syzkaller
syzkaller login: [ 15.698774][ T28] kauditd_printk_skb: 25 callbacks suppressed
[ 15.698790][ T28] audit: type=1400 audit(1784843529.820:59): avc: denied { transition } for pid=226 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.703480][ T28] audit: type=1400 audit(1784843529.820:60): avc: denied { noatsecure } for pid=226 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.707371][ T28] audit: type=1400 audit(1784843529.840:61): avc: denied { write } for pid=226 comm="sh" path="pipe:[14434]" dev="pipefs" ino=14434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 15.711453][ T28] audit: type=1400 audit(1784843529.840:62): avc: denied { rlimitinh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 15.714508][ T28] audit: type=1400 audit(1784843529.840:63): avc: denied { siginh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 17.712431][ T233] sshd-session (233) used greatest stack depth: 21216 bytes left
Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts.
2026/07/23 21:52:19 parsed 1 programs
2026/07/23 21:52:19 serving rpc on tcp://39125
[ 25.593733][ T28] audit: type=1400 audit(1784843539.720:64): avc: denied { node_bind } for pid=296 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 25.615720][ T28] audit: type=1400 audit(1784843539.720:65): avc: denied { module_request } for pid=296 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 26.787279][ T28] audit: type=1400 audit(1784843540.910:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 26.790751][ T302] cgroup: Unknown subsys name 'net'
[ 26.810187][ T28] audit: type=1400 audit(1784843540.910:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.837491][ T28] audit: type=1400 audit(1784843540.950:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.837958][ T302] cgroup: Unknown subsys name 'devices'
[ 26.952800][ T302] cgroup: Unknown subsys name 'hugetlb'
[ 26.958466][ T302] cgroup: Unknown subsys name 'rlimit'
[ 27.101523][ T28] audit: type=1400 audit(1784843541.230:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.124789][ T28] audit: type=1400 audit(1784843541.230:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.145421][ T28] audit: type=1400 audit(1784843541.230:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.160416][ T307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.166320][ T28] audit: type=1400 audit(1784843541.230:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.191609][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 27.194719][ T28] audit: type=1400 audit(1784843541.230:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 28.020498][ T314] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.614387][ T350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.621780][ T350] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.631482][ T350] device bridge_slave_0 entered promiscuous mode
[ 28.646240][ T350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.653497][ T350] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.661197][ T350] device bridge_slave_1 entered promiscuous mode
[ 28.788011][ T350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.795261][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.802649][ T350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.809838][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.835724][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.844770][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.852459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.860108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.881657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.890061][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.897153][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.905124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.913484][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.920543][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.928234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.936644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.951580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.963859][ T350] device veth0_vlan entered promiscuous mode
[ 28.971200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.979367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
2026/07/23 21:52:23 executed programs: 0
[ 28.987369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.999813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.009421][ T350] device veth1_macvtap entered promiscuous mode
[ 29.019536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.030091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.239445][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.246561][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.254084][ T372] device bridge_slave_0 entered promiscuous mode
[ 29.263092][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.270168][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.277736][ T372] device bridge_slave_1 entered promiscuous mode
[ 29.372000][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.379168][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.386946][ T374] device bridge_slave_0 entered promiscuous mode
[ 29.396519][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.403795][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.411357][ T374] device bridge_slave_1 entered promiscuous mode
[ 29.451607][ T377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.458692][ T377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.466626][ T377] device bridge_slave_0 entered promiscuous mode
[ 29.491587][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.498925][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.506583][ T380] device bridge_slave_0 entered promiscuous mode
[ 29.513639][ T377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.521014][ T377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.528532][ T377] device bridge_slave_1 entered promiscuous mode
[ 29.560670][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.567764][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.575516][ T380] device bridge_slave_1 entered promiscuous mode
[ 29.619355][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.626674][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.634234][ T379] device bridge_slave_0 entered promiscuous mode
[ 29.641884][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.649130][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.656673][ T379] device bridge_slave_1 entered promiscuous mode
[ 29.866557][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.874105][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.881439][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.888485][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.921140][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.928458][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.936517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.944201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.952462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.960938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.969169][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.976241][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.983665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.992087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.000242][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.007493][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.015120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.023518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.031758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.039813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.053343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.077013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.084808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.092536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.100076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.107869][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.116475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.124942][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.132007][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.139597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.148280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.156608][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.163692][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.171315][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.179688][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.188254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.217581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.225918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.234073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.243230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.251702][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.258773][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.266252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.274678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.283169][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.290204][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.297819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.306010][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.314239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.321926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.329434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.339794][ T372] device veth0_vlan entered promiscuous mode
[ 30.360083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.368457][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.376931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.384749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.397582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.405352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.417887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.426285][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.433360][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.443686][ T372] device veth1_macvtap entered promiscuous mode
[ 30.464667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.474116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.483280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.492034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.500240][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.508633][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.515716][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.523209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.531735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.539893][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.546962][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.554467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.563027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.571361][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.578423][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.586972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.597192][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.605721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.623151][ T380] device veth0_vlan entered promiscuous mode
[ 30.629407][ T377] device veth0_vlan entered promiscuous mode
[ 30.646965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.655094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.664473][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.672745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.680993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.689052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.697405][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.705007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.712577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.720003][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.731660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.740061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.753762][ T377] device veth1_macvtap entered promiscuous mode
[ 30.766495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.775010][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.783495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.791410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.799570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.810485][ T380] device veth1_macvtap entered promiscuous mode
[ 30.828459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.836362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.845198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.853926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.862810][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.871510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.879627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.888160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.896388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.908598][ T379] device veth0_vlan entered promiscuous mode
[ 30.926649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.934962][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.943698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.952573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.961076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.969324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.978920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.986683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.994310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.002838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.037708][ T379] device veth1_macvtap entered promiscuous mode
[ 31.050795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.059217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.069868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 31.071775][ T28] kauditd_printk_skb: 31 callbacks suppressed
[ 31.071809][ T28] audit: type=1400 audit(1784843545.200:105): avc: denied { create } for pid=398 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 31.083947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.085196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 31.123361][ T28] audit: type=1400 audit(1784843545.250:106): avc: denied { connect } for pid=398 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 31.163427][ T28] audit: type=1400 audit(1784843545.270:107): avc: denied { ioctl } for pid=398 comm="syz.4.21" path="socket:[17553]" dev="sockfs" ino=17553 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 31.168813][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 31.200022][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.214346][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.223404][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.232145][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.241189][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.254364][ T374] device veth0_vlan entered promiscuous mode
[ 31.294498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 31.310693][ T403] ==================================================================
[ 31.318813][ T403] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0
[ 31.323244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 31.326942][ T403] Read of size 4 at addr ffff888117c07400 by task syz.5.19/403
[ 31.342178][ T403]
[ 31.344542][ T403] CPU: 0 PID: 403 Comm: syz.5.19 Not tainted syzkaller #0
[ 31.351854][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 31.356424][ T402] ------------[ cut here ]------------
[ 31.361970][ T403] Call Trace:
[ 31.361979][ T403]
[ 31.361987][ T403] __dump_stack+0x21/0x24
[ 31.367531][ T402] WARNING: CPU: 1 PID: 402 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.370755][ T403] dump_stack_lvl+0x110/0x170
[ 31.370782][ T403] ? __cfi_dump_stack_lvl+0x8/0x8
[ 31.370806][ T403] ? _raw_spin_lock_bh+0x94/0xf0
[ 31.370832][ T403] ? preempt_schedule+0xbc/0xd0
[ 31.370857][ T403] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 31.370881][ T403] print_address_description+0x71/0x200
[ 31.370902][ T403] print_report+0x4a/0x60
[ 31.370923][ T403] kasan_report+0x122/0x150
[ 31.370949][ T403] ? pppol2tp_sock_to_session+0x1a0/0x1b0
[ 31.370984][ T403] __asan_report_load4_noabort+0x14/0x20
[ 31.373945][ T402] Modules linked in:
[ 31.378289][ T403] pppol2tp_sock_to_session+0x1a0/0x1b0
[ 31.388966][ T402] CPU: 1 PID: 402 Comm: syz.4.21 Not tainted syzkaller #0
[ 31.393031][ T403] pppol2tp_release+0x150/0x2b0
[ 31.393060][ T403] sock_close+0xc9/0x220
[ 31.398076][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 31.403011][ T403] ? __cfi_sock_close+0x10/0x10
[ 31.407886][ T402] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 31.413603][ T403] __fput+0x1fd/0x8f0
[ 31.413634][ T403] ____fput+0x15/0x20
[ 31.419169][ T402] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 31.423509][ T403] task_work_run+0x1e1/0x250
[ 31.423536][ T403] ? __cfi_task_work_run+0x10/0x10
[ 31.423561][ T403] ? free_nsproxy+0x21f/0x270
[ 31.423597][ T403] do_exit+0xaf2/0x2850
[ 31.423628][ T403] ? __cfi_do_exit+0x10/0x10
[ 31.423705][ T403] ? xfd_validate_state+0x70/0x150
[ 31.428225][ T402] RSP: 0018:ffffc90000af7b90 EFLAGS: 00010293
[ 31.433966][ T403] ? __kasan_check_write+0x14/0x20
[ 31.433992][ T403] __x64_sys_exit+0x40/0x40
[ 31.439726][ T402]
[ 31.439735][ T402] RAX: ffffffff849bb307 RBX: ffff888118deb000 RCX: ffff888110638000
[ 31.443675][ T403] x64_sys_call+0x67/0x9a0
[ 31.443710][ T403] do_syscall_64+0x4c/0xa0
[ 31.449273][ T402] RDX: 0000000000000000 RSI: 00000000179a9d10 RDI: 000000000c04eb7d
[ 31.456426][ T403] ? clear_bhb_loop+0x30/0x80
[ 31.456447][ T403] ? clear_bhb_loop+0x30/0x80
[ 31.461519][ T402] RBP: ffffc90000af7bb0 R08: ffff888118deb083 R09: 1ffff110231bd610
[ 31.465608][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.476033][ T402] R10: dffffc0000000000 R11: ffffed10231bd611 R12: dffffc0000000000
[ 31.480565][ T403] RIP: 0033:0x7f36b9d9de99
[ 31.486922][ T402] R13: dffffc0000000000 R14: 00000000179a9d10 R15: ffff888115ad4800
[ 31.490910][ T403] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 31.490921][ T403] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 31.494923][ T402] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 31.514544][ T403] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 31.514568][ T403] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.514581][ T403] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 31.514594][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.514606][ T403] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 31.514625][ T403]
[ 31.519224][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.524341][ T403]
[ 31.524347][ T403] Allocated by task 401:
[ 31.524356][ T403] kasan_set_track+0x4b/0x70
[ 31.529061][ T402] CR2: 00007ffd8f9dd750 CR3: 000000012fa0e000 CR4: 00000000003506a0
[ 31.533220][ T403] kasan_save_alloc_info+0x1f/0x30
[ 31.533240][ T403] __kasan_kmalloc+0x95/0xb0
[ 31.533262][ T403] __kmalloc+0xb4/0x1e0
[ 31.533278][ T403] l2tp_session_create+0x38/0xbd0
[ 31.533296][ T403] pppol2tp_connect+0xbf5/0x1640
[ 31.537898][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.543010][ T403] __sys_connect+0x3da/0x460
[ 31.543033][ T403] __x64_sys_connect+0x7a/0x90
[ 31.549206][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.554316][ T403] x64_sys_call+0x88d/0x9a0
[ 31.554341][ T403] do_syscall_64+0x4c/0xa0
[ 31.558841][ T402] Call Trace:
[ 31.558849][ T402]
[ 31.561175][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.569268][ T402] pppol2tp_release+0x150/0x2b0
[ 31.573710][ T403]
[ 31.573715][ T403] Freed by task 222:
[ 31.573724][ T403] kasan_set_track+0x4b/0x70
[ 31.578274][ T402] sock_close+0xc9/0x220
[ 31.586252][ T403] kasan_save_free_info+0x2b/0x40
[ 31.586272][ T403] ____kasan_slab_free+0x132/0x180
[ 31.586295][ T403] __kasan_slab_free+0x11/0x20
[ 31.586318][ T403] slab_free_freelist_hook+0xc2/0x190
[ 31.586335][ T403] __kmem_cache_free+0xb7/0x1b0
[ 31.586361][ T403] kfree+0x6f/0xf0
[ 31.591075][ T402] ? __cfi_sock_close+0x10/0x10
[ 31.595727][ T403] l2tp_session_put+0xaf/0x1a0
[ 31.604102][ T402] __fput+0x1fd/0x8f0
[ 31.610031][ T403] l2tp_session_delete+0x3df/0x4d0
[ 31.618116][ T402] ____fput+0x15/0x20
[ 31.622545][ T403] l2tp_tunnel_del_work+0x199/0x410
[ 31.622568][ T403] process_one_work+0x717/0xc30
[ 31.630559][ T402] task_work_run+0x1e1/0x250
[ 31.637595][ T403] worker_thread+0xa4d/0x11d0
[ 31.646173][ T402] ? __cfi_task_work_run+0x10/0x10
[ 31.655000][ T403] kthread+0x281/0x320
[ 31.655027][ T403] ret_from_fork+0x1f/0x30
[ 31.655053][ T403]
[ 31.655058][ T403] The buggy address belongs to the object at ffff888117c07400
[ 31.655058][ T403] which belongs to the cache kmalloc-512 of size 512
[ 31.663225][ T402] ? free_nsproxy+0x21f/0x270
[ 31.671227][ T403] The buggy address is located 0 bytes inside of
[ 31.671227][ T403] 512-byte region [ffff888117c07400, ffff888117c07600)
[ 31.671251][ T403]
[ 31.671257][ T403] The buggy address belongs to the physical page:
[ 31.671295][ T403] page:ffffea00045f0100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117c04
[ 31.679768][ T402] do_exit+0xaf2/0x2850
[ 31.687768][ T403] head:ffffea00045f0100 order:2 compound_mapcount:0 compound_pincount:0
[ 31.687787][ T403] flags: 0x4000000000010200(slab|head|zone=1)
[ 31.687829][ T403] raw: 4000000000010200 ffffea000456b500 dead000000000002 ffff888100042f00
[ 31.687849][ T403] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 31.696491][ T402] ? __cfi_do_exit+0x10/0x10
[ 31.699415][ T403] page dumped because: kasan: bad access detected
[ 31.706097][ T402] ? xfd_validate_state+0x70/0x150
[ 31.708466][ T403] page_owner tracks the page as allocated
[ 31.708500][ T403] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 112, tgid 112 (udevd), ts 5877172612, free_ts 0
[ 31.712777][ T402] ? __kasan_check_write+0x14/0x20
[ 31.717325][ T403] post_alloc_hook+0x1f5/0x210
[ 31.725365][ T402] __x64_sys_exit+0x40/0x40
[ 31.730433][ T403] prep_new_page+0x1c/0x110
[ 31.735492][ T402] x64_sys_call+0x67/0x9a0
[ 31.739312][ T403] get_page_from_freelist+0x2ca9/0x2d20
[ 31.744401][ T402] do_syscall_64+0x4c/0xa0
[ 31.749466][ T403] __alloc_pages+0x1fa/0x610
[ 31.757726][ T402] ? clear_bhb_loop+0x30/0x80
[ 31.762462][ T403] alloc_slab_page+0x6e/0xf0
[ 31.762493][ T403] new_slab+0x98/0x3e0
[ 31.762510][ T403] ___slab_alloc+0x70f/0xb70
[ 31.767294][ T402] ? clear_bhb_loop+0x30/0x80
[ 31.775274][ T403] __slab_alloc+0x5e/0xa0
[ 31.775303][ T403] __kmem_cache_alloc_node+0x204/0x2d0
[ 31.779814][ T402] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.784226][ T403] __kmalloc_node_track_caller+0xa1/0x1e0
[ 31.784247][ T403] __alloc_skb+0x226/0x4a0
[ 31.784264][ T403] alloc_skb_with_frags+0xa8/0x620
[ 31.784282][ T403] sock_alloc_send_pskb+0x87f/0x9a0
[ 31.784306][ T403] unix_dgram_sendmsg+0x5c1/0x1710
[ 31.784335][ T403] sock_write_iter+0x2ea/0x3f0
[ 31.784361][ T403] vfs_write+0x5ef/0xd00
[ 31.787648][ T402] RIP: 0033:0x7f651459de99
[ 31.790587][ T403] page_owner free stack trace missing
[ 31.790595][ T403]
[ 31.790599][ T403] Memory state around the buggy address:
[ 31.790611][ T403] ffff888117c07300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 31.796511][ T402] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 31.801373][ T403] ffff888117c07380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 31.801387][ T403] >ffff888117c07400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.803997][ T402] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246
[ 31.807978][ T403] ^
[ 31.807989][ T403] ffff888117c07480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.812605][ T402] ORIG_RAX: 000000000000003c
[ 31.816808][ T403] ffff888117c07500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 31.822082][ T402] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 31.827143][ T403] ==================================================================
[ 31.829242][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 31.832097][ T402] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 31.832113][ T402] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 31.832126][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 31.832138][ T402] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 31.832157][ T402]
[ 31.832163][ T402] ---[ end trace 0000000000000000 ]---
[ 31.850030][ T403] Disabling lock debugging due to kernel taint
[ 31.882563][ T28] audit: type=1400 audit(1784843546.010:108): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 31.930950][ T403] ------------[ cut here ]------------
[ 31.951032][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 31.957697][ T403] WARNING: CPU: 1 PID: 403 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 31.973912][ T28] audit: type=1400 audit(1784843546.070:109): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.976131][ T403] Modules linked in:
[ 31.985713][ T28] audit: type=1400 audit(1784843546.070:110): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.993336][ T403]
[ 31.993346][ T403] CPU: 1 PID: 403 Comm: syz.5.19 Tainted: G B W syzkaller #0
[ 31.993369][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 31.999275][ T28] audit: type=1400 audit(1784843546.070:111): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.004516][ T403] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.010454][ T28] audit: type=1400 audit(1784843546.070:112): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.015427][ T403] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.045841][ T28] audit: type=1400 audit(1784843546.070:113): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.049746][ T403] RSP: 0018:ffffc90000b17b90 EFLAGS: 00010293
[ 32.054997][ T28] audit: type=1400 audit(1784843546.070:114): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.058909][ T403]
[ 32.058916][ T403] RAX: ffffffff849bb307 RBX: ffff888118f87000 RCX: ffff888110639440
[ 32.058936][ T403] RDX: 0000000000000000 RSI: 000000002bfe4180 RDI: 000000000c04eb7d
[ 32.548867][ T403] RBP: ffffc90000b17bb0 R08: ffffffff87b757e7 R09: 1ffffffff0f6eafc
[ 32.556916][ T403] R10: dffffc0000000000 R11: fffffbfff0f6eafd R12: dffffc0000000000
[ 32.564964][ T403] R13: dffffc0000000000 R14: 000000002bfe4180 R15: ffff888117c07400
[ 32.573013][ T403] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 32.582014][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.588667][ T403] CR2: 00007f8b6cf58fb0 CR3: 000000000700f000 CR4: 00000000003506a0
[ 32.596719][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.604753][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.612886][ T403] Call Trace:
[ 32.616291][ T403]
[ 32.619263][ T403] pppol2tp_release+0x150/0x2b0
[ 32.624209][ T403] sock_close+0xc9/0x220
[ 32.628498][ T403] ? __cfi_sock_close+0x10/0x10
[ 32.633441][ T403] __fput+0x1fd/0x8f0
[ 32.637470][ T403] ____fput+0x15/0x20
[ 32.641585][ T403] task_work_run+0x1e1/0x250
[ 32.646221][ T403] ? __cfi_task_work_run+0x10/0x10
[ 32.651416][ T403] ? free_nsproxy+0x21f/0x270
[ 32.656146][ T403] do_exit+0xaf2/0x2850
[ 32.660374][ T403] ? __cfi_do_exit+0x10/0x10
[ 32.665108][ T403] ? xfd_validate_state+0x70/0x150
[ 32.670318][ T403] ? __kasan_check_write+0x14/0x20
[ 32.675545][ T403] __x64_sys_exit+0x40/0x40
[ 32.680101][ T403] x64_sys_call+0x67/0x9a0
[ 32.684611][ T403] do_syscall_64+0x4c/0xa0
[ 32.689065][ T403] ? clear_bhb_loop+0x30/0x80
[ 32.694029][ T403] ? clear_bhb_loop+0x30/0x80
[ 32.698917][ T403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 32.704926][ T403] RIP: 0033:0x7f36b9d9de99
[ 32.709414][ T403] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 32.716511][ T403] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 32.725076][ T403] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 32.733142][ T403] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.741216][ T403] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 32.749509][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 32.757578][ T403] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 32.765615][ T403]
[ 32.768680][ T403] ---[ end trace 0000000000000000 ]---
[ 32.793530][ T43] device bridge_slave_1 left promiscuous mode
[ 32.799730][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 32.818981][ T43] device bridge_slave_0 left promiscuous mode
[ 32.835907][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 32.855861][ T43] device veth1_macvtap left promiscuous mode
[ 32.867319][ T43] device veth0_vlan left promiscuous mode
[ 32.876483][ T484] ------------[ cut here ]------------
[ 32.882097][ T484] WARNING: CPU: 0 PID: 484 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 32.892303][ T484] Modules linked in:
[ 32.896238][ T484] CPU: 0 PID: 484 Comm: syz.4.45 Tainted: G B W syzkaller #0
[ 32.905084][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 32.915310][ T484] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 32.921795][ T484] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 32.941541][ T484] RSP: 0018:ffffc90000d87b90 EFLAGS: 00010293
[ 32.947753][ T484] RAX: ffffffff849bb307 RBX: ffff88811a6c3000 RCX: ffff88811a9a9440
[ 32.956141][ T484] RDX: 0000000000000000 RSI: 000000001a980000 RDI: 000000000c04eb7d
[ 32.964440][ T484] RBP: ffffc90000d87bb0 R08: ffff88811a6c3083 R09: 1ffff110234d8610
[ 32.972813][ T484] R10: dffffc0000000000 R11: ffffed10234d8611 R12: dffffc0000000000
[ 32.981202][ T484] R13: dffffc0000000000 R14: 000000001a980000 R15: ffff888117c1b400
[ 32.989223][ T484] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 32.998304][ T484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.005108][ T484] CR2: 00007fd468358fb0 CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.013253][ T484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.021411][ T484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.029527][ T484] Call Trace:
[ 33.032923][ T484]
[ 33.035888][ T484] pppol2tp_release+0x150/0x2b0
[ 33.040813][ T484] sock_close+0xc9/0x220
[ 33.045107][ T484] ? __cfi_sock_close+0x10/0x10
[ 33.050000][ T484] __fput+0x1fd/0x8f0
[ 33.054071][ T484] ____fput+0x15/0x20
[ 33.058093][ T484] task_work_run+0x1e1/0x250
[ 33.062811][ T484] ? __cfi_task_work_run+0x10/0x10
[ 33.068050][ T484] ? free_nsproxy+0x21f/0x270
[ 33.072818][ T484] do_exit+0xaf2/0x2850
[ 33.077017][ T484] ? __cfi_do_exit+0x10/0x10
[ 33.081747][ T484] ? xfd_validate_state+0x70/0x150
[ 33.086929][ T484] ? __kasan_check_write+0x14/0x20
[ 33.092118][ T484] __x64_sys_exit+0x40/0x40
[ 33.096670][ T484] x64_sys_call+0x67/0x9a0
[ 33.101193][ T484] do_syscall_64+0x4c/0xa0
[ 33.105654][ T484] ? clear_bhb_loop+0x30/0x80
[ 33.110367][ T484] ? clear_bhb_loop+0x30/0x80
[ 33.115137][ T484] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.121124][ T484] RIP: 0033:0x7f651459de99
[ 33.125575][ T484] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 33.132664][ T484] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.141207][ T484] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 33.149243][ T484] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.157387][ T484] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 33.165422][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.173484][ T484] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 33.181520][ T484]
[ 33.184570][ T484] ---[ end trace 0000000000000000 ]---
[ 33.316687][ T546] ------------[ cut here ]------------
[ 33.322260][ T546] WARNING: CPU: 1 PID: 546 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.332349][ T546] Modules linked in:
[ 33.336280][ T546] CPU: 1 PID: 546 Comm: syz.4.64 Tainted: G B W syzkaller #0
[ 33.344979][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 33.355701][ T546] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.362113][ T546] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.381800][ T546] RSP: 0018:ffffc90000fffb90 EFLAGS: 00010293
[ 33.388093][ T546] RAX: ffffffff849bb307 RBX: ffff88811b2b3000 RCX: ffff88811b492880
[ 33.396133][ T546] RDX: 0000000000000000 RSI: 0000000030b09630 RDI: 000000000c04eb7d
[ 33.404174][ T546] RBP: ffffc90000fffbb0 R08: ffff88811b2b3083 R09: 1ffff11023656610
[ 33.412223][ T546] R10: dffffc0000000000 R11: ffffed1023656611 R12: dffffc0000000000
[ 33.420240][ T546] R13: dffffc0000000000 R14: 0000000030b09630 R15: ffff88811966dc00
[ 33.428381][ T546] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 33.437375][ T546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.444037][ T546] CR2: 00007f36ba027dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 33.452070][ T546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.460082][ T546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.468434][ T546] Call Trace:
[ 33.471791][ T546]
[ 33.474750][ T546] pppol2tp_release+0x150/0x2b0
[ 33.479899][ T546] sock_close+0xc9/0x220
[ 33.484229][ T546] ? __cfi_sock_close+0x10/0x10
[ 33.489126][ T546] __fput+0x1fd/0x8f0
[ 33.493234][ T546] ____fput+0x15/0x20
[ 33.497260][ T546] task_work_run+0x1e1/0x250
[ 33.501950][ T546] ? __cfi_task_work_run+0x10/0x10
[ 33.507110][ T546] ? free_nsproxy+0x21f/0x270
[ 33.511885][ T546] do_exit+0xaf2/0x2850
[ 33.516256][ T546] ? __cfi_do_exit+0x10/0x10
[ 33.521017][ T546] ? xfd_validate_state+0x70/0x150
[ 33.526165][ T546] ? __kasan_check_write+0x14/0x20
[ 33.531347][ T546] __x64_sys_exit+0x40/0x40
[ 33.535896][ T546] x64_sys_call+0x67/0x9a0
[ 33.540448][ T546] do_syscall_64+0x4c/0xa0
[ 33.544974][ T546] ? clear_bhb_loop+0x30/0x80
[ 33.549691][ T546] ? clear_bhb_loop+0x30/0x80
[ 33.554453][ T546] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.560392][ T546] RIP: 0033:0x7f651459de99
[ 33.565030][ T546] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 33.572104][ T546] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.580564][ T546] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 33.588717][ T546] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.596823][ T546] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 33.604947][ T546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.613171][ T546] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 33.621231][ T546]
[ 33.624293][ T546] ---[ end trace 0000000000000000 ]---
[ 33.683832][ T618] ------------[ cut here ]------------
[ 33.689345][ T618] WARNING: CPU: 0 PID: 618 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 33.699501][ T618] Modules linked in:
[ 33.703638][ T618] CPU: 0 PID: 618 Comm: syz.4.88 Tainted: G B W syzkaller #0
[ 33.712343][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 33.722495][ T618] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 33.728968][ T618] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 33.748664][ T618] RSP: 0018:ffffc9000119fb90 EFLAGS: 00010293
[ 33.754843][ T618] RAX: ffffffff849bb307 RBX: ffff88811c232000 RCX: ffff88811c6a9440
[ 33.762900][ T618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c04eb7d
[ 33.771019][ T618] RBP: ffffc9000119fbb0 R08: ffff88811c232083 R09: 1ffff11023846410
[ 33.779115][ T618] R10: dffffc0000000000 R11: ffffed1023846411 R12: dffffc0000000000
[ 33.787528][ T618] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811b6ff800
[ 33.795619][ T618] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 33.804642][ T618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.811302][ T618] CR2: 00005563fda48b10 CR3: 000000000700f000 CR4: 00000000003506b0
[ 33.819398][ T618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.827551][ T618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.835600][ T618] Call Trace:
[ 33.838949][ T618]
[ 33.841987][ T618] pppol2tp_release+0x150/0x2b0
[ 33.847146][ T618] sock_close+0xc9/0x220
[ 33.851486][ T618] ? __cfi_sock_close+0x10/0x10
[ 33.856478][ T618] __fput+0x1fd/0x8f0
[ 33.860511][ T618] ____fput+0x15/0x20
[ 33.864735][ T618] task_work_run+0x1e1/0x250
[ 33.869377][ T618] ? __cfi_task_work_run+0x10/0x10
[ 33.874601][ T618] ? free_nsproxy+0x21f/0x270
[ 33.879341][ T618] do_exit+0xaf2/0x2850
[ 33.883597][ T618] ? __cfi_do_exit+0x10/0x10
[ 33.888238][ T618] ? xfd_validate_state+0x70/0x150
[ 33.893451][ T618] ? __kasan_check_write+0x14/0x20
[ 33.898603][ T618] __x64_sys_exit+0x40/0x40
[ 33.903277][ T618] x64_sys_call+0x67/0x9a0
[ 33.907964][ T618] do_syscall_64+0x4c/0xa0
[ 33.912475][ T618] ? clear_bhb_loop+0x30/0x80
[ 33.917195][ T618] ? clear_bhb_loop+0x30/0x80
[ 33.921949][ T618] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.928061][ T618] RIP: 0033:0x7f651459de99
[ 33.932577][ T618] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 33.939621][ T618] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 33.948562][ T618] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 33.956844][ T618] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.964889][ T618] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 33.972973][ T618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 33.980997][ T618] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 33.989015][ T618]
[ 33.992113][ T618] ---[ end trace 0000000000000000 ]---
2026/07/23 21:52:28 executed programs: 99
[ 34.072913][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 34.086917][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 34.115380][ T374] device veth1_macvtap entered promiscuous mode
[ 34.159078][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 34.177327][ T658] ------------[ cut here ]------------
[ 34.183314][ T658] WARNING: CPU: 0 PID: 658 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.193476][ T658] Modules linked in:
[ 34.197635][ T658] CPU: 0 PID: 658 Comm: syz.5.100 Tainted: G B W syzkaller #0
[ 34.206466][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 34.216662][ T658] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.223248][ T658] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.227999][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 34.243333][ T658] RSP: 0018:ffffc9000100fb90 EFLAGS: 00010293
[ 34.257387][ T658] RAX: ffffffff849bb307 RBX: ffff88811d4aa000 RCX: ffff88811d42d100
[ 34.265451][ T658] RDX: 0000000000000000 RSI: 000000001672c6c0 RDI: 000000000c04eb7d
[ 34.273507][ T658] RBP: ffffc9000100fbb0 R08: ffff88811d4aa083 R09: 1ffff11023a95410
[ 34.281550][ T658] R10: dffffc0000000000 R11: ffffed1023a95411 R12: dffffc0000000000
[ 34.289561][ T658] R13: dffffc0000000000 R14: 000000001672c6c0 R15: ffff88811673b400
[ 34.297615][ T658] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.306610][ T658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.313260][ T658] CR2: 00007fd468358fb0 CR3: 000000000700f000 CR4: 00000000003506b0
[ 34.321294][ T658] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.329320][ T658] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.337394][ T658] Call Trace:
[ 34.340143][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 34.340977][ T658]
[ 34.352146][ T658] pppol2tp_release+0x150/0x2b0
[ 34.357035][ T658] sock_close+0xc9/0x220
[ 34.361372][ T658] ? __cfi_sock_close+0x10/0x10
[ 34.366272][ T658] __fput+0x1fd/0x8f0
[ 34.370293][ T658] ____fput+0x15/0x20
[ 34.374359][ T658] task_work_run+0x1e1/0x250
[ 34.378986][ T658] ? __cfi_task_work_run+0x10/0x10
[ 34.381302][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 34.384270][ T658] ? free_nsproxy+0x21f/0x270
[ 34.397116][ T658] do_exit+0xaf2/0x2850
[ 34.401361][ T658] ? __cfi_do_exit+0x10/0x10
[ 34.405989][ T658] ? xfd_validate_state+0x70/0x150
[ 34.411195][ T658] ? __kasan_check_write+0x14/0x20
[ 34.416344][ T658] __x64_sys_exit+0x40/0x40
[ 34.421017][ T658] x64_sys_call+0x67/0x9a0
[ 34.425498][ T658] do_syscall_64+0x4c/0xa0
[ 34.429974][ T658] ? clear_bhb_loop+0x30/0x80
[ 34.434744][ T658] ? clear_bhb_loop+0x30/0x80
[ 34.439478][ T658] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.445481][ T658] RIP: 0033:0x7f36b9d9de99
[ 34.449955][ T658] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 34.457146][ T658] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.465892][ T658] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 34.473945][ T658] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.481984][ T658] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 34.489993][ T658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.498091][ T658] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 34.506183][ T658]
[ 34.509232][ T658] ---[ end trace 0000000000000000 ]---
[ 34.671545][ T726] ------------[ cut here ]------------
[ 34.677107][ T726] WARNING: CPU: 0 PID: 726 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.687419][ T726] Modules linked in:
[ 34.691489][ T726] CPU: 0 PID: 726 Comm: syz.4.123 Tainted: G B W syzkaller #0
[ 34.700300][ T726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 34.710532][ T726] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.717004][ T726] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.728734][ T725] ------------[ cut here ]------------
[ 34.737722][ T726] RSP: 0018:ffffc90000fffb90 EFLAGS: 00010293
[ 34.743041][ T725] WARNING: CPU: 1 PID: 725 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 34.743082][ T725] Modules linked in:
[ 34.749410][ T726]
[ 34.749418][ T726] RAX: ffffffff849bb307 RBX: ffff88811ee70000 RCX: ffff88811e76d100
[ 34.759531][ T725] CPU: 1 PID: 725 Comm: syz.6.122 Tainted: G B W syzkaller #0
[ 34.759557][ T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 34.763475][ T726] RDX: 0000000000000000 RSI: 0000000019fcd000 RDI: 000000000c04eb7d
[ 34.763491][ T726] RBP: ffffc90000fffbb0 R08: ffff88811ee70083 R09: 1ffff11023dce010
[ 34.763505][ T726] R10: dffffc0000000000 R11: ffffed1023dce011 R12: dffffc0000000000
[ 34.763518][ T726] R13: dffffc0000000000 R14: 0000000019fcd000 R15: ffff88811e47f000
[ 34.763532][ T726] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 34.763549][ T726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.765888][ T725] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 34.773967][ T726] CR2: 00007f36b9d58fb0 CR3: 000000000700f000 CR4: 00000000003506b0
[ 34.773993][ T726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.774006][ T726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.774018][ T726] Call Trace:
[ 34.774024][ T726]
[ 34.774032][ T726] pppol2tp_release+0x150/0x2b0
[ 34.774059][ T726] sock_close+0xc9/0x220
[ 34.774095][ T726] ? __cfi_sock_close+0x10/0x10
[ 34.774123][ T726] __fput+0x1fd/0x8f0
[ 34.782859][ T725] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 34.793265][ T726] ____fput+0x15/0x20
[ 34.801170][ T725] RSP: 0018:ffffc90001677b90 EFLAGS: 00010293
[ 34.809256][ T726] task_work_run+0x1e1/0x250
[ 34.809294][ T726] ? __cfi_task_work_run+0x10/0x10
[ 34.817347][ T725]
[ 34.817355][ T725] RAX: ffffffff849bb307 RBX: ffff88811ee23000 RCX: ffff88811e769440
[ 34.825548][ T726] ? free_nsproxy+0x21f/0x270
[ 34.834621][ T725] RDX: 0000000000000000 RSI: 000000001e439480 RDI: 000000000c04eb7d
[ 34.841125][ T726] do_exit+0xaf2/0x2850
[ 34.847496][ T725] RBP: ffffc90001677bb0 R08: ffff88811ee23083 R09: 1ffff11023dc4610
[ 34.855512][ T726] ? __cfi_do_exit+0x10/0x10
[ 34.863634][ T725] R10: dffffc0000000000 R11: ffffed1023dc4611 R12: dffffc0000000000
[ 34.871631][ T726] ? xfd_validate_state+0x70/0x150
[ 34.874926][ T725] R13: dffffc0000000000 R14: 000000001e439480 R15: ffff88811703a800
[ 34.877921][ T726] ? __kasan_check_write+0x14/0x20
[ 34.882790][ T725] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 34.882808][ T725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 34.882822][ T725] CR2: 00007ffd05d18fc0 CR3: 000000000700f000 CR4: 00000000003506a0
[ 34.882839][ T725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 34.882851][ T725] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 34.887113][ T726] __x64_sys_exit+0x40/0x40
[ 34.891974][ T725] Call Trace:
[ 34.891981][ T725]
[ 34.895958][ T726] x64_sys_call+0x67/0x9a0
[ 34.915771][ T725] pppol2tp_release+0x150/0x2b0
[ 34.915807][ T725] sock_close+0xc9/0x220
[ 34.919807][ T726] do_syscall_64+0x4c/0xa0
[ 34.925946][ T725] ? __cfi_sock_close+0x10/0x10
[ 34.930533][ T726] ? clear_bhb_loop+0x30/0x80
[ 34.935817][ T725] __fput+0x1fd/0x8f0
[ 34.938049][ T726] ? clear_bhb_loop+0x30/0x80
[ 34.946169][ T725] ____fput+0x15/0x20
[ 34.950936][ T726] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.959042][ T725] task_work_run+0x1e1/0x250
[ 34.963311][ T726] RIP: 0033:0x7f651459de99
[ 34.971310][ T725] ? __cfi_task_work_run+0x10/0x10
[ 34.975936][ T726] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 34.983987][ T725] ? free_nsproxy+0x21f/0x270
[ 34.984019][ T725] do_exit+0xaf2/0x2850
[ 34.984048][ T725] ? __cfi_do_exit+0x10/0x10
[ 34.984073][ T725] ? xfd_validate_state+0x70/0x150
[ 34.984101][ T725] ? __kasan_check_write+0x14/0x20
[ 34.984124][ T725] __x64_sys_exit+0x40/0x40
[ 34.984151][ T725] x64_sys_call+0x67/0x9a0
[ 34.984174][ T725] do_syscall_64+0x4c/0xa0
[ 34.984198][ T725] ? clear_bhb_loop+0x30/0x80
[ 34.984216][ T725] ? clear_bhb_loop+0x30/0x80
[ 34.984234][ T725] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 34.984263][ T725] RIP: 0033:0x7f8b6cf9de99
[ 34.984279][ T725] Code: Unable to access opcode bytes at 0x7f8b6cf9de6f.
[ 34.984288][ T725] RSP: 002b:00007f8b6de7eef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 34.984309][ T725] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8b6cf9de99
[ 34.984324][ T725] RDX: 00007f8b6de7f9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 34.984335][ T725] RBP: 00007f8b6d033eaf R08: 0000000000000000 R09: 0000000000000058
[ 34.984347][ T725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 34.984360][ T725] R13: 00007f8b6d226038 R14: 00007f8b6d225fa0 R15: 00007ffe8b959978
[ 34.984377][ T725]
[ 34.984383][ T725] ---[ end trace 0000000000000000 ]---
[ 35.244210][ T726] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.252798][ T726] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 35.260832][ T726] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.268846][ T726] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 35.276894][ T726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.284935][ T726] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 35.292995][ T726]
[ 35.296067][ T726] ---[ end trace 0000000000000000 ]---
[ 35.440905][ T811] ------------[ cut here ]------------
[ 35.446453][ T811] WARNING: CPU: 1 PID: 811 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.456528][ T811] Modules linked in:
[ 35.460453][ T811] CPU: 1 PID: 811 Comm: syz.1.150 Tainted: G B W syzkaller #0
[ 35.469535][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 35.479691][ T811] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.486112][ T811] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.506441][ T811] RSP: 0000:ffffc90001907b90 EFLAGS: 00010293
[ 35.512571][ T811] RAX: ffffffff849bb307 RBX: ffff8881167c2000 RCX: ffff88811f613cc0
[ 35.520676][ T811] RDX: 0000000000000000 RSI: 000000000f39b300 RDI: 000000000c04eb7d
[ 35.528685][ T811] RBP: ffffc90001907bb0 R08: ffff8881167c2083 R09: 1ffff11022cf8410
[ 35.536755][ T811] R10: dffffc0000000000 R11: ffffed1022cf8411 R12: dffffc0000000000
[ 35.544979][ T811] R13: dffffc0000000000 R14: 000000000f39b300 R15: ffff888109ac4800
[ 35.553052][ T811] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.562061][ T811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.568738][ T811] CR2: 00007fd4685f17a0 CR3: 00000001166be000 CR4: 00000000003506a0
[ 35.576992][ T811] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.585652][ T811] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.593705][ T811] Call Trace:
[ 35.597125][ T811]
[ 35.600085][ T811] pppol2tp_release+0x150/0x2b0
[ 35.605020][ T811] sock_close+0xc9/0x220
[ 35.609590][ T811] ? __cfi_sock_close+0x10/0x10
[ 35.614614][ T811] __fput+0x1fd/0x8f0
[ 35.618665][ T811] ____fput+0x15/0x20
[ 35.623799][ T811] task_work_run+0x1e1/0x250
[ 35.628437][ T811] ? __cfi_task_work_run+0x10/0x10
[ 35.633639][ T811] ? free_nsproxy+0x21f/0x270
[ 35.638360][ T811] do_exit+0xaf2/0x2850
[ 35.642596][ T811] ? __cfi_do_exit+0x10/0x10
[ 35.647233][ T811] ? xfd_validate_state+0x70/0x150
[ 35.652424][ T811] ? __kasan_check_write+0x14/0x20
[ 35.657579][ T811] __x64_sys_exit+0x40/0x40
[ 35.662351][ T811] x64_sys_call+0x67/0x9a0
[ 35.666817][ T811] do_syscall_64+0x4c/0xa0
[ 35.671316][ T811] ? clear_bhb_loop+0x30/0x80
[ 35.676088][ T811] ? clear_bhb_loop+0x30/0x80
[ 35.680874][ T811] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 35.686826][ T811] RIP: 0033:0x7f5e96f9de99
[ 35.691298][ T811] Code: Unable to access opcode bytes at 0x7f5e96f9de6f.
[ 35.698364][ T811] RSP: 002b:00007f5e97dc6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 35.706952][ T811] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e96f9de99
[ 35.714994][ T811] RDX: 00007f5e97dc79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 35.723343][ T811] RBP: 00007f5e97033eaf R08: 0000000000000000 R09: 0000000000000058
[ 35.731386][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 35.739426][ T811] R13: 00007f5e97226038 R14: 00007f5e97225fa0 R15: 00007ffda196e978
[ 35.747522][ T811]
[ 35.750605][ T811] ---[ end trace 0000000000000000 ]---
[ 35.772377][ T900] ------------[ cut here ]------------
[ 35.777902][ T900] WARNING: CPU: 1 PID: 900 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 35.788180][ T900] Modules linked in:
[ 35.792146][ T900] CPU: 1 PID: 900 Comm: syz.1.180 Tainted: G B W syzkaller #0
[ 35.800908][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 35.811049][ T900] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 35.817425][ T900] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 35.837196][ T900] RSP: 0018:ffffc90001d9fb90 EFLAGS: 00010293
[ 35.843333][ T900] RAX: ffffffff849bb307 RBX: ffff88810d50b000 RCX: ffff88810e6e9440
[ 35.851371][ T900] RDX: 0000000000000000 RSI: 000000002097bab8 RDI: 000000000c04eb7d
[ 35.859476][ T900] RBP: ffffc90001d9fbb0 R08: ffff88810d50b083 R09: 1ffff11021aa1610
[ 35.867518][ T900] R10: dffffc0000000000 R11: ffffed1021aa1611 R12: dffffc0000000000
[ 35.875575][ T900] R13: dffffc0000000000 R14: 000000002097bab8 R15: ffff88810de71800
[ 35.883653][ T900] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 35.892690][ T900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 35.899313][ T900] CR2: 00007f6514827dac CR3: 000000000700f000 CR4: 00000000003506a0
[ 35.907359][ T900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 35.915410][ T900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 35.923450][ T900] Call Trace:
[ 35.926760][ T900]
[ 35.929722][ T900] pppol2tp_release+0x150/0x2b0
[ 35.934670][ T900] sock_close+0xc9/0x220
[ 35.938968][ T900] ? __cfi_sock_close+0x10/0x10
[ 35.943943][ T900] __fput+0x1fd/0x8f0
[ 35.947983][ T900] ____fput+0x15/0x20
[ 35.952039][ T900] task_work_run+0x1e1/0x250
[ 35.956677][ T900] ? __cfi_task_work_run+0x10/0x10
[ 35.961887][ T900] ? free_nsproxy+0x21f/0x270
[ 35.966637][ T900] do_exit+0xaf2/0x2850
[ 35.970863][ T900] ? __cfi_do_exit+0x10/0x10
[ 35.975493][ T900] ? xfd_validate_state+0x70/0x150
[ 35.980670][ T900] ? __kasan_check_write+0x14/0x20
[ 35.985822][ T900] __x64_sys_exit+0x40/0x40
[ 35.990372][ T900] x64_sys_call+0x67/0x9a0
[ 35.994860][ T900] do_syscall_64+0x4c/0xa0
[ 35.999319][ T900] ? clear_bhb_loop+0x30/0x80
[ 36.004054][ T900] ? clear_bhb_loop+0x30/0x80
[ 36.008773][ T900] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.014842][ T900] RIP: 0033:0x7f5e96f9de99
[ 36.019296][ T900] Code: Unable to access opcode bytes at 0x7f5e96f9de6f.
[ 36.026415][ T900] RSP: 002b:00007f5e97dc6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.034898][ T900] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e96f9de99
[ 36.043023][ T900] RDX: 00007f5e97dc79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.051226][ T900] RBP: 00007f5e97033eaf R08: 0000000000000000 R09: 0000000000000058
[ 36.059232][ T900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.067298][ T900] R13: 00007f5e97226038 R14: 00007f5e97225fa0 R15: 00007ffda196e978
[ 36.075384][ T900]
[ 36.078440][ T900] ---[ end trace 0000000000000000 ]---
[ 36.108410][ T921] ------------[ cut here ]------------
[ 36.114046][ T921] WARNING: CPU: 0 PID: 921 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.124316][ T921] Modules linked in:
[ 36.128233][ T921] CPU: 0 PID: 921 Comm: syz.1.186 Tainted: G B W syzkaller #0
[ 36.137097][ T921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 36.147229][ T921] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.153663][ T921] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.173466][ T921] RSP: 0018:ffffc90001bb7b90 EFLAGS: 00010293
[ 36.179575][ T921] RAX: ffffffff849bb307 RBX: ffff888130cec000 RCX: ffff88812f9ba880
[ 36.187735][ T921] RDX: 0000000000000000 RSI: 000000000ee86480 RDI: 000000000c04eb7d
[ 36.195958][ T921] RBP: ffffc90001bb7bb0 R08: ffff888130cec083 R09: 1ffff1102619d810
[ 36.204030][ T921] R10: dffffc0000000000 R11: ffffed102619d811 R12: dffffc0000000000
[ 36.212320][ T921] R13: dffffc0000000000 R14: 000000000ee86480 R15: ffff888123b8e000
[ 36.220333][ T921] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 36.229352][ T921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.236018][ T921] CR2: 00005563fda43078 CR3: 000000012f88a000 CR4: 00000000003506b0
[ 36.244121][ T921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.252153][ T921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.260185][ T921] Call Trace:
[ 36.263667][ T921]
[ 36.266635][ T921] pppol2tp_release+0x150/0x2b0
[ 36.271652][ T921] sock_close+0xc9/0x220
[ 36.275939][ T921] ? __cfi_sock_close+0x10/0x10
[ 36.280990][ T921] __fput+0x1fd/0x8f0
[ 36.285015][ T921] ____fput+0x15/0x20
[ 36.289070][ T921] task_work_run+0x1e1/0x250
[ 36.293758][ T921] ? __cfi_task_work_run+0x10/0x10
[ 36.298908][ T921] ? free_nsproxy+0x21f/0x270
[ 36.303715][ T921] do_exit+0xaf2/0x2850
[ 36.307922][ T921] ? __cfi_do_exit+0x10/0x10
[ 36.312599][ T921] ? xfd_validate_state+0x70/0x150
[ 36.317749][ T921] ? __kasan_check_write+0x14/0x20
[ 36.322949][ T921] __x64_sys_exit+0x40/0x40
[ 36.327869][ T921] x64_sys_call+0x67/0x9a0
[ 36.332627][ T921] do_syscall_64+0x4c/0xa0
[ 36.337085][ T921] ? clear_bhb_loop+0x30/0x80
[ 36.342012][ T921] ? clear_bhb_loop+0x30/0x80
[ 36.346738][ T921] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.352730][ T921] RIP: 0033:0x7f5e96f9de99
[ 36.357182][ T921] Code: Unable to access opcode bytes at 0x7f5e96f9de6f.
[ 36.364276][ T921] RSP: 002b:00007f5e97dc6ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.372756][ T921] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5e96f9de99
[ 36.380851][ T921] RDX: 00007f5e97dc79c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.388895][ T921] RBP: 00007f5e97033eaf R08: 0000000000000000 R09: 0000000000000058
[ 36.396950][ T921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.404989][ T921] R13: 00007f5e97226038 R14: 00007f5e97225fa0 R15: 00007ffda196e978
[ 36.413120][ T921]
[ 36.416167][ T921] ---[ end trace 0000000000000000 ]---
[ 36.516405][ T976] ------------[ cut here ]------------
[ 36.521965][ T976] WARNING: CPU: 1 PID: 976 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 36.532119][ T976] Modules linked in:
[ 36.536051][ T976] CPU: 1 PID: 976 Comm: syz.4.205 Tainted: G B W syzkaller #0
[ 36.544951][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 36.555170][ T976] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 36.561861][ T976] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 36.581866][ T976] RSP: 0018:ffffc90001f8fb90 EFLAGS: 00010293
[ 36.588146][ T976] RAX: ffffffff849bb307 RBX: ffff888109518000 RCX: ffff888110669440
[ 36.596220][ T976] RDX: 0000000000000000 RSI: 000000002087e660 RDI: 000000000c04eb7d
[ 36.604262][ T976] RBP: ffffc90001f8fbb0 R08: ffff888109518083 R09: 1ffff110212a3010
[ 36.612312][ T976] R10: dffffc0000000000 R11: ffffed10212a3011 R12: dffffc0000000000
[ 36.620317][ T976] R13: dffffc0000000000 R14: 000000002087e660 R15: ffff88810f323800
[ 36.628917][ T976] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 36.637920][ T976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.644577][ T976] CR2: 000055556911d908 CR3: 000000012c637000 CR4: 00000000003506a0
[ 36.652619][ T976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 36.660839][ T976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 36.668864][ T976] Call Trace:
[ 36.672344][ T976]
[ 36.675319][ T976] pppol2tp_release+0x150/0x2b0
[ 36.680213][ T976] sock_close+0xc9/0x220
[ 36.684619][ T976] ? __cfi_sock_close+0x10/0x10
[ 36.689541][ T976] __fput+0x1fd/0x8f0
[ 36.693711][ T976] ____fput+0x15/0x20
[ 36.697748][ T976] task_work_run+0x1e1/0x250
[ 36.702421][ T976] ? __cfi_task_work_run+0x10/0x10
[ 36.707593][ T976] ? free_nsproxy+0x21f/0x270
[ 36.712423][ T976] do_exit+0xaf2/0x2850
[ 36.716645][ T976] ? __cfi_do_exit+0x10/0x10
[ 36.721315][ T976] ? xfd_validate_state+0x70/0x150
[ 36.726776][ T976] ? __kasan_check_write+0x14/0x20
[ 36.731964][ T976] __x64_sys_exit+0x40/0x40
[ 36.736524][ T976] x64_sys_call+0x67/0x9a0
[ 36.741154][ T976] do_syscall_64+0x4c/0xa0
[ 36.745710][ T976] ? clear_bhb_loop+0x30/0x80
[ 36.750471][ T976] ? clear_bhb_loop+0x30/0x80
[ 36.755309][ T976] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 36.761294][ T976] RIP: 0033:0x7f651459de99
[ 36.765745][ T976] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 36.772825][ T976] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 36.781313][ T976] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 36.789331][ T976] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.797363][ T976] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 36.805439][ T976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 36.813467][ T976] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 36.821628][ T976]
[ 36.824684][ T976] ---[ end trace 0000000000000000 ]---
[ 37.020147][ T1074] ------------[ cut here ]------------
[ 37.025793][ T1074] WARNING: CPU: 0 PID: 1074 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.036047][ T1074] Modules linked in:
[ 37.040028][ T1074] CPU: 0 PID: 1074 Comm: syz.3.231 Tainted: G B W syzkaller #0
[ 37.048931][ T1074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 37.059220][ T1074] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.065843][ T1074] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.085624][ T1074] RSP: 0018:ffffc90001bf7b90 EFLAGS: 00010293
[ 37.091777][ T1074] RAX: ffffffff849bb307 RBX: ffff8881122e1000 RCX: ffff888112ca8000
[ 37.099814][ T1074] RDX: 0000000000000000 RSI: 0000000014b6af00 RDI: 000000000c04eb7d
[ 37.107874][ T1074] RBP: ffffc90001bf7bb0 R08: ffff8881122e1083 R09: 1ffff1102245c210
[ 37.116020][ T1074] R10: dffffc0000000000 R11: ffffed102245c211 R12: dffffc0000000000
[ 37.124156][ T1074] R13: dffffc0000000000 R14: 0000000014b6af00 R15: ffff88811022f400
[ 37.132182][ T1074] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.141293][ T1074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.147960][ T1074] CR2: 00007f36b9d58fb0 CR3: 000000000700f000 CR4: 00000000003506b0
[ 37.156149][ T1074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.164217][ T1074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.172263][ T1074] Call Trace:
[ 37.175570][ T1074]
[ 37.178525][ T1074] pppol2tp_release+0x150/0x2b0
[ 37.183464][ T1074] sock_close+0xc9/0x220
[ 37.187750][ T1074] ? __cfi_sock_close+0x10/0x10
[ 37.192676][ T1074] __fput+0x1fd/0x8f0
[ 37.196701][ T1074] ____fput+0x15/0x20
[ 37.200832][ T1074] task_work_run+0x1e1/0x250
[ 37.205468][ T1074] ? __cfi_task_work_run+0x10/0x10
[ 37.210689][ T1074] ? free_nsproxy+0x21f/0x270
[ 37.215411][ T1074] do_exit+0xaf2/0x2850
[ 37.219618][ T1074] ? __cfi_do_exit+0x10/0x10
[ 37.224324][ T1074] ? xfd_validate_state+0x70/0x150
[ 37.229488][ T1074] ? __kasan_check_write+0x14/0x20
[ 37.234727][ T1074] __x64_sys_exit+0x40/0x40
[ 37.239287][ T1074] x64_sys_call+0x67/0x9a0
[ 37.243791][ T1074] do_syscall_64+0x4c/0xa0
[ 37.248245][ T1074] ? clear_bhb_loop+0x30/0x80
[ 37.253017][ T1074] ? clear_bhb_loop+0x30/0x80
[ 37.257740][ T1074] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.263773][ T1074] RIP: 0033:0x7fd46839de99
[ 37.268263][ T1074] Code: Unable to access opcode bytes at 0x7fd46839de6f.
[ 37.275354][ T1074] RSP: 002b:00007fd46918def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.283842][ T1074] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd46839de99
[ 37.292193][ T1074] RDX: 00007fd46918e9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.300373][ T1074] RBP: 00007fd468433eaf R08: 0000000000000000 R09: 0000000000000058
[ 37.308444][ T1074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.316530][ T1074] R13: 00007fd468626038 R14: 00007fd468625fa0 R15: 00007ffd05d19288
[ 37.324711][ T1074]
[ 37.327790][ T1074] ---[ end trace 0000000000000000 ]---
[ 37.495582][ T1176] ------------[ cut here ]------------
[ 37.501150][ T1176] WARNING: CPU: 1 PID: 1176 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.511359][ T1176] Modules linked in:
[ 37.515284][ T1176] CPU: 1 PID: 1176 Comm: syz.6.268 Tainted: G B W syzkaller #0
[ 37.524200][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 37.534564][ T1176] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.541115][ T1176] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.560961][ T1176] RSP: 0018:ffffc900026f7b90 EFLAGS: 00010293
[ 37.567063][ T1176] RAX: ffffffff849bb307 RBX: ffff888112a66000 RCX: ffff88810fddbcc0
[ 37.575284][ T1176] RDX: 0000000000000000 RSI: 0000000015a35000 RDI: 000000000c04eb7d
[ 37.583413][ T1176] RBP: ffffc900026f7bb0 R08: ffff888112a66083 R09: 1ffff1102254cc10
[ 37.591859][ T1176] R10: dffffc0000000000 R11: ffffed102254cc11 R12: dffffc0000000000
[ 37.600099][ T1176] R13: dffffc0000000000 R14: 0000000015a35000 R15: ffff88812d0dec00
[ 37.608330][ T1176] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 37.617312][ T1176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.623975][ T1176] CR2: 00007f5e96f58fb0 CR3: 00000001213a7000 CR4: 00000000003506a0
[ 37.632079][ T1176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.640114][ T1176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.648451][ T1176] Call Trace:
[ 37.651790][ T1176]
[ 37.654760][ T1176] pppol2tp_release+0x150/0x2b0
[ 37.659779][ T1176] sock_close+0xc9/0x220
[ 37.664119][ T1176] ? __cfi_sock_close+0x10/0x10
[ 37.669015][ T1176] __fput+0x1fd/0x8f0
[ 37.673080][ T1176] ____fput+0x15/0x20
[ 37.677114][ T1176] task_work_run+0x1e1/0x250
[ 37.681772][ T1176] ? __cfi_task_work_run+0x10/0x10
[ 37.686929][ T1176] ? free_nsproxy+0x21f/0x270
[ 37.691789][ T1176] do_exit+0xaf2/0x2850
[ 37.695988][ T1176] ? __cfi_do_exit+0x10/0x10
[ 37.700817][ T1176] ? xfd_validate_state+0x70/0x150
[ 37.706066][ T1176] ? __kasan_check_write+0x14/0x20
[ 37.711365][ T1176] __x64_sys_exit+0x40/0x40
[ 37.715931][ T1176] x64_sys_call+0x67/0x9a0
[ 37.720490][ T1176] do_syscall_64+0x4c/0xa0
[ 37.724989][ T1176] ? clear_bhb_loop+0x30/0x80
[ 37.729789][ T1176] ? clear_bhb_loop+0x30/0x80
[ 37.734722][ T1176] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.740724][ T1176] RIP: 0033:0x7f8b6cf9de99
[ 37.745261][ T1176] Code: Unable to access opcode bytes at 0x7f8b6cf9de6f.
[ 37.752521][ T1176] RSP: 002b:00007f8b6de7eef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 37.760992][ T1176] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8b6cf9de99
[ 37.768997][ T1176] RDX: 00007f8b6de7f9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 37.777217][ T1176] RBP: 00007f8b6d033eaf R08: 0000000000000000 R09: 0000000000000058
[ 37.785783][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 37.794158][ T1176] R13: 00007f8b6d226038 R14: 00007f8b6d225fa0 R15: 00007ffe8b959978
[ 37.802207][ T1176]
[ 37.805264][ T1176] ---[ end trace 0000000000000000 ]---
[ 37.831745][ T1275] ------------[ cut here ]------------
[ 37.837363][ T1275] WARNING: CPU: 0 PID: 1275 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 37.847598][ T1275] Modules linked in:
[ 37.851559][ T1275] CPU: 0 PID: 1275 Comm: syz.4.302 Tainted: G B W syzkaller #0
[ 37.860793][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 37.871057][ T1275] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 37.877708][ T1275] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 37.897512][ T1275] RSP: 0018:ffffc90002527b90 EFLAGS: 00010293
[ 37.903696][ T1275] RAX: ffffffff849bb307 RBX: ffff888113673000 RCX: ffff888115af2880
[ 37.911742][ T1275] RDX: 0000000000000000 RSI: 00000000316ff000 RDI: 000000000c04eb7d
[ 37.919851][ T1275] RBP: ffffc90002527bb0 R08: ffff888113673083 R09: 1ffff110226ce610
[ 37.927997][ T1275] R10: dffffc0000000000 R11: ffffed10226ce611 R12: dffffc0000000000
[ 37.936181][ T1275] R13: dffffc0000000000 R14: 00000000316ff000 R15: ffff88810e1c1400
[ 37.944581][ T1275] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 37.953843][ T1275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.960482][ T1275] CR2: 00007f5e972220e0 CR3: 00000001225be000 CR4: 00000000003506b0
[ 37.968634][ T1275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.976677][ T1275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.984739][ T1275] Call Trace:
[ 37.988053][ T1275]
[ 37.991133][ T1275] pppol2tp_release+0x150/0x2b0
[ 37.996116][ T1275] sock_close+0xc9/0x220
[ 38.000416][ T1275] ? __cfi_sock_close+0x10/0x10
[ 38.005422][ T1275] __fput+0x1fd/0x8f0
[ 38.009537][ T1275] ____fput+0x15/0x20
[ 38.013673][ T1275] task_work_run+0x1e1/0x250
[ 38.018346][ T1275] ? __cfi_task_work_run+0x10/0x10
[ 38.023677][ T1275] ? free_nsproxy+0x21f/0x270
[ 38.028496][ T1275] do_exit+0xaf2/0x2850
[ 38.032801][ T1275] ? __cfi_do_exit+0x10/0x10
[ 38.037449][ T1275] ? xfd_validate_state+0x70/0x150
[ 38.042659][ T1275] ? __kasan_check_write+0x14/0x20
[ 38.047815][ T1275] __x64_sys_exit+0x40/0x40
[ 38.052411][ T1275] x64_sys_call+0x67/0x9a0
[ 38.056870][ T1275] do_syscall_64+0x4c/0xa0
[ 38.061634][ T1275] ? clear_bhb_loop+0x30/0x80
[ 38.066342][ T1275] ? clear_bhb_loop+0x30/0x80
[ 38.071184][ T1275] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.075912][ T1272] ------------[ cut here ]------------
[ 38.077112][ T1275] RIP: 0033:0x7f651459de99
[ 38.077132][ T1275] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 38.077142][ T1275] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246
[ 38.082665][ T1272] WARNING: CPU: 1 PID: 1272 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.087110][ T1275] ORIG_RAX: 000000000000003c
[ 38.094283][ T1272] Modules linked in:
[ 38.100259][ T1275] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 38.111654][ T1272]
[ 38.115413][ T1275] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.119050][ T1272] CPU: 1 PID: 1272 Comm: syz.5.301 Tainted: G B W syzkaller #0
[ 38.127051][ T1275] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 38.127067][ T1275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.127078][ T1275] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 38.127094][ T1275]
[ 38.127101][ T1275] ---[ end trace 0000000000000000 ]---
[ 38.179923][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 38.190195][ T1272] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.196793][ T1272] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.216596][ T1272] RSP: 0018:ffffc9000308fb90 EFLAGS: 00010293
[ 38.222821][ T1272] RAX: ffffffff849bb307 RBX: ffff88811368c000 RCX: ffff888115af3cc0
[ 38.231497][ T1272] RDX: 0000000000000000 RSI: 000000001a52c640 RDI: 000000000c04eb7d
[ 38.239774][ T1272] RBP: ffffc9000308fbb0 R08: ffff88811368c083 R09: 1ffff110226d1810
[ 38.247877][ T1272] R10: dffffc0000000000 R11: ffffed10226d1811 R12: dffffc0000000000
[ 38.255964][ T1272] R13: dffffc0000000000 R14: 000000001a52c640 R15: ffff88812d0de000
[ 38.264550][ T1272] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.273809][ T1272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.280440][ T1272] CR2: 00007f36b9d2d0c0 CR3: 000000010fc72000 CR4: 00000000003506a0
[ 38.288475][ T1272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.296640][ T1272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.304670][ T1272] Call Trace:
[ 38.307982][ T1272]
[ 38.310969][ T1272] pppol2tp_release+0x150/0x2b0
[ 38.315870][ T1272] sock_close+0xc9/0x220
[ 38.320271][ T1272] ? __cfi_sock_close+0x10/0x10
[ 38.325224][ T1272] __fput+0x1fd/0x8f0
[ 38.329244][ T1272] ____fput+0x15/0x20
[ 38.333313][ T1272] task_work_run+0x1e1/0x250
[ 38.337964][ T1272] ? __cfi_task_work_run+0x10/0x10
[ 38.343481][ T1272] ? free_nsproxy+0x21f/0x270
[ 38.348204][ T1272] do_exit+0xaf2/0x2850
[ 38.352638][ T1272] ? __cfi_do_exit+0x10/0x10
[ 38.357283][ T1272] ? xfd_validate_state+0x70/0x150
[ 38.362464][ T1272] ? __kasan_check_write+0x14/0x20
[ 38.367694][ T1272] __x64_sys_exit+0x40/0x40
[ 38.372275][ T1272] x64_sys_call+0x67/0x9a0
[ 38.376736][ T1272] do_syscall_64+0x4c/0xa0
[ 38.381226][ T1272] ? clear_bhb_loop+0x30/0x80
[ 38.386002][ T1272] ? clear_bhb_loop+0x30/0x80
[ 38.390791][ T1272] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.396842][ T1272] RIP: 0033:0x7f36b9d9de99
[ 38.401351][ T1272] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 38.408393][ T1272] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.416905][ T1272] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 38.425179][ T1272] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.433489][ T1272] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 38.441542][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.449549][ T1272] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 38.457714][ T1272]
[ 38.460801][ T1272] ---[ end trace 0000000000000000 ]---
[ 38.539187][ T1309] ------------[ cut here ]------------
[ 38.544950][ T1309] WARNING: CPU: 0 PID: 1309 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.555233][ T1309] Modules linked in:
[ 38.559166][ T1309] CPU: 0 PID: 1309 Comm: syz.3.311 Tainted: G B W syzkaller #0
[ 38.568054][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 38.578340][ T1309] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.585067][ T1309] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.605370][ T1309] RSP: 0018:ffffc9000349fb90 EFLAGS: 00010293
[ 38.611539][ T1309] RAX: ffffffff849bb307 RBX: ffff88810e11b000 RCX: ffff8881123d6540
[ 38.619552][ T1309] RDX: 0000000000000000 RSI: 00000000182ab300 RDI: 000000000c04eb7d
[ 38.627630][ T1309] RBP: ffffc9000349fbb0 R08: ffff88810e11b083 R09: 1ffff11021c23610
[ 38.635681][ T1309] R10: dffffc0000000000 R11: ffffed1021c23611 R12: dffffc0000000000
[ 38.643826][ T1309] R13: dffffc0000000000 R14: 00000000182ab300 R15: ffff888111c63400
[ 38.651863][ T1309] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.661253][ T1309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.668331][ T1309] CR2: 000055555b6c47d0 CR3: 000000000700f000 CR4: 00000000003506b0
[ 38.676427][ T1309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.684476][ T1309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.692515][ T1309] Call Trace:
[ 38.695826][ T1309]
[ 38.698815][ T1309] pppol2tp_release+0x150/0x2b0
[ 38.703785][ T1309] sock_close+0xc9/0x220
[ 38.708120][ T1309] ? __cfi_sock_close+0x10/0x10
[ 38.713095][ T1309] __fput+0x1fd/0x8f0
[ 38.717125][ T1309] ____fput+0x15/0x20
[ 38.721218][ T1309] task_work_run+0x1e1/0x250
[ 38.725955][ T1309] ? __cfi_task_work_run+0x10/0x10
[ 38.731188][ T1309] ? free_nsproxy+0x21f/0x270
[ 38.735937][ T1309] do_exit+0xaf2/0x2850
[ 38.740159][ T1309] ? __cfi_do_exit+0x10/0x10
[ 38.744844][ T1309] ? xfd_validate_state+0x70/0x150
[ 38.750019][ T1309] ? __kasan_check_write+0x14/0x20
[ 38.755221][ T1309] __x64_sys_exit+0x40/0x40
[ 38.759834][ T1309] x64_sys_call+0x67/0x9a0
[ 38.764374][ T1309] do_syscall_64+0x4c/0xa0
[ 38.768850][ T1309] ? clear_bhb_loop+0x30/0x80
[ 38.773606][ T1309] ? clear_bhb_loop+0x30/0x80
[ 38.778337][ T1309] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.784316][ T1309] RIP: 0033:0x7fd46839de99
[ 38.788795][ T1309] Code: Unable to access opcode bytes at 0x7fd46839de6f.
[ 38.795891][ T1309] RSP: 002b:00007fd46918def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 38.804398][ T1309] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd46839de99
[ 38.812449][ T1309] RDX: 00007fd46918e9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.820462][ T1309] RBP: 00007fd468433eaf R08: 0000000000000000 R09: 0000000000000058
[ 38.828731][ T1309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 38.836923][ T1309] R13: 00007fd468626038 R14: 00007fd468625fa0 R15: 00007ffd05d19288
[ 38.845042][ T1309]
[ 38.848099][ T1309] ---[ end trace 0000000000000000 ]---
[ 38.870186][ T1357] ------------[ cut here ]------------
[ 38.875830][ T1357] WARNING: CPU: 0 PID: 1357 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 38.886232][ T1357] Modules linked in:
[ 38.890167][ T1357] CPU: 0 PID: 1357 Comm: syz.5.320 Tainted: G B W syzkaller #0
[ 38.899105][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 38.909719][ T1357] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 38.916311][ T1357] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 38.936116][ T1357] RSP: 0018:ffffc900034f7b90 EFLAGS: 00010293
[ 38.942469][ T1357] RAX: ffffffff849bb307 RBX: ffff888117e4c000 RCX: ffff88812e5d8000
[ 38.950494][ T1357] RDX: 0000000000000000 RSI: 0000000030f89040 RDI: 000000000c04eb7d
[ 38.958647][ T1357] RBP: ffffc900034f7bb0 R08: ffff888117e4c083 R09: 1ffff11022fc9810
[ 38.966809][ T1357] R10: dffffc0000000000 R11: ffffed1022fc9811 R12: dffffc0000000000
[ 38.974996][ T1357] R13: dffffc0000000000 R14: 0000000030f89040 R15: ffff888124355000
[ 38.983322][ T1357] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.992535][ T1357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.999171][ T1357] CR2: 00007f8b6d227dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 39.007260][ T1357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.015418][ T1357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.023504][ T1357] Call Trace:
[ 39.026818][ T1357]
[ 39.029787][ T1357] pppol2tp_release+0x150/0x2b0
[ 39.034757][ T1357] sock_close+0xc9/0x220
[ 39.039136][ T1357] ? __cfi_sock_close+0x10/0x10
[ 39.044350][ T1357] __fput+0x1fd/0x8f0
[ 39.048394][ T1357] ____fput+0x15/0x20
[ 39.052516][ T1357] task_work_run+0x1e1/0x250
[ 39.057154][ T1357] ? __cfi_task_work_run+0x10/0x10
[ 39.062404][ T1357] ? free_nsproxy+0x21f/0x270
[ 39.067140][ T1357] do_exit+0xaf2/0x2850
[ 39.071443][ T1357] ? __cfi_do_exit+0x10/0x10
[ 39.076083][ T1357] ? xfd_validate_state+0x70/0x150
[ 39.081297][ T1357] ? __kasan_check_write+0x14/0x20
[ 39.086473][ T1357] __x64_sys_exit+0x40/0x40
[ 39.091085][ T1357] x64_sys_call+0x67/0x9a0
[ 39.095574][ T1357] do_syscall_64+0x4c/0xa0
[ 39.100065][ T1357] ? clear_bhb_loop+0x30/0x80
[ 39.104899][ T1357] ? clear_bhb_loop+0x30/0x80
[ 39.109620][ T1357] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.115626][ T1357] RIP: 0033:0x7f36b9d9de99
[ 39.120090][ T1357] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 39.127198][ T1357] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
2026/07/23 21:52:33 executed programs: 337
[ 39.135698][ T1357] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 39.143791][ T1357] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.151848][ T1357] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 39.159909][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.167986][ T1357] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 39.176134][ T1357]
[ 39.179191][ T1357] ---[ end trace 0000000000000000 ]---
[ 39.185882][ T1383] ------------[ cut here ]------------
[ 39.191431][ T1383] WARNING: CPU: 0 PID: 1383 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.201738][ T1383] Modules linked in:
[ 39.205672][ T1383] CPU: 0 PID: 1383 Comm: syz.4.338 Tainted: G B W syzkaller #0
[ 39.214530][ T1383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 39.224745][ T1383] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.231359][ T1383] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.251059][ T1383] RSP: 0018:ffffc90003747b90 EFLAGS: 00010293
[ 39.257274][ T1383] RAX: ffffffff849bb307 RBX: ffff88811375d000 RCX: ffff888117fe8000
[ 39.265371][ T1383] RDX: 0000000000000000 RSI: 000000000f319f40 RDI: 000000000c04eb7d
[ 39.273421][ T1383] RBP: ffffc90003747bb0 R08: ffff88811375d083 R09: 1ffff110226eba10
[ 39.281481][ T1383] R10: dffffc0000000000 R11: ffffed10226eba11 R12: dffffc0000000000
[ 39.289521][ T1383] R13: dffffc0000000000 R14: 000000000f319f40 R15: ffff88812f559c00
[ 39.297596][ T1383] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 39.306884][ T1383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.313654][ T1383] CR2: 00007f8b6d227dac CR3: 000000000700f000 CR4: 00000000003506b0
[ 39.321729][ T1383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.329748][ T1383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.337904][ T1383] Call Trace:
[ 39.341238][ T1383]
[ 39.344217][ T1383] pppol2tp_release+0x150/0x2b0
[ 39.349120][ T1383] sock_close+0xc9/0x220
[ 39.353459][ T1383] ? __cfi_sock_close+0x10/0x10
[ 39.358371][ T1383] __fput+0x1fd/0x8f0
[ 39.362449][ T1383] ____fput+0x15/0x20
[ 39.366482][ T1383] task_work_run+0x1e1/0x250
[ 39.371174][ T1383] ? __cfi_task_work_run+0x10/0x10
[ 39.376341][ T1383] ? free_nsproxy+0x21f/0x270
[ 39.381121][ T1383] do_exit+0xaf2/0x2850
[ 39.385355][ T1383] ? __cfi_do_exit+0x10/0x10
[ 39.390003][ T1383] ? xfd_validate_state+0x70/0x150
[ 39.395220][ T1383] ? __kasan_check_write+0x14/0x20
[ 39.400392][ T1383] __x64_sys_exit+0x40/0x40
[ 39.405006][ T1383] x64_sys_call+0x67/0x9a0
[ 39.409476][ T1383] do_syscall_64+0x4c/0xa0
[ 39.414016][ T1383] ? clear_bhb_loop+0x30/0x80
[ 39.418741][ T1383] ? clear_bhb_loop+0x30/0x80
[ 39.423604][ T1383] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.429566][ T1383] RIP: 0033:0x7f651459de99
[ 39.434094][ T1383] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 39.441197][ T1383] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 39.449688][ T1383] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 39.457794][ T1383] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.465939][ T1383] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 39.474008][ T1383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.482083][ T1383] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 39.490110][ T1383]
[ 39.493248][ T1383] ---[ end trace 0000000000000000 ]---
[ 39.525726][ T1403] ------------[ cut here ]------------
[ 39.531502][ T1403] WARNING: CPU: 1 PID: 1403 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 39.542116][ T1403] Modules linked in:
[ 39.546064][ T1403] CPU: 1 PID: 1403 Comm: syz.6.343 Tainted: G B W syzkaller #0
[ 39.555172][ T1403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 39.565414][ T1403] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 39.571933][ T1403] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 39.591898][ T1403] RSP: 0018:ffffc9000349fb90 EFLAGS: 00010293
[ 39.598023][ T1403] RAX: ffffffff849bb307 RBX: ffff888118781000 RCX: ffff88812c200000
[ 39.606274][ T1403] RDX: 0000000000000000 RSI: 000000001972b300 RDI: 000000000c04eb7d
[ 39.614407][ T1403] RBP: ffffc9000349fbb0 R08: ffff888118781083 R09: 1ffff110230f0210
[ 39.622666][ T1403] R10: dffffc0000000000 R11: ffffed10230f0211 R12: dffffc0000000000
[ 39.630967][ T1403] R13: dffffc0000000000 R14: 000000001972b300 R15: ffff8881129d0800
[ 39.638979][ T1403] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.648061][ T1403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.654778][ T1403] CR2: 00007f5e97227dac CR3: 0000000130f59000 CR4: 00000000003506a0
[ 39.663011][ T1403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.671125][ T1403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.679135][ T1403] Call Trace:
[ 39.682530][ T1403]
[ 39.685494][ T1403] pppol2tp_release+0x150/0x2b0
[ 39.690416][ T1403] sock_close+0xc9/0x220
[ 39.694805][ T1403] ? __cfi_sock_close+0x10/0x10
[ 39.699712][ T1403] __fput+0x1fd/0x8f0
[ 39.704012][ T1403] ____fput+0x15/0x20
[ 39.708039][ T1403] task_work_run+0x1e1/0x250
[ 39.713034][ T1403] ? __cfi_task_work_run+0x10/0x10
[ 39.718258][ T1403] ? free_nsproxy+0x21f/0x270
[ 39.723106][ T1403] do_exit+0xaf2/0x2850
[ 39.727311][ T1403] ? __cfi_do_exit+0x10/0x10
[ 39.732090][ T1403] ? xfd_validate_state+0x70/0x150
[ 39.737423][ T1403] ? __kasan_check_write+0x14/0x20
[ 39.742930][ T1403] __x64_sys_exit+0x40/0x40
[ 39.747483][ T1403] x64_sys_call+0x67/0x9a0
[ 39.752433][ T1403] do_syscall_64+0x4c/0xa0
[ 39.756890][ T1403] ? clear_bhb_loop+0x30/0x80
[ 39.761811][ T1403] ? clear_bhb_loop+0x30/0x80
[ 39.766626][ T1403] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.772858][ T1403] RIP: 0033:0x7f8b6cf9de99
[ 39.777340][ T1403] Code: Unable to access opcode bytes at 0x7f8b6cf9de6f.
[ 39.784532][ T1403] RSP: 002b:00007f8b6de7eef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 39.793083][ T1403] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8b6cf9de99
[ 39.801199][ T1403] RDX: 00007f8b6de7f9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.809210][ T1403] RBP: 00007f8b6d033eaf R08: 0000000000000000 R09: 0000000000000058
[ 39.817335][ T1403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.825464][ T1403] R13: 00007f8b6d226038 R14: 00007f8b6d225fa0 R15: 00007ffe8b959978
[ 39.833707][ T1403]
[ 39.836768][ T1403] ---[ end trace 0000000000000000 ]---
[ 40.013115][ T1467] ------------[ cut here ]------------
[ 40.018849][ T1467] WARNING: CPU: 0 PID: 1467 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.029269][ T1467] Modules linked in:
[ 40.033329][ T1467] CPU: 0 PID: 1467 Comm: syz.4.360 Tainted: G B W syzkaller #0
[ 40.042329][ T1467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 40.052540][ T1467] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.058941][ T1467] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.078867][ T1467] RSP: 0018:ffffc90003a5fb90 EFLAGS: 00010293
[ 40.085234][ T1467] RAX: ffffffff849bb307 RBX: ffff888119511000 RCX: ffff88811976bcc0
[ 40.093508][ T1467] RDX: 0000000000000000 RSI: 000000000928ff40 RDI: 000000000c04eb7d
[ 40.101556][ T1467] RBP: ffffc90003a5fbb0 R08: ffff888119511083 R09: 1ffff110232a2210
[ 40.109589][ T1467] R10: dffffc0000000000 R11: ffffed10232a2211 R12: dffffc0000000000
[ 40.118083][ T1467] R13: dffffc0000000000 R14: 000000000928ff40 R15: ffff888121dbbc00
[ 40.126175][ T1467] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 40.135203][ T1467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.142034][ T1467] CR2: 000055556911d908 CR3: 0000000120962000 CR4: 00000000003506b0
[ 40.150071][ T1467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.158339][ T1467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.166385][ T1467] Call Trace:
[ 40.169715][ T1467]
[ 40.172723][ T1467] pppol2tp_release+0x150/0x2b0
[ 40.177613][ T1467] sock_close+0xc9/0x220
[ 40.181967][ T1467] ? __cfi_sock_close+0x10/0x10
[ 40.186861][ T1467] __fput+0x1fd/0x8f0
[ 40.190932][ T1467] ____fput+0x15/0x20
[ 40.194955][ T1467] task_work_run+0x1e1/0x250
[ 40.199763][ T1467] ? __cfi_task_work_run+0x10/0x10
[ 40.204973][ T1467] ? free_nsproxy+0x21f/0x270
[ 40.209697][ T1467] do_exit+0xaf2/0x2850
[ 40.213960][ T1467] ? __cfi_do_exit+0x10/0x10
[ 40.218592][ T1467] ? xfd_validate_state+0x70/0x150
[ 40.223797][ T1467] ? __kasan_check_write+0x14/0x20
[ 40.228945][ T1467] __x64_sys_exit+0x40/0x40
[ 40.233645][ T1467] x64_sys_call+0x67/0x9a0
[ 40.238101][ T1467] do_syscall_64+0x4c/0xa0
[ 40.242696][ T1467] ? clear_bhb_loop+0x30/0x80
[ 40.247413][ T1467] ? clear_bhb_loop+0x30/0x80
[ 40.252267][ T1467] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 40.258213][ T1467] RIP: 0033:0x7f651459de99
[ 40.262826][ T1467] Code: Unable to access opcode bytes at 0x7f651459de6f.
[ 40.270043][ T1467] RSP: 002b:00007f65153c1ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 40.278565][ T1467] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f651459de99
[ 40.286702][ T1467] RDX: 00007f65153c29c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 40.295020][ T1467] RBP: 00007f6514633eaf R08: 0000000000000000 R09: 0000000000000058
[ 40.303078][ T1467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 40.311298][ T1467] R13: 00007f6514826038 R14: 00007f6514825fa0 R15: 00007ffd107f6ab8
[ 40.319310][ T1467]
[ 40.322414][ T1467] ---[ end trace 0000000000000000 ]---
[ 40.401006][ T1568] ------------[ cut here ]------------
[ 40.406648][ T1568] WARNING: CPU: 1 PID: 1568 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.416837][ T1568] Modules linked in:
[ 40.420979][ T1568] CPU: 1 PID: 1568 Comm: syz.3.397 Tainted: G B W syzkaller #0
[ 40.429895][ T1568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 40.440193][ T1568] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.446697][ T1568] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.466452][ T1568] RSP: 0018:ffffc90003b9fb90 EFLAGS: 00010293
[ 40.472691][ T1568] RAX: ffffffff849bb307 RBX: ffff88811ae8c000 RCX: ffff88811aa0e540
[ 40.480740][ T1568] RDX: 0000000000000000 RSI: 0000000017d5f800 RDI: 000000000c04eb7d
[ 40.488860][ T1568] RBP: ffffc90003b9fbb0 R08: ffff88811ae8c083 R09: 1ffff110235d1810
[ 40.497038][ T1568] R10: dffffc0000000000 R11: ffffed10235d1811 R12: dffffc0000000000
[ 40.505267][ T1568] R13: dffffc0000000000 R14: 0000000017d5f800 R15: ffff8881129f1800
[ 40.513306][ T1568] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 40.522347][ T1568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.528970][ T1568] CR2: 00007f8b6d225fac CR3: 000000011005d000 CR4: 00000000003506a0
[ 40.537122][ T1568] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.545177][ T1568] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.553232][ T1568] Call Trace:
[ 40.556542][ T1568]
[ 40.559506][ T1568] pppol2tp_release+0x150/0x2b0
[ 40.564623][ T1568] sock_close+0xc9/0x220
[ 40.569009][ T1568] ? __cfi_sock_close+0x10/0x10
[ 40.573958][ T1568] __fput+0x1fd/0x8f0
[ 40.578022][ T1568] ____fput+0x15/0x20
[ 40.582378][ T1568] task_work_run+0x1e1/0x250
[ 40.587406][ T1568] ? __cfi_task_work_run+0x10/0x10
[ 40.592805][ T1568] ? free_nsproxy+0x21f/0x270
[ 40.597576][ T1568] do_exit+0xaf2/0x2850
[ 40.602002][ T1568] ? __cfi_do_exit+0x10/0x10
[ 40.606735][ T1568] ? xfd_validate_state+0x70/0x150
[ 40.611947][ T1568] ? __kasan_check_write+0x14/0x20
[ 40.617103][ T1568] __x64_sys_exit+0x40/0x40
[ 40.621691][ T1568] x64_sys_call+0x67/0x9a0
[ 40.626154][ T1568] do_syscall_64+0x4c/0xa0
[ 40.630726][ T1568] ? clear_bhb_loop+0x30/0x80
[ 40.635443][ T1568] ? clear_bhb_loop+0x30/0x80
[ 40.640160][ T1568] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 40.646159][ T1568] RIP: 0033:0x7fd46839de99
[ 40.650641][ T1568] Code: Unable to access opcode bytes at 0x7fd46839de6f.
[ 40.657711][ T1568] RSP: 002b:00007fd46918def8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 40.666203][ T1568] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd46839de99
[ 40.674234][ T1568] RDX: 00007fd46918e9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 40.682266][ T1568] RBP: 00007fd468433eaf R08: 0000000000000000 R09: 0000000000000058
[ 40.690325][ T1568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 40.698378][ T1568] R13: 00007fd468626038 R14: 00007fd468625fa0 R15: 00007ffd05d19288
[ 40.706436][ T1568]
[ 40.709490][ T1568] ---[ end trace 0000000000000000 ]---
[ 40.745067][ T1636] ------------[ cut here ]------------
[ 40.750791][ T1636] WARNING: CPU: 0 PID: 1636 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.761255][ T1636] Modules linked in:
[ 40.765196][ T1636] CPU: 0 PID: 1636 Comm: syz.6.419 Tainted: G B W syzkaller #0
[ 40.774188][ T1636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 40.784498][ T1636] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.791006][ T1636] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.801756][ T1631] ------------[ cut here ]------------
[ 40.811016][ T1636] RSP: 0018:ffffc90003fdfb90 EFLAGS: 00010293
[ 40.816278][ T1631] WARNING: CPU: 1 PID: 1631 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[ 40.822837][ T1636] RAX: ffffffff849bb307 RBX: ffff8881105ba000 RCX: ffff88811bc9a880
[ 40.832462][ T1631] Modules linked in:
[ 40.832475][ T1631] CPU: 1 PID: 1631 Comm: syz.5.418 Tainted: G B W syzkaller #0
[ 40.832497][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 40.832509][ T1631] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[ 40.832540][ T1631] Code: 5d c3 e8 5c b3 d5 fc be 02 00 00 00 eb 0a e8 50 b3 d5 fc be 01 00 00 00 4c 89 f7 e8 23 18 cd fd e9 0f ff ff ff e8 39 b3 d5 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 28 b3 d5 fc 4c 89 f7 be 03
[ 40.832556][ T1631] RSP: 0018:ffffc9000369fb90 EFLAGS: 00010293
[ 40.841002][ T1636] RDX: 0000000000000000 RSI: 000000001e4d9dc0 RDI: 000000000c04eb7d
[ 40.844493][ T1631] RAX: ffffffff849bb307 RBX: ffff8881143f8000 RCX: ffff88811b438000
[ 40.853640][ T1636] RBP: ffffc90003fdfbb0 R08: ffff8881105ba083 R09: 1ffff110220b7410
[ 40.863403][ T1631] RDX: 0000000000000000 RSI: 0000000030b5e928 RDI: 000000000c04eb7d
[ 40.863423][ T1631] RBP: ffffc9000369fbb0 R08: ffff8881143f8083 R09: 1ffff1102287f010
[ 40.863440][ T1631] R10: dffffc0000000000 R11: ffffed102287f011 R12: dffffc0000000000
[ 40.863455][ T1631] R13: dffffc0000000000 R14: 0000000030b5e928 R15: ffff88812f09c400
[ 40.863471][ T1631] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 40.869813][ T1636] R10: dffffc0000000000 R11: ffffed10220b7411 R12: dffffc0000000000
[ 40.869830][ T1636] R13: dffffc0000000000 R14: 000000001e4d9dc0 R15: ffff88812f04a400
[ 40.889523][ T1631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.889541][ T1631] CR2: 00007f8b6de7eff8 CR3: 00000001313b5000 CR4: 00000000003506a0
[ 40.889560][ T1631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.895961][ T1636] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 40.903869][ T1631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.911997][ T1636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.919873][ T1631] Call Trace:
[ 40.928186][ T1636] CR2: 00007f36bab556b8 CR3: 000000000700f000 CR4: 00000000003506b0
[ 40.935847][ T1631]
[ 40.935857][ T1631] pppol2tp_release+0x150/0x2b0
[ 40.935887][ T1631] sock_close+0xc9/0x220
[ 40.935916][ T1631] ? __cfi_sock_close+0x10/0x10
[ 40.944358][ T1636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.951933][ T1631] __fput+0x1fd/0x8f0
[ 40.951966][ T1631] ____fput+0x15/0x20
[ 40.951990][ T1631] task_work_run+0x1e1/0x250
[ 40.961145][ T1636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.968927][ T1631] ? __cfi_task_work_run+0x10/0x10
[ 40.977245][ T1636] Call Trace:
[ 40.983665][ T1631] ? free_nsproxy+0x21f/0x270
[ 40.983698][ T1631] do_exit+0xaf2/0x2850
[ 40.983729][ T1631] ? __cfi_do_exit+0x10/0x10
[ 40.983756][ T1631] ? xfd_validate_state+0x70/0x150
[ 40.992085][ T1636]
[ 40.999783][ T1631] ? __kasan_check_write+0x14/0x20
[ 41.009091][ T1636] pppol2tp_release+0x150/0x2b0
[ 41.016869][ T1631] __x64_sys_exit+0x40/0x40
[ 41.016900][ T1631] x64_sys_call+0x67/0x9a0
[ 41.016924][ T1631] do_syscall_64+0x4c/0xa0
[ 41.023746][ T1636] sock_close+0xc9/0x220
[ 41.026851][ T1631] ? clear_bhb_loop+0x30/0x80
[ 41.035167][ T1636] ? __cfi_sock_close+0x10/0x10
[ 41.037879][ T1631] ? clear_bhb_loop+0x30/0x80
[ 41.042945][ T1636] __fput+0x1fd/0x8f0
[ 41.046996][ T1631] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 41.052283][ T1636] ____fput+0x15/0x20
[ 41.060028][ T1631] RIP: 0033:0x7f36b9d9de99
[ 41.064907][ T1636] task_work_run+0x1e1/0x250
[ 41.068035][ T1631] Code: Unable to access opcode bytes at 0x7f36b9d9de6f.
[ 41.072867][ T1636] ? __cfi_task_work_run+0x10/0x10
[ 41.080637][ T1631] RSP: 002b:00007f36babcbef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[ 41.080662][ T1631] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f36b9d9de99
[ 41.080677][ T1631] RDX: 00007f36babcc9c8 RSI: 0000000000000000 RDI: 0000000000000000
[ 41.080691][ T1631] RBP: 00007f36b9e33eaf R08: 0000000000000000 R09: 0000000000000058
[ 41.080705][ T1631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 41.085822][ T1636] ? free_nsproxy+0x21f/0x270
[ 41.089282][ T1631] R13: 00007f36ba026038 R14: 00007f36ba025fa0 R15: 00007ffd8f9d4758
[ 41.094232][ T1636] do_exit+0xaf2/0x2850
[ 41.098140][ T1631]
[ 41.103032][ T1636] ? __cfi_do_exit+0x10/0x10
[ 41.107858][ T1631] ---[ end trace 0000000000000000 ]---
[ 41.111012][ T1636] ? xfd_validate_state+0x70/0x150
[ 41.265919][ T1636] ? __kasan_check_write+0x14/0x20
[ 41.271190][ T1636] __x64_sys_exit+0x40/0x40
[ 41.275792][ T1636] x64_sys_call+0x67/0x9a0
[ 41.280270][ T1636] do_syscall_64+0x4c/0xa0
[ 41.284928][ T1636] ? clear_bhb_loop+0x30/0x80
[ 41.289650][ T1636] ? clear_bhb_loop+0x30/0x80