Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts.
2026/08/06 05:21:55 parsed 1 programs
2026/08/06 05:21:55 serving rpc on tcp://41519
[ 45.940301][ T28] audit: type=1400 audit(1785993715.727:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 45.962245][ T28] audit: type=1400 audit(1785993715.727:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 46.791648][ T28] audit: type=1400 audit(1785993716.577:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 46.792825][ T301] cgroup: Unknown subsys name 'net'
[ 46.815994][ T28] audit: type=1400 audit(1785993716.577:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.845766][ T28] audit: type=1400 audit(1785993716.607:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.846026][ T301] cgroup: Unknown subsys name 'devices'
[ 46.987743][ T301] cgroup: Unknown subsys name 'hugetlb'
[ 46.993808][ T301] cgroup: Unknown subsys name 'rlimit'
[ 47.100936][ T28] audit: type=1400 audit(1785993716.887:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 47.120957][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 47.125666][ T28] audit: type=1400 audit(1785993716.887:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 47.154952][ T28] audit: type=1400 audit(1785993716.887:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 47.169417][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 47.175491][ T28] audit: type=1400 audit(1785993716.887:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 47.206234][ T28] audit: type=1400 audit(1785993716.887:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 48.022247][ T312] request_module fs-gadgetfs succeeded, but still no fs?
[ 48.316262][ T329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.323717][ T329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.338641][ T329] device bridge_slave_0 entered promiscuous mode
[ 48.348172][ T329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.357637][ T329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.366540][ T329] device bridge_slave_1 entered promiscuous mode
[ 48.615398][ T329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.622745][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.630291][ T329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.638171][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.671096][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.680692][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.689460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 48.698464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 48.716630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 48.725804][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.733223][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.741839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 48.751030][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.758334][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.776246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 48.784865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.800490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.818297][ T329] device veth0_vlan entered promiscuous mode
[ 48.836418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.848888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.864276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.877991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
2026/08/06 05:21:58 executed programs: 0
[ 48.892157][ T329] device veth1_macvtap entered promiscuous mode
[ 48.902340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.912885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 49.007293][ T329] syz-executor (329) used greatest stack depth: 21760 bytes left
[ 49.125975][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.133074][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.140834][ T372] device bridge_slave_0 entered promiscuous mode
[ 49.149513][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.156785][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.164194][ T372] device bridge_slave_1 entered promiscuous mode
[ 49.260156][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.267422][ T373] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.275219][ T373] device bridge_slave_0 entered promiscuous mode
[ 49.308006][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.315082][ T373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.322800][ T373] device bridge_slave_1 entered promiscuous mode
[ 49.372174][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.379495][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.387549][ T370] device bridge_slave_0 entered promiscuous mode
[ 49.399100][ T376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.406412][ T376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.414183][ T376] device bridge_slave_0 entered promiscuous mode
[ 49.430936][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.438138][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.445525][ T370] device bridge_slave_1 entered promiscuous mode
[ 49.456233][ T376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.463301][ T376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.470917][ T376] device bridge_slave_1 entered promiscuous mode
[ 49.548928][ T378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.556262][ T378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.563964][ T378] device bridge_slave_0 entered promiscuous mode
[ 49.572129][ T378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.579800][ T378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.587845][ T378] device bridge_slave_1 entered promiscuous mode
[ 49.749893][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.757075][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 49.764461][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.771867][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.786205][ T376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.793370][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 49.800944][ T376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.808747][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.844662][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.852392][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.860555][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.868105][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.876737][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 49.884481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 49.892186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 49.901256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 49.910455][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.917815][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 49.926012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 49.953912][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 49.962488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 49.971228][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.978531][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.008960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 50.016970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.024819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 50.034203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.043404][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.050926][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.066627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 50.074706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.089729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 50.098396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.107853][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.115707][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.123714][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.131920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.139944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.148532][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.156474][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.188800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.196958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.205231][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.212436][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.220974][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.229380][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.236733][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.244552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.252882][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.261274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.269593][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.277372][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.295652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 50.304373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.313315][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 50.321906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.342272][ T372] device veth0_vlan entered promiscuous mode
[ 50.354753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 50.363966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.372052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 50.381372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.389562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 50.398471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 50.407477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 50.415953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 50.424213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 50.432936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 50.441496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 50.449064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 50.476301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 50.485193][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 50.493739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 50.501848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 50.510871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 50.518791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.526725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 50.535157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 50.543836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 50.552293][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.560802][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.568170][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.575876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 50.583741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 50.591957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 50.605447][ T376] device veth0_vlan entered promiscuous mode
[ 50.614270][ T372] device veth1_macvtap entered promiscuous mode
[ 50.624919][ T370] device veth0_vlan entered promiscuous mode
[ 50.632706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 50.641602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 50.650399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 50.659038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.667594][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.674639][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.682096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 50.690473][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 50.698980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 50.707147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 50.715116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 50.724618][ T373] device veth0_vlan entered promiscuous mode
[ 50.744296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 50.752439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 50.761123][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 50.769620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 50.778879][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 50.787770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 50.796675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 50.804459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 50.825148][ T370] device veth1_macvtap entered promiscuous mode
[ 50.839990][ T373] device veth1_macvtap entered promiscuous mode
[ 50.847961][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 50.858662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 50.869656][ T396] ==================================================================
[ 50.870498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 50.878292][ T396] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 50.878325][ T396] Read of size 4 at addr ffff888116062400 by task syz.1.22/396
[ 50.878341][ T396]
[ 50.878346][ T396] CPU: 1 PID: 396 Comm: syz.1.22 Not tainted syzkaller #0
[ 50.878363][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 50.878373][ T396] Call Trace:
[ 50.878379][ T396]
[ 50.878386][ T396] __dump_stack+0x21/0x24
[ 50.878407][ T396] dump_stack_lvl+0x110/0x170
[ 50.886806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 50.894254][ T396] ? __cfi_dump_stack_lvl+0x8/0x8
[ 50.902713][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 50.904471][ T396] ? _raw_spin_lock_bh+0x94/0xf0
[ 50.912547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 50.922447][ T396] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 50.922475][ T396] print_address_description+0x71/0x200
[ 50.922497][ T396] print_report+0x4a/0x60
[ 50.922515][ T396] kasan_report+0x122/0x150
[ 50.922539][ T396] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 50.922561][ T396] __asan_report_load4_noabort+0x14/0x20
[ 51.005964][ T396] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 51.011513][ T396] pppol2tp_release+0x150/0x2b0
[ 51.017581][ T396] sock_close+0xc9/0x220
[ 51.021874][ T396] ? __cfi_sock_close+0x10/0x10
[ 51.026770][ T396] __fput+0x1fd/0x8f0
[ 51.030842][ T396] ____fput+0x15/0x20
[ 51.035003][ T396] task_work_run+0x1e1/0x250
[ 51.039783][ T396] ? __cfi_task_work_run+0x10/0x10
[ 51.045071][ T396] ? __cfi___close_range+0x10/0x10
[ 51.050373][ T396] exit_to_user_mode_loop+0x9b/0xb0
[ 51.055582][ T396] exit_to_user_mode_prepare+0x87/0xd0
[ 51.061047][ T396] syscall_exit_to_user_mode+0x1a/0x30
[ 51.067067][ T396] do_syscall_64+0x58/0xa0
[ 51.071594][ T396] ? clear_bhb_loop+0x30/0x80
[ 51.076383][ T396] ? clear_bhb_loop+0x30/0x80
[ 51.081417][ T396] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 51.087321][ T396] RIP: 0033:0x7f8a2f19e0d9
[ 51.091737][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 51.111967][ T396] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 51.120468][ T396] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 51.128531][ T396] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 51.136773][ T396] RBP: 000000000000c69b R08: 0000000000000001 R09: 0000000000000000
[ 51.145529][ T396] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 51.153859][ T396] R13: 00007f8a2f425fac R14: 000000000000c6cd R15: 00007f8a2f425fa0
[ 51.161955][ T396]
[ 51.165091][ T396]
[ 51.167500][ T396] Allocated by task 397:
[ 51.173724][ T396] kasan_set_track+0x4b/0x70
[ 51.179653][ T396] kasan_save_alloc_info+0x1f/0x30
[ 51.185081][ T396] __kasan_kmalloc+0x95/0xb0
[ 51.189853][ T396] __kmalloc+0xb4/0x1e0
[ 51.194377][ T396] l2tp_session_create+0x38/0xbd0
[ 51.199435][ T396] pppol2tp_connect+0xbf5/0x1640
[ 51.204400][ T396] __sys_connect+0x3da/0x460
[ 51.209302][ T396] __x64_sys_connect+0x7a/0x90
[ 51.214912][ T396] x64_sys_call+0x88d/0x9a0
[ 51.219801][ T396] do_syscall_64+0x4c/0xa0
[ 51.224408][ T396] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 51.230924][ T396]
[ 51.233602][ T396] Freed by task 267:
[ 51.237586][ T396] kasan_set_track+0x4b/0x70
[ 51.242762][ T396] kasan_save_free_info+0x2b/0x40
[ 51.247792][ T396] ____kasan_slab_free+0x132/0x180
[ 51.252912][ T396] __kasan_slab_free+0x11/0x20
[ 51.257679][ T396] slab_free_freelist_hook+0xc2/0x190
[ 51.263142][ T396] __kmem_cache_free+0xb7/0x1b0
[ 51.268343][ T396] kfree+0x6f/0xf0
[ 51.272248][ T396] l2tp_session_put+0xaf/0x1a0
[ 51.277221][ T396] l2tp_session_delete+0x3df/0x4d0
[ 51.282339][ T396] l2tp_tunnel_del_work+0x199/0x410
[ 51.287733][ T396] process_one_work+0x717/0xc30
[ 51.292635][ T396] worker_thread+0xa4d/0x11d0
[ 51.297600][ T396] kthread+0x281/0x320
[ 51.301772][ T396] ret_from_fork+0x1f/0x30
[ 51.306206][ T396]
[ 51.308542][ T396] The buggy address belongs to the object at ffff888116062400
[ 51.308542][ T396] which belongs to the cache kmalloc-512 of size 512
[ 51.322692][ T396] The buggy address is located 0 bytes inside of
[ 51.322692][ T396] 512-byte region [ffff888116062400, ffff888116062600)
[ 51.336061][ T396]
[ 51.338563][ T396] The buggy address belongs to the physical page:
[ 51.345161][ T396] page:ffffea0004581800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116060
[ 51.355578][ T396] head:ffffea0004581800 order:2 compound_mapcount:0 compound_pincount:0
[ 51.364105][ T396] flags: 0x4000000000010200(slab|head|zone=1)
[ 51.370317][ T396] raw: 4000000000010200 ffffea0004609200 dead000000000003 ffff888100042f00
[ 51.379015][ T396] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 51.387873][ T396] page dumped because: kasan: bad access detected
[ 51.394477][ T396] page_owner tracks the page as allocated
[ 51.400368][ T396] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 113, tgid 113 (udevd), ts 6636281834, free_ts 0
[ 51.420806][ T396] post_alloc_hook+0x1f5/0x210
[ 51.425933][ T396] prep_new_page+0x1c/0x110
[ 51.430442][ T396] get_page_from_freelist+0x2ca9/0x2d20
[ 51.436086][ T396] __alloc_pages+0x1fa/0x610
[ 51.440780][ T396] alloc_slab_page+0x6e/0xf0
[ 51.445375][ T396] new_slab+0x98/0x3e0
[ 51.449448][ T396] ___slab_alloc+0x70f/0xb70
[ 51.454041][ T396] __slab_alloc+0x5e/0xa0
[ 51.458471][ T396] __kmem_cache_alloc_node+0x204/0x2d0
[ 51.464107][ T396] __kmalloc_node_track_caller+0xa1/0x1e0
[ 51.470535][ T396] __alloc_skb+0x226/0x4a0
[ 51.474983][ T396] alloc_skb_with_frags+0xa8/0x620
[ 51.480359][ T396] sock_alloc_send_pskb+0x87f/0x9a0
[ 51.485562][ T396] unix_dgram_sendmsg+0x5c1/0x1710
[ 51.491114][ T396] sock_write_iter+0x2ea/0x3f0
[ 51.495890][ T396] vfs_write+0x5ef/0xd00
[ 51.500224][ T396] page_owner free stack trace missing
[ 51.506052][ T396]
[ 51.508372][ T396] Memory state around the buggy address:
[ 51.513997][ T396] ffff888116062300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 51.522071][ T396] ffff888116062380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 51.530332][ T396] >ffff888116062400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 51.538757][ T396] ^
[ 51.542953][ T396] ffff888116062480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 51.551105][ T396] ffff888116062500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 51.559252][ T396] ==================================================================
[ 51.575198][ T376] device veth1_macvtap entered promiscuous mode
[ 51.584004][ T396] Disabling lock debugging due to kernel taint
[ 51.603555][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 51.603595][ T28] audit: type=1400 audit(1785993721.377:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 51.604200][ T396] ------------[ cut here ]------------
[ 51.610544][ T28] audit: type=1400 audit(1785993721.377:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.633569][ T396] WARNING: CPU: 0 PID: 396 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 51.641570][ T28] audit: type=1400 audit(1785993721.377:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.661870][ T396] Modules linked in:
[ 51.672722][ T28] audit: type=1400 audit(1785993721.377:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.693818][ T396]
[ 51.697889][ T28] audit: type=1400 audit(1785993721.377:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 51.719188][ T396] CPU: 0 PID: 396 Comm: syz.1.22 Tainted: G B syzkaller #0
[ 51.721564][ T28] audit: type=1400 audit(1785993721.377:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 51.743867][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 51.743886][ T396] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 51.753371][ T28] audit: type=1400 audit(1785993721.377:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 51.776413][ T396] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 51.838502][ T396] RSP: 0018:ffffc90000a27cb0 EFLAGS: 00010293
[ 51.845029][ T396] RAX: ffffffff849bb307 RBX: ffff888118ac7000 RCX: ffff888118a2bcc0
[ 51.853336][ T396] RDX: 0000000000000000 RSI: 0000000016958540 RDI: 000000000c04eb7d
[ 51.861550][ T396] RBP: ffffc90000a27cd0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[ 51.869861][ T396] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000
[ 51.878895][ T396] R13: dffffc0000000000 R14: 0000000016958540 R15: ffff888116062400
[ 51.887518][ T396] FS: 0000555589854500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 51.896622][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.903220][ T396] CR2: 00007ffeb385bcb0 CR3: 000000012e247000 CR4: 00000000003506b0
[ 51.911528][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 51.920068][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 51.928744][ T396] Call Trace:
[ 51.932444][ T396]
[ 51.935604][ T396] pppol2tp_release+0x150/0x2b0
[ 51.940779][ T396] sock_close+0xc9/0x220
[ 51.945045][ T396] ? __cfi_sock_close+0x10/0x10
[ 51.950024][ T396] __fput+0x1fd/0x8f0
[ 51.954303][ T396] ____fput+0x15/0x20
[ 51.958702][ T396] task_work_run+0x1e1/0x250
[ 51.963496][ T396] ? __cfi_task_work_run+0x10/0x10
[ 51.968991][ T396] ? __cfi___close_range+0x10/0x10
[ 51.974117][ T396] exit_to_user_mode_loop+0x9b/0xb0
[ 51.979461][ T396] exit_to_user_mode_prepare+0x87/0xd0
[ 51.985157][ T396] syscall_exit_to_user_mode+0x1a/0x30
[ 51.990711][ T396] do_syscall_64+0x58/0xa0
[ 51.995239][ T396] ? clear_bhb_loop+0x30/0x80
[ 52.000047][ T396] ? clear_bhb_loop+0x30/0x80
[ 52.004835][ T396] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 52.010774][ T396] RIP: 0033:0x7f8a2f19e0d9
[ 52.015255][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 52.036039][ T396] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 52.045443][ T396] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 52.053767][ T396] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 52.061984][ T396] RBP: 000000000000c69b R08: 0000000000000001 R09: 0000000000000000
[ 52.070288][ T396] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 52.078359][ T396] R13: 00007f8a2f425fac R14: 000000000000c6cd R15: 00007f8a2f425fa0
[ 52.086438][ T396]
[ 52.089475][ T396] ---[ end trace 0000000000000000 ]---
[ 52.097835][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 52.108102][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 52.116569][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 52.125046][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 52.134062][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 52.142451][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 52.151411][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 52.161247][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 52.161366][ T407] ------------[ cut here ]------------
[ 52.169775][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 52.174899][ T407] WARNING: CPU: 0 PID: 407 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 52.183656][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 52.196902][ T407] Modules linked in:
[ 52.207192][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 52.210341][ T407] CPU: 0 PID: 407 Comm: syz.1.26 Tainted: G B W syzkaller #0
[ 52.219178][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 52.227663][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 52.236459][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 52.247444][ T407] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 52.256453][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 52.261984][ T407] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 52.270913][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 52.290528][ T407] RSP: 0018:ffffc90000a37cb0 EFLAGS: 00010293
[ 52.305265][ T407] RAX: ffffffff849bb307 RBX: ffff888118e9d000 RCX: ffff8881190da880
[ 52.313504][ T407] RDX: 0000000000000000 RSI: 0000000016976bc0 RDI: 000000000c04eb7d
[ 52.322167][ T407] RBP: ffffc90000a37cd0 R08: ffff888118e9d083 R09: 1ffff110231d3a10
[ 52.330569][ T407] R10: dffffc0000000000 R11: ffffed10231d3a11 R12: dffffc0000000000
[ 52.339316][ T407] R13: dffffc0000000000 R14: 0000000016976bc0 R15: ffff888118a70000
[ 52.348381][ T407] FS: 0000555589854500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 52.357739][ T407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.364575][ T407] CR2: 0000200000000740 CR3: 000000012f7cf000 CR4: 00000000003506b0
[ 52.372773][ T407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 52.381066][ T407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 52.389502][ T407] Call Trace:
[ 52.392790][ T407]
[ 52.395848][ T407] pppol2tp_release+0x150/0x2b0
[ 52.400979][ T407] sock_close+0xc9/0x220
[ 52.405233][ T407] ? __cfi_sock_close+0x10/0x10
[ 52.410118][ T407] __fput+0x1fd/0x8f0
[ 52.414204][ T407] ____fput+0x15/0x20
[ 52.418297][ T407] task_work_run+0x1e1/0x250
[ 52.422990][ T407] ? __cfi_task_work_run+0x10/0x10
[ 52.428147][ T407] ? __cfi___close_range+0x10/0x10
[ 52.433275][ T407] exit_to_user_mode_loop+0x9b/0xb0
[ 52.438617][ T407] exit_to_user_mode_prepare+0x87/0xd0
[ 52.444238][ T407] syscall_exit_to_user_mode+0x1a/0x30
[ 52.450003][ T407] do_syscall_64+0x58/0xa0
[ 52.454739][ T407] ? clear_bhb_loop+0x30/0x80
[ 52.459899][ T407] ? clear_bhb_loop+0x30/0x80
[ 52.464735][ T407] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 52.470916][ T407] RIP: 0033:0x7f8a2f19e0d9
[ 52.475749][ T407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 52.496276][ T407] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 52.505072][ T407] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 52.513220][ T407] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 52.521472][ T407] RBP: 000000000000cba6 R08: 0000000000000001 R09: 0000000000000000
[ 52.529716][ T407] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 52.538070][ T407] R13: 00007f8a2f425fac R14: 000000000000cbd9 R15: 00007f8a2f425fa0
[ 52.546442][ T407]
[ 52.549478][ T407] ---[ end trace 0000000000000000 ]---
[ 52.570930][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 52.580089][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 52.599376][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 52.608280][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 52.631835][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 52.648538][ T420] ------------[ cut here ]------------
[ 52.650815][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 52.654283][ T420] WARNING: CPU: 0 PID: 420 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 52.671748][ T418] ------------[ cut here ]------------
[ 52.672837][ T420] Modules linked in:
[ 52.678386][ T418] WARNING: CPU: 1 PID: 418 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 52.682197][ T420] CPU: 0 PID: 420 Comm: syz.6.19 Tainted: G B W syzkaller #0
[ 52.692368][ T418] Modules linked in:
[ 52.701276][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 52.705168][ T418] CPU: 1 PID: 418 Comm: syz.1.31 Tainted: G B W syzkaller #0
[ 52.715333][ T420] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 52.715370][ T420] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 52.724241][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 52.724252][ T418] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 52.730767][ T420] RSP: 0018:ffffc90000a87cb0 EFLAGS: 00010293
[ 52.750589][ T418] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 52.760730][ T420]
[ 52.760738][ T420] RAX: ffffffff849bb307 RBX: ffff8881196b6000 RCX: ffff8881196ed100
[ 52.767119][ T418] RSP: 0018:ffffc90000a77cb0 EFLAGS: 00010293
[ 52.773249][ T420] RDX: 0000000000000000 RSI: 00000000196b0000 RDI: 000000000c04eb7d
[ 52.793112][ T418]
[ 52.793126][ T418] RAX: ffffffff849bb307 RBX: ffff8881196b5000 RCX: ffff8881196ee540
[ 52.793147][ T418] RDX: 0000000000000000 RSI: 000000002f86af80 RDI: 000000000c04eb7d
[ 52.795492][ T420] RBP: ffffc90000a87cd0 R08: ffff8881196b6083 R09: 1ffff110232d6c10
[ 52.803700][ T418] RBP: ffffc90000a77cd0 R08: ffff8881196b5083 R09: 1ffff110232d6a10
[ 52.810182][ T420] R10: dffffc0000000000 R11: ffffed10232d6c11 R12: dffffc0000000000
[ 52.810209][ T420] R13: dffffc0000000000 R14: 00000000196b0000 R15: ffff88812198fc00
[ 52.810222][ T420] FS: 00005555646fc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 52.818381][ T418] R10: dffffc0000000000 R11: ffffed10232d6a11 R12: dffffc0000000000
[ 52.820736][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.829413][ T418] R13: dffffc0000000000 R14: 000000002f86af80 R15: ffff88810034b800
[ 52.837999][ T420] CR2: 0000200000000740 CR3: 000000012f78e000 CR4: 00000000003506b0
[ 52.846732][ T418] FS: 0000555589854500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 52.846756][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 52.854902][ T420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 52.863003][ T418] CR2: 000055558986f908 CR3: 00000001191a8000 CR4: 00000000003506a0
[ 52.863021][ T418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 52.863031][ T418] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 52.863043][ T418] Call Trace:
[ 52.863048][ T418]
[ 52.863055][ T418] pppol2tp_release+0x150/0x2b0
[ 52.863082][ T418] sock_close+0xc9/0x220
[ 52.863106][ T418] ? __cfi_sock_close+0x10/0x10
[ 52.863130][ T418] __fput+0x1fd/0x8f0
[ 52.871328][ T420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 52.871354][ T420] Call Trace:
[ 52.871360][ T420]
[ 52.871367][ T420] pppol2tp_release+0x150/0x2b0
[ 52.880426][ T418] ____fput+0x15/0x20
[ 52.888439][ T420] sock_close+0xc9/0x220
[ 52.895026][ T418] task_work_run+0x1e1/0x250
[ 52.903276][ T420] ? __cfi_sock_close+0x10/0x10
[ 52.911564][ T418] ? __cfi_task_work_run+0x10/0x10
[ 52.911591][ T418] ? __cfi___close_range+0x10/0x10
[ 52.920611][ T420] __fput+0x1fd/0x8f0
[ 52.927201][ T418] exit_to_user_mode_loop+0x9b/0xb0
[ 52.935280][ T420] ____fput+0x15/0x20
[ 52.943421][ T418] exit_to_user_mode_prepare+0x87/0xd0
[ 52.951366][ T420] task_work_run+0x1e1/0x250
[ 52.959612][ T418] syscall_exit_to_user_mode+0x1a/0x30
[ 52.963027][ T420] ? __cfi_task_work_run+0x10/0x10
[ 52.965982][ T418] do_syscall_64+0x58/0xa0
[ 52.966005][ T418] ? clear_bhb_loop+0x30/0x80
[ 52.966021][ T418] ? clear_bhb_loop+0x30/0x80
[ 52.966037][ T418] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 52.970869][ T420] ? __cfi___close_range+0x10/0x10
[ 52.975106][ T418] RIP: 0033:0x7f8a2f19e0d9
[ 52.979983][ T420] exit_to_user_mode_loop+0x9b/0xb0
[ 52.984039][ T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 52.992014][ T420] exit_to_user_mode_prepare+0x87/0xd0
[ 52.995287][ T418] RSP: 002b:00007ffea073e988 EFLAGS: 00000246
[ 52.998258][ T420] syscall_exit_to_user_mode+0x1a/0x30
[ 53.003076][ T418] ORIG_RAX: 00000000000001b4
[ 53.007090][ T420] do_syscall_64+0x58/0xa0
[ 53.007111][ T420] ? clear_bhb_loop+0x30/0x80
[ 53.007128][ T420] ? clear_bhb_loop+0x30/0x80
[ 53.011394][ T418] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 53.016535][ T420] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 53.016569][ T420] RIP: 0033:0x7fdf3059e0d9
[ 53.016584][ T420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 53.016598][ T420] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 53.016618][ T420] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 53.016629][ T420] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 53.016640][ T420] RBP: 000000000000cd8c R08: 0000000000000001 R09: 0000000000000000
[ 53.016651][ T420] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 53.016663][ T420] R13: 00007fdf30825fac R14: 000000000000cdbf R15: 00007fdf30825fa0
[ 53.016678][ T420]
[ 53.021771][ T418] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 53.027087][ T420] ---[ end trace 0000000000000000 ]---
[ 53.032459][ T418] RBP: 000000000000cd81 R08: 0000000000000001 R09: 0000000000000000
[ 53.277740][ T418] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 53.285959][ T418] R13: 00007f8a2f425fac R14: 000000000000cdc0 R15: 00007f8a2f425fa0
[ 53.294838][ T418]
[ 53.298116][ T418] ---[ end trace 0000000000000000 ]---
[ 53.348799][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 53.370961][ T432] ------------[ cut here ]------------
[ 53.373297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 53.377001][ T432] WARNING: CPU: 0 PID: 432 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 53.377048][ T432] Modules linked in:
[ 53.377062][ T432] CPU: 0 PID: 432 Comm: syz.0.17 Tainted: G B W syzkaller #0
[ 53.377080][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 53.377091][ T432] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 53.377115][ T432] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 53.377130][ T432] RSP: 0018:ffffc90000ac7cb0 EFLAGS: 00010293
[ 53.377145][ T432] RAX: ffffffff849bb307 RBX: ffff88811a263000 RCX: ffff888119993cc0
[ 53.377159][ T432] RDX: 0000000000000000 RSI: 000000001a434400 RDI: 000000000c04eb7d
[ 53.377171][ T432] RBP: ffffc90000ac7cd0 R08: ffff88811a263083 R09: 1ffff1102344c610
[ 53.377184][ T432] R10: dffffc0000000000 R11: ffffed102344c611 R12: dffffc0000000000
[ 53.377197][ T432] R13: dffffc0000000000 R14: 000000001a434400 R15: ffff888116041400
[ 53.377210][ T432] FS: 0000555575998500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 53.394375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 53.395583][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.399821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 53.408290][ T432] CR2: 00007f8a2f070000 CR3: 000000011904a000 CR4: 00000000003506b0
[ 53.535488][ T432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.543658][ T432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.552152][ T432] Call Trace:
[ 53.555759][ T432]
[ 53.558719][ T432] pppol2tp_release+0x150/0x2b0
[ 53.563837][ T432] sock_close+0xc9/0x220
[ 53.568431][ T432] ? __cfi_sock_close+0x10/0x10
[ 53.573724][ T432] __fput+0x1fd/0x8f0
[ 53.578788][ T432] ____fput+0x15/0x20
[ 53.584211][ T432] task_work_run+0x1e1/0x250
[ 53.589399][ T432] ? __cfi_task_work_run+0x10/0x10
[ 53.594558][ T432] ? __cfi___close_range+0x10/0x10
[ 53.600321][ T432] exit_to_user_mode_loop+0x9b/0xb0
[ 53.605859][ T432] exit_to_user_mode_prepare+0x87/0xd0
[ 53.611380][ T432] syscall_exit_to_user_mode+0x1a/0x30
[ 53.617494][ T432] do_syscall_64+0x58/0xa0
[ 53.622036][ T432] ? clear_bhb_loop+0x30/0x80
[ 53.626930][ T432] ? clear_bhb_loop+0x30/0x80
[ 53.631723][ T432] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 53.638275][ T432] RIP: 0033:0x7f05cbb9e0d9
[ 53.643009][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 53.664320][ T432] RSP: 002b:00007ffd8acbc958 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 53.673420][ T432] RAX: 0000000000000000 RBX: 00007ffd8acbca40 RCX: 00007f05cbb9e0d9
[ 53.681931][ T432] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 53.690301][ T432] RBP: 000000000000d05e R08: 0000000000000001 R09: 0000000000000000
[ 53.698443][ T432] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffd8acbca80
[ 53.706593][ T432] R13: 00007f05cbe25fac R14: 000000000000d091 R15: 00007f05cbe25fa0
[ 53.715043][ T432]
[ 53.718227][ T432] ---[ end trace 0000000000000000 ]---
[ 53.764389][ T438] ------------[ cut here ]------------
[ 53.770086][ T438] WARNING: CPU: 1 PID: 438 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 53.780588][ T438] Modules linked in:
[ 53.784516][ T438] CPU: 1 PID: 438 Comm: syz.1.39 Tainted: G B W syzkaller #0
[ 53.793466][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 53.803881][ T438] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 53.810397][ T438] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 53.831681][ T438] RSP: 0018:ffffc90000a77cb0 EFLAGS: 00010293
[ 53.838220][ T438] RAX: ffffffff849bb307 RBX: ffff88811a6f7000 RCX: ffff88811a05e540
[ 53.846769][ T438] RDX: 0000000000000000 RSI: 000000002f79f000 RDI: 000000000c04eb7d
[ 53.854780][ T438] RBP: ffffc90000a77cd0 R08: ffff88811a6f7083 R09: 1ffff110234dee10
[ 53.863120][ T438] R10: dffffc0000000000 R11: ffffed10234dee11 R12: dffffc0000000000
[ 53.871378][ T438] R13: dffffc0000000000 R14: 000000002f79f000 R15: ffff888118272400
[ 53.879807][ T438] FS: 0000555589854500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 53.888906][ T438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.895695][ T438] CR2: 0000200000000740 CR3: 000000013127b000 CR4: 00000000003506a0
[ 53.903712][ T438] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.912329][ T438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.920569][ T438] Call Trace:
[ 53.923974][ T438]
[ 53.927088][ T438] pppol2tp_release+0x150/0x2b0
[ 53.932066][ T438] sock_close+0xc9/0x220
[ 53.936660][ T438] ? __cfi_sock_close+0x10/0x10
[ 53.941689][ T438] __fput+0x1fd/0x8f0
[ 53.945755][ T438] ____fput+0x15/0x20
[ 53.949787][ T438] task_work_run+0x1e1/0x250
[ 53.954682][ T438] ? __cfi_task_work_run+0x10/0x10
[ 53.960071][ T438] ? __cfi___close_range+0x10/0x10
2026/08/06 05:22:03 executed programs: 45
[ 53.965250][ T438] exit_to_user_mode_loop+0x9b/0xb0
[ 53.970711][ T438] exit_to_user_mode_prepare+0x87/0xd0
[ 53.977273][ T438] syscall_exit_to_user_mode+0x1a/0x30
[ 53.982876][ T438] do_syscall_64+0x58/0xa0
[ 53.987487][ T438] ? clear_bhb_loop+0x30/0x80
[ 53.992375][ T438] ? clear_bhb_loop+0x30/0x80
[ 53.997308][ T438] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 54.003601][ T438] RIP: 0033:0x7f8a2f19e0d9
[ 54.008567][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 54.028802][ T438] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 54.037479][ T438] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 54.045499][ T438] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 54.054815][ T438] RBP: 000000000000d1d6 R08: 0000000000000001 R09: 0000000000000000
[ 54.063119][ T438] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 54.071696][ T438] R13: 00007f8a2f425fac R14: 000000000000d210 R15: 00007f8a2f425fa0
[ 54.079919][ T438]
[ 54.083055][ T438] ---[ end trace 0000000000000000 ]---
[ 54.090699][ T378] device veth0_vlan entered promiscuous mode
[ 54.104360][ T490] ------------[ cut here ]------------
[ 54.110306][ T490] WARNING: CPU: 1 PID: 490 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 54.120688][ T490] Modules linked in:
[ 54.124719][ T490] CPU: 1 PID: 490 Comm: syz.6.65 Tainted: G B W syzkaller #0
[ 54.130532][ T378] device veth1_macvtap entered promiscuous mode
[ 54.133423][ T490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 54.150030][ T490] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 54.156977][ T490] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 54.177353][ T490] RSP: 0018:ffffc90000a87cb0 EFLAGS: 00010293
[ 54.183618][ T490] RAX: ffffffff849bb307 RBX: ffff88811ba60000 RCX: ffff88811ba1bcc0
[ 54.191676][ T490] RDX: 0000000000000000 RSI: 000000002d9ec0c0 RDI: 000000000c04eb7d
[ 54.200014][ T490] RBP: ffffc90000a87cd0 R08: ffff88811ba60083 R09: 1ffff1102374c010
[ 54.208344][ T490] R10: dffffc0000000000 R11: ffffed102374c011 R12: dffffc0000000000
[ 54.216995][ T490] R13: dffffc0000000000 R14: 000000002d9ec0c0 R15: ffff88812dddfc00
[ 54.225517][ T490] FS: 00005555646fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 54.234744][ T490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.241455][ T490] CR2: 0000200000000740 CR3: 00000001220d7000 CR4: 00000000003506a0
[ 54.249876][ T490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.258018][ T490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.266143][ T490] Call Trace:
[ 54.269452][ T490]
[ 54.272571][ T490] pppol2tp_release+0x150/0x2b0
[ 54.278220][ T490] sock_close+0xc9/0x220
[ 54.282772][ T490] ? __cfi_sock_close+0x10/0x10
[ 54.288180][ T490] __fput+0x1fd/0x8f0
[ 54.292373][ T490] ____fput+0x15/0x20
[ 54.296584][ T490] task_work_run+0x1e1/0x250
[ 54.301180][ T490] ? __cfi_task_work_run+0x10/0x10
[ 54.306665][ T490] ? __cfi___close_range+0x10/0x10
[ 54.312151][ T490] exit_to_user_mode_loop+0x9b/0xb0
[ 54.317856][ T490] exit_to_user_mode_prepare+0x87/0xd0
[ 54.323535][ T490] syscall_exit_to_user_mode+0x1a/0x30
[ 54.329441][ T490] do_syscall_64+0x58/0xa0
[ 54.334051][ T490] ? clear_bhb_loop+0x30/0x80
[ 54.338937][ T490] ? clear_bhb_loop+0x30/0x80
[ 54.343903][ T490] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 54.349984][ T490] RIP: 0033:0x7fdf3059e0d9
[ 54.354425][ T490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 54.374759][ T490] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 54.383442][ T490] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 54.391527][ T490] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 54.399760][ T490] RBP: 000000000000d33d R08: 0000000000000001 R09: 0000000000000000
[ 54.407962][ T490] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 54.416349][ T490] R13: 00007fdf30825fac R14: 000000000000d370 R15: 00007fdf30825fa0
[ 54.424687][ T490]
[ 54.427830][ T490] ---[ end trace 0000000000000000 ]---
[ 54.454391][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 54.470754][ T502] ------------[ cut here ]------------
[ 54.476516][ T502] WARNING: CPU: 0 PID: 502 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 54.479152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 54.486796][ T502] Modules linked in:
[ 54.496116][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 54.499452][ T502] CPU: 0 PID: 502 Comm: syz.0.70 Tainted: G B W syzkaller #0
[ 54.507629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 54.515494][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 54.525929][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 54.533842][ T502] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 54.548919][ T502] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 54.554971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 54.569064][ T502] RSP: 0018:ffffc90000b6fcb0 EFLAGS: 00010293
[ 54.578365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 54.584512][ T502] RAX: ffffffff849bb307 RBX: ffff88811bba0000 RCX: ffff88811c1c9440
[ 54.601609][ T502] RDX: 0000000000000000 RSI: 0000000019b3fe40 RDI: 000000000c04eb7d
[ 54.611064][ T502] RBP: ffffc90000b6fcd0 R08: ffff88811bba0083 R09: 1ffff11023774010
[ 54.619902][ T502] R10: dffffc0000000000 R11: ffffed1023774011 R12: dffffc0000000000
[ 54.629422][ T502] R13: dffffc0000000000 R14: 0000000019b3fe40 R15: ffff88810ba03000
[ 54.638761][ T502] FS: 0000555575998500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 54.649745][ T502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.657198][ T502] CR2: 0000200000000740 CR3: 0000000123a36000 CR4: 00000000003506b0
[ 54.665802][ T502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.674087][ T502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.683357][ T502] Call Trace:
[ 54.686886][ T502]
[ 54.689962][ T502] pppol2tp_release+0x150/0x2b0
[ 54.694996][ T502] sock_close+0xc9/0x220
[ 54.700038][ T502] ? __cfi_sock_close+0x10/0x10
[ 54.705078][ T502] __fput+0x1fd/0x8f0
[ 54.709430][ T502] ____fput+0x15/0x20
[ 54.713542][ T502] task_work_run+0x1e1/0x250
[ 54.718442][ T502] ? __cfi_task_work_run+0x10/0x10
[ 54.724322][ T502] ? __cfi___close_range+0x10/0x10
[ 54.729772][ T502] exit_to_user_mode_loop+0x9b/0xb0
[ 54.735358][ T502] exit_to_user_mode_prepare+0x87/0xd0
[ 54.741106][ T502] syscall_exit_to_user_mode+0x1a/0x30
[ 54.747013][ T502] do_syscall_64+0x58/0xa0
[ 54.751545][ T502] ? clear_bhb_loop+0x30/0x80
[ 54.756474][ T502] ? clear_bhb_loop+0x30/0x80
[ 54.761811][ T502] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 54.768412][ T502] RIP: 0033:0x7f05cbb9e0d9
[ 54.773380][ T502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 54.793794][ T502] RSP: 002b:00007ffd8acbc958 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 54.802498][ T502] RAX: 0000000000000000 RBX: 00007ffd8acbca40 RCX: 00007f05cbb9e0d9
[ 54.810844][ T502] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 54.819314][ T502] RBP: 000000000000d4ac R08: 0000000000000001 R09: 0000000000000000
[ 54.828386][ T502] R10: 0000001b33020000 R11: 0000000000000246 R12: 00007ffd8acbca80
[ 54.838048][ T502] R13: 00007f05cbe25fac R14: 000000000000d4de R15: 00007f05cbe25fa0
[ 54.847104][ T502]
[ 54.850320][ T502] ---[ end trace 0000000000000000 ]---
[ 54.884059][ T510] ------------[ cut here ]------------
[ 54.889769][ T510] WARNING: CPU: 1 PID: 510 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 54.900272][ T510] Modules linked in:
[ 54.900710][ T511] ------------[ cut here ]------------
[ 54.904468][ T510] CPU: 1 PID: 510 Comm: syz.1.74 Tainted: G B W syzkaller #0
[ 54.904489][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 54.904499][ T510] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 54.910019][ T511] WARNING: CPU: 0 PID: 511 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 54.910052][ T511] Modules linked in:
[ 54.910062][ T511] CPU: 0 PID: 511 Comm: syz.6.76 Tainted: G B W syzkaller #0
[ 54.910080][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 54.910089][ T511] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 54.910112][ T511] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 54.910127][ T511] RSP: 0018:ffffc90000b07cb0 EFLAGS: 00010293
[ 54.910143][ T511] RAX: ffffffff849bb307 RBX: ffff88811ce02000 RCX: ffff88811cdb5100
[ 54.910156][ T511] RDX: 0000000000000000 RSI: 000000002e2a50c0 RDI: 000000000c04eb7d
[ 54.910168][ T511] RBP: ffffc90000b07cd0 R08: ffff88811ce02083 R09: 1ffff110239c0410
[ 54.910182][ T511] R10: dffffc0000000000 R11: ffffed10239c0411 R12: dffffc0000000000
[ 54.910195][ T511] R13: dffffc0000000000 R14: 000000002e2a50c0 R15: ffff88813033c000
[ 54.919059][ T510] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 54.928856][ T511] FS: 00005555646fc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 54.928874][ T511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.928887][ T511] CR2: 00007f05cca75ff8 CR3: 000000012cde8000 CR4: 00000000003506b0
[ 54.928904][ T511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 54.928916][ T511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 54.928928][ T511] Call Trace:
[ 54.928933][ T511]
[ 54.935490][ T510] RSP: 0018:ffffc90000b6fcb0 EFLAGS: 00010293
[ 54.945728][ T511] pppol2tp_release+0x150/0x2b0
[ 54.945756][ T511] sock_close+0xc9/0x220
[ 54.945781][ T511] ? __cfi_sock_close+0x10/0x10
[ 54.945806][ T511] __fput+0x1fd/0x8f0
[ 54.945830][ T511] ____fput+0x15/0x20
[ 54.949812][ T510]
[ 54.949819][ T510] RAX: ffffffff849bb307 RBX: ffff88811ca59000 RCX: ffff88811bb95100
[ 54.959183][ T511] task_work_run+0x1e1/0x250
[ 54.959210][ T511] ? __cfi_task_work_run+0x10/0x10
[ 54.959231][ T511] ? __cfi___close_range+0x10/0x10
[ 54.959250][ T511] exit_to_user_mode_loop+0x9b/0xb0
[ 54.959271][ T511] exit_to_user_mode_prepare+0x87/0xd0
[ 54.969675][ T510] RDX: 0000000000000000 RSI: 0000000023074800 RDI: 000000000c04eb7d
[ 54.975992][ T511] syscall_exit_to_user_mode+0x1a/0x30
[ 54.976015][ T511] do_syscall_64+0x58/0xa0
[ 54.976035][ T511] ? clear_bhb_loop+0x30/0x80
[ 54.976051][ T511] ? clear_bhb_loop+0x30/0x80
[ 54.976067][ T511] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 54.996653][ T510] RBP: ffffc90000b6fcd0 R08: ffff88811ca59083 R09: 1ffff1102394b210
[ 55.002697][ T511] RIP: 0033:0x7fdf3059e0d9
[ 55.010780][ T510] R10: dffffc0000000000 R11: ffffed102394b211 R12: dffffc0000000000
[ 55.018953][ T511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 55.027293][ T510] R13: dffffc0000000000 R14: 0000000023074800 R15: ffff88813033cc00
[ 55.027309][ T510] FS: 0000555589854500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 55.027323][ T510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.027334][ T510] CR2: 00007f4b2f1d4ff8 CR3: 00000001232ae000 CR4: 00000000003506a0
[ 55.027350][ T510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.027361][ T510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.027372][ T510] Call Trace:
[ 55.027377][ T510]
[ 55.027384][ T510] pppol2tp_release+0x150/0x2b0
[ 55.035808][ T511] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246
[ 55.044115][ T510] sock_close+0xc9/0x220
[ 55.064185][ T511] ORIG_RAX: 00000000000001b4
[ 55.064197][ T511] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 55.064209][ T511] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 55.073985][ T510] ? __cfi_sock_close+0x10/0x10
[ 55.080701][ T511] RBP: 000000000000d644 R08: 0000000000000001 R09: 0000000000000000
[ 55.089042][ T510] __fput+0x1fd/0x8f0
[ 55.089073][ T510] ____fput+0x15/0x20
[ 55.097514][ T511] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 55.097536][ T511] R13: 00007fdf30825fac R14: 000000000000d67c R15: 00007fdf30825fa0
[ 55.097552][ T511]
[ 55.097558][ T511] ---[ end trace 0000000000000000 ]---
[ 55.399442][ T510] task_work_run+0x1e1/0x250
[ 55.404252][ T510] ? __cfi_task_work_run+0x10/0x10
[ 55.409546][ T510] ? __cfi___close_range+0x10/0x10
[ 55.414790][ T510] exit_to_user_mode_loop+0x9b/0xb0
[ 55.420457][ T510] exit_to_user_mode_prepare+0x87/0xd0
[ 55.426284][ T510] syscall_exit_to_user_mode+0x1a/0x30
[ 55.432133][ T510] do_syscall_64+0x58/0xa0
[ 55.436827][ T510] ? clear_bhb_loop+0x30/0x80
[ 55.442843][ T510] ? clear_bhb_loop+0x30/0x80
[ 55.447640][ T510] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.453590][ T510] RIP: 0033:0x7f8a2f19e0d9
[ 55.458243][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 55.479161][ T510] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 55.488017][ T510] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 55.496208][ T510] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 55.504316][ T510] RBP: 000000000000d646 R08: 0000000000000001 R09: 0000000000000000
[ 55.512567][ T510] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 55.520965][ T510] R13: 00007f8a2f425fac R14: 000000000000d678 R15: 00007f8a2f425fa0
[ 55.529220][ T510]
[ 55.532446][ T510] ---[ end trace 0000000000000000 ]---
[ 55.568692][ T587] ------------[ cut here ]------------
[ 55.574398][ T587] WARNING: CPU: 0 PID: 587 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 55.584996][ T587] Modules linked in:
[ 55.589733][ T587] CPU: 0 PID: 587 Comm: syz.4.21 Tainted: G B W syzkaller #0
[ 55.599009][ T587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 55.609937][ T587] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 55.616567][ T587] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 55.638553][ T587] RSP: 0018:ffffc90000a77cb0 EFLAGS: 00010293
[ 55.645096][ T587] RAX: ffffffff849bb307 RBX: ffff88811e74c000 RCX: ffff88811c190000
[ 55.653953][ T587] RDX: 0000000000000000 RSI: 000000002f84ab40 RDI: 000000000c04eb7d
[ 55.662924][ T587] RBP: ffffc90000a77cd0 R08: ffff88811e74c083 R09: 1ffff11023ce9810
[ 55.671827][ T587] R10: dffffc0000000000 R11: ffffed1023ce9811 R12: dffffc0000000000
[ 55.680085][ T587] R13: dffffc0000000000 R14: 000000002f84ab40 R15: ffff88811e2ee800
[ 55.688365][ T587] FS: 000055555fd65500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 55.698043][ T587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.704841][ T587] CR2: 0000200000000740 CR3: 000000011e27a000 CR4: 00000000003506b0
[ 55.713257][ T587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.721835][ T587] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.730322][ T587] Call Trace:
[ 55.733847][ T587]
[ 55.737167][ T587] pppol2tp_release+0x150/0x2b0
[ 55.742159][ T587] sock_close+0xc9/0x220
[ 55.746785][ T587] ? __cfi_sock_close+0x10/0x10
[ 55.751688][ T587] __fput+0x1fd/0x8f0
[ 55.755860][ T587] ____fput+0x15/0x20
[ 55.760279][ T587] task_work_run+0x1e1/0x250
[ 55.764921][ T587] ? __cfi_task_work_run+0x10/0x10
[ 55.770473][ T587] ? __cfi___close_range+0x10/0x10
[ 55.776063][ T587] exit_to_user_mode_loop+0x9b/0xb0
[ 55.781399][ T587] exit_to_user_mode_prepare+0x87/0xd0
[ 55.787078][ T587] syscall_exit_to_user_mode+0x1a/0x30
[ 55.792981][ T587] do_syscall_64+0x58/0xa0
[ 55.797706][ T587] ? clear_bhb_loop+0x30/0x80
[ 55.802428][ T587] ? clear_bhb_loop+0x30/0x80
[ 55.807432][ T587] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.813729][ T587] RIP: 0033:0x7ff0a9f9e0d9
[ 55.819609][ T587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 55.840820][ T587] RSP: 002b:00007ffda945f1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 55.850379][ T587] RAX: 0000000000000000 RBX: 00007ffda945f2b0 RCX: 00007ff0a9f9e0d9
[ 55.859177][ T587] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 55.867850][ T587] RBP: 000000000000d8f5 R08: 0000000000000001 R09: 0000000000000000
[ 55.876457][ T587] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffda945f2f0
[ 55.884564][ T587] R13: 00007ff0aa225fac R14: 000000000000d928 R15: 00007ff0aa225fa0
[ 55.893283][ T587]
[ 55.896831][ T587] ---[ end trace 0000000000000000 ]---
[ 55.939217][ T642] ------------[ cut here ]------------
[ 55.945493][ T642] WARNING: CPU: 1 PID: 642 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 55.956161][ T642] Modules linked in:
[ 55.960184][ T642] CPU: 1 PID: 642 Comm: syz.1.137 Tainted: G B W syzkaller #0
[ 55.969314][ T642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 55.979754][ T642] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 55.986372][ T642] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 56.006794][ T642] RSP: 0018:ffffc90001217cb0 EFLAGS: 00010293
[ 56.013245][ T642] RAX: ffffffff849bb307 RBX: ffff8881092c0000 RCX: ffff88811e741440
[ 56.021830][ T642] RDX: 0000000000000000 RSI: 000000000925a200 RDI: 000000000c04eb7d
[ 56.030306][ T642] RBP: ffffc90001217cd0 R08: ffff8881092c0083 R09: 1ffff11021258010
[ 56.038781][ T642] R10: dffffc0000000000 R11: ffffed1021258011 R12: dffffc0000000000
[ 56.046929][ T642] R13: dffffc0000000000 R14: 000000000925a200 R15: ffff88811e306400
[ 56.055034][ T642] FS: 0000555589854500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 56.064522][ T642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.071652][ T642] CR2: 00007ff0aa225fa4 CR3: 00000001120fb000 CR4: 00000000003506a0
[ 56.080027][ T642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.088631][ T642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.097268][ T642] Call Trace:
[ 56.100609][ T642]
[ 56.103599][ T642] pppol2tp_release+0x150/0x2b0
[ 56.108540][ T642] sock_close+0xc9/0x220
[ 56.113453][ T642] ? __cfi_sock_close+0x10/0x10
[ 56.118677][ T642] __fput+0x1fd/0x8f0
[ 56.122686][ T642] ____fput+0x15/0x20
[ 56.126972][ T642] task_work_run+0x1e1/0x250
[ 56.131587][ T642] ? __cfi_task_work_run+0x10/0x10
[ 56.137092][ T642] ? __cfi___close_range+0x10/0x10
[ 56.142960][ T642] exit_to_user_mode_loop+0x9b/0xb0
[ 56.148887][ T642] exit_to_user_mode_prepare+0x87/0xd0
[ 56.154395][ T642] syscall_exit_to_user_mode+0x1a/0x30
[ 56.160281][ T642] do_syscall_64+0x58/0xa0
[ 56.164814][ T642] ? clear_bhb_loop+0x30/0x80
[ 56.171375][ T642] ? clear_bhb_loop+0x30/0x80
[ 56.176723][ T642] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 56.182817][ T642] RIP: 0033:0x7f8a2f19e0d9
[ 56.187434][ T642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.208087][ T642] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 56.217274][ T642] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 56.225687][ T642] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 56.234327][ T642] RBP: 000000000000da65 R08: 0000000000000001 R09: 0000000000000000
[ 56.242622][ T642] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 56.251183][ T642] R13: 00007f8a2f425fac R14: 000000000000da9a R15: 00007f8a2f425fa0
[ 56.259988][ T642]
[ 56.263050][ T642] ---[ end trace 0000000000000000 ]---
[ 56.278274][ T8] device bridge_slave_1 left promiscuous mode
[ 56.284964][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.312161][ T658] ------------[ cut here ]------------
[ 56.318056][ T658] WARNING: CPU: 0 PID: 658 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 56.328663][ T658] Modules linked in:
[ 56.329532][ T661] ------------[ cut here ]------------
[ 56.332863][ T658] CPU: 0 PID: 658 Comm: syz.1.147 Tainted: G B W syzkaller #0
[ 56.332885][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 56.332895][ T658] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 56.339027][ T661] WARNING: CPU: 1 PID: 661 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 56.347725][ T658] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 56.347744][ T658] RSP: 0018:ffffc90000f6fcb0 EFLAGS: 00010293
[ 56.347762][ T658] RAX: ffffffff849bb307 RBX: ffff888111f27000 RCX: ffff888111f13cc0
[ 56.347776][ T658] RDX: 0000000000000000 RSI: 000000002e278e40 RDI: 000000000c04eb7d
[ 56.347787][ T658] RBP: ffffc90000f6fcd0 R08: ffff888111f27083 R09: 1ffff110223e4e10
[ 56.347800][ T658] R10: dffffc0000000000 R11: ffffed10223e4e11 R12: dffffc0000000000
[ 56.347813][ T658] R13: dffffc0000000000 R14: 000000002e278e40 R15: ffff888108bf6400
[ 56.358144][ T661] Modules linked in:
[ 56.358157][ T661] CPU: 1 PID: 661 Comm: syz.3.143 Tainted: G B W syzkaller #0
[ 56.358176][ T661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 56.358186][ T661] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 56.358213][ T661] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 56.358228][ T661] RSP: 0018:ffffc90001547cb0 EFLAGS: 00010293
[ 56.364833][ T658] FS: 0000555589854500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 56.364852][ T658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.375863][ T661] RAX: ffffffff849bb307 RBX: ffff88812c998000 RCX: ffff88810938a880
[ 56.396179][ T658] CR2: 00007f05cc958060 CR3: 0000000120756000 CR4: 00000000003506b0
[ 56.396208][ T658] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.402363][ T661] RDX: 0000000000000000 RSI: 000000002f59d500 RDI: 000000000c04eb7d
[ 56.410976][ T658] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.419066][ T661] RBP: ffffc90001547cd0 R08: ffff88812c998083 R09: 1ffff11025933010
[ 56.419092][ T661] R10: dffffc0000000000 R11: ffffed1025933011 R12: dffffc0000000000
[ 56.419105][ T661] R13: dffffc0000000000 R14: 000000002f59d500 R15: ffff88811e37fc00
[ 56.427178][ T658] Call Trace:
[ 56.427185][ T658]
[ 56.427192][ T658] pppol2tp_release+0x150/0x2b0
[ 56.435792][ T661] FS: 00005555852b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 56.435814][ T661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.435826][ T661] CR2: 0000200000000740 CR3: 000000012f79c000 CR4: 00000000003506a0
[ 56.435842][ T661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 56.435853][ T661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 56.435865][ T661] Call Trace:
[ 56.435871][ T661]
[ 56.444094][ T658] sock_close+0xc9/0x220
[ 56.448228][ T661] pppol2tp_release+0x150/0x2b0
[ 56.457967][ T658] ? __cfi_sock_close+0x10/0x10
[ 56.458023][ T658] __fput+0x1fd/0x8f0
[ 56.469344][ T661] sock_close+0xc9/0x220
[ 56.469371][ T661] ? __cfi_sock_close+0x10/0x10
[ 56.469397][ T661] __fput+0x1fd/0x8f0
[ 56.469417][ T661] ____fput+0x15/0x20
[ 56.475997][ T658] ____fput+0x15/0x20
[ 56.496864][ T661] task_work_run+0x1e1/0x250
[ 56.503229][ T658] task_work_run+0x1e1/0x250
[ 56.512209][ T661] ? __cfi_task_work_run+0x10/0x10
[ 56.519068][ T658] ? __cfi_task_work_run+0x10/0x10
[ 56.527334][ T661] ? __cfi___close_range+0x10/0x10
[ 56.535383][ T658] ? __cfi___close_range+0x10/0x10
[ 56.544198][ T661] exit_to_user_mode_loop+0x9b/0xb0
[ 56.552351][ T658] exit_to_user_mode_loop+0x9b/0xb0
[ 56.560806][ T661] exit_to_user_mode_prepare+0x87/0xd0
[ 56.569358][ T658] exit_to_user_mode_prepare+0x87/0xd0
[ 56.578028][ T661] syscall_exit_to_user_mode+0x1a/0x30
[ 56.587038][ T658] syscall_exit_to_user_mode+0x1a/0x30
[ 56.590686][ T661] do_syscall_64+0x58/0xa0
[ 56.593914][ T658] do_syscall_64+0x58/0xa0
[ 56.600396][ T661] ? clear_bhb_loop+0x30/0x80
[ 56.610076][ T658] ? clear_bhb_loop+0x30/0x80
[ 56.617438][ T661] ? clear_bhb_loop+0x30/0x80
[ 56.625888][ T658] ? clear_bhb_loop+0x30/0x80
[ 56.625910][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 56.625938][ T658] RIP: 0033:0x7f8a2f19e0d9
[ 56.625954][ T658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.634289][ T661] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 56.643447][ T658] RSP: 002b:00007ffea073e988 EFLAGS: 00000246
[ 56.646849][ T661] RIP: 0033:0x7f4b2e39e0d9
[ 56.649865][ T658] ORIG_RAX: 00000000000001b4
[ 56.654360][ T661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.659384][ T658] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 56.664313][ T661] RSP: 002b:00007ffd9fe49f18 EFLAGS: 00000246
[ 56.668643][ T658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 56.673241][ T661] ORIG_RAX: 00000000000001b4
[ 56.678290][ T658] RBP: 000000000000dbd3 R08: 0000000000000001 R09: 0000000000000000
[ 56.682357][ T661] RAX: 0000000000000000 RBX: 00007ffd9fe4a000 RCX: 00007f4b2e39e0d9
[ 56.686537][ T658] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 56.690672][ T661] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 56.695449][ T658] R13: 00007f8a2f425fac R14: 000000000000dc0d R15: 00007f8a2f425fa0
[ 56.700515][ T661] RBP: 000000000000dbd6 R08: 0000000000000001 R09: 0000000000000000
[ 56.705700][ T658]
[ 56.705708][ T658] ---[ end trace 0000000000000000 ]---
[ 56.950850][ T661] R10: 0000001b33620000 R11: 0000000000000246 R12: 00007ffd9fe4a040
[ 56.959231][ T661] R13: 00007f4b2e625fac R14: 000000000000dc09 R15: 00007f4b2e625fa0
[ 56.967469][ T661]
[ 56.970519][ T661] ---[ end trace 0000000000000000 ]---
[ 56.988997][ T8] device bridge_slave_0 left promiscuous mode
[ 57.002253][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.002376][ T705] ------------[ cut here ]------------
[ 57.016068][ T705] WARNING: CPU: 0 PID: 705 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 57.026261][ T705] Modules linked in:
[ 57.030329][ T705] CPU: 0 PID: 705 Comm: syz.3.169 Tainted: G B W syzkaller #0
[ 57.039454][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 57.042277][ T708] ------------[ cut here ]------------
[ 57.049800][ T705] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 57.055731][ T708] WARNING: CPU: 1 PID: 708 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 57.064718][ T705] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 57.075440][ T708] Modules linked in:
[ 57.075458][ T708] CPU: 1 PID: 708 Comm: syz.1.168 Tainted: G B W syzkaller #0
[ 57.075482][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 57.075492][ T708] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 57.075544][ T708] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 57.075562][ T708] RSP: 0018:ffffc90000a87cb0 EFLAGS: 00010293
[ 57.075577][ T708] RAX: ffffffff849bb307 RBX: ffff8881099fb000 RCX: ffff88811690d100
[ 57.097457][ T705] RSP: 0018:ffffc900015cfcb0 EFLAGS: 00010293
[ 57.097493][ T705] RAX: ffffffff849bb307 RBX: ffff8881099f9000 RCX: ffff88810d8fe540
[ 57.097509][ T705] RDX: 0000000000000000 RSI: 000000001a981bc0 RDI: 000000000c04eb7d
[ 57.097523][ T705] RBP: ffffc900015cfcd0 R08: ffff8881099f9083 R09: 1ffff1102133f210
[ 57.097537][ T705] R10: dffffc0000000000 R11: ffffed102133f211 R12: dffffc0000000000
[ 57.097551][ T705] R13: dffffc0000000000 R14: 000000001a981bc0 R15: ffff88810b6fd800
[ 57.097563][ T705] FS: 00005555852b0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 57.097578][ T705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.097590][ T705] CR2: 0000200000000740 CR3: 0000000121ee4000 CR4: 00000000003506b0
[ 57.097608][ T705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.101691][ T708] RDX: 0000000000000000 RSI: 000000000b6fd800 RDI: 000000000c04eb7d
[ 57.110972][ T705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.121643][ T708] RBP: ffffc90000a87cd0 R08: ffff8881099fb083 R09: 1ffff1102133f610
[ 57.121663][ T708] R10: dffffc0000000000 R11: ffffed102133f611 R12: dffffc0000000000
[ 57.121677][ T708] R13: dffffc0000000000 R14: 000000000b6fd800 R15: ffff888120c6c800
[ 57.121691][ T708] FS: 0000555589854500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 57.121707][ T708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.121720][ T708] CR2: 0000200000000740 CR3: 000000010bd59000 CR4: 00000000003506a0
[ 57.121738][ T708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.128624][ T705] Call Trace:
[ 57.149038][ T708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.149053][ T708] Call Trace:
[ 57.149059][ T708]
[ 57.149066][ T708] pppol2tp_release+0x150/0x2b0
[ 57.149097][ T708] sock_close+0xc9/0x220
[ 57.149122][ T708] ? __cfi_sock_close+0x10/0x10
[ 57.149147][ T708] __fput+0x1fd/0x8f0
[ 57.155409][ T705]
[ 57.155419][ T705] pppol2tp_release+0x150/0x2b0
[ 57.166882][ T708] ____fput+0x15/0x20
[ 57.166924][ T708] task_work_run+0x1e1/0x250
[ 57.166950][ T708] ? __cfi_task_work_run+0x10/0x10
[ 57.173403][ T705] sock_close+0xc9/0x220
[ 57.182786][ T708] ? __cfi___close_range+0x10/0x10
[ 57.191230][ T705] ? __cfi_sock_close+0x10/0x10
[ 57.191273][ T705] __fput+0x1fd/0x8f0
[ 57.191301][ T705] ____fput+0x15/0x20
[ 57.191319][ T705] task_work_run+0x1e1/0x250
[ 57.191343][ T705] ? __cfi_task_work_run+0x10/0x10
[ 57.191364][ T705] ? __cfi___close_range+0x10/0x10
[ 57.191394][ T705] exit_to_user_mode_loop+0x9b/0xb0
[ 57.199469][ T708] exit_to_user_mode_loop+0x9b/0xb0
[ 57.199508][ T708] exit_to_user_mode_prepare+0x87/0xd0
[ 57.207762][ T705] exit_to_user_mode_prepare+0x87/0xd0
[ 57.216330][ T708] syscall_exit_to_user_mode+0x1a/0x30
[ 57.216370][ T708] do_syscall_64+0x58/0xa0
[ 57.216392][ T708] ? clear_bhb_loop+0x30/0x80
[ 57.216410][ T708] ? clear_bhb_loop+0x30/0x80
[ 57.225752][ T705] syscall_exit_to_user_mode+0x1a/0x30
[ 57.233241][ T708] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 57.242560][ T705] do_syscall_64+0x58/0xa0
[ 57.252253][ T708] RIP: 0033:0x7f8a2f19e0d9
[ 57.252291][ T708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 57.252307][ T708] RSP: 002b:00007ffea073e988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 57.252330][ T708] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 57.252343][ T708] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 57.252353][ T708] RBP: 000000000000de8f R08: 0000000000000001 R09: 0000000000000000
[ 57.263650][ T705] ? clear_bhb_loop+0x30/0x80
[ 57.273651][ T708] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 57.273681][ T708] R13: 00007f8a2f425fac R14: 000000000000dec1 R15: 00007f8a2f425fa0
[ 57.273698][ T708]
[ 57.273705][ T708] ---[ end trace 0000000000000000 ]---
[ 57.603540][ T705] ? clear_bhb_loop+0x30/0x80
[ 57.610399][ T705] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 57.619648][ T705] RIP: 0033:0x7f4b2e39e0d9
[ 57.626189][ T705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 57.656734][ T705] RSP: 002b:00007ffd9fe49f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 57.668670][ T705] RAX: 0000000000000000 RBX: 00007ffd9fe4a000 RCX: 00007f4b2e39e0d9
[ 57.679357][ T705] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 57.689876][ T705] RBP: 000000000000de8c R08: 0000000000000001 R09: 0000000000000000
[ 57.698876][ T705] R10: 0000001b33620000 R11: 0000000000000246 R12: 00007ffd9fe4a040
[ 57.709179][ T705] R13: 00007f4b2e625fac R14: 000000000000dec2 R15: 00007f4b2e625fa0
[ 57.717657][ T705]
[ 57.720896][ T705] ---[ end trace 0000000000000000 ]---
[ 57.741175][ T8] device veth1_macvtap left promiscuous mode
[ 57.757337][ T794] ------------[ cut here ]------------
[ 57.757685][ T793] ------------[ cut here ]------------
[ 57.763800][ T794] refcount_t: underflow; use-after-free.
[ 57.764202][ T794] WARNING: CPU: 0 PID: 794 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 57.770215][ T793] WARNING: CPU: 1 PID: 793 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 57.776567][ T794] Modules linked in:
[ 57.776587][ T794] CPU: 0 PID: 794 Comm: syz.1.213 Tainted: G B W syzkaller #0
[ 57.776611][ T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 57.776621][ T794] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 57.776654][ T794] Code: 05 01 48 c7 c7 80 0c ca 85 e8 bc 28 d9 fe 0f 0b eb c3 e8 13 9a 08 ff c6 05 f4 c9 26 05 01 48 c7 c7 e0 0c ca 85 e8 a0 28 d9 fe <0f> 0b eb a7 e8 f7 99 08 ff c6 05 d5 c9 26 05 01 48 c7 c7 20 0c ca
[ 57.776669][ T794] RSP: 0018:ffffc90000f6fc60 EFLAGS: 00010246
[ 57.776686][ T794] RAX: b29d4ca8a9991800 RBX: 0000000000000003 RCX: ffff88811690a880
[ 57.776699][ T794] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 57.776709][ T794] RBP: ffffc90000f6fc70 R08: ffff8881f6e2759b R09: 1ffff1103edc4eb3
[ 57.776721][ T794] R10: dffffc0000000000 R11: ffffed103edc4eb4 R12: 0000000000000000
[ 57.776733][ T794] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000
[ 57.787608][ T793] Modules linked in:
[ 57.787625][ T793] CPU: 1 PID: 793 Comm: syz.3.212 Tainted: G B W syzkaller #0
[ 57.798419][ T794] FS: 0000555589854500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 57.798447][ T794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.798461][ T794] CR2: 0000200000000740 CR3: 0000000122663000 CR4: 00000000003506b0
[ 57.802586][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 57.802602][ T793] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 57.811442][ T794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.811466][ T794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.824190][ T793] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 57.824216][ T793] RSP: 0018:ffffc90000af7cb0 EFLAGS: 00010293
[ 57.824235][ T793] RAX: ffffffff849bb307 RBX: ffff8881126fc000 RCX: ffff888112506540
[ 57.824251][ T793] RDX: 0000000000000000 RSI: 0000000024cd2108 RDI: 000000000c04eb7d
[ 57.824263][ T793] RBP: ffffc90000af7cd0 R08: ffff8881126fc083 R09: 1ffff110224df810
[ 57.832748][ T794] Call Trace:
[ 57.832763][ T794]
[ 57.832770][ T794] l2tp_session_put+0xc8/0x1a0
[ 57.832796][ T794] l2tp_session_delete+0x3df/0x4d0
[ 57.832815][ T794] pppol2tp_release+0x169/0x2b0
[ 57.855945][ T793] R10: dffffc0000000000 R11: ffffed10224df811 R12: dffffc0000000000
[ 57.862728][ T794] sock_close+0xc9/0x220
[ 57.870860][ T793] R13: dffffc0000000000 R14: 0000000024cd2108 R15: ffff88811079d400
[ 57.878808][ T794] ? __cfi_sock_close+0x10/0x10
[ 57.887440][ T793] FS: 00005555852b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 57.895486][ T794] __fput+0x1fd/0x8f0
[ 57.903622][ T793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.903644][ T793] CR2: 0000200000000740 CR3: 00000001224b9000 CR4: 00000000003506a0
[ 57.903663][ T793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.903674][ T793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.903686][ T793] Call Trace:
[ 57.903691][ T793]
[ 57.903698][ T793] pppol2tp_release+0x150/0x2b0
[ 57.903722][ T793] sock_close+0xc9/0x220
[ 57.903745][ T793] ? __cfi_sock_close+0x10/0x10
[ 57.907850][ T794] ____fput+0x15/0x20
[ 57.916706][ T793] __fput+0x1fd/0x8f0
[ 57.916731][ T793] ____fput+0x15/0x20
[ 57.916750][ T793] task_work_run+0x1e1/0x250
[ 57.926327][ T794] task_work_run+0x1e1/0x250
[ 57.933885][ T793] ? __cfi_task_work_run+0x10/0x10
[ 57.942345][ T794] ? __cfi_task_work_run+0x10/0x10
[ 57.952616][ T793] ? __cfi___close_range+0x10/0x10
[ 57.952640][ T793] exit_to_user_mode_loop+0x9b/0xb0
[ 57.959542][ T794] ? __cfi___close_range+0x10/0x10
[ 57.969457][ T793] exit_to_user_mode_prepare+0x87/0xd0
[ 57.979324][ T794] exit_to_user_mode_loop+0x9b/0xb0
[ 58.002275][ T793] syscall_exit_to_user_mode+0x1a/0x30
[ 58.009243][ T794] exit_to_user_mode_prepare+0x87/0xd0
[ 58.020603][ T793] do_syscall_64+0x58/0xa0
[ 58.030277][ T794] syscall_exit_to_user_mode+0x1a/0x30
[ 58.041778][ T793] ? clear_bhb_loop+0x30/0x80
[ 58.046183][ T794] do_syscall_64+0x58/0xa0
[ 58.049533][ T793] ? clear_bhb_loop+0x30/0x80
[ 58.055414][ T794] ? clear_bhb_loop+0x30/0x80
[ 58.060950][ T793] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 58.066962][ T794] ? clear_bhb_loop+0x30/0x80
[ 58.076551][ T793] RIP: 0033:0x7f4b2e39e0d9
[ 58.081356][ T794] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 58.090894][ T793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 58.090918][ T793] RSP: 002b:00007ffd9fe49f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 58.090939][ T793] RAX: 0000000000000000 RBX: 00007ffd9fe4a000 RCX: 00007f4b2e39e0d9
[ 58.096844][ T794] RIP: 0033:0x7f8a2f19e0d9
[ 58.107257][ T793] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 58.112263][ T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 58.119213][ T793] RBP: 000000000000e181 R08: 0000000000000001 R09: 0000000000000000
[ 58.128565][ T794] RSP: 002b:00007ffea073e988 EFLAGS: 00000246
[ 58.137008][ T793] R10: 0000001b33620000 R11: 0000000000000246 R12: 00007ffd9fe4a040
[ 58.137027][ T793] R13: 00007f4b2e625fac R14: 000000000000e1b4 R15: 00007f4b2e625fa0
[ 58.146972][ T794] ORIG_RAX: 00000000000001b4
[ 58.150711][ T793]
[ 58.154447][ T794] RAX: 0000000000000000 RBX: 00007ffea073ea70 RCX: 00007f8a2f19e0d9
[ 58.160083][ T793] ---[ end trace 0000000000000000 ]---
[ 58.164332][ T794] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 58.342170][ T8] device veth0_vlan left promiscuous mode
[ 58.344076][ T794] RBP: 000000000000e182 R08: 0000000000000001 R09: 0000000000000000
[ 58.459722][ T794] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007ffea073eab0
[ 58.468237][ T794] R13: 00007f8a2f425fac R14: 000000000000e1b5 R15: 00007f8a2f425fa0
[ 58.477063][ T794]
[ 58.480108][ T794] ---[ end trace 0000000000000000 ]---
[ 58.561845][ T860] ------------[ cut here ]------------
[ 58.568176][ T860] WARNING: CPU: 1 PID: 860 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 58.578950][ T860] Modules linked in:
[ 58.583044][ T860] CPU: 1 PID: 860 Comm: syz.4.246 Tainted: G B W syzkaller #0
[ 58.593060][ T860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 58.605402][ T860] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 58.612329][ T860] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 58.634844][ T860] RSP: 0018:ffffc9000148fcb0 EFLAGS: 00010293
[ 58.641770][ T860] RAX: ffffffff849bb307 RBX: ffff888112527000 RCX: ffff88812f52e540
[ 58.650551][ T860] RDX: 0000000000000000 RSI: 00000000226d5040 RDI: 000000000c04eb7d
[ 58.659552][ T860] RBP: ffffc9000148fcd0 R08: ffff888112527083 R09: 1ffff110224a4e10
[ 58.669108][ T860] R10: dffffc0000000000 R11: ffffed10224a4e11 R12: dffffc0000000000
[ 58.677492][ T860] R13: dffffc0000000000 R14: 00000000226d5040 R15: ffff888122546000
[ 58.685821][ T860] FS: 000055555fd65500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 58.696110][ T860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.703088][ T860] CR2: 00007fdf30470000 CR3: 000000011289e000 CR4: 00000000003506a0
[ 58.712796][ T860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.722342][ T860] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.730861][ T860] Call Trace:
[ 58.734532][ T860]
[ 58.737651][ T860] pppol2tp_release+0x150/0x2b0
[ 58.743038][ T860] sock_close+0xc9/0x220
[ 58.747956][ T860] ? __cfi_sock_close+0x10/0x10
[ 58.753023][ T860] __fput+0x1fd/0x8f0
[ 58.757326][ T860] ____fput+0x15/0x20
[ 58.761612][ T860] task_work_run+0x1e1/0x250
[ 58.766619][ T860] ? __cfi_task_work_run+0x10/0x10
[ 58.772812][ T860] ? __cfi___close_range+0x10/0x10
[ 58.778219][ T860] exit_to_user_mode_loop+0x9b/0xb0
[ 58.783751][ T860] exit_to_user_mode_prepare+0x87/0xd0
[ 58.790173][ T860] syscall_exit_to_user_mode+0x1a/0x30
[ 58.795852][ T860] do_syscall_64+0x58/0xa0
[ 58.800637][ T860] ? clear_bhb_loop+0x30/0x80
[ 58.806062][ T860] ? clear_bhb_loop+0x30/0x80
[ 58.811139][ T860] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 58.818021][ T860] RIP: 0033:0x7ff0a9f9e0d9
[ 58.824124][ T860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 58.847685][ T860] RSP: 002b:00007ffda945f1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 58.857118][ T860] RAX: 0000000000000000 RBX: 00007ffda945f2b0 RCX: 00007ff0a9f9e0d9
[ 58.866217][ T860] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 58.875347][ T860] RBP: 000000000000e4a0 R08: 0000000000000001 R09: 0000000000000000
[ 58.883461][ T860] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007ffda945f2f0
[ 58.891932][ T860] R13: 00007ff0aa225fac R14: 000000000000e4d9 R15: 00007ff0aa225fa0
[ 58.900151][ T860]
[ 58.903235][ T860] ---[ end trace 0000000000000000 ]---
[ 58.935943][ T872] ------------[ cut here ]------------
[ 58.941630][ T872] WARNING: CPU: 0 PID: 872 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 58.951965][ T872] Modules linked in:
[ 58.956107][ T872] CPU: 0 PID: 872 Comm: syz.6.252 Tainted: G B W syzkaller #0
[ 58.965261][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 58.976064][ T872] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
2026/08/06 05:22:08 executed programs: 242
[ 58.982718][ T872] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 59.003548][ T872] RSP: 0018:ffffc90000b67cb0 EFLAGS: 00010293
[ 59.009846][ T872] RAX: ffffffff849bb307 RBX: ffff888111ee2000 RCX: ffff88810ff22880
[ 59.018069][ T872] RDX: 0000000000000000 RSI: 000000001ac57a80 RDI: 000000000c04eb7d
[ 59.027525][ T872] RBP: ffffc90000b67cd0 R08: ffff888111ee2083 R09: 1ffff110223dc410
[ 59.035834][ T872] R10: dffffc0000000000 R11: ffffed10223dc411 R12: dffffc0000000000
[ 59.043932][ T872] R13: dffffc0000000000 R14: 000000001ac57a80 R15: ffff88810dc06800
[ 59.052300][ T872] FS: 00005555646fc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 59.061901][ T872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.069466][ T872] CR2: 000055558986f908 CR3: 00000001148ea000 CR4: 00000000003506b0
[ 59.078565][ T872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.087790][ T872] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.097427][ T872] Call Trace:
[ 59.100828][ T872]
[ 59.103826][ T872] pppol2tp_release+0x150/0x2b0
[ 59.108919][ T872] sock_close+0xc9/0x220
[ 59.113304][ T872] ? __cfi_sock_close+0x10/0x10
[ 59.118882][ T872] __fput+0x1fd/0x8f0
[ 59.123002][ T872] ____fput+0x15/0x20
[ 59.127401][ T872] task_work_run+0x1e1/0x250
[ 59.132411][ T872] ? __cfi_task_work_run+0x10/0x10
[ 59.137896][ T872] ? __cfi___close_range+0x10/0x10
[ 59.143049][ T872] exit_to_user_mode_loop+0x9b/0xb0
[ 59.148317][ T872] exit_to_user_mode_prepare+0x87/0xd0
[ 59.153900][ T872] syscall_exit_to_user_mode+0x1a/0x30
[ 59.159573][ T872] do_syscall_64+0x58/0xa0
[ 59.164051][ T872] ? clear_bhb_loop+0x30/0x80
[ 59.169544][ T872] ? clear_bhb_loop+0x30/0x80
[ 59.175249][ T872] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 59.182936][ T872] RIP: 0033:0x7fdf3059e0d9
[ 59.187600][ T872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 59.209102][ T872] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 59.217811][ T872] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 59.226236][ T872] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 59.235352][ T872] RBP: 000000000000e60e R08: 0000000000000001 R09: 0000000000000000
[ 59.244024][ T872] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 59.253527][ T872] R13: 00007fdf30825fac R14: 000000000000e650 R15: 00007fdf30825fa0
[ 59.263069][ T872]
[ 59.267161][ T872] ---[ end trace 0000000000000000 ]---
[ 59.296735][ T933] ------------[ cut here ]------------
[ 59.302856][ T933] WARNING: CPU: 1 PID: 933 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 59.314553][ T933] Modules linked in:
[ 59.319135][ T933] CPU: 1 PID: 933 Comm: syz.3.283 Tainted: G B W syzkaller #0
[ 59.329104][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 59.339883][ T933] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 59.347474][ T933] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 59.369779][ T933] RSP: 0018:ffffc90000d47cb0 EFLAGS: 00010293
[ 59.376810][ T933] RAX: ffffffff849bb307 RBX: ffff888130164000 RCX: ffff88812d8ca880
[ 59.385341][ T933] RDX: 0000000000000000 RSI: 000000002e80b280 RDI: 000000000c04eb7d
[ 59.393829][ T933] RBP: ffffc90000d47cd0 R08: ffff888130164083 R09: 1ffff1102602c810
[ 59.402442][ T933] R10: dffffc0000000000 R11: ffffed102602c811 R12: dffffc0000000000
[ 59.410759][ T933] R13: dffffc0000000000 R14: 000000002e80b280 R15: ffff88812e2c6c00
[ 59.419067][ T933] FS: 00005555852b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 59.428351][ T933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.435398][ T933] CR2: 00007fdf30827dac CR3: 000000012d00b000 CR4: 00000000003506a0
[ 59.443885][ T933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.451917][ T933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.460712][ T933] Call Trace:
[ 59.464189][ T933]
[ 59.467185][ T933] pppol2tp_release+0x150/0x2b0
[ 59.472484][ T933] sock_close+0xc9/0x220
[ 59.477047][ T933] ? __cfi_sock_close+0x10/0x10
[ 59.482138][ T933] __fput+0x1fd/0x8f0
[ 59.486317][ T933] ____fput+0x15/0x20
[ 59.490680][ T933] task_work_run+0x1e1/0x250
[ 59.495922][ T933] ? __cfi_task_work_run+0x10/0x10
[ 59.501522][ T933] ? __cfi___close_range+0x10/0x10
[ 59.506769][ T933] exit_to_user_mode_loop+0x9b/0xb0
[ 59.512040][ T933] exit_to_user_mode_prepare+0x87/0xd0
[ 59.517659][ T933] syscall_exit_to_user_mode+0x1a/0x30
[ 59.523355][ T933] do_syscall_64+0x58/0xa0
[ 59.527848][ T933] ? clear_bhb_loop+0x30/0x80
[ 59.532902][ T933] ? clear_bhb_loop+0x30/0x80
[ 59.537672][ T933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 59.543956][ T933] RIP: 0033:0x7f4b2e39e0d9
[ 59.548640][ T933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 59.569811][ T933] RSP: 002b:00007ffd9fe49f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 59.579754][ T933] RAX: 0000000000000000 RBX: 00007ffd9fe4a000 RCX: 00007f4b2e39e0d9
[ 59.589199][ T933] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 59.598045][ T933] RBP: 000000000000e781 R08: 0000000000000001 R09: 0000000000000000
[ 59.607356][ T933] R10: 0000001b33620000 R11: 0000000000000246 R12: 00007ffd9fe4a040
[ 59.616944][ T933] R13: 00007f4b2e625fac R14: 000000000000e7b7 R15: 00007f4b2e625fa0
[ 59.625759][ T933]
[ 59.629060][ T933] ---[ end trace 0000000000000000 ]---
[ 59.677174][ T993] ------------[ cut here ]------------
[ 59.682986][ T993] WARNING: CPU: 1 PID: 993 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 59.693241][ T993] Modules linked in:
[ 59.698772][ T993] CPU: 1 PID: 993 Comm: syz.6.310 Tainted: G B W syzkaller #0
[ 59.708109][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 59.718598][ T993] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 59.725327][ T993] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 59.746184][ T993] RSP: 0018:ffffc9000105fcb0 EFLAGS: 00010293
[ 59.752481][ T993] RAX: ffffffff849bb307 RBX: ffff8881186cb000 RCX: ffff88812e6f5100
[ 59.761415][ T993] RDX: 0000000000000000 RSI: 000000001ff90000 RDI: 000000000c04eb7d
[ 59.773353][ T993] RBP: ffffc9000105fcd0 R08: ffff8881186cb083 R09: 1ffff110230d9610
[ 59.785412][ T993] R10: dffffc0000000000 R11: ffffed10230d9611 R12: dffffc0000000000
[ 59.793989][ T993] R13: dffffc0000000000 R14: 000000001ff90000 R15: ffff888130081800
[ 59.804853][ T993] FS: 00005555646fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 59.816614][ T993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.828912][ T993] CR2: 0000200000000740 CR3: 0000000122503000 CR4: 00000000003506a0
[ 59.840563][ T993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.850443][ T993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.860496][ T993] Call Trace:
[ 59.864515][ T993]
[ 59.867836][ T993] pppol2tp_release+0x150/0x2b0
[ 59.874040][ T993] sock_close+0xc9/0x220
[ 59.879450][ T993] ? __cfi_sock_close+0x10/0x10
[ 59.884607][ T993] __fput+0x1fd/0x8f0
[ 59.889626][ T993] ____fput+0x15/0x20
[ 59.893649][ T993] task_work_run+0x1e1/0x250
[ 59.898794][ T993] ? __cfi_task_work_run+0x10/0x10
[ 59.904101][ T993] ? __cfi___close_range+0x10/0x10
[ 59.910152][ T993] exit_to_user_mode_loop+0x9b/0xb0
[ 59.915778][ T993] exit_to_user_mode_prepare+0x87/0xd0
[ 59.921704][ T993] syscall_exit_to_user_mode+0x1a/0x30
[ 59.927437][ T993] do_syscall_64+0x58/0xa0
[ 59.932347][ T993] ? clear_bhb_loop+0x30/0x80
[ 59.937469][ T993] ? clear_bhb_loop+0x30/0x80
[ 59.942363][ T993] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 59.949036][ T993] RIP: 0033:0x7fdf3059e0d9
[ 59.955133][ T993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 59.978507][ T993] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 59.988837][ T993] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 59.996985][ T993] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 60.006243][ T993] RBP: 000000000000e8e5 R08: 0000000000000001 R09: 0000000000000000
[ 60.015584][ T993] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 60.023865][ T993] R13: 00007fdf30825fac R14: 000000000000e923 R15: 00007fdf30825fa0
[ 60.033074][ T993]
[ 60.036492][ T993] ---[ end trace 0000000000000000 ]---
[ 60.057393][ T1052] ------------[ cut here ]------------
[ 60.057402][ T1054] ------------[ cut here ]------------
[ 60.057409][ T1054] WARNING: CPU: 0 PID: 1054 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 60.063153][ T1052] WARNING: CPU: 1 PID: 1052 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 60.063186][ T1052] Modules linked in:
[ 60.069215][ T1054] Modules linked in:
[ 60.079913][ T1052]
[ 60.079927][ T1052] CPU: 1 PID: 1052 Comm: syz.6.340 Tainted: G B W syzkaller #0
[ 60.079949][ T1052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 60.091237][ T1054]
[ 60.095198][ T1052] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 60.099339][ T1054] CPU: 0 PID: 1054 Comm: syz.3.341 Tainted: G B W syzkaller #0
[ 60.101812][ T1052] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 60.111089][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 60.111102][ T1054] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 60.121462][ T1052] RSP: 0018:ffffc900010afcb0 EFLAGS: 00010293
[ 60.121493][ T1052] RAX: ffffffff849bb307 RBX: ffff888118de3000 RCX: ffff888119993cc0
[ 60.121508][ T1052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 60.121520][ T1052] RBP: ffffc900010afcd0 R08: ffff888118de3083 R09: 1ffff110231bc610
[ 60.121534][ T1052] R10: dffffc0000000000 R11: ffffed10231bc611 R12: dffffc0000000000
[ 60.121549][ T1052] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88812f092800
[ 60.121563][ T1052] FS: 00005555646fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 60.121579][ T1052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.123921][ T1054] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 60.130352][ T1052] CR2: 0000200000000740 CR3: 000000012f8b8000 CR4: 00000000003506a0
[ 60.130374][ T1052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.130385][ T1052] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.130398][ T1052] Call Trace:
[ 60.130403][ T1052]
[ 60.130410][ T1052] pppol2tp_release+0x150/0x2b0
[ 60.130438][ T1052] sock_close+0xc9/0x220
[ 60.130463][ T1052] ? __cfi_sock_close+0x10/0x10
[ 60.139678][ T1054] RSP: 0018:ffffc90000d47cb0 EFLAGS: 00010293
[ 60.159821][ T1052] __fput+0x1fd/0x8f0
[ 60.159855][ T1052] ____fput+0x15/0x20
[ 60.159877][ T1052] task_work_run+0x1e1/0x250
[ 60.159900][ T1052] ? __cfi_task_work_run+0x10/0x10
[ 60.159922][ T1052] ? __cfi___close_range+0x10/0x10
[ 60.170368][ T1054]
[ 60.176911][ T1052] exit_to_user_mode_loop+0x9b/0xb0
[ 60.176936][ T1052] exit_to_user_mode_prepare+0x87/0xd0
[ 60.176956][ T1052] syscall_exit_to_user_mode+0x1a/0x30
[ 60.176975][ T1052] do_syscall_64+0x58/0xa0
[ 60.176995][ T1052] ? clear_bhb_loop+0x30/0x80
[ 60.177012][ T1052] ? clear_bhb_loop+0x30/0x80
[ 60.177028][ T1052] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 60.183179][ T1054] RAX: ffffffff849bb307 RBX: ffff888112b89000 RCX: ffff88811a4c5100
[ 60.191497][ T1052] RIP: 0033:0x7fdf3059e0d9
[ 60.191529][ T1052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 60.191545][ T1052] RSP: 002b:00007ffeb385cb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 60.191566][ T1052] RAX: 0000000000000000 RBX: 00007ffeb385cc70 RCX: 00007fdf3059e0d9
[ 60.191580][ T1052] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 60.191592][ T1052] RBP: 000000000000ea7e R08: 0000000000000001 R09: 0000000000000000
[ 60.191603][ T1052] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffeb385ccb0
[ 60.191616][ T1052] R13: 00007fdf30825fac R14: 000000000000eab1 R15: 00007fdf30825fa0
[ 60.201080][ T1054] RDX: 0000000000000000 RSI: 00000000191aaf40 RDI: 000000000c04eb7d
[ 60.210171][ T1052]
[ 60.210186][ T1052] ---[ end trace 0000000000000000 ]---
[ 60.491088][ T1054] RBP: ffffc90000d47cd0 R08: ffff888112b89083 R09: 1ffff11022571210
[ 60.499420][ T1054] R10: dffffc0000000000 R11: ffffed1022571211 R12: dffffc0000000000
[ 60.508155][ T1054] R13: dffffc0000000000 R14: 00000000191aaf40 R15: ffff888118271400
[ 60.516869][ T1054] FS: 00005555852b0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 60.526084][ T1054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.533135][ T1054] CR2: 0000200000000740 CR3: 000000012224e000 CR4: 00000000003506b0
[ 60.542095][ T1054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.550597][ T1054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.559340][ T1054] Call Trace:
[ 60.562650][ T1054]
[ 60.566208][ T1054] pppol2tp_release+0x150/0x2b0
[ 60.571377][ T1054] sock_close+0xc9/0x220
[ 60.575773][ T1054] ? __cfi_sock_close+0x10/0x10
[ 60.580846][ T1054] __fput+0x1fd/0x8f0
[ 60.584967][ T1054] ____fput+0x15/0x20
[ 60.589644][ T1054] task_work_run+0x1e1/0x250
[ 60.594955][ T1054] ? __cfi_task_work_run+0x10/0x10
[ 60.600683][ T1054] ? __cfi___close_range+0x10/0x10
[ 60.607408][ T1054] exit_to_user_mode_loop+0x9b/0xb0
[ 60.613202][ T1054] exit_to_user_mode_prepare+0x87/0xd0
[ 60.619404][ T1054] syscall_exit_to_user_mode+0x1a/0x30
[ 60.625104][ T1054] do_syscall_64+0x58/0xa0
[ 60.630673][ T1054] ? clear_bhb_loop+0x30/0x80
[ 60.635731][ T1054] ? clear_bhb_loop+0x30/0x80
[ 60.640610][ T1054] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 60.646761][ T1054] RIP: 0033:0x7f4b2e39e0d9
[ 60.651501][ T1054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 60.672736][ T1054] RSP: 002b:00007ffd9fe49f18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 60.681737][ T1054] RAX: 0000000000000000 RBX: 00007ffd9fe4a000 RCX: 00007f4b2e39e0d9
[ 60.690094][ T1054] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 60.699074][ T1054] RBP: 000000000000ea7d R08: 0000000000000001 R09: 0000000000000000
[ 60.707945][ T1054] R10: 0000001b33620000 R11: 0000000000000246 R12: 00007ffd9fe4a040
[ 60.716049][ T1054] R13: 00007f4b2e625fac R14: 000000000000eab0 R15: 00007f4b2e625fa0
[ 60.724031][ T1054]
[ 60.727461][ T1054] ---[ end trace 0000000000000000 ]---
[ 60.752291][ T1068] ------------[ cut here ]------------
[ 60.752340][ T1062] ------------[ cut here ]------------
[ 60.758367][ T1068] WARNING: CPU: 0 PID: 1068 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 60.764145][ T1062] WARNING: CPU: 1 PID: 1062 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 60.764179][ T1062] Modules linked in:
[ 60.764192][ T1062] CPU: 1 PID: 1062 Comm: syz.0.344 Tainted: G B W syzkaller #0
[ 60.764211][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 60.764223][ T1062] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 60.775353][ T1068] Modules linked in:
[ 60.785630][ T1062] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 60.789568][ T1068]