] print_address_description+0x7f/0x2c0
[ 28.478381][ T373] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.484178][ T373] kasan_report+0x10f/0x150
[ 28.488719][ T373] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.494545][ T373] __asan_report_load4_noabort+0x14/0x20
[ 28.500192][ T373] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 28.505747][ T373] pppol2tp_release+0x150/0x2b0
[ 28.510627][ T373] sock_close+0xb8/0x200
[ 28.514874][ T373] ? sock_mmap+0xa0/0xa0
[ 28.519114][ T373] __fput+0x22b/0x900
[ 28.523130][ T373] ____fput+0x15/0x20
[ 28.527127][ T373] task_work_run+0x127/0x190
[ 28.531717][ T373] exit_to_user_mode_loop+0xd0/0xe0
[ 28.536932][ T373] exit_to_user_mode_prepare+0x87/0xd0
[ 28.542388][ T373] syscall_exit_to_user_mode+0x1a/0x30
[ 28.547869][ T373] do_syscall_64+0x58/0xa0
[ 28.552290][ T373] ? clear_bhb_loop+0x50/0xa0
[ 28.556978][ T373] ? clear_bhb_loop+0x50/0xa0
[ 28.561681][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 28.567577][ T373] RIP: 0033:0x7ff66d7ed0d9
[ 28.572084][ T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 28.591699][ T373] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 28.600124][ T373] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 28.608103][ T373] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 28.616071][ T373] RBP: 0000000000006edb R08: 0000000000000001 R09: 0000000000000000
[ 28.624063][ T373] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 28.632158][ T373] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 28.640141][ T373]
[ 28.643169][ T373]
[ 28.645493][ T373] Allocated by task 373:
[ 28.649724][ T373] __kasan_kmalloc+0xd4/0x100
[ 28.654406][ T373] __kmalloc+0x13d/0x2c0
[ 28.658658][ T373] l2tp_session_create+0x39/0xb60
[ 28.663705][ T373] pppol2tp_connect+0xbf5/0x1640
[ 28.668667][ T373] __sys_connect+0x3cb/0x450
[ 28.673258][ T373] __x64_sys_connect+0x7a/0x90
[ 28.678056][ T373] x64_sys_call+0x7c/0x9a0
[ 28.682515][ T373] do_syscall_64+0x4c/0xa0
[ 28.686930][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 28.692970][ T373]
[ 28.695294][ T373] Freed by task 353:
[ 28.699181][ T373] kasan_set_track+0x4a/0x70
[ 28.703770][ T373] kasan_set_free_info+0x23/0x40
[ 28.708715][ T373] ____kasan_slab_free+0x125/0x160
[ 28.713857][ T373] __kasan_slab_free+0x11/0x20
[ 28.718622][ T373] slab_free_freelist_hook+0xc2/0x190
[ 28.723989][ T373] kfree+0xc4/0x270
[ 28.727796][ T373] l2tp_session_put+0xaf/0x1a0
[ 28.732559][ T373] l2tp_session_delete+0x3a9/0x4a0
[ 28.737707][ T373] l2tp_tunnel_del_work+0x180/0x3d0
[ 28.742914][ T373] process_one_work+0x6c8/0xbb0
[ 28.747768][ T373] worker_thread+0xaa0/0x1250
[ 28.752447][ T373] kthread+0x3f5/0x4f0
[ 28.756512][ T373] ret_from_fork+0x1f/0x30
[ 28.760922][ T373]
[ 28.763246][ T373] The buggy address belongs to the object at ffff88810f124000
[ 28.763246][ T373] which belongs to the cache kmalloc-512 of size 512
[ 28.777294][ T373] The buggy address is located 0 bytes inside of
[ 28.777294][ T373] 512-byte region [ffff88810f124000, ffff88810f124200)
[ 28.790396][ T373] The buggy address belongs to the page:
[ 28.796041][ T373] page:ffffea00043c4900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f124
[ 28.806285][ T373] head:ffffea00043c4900 order:2 compound_mapcount:0 compound_pincount:0
[ 28.814626][ T373] flags: 0x4000000000010200(slab|head|zone=1)
[ 28.820709][ T373] raw: 4000000000010200 ffffea0004405e00 0000000400000004 ffff888100042f00
[ 28.829295][ T373] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 28.837876][ T373] page dumped because: kasan: bad access detected
[ 28.844283][ T373] page_owner tracks the page as allocated
[ 28.850002][ T373] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, ts 5400370891, free_ts 0
[ 28.868050][ T373] post_alloc_hook+0x192/0x1b0
[ 28.872817][ T373] prep_new_page+0x1c/0x110
[ 28.877319][ T373] get_page_from_freelist+0x2c3a/0x2cd0
[ 28.882871][ T373] __alloc_pages+0x1a2/0x460
[ 28.887466][ T373] new_slab+0xa0/0x4d0
[ 28.891539][ T373] ___slab_alloc+0x3ac/0x840
[ 28.896130][ T373] __slab_alloc+0x49/0x90
[ 28.900457][ T373] __kmalloc_track_caller+0x169/0x2c0
[ 28.905828][ T373] __alloc_skb+0x210/0x730
[ 28.910243][ T373] alloc_uevent_skb+0x85/0x240
[ 28.915011][ T373] kobject_uevent_net_broadcast+0x335/0x5a0
[ 28.920938][ T373] kobject_uevent_env+0x52b/0x700
[ 28.925983][ T373] kobject_synth_uevent+0x457/0x940
[ 28.931172][ T373] store_uevent+0x16/0x30
[ 28.935505][ T373] module_attr_store+0x5f/0x80
[ 28.940263][ T373] sysfs_kf_write+0x129/0x150
[ 28.944936][ T373] page_owner free stack trace missing
[ 28.950292][ T373]
[ 28.952606][ T373] Memory state around the buggy address:
[ 28.958235][ T373] ffff88810f123f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 28.966308][ T373] ffff88810f123f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 28.974365][ T373] >ffff88810f124000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 28.982415][ T373] ^
[ 28.986477][ T373] ffff88810f124080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 28.994531][ T373] ffff88810f124100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 29.002586][ T373] ==================================================================
[ 29.010634][ T373] Disabling lock debugging due to kernel taint
[ 29.017412][ T373] ------------[ cut here ]------------
[ 29.025178][ T373] WARNING: CPU: 0 PID: 373 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.035712][ T373] Modules linked in:
[ 29.039669][ T373] CPU: 0 PID: 373 Comm: syz.2.17 Tainted: G B syzkaller #0
[ 29.048249][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.058557][ T373] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.064932][ T373] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 29.084638][ T373] RSP: 0018:ffffc90000aa7d10 EFLAGS: 00010293
[ 29.090780][ T373] RAX: ffffffff845e2e67 RBX: ffff888111096000 RCX: ffff8881105162c0
[ 29.098968][ T373] RDX: 0000000000000000 RSI: 000000000ab6e1e0 RDI: 000000000c04eb7d
[ 29.107031][ T373] RBP: ffffc90000aa7d30 R08: 0000000000000003 R09: 0000000000000004
[ 29.115254][ T373] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000
[ 29.123356][ T373] R13: dffffc0000000000 R14: 000000000ab6e1e0 R15: ffff88810f124000
[ 29.131454][ T373] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 29.140788][ T373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.147458][ T373] CR2: 00007ff66d83a7c0 CR3: 0000000128bb0000 CR4: 00000000003506a0
[ 29.155646][ T373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.163703][ T373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.171785][ T373] Call Trace:
[ 29.175113][ T373]
[ 29.178647][ T373] pppol2tp_release+0x150/0x2b0
[ 29.183668][ T373] sock_close+0xb8/0x200
[ 29.188051][ T373] ? sock_mmap+0xa0/0xa0
[ 29.192384][ T373] __fput+0x22b/0x900
[ 29.196475][ T373] ____fput+0x15/0x20
[ 29.200569][ T373] task_work_run+0x127/0x190
[ 29.205211][ T373] exit_to_user_mode_loop+0xd0/0xe0
[ 29.210593][ T373] exit_to_user_mode_prepare+0x87/0xd0
[ 29.216115][ T373] syscall_exit_to_user_mode+0x1a/0x30
[ 29.221656][ T373] do_syscall_64+0x58/0xa0
[ 29.226160][ T373] ? clear_bhb_loop+0x50/0xa0
[ 29.230943][ T373] ? clear_bhb_loop+0x50/0xa0
[ 29.235649][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.241697][ T373] RIP: 0033:0x7ff66d7ed0d9
[ 29.246153][ T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.266168][ T373] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.274669][ T373] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 29.282732][ T373] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.290843][ T373] RBP: 0000000000006edb R08: 0000000000000001 R09: 0000000000000000
[ 29.298910][ T373] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 29.306887][ T373] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 29.315048][ T373]
[ 29.318153][ T373] ---[ end trace 4aa92d97edfd07b7 ]---
[ 29.330838][ T374] ------------[ cut here ]------------
[ 29.336330][ T374] WARNING: CPU: 1 PID: 374 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.346605][ T374] Modules linked in:
[ 29.350636][ T374] CPU: 0 PID: 374 Comm: syz.2.18 Tainted: G B W syzkaller #0
[ 29.359218][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.369903][ T374] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.376337][ T374] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 29.396050][ T374] RSP: 0018:ffffc90000ab7d10 EFLAGS: 00010293
[ 29.402284][ T374] RAX: ffffffff845e2e67 RBX: ffff888111656000 RCX: ffff888110512780
[ 29.410509][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 29.418722][ T374] RBP: ffffc90000ab7d30 R08: ffff888111656083 R09: 1ffff110222cac10
[ 29.426762][ T374] R10: dffffc0000000000 R11: ffffed10222cac11 R12: dffffc0000000000
[ 29.434829][ T374] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888110186400
[ 29.442929][ T374] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 29.452084][ T374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.458940][ T374] CR2: 0000200000000740 CR3: 0000000128be8000 CR4: 00000000003506b0
[ 29.466959][ T374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.475081][ T374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.483196][ T374] Call Trace:
[ 29.486564][ T374]
[ 29.489588][ T374] pppol2tp_release+0x150/0x2b0
[ 29.494520][ T374] sock_close+0xb8/0x200
[ 29.498905][ T374] ? sock_mmap+0xa0/0xa0
[ 29.503178][ T374] __fput+0x22b/0x900
[ 29.507199][ T374] ____fput+0x15/0x20
[ 29.511293][ T374] task_work_run+0x127/0x190
[ 29.515905][ T374] exit_to_user_mode_loop+0xd0/0xe0
[ 29.521191][ T374] exit_to_user_mode_prepare+0x87/0xd0
[ 29.526670][ T374] syscall_exit_to_user_mode+0x1a/0x30
[ 29.532219][ T374] do_syscall_64+0x58/0xa0
[ 29.536663][ T374] ? clear_bhb_loop+0x50/0xa0
[ 29.541456][ T374] ? clear_bhb_loop+0x50/0xa0
[ 29.546164][ T374] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.552146][ T374] RIP: 0033:0x7ff66d7ed0d9
[ 29.556584][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.576301][ T374] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.584762][ T374] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 29.592979][ T374] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.601125][ T374] RBP: 0000000000007280 R08: 0000000000000001 R09: 0000000000000000
[ 29.609194][ T374] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 29.617224][ T374] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 29.625404][ T374]
[ 29.628499][ T374] ---[ end trace 4aa92d97edfd07b8 ]---
[ 29.684837][ T378] ------------[ cut here ]------------
[ 29.690391][ T378] WARNING: CPU: 0 PID: 378 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 29.700705][ T378] Modules linked in:
[ 29.704672][ T378] CPU: 0 PID: 378 Comm: syz.2.22 Tainted: G B W syzkaller #0
[ 29.713407][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.723779][ T378] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 29.730425][ T378] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 29.750170][ T378] RSP: 0018:ffffc90000b07d10 EFLAGS: 00010293
[ 29.756271][ T378] RAX: ffffffff845e2e67 RBX: ffff888110dff000 RCX: ffff888110e113c0
[ 29.764377][ T378] RDX: 0000000000000000 RSI: 000000000ab6ef20 RDI: 000000000c04eb7d
[ 29.772410][ T378] RBP: ffffc90000b07d30 R08: ffff888110dff083 R09: 1ffff110221bfe10
[ 29.780550][ T378] R10: dffffc0000000000 R11: ffffed10221bfe11 R12: dffffc0000000000
[ 29.788712][ T378] R13: dffffc0000000000 R14: 000000000ab6ef20 R15: ffff888120758400
[ 29.796734][ T378] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 29.805929][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 29.812630][ T378] CR2: 0000200000000740 CR3: 000000012cc3f000 CR4: 00000000003506a0
[ 29.821177][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 29.829252][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 29.837286][ T378] Call Trace:
[ 29.840657][ T378]
[ 29.843606][ T378] pppol2tp_release+0x150/0x2b0
[ 29.848547][ T378] sock_close+0xb8/0x200
[ 29.852814][ T378] ? sock_mmap+0xa0/0xa0
[ 29.857051][ T378] __fput+0x22b/0x900
[ 29.861088][ T378] ____fput+0x15/0x20
[ 29.865116][ T378] task_work_run+0x127/0x190
[ 29.869791][ T378] exit_to_user_mode_loop+0xd0/0xe0
[ 29.875055][ T378] exit_to_user_mode_prepare+0x87/0xd0
[ 29.880593][ T378] syscall_exit_to_user_mode+0x1a/0x30
[ 29.886105][ T378] do_syscall_64+0x58/0xa0
[ 29.890599][ T378] ? clear_bhb_loop+0x50/0xa0
[ 29.895336][ T378] ? clear_bhb_loop+0x50/0xa0
[ 29.900212][ T378] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 29.906125][ T378] RIP: 0033:0x7ff66d7ed0d9
[ 29.910608][ T378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.930275][ T378] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 29.938784][ T378] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 29.946800][ T378] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 29.954848][ T378] RBP: 00000000000073e2 R08: 0000000000000001 R09: 0000000000000000
[ 29.962904][ T378] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 29.970952][ T378] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 29.979180][ T378]
[ 29.982230][ T378] ---[ end trace 4aa92d97edfd07b9 ]---
[ 29.993023][ T379] ------------[ cut here ]------------
[ 29.998564][ T379] WARNING: CPU: 1 PID: 379 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.008708][ T379] Modules linked in:
[ 30.012627][ T379] CPU: 1 PID: 379 Comm: syz.2.23 Tainted: G B W syzkaller #0
[ 30.021191][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.031457][ T379] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.038059][ T379] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 30.058313][ T379] RSP: 0018:ffffc90000aa7d10 EFLAGS: 00010293
[ 30.064470][ T379] RAX: ffffffff845e2e67 RBX: ffff888111bd5000 RCX: ffff888110510000
[ 30.072610][ T379] RDX: 0000000000000000 RSI: 000000000ab94fc0 RDI: 000000000c04eb7d
[ 30.080681][ T379] RBP: ffffc90000aa7d30 R08: ffff888111bd5083 R09: 1ffff1102237aa10
[ 30.088757][ T379] R10: dffffc0000000000 R11: ffffed102237aa11 R12: dffffc0000000000
[ 30.089858][ T8] device bridge_slave_1 left promiscuous mode
[ 30.096760][ T379] R13: dffffc0000000000 R14: 000000000ab94fc0 R15: ffff8881102aa400
[ 30.096778][ T379] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 30.103748][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.111432][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.133528][ T379] CR2: 0000200000000740 CR3: 0000000128beb000 CR4: 00000000003506a0
[ 30.134003][ T8] device bridge_slave_0 left promiscuous mode
[ 30.147884][ T379] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.148123][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.155898][ T379] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.171037][ T379] Call Trace:
[ 30.174384][ T379]
[ 30.174548][ T8] device veth1_macvtap left promiscuous mode
[ 30.177334][ T379] pppol2tp_release+0x150/0x2b0
[ 30.184338][ T8] device veth0_vlan left promiscuous mode
[ 30.188344][ T379] sock_close+0xb8/0x200
[ 30.198333][ T379] ? sock_mmap+0xa0/0xa0
[ 30.202636][ T379] __fput+0x22b/0x900
[ 30.206697][ T379] ____fput+0x15/0x20
[ 30.210755][ T379] task_work_run+0x127/0x190
[ 30.215377][ T379] exit_to_user_mode_loop+0xd0/0xe0
[ 30.220682][ T379] exit_to_user_mode_prepare+0x87/0xd0
[ 30.226174][ T379] syscall_exit_to_user_mode+0x1a/0x30
[ 30.231703][ T379] do_syscall_64+0x58/0xa0
[ 30.236155][ T379] ? clear_bhb_loop+0x50/0xa0
[ 30.240896][ T379] ? clear_bhb_loop+0x50/0xa0
[ 30.245608][ T379] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 30.251743][ T379] RIP: 0033:0x7ff66d7ed0d9
[ 30.256203][ T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.275943][ T379] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.284480][ T379] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 30.292566][ T379] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.300761][ T379] RBP: 0000000000007516 R08: 0000000000000001 R09: 0000000000000000
[ 30.308822][ T379] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 30.316820][ T379] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 30.324873][ T379]
[ 30.327937][ T379] ---[ end trace 4aa92d97edfd07ba ]---
[ 30.350367][ T382] ------------[ cut here ]------------
[ 30.355874][ T382] WARNING: CPU: 1 PID: 382 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.366034][ T382] Modules linked in:
[ 30.370385][ T382] CPU: 1 PID: 382 Comm: syz.2.25 Tainted: G B W syzkaller #0
[ 30.379911][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.390087][ T382] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.396449][ T382] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 30.416546][ T382] RSP: 0018:ffffc90000b47d10 EFLAGS: 00010293
[ 30.422677][ T382] RAX: ffffffff845e2e67 RBX: ffff888111bbc000 RCX: ffff888111924f00
[ 30.430782][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 30.438876][ T382] RBP: ffffc90000b47d30 R08: ffff888111bbc083 R09: 1ffff11022377810
[ 30.446941][ T382] R10: dffffc0000000000 R11: ffffed1022377811 R12: dffffc0000000000
[ 30.455112][ T382] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881102a8000
[ 30.464224][ T382] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 30.473374][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.480122][ T382] CR2: 0000200000000740 CR3: 000000012b90d000 CR4: 00000000003506b0
[ 30.488175][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.496252][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.504460][ T382] Call Trace:
[ 30.507811][ T382]
[ 30.510762][ T382] pppol2tp_release+0x150/0x2b0
[ 30.515637][ T382] sock_close+0xb8/0x200
[ 30.520143][ T382] ? sock_mmap+0xa0/0xa0
[ 30.524471][ T382] __fput+0x22b/0x900
[ 30.528690][ T382] ____fput+0x15/0x20
[ 30.532708][ T382] task_work_run+0x127/0x190
[ 30.537311][ T382] exit_to_user_mode_loop+0xd0/0xe0
[ 30.542603][ T382] exit_to_user_mode_prepare+0x87/0xd0
[ 30.548118][ T382] syscall_exit_to_user_mode+0x1a/0x30
[ 30.553593][ T382] do_syscall_64+0x58/0xa0
[ 30.558085][ T382] ? clear_bhb_loop+0x50/0xa0
[ 30.562788][ T382] ? clear_bhb_loop+0x50/0xa0
[ 30.567494][ T382] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 30.573527][ T382] RIP: 0033:0x7ff66d7ed0d9
[ 30.578083][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.597860][ T382] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.606446][ T382] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 30.614676][ T382] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.622776][ T382] RBP: 000000000000767c R08: 0000000000000001 R09: 0000000000000000
[ 30.630866][ T382] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 30.638899][ T382] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 30.646894][ T382]
[ 30.649966][ T382] ---[ end trace 4aa92d97edfd07bb ]---
[ 30.672338][ T384] ------------[ cut here ]------------
[ 30.678034][ T384] WARNING: CPU: 1 PID: 384 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 30.688153][ T384] Modules linked in:
[ 30.692070][ T384] CPU: 1 PID: 384 Comm: syz.2.27 Tainted: G B W syzkaller #0
[ 30.701882][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.712110][ T384] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 30.718634][ T384] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 30.738452][ T384] RSP: 0018:ffffc90000ac7d10 EFLAGS: 00010293
[ 30.744551][ T384] RAX: ffffffff845e2e67 RBX: ffff8881128fc000 RCX: ffff8881119213c0
[ 30.752708][ T384] RDX: 0000000000000000 RSI: 000000000ab94f00 RDI: 000000000c04eb7d
[ 30.760769][ T384] RBP: ffffc90000ac7d30 R08: ffff8881128fc083 R09: 1ffff1102251f810
[ 30.768865][ T384] R10: dffffc0000000000 R11: ffffed102251f811 R12: dffffc0000000000
[ 30.776864][ T384] R13: dffffc0000000000 R14: 000000000ab94f00 R15: ffff888110263c00
[ 30.784981][ T384] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 30.793981][ T384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.800648][ T384] CR2: 00001694692fa000 CR3: 00000001125f8000 CR4: 00000000003506a0
[ 30.808725][ T384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 30.816754][ T384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 30.824822][ T384] Call Trace:
[ 30.828144][ T384]
[ 30.831106][ T384] pppol2tp_release+0x150/0x2b0
[ 30.835976][ T384] sock_close+0xb8/0x200
[ 30.840266][ T384] ? sock_mmap+0xa0/0xa0
[ 30.844547][ T384] __fput+0x22b/0x900
[ 30.848589][ T384] ____fput+0x15/0x20
[ 30.852592][ T384] task_work_run+0x127/0x190
[ 30.857178][ T384] exit_to_user_mode_loop+0xd0/0xe0
[ 30.862572][ T384] exit_to_user_mode_prepare+0x87/0xd0
[ 30.868229][ T384] syscall_exit_to_user_mode+0x1a/0x30
[ 30.873741][ T384] do_syscall_64+0x58/0xa0
[ 30.878234][ T384] ? clear_bhb_loop+0x50/0xa0
[ 30.882956][ T384] ? clear_bhb_loop+0x50/0xa0
[ 30.887634][ T384] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 30.893600][ T384] RIP: 0033:0x7ff66d7ed0d9
[ 30.898048][ T384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.917700][ T384] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.926144][ T384] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 30.934278][ T384] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.942342][ T384] RBP: 00000000000077be R08: 0000000000000001 R09: 0000000000000000
[ 30.950387][ T384] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 30.958446][ T384] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 30.966425][ T384]
[ 30.969505][ T384] ---[ end trace 4aa92d97edfd07bc ]---
[ 30.984613][ T386] ------------[ cut here ]------------
[ 30.990182][ T386] WARNING: CPU: 1 PID: 386 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.000268][ T386] Modules linked in:
[ 31.004205][ T386] CPU: 0 PID: 386 Comm: syz.2.29 Tainted: G B W syzkaller #0
[ 31.012918][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.023116][ T386] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.029495][ T386] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 31.049164][ T386] RSP: 0018:ffffc90000b77d10 EFLAGS: 00010293
[ 31.055250][ T386] RAX: ffffffff845e2e67 RBX: ffff888113474000 RCX: ffff8881119262c0
[ 31.063272][ T386] RDX: 0000000000000000 RSI: 000000000ab94d00 RDI: 000000000c04eb7d
[ 31.071348][ T386] RBP: ffffc90000b77d30 R08: ffff888113474083 R09: 1ffff1102268e810
[ 31.079376][ T386] R10: dffffc0000000000 R11: ffffed102268e811 R12: dffffc0000000000
[ 31.087370][ T386] R13: dffffc0000000000 R14: 000000000ab94d00 R15: ffff8881100d5c00
[ 31.095387][ T386] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 31.104369][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.111058][ T386] CR2: 0000200000000740 CR3: 000000012b902000 CR4: 00000000003506a0
[ 31.119084][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.127085][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.135125][ T386] Call Trace:
[ 31.138463][ T386]
[ 31.141408][ T386] pppol2tp_release+0x150/0x2b0
[ 31.146263][ T386] sock_close+0xb8/0x200
[ 31.150540][ T386] ? sock_mmap+0xa0/0xa0
[ 31.154842][ T386] __fput+0x22b/0x900
[ 31.158881][ T386] ____fput+0x15/0x20
[ 31.162891][ T386] task_work_run+0x127/0x190
[ 31.167486][ T386] exit_to_user_mode_loop+0xd0/0xe0
[ 31.172732][ T386] exit_to_user_mode_prepare+0x87/0xd0
[ 31.178271][ T386] syscall_exit_to_user_mode+0x1a/0x30
[ 31.183752][ T386] do_syscall_64+0x58/0xa0
[ 31.188213][ T386] ? clear_bhb_loop+0x50/0xa0
[ 31.192941][ T386] ? clear_bhb_loop+0x50/0xa0
[ 31.197620][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.203560][ T386] RIP: 0033:0x7ff66d7ed0d9
[ 31.208010][ T386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.227678][ T386] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.236124][ T386] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 31.244149][ T386] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.252156][ T386] RBP: 00000000000078f6 R08: 0000000000000001 R09: 0000000000000000
[ 31.260175][ T386] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 31.268219][ T386] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 31.276199][ T386]
[ 31.279268][ T386] ---[ end trace 4aa92d97edfd07bd ]---
[ 31.294373][ T388] ------------[ cut here ]------------
[ 31.299933][ T388] WARNING: CPU: 1 PID: 388 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.310046][ T388] Modules linked in:
[ 31.313979][ T388] CPU: 1 PID: 388 Comm: syz.2.31 Tainted: G B W syzkaller #0
[ 31.322660][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.333011][ T388] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.339506][ T388] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 31.359253][ T388] RSP: 0018:ffffc90000b87d10 EFLAGS: 00010293
[ 31.365342][ T388] RAX: ffffffff845e2e67 RBX: ffff888113475000 RCX: ffff888113903b40
[ 31.373356][ T388] RDX: 0000000000000000 RSI: 000000000ab94800 RDI: 000000000c04eb7d
[ 31.381433][ T388] RBP: ffffc90000b87d30 R08: ffff888113475083 R09: 1ffff1102268ea10
[ 31.389456][ T388] R10: dffffc0000000000 R11: ffffed102268ea11 R12: dffffc0000000000
[ 31.397446][ T388] R13: dffffc0000000000 R14: 000000000ab94800 R15: ffff8881100d5400
[ 31.405471][ T388] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 31.414433][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.421080][ T388] CR2: 0000200000000740 CR3: 000000012b929000 CR4: 00000000003506a0
[ 31.429098][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.437068][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.445099][ T388] Call Trace:
[ 31.448415][ T388]
[ 31.451354][ T388] pppol2tp_release+0x150/0x2b0
[ 31.456226][ T388] sock_close+0xb8/0x200
[ 31.460509][ T388] ? sock_mmap+0xa0/0xa0
[ 31.464772][ T388] __fput+0x22b/0x900
[ 31.468802][ T388] ____fput+0x15/0x20
[ 31.472803][ T388] task_work_run+0x127/0x190
[ 31.477414][ T388] exit_to_user_mode_loop+0xd0/0xe0
[ 31.482669][ T388] exit_to_user_mode_prepare+0x87/0xd0
[ 31.488200][ T388] syscall_exit_to_user_mode+0x1a/0x30
[ 31.493661][ T388] do_syscall_64+0x58/0xa0
[ 31.498312][ T388] ? clear_bhb_loop+0x50/0xa0
[ 31.503069][ T388] ? clear_bhb_loop+0x50/0xa0
[ 31.507905][ T388] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.513911][ T388] RIP: 0033:0x7ff66d7ed0d9
[ 31.518385][ T388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.538099][ T388] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.546518][ T388] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 31.554548][ T388] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.562578][ T388] RBP: 0000000000007a2c R08: 0000000000000001 R09: 0000000000000000
[ 31.570606][ T388] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 31.578640][ T388] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 31.586634][ T388]
[ 31.589711][ T388] ---[ end trace 4aa92d97edfd07be ]---
[ 31.644899][ T392] ------------[ cut here ]------------
[ 31.650469][ T392] WARNING: CPU: 1 PID: 392 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.660940][ T392] Modules linked in:
[ 31.664869][ T392] CPU: 0 PID: 392 Comm: syz.2.35 Tainted: G B W syzkaller #0
[ 31.673770][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.683918][ T392] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.690319][ T392] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 31.710006][ T392] RSP: 0018:ffffc90000b97d10 EFLAGS: 00010293
[ 31.716078][ T392] RAX: ffffffff845e2e67 RBX: ffff8881138e3000 RCX: ffff888113904f00
[ 31.724103][ T392] RDX: 0000000000000000 RSI: 000000000fc62100 RDI: 000000000c04eb7d
[ 31.732124][ T392] RBP: ffffc90000b97d30 R08: ffff8881138e3083 R09: 1ffff1102271c610
[ 31.740134][ T392] R10: dffffc0000000000 R11: ffffed102271c611 R12: dffffc0000000000
[ 31.748167][ T392] R13: dffffc0000000000 R14: 000000000fc62100 R15: ffff8881115c7400
[ 31.756166][ T392] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 31.765160][ T392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.771778][ T392] CR2: 0000200000000740 CR3: 000000012b956000 CR4: 00000000003506b0
[ 31.779793][ T392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.787804][ T392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.795805][ T392] Call Trace:
[ 31.799131][ T392]
[ 31.802185][ T392] pppol2tp_release+0x150/0x2b0
[ 31.807062][ T392] sock_close+0xb8/0x200
[ 31.811381][ T392] ? sock_mmap+0xa0/0xa0
[ 31.815640][ T392] __fput+0x22b/0x900
[ 31.819665][ T392] ____fput+0x15/0x20
[ 31.823677][ T392] task_work_run+0x127/0x190
[ 31.828307][ T392] exit_to_user_mode_loop+0xd0/0xe0
[ 31.833527][ T392] exit_to_user_mode_prepare+0x87/0xd0
[ 31.839060][ T392] syscall_exit_to_user_mode+0x1a/0x30
[ 31.844541][ T392] do_syscall_64+0x58/0xa0
[ 31.849005][ T392] ? clear_bhb_loop+0x50/0xa0
[ 31.853721][ T392] ? clear_bhb_loop+0x50/0xa0
[ 31.858442][ T392] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 31.864352][ T392] RIP: 0033:0x7ff66d7ed0d9
[ 31.868807][ T392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.888463][ T392] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.896898][ T392] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 31.904931][ T392] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.912947][ T392] RBP: 0000000000007b8a R08: 0000000000000001 R09: 0000000000000000
[ 31.920980][ T392] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 31.929010][ T392] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 31.936990][ T392]
[ 31.940041][ T392] ---[ end trace 4aa92d97edfd07bf ]---
[ 31.950172][ T393] ------------[ cut here ]------------
[ 31.955674][ T393] WARNING: CPU: 0 PID: 393 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.965771][ T393] Modules linked in:
[ 31.969816][ T393] CPU: 0 PID: 393 Comm: syz.2.36 Tainted: G B W syzkaller #0
[ 31.978424][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.988732][ T393] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.995104][ T393] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 32.014979][ T393] RSP: 0018:ffffc90000b07d10 EFLAGS: 00010293
[ 32.021093][ T393] RAX: ffffffff845e2e67 RBX: ffff888113aab000 RCX: ffff888110e162c0
[ 32.029132][ T393] RDX: 0000000000000000 RSI: 000000000ab6eee0 RDI: 000000000c04eb7d
[ 32.037103][ T393] RBP: ffffc90000b07d30 R08: ffff888113aab083 R09: 1ffff11022755610
[ 32.045122][ T393] R10: dffffc0000000000 R11: ffffed1022755611 R12: dffffc0000000000
[ 32.053158][ T393] R13: dffffc0000000000 R14: 000000000ab6eee0 R15: ffff888120691c00
[ 32.061264][ T393] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 32.070289][ T393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.076991][ T393] CR2: 0000200000000740 CR3: 000000012b944000 CR4: 00000000003506b0
[ 32.085065][ T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.093120][ T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.101149][ T393] Call Trace:
[ 32.104442][ T393]
[ 32.107371][ T393] pppol2tp_release+0x150/0x2b0
[ 32.112273][ T393] sock_close+0xb8/0x200
[ 32.116536][ T393] ? sock_mmap+0xa0/0xa0
[ 32.120819][ T393] __fput+0x22b/0x900
[ 32.124829][ T393] ____fput+0x15/0x20
[ 32.128862][ T393] task_work_run+0x127/0x190
[ 32.133474][ T393] exit_to_user_mode_loop+0xd0/0xe0
[ 32.138827][ T393] exit_to_user_mode_prepare+0x87/0xd0
[ 32.144377][ T393] syscall_exit_to_user_mode+0x1a/0x30
[ 32.149922][ T393] do_syscall_64+0x58/0xa0
[ 32.154354][ T393] ? clear_bhb_loop+0x50/0xa0
[ 32.159113][ T393] ? clear_bhb_loop+0x50/0xa0
[ 32.163811][ T393] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.169773][ T393] RIP: 0033:0x7ff66d7ed0d9
[ 32.174227][ T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.193914][ T393] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.202390][ T393] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 32.210413][ T393] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.218580][ T393] RBP: 0000000000007cbb R08: 0000000000000001 R09: 0000000000000000
[ 32.226589][ T393] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 32.234631][ T393] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 32.242639][ T393]
[ 32.245668][ T393] ---[ end trace 4aa92d97edfd07c0 ]---
[ 32.263987][ T395] ------------[ cut here ]------------
[ 32.269515][ T395] WARNING: CPU: 1 PID: 395 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.279592][ T395] Modules linked in:
[ 32.283498][ T395] CPU: 1 PID: 395 Comm: syz.2.38 Tainted: G B W syzkaller #0
[ 32.292147][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.302438][ T395] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.309339][ T395] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 32.329047][ T395] RSP: 0018:ffffc90000ba7d10 EFLAGS: 00010293
[ 32.335154][ T395] RAX: ffffffff845e2e67 RBX: ffff888113be8000 RCX: ffff888113bf3b40
[ 32.343209][ T395] RDX: 0000000000000000 RSI: 000000000fc62c40 RDI: 000000000c04eb7d
[ 32.351288][ T395] RBP: ffffc90000ba7d30 R08: ffff888113be8083 R09: 1ffff1102277d010
[ 32.359337][ T395] R10: dffffc0000000000 R11: ffffed102277d011 R12: dffffc0000000000
[ 32.367344][ T395] R13: dffffc0000000000 R14: 000000000fc62c40 R15: ffff88810f9a1000
[ 32.375367][ T395] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 32.384342][ T395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.390977][ T395] CR2: 0000200000000740 CR3: 000000012b96e000 CR4: 00000000003506a0
[ 32.399001][ T395] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.406971][ T395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.414980][ T395] Call Trace:
[ 32.418293][ T395]
[ 32.421228][ T395] pppol2tp_release+0x150/0x2b0
[ 32.426083][ T395] sock_close+0xb8/0x200
[ 32.430368][ T395] ? sock_mmap+0xa0/0xa0
[ 32.434629][ T395] __fput+0x22b/0x900
[ 32.438655][ T395] ____fput+0x15/0x20
[ 32.442671][ T395] task_work_run+0x127/0x190
[ 32.447261][ T395] exit_to_user_mode_loop+0xd0/0xe0
[ 32.452509][ T395] exit_to_user_mode_prepare+0x87/0xd0
[ 32.458106][ T395] syscall_exit_to_user_mode+0x1a/0x30
[ 32.463574][ T395] do_syscall_64+0x58/0xa0
[ 32.468213][ T395] ? clear_bhb_loop+0x50/0xa0
[ 32.472974][ T395] ? clear_bhb_loop+0x50/0xa0
[ 32.477719][ T395] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.483640][ T395] RIP: 0033:0x7ff66d7ed0d9
[ 32.488124][ T395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.507809][ T395] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.516257][ T395] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 32.524297][ T395] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.532499][ T395] RBP: 0000000000007df5 R08: 0000000000000001 R09: 0000000000000000
[ 32.541052][ T395] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 32.549337][ T395] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 32.557325][ T395]
[ 32.560393][ T395] ---[ end trace 4aa92d97edfd07c1 ]---
[ 32.619489][ T400] ------------[ cut here ]------------
[ 32.624995][ T400] WARNING: CPU: 0 PID: 400 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.635101][ T400] Modules linked in:
[ 32.639093][ T400] CPU: 0 PID: 400 Comm: syz.2.43 Tainted: G B W syzkaller #0
[ 32.647650][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.658476][ T400] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.664852][ T400] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 32.684567][ T400] RSP: 0018:ffffc90000b07d10 EFLAGS: 00010293
[ 32.690733][ T400] RAX: ffffffff845e2e67 RBX: ffff8881134f0000 RCX: ffff888110e12780
[ 32.698757][ T400] RDX: 0000000000000000 RSI: 00000000019d8cc0 RDI: 000000000c04eb7d
[ 32.706759][ T400] RBP: ffffc90000b07d30 R08: ffff8881134f0083 R09: 1ffff1102269e010
[ 32.714804][ T400] R10: dffffc0000000000 R11: ffffed102269e011 R12: dffffc0000000000
[ 32.723069][ T400] R13: dffffc0000000000 R14: 00000000019d8cc0 R15: ffff888113b7bc00
[ 32.731121][ T400] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 32.740110][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.746723][ T400] CR2: 0000200000000740 CR3: 000000012b9c4000 CR4: 00000000003506b0
[ 32.754758][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.762789][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.770805][ T400] Call Trace:
[ 32.774109][ T400]
[ 32.777056][ T400] pppol2tp_release+0x150/0x2b0
[ 32.781963][ T400] sock_close+0xb8/0x200
[ 32.786227][ T400] ? sock_mmap+0xa0/0xa0
[ 32.790512][ T400] __fput+0x22b/0x900
[ 32.794516][ T400] ____fput+0x15/0x20
[ 32.798563][ T400] task_work_run+0x127/0x190
[ 32.803190][ T400] exit_to_user_mode_loop+0xd0/0xe0
[ 32.808445][ T400] exit_to_user_mode_prepare+0x87/0xd0
[ 32.813927][ T400] syscall_exit_to_user_mode+0x1a/0x30
[ 32.819456][ T400] do_syscall_64+0x58/0xa0
[ 32.823898][ T400] ? clear_bhb_loop+0x50/0xa0
[ 32.828618][ T400] ? clear_bhb_loop+0x50/0xa0
[ 32.833330][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.839281][ T400] RIP: 0033:0x7ff66d7ed0d9
[ 32.843712][ T400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.863364][ T400] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.871815][ T400] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 32.879834][ T400] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.887837][ T400] RBP: 0000000000007f59 R08: 0000000000000001 R09: 0000000000000000
[ 32.895807][ T400] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 32.903841][ T400] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 32.911856][ T400]
[ 32.914880][ T400] ---[ end trace 4aa92d97edfd07c2 ]---
2026/08/19 17:22:36 executed programs: 32
[ 33.018721][ T30] kauditd_printk_skb: 40 callbacks suppressed
[ 33.018735][ T30] audit: type=1400 audit(1787160156.815:114): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[523]" dev="pipefs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 33.104839][ T410] ------------[ cut here ]------------
[ 33.110447][ T410] WARNING: CPU: 0 PID: 410 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.120546][ T410] Modules linked in:
[ 33.124483][ T410] CPU: 1 PID: 410 Comm: syz.2.53 Tainted: G B W syzkaller #0
[ 33.133116][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.143306][ T410] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.150177][ T410] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 33.169956][ T410] RSP: 0018:ffffc90000ab7d10 EFLAGS: 00010293
[ 33.176048][ T410] RAX: ffffffff845e2e67 RBX: ffff8881135af000 RCX: ffff888115650000
[ 33.184141][ T410] RDX: 0000000000000000 RSI: 00000000019d82c0 RDI: 000000000c04eb7d
[ 33.192187][ T410] RBP: ffffc90000ab7d30 R08: ffff8881135af083 R09: 1ffff110226b5e10
[ 33.200225][ T410] R10: dffffc0000000000 R11: ffffed10226b5e11 R12: dffffc0000000000
[ 33.208235][ T410] R13: dffffc0000000000 R14: 00000000019d82c0 R15: ffff8881115c8800
[ 33.216226][ T410] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 33.225202][ T410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.231816][ T410] CR2: 0000200000000740 CR3: 000000010dec0000 CR4: 00000000003506a0
[ 33.239854][ T410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.247910][ T410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.255908][ T410] Call Trace:
[ 33.259247][ T410]
[ 33.262200][ T410] pppol2tp_release+0x150/0x2b0
[ 33.267083][ T410] sock_close+0xb8/0x200
[ 33.271374][ T410] ? sock_mmap+0xa0/0xa0
[ 33.275640][ T410] __fput+0x22b/0x900
[ 33.279743][ T410] ____fput+0x15/0x20
[ 33.283769][ T410] task_work_run+0x127/0x190
[ 33.288411][ T410] exit_to_user_mode_loop+0xd0/0xe0
[ 33.293634][ T410] exit_to_user_mode_prepare+0x87/0xd0
[ 33.299177][ T410] syscall_exit_to_user_mode+0x1a/0x30
[ 33.304659][ T410] do_syscall_64+0x58/0xa0
[ 33.309140][ T410] ? clear_bhb_loop+0x50/0xa0
[ 33.313847][ T410] ? clear_bhb_loop+0x50/0xa0
[ 33.318591][ T410] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 33.324508][ T410] RIP: 0033:0x7ff66d7ed0d9
[ 33.328968][ T410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.348689][ T410] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.357103][ T410] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 33.365161][ T410] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.373173][ T410] RBP: 000000000000813e R08: 0000000000000001 R09: 0000000000000000
[ 33.381193][ T410] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 33.389200][ T410] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 33.397178][ T410]
[ 33.400229][ T410] ---[ end trace 4aa92d97edfd07c3 ]---
[ 33.415246][ T412] ------------[ cut here ]------------
[ 33.423197][ T412] WARNING: CPU: 1 PID: 412 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.433419][ T412] Modules linked in:
[ 33.437332][ T412] CPU: 1 PID: 412 Comm: syz.2.55 Tainted: G B W syzkaller #0
[ 33.445877][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.456177][ T412] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.462608][ T412] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 33.482257][ T412] RSP: 0018:ffffc90000b07d10 EFLAGS: 00010293
[ 33.488374][ T412] RAX: ffffffff845e2e67 RBX: ffff888115683000 RCX: ffff8881156a3b40
[ 33.496370][ T412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 33.504586][ T412] RBP: ffffc90000b07d30 R08: ffff888115683083 R09: 1ffff11022ad0610
[ 33.512619][ T412] R10: dffffc0000000000 R11: ffffed1022ad0611 R12: dffffc0000000000
[ 33.520627][ T412] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888113b7e800
[ 33.528647][ T412] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 33.537597][ T412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.544248][ T412] CR2: 0000200000000740 CR3: 0000000113728000 CR4: 00000000003506a0
[ 33.552278][ T412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.560338][ T412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.568840][ T412] Call Trace:
[ 33.572144][ T412]
[ 33.575073][ T412] pppol2tp_release+0x150/0x2b0
[ 33.580476][ T412] sock_close+0xb8/0x200
[ 33.584765][ T412] ? sock_mmap+0xa0/0xa0
[ 33.589224][ T412] __fput+0x22b/0x900
[ 33.593258][ T412] ____fput+0x15/0x20
[ 33.597246][ T412] task_work_run+0x127/0x190
[ 33.601957][ T412] exit_to_user_mode_loop+0xd0/0xe0
[ 33.607195][ T412] exit_to_user_mode_prepare+0x87/0xd0
[ 33.612735][ T412] syscall_exit_to_user_mode+0x1a/0x30
[ 33.618301][ T412] do_syscall_64+0x58/0xa0
[ 33.622726][ T412] ? clear_bhb_loop+0x50/0xa0
[ 33.627407][ T412] ? clear_bhb_loop+0x50/0xa0
[ 33.632151][ T412] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 33.638298][ T412] RIP: 0033:0x7ff66d7ed0d9
[ 33.642745][ T412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.662589][ T412] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.671051][ T412] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 33.679073][ T412] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.687070][ T412] RBP: 0000000000008274 R08: 0000000000000001 R09: 0000000000000000
[ 33.695184][ T412] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 33.703199][ T412] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 33.711221][ T412]
[ 33.714257][ T412] ---[ end trace 4aa92d97edfd07c4 ]---
[ 33.781526][ T417] ------------[ cut here ]------------
[ 33.787028][ T417] WARNING: CPU: 0 PID: 417 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.797276][ T417] Modules linked in:
[ 33.801283][ T417] CPU: 0 PID: 417 Comm: syz.2.60 Tainted: G B W syzkaller #0
[ 33.810249][ T417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.820383][ T417] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.826742][ T417] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 33.846524][ T417] RSP: 0018:ffffc90000d3fd10 EFLAGS: 00010293
[ 33.852679][ T417] RAX: ffffffff845e2e67 RBX: ffff888114d76000 RCX: ffff8881156a13c0
[ 33.860780][ T417] RDX: 0000000000000000 RSI: 000000000cb90d00 RDI: 000000000c04eb7d
[ 33.868884][ T417] RBP: ffffc90000d3fd30 R08: ffff888114d76083 R09: 1ffff110229aec10
[ 33.876934][ T417] R10: dffffc0000000000 R11: ffffed10229aec11 R12: dffffc0000000000
[ 33.884956][ T417] R13: dffffc0000000000 R14: 000000000cb90d00 R15: ffff888110292800
[ 33.892968][ T417] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 33.902083][ T417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.908844][ T417] CR2: 0000200000000740 CR3: 000000012bd68000 CR4: 00000000003506a0
[ 33.916847][ T417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.924993][ T417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.932998][ T417] Call Trace:
[ 33.936279][ T417]
[ 33.939265][ T417] pppol2tp_release+0x150/0x2b0
[ 33.944143][ T417] sock_close+0xb8/0x200
[ 33.948435][ T417] ? sock_mmap+0xa0/0xa0
[ 33.952698][ T417] __fput+0x22b/0x900
[ 33.956680][ T417] ____fput+0x15/0x20
[ 33.960798][ T417] task_work_run+0x127/0x190
[ 33.965403][ T417] exit_to_user_mode_loop+0xd0/0xe0
[ 33.970780][ T417] exit_to_user_mode_prepare+0x87/0xd0
[ 33.976260][ T417] syscall_exit_to_user_mode+0x1a/0x30
[ 33.982107][ T417] do_syscall_64+0x58/0xa0
[ 33.986551][ T417] ? clear_bhb_loop+0x50/0xa0
[ 33.991278][ T417] ? clear_bhb_loop+0x50/0xa0
[ 33.996035][ T417] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.002005][ T417] RIP: 0033:0x7ff66d7ed0d9
[ 34.006468][ T417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.026129][ T417] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.034605][ T417] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 34.042640][ T417] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.050661][ T417] RBP: 00000000000083e1 R08: 0000000000000001 R09: 0000000000000000
[ 34.058844][ T417] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 34.066840][ T417] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 34.074884][ T417]
[ 34.077953][ T417] ---[ end trace 4aa92d97edfd07c5 ]---
[ 34.184759][ T424] ------------[ cut here ]------------
[ 34.190339][ T424] WARNING: CPU: 0 PID: 424 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.200427][ T424] Modules linked in:
[ 34.204351][ T424] CPU: 1 PID: 424 Comm: syz.2.67 Tainted: G B W syzkaller #0
[ 34.212946][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.223520][ T424] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.229966][ T424] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 34.249656][ T424] RSP: 0018:ffffc90000dcfd10 EFLAGS: 00010293
[ 34.255747][ T424] RAX: ffffffff845e2e67 RBX: ffff888115b4f000 RCX: ffff888115652780
[ 34.263766][ T424] RDX: 0000000000000000 RSI: 000000000cb90220 RDI: 000000000c04eb7d
[ 34.271825][ T424] RBP: ffffc90000dcfd30 R08: ffff888115b4f083 R09: 1ffff11022b69e10
[ 34.279941][ T424] R10: dffffc0000000000 R11: ffffed1022b69e11 R12: dffffc0000000000
[ 34.287983][ T424] R13: dffffc0000000000 R14: 000000000cb90220 R15: ffff88811008a800
[ 34.295986][ T424] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 34.305038][ T424] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.311662][ T424] CR2: 0000200000000740 CR3: 000000012bd14000 CR4: 00000000003506a0
[ 34.319667][ T424] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.327651][ T424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.335700][ T424] Call Trace:
[ 34.339025][ T424]
[ 34.341971][ T424] pppol2tp_release+0x150/0x2b0
[ 34.346825][ T424] sock_close+0xb8/0x200
[ 34.351102][ T424] ? sock_mmap+0xa0/0xa0
[ 34.355357][ T424] __fput+0x22b/0x900
[ 34.359395][ T424] ____fput+0x15/0x20
[ 34.363415][ T424] task_work_run+0x127/0x190
[ 34.368056][ T424] exit_to_user_mode_loop+0xd0/0xe0
[ 34.373277][ T424] exit_to_user_mode_prepare+0x87/0xd0
[ 34.378781][ T424] syscall_exit_to_user_mode+0x1a/0x30
[ 34.384260][ T424] do_syscall_64+0x58/0xa0
[ 34.388734][ T424] ? clear_bhb_loop+0x50/0xa0
[ 34.393436][ T424] ? clear_bhb_loop+0x50/0xa0
[ 34.398156][ T424] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.404084][ T424] RIP: 0033:0x7ff66d7ed0d9
[ 34.408545][ T424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.428179][ T424] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.436591][ T424] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 34.444610][ T424] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.452616][ T424] RBP: 0000000000008576 R08: 0000000000000001 R09: 0000000000000000
[ 34.460640][ T424] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 34.468678][ T424] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 34.476685][ T424]
[ 34.479747][ T424] ---[ end trace 4aa92d97edfd07c6 ]---
[ 34.535055][ T428] ------------[ cut here ]------------
[ 34.540611][ T428] refcount_t: underflow; use-after-free.
[ 34.546392][ T428] WARNING: CPU: 1 PID: 428 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 34.555747][ T428] Modules linked in:
[ 34.559672][ T428] CPU: 1 PID: 428 Comm: syz.2.71 Tainted: G B W syzkaller #0
[ 34.568214][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.578321][ T428] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 34.584527][ T428] Code: 04 01 48 c7 c7 80 49 63 85 e8 7c 6e 5a 02 0f 0b eb c3 e8 e3 87 19 ff c6 05 d0 fb 95 04 01 48 c7 c7 e0 49 63 85 e8 60 6e 5a 02 <0f> 0b eb a7 e8 c7 87 19 ff c6 05 b1 fb 95 04 01 48 c7 c7 20 49 63
[ 34.604357][ T428] RSP: 0018:ffffc90000c77cc0 EFLAGS: 00010246
[ 34.610591][ T428] RAX: ae4ce22216005400 RBX: 0000000000000003 RCX: ffff8881147193c0
[ 34.618757][ T428] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 34.626785][ T428] RBP: ffffc90000c77cd0 R08: ffff8881f7127493 R09: 1ffff1103ee24e92
[ 34.635002][ T428] R10: dffffc0000000000 R11: ffffed103ee24e93 R12: 0000000000000000
[ 34.643183][ T428] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[ 34.651227][ T428] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 34.660248][ T428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.666841][ T428] CR2: 0000200000000740 CR3: 0000000128bb9000 CR4: 00000000003506b0
[ 34.674867][ T428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.682876][ T428] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.690893][ T428] Call Trace:
[ 34.694188][ T428]
[ 34.697122][ T428] l2tp_session_put+0xc8/0x1a0
[ 34.702275][ T428] l2tp_session_delete+0x3a9/0x4a0
[ 34.707413][ T428] pppol2tp_release+0x169/0x2b0
[ 34.712347][ T428] sock_close+0xb8/0x200
[ 34.716614][ T428] ? sock_mmap+0xa0/0xa0
[ 34.720903][ T428] __fput+0x22b/0x900
[ 34.724909][ T428] ____fput+0x15/0x20
[ 34.728943][ T428] task_work_run+0x127/0x190
[ 34.733554][ T428] exit_to_user_mode_loop+0xd0/0xe0
[ 34.738806][ T428] exit_to_user_mode_prepare+0x87/0xd0
[ 34.744283][ T428] syscall_exit_to_user_mode+0x1a/0x30
[ 34.749791][ T428] do_syscall_64+0x58/0xa0
[ 34.754241][ T428] ? clear_bhb_loop+0x50/0xa0
[ 34.758975][ T428] ? clear_bhb_loop+0x50/0xa0
[ 34.763668][ T428] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 34.769605][ T428] RIP: 0033:0x7ff66d7ed0d9
[ 34.774048][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.793735][ T428] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.802226][ T428] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 34.810397][ T428] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.818461][ T428] RBP: 00000000000086d4 R08: 0000000000000001 R09: 0000000000000000
[ 34.826473][ T428] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 34.834479][ T428] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 34.842513][ T428]
[ 34.845558][ T428] ---[ end trace 4aa92d97edfd07c7 ]---
[ 34.906736][ T432] ------------[ cut here ]------------
[ 34.912293][ T432] WARNING: CPU: 0 PID: 432 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.922382][ T432] Modules linked in:
[ 34.926299][ T432] CPU: 0 PID: 432 Comm: syz.2.75 Tainted: G B W syzkaller #0
[ 34.934870][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.945113][ T432] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.951567][ T432] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 34.971272][ T432] RSP: 0018:ffffc90000d3fd10 EFLAGS: 00010293
[ 34.977341][ T432] RAX: ffffffff845e2e67 RBX: ffff888115b1a000 RCX: ffff8881161b93c0
[ 34.985364][ T432] RDX: 0000000000000000 RSI: 000000000519b8c0 RDI: 000000000c04eb7d
[ 34.993368][ T432] RBP: ffffc90000d3fd30 R08: ffff888115b1a083 R09: 1ffff11022b63410
[ 35.001394][ T432] R10: dffffc0000000000 R11: ffffed1022b63411 R12: dffffc0000000000
[ 35.009406][ T432] R13: dffffc0000000000 R14: 000000000519b8c0 R15: ffff888114d53400
[ 35.017384][ T432] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 35.026436][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.033061][ T432] CR2: 00007ff66da76dac CR3: 000000012bd78000 CR4: 00000000003506a0
[ 35.041100][ T432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.049128][ T432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.057099][ T432] Call Trace:
[ 35.060434][ T432]
[ 35.063383][ T432] pppol2tp_release+0x150/0x2b0
[ 35.068285][ T432] sock_close+0xb8/0x200
[ 35.072555][ T432] ? sock_mmap+0xa0/0xa0
[ 35.076800][ T432] __fput+0x22b/0x900
[ 35.080829][ T432] ____fput+0x15/0x20
[ 35.084830][ T432] task_work_run+0x127/0x190
[ 35.089471][ T432] exit_to_user_mode_loop+0xd0/0xe0
[ 35.094690][ T432] exit_to_user_mode_prepare+0x87/0xd0
[ 35.100195][ T432] syscall_exit_to_user_mode+0x1a/0x30
[ 35.105671][ T432] do_syscall_64+0x58/0xa0
[ 35.110128][ T432] ? clear_bhb_loop+0x50/0xa0
[ 35.114827][ T432] ? clear_bhb_loop+0x50/0xa0
[ 35.119550][ T432] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.125480][ T432] RIP: 0033:0x7ff66d7ed0d9
[ 35.129964][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.149608][ T432] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.158109][ T432] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 35.166098][ T432] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.174130][ T432] RBP: 0000000000008846 R08: 0000000000000001 R09: 0000000000000000
[ 35.182154][ T432] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 35.190252][ T432] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 35.198275][ T432]
[ 35.201295][ T432] ---[ end trace 4aa92d97edfd07c8 ]---
[ 35.212201][ T433] ------------[ cut here ]------------
[ 35.217751][ T433] WARNING: CPU: 1 PID: 433 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.227805][ T433] Modules linked in:
[ 35.231714][ T433] CPU: 1 PID: 433 Comm: syz.2.76 Tainted: G B W syzkaller #0
[ 35.240391][ T433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.250496][ T433] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.256854][ T433] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 35.276719][ T433] RSP: 0018:ffffc90000e3fd10 EFLAGS: 00010293
[ 35.282868][ T433] RAX: ffffffff845e2e67 RBX: ffff888116556000 RCX: ffff888116548000
[ 35.290899][ T433] RDX: 0000000000000000 RSI: 0000000007df3640 RDI: 000000000c04eb7d
[ 35.299168][ T433] RBP: ffffc90000e3fd30 R08: ffff888116556083 R09: 1ffff11022caac10
[ 35.307164][ T433] R10: dffffc0000000000 R11: ffffed1022caac11 R12: dffffc0000000000
[ 35.315175][ T433] R13: dffffc0000000000 R14: 0000000007df3640 R15: ffff88811007d800
[ 35.323196][ T433] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 35.332187][ T433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.338811][ T433] CR2: 0000200000000740 CR3: 000000012bd65000 CR4: 00000000003506a0
[ 35.346830][ T433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.354876][ T433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.362889][ T433] Call Trace:
[ 35.366168][ T433]
[ 35.369135][ T433] pppol2tp_release+0x150/0x2b0
[ 35.374019][ T433] sock_close+0xb8/0x200
[ 35.378304][ T433] ? sock_mmap+0xa0/0xa0
[ 35.382565][ T433] __fput+0x22b/0x900
[ 35.386556][ T433] ____fput+0x15/0x20
[ 35.390611][ T433] task_work_run+0x127/0x190
[ 35.395226][ T433] exit_to_user_mode_loop+0xd0/0xe0
[ 35.400493][ T433] exit_to_user_mode_prepare+0x87/0xd0
[ 35.406005][ T433] syscall_exit_to_user_mode+0x1a/0x30
[ 35.411518][ T433] do_syscall_64+0x58/0xa0
[ 35.415972][ T433] ? clear_bhb_loop+0x50/0xa0
[ 35.420698][ T433] ? clear_bhb_loop+0x50/0xa0
[ 35.425397][ T433] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.431356][ T433] RIP: 0033:0x7ff66d7ed0d9
[ 35.435807][ T433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.455482][ T433] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.463933][ T433] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 35.471979][ T433] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.479989][ T433] RBP: 0000000000008979 R08: 0000000000000001 R09: 0000000000000000
[ 35.488003][ T433] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 35.496005][ T433] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 35.504036][ T433]
[ 35.507065][ T433] ---[ end trace 4aa92d97edfd07c9 ]---
[ 35.569835][ T438] ------------[ cut here ]------------
[ 35.575347][ T438] WARNING: CPU: 0 PID: 438 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.585450][ T438] Modules linked in:
[ 35.589543][ T438] CPU: 0 PID: 438 Comm: syz.2.81 Tainted: G B W syzkaller #0
[ 35.598596][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.608884][ T438] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.615265][ T438] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 35.634949][ T438] RSP: 0018:ffffc90000effd10 EFLAGS: 00010293
[ 35.641059][ T438] RAX: ffffffff845e2e67 RBX: ffff888115b18000 RCX: ffff8881161be2c0
[ 35.649084][ T438] RDX: 0000000000000000 RSI: 000000000519bc60 RDI: 000000000c04eb7d
[ 35.657095][ T438] RBP: ffffc90000effd30 R08: ffff888115b18083 R09: 1ffff11022b63010
[ 35.665155][ T438] R10: dffffc0000000000 R11: ffffed1022b63011 R12: dffffc0000000000
[ 35.673259][ T438] R13: dffffc0000000000 R14: 000000000519bc60 R15: ffff8881213c3400
[ 35.681293][ T438] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 35.690267][ T438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.696856][ T438] CR2: 0000200000000740 CR3: 000000012bd0b000 CR4: 00000000003506b0
[ 35.704912][ T438] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.712929][ T438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.720965][ T438] Call Trace:
[ 35.724265][ T438]
[ 35.727219][ T438] pppol2tp_release+0x150/0x2b0
[ 35.732157][ T438] sock_close+0xb8/0x200
[ 35.736425][ T438] ? sock_mmap+0xa0/0xa0
[ 35.740740][ T438] __fput+0x22b/0x900
[ 35.744744][ T438] ____fput+0x15/0x20
[ 35.748774][ T438] task_work_run+0x127/0x190
[ 35.753387][ T438] exit_to_user_mode_loop+0xd0/0xe0
[ 35.758630][ T438] exit_to_user_mode_prepare+0x87/0xd0
[ 35.764110][ T438] syscall_exit_to_user_mode+0x1a/0x30
[ 35.769620][ T438] do_syscall_64+0x58/0xa0
[ 35.774064][ T438] ? clear_bhb_loop+0x50/0xa0
[ 35.779173][ T438] ? clear_bhb_loop+0x50/0xa0
[ 35.783879][ T438] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 35.789840][ T438] RIP: 0033:0x7ff66d7ed0d9
[ 35.794282][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.813973][ T438] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.822454][ T438] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 35.830509][ T438] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.838519][ T438] RBP: 0000000000008adf R08: 0000000000000001 R09: 0000000000000000
[ 35.846489][ T438] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 35.854638][ T438] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 35.862760][ T438]
[ 35.865805][ T438] ---[ end trace 4aa92d97edfd07ca ]---
[ 35.931014][ T443] ------------[ cut here ]------------
[ 35.936555][ T443] WARNING: CPU: 1 PID: 443 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.946779][ T443] Modules linked in:
[ 35.950741][ T443] CPU: 1 PID: 443 Comm: syz.2.86 Tainted: G B W syzkaller #0
[ 35.959427][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.969703][ T443] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.976113][ T443] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 35.995798][ T443] RSP: 0018:ffffc90000e3fd10 EFLAGS: 00010293
[ 36.002364][ T443] RAX: ffffffff845e2e67 RBX: ffff888117064000 RCX: ffff8881173ebb40
[ 36.010407][ T443] RDX: 0000000000000000 RSI: 00000000083f1f20 RDI: 000000000c04eb7d
[ 36.018434][ T443] RBP: ffffc90000e3fd30 R08: ffff888117064083 R09: 1ffff11022e0c810
[ 36.026406][ T443] R10: dffffc0000000000 R11: ffffed1022e0c811 R12: dffffc0000000000
[ 36.034425][ T443] R13: dffffc0000000000 R14: 00000000083f1f20 R15: ffff888114d57000
[ 36.042437][ T443] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 36.051427][ T443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.058044][ T443] CR2: 0000200000000740 CR3: 000000011693a000 CR4: 00000000003506a0
[ 36.066020][ T443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.074040][ T443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.082153][ T443] Call Trace:
[ 36.085435][ T443]
[ 36.088412][ T443] pppol2tp_release+0x150/0x2b0
[ 36.093292][ T443] sock_close+0xb8/0x200
[ 36.097551][ T443] ? sock_mmap+0xa0/0xa0
[ 36.101837][ T443] __fput+0x22b/0x900
[ 36.105847][ T443] ____fput+0x15/0x20
[ 36.109906][ T443] task_work_run+0x127/0x190
[ 36.114529][ T443] exit_to_user_mode_loop+0xd0/0xe0
[ 36.119785][ T443] exit_to_user_mode_prepare+0x87/0xd0
[ 36.125261][ T443] syscall_exit_to_user_mode+0x1a/0x30
[ 36.130781][ T443] do_syscall_64+0x58/0xa0
[ 36.135212][ T443] ? clear_bhb_loop+0x50/0xa0
[ 36.139954][ T443] ? clear_bhb_loop+0x50/0xa0
[ 36.144658][ T443] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.150663][ T443] RIP: 0033:0x7ff66d7ed0d9
[ 36.155105][ T443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.174782][ T443] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.183259][ T443] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 36.191324][ T443] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.199347][ T443] RBP: 0000000000008c48 R08: 0000000000000001 R09: 0000000000000000
[ 36.207323][ T443] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 36.215343][ T443] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 36.223360][ T443]
[ 36.226384][ T443] ---[ end trace 4aa92d97edfd07cb ]---
[ 36.334877][ T450] ------------[ cut here ]------------
[ 36.340424][ T450] WARNING: CPU: 1 PID: 450 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.350474][ T450] Modules linked in:
[ 36.354386][ T450] CPU: 1 PID: 450 Comm: syz.2.93 Tainted: G B W syzkaller #0
[ 36.362932][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.373062][ T450] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.379465][ T450] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 36.399127][ T450] RSP: 0018:ffffc90000ff7d10 EFLAGS: 00010293
[ 36.405223][ T450] RAX: ffffffff845e2e67 RBX: ffff8881177e0000 RCX: ffff8881173ecf00
[ 36.413240][ T450] RDX: 0000000000000000 RSI: 00000000083f1e60 RDI: 000000000c04eb7d
[ 36.421252][ T450] RBP: ffffc90000ff7d30 R08: ffff8881177e0083 R09: 1ffff11022efc010
[ 36.429268][ T450] R10: dffffc0000000000 R11: ffffed1022efc011 R12: dffffc0000000000
[ 36.437259][ T450] R13: dffffc0000000000 R14: 00000000083f1e60 R15: ffff888114d56400
[ 36.445280][ T450] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 36.454250][ T450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.460876][ T450] CR2: 0000200000000740 CR3: 000000012b9f6000 CR4: 00000000003506a0
[ 36.468924][ T450] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.476911][ T450] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.484935][ T450] Call Trace:
[ 36.488245][ T450]
[ 36.491199][ T450] pppol2tp_release+0x150/0x2b0
[ 36.496067][ T450] sock_close+0xb8/0x200
[ 36.500349][ T450] ? sock_mmap+0xa0/0xa0
[ 36.504635][ T450] __fput+0x22b/0x900
[ 36.508670][ T450] ____fput+0x15/0x20
[ 36.512674][ T450] task_work_run+0x127/0x190
[ 36.517267][ T450] exit_to_user_mode_loop+0xd0/0xe0
[ 36.522510][ T450] exit_to_user_mode_prepare+0x87/0xd0
[ 36.528032][ T450] syscall_exit_to_user_mode+0x1a/0x30
[ 36.533495][ T450] do_syscall_64+0x58/0xa0
[ 36.537954][ T450] ? clear_bhb_loop+0x50/0xa0
[ 36.542654][ T450] ? clear_bhb_loop+0x50/0xa0
[ 36.547348][ T450] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.553302][ T450] RIP: 0033:0x7ff66d7ed0d9
[ 36.557764][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.577424][ T450] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.585911][ T450] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 36.593934][ T450] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.601965][ T450] RBP: 0000000000008ddc R08: 0000000000000001 R09: 0000000000000000
[ 36.610319][ T450] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 36.618347][ T450] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 36.626348][ T450]
[ 36.629415][ T450] ---[ end trace 4aa92d97edfd07cc ]---
[ 36.648752][ T452] ------------[ cut here ]------------
[ 36.654259][ T452] WARNING: CPU: 1 PID: 452 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.664339][ T452] Modules linked in:
[ 36.668412][ T452] CPU: 0 PID: 452 Comm: syz.2.95 Tainted: G B W syzkaller #0
[ 36.676941][ T452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.687249][ T452] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.693730][ T452] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 36.713501][ T452] RSP: 0018:ffffc90000f97d10 EFLAGS: 00010293
[ 36.719705][ T452] RAX: ffffffff845e2e67 RBX: ffff888117524000 RCX: ffff888116a893c0
[ 36.727771][ T452] RDX: 0000000000000000 RSI: 0000000005df5fa0 RDI: 000000000c04eb7d
[ 36.735810][ T452] RBP: ffffc90000f97d30 R08: ffff888117524083 R09: 1ffff11022ea4810
[ 36.743858][ T452] R10: dffffc0000000000 R11: ffffed1022ea4811 R12: dffffc0000000000
[ 36.751873][ T452] R13: dffffc0000000000 R14: 0000000005df5fa0 R15: ffff888114d69800
[ 36.759918][ T452] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 36.768892][ T452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.775483][ T452] CR2: 0000200000000740 CR3: 0000000117578000 CR4: 00000000003506b0
[ 36.783534][ T452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.791557][ T452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.799576][ T452] Call Trace:
[ 36.802867][ T452]
[ 36.805801][ T452] pppol2tp_release+0x150/0x2b0
[ 36.810713][ T452] sock_close+0xb8/0x200
[ 36.815001][ T452] ? sock_mmap+0xa0/0xa0
[ 36.819308][ T452] __fput+0x22b/0x900
[ 36.823319][ T452] ____fput+0x15/0x20
[ 36.827300][ T452] task_work_run+0x127/0x190
[ 36.831941][ T452] exit_to_user_mode_loop+0xd0/0xe0
[ 36.837164][ T452] exit_to_user_mode_prepare+0x87/0xd0
[ 36.842679][ T452] syscall_exit_to_user_mode+0x1a/0x30
[ 36.848170][ T452] do_syscall_64+0x58/0xa0
[ 36.852589][ T452] ? clear_bhb_loop+0x50/0xa0
[ 36.857279][ T452] ? clear_bhb_loop+0x50/0xa0
[ 36.861999][ T452] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 36.867953][ T452] RIP: 0033:0x7ff66d7ed0d9
[ 36.872386][ T452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.892065][ T452] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.900522][ T452] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 36.908744][ T452] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.916734][ T452] RBP: 0000000000008f16 R08: 0000000000000001 R09: 0000000000000000
[ 36.924750][ T452] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 36.932761][ T452] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 36.940823][ T452]
[ 36.943855][ T452] ---[ end trace 4aa92d97edfd07cd ]---
[ 37.005994][ T456] ------------[ cut here ]------------
[ 37.011787][ T456] WARNING: CPU: 1 PID: 456 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.021866][ T456] Modules linked in:
[ 37.025783][ T456] CPU: 1 PID: 456 Comm: syz.2.99 Tainted: G B W syzkaller #0
[ 37.034336][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.044432][ T456] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.051017][ T456] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 37.070718][ T456] RSP: 0018:ffffc90001057d10 EFLAGS: 00010293
[ 37.076814][ T456] RAX: ffffffff845e2e67 RBX: ffff888117866000 RCX: ffff888117882780
[ 37.084830][ T456] RDX: 0000000000000000 RSI: 000000002bdabd80 RDI: 000000000c04eb7d
[ 37.092842][ T456] RBP: ffffc90001057d30 R08: ffff888117866083 R09: 1ffff11022f0cc10
[ 37.100880][ T456] R10: dffffc0000000000 R11: ffffed1022f0cc11 R12: dffffc0000000000
[ 37.108906][ T456] R13: dffffc0000000000 R14: 000000002bdabd80 R15: ffff88811694e400
[ 37.116896][ T456] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 37.125863][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.132532][ T456] CR2: 0000200000000740 CR3: 000000012bd84000 CR4: 00000000003506a0
[ 37.140565][ T456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.148568][ T456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.156542][ T456] Call Trace:
[ 37.159870][ T456]
[ 37.162818][ T456] pppol2tp_release+0x150/0x2b0
[ 37.167943][ T456] sock_close+0xb8/0x200
[ 37.172221][ T456] ? sock_mmap+0xa0/0xa0
[ 37.176519][ T456] __fput+0x22b/0x900
[ 37.180610][ T456] ____fput+0x15/0x20
[ 37.184611][ T456] task_work_run+0x127/0x190
[ 37.189272][ T456] exit_to_user_mode_loop+0xd0/0xe0
[ 37.194491][ T456] exit_to_user_mode_prepare+0x87/0xd0
[ 37.200001][ T456] syscall_exit_to_user_mode+0x1a/0x30
[ 37.205481][ T456] do_syscall_64+0x58/0xa0
[ 37.209964][ T456] ? clear_bhb_loop+0x50/0xa0
[ 37.214661][ T456] ? clear_bhb_loop+0x50/0xa0
[ 37.219381][ T456] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 37.225294][ T456] RIP: 0033:0x7ff66d7ed0d9
[ 37.229750][ T456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.249422][ T456] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.257891][ T456] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 37.265923][ T456] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.273943][ T456] RBP: 000000000000907b R08: 0000000000000001 R09: 0000000000000000
[ 37.281950][ T456] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 37.289967][ T456] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 37.297991][ T456]
[ 37.301017][ T456] ---[ end trace 4aa92d97edfd07ce ]---
[ 37.365061][ T460] ------------[ cut here ]------------
[ 37.370589][ T460] WARNING: CPU: 1 PID: 460 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.380655][ T460] Modules linked in:
[ 37.384591][ T460] CPU: 0 PID: 460 Comm: syz.2.103 Tainted: G B W syzkaller #0
[ 37.393299][ T460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.403676][ T460] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.410090][ T460] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 37.429885][ T460] RSP: 0018:ffffc900010d7d10 EFLAGS: 00010293
[ 37.435981][ T460] RAX: ffffffff845e2e67 RBX: ffff888117ea5000 RCX: ffff888117394f00
[ 37.444007][ T460] RDX: 0000000000000000 RSI: 000000002bdabfa0 RDI: 000000000c04eb7d
[ 37.452050][ T460] RBP: ffffc900010d7d30 R08: ffff888117ea5083 R09: 1ffff11022fd4a10
[ 37.460090][ T460] R10: dffffc0000000000 R11: ffffed1022fd4a11 R12: dffffc0000000000
[ 37.468108][ T460] R13: dffffc0000000000 R14: 000000002bdabfa0 R15: ffff8881170d8400
[ 37.476101][ T460] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.485078][ T460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.491700][ T460] CR2: 0000200000000740 CR3: 000000012bddd000 CR4: 00000000003506b0
[ 37.499720][ T460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.507742][ T460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.515714][ T460] Call Trace:
[ 37.519052][ T460]
[ 37.522003][ T460] pppol2tp_release+0x150/0x2b0
[ 37.526867][ T460] sock_close+0xb8/0x200
[ 37.531173][ T460] ? sock_mmap+0xa0/0xa0
[ 37.535440][ T460] __fput+0x22b/0x900
[ 37.539503][ T460] ____fput+0x15/0x20
[ 37.543505][ T460] task_work_run+0x127/0x190
[ 37.548137][ T460] exit_to_user_mode_loop+0xd0/0xe0
[ 37.553356][ T460] exit_to_user_mode_prepare+0x87/0xd0
[ 37.558860][ T460] syscall_exit_to_user_mode+0x1a/0x30
[ 37.564349][ T460] do_syscall_64+0x58/0xa0
[ 37.568808][ T460] ? clear_bhb_loop+0x50/0xa0
[ 37.573505][ T460] ? clear_bhb_loop+0x50/0xa0
[ 37.578225][ T460] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 37.584139][ T460] RIP: 0033:0x7ff66d7ed0d9
[ 37.588727][ T460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.608374][ T460] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.616791][ T460] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 37.624820][ T460] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.632825][ T460] RBP: 00000000000091e2 R08: 0000000000000001 R09: 0000000000000000
[ 37.640838][ T460] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 37.648867][ T460] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 37.656856][ T460]
[ 37.659924][ T460] ---[ end trace 4aa92d97edfd07cf ]---
[ 37.669860][ T461] ------------[ cut here ]------------
[ 37.676226][ T461] WARNING: CPU: 0 PID: 461 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.686310][ T461] Modules linked in:
[ 37.690283][ T461] CPU: 0 PID: 461 Comm: syz.2.104 Tainted: G B W syzkaller #0
[ 37.699044][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.709187][ T461] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.715563][ T461] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 37.735369][ T461] RSP: 0018:ffffc900010f7d10 EFLAGS: 00010293
[ 37.741605][ T461] RAX: ffffffff845e2e67 RBX: ffff888117ea0000 RCX: ffff8881173913c0
[ 37.749667][ T461] RDX: 0000000000000000 RSI: 000000002bdabdc0 RDI: 000000000c04eb7d
[ 37.757796][ T461] RBP: ffffc900010f7d30 R08: ffff888117ea0083 R09: 1ffff11022fd4010
[ 37.765807][ T461] R10: dffffc0000000000 R11: ffffed1022fd4011 R12: dffffc0000000000
[ 37.773818][ T461] R13: dffffc0000000000 R14: 000000002bdabdc0 R15: ffff8881170eb800
[ 37.781854][ T461] FS: 0000555577c88500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 37.790852][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.797460][ T461] CR2: 0000200000000740 CR3: 000000012c185000 CR4: 00000000003506b0
[ 37.805592][ T461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.813622][ T461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.821663][ T461] Call Trace:
[ 37.824965][ T461]
[ 37.827938][ T461] pppol2tp_release+0x150/0x2b0
[ 37.832817][ T461] sock_close+0xb8/0x200
[ 37.837059][ T461] ? sock_mmap+0xa0/0xa0
[ 37.841366][ T461] __fput+0x22b/0x900
[ 37.845369][ T461] ____fput+0x15/0x20
[ 37.849392][ T461] task_work_run+0x127/0x190
[ 37.854004][ T461] exit_to_user_mode_loop+0xd0/0xe0
[ 37.859271][ T461] exit_to_user_mode_prepare+0x87/0xd0
[ 37.864754][ T461] syscall_exit_to_user_mode+0x1a/0x30
[ 37.870257][ T461] do_syscall_64+0x58/0xa0
[ 37.874707][ T461] ? clear_bhb_loop+0x50/0xa0
[ 37.879428][ T461] ? clear_bhb_loop+0x50/0xa0
[ 37.884143][ T461] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 37.890089][ T461] RIP: 0033:0x7ff66d7ed0d9
[ 37.894526][ T461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.914186][ T461] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.922645][ T461] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 37.930679][ T461] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.938695][ T461] RBP: 0000000000009313 R08: 0000000000000001 R09: 0000000000000000
[ 37.946666][ T461] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 37.954685][ T461] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 37.962738][ T461]
[ 37.965765][ T461] ---[ end trace 4aa92d97edfd07d0 ]---
[ 37.975320][ T462] ------------[ cut here ]------------
[ 37.980838][ T462] WARNING: CPU: 1 PID: 462 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.991117][ T462] Modules linked in:
[ 37.995038][ T462] CPU: 0 PID: 462 Comm: syz.2.105 Tainted: G B W syzkaller #0
[ 38.003707][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.013877][ T462] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
2026/08/19 17:22:41 executed programs: 90
[ 38.020284][ T462] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 38.040116][ T462] RSP: 0018:ffffc90001117d10 EFLAGS: 00010293
[ 38.046198][ T462] RAX: ffffffff845e2e67 RBX: ffff888117ea7000 RCX: ffff888117393b40
[ 38.054227][ T462] RDX: 0000000000000000 RSI: 000000002bdab3a0 RDI: 000000000c04eb7d
[ 38.062558][ T462] RBP: ffffc90001117d30 R08: ffff888117ea7083 R09: 1ffff11022fd4e10
[ 38.070665][ T462] R10: dffffc0000000000 R11: ffffed1022fd4e11 R12: dffffc0000000000
[ 38.078715][ T462] R13: dffffc0000000000 R14: 000000002bdab3a0 R15: ffff88812219b000
[ 38.086703][ T462] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 38.095673][ T462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.102297][ T462] CR2: 0000200000000740 CR3: 000000012c1a8000 CR4: 00000000003506a0
[ 38.110316][ T462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.118319][ T462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.126320][ T462] Call Trace:
[ 38.129624][ T462]
[ 38.132579][ T462] pppol2tp_release+0x150/0x2b0
[ 38.137434][ T462] sock_close+0xb8/0x200
[ 38.141724][ T462] ? sock_mmap+0xa0/0xa0
[ 38.146006][ T462] __fput+0x22b/0x900
[ 38.150024][ T462] ____fput+0x15/0x20
[ 38.154023][ T462] task_work_run+0x127/0x190
[ 38.158676][ T462] exit_to_user_mode_loop+0xd0/0xe0
[ 38.163907][ T462] exit_to_user_mode_prepare+0x87/0xd0
[ 38.169408][ T462] syscall_exit_to_user_mode+0x1a/0x30
[ 38.174892][ T462] do_syscall_64+0x58/0xa0
[ 38.179372][ T462] ? clear_bhb_loop+0x50/0xa0
[ 38.184085][ T462] ? clear_bhb_loop+0x50/0xa0
[ 38.188831][ T462] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 38.194754][ T462] RIP: 0033:0x7ff66d7ed0d9
[ 38.199216][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.218989][ T462] RSP: 002b:00007ffca3f85f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.227408][ T462] RAX: 0000000000000000 RBX: 00007ffca3f86050 RCX: 00007ff66d7ed0d9
[ 38.235426][ T462] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.243439][ T462] RBP: 0000000000009445 R08: 0000000000000001 R09: 0000000000000000
[ 38.251454][ T462] R10: 0000001b32f20000 R11: 0000000000000246 R12: 0000000000000000
[ 38.259469][ T462] R13: 00007ff66da74fac R14: 00007ff66da74fa8 R15: 00007ff66da74fa0
[ 38.267449][ T462]
[ 38.270525][ T462] ---[ end trace 4aa92d97edfd07d1 ]---
[ 38.281244][ T463] ------------[ cut here ]------------
[ 38.286747][ T463] WARNING: CPU: 1 PID: 463 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.296837][ T463] Modules linked in:
[ 38.300848][ T463] CPU: 1 PID: 463 Comm: syz.2.106 Tainted: G B W syzkaller #0
[ 38.309489][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.319751][ T463] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.326194][ T463] Code: 5d c3 e8 6c 89 0b fd be 02 00 00 00 eb 0a e8 60 89 0b fd be 01 00 00 00 4c 89 f7 e8 63 00 f2 fd e9 0f ff ff ff e8 49 89 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 38 89 0b fd 4c 89 f7 be 03
[ 38.345881][ T463] RSP: 0018:ffffc90000f97d10 EFLAGS: 00010293
[ 38.352081][ T463] RAX: ffffffff845e2e67 RBX: ffff8881180f5000 RCX: ffff888118122780
[ 38.360106][ T463] RDX: 0000000000000000 RSI: 000000002bdab320 RDI: 000000000c04eb7d
[ 38.368133][ T463] RBP: ffffc90000f97d30 R08: ffff8881180f5083 R09: 1ffff1102301ea10
[ 38.376105][ T463] R10: dffffc0000000000 R11: ffffed102301ea11 R12: dffffc0000000000
[ 38.384115][ T463] R13: dffffc0000000000 R14: 000000002bdab320 R15: ffff88812219a400
[ 38.392125][ T463] FS: 0000555577c88500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 38.401123][ T463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.407762][ T463] CR2: 0000200000000740 CR3: 000000012c07f000 CR4: 00000000003506a0
[ 38.415758][ T463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.423798][ T463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400