syzkaller
syzkaller login: [ 9.366512][ T106] udevd (106) used greatest stack depth: 21248 bytes left
[ 14.710716][ T28] kauditd_printk_skb: 31 callbacks suppressed
[ 14.710731][ T28] audit: type=1400 audit(1785693180.550:59): avc: denied { transition } for pid=226 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 14.715460][ T28] audit: type=1400 audit(1785693180.550:60): avc: denied { noatsecure } for pid=226 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 14.719166][ T28] audit: type=1400 audit(1785693180.570:61): avc: denied { write } for pid=226 comm="sh" path="pipe:[15397]" dev="pipefs" ino=15397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 14.722675][ T28] audit: type=1400 audit(1785693180.570:62): avc: denied { rlimitinh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 14.725715][ T28] audit: type=1400 audit(1785693180.570:63): avc: denied { siginh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts.
2026/08/02 17:53:10 parsed 1 programs
2026/08/02 17:53:10 serving rpc on tcp://38537
[ 24.405727][ T28] audit: type=1400 audit(1785693190.250:64): avc: denied { node_bind } for pid=296 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.426499][ T28] audit: type=1400 audit(1785693190.250:65): avc: denied { module_request } for pid=296 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.646158][ T28] audit: type=1400 audit(1785693191.490:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.649485][ T302] cgroup: Unknown subsys name 'net'
[ 25.668974][ T28] audit: type=1400 audit(1785693191.490:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.696263][ T28] audit: type=1400 audit(1785693191.530:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.696671][ T302] cgroup: Unknown subsys name 'devices'
[ 25.836077][ T302] cgroup: Unknown subsys name 'hugetlb'
[ 25.841722][ T302] cgroup: Unknown subsys name 'rlimit'
[ 25.954832][ T28] audit: type=1400 audit(1785693191.800:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.978054][ T28] audit: type=1400 audit(1785693191.800:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.998695][ T28] audit: type=1400 audit(1785693191.800:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.016034][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.019722][ T28] audit: type=1400 audit(1785693191.800:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.047800][ T28] audit: type=1400 audit(1785693191.800:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.080471][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.866371][ T314] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.353115][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.404163][ T334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.411736][ T334] device bridge_slave_0 entered promiscuous mode
[ 27.434756][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.441822][ T334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.449357][ T334] device bridge_slave_1 entered promiscuous mode
[ 27.567931][ T334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.575036][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.582342][ T334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.589412][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.615030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.622881][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.630203][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.649019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.657265][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.664345][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.672044][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.680953][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.688041][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.705128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.713214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.729225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.742468][ T334] device veth0_vlan entered promiscuous mode
[ 27.749331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.758777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.766816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.781633][ T334] device veth1_macvtap entered promiscuous mode
[ 27.789131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.802114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
2026/08/02 17:53:13 executed programs: 0
[ 27.822885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.041380][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.048540][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.056038][ T372] device bridge_slave_0 entered promiscuous mode
[ 28.077831][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.084980][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.092364][ T372] device bridge_slave_1 entered promiscuous mode
[ 28.187947][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.195058][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.202454][ T379] device bridge_slave_0 entered promiscuous mode
[ 28.211181][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.218334][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.225800][ T379] device bridge_slave_1 entered promiscuous mode
[ 28.269498][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.276713][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.284367][ T377] device bridge_slave_0 entered promiscuous mode
[ 28.291351][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.298457][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.305965][ T377] device bridge_slave_1 entered promiscuous mode
[ 28.312485][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.319585][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.327129][ T374] device bridge_slave_0 entered promiscuous mode
[ 28.337097][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.344185][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.351650][ T374] device bridge_slave_1 entered promiscuous mode
[ 28.422116][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.429265][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.436878][ T380] device bridge_slave_0 entered promiscuous mode
[ 28.452990][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.460103][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.467662][ T380] device bridge_slave_1 entered promiscuous mode
[ 28.615311][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.622408][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.629732][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.636794][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.677624][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.684731][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.692028][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.699099][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.735922][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.743025][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.750353][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.757420][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.793226][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.801175][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.809270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.817109][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.824605][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.831815][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.839217][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.847463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.855020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.888269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.896657][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.903700][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.911339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.919711][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.926847][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.934749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.943079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.951447][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.958544][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.966158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.974650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.982798][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.989869][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.997344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.005600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 29.024541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.032463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.040155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.048556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.069038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.077286][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.084363][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.091697][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.099249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.106848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.115178][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.122205][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.129710][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.137981][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.145049][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.152453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.160789][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.167880][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.175301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.206901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.215338][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.223621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.232471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.240876][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.247986][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.255718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.264183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.272326][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.279404][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.286989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.295157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.303095][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.311471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.319715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.327885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.349475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 29.357329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.365028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.372476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.380828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.389092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.397676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.413930][ T372] device veth0_vlan entered promiscuous mode
[ 29.420142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.428513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.436703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.445234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.457760][ T374] device veth0_vlan entered promiscuous mode
[ 29.473421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.481665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.489897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.498050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.506855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.516000][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.534380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.542686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.550955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.559599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.577775][ T372] device veth1_macvtap entered promiscuous mode
[ 29.588008][ T374] device veth1_macvtap entered promiscuous mode
[ 29.595611][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.603304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.611728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.620192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.628845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.637764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.646099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.654436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.662017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.670157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.678443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.686003][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.695652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.703735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.711326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.718928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.732182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.740729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.750477][ T377] device veth0_vlan entered promiscuous mode
[ 29.762683][ T380] device veth0_vlan entered promiscuous mode
[ 29.770759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.778930][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.787663][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.795470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.804308][ T379] device veth0_vlan entered promiscuous mode
[ 29.825527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.833971][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.842323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.850848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.862795][ T377] device veth1_macvtap entered promiscuous mode
[ 29.880944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.889232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.898102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.906593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.914967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.928587][ T379] device veth1_macvtap entered promiscuous mode
[ 29.946708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.955257][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.966494][ T28] kauditd_printk_skb: 32 callbacks suppressed
[ 29.966508][ T28] audit: type=1400 audit(1785693195.810:106): avc: denied { create } for pid=397 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 29.996655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.003555][ T28] audit: type=1400 audit(1785693195.810:107): avc: denied { connect } for pid=397 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 30.006144][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.024849][ C1] ==================================================================
[ 30.037674][ T28] audit: type=1400 audit(1785693195.810:108): avc: denied { ioctl } for pid=397 comm="syz.0.17" path="socket:[17548]" dev="sockfs" ino=17548 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 30.039591][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0
[ 30.071341][ C1] Read of size 8 at addr ffff888117dcbd90 by task syz.0.23/401
[ 30.078883][ C1]
[ 30.081234][ C1] CPU: 1 PID: 401 Comm: syz.0.23 Not tainted syzkaller #0
[ 30.088368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.098430][ C1] Call Trace:
[ 30.101704][ C1]
[ 30.104544][ C1] __dump_stack+0x21/0x24
[ 30.108873][ C1] dump_stack_lvl+0x110/0x170
[ 30.113547][ C1] ? __cfi_dump_stack_lvl+0x8/0x8
[ 30.118570][ C1] ? debug_smp_processor_id+0x17/0x20
[ 30.123948][ C1] ? rcu_cblist_dequeue+0x6c/0xb0
[ 30.128990][ C1] print_address_description+0x71/0x200
[ 30.134534][ C1] print_report+0x4a/0x60
[ 30.138859][ C1] kasan_report+0x122/0x150
[ 30.143360][ C1] ? rcu_cblist_dequeue+0x6c/0xb0
[ 30.148383][ C1] __asan_report_load8_noabort+0x14/0x20
[ 30.154030][ C1] rcu_cblist_dequeue+0x6c/0xb0
[ 30.158891][ C1] rcu_do_batch+0x4bc/0xc30
[ 30.163436][ C1] ? rcu_core+0xf00/0xf00
[ 30.167768][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 30.173579][ C1] ? swake_up_one+0x12d/0x140
[ 30.178269][ C1] ? swake_up_one_online+0x66/0x110
[ 30.183472][ C1] ? rcu_report_qs_rnp+0x37b/0x390
[ 30.188585][ C1] rcu_core+0x486/0xf00
[ 30.192740][ C1] ? rcu_cpu_kthread_park+0x90/0x90
[ 30.197933][ C1] ? __cfi_net_rx_action+0x10/0x10
[ 30.203045][ C1] ? irqtime_account_irq+0x75/0x240
[ 30.208250][ C1] rcu_core_si+0x9/0x10
[ 30.212408][ C1] handle_softirqs+0x1d7/0x600
[ 30.217190][ C1] __do_softirq+0xb/0xd
[ 30.221361][ C1] do_softirq+0xdc/0x130
[ 30.225600][ C1]
[ 30.228527][ C1]
[ 30.231448][ C1] ? __cfi_do_softirq+0x10/0x10
[ 30.236294][ C1] ? _raw_write_lock_bh+0x94/0xf0
[ 30.241323][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10
[ 30.246879][ C1] __local_bh_enable_ip+0x75/0x80
[ 30.252015][ C1] _raw_write_unlock_bh+0x2f/0x50
[ 30.257056][ C1] l2tp_tunnel_destruct+0x1b9/0x270
[ 30.262266][ C1] ? __cfi_l2tp_tunnel_destruct+0x10/0x10
[ 30.267994][ C1] __sk_destruct+0x60/0x5e0
[ 30.272508][ C1] ? __sk_free+0x2fb/0x400
[ 30.276940][ C1] __sk_free+0x30a/0x400
[ 30.281210][ C1] sk_free+0x54/0x90
[ 30.285112][ C1] l2tp_tunnel_put+0xbe/0x1e0
[ 30.289801][ C1] l2tp_session_put+0x87/0x1a0
[ 30.294585][ C1] l2tp_session_delete+0x3df/0x4d0
[ 30.299725][ C1] pppol2tp_release+0x169/0x2b0
[ 30.304605][ C1] sock_close+0xc9/0x220
[ 30.308876][ C1] ? __cfi_sock_close+0x10/0x10
[ 30.313754][ C1] __fput+0x1fd/0x8f0
[ 30.317788][ C1] ____fput+0x15/0x20
[ 30.321807][ C1] task_work_run+0x1e1/0x250
[ 30.326410][ C1] ? __cfi_task_work_run+0x10/0x10
[ 30.331532][ C1] ? __cfi___close_range+0x10/0x10
[ 30.336654][ C1] exit_to_user_mode_loop+0x9b/0xb0
[ 30.341869][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 30.347337][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 30.352810][ C1] do_syscall_64+0x58/0xa0
[ 30.357239][ C1] ? clear_bhb_loop+0x30/0x80
[ 30.361941][ C1] ? clear_bhb_loop+0x30/0x80
[ 30.366654][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.372563][ C1] RIP: 0033:0x7f5ff459e019
[ 30.377000][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 30.396613][ C1] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 30.405054][ C1] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 30.413033][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 30.421011][ C1] RBP: 0000000000007511 R08: 0000000000000001 R09: 0000000000000000
[ 30.428991][ C1] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 30.436976][ C1] R13: 00007f5ff4825fac R14: 000000000000754d R15: 00007f5ff4825fa0
[ 30.444961][ C1]
[ 30.447994][ C1]
[ 30.450321][ C1] Allocated by task 398:
[ 30.454575][ C1] kasan_set_track+0x4b/0x70
[ 30.459181][ C1] kasan_save_alloc_info+0x1f/0x30
[ 30.464299][ C1] __kasan_kmalloc+0x95/0xb0
[ 30.468902][ C1] __kmalloc+0xb4/0x1e0
[ 30.473063][ C1] l2tp_session_create+0x38/0xbd0
[ 30.478100][ C1] pppol2tp_connect+0xbf5/0x1640
[ 30.483055][ C1] __sys_connect+0x3da/0x460
[ 30.487658][ C1] __x64_sys_connect+0x7a/0x90
[ 30.492452][ C1] x64_sys_call+0x88d/0x9a0
[ 30.496969][ C1] do_syscall_64+0x4c/0xa0
[ 30.501395][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.507316][ C1]
[ 30.509659][ C1] Freed by task 360:
[ 30.513557][ C1] kasan_set_track+0x4b/0x70
[ 30.518158][ C1] kasan_save_free_info+0x2b/0x40
[ 30.523192][ C1] ____kasan_slab_free+0x132/0x180
[ 30.528317][ C1] __kasan_slab_free+0x11/0x20
[ 30.533090][ C1] slab_free_freelist_hook+0xc2/0x190
[ 30.538474][ C1] __kmem_cache_free+0xb7/0x1b0
[ 30.543339][ C1] kfree+0x6f/0xf0
[ 30.547068][ C1] l2tp_session_put+0xaf/0x1a0
[ 30.551840][ C1] l2tp_session_delete+0x3df/0x4d0
[ 30.556962][ C1] l2tp_tunnel_del_work+0x199/0x410
[ 30.562174][ C1] process_one_work+0x717/0xc30
[ 30.567036][ C1] worker_thread+0xa4d/0x11d0
[ 30.571726][ C1] kthread+0x281/0x320
[ 30.575807][ C1] ret_from_fork+0x1f/0x30
[ 30.580235][ C1]
[ 30.582563][ C1] Last potentially related work creation:
[ 30.588278][ C1] kasan_save_stack+0x3a/0x60
[ 30.592963][ C1] __kasan_record_aux_stack+0xb6/0xc0
[ 30.598342][ C1] kasan_record_aux_stack_noalloc+0xb/0x10
[ 30.604155][ C1] call_rcu+0xcf/0xf50
[ 30.608234][ C1] pppol2tp_release+0x1e3/0x2b0
[ 30.613102][ C1] sock_close+0xc9/0x220
[ 30.617360][ C1] __fput+0x1fd/0x8f0
[ 30.621366][ C1] ____fput+0x15/0x20
[ 30.625378][ C1] task_work_run+0x1e1/0x250
[ 30.629985][ C1] exit_to_user_mode_loop+0x9b/0xb0
[ 30.635192][ C1] exit_to_user_mode_prepare+0x87/0xd0
[ 30.640657][ C1] syscall_exit_to_user_mode+0x1a/0x30
[ 30.646125][ C1] do_syscall_64+0x58/0xa0
[ 30.650556][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 30.656469][ C1]
[ 30.658803][ C1] The buggy address belongs to the object at ffff888117dcbc00
[ 30.658803][ C1] which belongs to the cache kmalloc-512 of size 512
[ 30.672861][ C1] The buggy address is located 400 bytes inside of
[ 30.672861][ C1] 512-byte region [ffff888117dcbc00, ffff888117dcbe00)
[ 30.686142][ C1]
[ 30.688475][ C1] The buggy address belongs to the physical page:
[ 30.694986][ C1] page:ffffea00045f7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117dc8
[ 30.705233][ C1] head:ffffea00045f7200 order:2 compound_mapcount:0 compound_pincount:0
[ 30.713567][ C1] flags: 0x4000000000010200(slab|head|zone=1)
[ 30.719655][ C1] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00
[ 30.728244][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 30.736833][ C1] page dumped because: kasan: bad access detected
[ 30.743246][ C1] page_owner tracks the page as allocated
[ 30.748978][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 398, tgid 397 (syz.0.17), ts 29968125369, free_ts 29064583128
[ 30.771216][ C1] post_alloc_hook+0x1f5/0x210
[ 30.775999][ C1] prep_new_page+0x1c/0x110
[ 30.780519][ C1] get_page_from_freelist+0x2ca9/0x2d20
[ 30.786081][ C1] __alloc_pages+0x1fa/0x610
[ 30.790687][ C1] alloc_slab_page+0x6e/0xf0
[ 30.795291][ C1] new_slab+0x98/0x3e0
[ 30.799370][ C1] ___slab_alloc+0x70f/0xb70
[ 30.803969][ C1] __slab_alloc+0x5e/0xa0
[ 30.808315][ C1] __kmem_cache_alloc_node+0x204/0x2d0
[ 30.813788][ C1] kmalloc_trace+0x29/0xb0
[ 30.818209][ C1] l2tp_tunnel_create+0x97/0x430
[ 30.823180][ C1] pppol2tp_connect+0x7ef/0x1640
[ 30.828132][ C1] __sys_connect+0x3da/0x460
[ 30.832734][ C1] __x64_sys_connect+0x7a/0x90
[ 30.837511][ C1] x64_sys_call+0x88d/0x9a0
[ 30.842029][ C1] do_syscall_64+0x4c/0xa0
[ 30.846460][ C1] page last free stack trace:
[ 30.851136][ C1] free_unref_page_prepare+0x80c/0x820
[ 30.856611][ C1] free_unref_page+0x93/0x530
[ 30.861297][ C1] __free_pages+0x67/0x100
[ 30.865747][ C1] __free_slab+0xc7/0x1a0
[ 30.870078][ C1] __unfreeze_partials+0x15a/0x190
[ 30.875212][ C1] put_cpu_partial+0xa9/0x100
[ 30.879922][ C1] __slab_free+0x1c4/0x280
[ 30.884350][ C1] ___cache_free+0xbf/0xd0
[ 30.888782][ C1] qlist_free_all+0xc6/0x140
[ 30.893383][ C1] kasan_quarantine_reduce+0x14a/0x170
[ 30.898849][ C1] __kasan_slab_alloc+0x24/0x80
[ 30.903710][ C1] slab_post_alloc_hook+0x4f/0x2d0
[ 30.908837][ C1] kmem_cache_alloc_node+0x179/0x330
[ 30.914147][ C1] __alloc_skb+0xe8/0x4a0
[ 30.918510][ C1] netlink_sendmsg+0x635/0xbd0
[ 30.923297][ C1] __sys_sendto+0x4ac/0x660
[ 30.927817][ C1]
[ 30.930154][ C1] Memory state around the buggy address:
[ 30.935798][ C1] ffff888117dcbc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.943872][ C1] ffff888117dcbd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.951950][ C1] >ffff888117dcbd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.960012][ C1] ^
[ 30.964613][ C1] ffff888117dcbe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.972681][ C1] ffff888117dcbe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 30.980755][ C1] ==================================================================
[ 30.988905][ C1] Disabling lock debugging due to kernel taint
[ 31.002746][ T380] device veth1_macvtap entered promiscuous mode
[ 31.037921][ T28] audit: type=1400 audit(1785693196.880:109): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 31.060173][ T405] ------------[ cut here ]------------
[ 31.065805][ T405] WARNING: CPU: 1 PID: 405 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.075687][ T28] audit: type=1400 audit(1785693196.880:110): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.076136][ T405] Modules linked in:
[ 31.100018][ T28] audit: type=1400 audit(1785693196.880:111): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.101095][ T405] CPU: 1 PID: 405 Comm: syz.6.18 Tainted: G B syzkaller #0
[ 31.123173][ T28] audit: type=1400 audit(1785693196.880:112): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.131214][ T405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.152091][ T28] audit: type=1400 audit(1785693196.880:113): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.161934][ T405] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.182706][ T28] audit: type=1400 audit(1785693196.880:114): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.188714][ T405] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.212147][ T28] audit: type=1400 audit(1785693196.880:115): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 31.231025][ T405] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 31.231045][ T405] RAX: ffffffff849bb307 RBX: ffff888119541000 RCX: ffff888116b68000
[ 31.267610][ T405] RDX: 0000000000000000 RSI: 0000000017d5aa20 RDI: 000000000c04eb7d
[ 31.275628][ T405] RBP: ffffc90000ae7cd0 R08: ffff888119541083 R09: 1ffff110232a8210
[ 31.283628][ T405] R10: dffffc0000000000 R11: ffffed10232a8211 R12: dffffc0000000000
[ 31.291658][ T405] R13: dffffc0000000000 R14: 0000000017d5aa20 R15: ffff888116bb6400
[ 31.299676][ T405] FS: 0000555590ee9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.308819][ T405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.315435][ T405] CR2: 00007f5ff4827dac CR3: 00000001212ef000 CR4: 00000000003506a0
[ 31.323411][ T405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.331423][ T405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.339472][ T405] Call Trace:
[ 31.342794][ T405]
[ 31.345760][ T405] pppol2tp_release+0x150/0x2b0
[ 31.350634][ T405] sock_close+0xc9/0x220
[ 31.354937][ T405] ? __cfi_sock_close+0x10/0x10
[ 31.359819][ T405] __fput+0x1fd/0x8f0
[ 31.363906][ T405] ____fput+0x15/0x20
[ 31.367916][ T405] task_work_run+0x1e1/0x250
[ 31.372516][ T405] ? __cfi_task_work_run+0x10/0x10
[ 31.377686][ T405] ? __cfi___close_range+0x10/0x10
[ 31.382834][ T405] exit_to_user_mode_loop+0x9b/0xb0
[ 31.388167][ T405] exit_to_user_mode_prepare+0x87/0xd0
[ 31.393659][ T405] syscall_exit_to_user_mode+0x1a/0x30
[ 31.399191][ T405] do_syscall_64+0x58/0xa0
[ 31.403648][ T405] ? clear_bhb_loop+0x30/0x80
[ 31.408384][ T405] ? clear_bhb_loop+0x30/0x80
[ 31.413080][ T405] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.419044][ T405] RIP: 0033:0x7f72a9f9e019
[ 31.423483][ T405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.443145][ T405] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.451620][ T405] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 31.459655][ T405] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.467662][ T405] RBP: 0000000000007912 R08: 0000000000000001 R09: 0000000000000000
[ 31.475684][ T405] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 31.483678][ T405] R13: 00007f72aa225fac R14: 0000000000007945 R15: 00007f72aa225fa0
[ 31.491728][ T405]
[ 31.494819][ T405] ---[ end trace 0000000000000000 ]---
[ 31.510425][ T410] ------------[ cut here ]------------
[ 31.516117][ T410] WARNING: CPU: 1 PID: 410 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.526334][ T410] Modules linked in:
[ 31.530342][ T410] CPU: 1 PID: 410 Comm: syz.6.26 Tainted: G B W syzkaller #0
[ 31.539174][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.549490][ T410] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.556248][ T410] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.576104][ T410] RSP: 0018:ffffc90000ae7cb0 EFLAGS: 00010293
[ 31.582216][ T410] RAX: ffffffff849bb307 RBX: ffff888119770000 RCX: ffff888118af0000
[ 31.590414][ T410] RDX: 0000000000000000 RSI: 00000000195d8000 RDI: 000000000c04eb7d
[ 31.598594][ T410] RBP: ffffc90000ae7cd0 R08: ffff888119770083 R09: 1ffff110232ee010
[ 31.606788][ T410] R10: dffffc0000000000 R11: ffffed10232ee011 R12: dffffc0000000000
[ 31.614995][ T410] R13: dffffc0000000000 R14: 00000000195d8000 R15: ffff88811962e800
[ 31.623090][ T410] FS: 0000555590ee9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.632254][ T410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.639070][ T410] CR2: 00007ffca91a2000 CR3: 00000001223e7000 CR4: 00000000003506a0
[ 31.647257][ T410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.655317][ T410] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.663341][ T410] Call Trace:
[ 31.666682][ T410]
[ 31.669635][ T410] pppol2tp_release+0x150/0x2b0
[ 31.674551][ T410] sock_close+0xc9/0x220
[ 31.678837][ T410] ? __cfi_sock_close+0x10/0x10
[ 31.683727][ T410] __fput+0x1fd/0x8f0
[ 31.687782][ T410] ____fput+0x15/0x20
[ 31.691795][ T410] task_work_run+0x1e1/0x250
[ 31.696456][ T410] ? __cfi_task_work_run+0x10/0x10
[ 31.701603][ T410] ? __cfi___close_range+0x10/0x10
[ 31.706776][ T410] exit_to_user_mode_loop+0x9b/0xb0
[ 31.712007][ T410] exit_to_user_mode_prepare+0x87/0xd0
[ 31.717561][ T410] syscall_exit_to_user_mode+0x1a/0x30
[ 31.723063][ T410] do_syscall_64+0x58/0xa0
[ 31.727589][ T410] ? clear_bhb_loop+0x30/0x80
[ 31.732289][ T410] ? clear_bhb_loop+0x30/0x80
[ 31.737150][ T410] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.743149][ T410] RIP: 0033:0x7f72a9f9e019
[ 31.747638][ T410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.767292][ T410] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 31.775783][ T410] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 31.783782][ T410] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 31.791853][ T410] RBP: 0000000000007afc R08: 0000000000000001 R09: 0000000000000000
[ 31.799915][ T410] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 31.807952][ T410] R13: 00007f72aa225fac R14: 0000000000007b2e R15: 00007f72aa225fa0
[ 31.816004][ T410]
[ 31.819050][ T410] ---[ end trace 0000000000000000 ]---
[ 31.831770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.840456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.850286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.858935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.865782][ T430] ------------[ cut here ]------------
[ 31.872498][ T430] WARNING: CPU: 0 PID: 430 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.882772][ T430] Modules linked in:
[ 31.886904][ T430] CPU: 0 PID: 430 Comm: syz.0.36 Tainted: G B W syzkaller #0
[ 31.895575][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 31.905686][ T430] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.912061][ T430] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.931759][ T430] RSP: 0018:ffffc90000b97cb0 EFLAGS: 00010293
[ 31.937884][ T430] RAX: ffffffff849bb307 RBX: ffff888118ef9000 RCX: ffff888118af3cc0
[ 31.945912][ T430] RDX: 0000000000000000 RSI: 0000000018f0c400 RDI: 000000000c04eb7d
[ 31.953967][ T430] RBP: ffffc90000b97cd0 R08: ffff888118ef9083 R09: 1ffff110231df210
[ 31.961943][ T430] R10: dffffc0000000000 R11: ffffed10231df211 R12: dffffc0000000000
[ 31.969971][ T430] R13: dffffc0000000000 R14: 0000000018f0c400 R15: ffff888119634000
[ 31.977985][ T430] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.986962][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.993560][ T430] CR2: 00007f72aad556c8 CR3: 000000012e410000 CR4: 00000000003506b0
[ 32.001625][ T430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.009667][ T430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.017719][ T430] Call Trace:
[ 32.021023][ T430]
[ 32.024042][ T430] pppol2tp_release+0x150/0x2b0
[ 32.028950][ T430] sock_close+0xc9/0x220
[ 32.033222][ T430] ? __cfi_sock_close+0x10/0x10
[ 32.038276][ T430] __fput+0x1fd/0x8f0
[ 32.042284][ T430] ____fput+0x15/0x20
[ 32.046329][ T430] task_work_run+0x1e1/0x250
[ 32.050942][ T430] ? __cfi_task_work_run+0x10/0x10
[ 32.056109][ T430] ? __cfi___close_range+0x10/0x10
[ 32.061243][ T430] exit_to_user_mode_loop+0x9b/0xb0
[ 32.066485][ T430] exit_to_user_mode_prepare+0x87/0xd0
[ 32.071961][ T430] syscall_exit_to_user_mode+0x1a/0x30
[ 32.077464][ T430] do_syscall_64+0x58/0xa0
[ 32.081908][ T430] ? clear_bhb_loop+0x30/0x80
[ 32.086669][ T430] ? clear_bhb_loop+0x30/0x80
[ 32.091371][ T430] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.097319][ T430] RIP: 0033:0x7f5ff459e019
[ 32.101750][ T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.121409][ T430] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.129878][ T430] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 32.137927][ T430] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.145936][ T430] RBP: 0000000000007c47 R08: 0000000000000001 R09: 0000000000000000
[ 32.153958][ T430] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 32.161950][ T430] R13: 00007f5ff4825fac R14: 0000000000007c83 R15: 00007f5ff4825fa0
[ 32.169974][ T430]
[ 32.173006][ T430] ---[ end trace 0000000000000000 ]---
[ 32.195928][ T43] device bridge_slave_1 left promiscuous mode
[ 32.202111][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 32.222348][ T43] device bridge_slave_0 left promiscuous mode
[ 32.233739][ T442] ------------[ cut here ]------------
[ 32.239337][ T442] WARNING: CPU: 1 PID: 442 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.246697][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 32.249725][ T442] Modules linked in:
[ 32.260426][ T442] CPU: 1 PID: 442 Comm: syz.6.42 Tainted: G B W syzkaller #0
[ 32.269183][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.279366][ T442] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.285883][ T442] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.305620][ T442] RSP: 0018:ffffc90000ba7cb0 EFLAGS: 00010293
[ 32.311725][ T442] RAX: ffffffff849bb307 RBX: ffff88811a828000 RCX: ffff88811a50d100
[ 32.319876][ T442] RDX: 0000000000000000 RSI: 000000000ffaab80 RDI: 000000000c04eb7d
[ 32.327984][ T442] RBP: ffffc90000ba7cd0 R08: ffff88811a828083 R09: 1ffff11023505010
[ 32.336032][ T442] R10: dffffc0000000000 R11: ffffed1023505011 R12: dffffc0000000000
[ 32.344074][ T442] R13: dffffc0000000000 R14: 000000000ffaab80 R15: ffff88811963f800
[ 32.352072][ T442] FS: 0000555590ee9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.361185][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.367837][ T442] CR2: 00007f72a9e738e0 CR3: 000000011002f000 CR4: 00000000003506a0
[ 32.375878][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.383908][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.391914][ T442] Call Trace:
[ 32.395246][ T442]
[ 32.398204][ T442] pppol2tp_release+0x150/0x2b0
[ 32.403088][ T442] sock_close+0xc9/0x220
[ 32.407428][ T442] ? __cfi_sock_close+0x10/0x10
[ 32.412318][ T442] __fput+0x1fd/0x8f0
[ 32.416369][ T442] ____fput+0x15/0x20
[ 32.420409][ T442] task_work_run+0x1e1/0x250
[ 32.425040][ T442] ? __cfi_task_work_run+0x10/0x10
[ 32.430184][ T442] ? __cfi___close_range+0x10/0x10
[ 32.435456][ T442] exit_to_user_mode_loop+0x9b/0xb0
[ 32.440688][ T442] exit_to_user_mode_prepare+0x87/0xd0
[ 32.446222][ T442] syscall_exit_to_user_mode+0x1a/0x30
[ 32.451713][ T442] do_syscall_64+0x58/0xa0
[ 32.456191][ T442] ? clear_bhb_loop+0x30/0x80
[ 32.460891][ T442] ? clear_bhb_loop+0x30/0x80
[ 32.465622][ T442] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.471561][ T442] RIP: 0033:0x7f72a9f9e019
[ 32.476053][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.495723][ T442] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.504198][ T442] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 32.512208][ T442] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.520374][ T442] RBP: 0000000000007dd0 R08: 0000000000000001 R09: 0000000000000000
[ 32.528432][ T442] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 32.536472][ T442] R13: 00007f72aa225fac R14: 0000000000007e03 R15: 00007f72aa225fa0
[ 32.544503][ T442]
[ 32.547549][ T442] ---[ end trace 0000000000000000 ]---
[ 32.557738][ T43] device veth1_macvtap left promiscuous mode
[ 32.564404][ T43] device veth0_vlan left promiscuous mode
[ 32.574430][ T458] ------------[ cut here ]------------
[ 32.579920][ T458] WARNING: CPU: 0 PID: 458 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.590065][ T458] Modules linked in:
[ 32.594312][ T458] CPU: 0 PID: 458 Comm: syz.0.50 Tainted: G B W syzkaller #0
[ 32.602932][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.613118][ T458] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.619722][ T458] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.639396][ T458] RSP: 0018:ffffc90000b27cb0 EFLAGS: 00010293
[ 32.645538][ T458] RAX: ffffffff849bb307 RBX: ffff88811aeba000 RCX: ffff888119f60000
[ 32.653559][ T458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 32.661594][ T458] RBP: ffffc90000b27cd0 R08: ffff88811aeba083 R09: 1ffff110235d7410
[ 32.669622][ T458] R10: dffffc0000000000 R11: ffffed10235d7411 R12: dffffc0000000000
[ 32.677976][ T458] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888112551800
[ 32.686137][ T458] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.695136][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.701725][ T458] CR2: 00007f5ff44738e0 CR3: 0000000121a1a000 CR4: 00000000003506b0
[ 32.709770][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.717778][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.725795][ T458] Call Trace:
[ 32.729091][ T458]
[ 32.732034][ T458] pppol2tp_release+0x150/0x2b0
[ 32.736964][ T458] sock_close+0xc9/0x220
[ 32.741233][ T458] ? __cfi_sock_close+0x10/0x10
[ 32.746143][ T458] __fput+0x1fd/0x8f0
[ 32.750184][ T458] ____fput+0x15/0x20
[ 32.754363][ T458] task_work_run+0x1e1/0x250
[ 32.758975][ T458] ? __cfi_task_work_run+0x10/0x10
[ 32.764158][ T458] ? __cfi___close_range+0x10/0x10
[ 32.769303][ T458] exit_to_user_mode_loop+0x9b/0xb0
[ 32.774563][ T458] exit_to_user_mode_prepare+0x87/0xd0
[ 32.780056][ T458] syscall_exit_to_user_mode+0x1a/0x30
[ 32.785566][ T458] do_syscall_64+0x58/0xa0
[ 32.790004][ T458] ? clear_bhb_loop+0x30/0x80
[ 32.794738][ T458] ? clear_bhb_loop+0x30/0x80
[ 32.799439][ T458] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.805398][ T458] RIP: 0033:0x7f5ff459e019
[ 32.809830][ T458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 32.829502][ T458] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 32.838060][ T458] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 32.846101][ T458] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 32.854111][ T458] RBP: 0000000000007f23 R08: 0000000000000001 R09: 0000000000000000
[ 32.862098][ T458] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 32.870117][ T458] R13: 00007f5ff4825fac R14: 0000000000007f58 R15: 00007f5ff4825fa0
[ 32.878133][ T458]
[ 32.881150][ T458] ---[ end trace 0000000000000000 ]---
[ 32.900560][ T464] ------------[ cut here ]------------
[ 32.906172][ T464] WARNING: CPU: 0 PID: 464 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.916493][ T464] Modules linked in:
2026/08/02 17:53:18 executed programs: 43
[ 32.920421][ T464] CPU: 0 PID: 464 Comm: syz.0.53 Tainted: G B W syzkaller #0
[ 32.929139][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 32.939327][ T464] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.945828][ T464] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.965593][ T464] RSP: 0018:ffffc90000bb7cb0 EFLAGS: 00010293
[ 32.971701][ T464] RAX: ffffffff849bb307 RBX: ffff88811b230000 RCX: ffff88811af6bcc0
[ 32.979812][ T464] RDX: 0000000000000000 RSI: 000000001b1e1100 RDI: 000000000c04eb7d
[ 32.987911][ T464] RBP: ffffc90000bb7cd0 R08: ffff88811b230083 R09: 1ffff11023646010
[ 32.996030][ T464] R10: dffffc0000000000 R11: ffffed1023646011 R12: dffffc0000000000
[ 33.004137][ T464] R13: dffffc0000000000 R14: 000000001b1e1100 R15: ffff888118555800
[ 33.012143][ T464] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.021213][ T464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.027913][ T464] CR2: 00007f5ff44738e0 CR3: 0000000121175000 CR4: 00000000003506b0
[ 33.036024][ T464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.044108][ T464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.052087][ T464] Call Trace:
[ 33.055486][ T464]
[ 33.058436][ T464] pppol2tp_release+0x150/0x2b0
[ 33.063290][ T464] sock_close+0xc9/0x220
[ 33.067638][ T464] ? __cfi_sock_close+0x10/0x10
[ 33.072522][ T464] __fput+0x1fd/0x8f0
[ 33.076759][ T464] ____fput+0x15/0x20
[ 33.080763][ T464] task_work_run+0x1e1/0x250
[ 33.085471][ T464] ? __cfi_task_work_run+0x10/0x10
[ 33.090691][ T464] ? __cfi___close_range+0x10/0x10
[ 33.095921][ T464] exit_to_user_mode_loop+0x9b/0xb0
[ 33.101167][ T464] exit_to_user_mode_prepare+0x87/0xd0
[ 33.106773][ T464] syscall_exit_to_user_mode+0x1a/0x30
[ 33.112283][ T464] do_syscall_64+0x58/0xa0
[ 33.116813][ T464] ? clear_bhb_loop+0x30/0x80
[ 33.121512][ T464] ? clear_bhb_loop+0x30/0x80
[ 33.126321][ T464] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.132248][ T464] RIP: 0033:0x7f5ff459e019
[ 33.136786][ T464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.156565][ T464] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.165099][ T464] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 33.173091][ T464] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.181178][ T464] RBP: 0000000000008067 R08: 0000000000000001 R09: 0000000000000000
[ 33.189232][ T464] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 33.197303][ T464] R13: 00007f5ff4825fac R14: 000000000000809a R15: 00007f5ff4825fa0
[ 33.205363][ T464]
[ 33.208380][ T464] ---[ end trace 0000000000000000 ]---
[ 33.229060][ T468] ------------[ cut here ]------------
[ 33.235034][ T468] WARNING: CPU: 0 PID: 468 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.245177][ T468] Modules linked in:
[ 33.249114][ T468] CPU: 0 PID: 468 Comm: syz.0.55 Tainted: G B W syzkaller #0
[ 33.257835][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.268027][ T468] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.274502][ T468] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.294241][ T468] RSP: 0018:ffffc90000bd7cb0 EFLAGS: 00010293
[ 33.300312][ T468] RAX: ffffffff849bb307 RBX: ffff88811b291000 RCX: ffff88811adf9440
[ 33.308404][ T468] RDX: 0000000000000000 RSI: 0000000021826dc0 RDI: 000000000c04eb7d
[ 33.316447][ T468] RBP: ffffc90000bd7cd0 R08: ffff88811b291083 R09: 1ffff11023652210
[ 33.324480][ T468] R10: dffffc0000000000 R11: ffffed1023652211 R12: dffffc0000000000
[ 33.332471][ T468] R13: dffffc0000000000 R14: 0000000021826dc0 R15: ffff888119659400
[ 33.340491][ T468] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.349456][ T468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.356089][ T468] CR2: 00007f5ff44738e0 CR3: 000000012ca00000 CR4: 00000000003506b0
[ 33.364122][ T468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.372106][ T468] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.380130][ T468] Call Trace:
[ 33.383424][ T468]
[ 33.386397][ T468] pppol2tp_release+0x150/0x2b0
[ 33.391274][ T468] sock_close+0xc9/0x220
[ 33.395665][ T468] ? __cfi_sock_close+0x10/0x10
[ 33.400553][ T468] __fput+0x1fd/0x8f0
[ 33.404603][ T468] ____fput+0x15/0x20
[ 33.408607][ T468] task_work_run+0x1e1/0x250
[ 33.413209][ T468] ? __cfi_task_work_run+0x10/0x10
[ 33.418375][ T468] ? __cfi___close_range+0x10/0x10
[ 33.423507][ T468] exit_to_user_mode_loop+0x9b/0xb0
[ 33.428760][ T468] exit_to_user_mode_prepare+0x87/0xd0
[ 33.434261][ T468] syscall_exit_to_user_mode+0x1a/0x30
[ 33.439719][ T468] do_syscall_64+0x58/0xa0
[ 33.444176][ T468] ? clear_bhb_loop+0x30/0x80
[ 33.448871][ T468] ? clear_bhb_loop+0x30/0x80
[ 33.453562][ T468] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.459508][ T468] RIP: 0033:0x7f5ff459e019
[ 33.463968][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.483637][ T468] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.492088][ T468] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 33.500155][ T468] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.508175][ T468] RBP: 00000000000081af R08: 0000000000000001 R09: 0000000000000000
[ 33.516203][ T468] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 33.524234][ T468] R13: 00007f5ff4825fac R14: 00000000000081e6 R15: 00007f5ff4825fa0
[ 33.532223][ T468]
[ 33.535282][ T468] ---[ end trace 0000000000000000 ]---
[ 33.542556][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 33.559013][ T472] ------------[ cut here ]------------
[ 33.564595][ T472] WARNING: CPU: 1 PID: 472 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.574655][ T472] Modules linked in:
[ 33.578582][ T472] CPU: 1 PID: 472 Comm: syz.0.57 Tainted: G B W syzkaller #0
[ 33.582265][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 33.587332][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.596106][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 33.605594][ T472] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.615028][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 33.620000][ T472] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.647791][ T472] RSP: 0018:ffffc90000c9fcb0 EFLAGS: 00010293
[ 33.654101][ T472] RAX: ffffffff849bb307 RBX: ffff88811bb43000 RCX: ffff88811b453cc0
[ 33.662082][ T472] RDX: 0000000000000000 RSI: 000000000931af80 RDI: 000000000c04eb7d
[ 33.670093][ T472] RBP: ffffc90000c9fcd0 R08: ffff88811bb43083 R09: 1ffff11023768610
[ 33.678101][ T472] R10: dffffc0000000000 R11: ffffed1023768611 R12: dffffc0000000000
[ 33.686122][ T472] R13: dffffc0000000000 R14: 000000000931af80 R15: ffff888114100400
[ 33.694139][ T472] FS: 0000555562be0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.703067][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.709698][ T472] CR2: 00007f5ff44738e0 CR3: 00000001103c0000 CR4: 00000000003506a0
[ 33.717726][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.725740][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.733750][ T472] Call Trace:
[ 33.737090][ T472]
[ 33.740053][ T472] pppol2tp_release+0x150/0x2b0
[ 33.744975][ T472] sock_close+0xc9/0x220
[ 33.749253][ T472] ? __cfi_sock_close+0x10/0x10
[ 33.754181][ T472] __fput+0x1fd/0x8f0
[ 33.758208][ T472] ____fput+0x15/0x20
[ 33.762193][ T472] task_work_run+0x1e1/0x250
[ 33.766829][ T472] ? __cfi_task_work_run+0x10/0x10
[ 33.771962][ T472] ? __cfi___close_range+0x10/0x10
[ 33.777118][ T472] exit_to_user_mode_loop+0x9b/0xb0
[ 33.782337][ T472] exit_to_user_mode_prepare+0x87/0xd0
[ 33.787844][ T472] syscall_exit_to_user_mode+0x1a/0x30
[ 33.793320][ T472] do_syscall_64+0x58/0xa0
[ 33.797877][ T472] ? clear_bhb_loop+0x30/0x80
[ 33.802572][ T472] ? clear_bhb_loop+0x30/0x80
[ 33.807437][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.813361][ T472] RIP: 0033:0x7f5ff459e019
[ 33.817833][ T472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.837471][ T472] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 33.845926][ T472] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 33.853944][ T472] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 33.861938][ T472] RBP: 00000000000082fe R08: 0000000000000001 R09: 0000000000000000
[ 33.869949][ T472] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 33.877982][ T472] R13: 00007f5ff4825fac R14: 0000000000008330 R15: 00007f5ff4825fa0
[ 33.886021][ T472]
[ 33.889050][ T472] ---[ end trace 0000000000000000 ]---
[ 33.918224][ T476] ------------[ cut here ]------------
[ 33.923732][ T476] WARNING: CPU: 0 PID: 476 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.933915][ T476] Modules linked in:
[ 33.937843][ T476] CPU: 0 PID: 476 Comm: syz.6.59 Tainted: G B W syzkaller #0
[ 33.946590][ T476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.956836][ T476] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.963195][ T476] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.983148][ T476] RSP: 0018:ffffc90000c9fcb0 EFLAGS: 00010293
[ 33.989365][ T476] RAX: ffffffff849bb307 RBX: ffff888122023000 RCX: ffff88811b450000
[ 33.997421][ T476] RDX: 0000000000000000 RSI: 000000002e413b60 RDI: 000000000c04eb7d
[ 34.005442][ T476] RBP: ffffc90000c9fcd0 R08: ffff888122023083 R09: 1ffff11024404610
[ 34.013455][ T476] R10: dffffc0000000000 R11: ffffed1024404611 R12: dffffc0000000000
[ 34.021551][ T476] R13: dffffc0000000000 R14: 000000002e413b60 R15: ffff88812ed7f800
[ 34.029572][ T476] FS: 0000555590ee9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.038576][ T476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.045233][ T476] CR2: 00007f5ff4827dac CR3: 000000012d26b000 CR4: 00000000003506b0
[ 34.053217][ T476] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.061280][ T476] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.069317][ T476] Call Trace:
[ 34.072602][ T476]
[ 34.075577][ T476] pppol2tp_release+0x150/0x2b0
[ 34.080457][ T476] sock_close+0xc9/0x220
[ 34.084755][ T476] ? __cfi_sock_close+0x10/0x10
[ 34.089633][ T476] __fput+0x1fd/0x8f0
[ 34.093624][ T476] ____fput+0x15/0x20
[ 34.097657][ T476] task_work_run+0x1e1/0x250
[ 34.102272][ T476] ? __cfi_task_work_run+0x10/0x10
[ 34.107432][ T476] ? __cfi___close_range+0x10/0x10
[ 34.112568][ T476] exit_to_user_mode_loop+0x9b/0xb0
[ 34.117839][ T476] exit_to_user_mode_prepare+0x87/0xd0
[ 34.123322][ T476] syscall_exit_to_user_mode+0x1a/0x30
[ 34.128831][ T476] do_syscall_64+0x58/0xa0
[ 34.133290][ T476] ? clear_bhb_loop+0x30/0x80
[ 34.138304][ T476] ? clear_bhb_loop+0x30/0x80
[ 34.142999][ T476] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.148950][ T476] RIP: 0033:0x7f72a9f9e019
[ 34.153399][ T476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.173116][ T476] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.181597][ T476] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 34.189703][ T476] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.197803][ T476] RBP: 0000000000008460 R08: 0000000000000001 R09: 0000000000000000
[ 34.205824][ T476] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 34.213857][ T476] R13: 00007f72aa225fac R14: 0000000000008493 R15: 00007f72aa225fa0
[ 34.222018][ T476]
[ 34.225087][ T476] ---[ end trace 0000000000000000 ]---
[ 34.239189][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 34.251605][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 34.290422][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.308629][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 34.366645][ T508] ------------[ cut here ]------------
[ 34.372158][ T508] WARNING: CPU: 0 PID: 508 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.382394][ T508] Modules linked in:
[ 34.386502][ T508] CPU: 0 PID: 508 Comm: syz.4.21 Tainted: G B W syzkaller #0
[ 34.395246][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.405435][ T508] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.411849][ T508] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.431606][ T508] RSP: 0018:ffffc900017afcb0 EFLAGS: 00010293
[ 34.437826][ T508] RAX: ffffffff849bb307 RBX: ffff88811cb27000 RCX: ffff88811c80bcc0
[ 34.445937][ T508] RDX: 0000000000000000 RSI: 0000000010149880 RDI: 000000000c04eb7d
[ 34.454068][ T508] RBP: ffffc900017afcd0 R08: ffff88811cb27083 R09: 1ffff11023964e10
[ 34.462074][ T508] R10: dffffc0000000000 R11: ffffed1023964e11 R12: dffffc0000000000
[ 34.470192][ T508] R13: dffffc0000000000 R14: 0000000010149880 R15: ffff88811b7e2000
[ 34.478387][ T508] FS: 0000555582d0b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.487468][ T508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.494178][ T508] CR2: 0000555590ee94e8 CR3: 0000000110192000 CR4: 00000000003506b0
[ 34.502190][ T508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.510278][ T508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.518408][ T508] Call Trace:
[ 34.521715][ T508]
[ 34.524699][ T508] pppol2tp_release+0x150/0x2b0
[ 34.529583][ T508] sock_close+0xc9/0x220
[ 34.533939][ T508] ? __cfi_sock_close+0x10/0x10
[ 34.538830][ T508] __fput+0x1fd/0x8f0
[ 34.542855][ T508] ____fput+0x15/0x20
[ 34.546936][ T508] task_work_run+0x1e1/0x250
[ 34.551559][ T508] ? __cfi_task_work_run+0x10/0x10
[ 34.556747][ T508] ? __cfi___close_range+0x10/0x10
[ 34.561894][ T508] exit_to_user_mode_loop+0x9b/0xb0
[ 34.567163][ T508] exit_to_user_mode_prepare+0x87/0xd0
[ 34.572652][ T508] syscall_exit_to_user_mode+0x1a/0x30
[ 34.578203][ T508] do_syscall_64+0x58/0xa0
[ 34.582656][ T508] ? clear_bhb_loop+0x30/0x80
[ 34.587398][ T508] ? clear_bhb_loop+0x30/0x80
[ 34.592101][ T508] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.598108][ T508] RIP: 0033:0x7fea6139e019
[ 34.602545][ T508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.622225][ T508] RSP: 002b:00007ffd94377908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.630712][ T508] RAX: 0000000000000000 RBX: 00007ffd943779f0 RCX: 00007fea6139e019
[ 34.638793][ T508] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.646826][ T508] RBP: 0000000000008618 R08: 0000000000000001 R09: 0000000000000000
[ 34.654871][ T508] R10: 0000001b33a20000 R11: 0000000000000246 R12: 00007ffd94377a30
[ 34.662882][ T508] R13: 00007fea61625fac R14: 0000000000008657 R15: 00007fea61625fa0
[ 34.670946][ T508]
[ 34.674049][ T508] ---[ end trace 0000000000000000 ]---
[ 34.706457][ T540] ------------[ cut here ]------------
[ 34.711967][ T540] WARNING: CPU: 0 PID: 540 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.722050][ T540] Modules linked in:
[ 34.726013][ T540] CPU: 0 PID: 540 Comm: syz.6.89 Tainted: G B W syzkaller #0
[ 34.734674][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 34.744784][ T540] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.751157][ T540] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.770850][ T540] RSP: 0018:ffffc9000181fcb0 EFLAGS: 00010293
[ 34.777002][ T540] RAX: ffffffff849bb307 RBX: ffff88811cb76000 RCX: ffff88811cbb2880
[ 34.785045][ T540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 34.793047][ T540] RBP: ffffc9000181fcd0 R08: ffff88811cb76083 R09: 1ffff1102396ec10
[ 34.801100][ T540] R10: dffffc0000000000 R11: ffffed102396ec11 R12: dffffc0000000000
[ 34.809199][ T540] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888117dd4800
[ 34.817241][ T540] FS: 0000555590ee9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.826253][ T540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.832887][ T540] CR2: 00007f72a9e738e0 CR3: 000000012f0bc000 CR4: 00000000003506b0
[ 34.840949][ T540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.848990][ T540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.857144][ T540] Call Trace:
[ 34.860451][ T540]
[ 34.863409][ T540] pppol2tp_release+0x150/0x2b0
[ 34.868342][ T540] sock_close+0xc9/0x220
[ 34.872631][ T540] ? __cfi_sock_close+0x10/0x10
[ 34.877558][ T540] __fput+0x1fd/0x8f0
[ 34.881591][ T540] ____fput+0x15/0x20
[ 34.885660][ T540] task_work_run+0x1e1/0x250
[ 34.890287][ T540] ? __cfi_task_work_run+0x10/0x10
[ 34.895469][ T540] ? __cfi___close_range+0x10/0x10
[ 34.900610][ T540] exit_to_user_mode_loop+0x9b/0xb0
[ 34.905908][ T540] exit_to_user_mode_prepare+0x87/0xd0
[ 34.911407][ T540] syscall_exit_to_user_mode+0x1a/0x30
[ 34.917007][ T540] do_syscall_64+0x58/0xa0
[ 34.921461][ T540] ? clear_bhb_loop+0x30/0x80
[ 34.926205][ T540] ? clear_bhb_loop+0x30/0x80
[ 34.930908][ T540] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.936877][ T540] RIP: 0033:0x7f72a9f9e019
[ 34.941318][ T540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 34.961003][ T540] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 34.969495][ T540] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 34.977542][ T540] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 34.985570][ T540] RBP: 0000000000008779 R08: 0000000000000001 R09: 0000000000000000
[ 34.993577][ T540] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 35.001673][ T540] R13: 00007f72aa225fac R14: 00000000000087ac R15: 00007f72aa225fa0
[ 35.009709][ T540]
[ 35.012758][ T540] ---[ end trace 0000000000000000 ]---
[ 35.039155][ T577] ------------[ cut here ]------------
[ 35.044769][ T577] WARNING: CPU: 1 PID: 577 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.054926][ T577] Modules linked in:
[ 35.058850][ T577] CPU: 1 PID: 577 Comm: syz.4.105 Tainted: G B W syzkaller #0
[ 35.067653][ T577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.078091][ T577] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.084659][ T577] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.085109][ T580] ------------[ cut here ]------------
[ 35.104391][ T577] RSP: 0018:ffffc90000d97cb0 EFLAGS: 00010293
[ 35.109812][ T580] WARNING: CPU: 0 PID: 580 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.115952][ T577] RAX: ffffffff849bb307 RBX: ffff88811cd52000 RCX: ffff88811ccd2880
[ 35.125907][ T580] Modules linked in:
[ 35.133886][ T577] RDX: 0000000000000000 RSI: 000000002127b480 RDI: 000000000c04eb7d
[ 35.133902][ T577] RBP: ffffc90000d97cd0 R08: ffff88811cd52083 R09: 1ffff110239aa410
[ 35.137806][ T580] CPU: 0 PID: 580 Comm: syz.0.107 Tainted: G B W syzkaller #0
[ 35.145808][ T577] R10: dffffc0000000000 R11: ffffed10239aa411 R12: dffffc0000000000
[ 35.153771][ T580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.163329][ T577] R13: dffffc0000000000 R14: 000000002127b480 R15: ffff888117fbf400
[ 35.170526][ T580] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.170559][ T580] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.170573][ T580] RSP: 0018:ffffc900016e7cb0 EFLAGS: 00010293
[ 35.170590][ T580] RAX: ffffffff849bb307 RBX: ffff88811dc85000 RCX: ffff88811ccd6540
[ 35.170605][ T580] RDX: 0000000000000000 RSI: 0000000017fbf400 RDI: 000000000c04eb7d
[ 35.170619][ T580] RBP: ffffc900016e7cd0 R08: ffff88811dc85083 R09: 1ffff11023b90a10
[ 35.170633][ T580] R10: dffffc0000000000 R11: ffffed1023b90a11 R12: dffffc0000000000
[ 35.170646][ T580] R13: dffffc0000000000 R14: 0000000017fbf400 R15: ffff888117fbdc00
[ 35.170661][ T580] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.170676][ T580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.170689][ T580] CR2: 00007fdc1e623ff8 CR3: 000000012fe39000 CR4: 00000000003506b0
[ 35.170706][ T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.170716][ T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.170728][ T580] Call Trace:
[ 35.170734][ T580]
[ 35.170741][ T580] pppol2tp_release+0x150/0x2b0
[ 35.170767][ T580] sock_close+0xc9/0x220
[ 35.180858][ T577] FS: 0000555582d0b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.180877][ T577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.180891][ T577] CR2: 0000001b34463fff CR3: 0000000122cfb000 CR4: 00000000003506a0
[ 35.180909][ T577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.188903][ T580] ? __cfi_sock_close+0x10/0x10
[ 35.195237][ T577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.214876][ T580] __fput+0x1fd/0x8f0
[ 35.214915][ T580] ____fput+0x15/0x20
[ 35.220973][ T577] Call Trace:
[ 35.220980][ T577]
[ 35.229164][ T580] task_work_run+0x1e1/0x250
[ 35.237660][ T577] pppol2tp_release+0x150/0x2b0
[ 35.245196][ T580] ? __cfi_task_work_run+0x10/0x10
[ 35.245223][ T580] ? __cfi___close_range+0x10/0x10
[ 35.245244][ T580] exit_to_user_mode_loop+0x9b/0xb0
[ 35.245265][ T580] exit_to_user_mode_prepare+0x87/0xd0
[ 35.253243][ T577] sock_close+0xc9/0x220
[ 35.261240][ T580] syscall_exit_to_user_mode+0x1a/0x30
[ 35.270182][ T577] ? __cfi_sock_close+0x10/0x10
[ 35.276910][ T580] do_syscall_64+0x58/0xa0
[ 35.284785][ T577] __fput+0x1fd/0x8f0
[ 35.292763][ T580] ? clear_bhb_loop+0x30/0x80
[ 35.300756][ T577] ____fput+0x15/0x20
[ 35.304071][ T580] ? clear_bhb_loop+0x30/0x80
[ 35.304091][ T580] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.307033][ T577] task_work_run+0x1e1/0x250
[ 35.311969][ T580] RIP: 0033:0x7f5ff459e019
[ 35.317623][ T577] ? __cfi_task_work_run+0x10/0x10
[ 35.325257][ T580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.325276][ T580] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.325296][ T580] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 35.325310][ T580] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.325321][ T580] RBP: 00000000000088c5 R08: 0000000000000001 R09: 0000000000000000
[ 35.325331][ T580] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 35.325343][ T580] R13: 00007f5ff4825fac R14: 00000000000088f8 R15: 00007f5ff4825fa0
[ 35.325360][ T580]
[ 35.325365][ T580] ---[ end trace 0000000000000000 ]---
[ 35.325914][ T579] ------------[ cut here ]------------
[ 35.332206][ T577] ? __cfi___close_range+0x10/0x10
[ 35.340222][ T579] WARNING: CPU: 0 PID: 579 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.348221][ T577] exit_to_user_mode_loop+0x9b/0xb0
[ 35.353077][ T579] Modules linked in:
[ 35.361065][ T577] exit_to_user_mode_prepare+0x87/0xd0
[ 35.365138][ T579] CPU: 0 PID: 579 Comm: syz.2.106 Tainted: G B W syzkaller #0
[ 35.369029][ T577] syscall_exit_to_user_mode+0x1a/0x30
[ 35.372317][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 35.375272][ T577] do_syscall_64+0x58/0xa0
[ 35.379860][ T579] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.384723][ T577] ? clear_bhb_loop+0x30/0x80
[ 35.389858][ T579] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.396170][ T577] ? clear_bhb_loop+0x30/0x80
[ 35.400216][ T579] RSP: 0018:ffffc90001abfcb0 EFLAGS: 00010293
[ 35.406466][ T577] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.409953][ T579]
[ 35.409960][ T579] RAX: ffffffff849bb307 RBX: ffff88811dc80000 RCX: ffff88811ccd3cc0
[ 35.415442][ T577] RIP: 0033:0x7fea6139e019
[ 35.420288][ T579] RDX: 0000000000000000 RSI: 0000000032c2df78 RDI: 000000000c04eb7d
[ 35.424722][ T577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.428702][ T579] RBP: ffffc90001abfcd0 R08: ffff88811dc80083 R09: 1ffff11023b90010
[ 35.433373][ T577] RSP: 002b:00007ffd94377908 EFLAGS: 00000246
[ 35.437368][ T579] R10: dffffc0000000000 R11: ffffed1023b90011 R12: dffffc0000000000
[ 35.442056][ T577] ORIG_RAX: 00000000000001b4
[ 35.447964][ T579] R13: dffffc0000000000 R14: 0000000032c2df78 R15: ffff888117fbf000
[ 35.452550][ T577] RAX: 0000000000000000 RBX: 00007ffd943779f0 RCX: 00007fea6139e019
[ 35.457011][ T579] FS: 0000555556c43500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 35.462148][ T577] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.481774][ T579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.481792][ T579] CR2: 00007fdc1e623ff8 CR3: 0000000110147000 CR4: 00000000003506b0
[ 35.481809][ T579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.481822][ T579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.481835][ T579] Call Trace:
[ 35.481841][ T579]
[ 35.481848][ T579] pppol2tp_release+0x150/0x2b0
[ 35.481882][ T579] sock_close+0xc9/0x220
[ 35.481911][ T579] ? __cfi_sock_close+0x10/0x10
[ 35.490342][ T577] RBP: 00000000000088b6 R08: 0000000000000001 R09: 0000000000000000
[ 35.498335][ T579] __fput+0x1fd/0x8f0
[ 35.506347][ T577] R10: 0000001b33a20000 R11: 0000000000000246 R12: 00007ffd94377a30
[ 35.514440][ T579] ____fput+0x15/0x20
[ 35.522437][ T577] R13: 00007fea61625fac R14: 00000000000088f8 R15: 00007fea61625fa0
[ 35.530437][ T579] task_work_run+0x1e1/0x250
[ 35.533470][ T577]
[ 35.538971][ T579] ? __cfi_task_work_run+0x10/0x10
[ 35.544445][ T577] ---[ end trace 0000000000000000 ]---
[ 35.549560][ T579] ? __cfi___close_range+0x10/0x10
[ 35.859985][ T579] exit_to_user_mode_loop+0x9b/0xb0
[ 35.865366][ T579] exit_to_user_mode_prepare+0x87/0xd0
[ 35.870894][ T579] syscall_exit_to_user_mode+0x1a/0x30
[ 35.876436][ T579] do_syscall_64+0x58/0xa0
[ 35.880899][ T579] ? clear_bhb_loop+0x30/0x80
[ 35.885660][ T579] ? clear_bhb_loop+0x30/0x80
[ 35.890372][ T579] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.896351][ T579] RIP: 0033:0x7fc95059e019
[ 35.900802][ T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 35.920505][ T579] RSP: 002b:00007fffa25a6a98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 35.928992][ T579] RAX: 0000000000000000 RBX: 00007fffa25a6b80 RCX: 00007fc95059e019
[ 35.937093][ T579] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 35.945126][ T579] RBP: 00000000000088c5 R08: 0000000000000001 R09: 0000000000000000
[ 35.953134][ T579] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007fffa25a6bc0
[ 35.961238][ T579] R13: 00007fc950825fac R14: 00000000000088f7 R15: 00007fc950825fa0
[ 35.969298][ T579]
[ 35.972352][ T579] ---[ end trace 0000000000000000 ]---
[ 35.980270][ T604] ------------[ cut here ]------------
[ 35.985998][ T604] WARNING: CPU: 1 PID: 604 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.996321][ T604] Modules linked in:
[ 36.000254][ T604] CPU: 1 PID: 604 Comm: syz.0.117 Tainted: G B W syzkaller #0
[ 36.009152][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.019425][ T604] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.025983][ T604] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.046124][ T604] RSP: 0018:ffffc900016e7cb0 EFLAGS: 00010293
[ 36.052238][ T604] RAX: ffffffff849bb307 RBX: ffff88811a70e000 RCX: ffff88811e62a880
[ 36.060554][ T604] RDX: 0000000000000000 RSI: 0000000019823f40 RDI: 000000000c04eb7d
[ 36.068699][ T604] RBP: ffffc900016e7cd0 R08: ffff88811a70e083 R09: 1ffff110234e1c10
[ 36.076892][ T604] R10: dffffc0000000000 R11: ffffed10234e1c11 R12: dffffc0000000000
[ 36.085104][ T604] R13: dffffc0000000000 R14: 0000000019823f40 R15: ffff888115b52800
[ 36.093130][ T604] FS: 0000555562be0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.102306][ T604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.109198][ T604] CR2: 00007f5ff44738e0 CR3: 000000012e688000 CR4: 00000000003506a0
[ 36.117352][ T604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.125481][ T604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.133493][ T604] Call Trace:
[ 36.137007][ T604]
[ 36.139985][ T604] pppol2tp_release+0x150/0x2b0
[ 36.145045][ T604] sock_close+0xc9/0x220
[ 36.149335][ T604] ? __cfi_sock_close+0x10/0x10
[ 36.154383][ T604] __fput+0x1fd/0x8f0
[ 36.158457][ T604] ____fput+0x15/0x20
[ 36.162476][ T604] task_work_run+0x1e1/0x250
[ 36.167245][ T604] ? __cfi_task_work_run+0x10/0x10
[ 36.172405][ T604] ? __cfi___close_range+0x10/0x10
[ 36.177681][ T604] exit_to_user_mode_loop+0x9b/0xb0
[ 36.182966][ T604] exit_to_user_mode_prepare+0x87/0xd0
[ 36.188591][ T604] syscall_exit_to_user_mode+0x1a/0x30
[ 36.194427][ T604] do_syscall_64+0x58/0xa0
[ 36.198889][ T604] ? clear_bhb_loop+0x30/0x80
[ 36.203615][ T604] ? clear_bhb_loop+0x30/0x80
[ 36.208591][ T604] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.214664][ T604] RIP: 0033:0x7f5ff459e019
[ 36.219116][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.238871][ T604] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.247450][ T604] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 36.255619][ T604] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.263623][ T604] RBP: 0000000000008c62 R08: 0000000000000001 R09: 0000000000000000
[ 36.271756][ T604] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 36.279939][ T604] R13: 00007f5ff4825fac R14: 0000000000008ca6 R15: 00007f5ff4825fa0
[ 36.288150][ T604]
[ 36.291202][ T604] ---[ end trace 0000000000000000 ]---
[ 36.303264][ T626] ------------[ cut here ]------------
[ 36.308791][ T626] WARNING: CPU: 1 PID: 626 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.318878][ T626] Modules linked in:
[ 36.322803][ T626] CPU: 1 PID: 626 Comm: syz.6.128 Tainted: G B W syzkaller #0
[ 36.331555][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.341839][ T626] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.348244][ T626] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.368032][ T626] RSP: 0018:ffffc90001d37cb0 EFLAGS: 00010293
[ 36.374268][ T626] RAX: ffffffff849bb307 RBX: ffff88811a70d000 RCX: ffff88811f9d5100
[ 36.382278][ T626] RDX: 0000000000000000 RSI: 00000000101938c0 RDI: 000000000c04eb7d
[ 36.390325][ T626] RBP: ffffc90001d37cd0 R08: ffff88811a70d083 R09: 1ffff110234e1a10
[ 36.398352][ T626] R10: dffffc0000000000 R11: ffffed10234e1a11 R12: dffffc0000000000
[ 36.406402][ T626] R13: dffffc0000000000 R14: 00000000101938c0 R15: ffff88811debc800
[ 36.414421][ T626] FS: 0000555590ee9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.423389][ T626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.430031][ T626] CR2: 00007f72a9e738e0 CR3: 000000011e831000 CR4: 00000000003506a0
[ 36.438193][ T626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.446292][ T626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.454322][ T626] Call Trace:
[ 36.457628][ T626]
[ 36.460581][ T626] pppol2tp_release+0x150/0x2b0
[ 36.465566][ T626] sock_close+0xc9/0x220
[ 36.469857][ T626] ? __cfi_sock_close+0x10/0x10
[ 36.474793][ T626] __fput+0x1fd/0x8f0
[ 36.478815][ T626] ____fput+0x15/0x20
[ 36.482831][ T626] task_work_run+0x1e1/0x250
[ 36.487492][ T626] ? __cfi_task_work_run+0x10/0x10
[ 36.492639][ T626] ? __cfi___close_range+0x10/0x10
[ 36.497839][ T626] exit_to_user_mode_loop+0x9b/0xb0
[ 36.503069][ T626] exit_to_user_mode_prepare+0x87/0xd0
[ 36.508612][ T626] syscall_exit_to_user_mode+0x1a/0x30
[ 36.514260][ T626] do_syscall_64+0x58/0xa0
[ 36.518717][ T626] ? clear_bhb_loop+0x30/0x80
[ 36.523425][ T626] ? clear_bhb_loop+0x30/0x80
[ 36.528279][ T626] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.534241][ T626] RIP: 0033:0x7f72a9f9e019
[ 36.538683][ T626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.558382][ T626] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.566860][ T626] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 36.574947][ T626] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.582975][ T626] RBP: 0000000000008db1 R08: 0000000000000001 R09: 0000000000000000
[ 36.591065][ T626] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 36.599201][ T626] R13: 00007f72aa225fac R14: 0000000000008de9 R15: 00007f72aa225fa0
[ 36.607385][ T626]
[ 36.610434][ T626] ---[ end trace 0000000000000000 ]---
[ 36.628295][ T648] ------------[ cut here ]------------
[ 36.633853][ T648] WARNING: CPU: 0 PID: 648 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.644093][ T648] Modules linked in:
[ 36.648024][ T648] CPU: 0 PID: 648 Comm: syz.3.138 Tainted: G B W syzkaller #0
[ 36.656904][ T648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 36.667200][ T648] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.673583][ T648] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.693598][ T648] RSP: 0018:ffffc90001c77cb0 EFLAGS: 00010293
[ 36.699824][ T648] RAX: ffffffff849bb307 RBX: ffff888108912000 RCX: ffff888111ab1440
[ 36.708036][ T648] RDX: 0000000000000000 RSI: 0000000009180000 RDI: 000000000c04eb7d
[ 36.716185][ T648] RBP: ffffc90001c77cd0 R08: ffff888108912083 R09: 1ffff11021122410
[ 36.724325][ T648] R10: dffffc0000000000 R11: ffffed1021122411 R12: dffffc0000000000
[ 36.732343][ T648] R13: dffffc0000000000 R14: 0000000009180000 R15: ffff88811fc3b400
[ 36.740491][ T648] FS: 000055558aef7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.749650][ T648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.756436][ T648] CR2: 00007ffd931c7008 CR3: 0000000111d37000 CR4: 00000000003506b0
[ 36.764559][ T648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.772562][ T648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.780726][ T648] Call Trace:
[ 36.784140][ T648]
[ 36.787108][ T648] pppol2tp_release+0x150/0x2b0
[ 36.791997][ T648] sock_close+0xc9/0x220
[ 36.796403][ T648] ? __cfi_sock_close+0x10/0x10
[ 36.801305][ T648] __fput+0x1fd/0x8f0
[ 36.805504][ T648] ____fput+0x15/0x20
[ 36.809617][ T648] task_work_run+0x1e1/0x250
[ 36.814379][ T648] ? __cfi_task_work_run+0x10/0x10
[ 36.819533][ T648] ? __cfi___close_range+0x10/0x10
[ 36.824784][ T648] exit_to_user_mode_loop+0x9b/0xb0
[ 36.830025][ T648] exit_to_user_mode_prepare+0x87/0xd0
[ 36.835798][ T648] syscall_exit_to_user_mode+0x1a/0x30
[ 36.841303][ T648] do_syscall_64+0x58/0xa0
[ 36.845892][ T648] ? clear_bhb_loop+0x30/0x80
[ 36.850610][ T648] ? clear_bhb_loop+0x30/0x80
[ 36.855468][ T648] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.861535][ T648] RIP: 0033:0x7fdc1d79e019
[ 36.866172][ T648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 36.885974][ T648] RSP: 002b:00007ffc590f04d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 36.894532][ T648] RAX: 0000000000000000 RBX: 00007ffc590f05c0 RCX: 00007fdc1d79e019
[ 36.902584][ T648] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 36.910722][ T648] RBP: 0000000000008ef7 R08: 0000000000000001 R09: 0000000000000000
[ 36.918874][ T648] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc590f0600
[ 36.927006][ T648] R13: 00007fdc1da25fac R14: 0000000000008f2a R15: 00007fdc1da25fa0
[ 36.935127][ T648]
[ 36.938175][ T648] ---[ end trace 0000000000000000 ]---
[ 36.970499][ T677] ------------[ cut here ]------------
[ 36.976155][ T677] WARNING: CPU: 1 PID: 677 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.984848][ T675] ------------[ cut here ]------------
[ 36.986811][ T677] Modules linked in:
[ 36.991661][ T675] WARNING: CPU: 0 PID: 675 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.995889][ T677] CPU: 1 PID: 677 Comm: syz.0.150 Tainted: G B W syzkaller #0
[ 37.005752][ T675] Modules linked in:
[ 37.005765][ T675] CPU: 0 PID: 675 Comm: syz.4.147 Tainted: G B W syzkaller #0
[ 37.005787][ T675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.005799][ T675] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.014639][ T677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.018435][ T675] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.027420][ T677] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.037209][ T675] RSP: 0018:ffffc90001dcfcb0 EFLAGS: 00010293
[ 37.037230][ T675] RAX: ffffffff849bb307 RBX: ffff888109393000 RCX: ffff8881210dd100
[ 37.037244][ T675] RDX: 0000000000000000 RSI: 000000001a6808c0 RDI: 000000000c04eb7d
[ 37.037257][ T675] RBP: ffffc90001dcfcd0 R08: ffff888109393083 R09: 1ffff11021272610
[ 37.037273][ T675] R10: dffffc0000000000 R11: ffffed1021272611 R12: dffffc0000000000
[ 37.037288][ T675] R13: dffffc0000000000 R14: 000000001a6808c0 R15: ffff88811f902000
[ 37.037303][ T675] FS: 0000555582d0b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.037322][ T675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.043652][ T677] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.053761][ T675] CR2: 0000555556c5e908 CR3: 000000012359c000 CR4: 00000000003506b0
[ 37.053781][ T675] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.053794][ T675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.053827][ T675] Call Trace:
[ 37.053834][ T675]
[ 37.053842][ T675] pppol2tp_release+0x150/0x2b0
[ 37.053869][ T675] sock_close+0xc9/0x220
[ 37.053899][ T675] ? __cfi_sock_close+0x10/0x10
[ 37.073849][ T677] RSP: 0018:ffffc90001eb7cb0 EFLAGS: 00010293
[ 37.079983][ T675] __fput+0x1fd/0x8f0
[ 37.086381][ T677]
[ 37.094030][ T675] ____fput+0x15/0x20
[ 37.094059][ T675] task_work_run+0x1e1/0x250
[ 37.094086][ T675] ? __cfi_task_work_run+0x10/0x10
[ 37.094111][ T675] ? __cfi___close_range+0x10/0x10
[ 37.102088][ T677] RAX: ffffffff849bb307 RBX: ffff888109391000 RCX: ffff8881210dbcc0
[ 37.110115][ T675] exit_to_user_mode_loop+0x9b/0xb0
[ 37.110143][ T675] exit_to_user_mode_prepare+0x87/0xd0
[ 37.118387][ T677] RDX: 0000000000000000 RSI: 0000000016e1e160 RDI: 000000000c04eb7d
[ 37.126133][ T675] syscall_exit_to_user_mode+0x1a/0x30
[ 37.126157][ T675] do_syscall_64+0x58/0xa0
[ 37.126181][ T675] ? clear_bhb_loop+0x30/0x80
[ 37.126201][ T675] ? clear_bhb_loop+0x30/0x80
[ 37.135273][ T677] RBP: ffffc90001eb7cd0 R08: ffff888109391083 R09: 1ffff11021272210
[ 37.141756][ T675] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.161625][ T677] R10: dffffc0000000000 R11: ffffed1021272211 R12: dffffc0000000000
[ 37.169419][ T675] RIP: 0033:0x7fea6139e019
[ 37.169439][ T675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.177646][ T677] R13: dffffc0000000000 R14: 0000000016e1e160 R15: ffff88811f900c00
[ 37.185437][ T675] RSP: 002b:00007ffd94377908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.185460][ T675] RAX: 0000000000000000 RBX: 00007ffd943779f0 RCX: 00007fea6139e019
[ 37.185474][ T675] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.185485][ T675] RBP: 0000000000009051 R08: 0000000000000001 R09: 0000000000000000
[ 37.185497][ T675] R10: 0000001b33a20000 R11: 0000000000000246 R12: 00007ffd94377a30
[ 37.185511][ T675] R13: 00007fea61625fac R14: 0000000000009084 R15: 00007fea61625fa0
[ 37.185529][ T675]
[ 37.185536][ T675] ---[ end trace 0000000000000000 ]---
[ 37.395724][ T677] FS: 0000555562be0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.404773][ T677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.411390][ T677] CR2: 00007fea612738e0 CR3: 000000011dac8000 CR4: 00000000003506a0
[ 37.419522][ T677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.427627][ T677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.435824][ T677] Call Trace:
[ 37.439141][ T677]
[ 37.442129][ T677] pppol2tp_release+0x150/0x2b0
[ 37.447115][ T677] sock_close+0xc9/0x220
[ 37.451396][ T677] ? __cfi_sock_close+0x10/0x10
[ 37.456431][ T677] __fput+0x1fd/0x8f0
[ 37.460465][ T677] ____fput+0x15/0x20
[ 37.464569][ T677] task_work_run+0x1e1/0x250
[ 37.469197][ T677] ? __cfi_task_work_run+0x10/0x10
[ 37.474456][ T677] ? __cfi___close_range+0x10/0x10
[ 37.479605][ T677] exit_to_user_mode_loop+0x9b/0xb0
[ 37.484942][ T677] exit_to_user_mode_prepare+0x87/0xd0
[ 37.490444][ T677] syscall_exit_to_user_mode+0x1a/0x30
[ 37.496074][ T677] do_syscall_64+0x58/0xa0
[ 37.500529][ T677] ? clear_bhb_loop+0x30/0x80
[ 37.505323][ T677] ? clear_bhb_loop+0x30/0x80
[ 37.510045][ T677] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.516082][ T677] RIP: 0033:0x7f5ff459e019
[ 37.520562][ T677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.540336][ T677] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.548911][ T677] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 37.557056][ T677] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.565137][ T677] RBP: 000000000000904e R08: 0000000000000001 R09: 0000000000000000
[ 37.573132][ T677] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 37.581264][ T677] R13: 00007f5ff4825fac R14: 0000000000009081 R15: 00007f5ff4825fa0
[ 37.589354][ T677]
[ 37.592396][ T677] ---[ end trace 0000000000000000 ]---
[ 37.609932][ T706] ------------[ cut here ]------------
[ 37.615511][ T706] WARNING: CPU: 0 PID: 706 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.625698][ T706] Modules linked in:
[ 37.629639][ T706] CPU: 0 PID: 706 Comm: syz.0.163 Tainted: G B W syzkaller #0
[ 37.638470][ T706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.648687][ T706] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.655161][ T706] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.675057][ T706] RSP: 0018:ffffc9000209fcb0 EFLAGS: 00010293
[ 37.681165][ T706] RAX: ffffffff849bb307 RBX: ffff88810e3d1000 RCX: ffff88810da3a880
[ 37.689401][ T706] RDX: 0000000000000000 RSI: 0000000019803280 RDI: 000000000c04eb7d
[ 37.697589][ T706] RBP: ffffc9000209fcd0 R08: ffff88810e3d1083 R09: 1ffff11021c7a210
[ 37.705735][ T706] R10: dffffc0000000000 R11: ffffed1021c7a211 R12: dffffc0000000000
[ 37.713752][ T706] R13: dffffc0000000000 R14: 0000000019803280 R15: ffff88810e154000
[ 37.721990][ T706] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.731213][ T706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.737937][ T706] CR2: 00007f5ff44738e0 CR3: 0000000111b44000 CR4: 00000000003506b0
[ 37.746074][ T706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.754235][ T706] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.762210][ T706] Call Trace:
[ 37.765598][ T706]
[ 37.768549][ T706] pppol2tp_release+0x150/0x2b0
[ 37.773433][ T706] sock_close+0xc9/0x220
[ 37.777785][ T706] ? __cfi_sock_close+0x10/0x10
[ 37.782668][ T706] __fput+0x1fd/0x8f0
[ 37.786784][ T706] ____fput+0x15/0x20
[ 37.790805][ T706] task_work_run+0x1e1/0x250
[ 37.795657][ T706] ? __cfi_task_work_run+0x10/0x10
[ 37.800794][ T706] ? __cfi___close_range+0x10/0x10
[ 37.806161][ T706] exit_to_user_mode_loop+0x9b/0xb0
[ 37.811371][ T706] exit_to_user_mode_prepare+0x87/0xd0
[ 37.816933][ T706] syscall_exit_to_user_mode+0x1a/0x30
[ 37.822506][ T706] do_syscall_64+0x58/0xa0
[ 37.827037][ T706] ? clear_bhb_loop+0x30/0x80
[ 37.831734][ T706] ? clear_bhb_loop+0x30/0x80
[ 37.836529][ T706] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.842462][ T706] RIP: 0033:0x7f5ff459e019
[ 37.847019][ T706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.866772][ T706] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.875630][ T706] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 37.883615][ T706] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.891702][ T706] RBP: 00000000000092ce R08: 0000000000000001 R09: 0000000000000000
[ 37.899893][ T706] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 37.907984][ T706] R13: 00007f5ff4825fac R14: 0000000000009301 R15: 00007f5ff4825fa0
[ 37.916067][ T706]
[ 37.919090][ T706] ---[ end trace 0000000000000000 ]---
2026/08/02 17:53:23 executed programs: 161
[ 37.948569][ T716] ------------[ cut here ]------------
[ 37.954255][ T716] WARNING: CPU: 1 PID: 716 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.964424][ T716] Modules linked in:
[ 37.968371][ T716] CPU: 1 PID: 716 Comm: syz.2.170 Tainted: G B W syzkaller #0
[ 37.977111][ T716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 37.987514][ T716] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.993926][ T716] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.013607][ T716] RSP: 0018:ffffc90001dcfcb0 EFLAGS: 00010293
[ 38.019748][ T716] RAX: ffffffff849bb307 RBX: ffff88810f0c7000 RCX: ffff88810da3e540
[ 38.027781][ T716] RDX: 0000000000000000 RSI: 000000001b95c380 RDI: 000000000c04eb7d
[ 38.035911][ T716] RBP: ffffc90001dcfcd0 R08: ffff88810f0c7083 R09: 1ffff11021e18e10
[ 38.043939][ T716] R10: dffffc0000000000 R11: ffffed1021e18e11 R12: dffffc0000000000
[ 38.051942][ T716] R13: dffffc0000000000 R14: 000000001b95c380 R15: ffff88810886d000
[ 38.060160][ T716] FS: 0000555556c43500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.069167][ T716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.075808][ T716] CR2: 00007fc9504738e0 CR3: 000000012214c000 CR4: 00000000003506a0
[ 38.083851][ T716] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.091851][ T716] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.099880][ T716] Call Trace:
[ 38.103189][ T716]
[ 38.104828][ T721] ------------[ cut here ]------------
[ 38.106186][ T716] pppol2tp_release+0x150/0x2b0
[ 38.111643][ T721] WARNING: CPU: 0 PID: 721 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.116476][ T716] sock_close+0xc9/0x220
[ 38.116508][ T716] ? __cfi_sock_close+0x10/0x10
[ 38.116536][ T716] __fput+0x1fd/0x8f0
[ 38.116562][ T716] ____fput+0x15/0x20
[ 38.116585][ T716] task_work_run+0x1e1/0x250
[ 38.116609][ T716] ? __cfi_task_work_run+0x10/0x10
[ 38.116633][ T716] ? __cfi___close_range+0x10/0x10
[ 38.116656][ T716] exit_to_user_mode_loop+0x9b/0xb0
[ 38.116680][ T716] exit_to_user_mode_prepare+0x87/0xd0
[ 38.116701][ T716] syscall_exit_to_user_mode+0x1a/0x30
[ 38.116722][ T716] do_syscall_64+0x58/0xa0
[ 38.116753][ T716] ? clear_bhb_loop+0x30/0x80
[ 38.116772][ T716] ? clear_bhb_loop+0x30/0x80
[ 38.116790][ T716] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.116820][ T716] RIP: 0033:0x7fc95059e019
[ 38.126965][ T721] Modules linked in:
[ 38.126980][ T721] CPU: 0 PID: 721 Comm: syz.3.171 Tainted: G B W syzkaller #0
[ 38.127002][ T721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.127014][ T721] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.127042][ T721] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.127061][ T721] RSP: 0000:ffffc900021c7cb0 EFLAGS: 00010293
[ 38.131309][ T716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.136210][ T721]
[ 38.136216][ T721] RAX: ffffffff849bb307 RBX: ffff88810f1a1000 RCX: ffff88810f3f2880
[ 38.136233][ T721] RDX: 0000000000000000 RSI: 0000000016e1ea50 RDI: 000000000c04eb7d
[ 38.140221][ T716] RSP: 002b:00007fffa25a6a98 EFLAGS: 00000246
[ 38.144273][ T721] RBP: ffffc900021c7cd0 R08: ffff88810f1a1083 R09: 1ffff11021e34210
[ 38.148874][ T716] ORIG_RAX: 00000000000001b4
[ 38.154019][ T721] R10: dffffc0000000000 R11: ffffed1021e34211 R12: dffffc0000000000
[ 38.154039][ T721] R13: dffffc0000000000 R14: 0000000016e1ea50 R15: ffff88810886e000
[ 38.154054][ T721] FS: 000055558aef7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.154073][ T721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.159186][ T716] RAX: 0000000000000000 RBX: 00007fffa25a6b80 RCX: 00007fc95059e019
[ 38.164462][ T721] CR2: 00007fea61435ea3 CR3: 00000001220c5000 CR4: 00000000003506b0
[ 38.169904][ T716] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.175798][ T721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.179796][ T716] RBP: 000000000000941f R08: 0000000000000001 R09: 0000000000000000
[ 38.184504][ T721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.189180][ T716] R10: 0000001b33720000 R11: 0000000000000246 R12: 00007fffa25a6bc0
[ 38.195603][ T721] Call Trace:
[ 38.199675][ T716] R13: 00007fc950825fac R14: 0000000000009456 R15: 00007fc950825fa0
[ 38.203575][ T721]
[ 38.212341][ T716]
[ 38.212351][ T716] ---[ end trace 0000000000000000 ]---
[ 38.423094][ T721] pppol2tp_release+0x150/0x2b0
[ 38.428116][ T721] sock_close+0xc9/0x220
[ 38.432398][ T721] ? __cfi_sock_close+0x10/0x10
[ 38.437776][ T721] __fput+0x1fd/0x8f0
[ 38.441808][ T721] ____fput+0x15/0x20
[ 38.446148][ T721] task_work_run+0x1e1/0x250
[ 38.450790][ T721] ? __cfi_task_work_run+0x10/0x10
[ 38.455966][ T721] ? __cfi___close_range+0x10/0x10
[ 38.461109][ T721] exit_to_user_mode_loop+0x9b/0xb0
[ 38.466380][ T721] exit_to_user_mode_prepare+0x87/0xd0
[ 38.471867][ T721] syscall_exit_to_user_mode+0x1a/0x30
[ 38.477384][ T721] do_syscall_64+0x58/0xa0
[ 38.481841][ T721] ? clear_bhb_loop+0x30/0x80
[ 38.486573][ T721] ? clear_bhb_loop+0x30/0x80
[ 38.491307][ T721] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.497273][ T721] RIP: 0033:0x7fdc1d79e019
[ 38.501727][ T721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.521656][ T721] RSP: 002b:00007ffc590f04d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.530230][ T721] RAX: 0000000000000000 RBX: 00007ffc590f05c0 RCX: 00007fdc1d79e019
[ 38.538319][ T721] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.546345][ T721] RBP: 0000000000009420 R08: 0000000000000001 R09: 0000000000000000
[ 38.554392][ T721] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc590f0600
[ 38.562440][ T721] R13: 00007fdc1da25fac R14: 0000000000009456 R15: 00007fdc1da25fa0
[ 38.570485][ T721]
[ 38.573527][ T721] ---[ end trace 0000000000000000 ]---
[ 38.600256][ T752] ------------[ cut here ]------------
[ 38.605942][ T752] WARNING: CPU: 1 PID: 752 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.616079][ T752] Modules linked in:
[ 38.620011][ T752] CPU: 1 PID: 752 Comm: syz.6.184 Tainted: G B W syzkaller #0
[ 38.628830][ T752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.639029][ T752] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.644918][ T748] ------------[ cut here ]------------
[ 38.645770][ T752] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.650993][ T748] WARNING: CPU: 0 PID: 748 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.670959][ T752] RSP: 0018:ffffc90002387cb0 EFLAGS: 00010293
[ 38.681129][ T748] Modules linked in:
[ 38.687100][ T752] RAX: ffffffff849bb307 RBX: ffff88810948c000 RCX: ffff88810e3b2880
[ 38.687119][ T752] RDX: 0000000000000000 RSI: 000000001c1de600 RDI: 000000000c04eb7d
[ 38.687132][ T752] RBP: ffffc90002387cd0 R08: ffff88810948c083 R09: 1ffff11021291810
[ 38.687148][ T752] R10: dffffc0000000000 R11: ffffed1021291811 R12: dffffc0000000000
[ 38.691049][ T748]
[ 38.691059][ T748] CPU: 0 PID: 748 Comm: syz.3.186 Tainted: G B W syzkaller #0
[ 38.699296][ T752] R13: dffffc0000000000 R14: 000000001c1de600 R15: ffff88811fe6f800
[ 38.707043][ T748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.707057][ T748] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.707089][ T748] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.707106][ T748] RSP: 0018:ffffc900022b7cb0 EFLAGS: 00010293
[ 38.707123][ T748] RAX: ffffffff849bb307 RBX: ffff888109558000 RCX: ffff88810f891440
[ 38.707139][ T748] RDX: 0000000000000000 RSI: 0000000016e1e8f0 RDI: 000000000c04eb7d
[ 38.715448][ T752] FS: 0000555590ee9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.723207][ T748] RBP: ffffc900022b7cd0 R08: ffff888109558083 R09: 1ffff110212ab010
[ 38.725816][ T752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.734298][ T748] R10: dffffc0000000000 R11: ffffed10212ab011 R12: dffffc0000000000
[ 38.734317][ T748] R13: dffffc0000000000 R14: 0000000016e1e8f0 R15: ffff88811fe6e800
[ 38.734333][ T748] FS: 000055558aef7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.742311][ T752] CR2: 00007f72a9e738e0 CR3: 0000000121504000 CR4: 00000000003506a0
[ 38.752471][ T748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.752495][ T748] CR2: 00007fc9504738e0 CR3: 0000000122399000 CR4: 00000000003506b0
[ 38.752514][ T748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.752527][ T748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.752541][ T748] Call Trace:
[ 38.752546][ T748]
[ 38.752554][ T748] pppol2tp_release+0x150/0x2b0
[ 38.759139][ T752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.778630][ T748] sock_close+0xc9/0x220
[ 38.778666][ T748] ? __cfi_sock_close+0x10/0x10
[ 38.785250][ T752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.792754][ T748] __fput+0x1fd/0x8f0
[ 38.800932][ T752] Call Trace:
[ 38.809703][ T748] ____fput+0x15/0x20
[ 38.809731][ T748] task_work_run+0x1e1/0x250
[ 38.809764][ T748] ? __cfi_task_work_run+0x10/0x10
[ 38.817955][ T752]
[ 38.824380][ T748] ? __cfi___close_range+0x10/0x10
[ 38.824406][ T748] exit_to_user_mode_loop+0x9b/0xb0
[ 38.824430][ T748] exit_to_user_mode_prepare+0x87/0xd0
[ 38.824453][ T748] syscall_exit_to_user_mode+0x1a/0x30
[ 38.832423][ T752] pppol2tp_release+0x150/0x2b0
[ 38.840463][ T748] do_syscall_64+0x58/0xa0
[ 38.840492][ T748] ? clear_bhb_loop+0x30/0x80
[ 38.849714][ T752] sock_close+0xc9/0x220
[ 38.857422][ T748] ? clear_bhb_loop+0x30/0x80
[ 38.857444][ T748] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.857474][ T748] RIP: 0033:0x7fdc1d79e019
[ 38.857492][ T748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.864324][ T752] ? __cfi_sock_close+0x10/0x10
[ 38.872071][ T748] RSP: 002b:00007ffc590f04d8 EFLAGS: 00000246
[ 38.880334][ T752] __fput+0x1fd/0x8f0
[ 38.888053][ T748] ORIG_RAX: 00000000000001b4
[ 38.888064][ T748] RAX: 0000000000000000 RBX: 00007ffc590f05c0 RCX: 00007fdc1d79e019
[ 38.888079][ T748] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.888092][ T748] RBP: 00000000000096a7 R08: 0000000000000001 R09: 0000000000000000
[ 38.888105][ T748] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc590f0600
[ 38.888120][ T748] R13: 00007fdc1da25fac R14: 00000000000096e1 R15: 00007fdc1da25fa0
[ 38.891402][ T752] ____fput+0x15/0x20
[ 38.894359][ T748]
[ 38.894367][ T748] ---[ end trace 0000000000000000 ]---
[ 38.905352][ T750] ------------[ cut here ]------------
[ 38.907572][ T752] task_work_run+0x1e1/0x250
[ 38.911497][ T750] WARNING: CPU: 0 PID: 750 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.916533][ T752] ? __cfi_task_work_run+0x10/0x10
[ 38.924421][ T750] Modules linked in:
[ 38.924434][ T750] CPU: 0 PID: 750 Comm: syz.0.183 Tainted: G B W syzkaller #0
[ 38.924457][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 38.924469][ T750] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.928544][ T752] ? __cfi___close_range+0x10/0x10
[ 38.931828][ T750] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.936131][ T752] exit_to_user_mode_loop+0x9b/0xb0
[ 38.940411][ T750] RSP: 0018:ffffc90002377cb0 EFLAGS: 00010293
[ 38.945823][ T752] exit_to_user_mode_prepare+0x87/0xd0
[ 38.948474][ T750]
[ 38.948479][ T750] RAX: ffffffff849bb307 RBX: ffff88810948b000 RCX: ffff88810f890000
[ 38.953587][ T752] syscall_exit_to_user_mode+0x1a/0x30
[ 38.958796][ T750] RDX: 0000000000000000 RSI: 000000001fe6f800 RDI: 000000000c04eb7d
[ 38.958812][ T750] RBP: ffffc90002377cd0 R08: ffff88810948b083 R09: 1ffff11021291610
[ 38.958828][ T750] R10: dffffc0000000000 R11: ffffed1021291611 R12: dffffc0000000000
[ 38.958843][ T750] R13: dffffc0000000000 R14: 000000001fe6f800 R15: ffff88811fe6d400
[ 38.958858][ T750] FS: 0000555562be0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.964618][ T752] do_syscall_64+0x58/0xa0
[ 38.969807][ T750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.974930][ T752] ? clear_bhb_loop+0x30/0x80
[ 38.979137][ T750] CR2: 00007fc9504738e0 CR3: 0000000121784000 CR4: 00000000003506b0
[ 38.984077][ T752] ? clear_bhb_loop+0x30/0x80
[ 38.988107][ T750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.992779][ T752] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.998716][ T750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.998732][ T750] Call Trace:
[ 38.998738][ T750]
[ 38.998746][ T750] pppol2tp_release+0x150/0x2b0
[ 38.998790][ T750] sock_close+0xc9/0x220
[ 38.998818][ T750] ? __cfi_sock_close+0x10/0x10
[ 39.003248][ T752] RIP: 0033:0x7f72a9f9e019
[ 39.022892][ T750] __fput+0x1fd/0x8f0
[ 39.022926][ T750] ____fput+0x15/0x20
[ 39.022950][ T750] task_work_run+0x1e1/0x250
[ 39.028098][ T752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.033896][ T750] ? __cfi_task_work_run+0x10/0x10
[ 39.033937][ T750] ? __cfi___close_range+0x10/0x10
[ 39.033959][ T750] exit_to_user_mode_loop+0x9b/0xb0
[ 39.037946][ T752] RSP: 002b:00007ffd931c6f28 EFLAGS: 00000246
[ 39.042633][ T750] exit_to_user_mode_prepare+0x87/0xd0
[ 39.050831][ T752] ORIG_RAX: 00000000000001b4
[ 39.058722][ T750] syscall_exit_to_user_mode+0x1a/0x30
[ 39.058748][ T750] do_syscall_64+0x58/0xa0
[ 39.058771][ T750] ? clear_bhb_loop+0x30/0x80
[ 39.058790][ T750] ? clear_bhb_loop+0x30/0x80
[ 39.067093][ T752] RAX: 0000000000000000 RBX: 00007ffd931c7010 RCX: 00007f72a9f9e019
[ 39.074854][ T750] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.074890][ T750] RIP: 0033:0x7f5ff459e019
[ 39.082868][ T752] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.086878][ T750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.086898][ T750] RSP: 002b:00007ffca91a1db8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 39.086921][ T750] RAX: 0000000000000000 RBX: 00007ffca91a1ea0 RCX: 00007f5ff459e019
[ 39.086936][ T750] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.089965][ T752] RBP: 00000000000096af R08: 0000000000000001 R09: 0000000000000000
[ 39.095434][ T750] RBP: 00000000000096a9 R08: 0000000000000001 R09: 0000000000000000
[ 39.095450][ T750] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007ffca91a1ee0
[ 39.095465][ T750] R13: 00007f5ff4825fac R14: 00000000000096e1 R15: 00007f5ff4825fa0
[ 39.095483][ T750]
[ 39.095489][ T750] ---[ end trace 0000000000000000 ]---
[ 39.518364][ T752] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007ffd931c7050
[ 39.526401][ T752] R13: 00007f72aa225fac R14: 00000000000096e2 R15: 00007f72aa225fa0
[ 39.534434][ T752]
[ 39.537473][ T752] ---[ end trace 0000000000000000 ]---
[ 39.554311][ T781] ------------[ cut here ]------------
[ 39.559818][ T781] WARNING: CPU: 1 PID: 781 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.569986][ T781] Modules linked in:
[ 39.574089][ T781] CPU: 1 PID: 781 Comm: syz.3.199 Tainted: G B W syzkaller #0
[ 39.582788][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 39.592905][ T781] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.599314][ T781] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.618979][ T781] RSP: 0018:ffffc900023ffcb0 EFLAGS: 00010293
[ 39.625081][ T781] RAX: ffffffff849bb307 RBX: ffff88810febd000 RCX: ffff88810e3b3cc0
[ 39.633081][ T781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 39.641117][ T781] RBP: ffffc900023ffcd0 R08: ffff88810febd083 R09: 1ffff11021fd7a10
[ 39.649141][ T781] R10: dffffc0000000000 R11: ffffed1021fd7a11 R12: dffffc0000000000
[ 39.657186][ T781] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888110315400
[ 39.665204][ T781] FS: 000055558aef7500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.674192][ T781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.680821][ T781] CR2: 00007fdc1d6738e0 CR3: 000000010d843000 CR4: 00000000003506a0
[ 39.688863][ T781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.696879][ T781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.704920][ T781] Call Trace:
[ 39.708230][ T781]
[ 39.711189][ T781] pppol2tp_release+0x150/0x2b0
[ 39.716315][ T781] sock_close+0xc9/0x220
[ 39.720610][ T781] ? __cfi_sock_close+0x10/0x10
[ 39.725596][ T781] __fput+0x1fd/0x8f0
[ 39.729622][ T781] ____fput+0x15/0x20
[ 39.733648][ T781] task_work_run+0x1e1/0x250
[ 39.738316][ T781] ? __cfi_task_work_run+0x10/0x10
[ 39.743461][ T781] ? __cfi___close_range+0x10/0x10
[ 39.748629][ T781] exit_to_user_mode_loop+0x9b/0xb0
[ 39.753876][ T781] exit_to_user_mode_prepare+0x87/0xd0
[ 39.759377][ T781] syscall_exit_to_user_mode+0x1a/0x30
[ 39.764901][ T781] do_syscall_64+0x58/0xa0
[ 39.769350][ T781] ? clear_bhb_loop+0x30/0x80
[ 39.774101][ T781] ? clear_bhb_loop+0x30/0x80
[ 39.778814][ T781] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.784779][ T781] RIP: 0033:0x7fdc1d79e019
[ 39.789222][ T781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.808978][ T781] RSP: 002b:00007ffc590f04d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 39.817529][ T781] RAX: 0000000000000000 RBX: 00007ffc590f05c0 RCX: 00007fdc1d79e019
[ 39.825554][ T781] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 39.833543][ T781] RBP: 0000000000009a69 R08: 0000000000000001 R09: 0000000000000000
[ 39.841575][ T781] R10: 0000001b33820000 R11: 0000000000000246 R12: 00007ffc590f0600
[ 39.849605][ T781] R13: 00007fdc1da25fac R14: 0000000000009a9c R15: 00007fdc1da25fa0
[ 39.857651][ T781]
[ 39.860692][ T781] ---[ end trace 0000000000000000 ]---
[ 39.881906][ T805] ------------[ cut here ]------------
[ 39.887569][ T805] WARNING: CPU: 1 PID: 805 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.897644][ T805] Modules linked in:
[ 39.901560][ T805] CPU: 1 PID: 805 Comm: syz.0.211 Tainted: G B W syzkaller #0
[ 39.910308][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 39.920412][ T805] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.926827][ T805] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.946488][ T805] RSP: 0018:ffffc9000220fcb0 EFLAGS: 00010293
[ 39.952591][ T805] RAX: ffffffff849bb307 RBX: ffff888109432000 RCX: ffff888110b26540
[ 39.960635][ T805] RDX: 0000000000000000 RSI: 000000001e455280 RDI: 000000000c04eb7d
[ 39.968692][ T805] RBP: ffffc9000220fcd0 R08: ffff888109432083 R09: 1ffff11021286410
[ 39.976734][ T805] R10: dffffc0000000000 R11: ffffed1021286411 R12: dffffc0000000000
[ 39.984756][ T805] R13: dffffc0000000000 R14: 000000001e455280 R15: ffff88810d6d5c00
[ 39.992769][ T805] FS: 0000555562be0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 40.001810][ T805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.008446][ T805] CR2: 00007f5ff44738e0 CR3: 0000000129e8b000 CR4: 00000000003506a0
[ 40.016487][ T805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.024527][ T805] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.032535][ T805] Call Trace:
[ 40.035876][ T805]
[ 40.038842][ T805] pppol2tp_release+0x150/0x2b0
[ 40.043729][ T805] sock_close+0xc9/0x220
[ 40.048050][ T805] ? __cfi_sock_close+0x10/0x10
[ 40.052948][ T805] __fput+0x1fd/0x8f0